last executing test programs: 42.406010947s ago: executing program 3 (id=59): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001439) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x2000000b) 41.455077265s ago: executing program 3 (id=64): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x8000000000}, 0x18) setuid(0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) flock(r1, 0x5) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r2}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x118) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea"], 0x20000600}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r7) close_range(r3, r3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 41.337744606s ago: executing program 3 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) waitid(0x1, r0, &(0x7f0000000300), 0x80000000, &(0x7f0000000380)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) getitimer(0x1, &(0x7f00000006c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 40.461095463s ago: executing program 3 (id=70): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create1(0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r1], 0x1, 0x217, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) epoll_create(0x1ff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3b8) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r9, 0x5452, &(0x7f0000000040)={0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) read$FUSE(r1, &(0x7f0000001ac0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 39.54201402s ago: executing program 3 (id=76): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x8000000000}, 0x18) setuid(0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) flock(r1, 0x5) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r2}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x118) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea"], 0x20000600}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r7) close_range(r3, r3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 38.041908822s ago: executing program 3 (id=79): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f00008b9000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket(0x18, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unlink(0x0) write$binfmt_script(r3, &(0x7f0000001800)={'#! ', './file2', [{0x20, 'freezer.state\x00'}]}, 0x1a) socket$xdp(0x2c, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000ef8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000200)={0x1, 0x2, 0x1}) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x6, 0x40000080000001}) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x3ff, 0x7f, 0xc5a4, 0x3437, 0x2}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000200)='%-010d \x00'}, 0x20) recvmsg(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000180)}, 0x40fd) 38.004103383s ago: executing program 32 (id=79): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f00008b9000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket(0x18, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unlink(0x0) write$binfmt_script(r3, &(0x7f0000001800)={'#! ', './file2', [{0x20, 'freezer.state\x00'}]}, 0x1a) socket$xdp(0x2c, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000ef8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000200)={0x1, 0x2, 0x1}) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x6, 0x40000080000001}) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x3ff, 0x7f, 0xc5a4, 0x3437, 0x2}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000200)='%-010d \x00'}, 0x20) recvmsg(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000180)}, 0x40fd) 23.120772923s ago: executing program 5 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) waitid(0x1, r0, &(0x7f0000000300), 0x80000000, &(0x7f0000000380)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) getitimer(0x1, &(0x7f00000006c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 22.412271099s ago: executing program 5 (id=187): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000200)={0x0, r0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x3, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x3, 0x3, 0x1}]}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000300)=""/175, 0x36, 0xaf, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7, 0x0, 0x4}, 0x18) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) shutdown(r4, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="08a503576a7f"}, 0x0, {0x2, 0x0, @loopback}, 'syz_tun\x00'}) 22.322001269s ago: executing program 5 (id=188): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x8001]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) open(0x0, 0x64842, 0x198) restart_syscall() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x190, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x190}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="a858830edb95a18d0efa44000700", @ANYRES16=r5, @ANYBLOB="00012bbd7000fddbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000010c0)=ANY=[@ANYBLOB="b40800000000000073113600000000008510000002000000b5000000000000009500b500645ea6fc9500ea120000000045032ded6483045ca60caaf9ef3940688ef86cdbef6bb37c95b38938b9ebef5c6a1de52f2fa6e0"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 22.30457527s ago: executing program 5 (id=189): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001d00"/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRES8=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x38, 0x1, @tid=r3}, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r5, &(0x7f0000002b00)=[{&(0x7f0000002700)='5', 0x1}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 20.807568001s ago: executing program 5 (id=199): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) writev(r3, &(0x7f0000000440)=[{0x0}], 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 20.677389013s ago: executing program 5 (id=203): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r0, 0x4000, r0}, 0x18) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='unconfined\x00', 0xb, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = inotify_init1(0x80000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x0, 0x6}) syz_open_pts(r3, 0x2401) write(r3, &(0x7f0000c34fff), 0xffffff0b) close_range(r2, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 20.645776063s ago: executing program 33 (id=203): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r0, 0x4000, r0}, 0x18) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='unconfined\x00', 0xb, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = inotify_init1(0x80000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x0, 0x6}) syz_open_pts(r3, 0x2401) write(r3, &(0x7f0000c34fff), 0xffffff0b) close_range(r2, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 9.078550807s ago: executing program 0 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (fail_nth: 2) 9.077564777s ago: executing program 2 (id=253): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = inotify_init() ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x2050a0c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000004540)={0xa, 0x0, 0x100000, @dev}, 0x1c) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x510008ca) 9.077338167s ago: executing program 4 (id=254): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = inotify_init() ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x2050a0c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket(0x27, 0x6, 0x80000001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000004540)={0xa, 0x0, 0x100000, @dev}, 0x1c) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xd1000a4a) 7.4679616s ago: executing program 0 (id=255): inotify_init() socket$inet6(0xa, 0x80002, 0x88) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x2050a0c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 7.46758805s ago: executing program 1 (id=256): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r0, 0x4000, r0}, 0x18) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='unconfined\x00', 0xb, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = inotify_init1(0x80000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x0, 0x6}) syz_open_pts(r3, 0x2401) write(r3, &(0x7f0000c34fff), 0xffffff0b) close_range(r2, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 7.464407039s ago: executing program 2 (id=257): socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getresgid(&(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000001ec0)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r2, @ANYBLOB="00006b74676964c855ddd35c22983f943d0092", @ANYRESHEX=0x0, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x5, 0x1fa, &(0x7f0000000500)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mkdir(&(0x7f0000000180)='./file0\x00', 0x27) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x12, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x68}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3532}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @exit, @exit]}, &(0x7f00000004c0)='syzkaller\x00', 0x3597, 0x93, &(0x7f0000000500)=""/147, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0xffffffffffffffff, r4], &(0x7f0000000680)=[{0x0, 0x2, 0x7}, {0x4, 0x1, 0x1, 0x15}, {0x0, 0x2, 0x6, 0xc}, {0x5, 0x2, 0x7, 0x6}, {0x0, 0x4, 0xf, 0x6}], 0x10, 0xb, @void, @value}, 0x94) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) 7.4639757s ago: executing program 4 (id=258): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000180)={0x54, 0x2000, 0xfffd, {}, {}, @rumble={0x3, 0x5}}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setfsgid(0xee01) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000484495000000000000000000001811000000000000000000fda7561a2da0007fc68dd4123bd11b42d280ba671c63b0e2ea53c3ecf87bd6c451c78fad4892c9bcae6162b17d785d684b0e60edbe4b8c81c24834983478f4101ec9d7267fa941ba", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000e47f0000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000240)={{0x0, 0x4}, {0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) 5.760643923s ago: executing program 0 (id=259): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") 5.759976354s ago: executing program 1 (id=260): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x400000}, 0x18) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) pipe(0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) gettid() prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x41, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0, 0x166676000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f00000004c0)=""/65, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1ff) unshare(0x2040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) 5.759555463s ago: executing program 2 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="a3bb47ac502a854bcb185657a09176af16eaffc738", 0x15, 0xfffffffffffffffc) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x3) write$P9_RVERSION(r8, 0x0, 0x15) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) 5.757448843s ago: executing program 4 (id=262): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) (fail_nth: 2) 3.945085748s ago: executing program 0 (id=263): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r3, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0xf0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)={0x1, 0x40000000000000, 0x0, 0x7}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x185801, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000200)="81f37d066433973b4ff913f963e82d2333ee34a4e92bcecc316f82c5bfb849", 0x1f, 0x400c0, &(0x7f0000000240)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x80) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40), 0x8200, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) preadv(r7, &(0x7f0000002b00)=[{&(0x7f0000001880)=""/5, 0x5}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x2, 0xe, 0x6) syz_usb_control_io$hid(r6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x16, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x14}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.944641558s ago: executing program 1 (id=264): socket$can_raw(0x1d, 0x3, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getresgid(&(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000001ec0)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r1, @ANYBLOB="00006b74676964c855ddd35c22983f943d0092", @ANYRESHEX=0x0, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x5, 0x1fa, &(0x7f0000000500)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mkdir(&(0x7f0000000180)='./file0\x00', 0x27) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="00000c000000070001", @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) 3.944437848s ago: executing program 2 (id=265): socket$can_raw(0x1d, 0x3, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getresgid(&(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000001ec0)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r1, @ANYBLOB="00006b74676964c855ddd35c22983f943d0092", @ANYRESHEX=0x0, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x5, 0x1fa, &(0x7f0000000500)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mkdir(&(0x7f0000000180)='./file0\x00', 0x27) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="00000c000000070001", @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) 3.944270028s ago: executing program 4 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) waitid(0x1, r0, &(0x7f0000000300), 0x80000000, &(0x7f0000000380)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) getitimer(0x1, &(0x7f00000006c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.026883684s ago: executing program 0 (id=267): pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="3c41b5dd75b3684d45bad60f0cc3256406f57e5c2bd08841a17d7cbafd2a1ccbc18fd22ef568ef9fb690445d8a10f85fbd1779f963746a2195849a7cf5e8c40dad02f58636d2e47343af559023d9b3d53025ba5683881a811fe2647e5bf410940c1341514ab4c10c68c3a5", 0x6b}, {&(0x7f0000000200)="8b09506ba8eac5f742524439b51f183487317dd1639607b2dcf78e64c9b9f93cecf3dc2c1ba3c19892b36ee249c3060db5138348f65f648c4e21c711cb18feffd62786bbb6d3384c6929a42ddd6c25bb164e2b7da806ecf89df91d54af52c2dc32d07272d5097e55f8131238b16b2f7fcb94546b67c5faf446138f26dcfbb4bd6c8f047f7b86d2a4fdfc943933168679d8d5220475c6d3a638ab73422a629aa25593fddf068dee30643ce6907fb0aea490aeafca63e3e952daba91ab2d5d", 0xbe}, {&(0x7f00000002c0)="03408038355b6cdb1ed7e9dad140b76a4ea9f79600e87b38951d12e0117131dde4dd1c49ad61b9af4480704b8ef59d996ef98359c80e2e302ba6adb1e52b10d2030e266a97", 0x45}, {&(0x7f0000000340)="a197924347cb4c9d7ff58f813b4b7eae2afebd63ac8932b7155aacdbdf0b8cfea1e5bed144f35b7f4e8fefc8b52d6944fd28e3934475b0dbbf1641ceee78245352a88fbf76b0ada2af71a37bc0c71a8adf0e6cc7fe4367ff48d9539f5f", 0x5d}, {&(0x7f0000000000)="e7c4fcef496f51eb2dd43f5a", 0xc}], 0x5, 0x5, 0x6) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f0000000400)=0x300) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x66, 0x102, 0x81, 0xfffff001, 0xb, "0496c31418f8620b81fcdcce890bc0bbcb82f1"}) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1e18c3, 0x1c5) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x88001) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES64, @ANYRES32], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 2.026624974s ago: executing program 1 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, 0x0, 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) (fail_nth: 2) 2.025963524s ago: executing program 2 (id=269): inotify_init() socket$inet6(0xa, 0x80002, 0x88) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x2050a0c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.025388894s ago: executing program 4 (id=270): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200001e, &(0x7f0000000180)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@i_version}, {@block_validity}, {@jqfmt_vfsv1}, {@minixdf}, {@debug}, {@noinit_itable}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x110012, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00'}, 0xffffffffffffff0e) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x55ac, &(0x7f0000006a40)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000001040), 0xfffffffffffffffa, 0x14d040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) socket$inet(0x2, 0x80000, 0x3) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) sendmmsg$inet6(r1, &(0x7f0000001000)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000440)="bc2bb2cfc8fb0c24e17980caf94771f89190a9ac71b506d3fe2ded6a6bfcb6e29f9bb8f8bc30e4a901ea82be72a054e98b56a693e414b9f8200fd5640ccb81f8cece762089649fa334b90bccb4cdfa343693fd472c7ea76b552220fa880a4513318da498ea48abf302cb6b969e413b5b5a6dde4ad772915f240c1309de4929fcb402555a32fde5e1b31b0d1f1e827ff5e21ddb67e187cb26dd41f7da1b1e22d421254496c14ac454c54512fbf66a247f236c4b3f88", 0xb5}, {&(0x7f0000000340)="c62e1bb3446b4968e5db4764957c54c0a47abf345234c3f00d801461cf0f14553c9b4e421d35b2c315e8eb015e9d71", 0x2f}, {&(0x7f0000000500)="eeba9925f5b7a9fafce20d81861a357ed4a668ba455f76cabd20fa32a6ed77e204235ab50c245671c65cbbdfe07e81c88037a09d1b5a5da03aa048b8b59e482dcd6f947e52db2322a67dbba1fd65e051a76819ee757d0aca51b5cc99126a082f8d5fbe670ecfa0af4b58ac25b273ee77846df5e53cd73745cef164c189e6c2d3b4e69a9f46e16101e71e33cb0c546219f92fe3e8f09c0146a2950a1def32c6c5195050bdceb2bb97b438ac73f003303075cc985ac56a12cf8baafda22d65e0dc5b07a1b76f7495f2bedd7dceaf9cb5567b9961a417b3f2040bfd8712969beb9b42d0f9", 0xe3}, {&(0x7f0000000d80)="efd485a36eea1e37bca005f873abe507afa173d1597f9c6e6fd82269b0629a2e3a131cabae0b6b89433e1102ff95a507c6faaf6d5af37bf050da3f35c29a2d136e8db7501f77da45914ea874b5a2539e876d9815a46220c55554fec9611c4e5a2ee4709c18fd124a8584122ab838bf25e66b1af1ad7576794454889bf3cace09dc3563969d95b0255c35b9f786911dcafa527e1354b94a", 0x97}, {&(0x7f0000000e40)="417eb566decd68e0f240a76a948714b03e20e25181e67c1af9a34f18750e3ee5d76bd037d27bf3a7d987a9c4150f419c2a261bd2b59c8031b73d9c4c1724bc3bfc299a928ffcfd1017b828a40d838700d7e412e7caa001398ba92629c1b26820ed1adb9c007221d04ee3701872bba8", 0x6f}, {&(0x7f0000000900)="1a23d8c69a452eb8a053cbd252cabf237af3a0c7248a09555824a67ab067b33d87", 0x21}, {&(0x7f0000000ec0)="537ea9def6736030cf5639086d2315c873123937b24423411f6c8d84a10c0212efb5f24ccc74377fc05182faa87992601e9cce6825b9b85d60a4961cff13df64421ae5cf3a8abc512e733fab4faef06820e34e27723390abf818fbf155382a44d39a555dc843822808615913ac92b6733cc0af3af33437cc5b6da6e21cd1c13b6ea2813af85c08dcb5e11fd29e352ca5082297b5454c7e555fe54df15a45b5dc46445ca620bc2e1e3fcefbe88e29a1554ccb8a63634fbf059b41a9", 0xbb}], 0x7}}], 0x1, 0x0) userfaultfd(0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6) 20.91796ms ago: executing program 0 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x14) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000d00)={"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"}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}}, 0x0) 20.68848ms ago: executing program 1 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000810}, 0x4000000) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x9) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum, @union]}}, &(0x7f0000000180)=""/220, 0x32, 0xdc, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 20.33041ms ago: executing program 2 (id=273): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000000)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x3, 0x35d, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x20) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xb8e, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 18.9455ms ago: executing program 4 (id=274): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") 0s ago: executing program 1 (id=275): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000002400)={@multicast1, @empty}, 0xc) sendfile(r0, r0, 0x0, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1b) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000a40)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000a80)=0x14) sendmmsg$inet(r3, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2baaf07a25c0b1f649ca2b", 0xb}, {&(0x7f00000001c0)="0337da4146fcad7286ecba7c3ae579bad53b1e4ecba95782cd3d6d22d25af78a1a8842e06a7aab5efa227171500daf58d9e2c9ccb3caf36bcf3467c5963bbb0e1e349a1dc3b6028cd0f77db92c289441587ee0783ebe7d28025378c296a7a861dcf7920d1133ce0bc89912", 0x6b}], 0x2, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000300)="7a6cd341530ecacf70ad3c32f623083673a5e2f650d6e8a6fd64b462ff49bc6defcb385d70430b9e3ccdc56bada935e748c4c92b82eb3451cff8565ad2f080e074c421b92013d2bdbbf9c86b2d787687fab51e37ed7b9ac6c114b1c6671b3cd0a003b7edb448e27a49b8bab3d12978e9103a4009c7a12abc15abf47ef1db946e4425b30e7f56126c15f335cb3be4bb12b071", 0x92}, {&(0x7f00000003c0)="8e0bbc2bcbd9cb8ddc9f72fea4e376e321530c09480c17110c14e12a025f0e3b485f4e3fa77499f888e074a1887083059a875f3dc434174d8bc7f0f76a34dd9784faf822119ba65bb571ab8a01c1337f48929eb4721b180bf89aacc9f911dad04413add597d4ea12dfef214a7acf58f833d0984c2dd794", 0x77}, {&(0x7f0000000440)="25ab27b80933d2d1d730aa97eb31fca6bff4b381cb631451f2a0889ca7e6176eb6346d5909d75d4b22a64bccd5cd0a7e2733ea204863141f820df8e4b7891cb68d17be6672801aeca91617f963e85e398860cb848e3a8db86f4164d149bd57dc9f4311af96e4307b8caa2d3658307f2334d1ec71880ab69bde446e9c57005e7fa54f49ca0408b4b2e4e6e0d168", 0x8d}, {&(0x7f0000000580)="04309072558d85d3715b0513b8c54d09100e947b46590ea1c929ec637158f2d33e4095ef480d4774093eb9cc354befd1aa9fd2a2dc863d75c8a53a72a79e3945432adde3efb3d3a348c4cb681d739922937de5f84b4d088b72092e1d7a132d6a0cfcd6a96ab4b30de061", 0x6a}, {&(0x7f0000000500)="b94646b4b78536dd762ccdee5b03306365cd4e4652d4bcf962b1b34916ee27bfed847469569c5be2a75aa65e04d356a8707f2932810fe89946f0cb24f87dae", 0x3f}], 0x5}}, {{&(0x7f0000000680)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000006c0)="faeaffba804aea5c575349f086f194ad2e42c2d4642234b5d4f6c6d09379c4cc6a7b6e20d9f0ceb7597098e30266666bf9", 0x31}, {&(0x7f0000000700)="743e086bd79ac86e48803ff36a7103eb17db726eddaf4cfee106ca64ba4fc760d0284c94850ccc7bd3011ea914c6812f8f3c89ea81e49f359bd0dbe479819eb6e9380389b43237bd10e05d15d053e1223298a98abbdb05ad8b5a4cf5b5212f5b7dbe8fce149e97f6fa120b2038615cdc6da11495ba16462f86280f940f5ce4e5b313014c88d53983c89abae73d28083b78fd8b0bb3901b7def2dbe46b186b2537e5caad55bb19483755f30ff6a18cfdb2a39f95bd020ec62a10b2cf22b93eab8dd599ea0bbcd67c06ddb561c33139a50372c7b33f3e3a0272c48d25a59b2f4338c52221a07ee3e7bec2db18960af0d25e9b615", 0xf3}, {&(0x7f0000000800)="9eace80130f83ac385457e25137503264566ee808d9a561ae27c0793c11663bb52528bfe0e56b2d0e3840603848886d712345d1b8f2a303ede01ee88988df957568ad2b0a162bac45c66600bc83418b73dd0b4be05add1ea0aa96d851647f7508a381c8f85ad5f9b57ead7e57d906b8c", 0x70}, {&(0x7f0000000880)="f65f7d862876bce1512fead428565c4403231ab5b3a7b6ea0e6b3e811d889e225a665029fea4f22c271c3f06550b8472994459bae0048f78edc631452537bab73471e9239476652721a46ea0c4cf071c98f2aee563641de4b6ac0289ee9aff900b1828c9d4fd9e6beb3aff40450c2107b3900ea169f1117d051ad737234606f57a8f242f15ac57e43f9c38082fad2cff61960725bc92b580901419a794190e2c1134b108225dcb3649490bf2b1b4319bc039d1dcae1d3e5fed59cd21b5160dff3a300841b28a64cff060dbdbd0c79926f2c8bd6cf3124224223e6c83c028e904977d0bde28e436562fc221a4b09b3f", 0xef}, {&(0x7f0000000980)="fe47eadd7ee875f1ede2c0bfd2b85c83f01f63866ec549545b40b78b259cb95b19cc4d8846e42de6b5f6", 0x2a}], 0x5, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8c5}}], 0x98}}, {{&(0x7f0000000b80)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000002280)=[{&(0x7f0000000bc0)="b0b26c38c2d579c8d5bbc19bcd36aaa5690f0910cd6752a13633b3c140aae1682ab38f15f7e99db3238b3061011ff498bcee79ebe53994f6ba1a58045f44f2db3b25d4e904d85a72210df2dc6ce576ff546adb214db0c2dd4356d19489ba36e517b6f10b68c9194bb4c7d77b296d7a18fbf939f77cdd216d10ea3490b8cf636e635b6aa4c648ea178ac0c3b580182a66e512aa8b54a834124ad1c7b236c002e88c724ad1da3253ece9402be48b57aa4f77cf7dbadf0c4d2a76", 0xb9}, {&(0x7f0000000c80)="66fc3d9d4342baa811a360f107e274ab10cadb7122144177a821fc762fabe97d0fb00486da1da5b2e30e50e1c2b97481b14e810fd24453a1c3e16394fecc3e436edfb7f82ae02937cd84a06e407a8ff0ca262aa0e5d8cfab3f17e0fd3a6e001b56ae3b391e56d53a56f39e0d596aa49de5d52146904b58feb5bbb9a5cfbb7dde476483117c739b7b75d4d39486c63281cd344191462660d42a4ae57b79d59d007ed6d6877d5985b25871f7c8d2bee5f5c39e668dca57532a149777454b155ddea0e6ff2f98", 0xc5}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000d80)='8', 0x1}, {&(0x7f0000000dc0)="3f3dc8ada0543cb66017c6a779d86dac9c61a7c279970ed7f941647b14dbdc2d69629020892208a32b155a2738b853919c09ff7a9936198280770be711783a29ffea904d56cf41d85baa2922d4fef9e37e477e5bb0e8fe857da1219e00900d0292e8cf0e20b40ed094a6cfe4e3a66e43c68e3ed5f00dd148af270850b23fb3ec5be683679420825198573ab8a5cd0c87bef378144f849a9b0891d2e32b4a4de6c6f137140edc32bb86db", 0xaa}], 0x5, &(0x7f0000000e80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6a79}}], 0x18}}], 0x4, 0x10) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. [ 20.712994][ T30] audit: type=1400 audit(1732135098.134:66): avc: denied { integrity } for pid=280 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 20.736362][ T30] audit: type=1400 audit(1732135098.154:67): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.737793][ T280] cgroup: Unknown subsys name 'net' [ 20.758999][ T30] audit: type=1400 audit(1732135098.154:68): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.785964][ T30] audit: type=1400 audit(1732135098.184:69): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.786155][ T280] cgroup: Unknown subsys name 'devices' [ 20.989895][ T280] cgroup: Unknown subsys name 'hugetlb' [ 20.995461][ T280] cgroup: Unknown subsys name 'rlimit' [ 21.162145][ T30] audit: type=1400 audit(1732135098.584:70): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.185097][ T30] audit: type=1400 audit(1732135098.584:71): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.196240][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.209887][ T30] audit: type=1400 audit(1732135098.584:72): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.241183][ T30] audit: type=1400 audit(1732135098.644:73): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.250768][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.266434][ T30] audit: type=1400 audit(1732135098.644:74): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.300211][ T30] audit: type=1400 audit(1732135098.664:75): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.863712][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.870657][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.877694][ T290] device bridge_slave_0 entered promiscuous mode [ 21.885375][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.892238][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.899414][ T290] device bridge_slave_1 entered promiscuous mode [ 21.972658][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.979553][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.986605][ T291] device bridge_slave_0 entered promiscuous mode [ 22.005147][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.012034][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.019285][ T291] device bridge_slave_1 entered promiscuous mode [ 22.050663][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.057518][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.064833][ T292] device bridge_slave_0 entered promiscuous mode [ 22.072076][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.078973][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.086237][ T292] device bridge_slave_1 entered promiscuous mode [ 22.122102][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.129035][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.136074][ T294] device bridge_slave_0 entered promiscuous mode [ 22.142812][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.149673][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.156999][ T294] device bridge_slave_1 entered promiscuous mode [ 22.237289][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.244160][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.251365][ T293] device bridge_slave_0 entered promiscuous mode [ 22.257936][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.264814][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.272036][ T293] device bridge_slave_1 entered promiscuous mode [ 22.351343][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.358200][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.365301][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.372094][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.381433][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.388293][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.395371][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.402193][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.413654][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.420519][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.427590][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.434413][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.448297][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.455150][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.462263][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.469066][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.496061][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.503159][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.510224][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.517281][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.524785][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.531778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.539137][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.546049][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.553075][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.578913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.586851][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.593699][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.600926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.609119][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.615934][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.640178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.647369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.654823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.663001][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.669849][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.677205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.685209][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.692053][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.709015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.716285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.724057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.731905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.739918][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.746732][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.753994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.762241][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.769103][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.776243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.796846][ T294] device veth0_vlan entered promiscuous mode [ 22.803967][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.812761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.820705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.827863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.835305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.863422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.870734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.878983][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.885816][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.893239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.901413][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.908261][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.915503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.923419][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.931326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.939503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.947518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.955572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.965075][ T291] device veth0_vlan entered promiscuous mode [ 22.981693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.989487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.997286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.005498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.013746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.021762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.029661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.037053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.044852][ T294] device veth1_macvtap entered promiscuous mode [ 23.059478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.066982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.074481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.081863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.090170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.098172][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.104997][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.112398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.120641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.128892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.136929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.145018][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.151852][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.159213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.172354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.180153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.187931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.195935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.203871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.212050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.219910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.227372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.237910][ T290] device veth0_vlan entered promiscuous mode [ 23.251606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.259696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.267686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.276165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.285842][ T290] device veth1_macvtap entered promiscuous mode [ 23.299131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.306943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.314286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.321667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.329369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.337338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.345692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.353959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.362128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.370322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.382047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.389847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.398177][ T293] device veth0_vlan entered promiscuous mode [ 23.409549][ T291] device veth1_macvtap entered promiscuous mode [ 23.416952][ T292] device veth0_vlan entered promiscuous mode [ 23.423492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.431018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.438333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.445516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.453776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.462171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.470337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.478521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.486488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.504955][ T293] device veth1_macvtap entered promiscuous mode [ 23.516997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.531953][ T292] device veth1_macvtap entered promiscuous mode [ 23.550524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.558885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.567068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.575614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.584590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.592959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.601188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.612088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.620760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.660391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.662479][ T321] loop1: detected capacity change from 0 to 256 [ 23.669880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.682601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.690894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.700262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.709614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.165369][ T328] loop3: detected capacity change from 0 to 256 [ 24.220050][ T328] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 24.737838][ T338] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6'. [ 24.921608][ T341] loop0: detected capacity change from 0 to 256 [ 24.999872][ T338] device dummy0 entered promiscuous mode [ 25.006249][ T338] device dummy0 left promiscuous mode [ 25.033086][ T341] ======================================================= [ 25.033086][ T341] WARNING: The mand mount option has been deprecated and [ 25.033086][ T341] and is ignored by this kernel. Remove the mand [ 25.033086][ T341] option from the mount to silence this warning. [ 25.033086][ T341] ======================================================= [ 25.111990][ T341] exfat: Unknown parameter '' [ 25.143931][ T338] syz.1.6 (338) used greatest stack depth: 21824 bytes left [ 25.198982][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.235283][ T360] loop4: detected capacity change from 0 to 512 [ 25.259073][ T360] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.272342][ T360] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 25.294000][ T360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 25.301957][ T360] System zones: 1-12 [ 25.464629][ T360] EXT4-fs (loop4): 1 truncate cleaned up [ 25.473140][ T360] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 25.566974][ T360] syz.4.12 (pid 360) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 25.587268][ T367] loop2: detected capacity change from 0 to 256 [ 25.611252][ T367] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 25.658094][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 25.674218][ T371] FAULT_INJECTION: forcing a failure. [ 25.674218][ T371] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 25.687386][ T371] CPU: 0 PID: 371 Comm: syz.4.14 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 25.696829][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 25.706721][ T371] Call Trace: [ 25.709854][ T371] [ 25.712624][ T371] dump_stack_lvl+0x151/0x1c0 [ 25.717349][ T371] ? io_uring_drop_tctx_refs+0x190/0x190 [ 25.722800][ T371] ? stack_trace_save+0x113/0x1c0 [ 25.727662][ T371] dump_stack+0x15/0x20 [ 25.731656][ T371] should_fail+0x3c6/0x510 [ 25.735908][ T371] should_fail_alloc_page+0x5a/0x80 [ 25.740955][ T371] prepare_alloc_pages+0x15c/0x700 [ 25.745888][ T371] ? __alloc_pages_bulk+0xe40/0xe40 [ 25.750930][ T371] __alloc_pages+0x18c/0x8f0 [ 25.755366][ T371] ? prep_new_page+0x110/0x110 [ 25.759951][ T371] kmalloc_order+0x4a/0x160 [ 25.764285][ T371] ? proc_fail_nth_write+0x20b/0x290 [ 25.769410][ T371] kmalloc_order_trace+0x1a/0xb0 [ 25.774267][ T371] __kmalloc+0x19c/0x270 [ 25.778348][ T371] kvmalloc_node+0x1f0/0x4d0 [ 25.782779][ T371] ? vm_mmap+0xb0/0xb0 [ 25.786680][ T371] map_lookup_and_delete_elem+0x51f/0x8d0 [ 25.792232][ T371] __sys_bpf+0x4ce/0x760 [ 25.796311][ T371] ? fput_many+0x160/0x1b0 [ 25.800569][ T371] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 25.805774][ T371] ? debug_smp_processor_id+0x17/0x20 [ 25.810984][ T371] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 25.816884][ T371] __x64_sys_bpf+0x7c/0x90 [ 25.821136][ T371] x64_sys_call+0x87f/0x9a0 [ 25.825473][ T371] do_syscall_64+0x3b/0xb0 [ 25.829730][ T371] ? clear_bhb_loop+0x35/0x90 [ 25.834242][ T371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.839968][ T371] RIP: 0033:0x7fdc25825819 [ 25.844230][ T371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 25.863664][ T371] RSP: 002b:00007fdc23e9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 25.871907][ T371] RAX: ffffffffffffffda RBX: 00007fdc259dcfa0 RCX: 00007fdc25825819 [ 25.879720][ T371] RDX: 0000000000000020 RSI: 0000000020000400 RDI: 0000000000000015 [ 25.887529][ T371] RBP: 00007fdc23e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 25.895346][ T371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.903166][ T371] R13: 0000000000000000 R14: 00007fdc259dcfa0 R15: 00007ffe936e3eb8 [ 25.910969][ T371] [ 25.927797][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 25.927811][ T30] audit: type=1400 audit(1732135103.344:138): avc: denied { read write } for pid=372 comm="syz.4.16" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 25.928943][ T373] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.934223][ T30] audit: type=1400 audit(1732135103.344:139): avc: denied { open } for pid=372 comm="syz.4.16" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 25.999838][ T313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.007274][ T30] audit: type=1400 audit(1732135103.344:140): avc: denied { ioctl } for pid=372 comm="syz.4.16" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.032263][ T30] audit: type=1400 audit(1732135103.424:141): avc: denied { read } for pid=368 comm="syz.0.15" name="rtc0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.057950][ T30] audit: type=1400 audit(1732135103.424:142): avc: denied { open } for pid=368 comm="syz.0.15" path="/dev/rtc0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.082093][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.082587][ T30] audit: type=1400 audit(1732135103.424:143): avc: denied { ioctl } for pid=368 comm="syz.0.15" path="/dev/rtc0" dev="devtmpfs" ino=255 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.117875][ T30] audit: type=1400 audit(1732135103.424:144): avc: denied { setopt } for pid=368 comm="syz.0.15" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.120889][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.138988][ T30] audit: type=1400 audit(1732135103.424:145): avc: denied { connect } for pid=368 comm="syz.0.15" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.147515][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.167814][ T30] audit: type=1400 audit(1732135103.424:146): avc: denied { write } for pid=368 comm="syz.0.15" path="socket:[15270]" dev="sockfs" ino=15270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.177046][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.211137][ T6] usb 4-1: config 0 descriptor?? [ 26.251863][ T6] hub 4-1:0.0: USB hub found [ 26.258030][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 26.266421][ T30] audit: type=1400 audit(1732135103.684:147): avc: denied { ioctl } for pid=381 comm="syz.1.18" path="socket:[15339]" dev="sockfs" ino=15339 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.358113][ T298] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.372224][ T385] mmap: syz.1.19 (385) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 26.383851][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.429408][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.439457][ T313] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.448808][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.457189][ T313] usb 3-1: config 0 descriptor?? [ 26.484750][ T6] hub 4-1:0.0: 1 port detected [ 26.498679][ T313] hub 3-1:0.0: USB hub found [ 26.598133][ T298] usb 5-1: Using ep0 maxpacket: 8 [ 26.718470][ T313] hub 3-1:0.0: 1 port detected [ 26.718463][ T298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.733417][ T298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.783983][ T396] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 26.898105][ T298] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 26.907134][ T298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.914944][ T298] usb 5-1: Product: syz [ 26.918921][ T298] usb 5-1: Manufacturer: syz [ 26.923271][ T298] usb 5-1: SerialNumber: syz [ 26.928095][ T6] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 26.928441][ T298] usb 5-1: config 0 descriptor?? [ 26.936388][ T6] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 27.058121][ T313] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 27.064306][ T313] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 27.068091][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 27.077293][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 27.098135][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.119927][ T6] usb 4-1: USB disconnect, device number 2 [ 27.168148][ T313] usbhid 3-1:0.0: can't add hid device: -71 [ 27.173914][ T313] usbhid: probe of 3-1:0.0 failed with error -71 [ 27.187578][ T298] usb 5-1: USB disconnect, device number 2 [ 27.208487][ T313] usb 3-1: USB disconnect, device number 2 [ 27.258494][ T402] loop1: detected capacity change from 0 to 512 [ 27.338643][ T402] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 27.348846][ T402] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 27.356577][ T402] System zones: 1-12 [ 27.360939][ T402] EXT4-fs (loop1): 1 truncate cleaned up [ 27.366489][ T402] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 27.385653][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 27.455991][ T407] loop1: detected capacity change from 0 to 512 [ 27.508117][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.518973][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.528774][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.531690][ T407] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 27.541522][ T20] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 27.559282][ T407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 27.560120][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.568695][ T407] System zones: 1-12 [ 27.579156][ T20] usb 1-1: config 0 descriptor?? [ 27.584057][ T407] EXT4-fs (loop1): 1 truncate cleaned up [ 27.591006][ T407] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 27.719240][ T415] loop2: detected capacity change from 0 to 256 [ 27.723676][ T417] fuseblk: Bad value for 'user_id' [ 27.792196][ T419] device pim6reg1 entered promiscuous mode [ 27.847734][ T415] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 28.782604][ T20] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 28.802496][ T437] device pim6reg1 entered promiscuous mode [ 28.864961][ T439] netlink: 68 bytes leftover after parsing attributes in process `syz.1.36'. [ 29.062160][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input4 [ 29.115396][ T446] FAULT_INJECTION: forcing a failure. [ 29.115396][ T446] name failslab, interval 1, probability 0, space 0, times 1 [ 29.127875][ T446] CPU: 1 PID: 446 Comm: syz.2.37 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 29.137274][ T446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 29.147166][ T446] Call Trace: [ 29.150291][ T446] [ 29.153065][ T446] dump_stack_lvl+0x151/0x1c0 [ 29.156916][ T20] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 29.157575][ T446] ? io_uring_drop_tctx_refs+0x190/0x190 [ 29.174942][ T446] ? avc_has_perm+0x16f/0x260 [ 29.179455][ T446] dump_stack+0x15/0x20 [ 29.183442][ T446] should_fail+0x3c6/0x510 [ 29.187697][ T446] __should_failslab+0xa4/0xe0 [ 29.192298][ T446] should_failslab+0x9/0x20 [ 29.196635][ T446] slab_pre_alloc_hook+0x37/0xd0 [ 29.201413][ T446] __kmalloc+0x6d/0x270 [ 29.205395][ T446] ? qdisc_alloc+0x75/0x770 [ 29.209734][ T446] qdisc_alloc+0x75/0x770 [ 29.213902][ T446] ? tun_device_event+0x3e5/0xf80 [ 29.218765][ T446] qdisc_create_dflt+0x6b/0x3e0 [ 29.223449][ T446] ? _raw_spin_lock+0xa4/0x1b0 [ 29.228050][ T446] dev_activate+0x2e0/0x1140 [ 29.232488][ T446] __dev_open+0x3bf/0x4e0 [ 29.236646][ T446] ? dev_open+0x260/0x260 [ 29.240811][ T446] ? _raw_spin_unlock_bh+0x51/0x60 [ 29.245756][ T446] ? dev_set_rx_mode+0x245/0x2e0 [ 29.250527][ T446] ? __kasan_check_read+0x11/0x20 [ 29.255391][ T446] __dev_change_flags+0x1db/0x6e0 [ 29.260248][ T446] ? avc_denied+0x1b0/0x1b0 [ 29.264587][ T446] ? dev_get_flags+0x1e0/0x1e0 [ 29.269187][ T446] ? _kstrtoull+0x3a0/0x4a0 [ 29.273528][ T446] dev_change_flags+0x8c/0x1a0 [ 29.278137][ T446] dev_ifsioc+0x147/0x10c0 [ 29.282385][ T446] ? dev_ioctl+0xe70/0xe70 [ 29.286634][ T446] ? mutex_lock+0xb6/0x1e0 [ 29.290892][ T446] ? wait_for_completion_killable_timeout+0x10/0x10 [ 29.297314][ T446] dev_ioctl+0x54d/0xe70 [ 29.301392][ T446] sock_do_ioctl+0x34f/0x5a0 [ 29.305816][ T446] ? sock_show_fdinfo+0xa0/0xa0 [ 29.310590][ T446] ? selinux_file_ioctl+0x3cc/0x540 [ 29.315623][ T446] sock_ioctl+0x455/0x740 [ 29.319789][ T446] ? sock_poll+0x400/0x400 [ 29.324039][ T446] ? __fget_files+0x31e/0x380 [ 29.328557][ T446] ? security_file_ioctl+0x84/0xb0 [ 29.333500][ T446] ? sock_poll+0x400/0x400 [ 29.337757][ T446] __se_sys_ioctl+0x114/0x190 [ 29.342270][ T446] __x64_sys_ioctl+0x7b/0x90 [ 29.346694][ T446] x64_sys_call+0x98/0x9a0 [ 29.350947][ T446] do_syscall_64+0x3b/0xb0 [ 29.355201][ T446] ? clear_bhb_loop+0x35/0x90 [ 29.359717][ T446] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.365527][ T446] RIP: 0033:0x7f5a962bf819 [ 29.369791][ T446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.389223][ T446] RSP: 002b:00007f5a94938038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.397469][ T446] RAX: ffffffffffffffda RBX: 00007f5a96476fa0 RCX: 00007f5a962bf819 [ 29.405278][ T446] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000008 [ 29.413091][ T446] RBP: 00007f5a94938090 R08: 0000000000000000 R09: 0000000000000000 [ 29.420902][ T446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.428712][ T446] R13: 0000000000000000 R14: 00007f5a96476fa0 R15: 00007ffca0bbacb8 [ 29.436530][ T446] [ 29.443544][ T446] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 29.453440][ T446] device pim6reg1 entered promiscuous mode [ 29.475847][ T20] usb 1-1: USB disconnect, device number 2 [ 29.491366][ T450] FAULT_INJECTION: forcing a failure. [ 29.491366][ T450] name failslab, interval 1, probability 0, space 0, times 0 [ 29.514054][ T450] CPU: 1 PID: 450 Comm: syz.4.40 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 29.523517][ T450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 29.533409][ T450] Call Trace: [ 29.536530][ T450] [ 29.539308][ T450] dump_stack_lvl+0x151/0x1c0 [ 29.543824][ T450] ? io_uring_drop_tctx_refs+0x190/0x190 [ 29.549289][ T450] dump_stack+0x15/0x20 [ 29.553280][ T450] should_fail+0x3c6/0x510 [ 29.557534][ T450] __should_failslab+0xa4/0xe0 [ 29.562158][ T450] should_failslab+0x9/0x20 [ 29.566474][ T450] slab_pre_alloc_hook+0x37/0xd0 [ 29.571247][ T450] __kmalloc+0x6d/0x270 [ 29.575241][ T450] ? qdisc_alloc+0x75/0x770 [ 29.579597][ T450] qdisc_alloc+0x75/0x770 [ 29.583745][ T450] ? tun_device_event+0x3e5/0xf80 [ 29.588608][ T450] qdisc_create_dflt+0x6b/0x3e0 [ 29.593302][ T450] ? _raw_spin_lock+0xa4/0x1b0 [ 29.597903][ T450] dev_activate+0x2e0/0x1140 [ 29.602322][ T450] __dev_open+0x3bf/0x4e0 [ 29.606486][ T450] ? dev_open+0x260/0x260 [ 29.610653][ T450] ? _raw_spin_unlock_bh+0x51/0x60 [ 29.615613][ T450] ? dev_set_rx_mode+0x245/0x2e0 [ 29.620373][ T450] ? __kasan_check_read+0x11/0x20 [ 29.625232][ T450] __dev_change_flags+0x1db/0x6e0 [ 29.630095][ T450] ? avc_denied+0x1b0/0x1b0 [ 29.634430][ T450] ? dev_get_flags+0x1e0/0x1e0 [ 29.639032][ T450] dev_change_flags+0x8c/0x1a0 [ 29.643634][ T450] dev_ifsioc+0x147/0x10c0 [ 29.647918][ T450] ? dev_ioctl+0xe70/0xe70 [ 29.652138][ T450] ? mutex_lock+0x135/0x1e0 [ 29.656476][ T450] ? wait_for_completion_killable_timeout+0x10/0x10 [ 29.662901][ T450] dev_ioctl+0x54d/0xe70 [ 29.666980][ T450] sock_do_ioctl+0x34f/0x5a0 [ 29.671408][ T450] ? sock_show_fdinfo+0xa0/0xa0 [ 29.676101][ T450] ? selinux_file_ioctl+0x3cc/0x540 [ 29.681127][ T450] sock_ioctl+0x455/0x740 [ 29.685295][ T450] ? sock_poll+0x400/0x400 [ 29.689547][ T450] ? __fget_files+0x31e/0x380 [ 29.694059][ T450] ? security_file_ioctl+0x84/0xb0 [ 29.699182][ T450] ? sock_poll+0x400/0x400 [ 29.703432][ T450] __se_sys_ioctl+0x114/0x190 [ 29.707944][ T450] __x64_sys_ioctl+0x7b/0x90 [ 29.712369][ T450] x64_sys_call+0x98/0x9a0 [ 29.716643][ T450] do_syscall_64+0x3b/0xb0 [ 29.720877][ T450] ? clear_bhb_loop+0x35/0x90 [ 29.725389][ T450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.731120][ T450] RIP: 0033:0x7fdc25825819 [ 29.735458][ T450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.754920][ T450] RSP: 002b:00007fdc23e9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.763145][ T450] RAX: ffffffffffffffda RBX: 00007fdc259dcfa0 RCX: 00007fdc25825819 [ 29.770955][ T450] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000008 [ 29.778767][ T450] RBP: 00007fdc23e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 29.786579][ T450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.794388][ T450] R13: 0000000000000000 R14: 00007fdc259dcfa0 R15: 00007ffe936e3eb8 [ 29.802204][ T450] [ 29.805857][ T450] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 29.816915][ T450] device pim6reg1 entered promiscuous mode [ 29.823451][ T451] device pim6reg1 entered promiscuous mode [ 30.208758][ T315] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.212460][ T483] loop3: detected capacity change from 0 to 512 [ 30.251253][ T483] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 30.258071][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.321643][ T483] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 30.451062][ T489] loop0: detected capacity change from 0 to 512 [ 30.539368][ T489] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.562380][ T489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 30.570476][ T489] System zones: 1-12 [ 30.582210][ T489] EXT4-fs (loop0): 1 truncate cleaned up [ 30.587679][ T489] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 30.606670][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 30.621653][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 30.645111][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 30.654945][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.665749][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.675373][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 30.684249][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.693060][ T20] usb 2-1: config 0 descriptor?? [ 30.809453][ T500] netlink: 68 bytes leftover after parsing attributes in process `syz.4.57'. [ 30.818324][ T315] usb 3-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 30.895780][ T508] netlink: 68 bytes leftover after parsing attributes in process `syz.3.59'. [ 31.039200][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.047215][ T315] usb 3-1: Product: syz [ 31.055417][ T315] usb 3-1: Manufacturer: syz [ 31.060438][ T315] usb 3-1: SerialNumber: syz [ 31.070226][ T315] usb 3-1: config 0 descriptor?? [ 31.289708][ T475] loop1: detected capacity change from 0 to 40427 [ 31.296047][ T30] kauditd_printk_skb: 196 callbacks suppressed [ 31.296060][ T30] audit: type=1400 audit(1732135108.714:344): avc: denied { setopt } for pid=511 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.325070][ T39] usb 3-1: USB disconnect, device number 3 [ 31.349845][ T475] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 31.357910][ T475] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 31.367186][ T475] F2FS-fs (loop1): invalid crc value [ 31.374041][ T475] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.411144][ T475] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 31.418401][ T475] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.427602][ T30] audit: type=1400 audit(1732135108.844:345): avc: denied { create } for pid=474 comm="syz.1.49" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.428925][ T30] audit: type=1400 audit(1732135108.854:346): avc: denied { read write open } for pid=474 comm="syz.1.49" path="/14/bus/file1" dev="loop1" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.439497][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 31.489191][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 31.530548][ T30] audit: type=1400 audit(1732135108.954:347): avc: denied { create } for pid=520 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.554708][ T30] audit: type=1326 audit(1732135108.974:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc25825819 code=0x7ffc0000 [ 31.577967][ T30] audit: type=1326 audit(1732135108.974:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc25825819 code=0x7ffc0000 [ 31.602621][ T30] audit: type=1326 audit(1732135108.974:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc25825819 code=0x7ffc0000 [ 31.626725][ T30] audit: type=1326 audit(1732135108.974:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc25825819 code=0x7ffc0000 [ 31.659089][ T529] device pim6reg1 entered promiscuous mode [ 31.682553][ T30] audit: type=1326 audit(1732135108.974:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc25825819 code=0x7ffc0000 [ 31.712088][ T30] audit: type=1326 audit(1732135108.974:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc25825819 code=0x7ffc0000 [ 31.740403][ T20] logitech-hidpp-device 0003:046D:C086.0002: item fetching failed at offset 4/5 [ 31.751356][ T20] logitech-hidpp-device 0003:046D:C086.0002: hidpp_probe:parse failed [ 31.760034][ T20] logitech-hidpp-device: probe of 0003:046D:C086.0002 failed with error -22 [ 31.789991][ T531] device pim6reg1 entered promiscuous mode [ 31.811623][ T534] device pim6reg1 entered promiscuous mode [ 32.717822][ T552] loop3: detected capacity change from 0 to 512 [ 32.773589][ T550] loop2: detected capacity change from 0 to 131072 [ 32.791381][ T39] usb 2-1: USB disconnect, device number 2 [ 32.804389][ T552] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #3: comm syz.3.70: corrupted inode contents [ 32.816151][ T552] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #3: comm syz.3.70: mark_inode_dirty error [ 32.829071][ T552] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #3: comm syz.3.70: corrupted inode contents [ 32.846353][ T550] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.850739][ T552] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.70: mark_inode_dirty error [ 32.873781][ T552] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.70: Failed to acquire dquot type 0 [ 32.890889][ T552] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.70: corrupted inode contents [ 32.905859][ T565] loop4: detected capacity change from 0 to 128 [ 32.906130][ T552] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #16: comm syz.3.70: mark_inode_dirty error [ 32.912790][ T550] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 32.924150][ T552] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.70: corrupted inode contents [ 32.942153][ T552] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.70: mark_inode_dirty error [ 32.953734][ T552] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.70: corrupted inode contents [ 32.965627][ T552] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 32.974405][ T552] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.70: corrupted inode contents [ 32.986287][ T552] EXT4-fs error (device loop3): ext4_truncate:4303: inode #16: comm syz.3.70: mark_inode_dirty error [ 32.998246][ T552] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 33.016915][ T552] EXT4-fs (loop3): 1 truncate cleaned up [ 33.028947][ T552] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 33.048727][ T565] capability: warning: `syz.4.73' uses deprecated v2 capabilities in a way that may be insecure [ 33.059129][ T552] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.079210][ T565] attempt to access beyond end of device [ 33.079210][ T565] loop4: rw=34817, want=129, limit=128 [ 33.273993][ T571] loop4: detected capacity change from 0 to 512 [ 33.339614][ T573] xt_CT: No such helper "syz1" [ 33.538768][ T571] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 33.558141][ T571] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 33.568366][ T571] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.74: Corrupt directory, running e2fsck is recommended [ 33.581400][ T552] syz.3.70 (552) used greatest stack depth: 20168 bytes left [ 33.594425][ T571] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 33.604689][ T571] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.74: corrupted in-inode xattr [ 33.616854][ T571] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.74: couldn't read orphan inode 15 (err -117) [ 33.628901][ T571] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 33.688156][ T400] Bluetooth: hci0: command 0x1003 tx timeout [ 33.697060][ T524] Bluetooth: hci0: sending frame failed (-49) [ 34.098094][ T578] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 34.109411][ T578] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 34.119359][ T578] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.74: Corrupt directory, running e2fsck is recommended [ 34.132236][ T578] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 34.143602][ T578] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 34.153465][ T578] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.74: Corrupt directory, running e2fsck is recommended [ 34.166035][ T578] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 3: comm syz.4.74: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 35.110872][ T584] loop2: detected capacity change from 0 to 512 [ 35.141969][ T584] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.164317][ T584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 35.172425][ T584] System zones: 1-12 [ 35.176886][ T584] EXT4-fs (loop2): 1 truncate cleaned up [ 35.186978][ T584] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 35.258620][ T594] loop1: detected capacity change from 0 to 128 [ 35.283969][ T592] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.291022][ T592] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.299174][ T599] FAULT_INJECTION: forcing a failure. [ 35.299174][ T599] name failslab, interval 1, probability 0, space 0, times 0 [ 35.309157][ T592] device bridge_slave_0 entered promiscuous mode [ 35.312086][ T594] EXT4-fs (loop1): Test dummy encryption mode enabled [ 35.318945][ T592] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.331447][ T592] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.331441][ T599] CPU: 1 PID: 599 Comm: syz.2.83 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 35.331463][ T599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 35.339020][ T592] device bridge_slave_1 entered promiscuous mode [ 35.347734][ T599] Call Trace: [ 35.347741][ T599] [ 35.347747][ T599] dump_stack_lvl+0x151/0x1c0 [ 35.347773][ T599] ? io_uring_drop_tctx_refs+0x190/0x190 [ 35.359474][ T594] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 35.364082][ T599] dump_stack+0x15/0x20 [ 35.367263][ T594] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.369975][ T599] should_fail+0x3c6/0x510 [ 35.369993][ T599] __should_failslab+0xa4/0xe0 [ 35.370009][ T599] ? security_inode_alloc+0x29/0x120 [ 35.370026][ T599] should_failslab+0x9/0x20 [ 35.370042][ T599] slab_pre_alloc_hook+0x37/0xd0 [ 35.429346][ T599] ? security_inode_alloc+0x29/0x120 [ 35.434553][ T599] kmem_cache_alloc+0x44/0x200 [ 35.439149][ T599] security_inode_alloc+0x29/0x120 [ 35.444095][ T599] inode_init_always+0x76d/0x9d0 [ 35.448967][ T599] ? sockfs_init_fs_context+0xb0/0xb0 [ 35.454170][ T599] new_inode_pseudo+0x93/0x220 [ 35.458790][ T599] __sock_create+0x135/0x760 [ 35.463198][ T599] __sys_socketpair+0x29f/0x6e0 [ 35.467879][ T599] ? __ia32_sys_socket+0x90/0x90 [ 35.472656][ T599] ? __ia32_sys_read+0x90/0x90 [ 35.477258][ T599] ? debug_smp_processor_id+0x17/0x20 [ 35.482459][ T599] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 35.488362][ T599] __x64_sys_socketpair+0x9b/0xb0 [ 35.493222][ T599] x64_sys_call+0x19b/0x9a0 [ 35.497565][ T599] do_syscall_64+0x3b/0xb0 [ 35.501813][ T599] ? clear_bhb_loop+0x35/0x90 [ 35.506325][ T599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.512052][ T599] RIP: 0033:0x7f5a962bf819 [ 35.516309][ T599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.535748][ T599] RSP: 002b:00007f5a94938038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 35.544114][ T599] RAX: ffffffffffffffda RBX: 00007f5a96476fa0 RCX: 00007f5a962bf819 [ 35.551925][ T599] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 35.559736][ T599] RBP: 00007f5a94938090 R08: 0000000000000000 R09: 0000000000000000 [ 35.567653][ T599] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000001 [ 35.575461][ T599] R13: 0000000000000000 R14: 00007f5a96476fa0 R15: 00007ffca0bbacb8 [ 35.583279][ T599] [ 35.598410][ T599] socket: no more sockets [ 35.659291][ T594] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 35.945330][ T607] loop4: detected capacity change from 0 to 4096 [ 36.000676][ T433] device bridge_slave_1 left promiscuous mode [ 36.006698][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.023938][ T433] device bridge_slave_0 left promiscuous mode [ 36.036509][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.044910][ T607] EXT4-fs (loop4): Unrecognized mount option "/dev/rtc0" or missing value [ 36.062669][ T433] device veth1_macvtap left promiscuous mode [ 36.075825][ T433] device veth0_vlan left promiscuous mode [ 36.202346][ T400] Bluetooth: hci0: command 0x1001 tx timeout [ 36.208381][ T524] Bluetooth: hci0: sending frame failed (-49) [ 36.335585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.345171][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.374425][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.391430][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.400033][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.406911][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.414479][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.458314][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.466789][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.474860][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.481728][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.490633][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.498907][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.609356][ T30] kauditd_printk_skb: 394 callbacks suppressed [ 36.609376][ T30] audit: type=1326 audit(1732135114.034:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f096819 code=0x7ffc0000 [ 36.722317][ T30] audit: type=1326 audit(1732135114.064:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e5f096819 code=0x7ffc0000 [ 36.727772][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.745223][ T30] audit: type=1326 audit(1732135114.064:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f096819 code=0x7ffc0000 [ 36.776222][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.784443][ T30] audit: type=1326 audit(1732135114.064:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e5f096819 code=0x7ffc0000 [ 36.803155][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.815611][ T30] audit: type=1326 audit(1732135114.074:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f096819 code=0x7ffc0000 [ 36.815755][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.838564][ T30] audit: type=1326 audit(1732135114.074:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e5f096819 code=0x7ffc0000 [ 36.870147][ T30] audit: type=1326 audit(1732135114.074:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f096819 code=0x7ffc0000 [ 36.893162][ T30] audit: type=1326 audit(1732135114.074:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f6e5f096819 code=0x7ffc0000 [ 36.897862][ T592] device veth0_vlan entered promiscuous mode [ 36.922250][ T30] audit: type=1326 audit(1732135114.074:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5f096819 code=0x7ffc0000 [ 36.945331][ T30] audit: type=1326 audit(1732135114.074:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6e5f096819 code=0x7ffc0000 [ 36.968139][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.975970][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.991042][ T592] device veth1_macvtap entered promiscuous mode [ 36.997711][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.005249][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.012776][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.020944][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.038467][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.046821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.059512][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.068461][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.129765][ T640] FAULT_INJECTION: forcing a failure. [ 37.129765][ T640] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.156472][ T640] CPU: 1 PID: 640 Comm: syz.1.92 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 37.165948][ T640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 37.175841][ T640] Call Trace: [ 37.178960][ T640] [ 37.181736][ T640] dump_stack_lvl+0x151/0x1c0 [ 37.186253][ T640] ? io_uring_drop_tctx_refs+0x190/0x190 [ 37.191718][ T640] ? __wake_up_klogd+0xd5/0x110 [ 37.196403][ T640] dump_stack+0x15/0x20 [ 37.200395][ T640] should_fail+0x3c6/0x510 [ 37.204650][ T640] should_fail_usercopy+0x1a/0x20 [ 37.209520][ T640] _copy_to_user+0x20/0x90 [ 37.213765][ T640] simple_read_from_buffer+0xc7/0x150 [ 37.218971][ T640] proc_fail_nth_read+0x1a3/0x210 [ 37.223831][ T640] ? proc_fault_inject_write+0x390/0x390 [ 37.229298][ T640] ? fsnotify_perm+0x269/0x5b0 [ 37.233898][ T640] ? security_file_permission+0x86/0xb0 [ 37.239293][ T640] ? proc_fault_inject_write+0x390/0x390 [ 37.244747][ T640] vfs_read+0x27d/0xd40 [ 37.248748][ T640] ? kernel_read+0x1f0/0x1f0 [ 37.253166][ T640] ? __kasan_check_write+0x14/0x20 [ 37.258113][ T640] ? mutex_lock+0xb6/0x1e0 [ 37.262367][ T640] ? wait_for_completion_killable_timeout+0x10/0x10 [ 37.268800][ T640] ? __fdget_pos+0x2e7/0x3a0 [ 37.273216][ T640] ? ksys_read+0x77/0x2c0 [ 37.277381][ T640] ksys_read+0x199/0x2c0 [ 37.281462][ T640] ? vfs_write+0x1110/0x1110 [ 37.285894][ T640] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 37.291364][ T640] __x64_sys_read+0x7b/0x90 [ 37.295695][ T640] x64_sys_call+0x28/0x9a0 [ 37.299948][ T640] do_syscall_64+0x3b/0xb0 [ 37.304201][ T640] ? clear_bhb_loop+0x35/0x90 [ 37.308712][ T640] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.314442][ T640] RIP: 0033:0x7f6e5f09525c [ 37.318697][ T640] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 37.338138][ T640] RSP: 002b:00007f6e5d70f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 37.346389][ T640] RAX: ffffffffffffffda RBX: 00007f6e5f24dfa0 RCX: 00007f6e5f09525c [ 37.354192][ T640] RDX: 000000000000000f RSI: 00007f6e5d70f0a0 RDI: 0000000000000004 [ 37.362004][ T640] RBP: 00007f6e5d70f090 R08: 0000000000000000 R09: 0000000000000000 [ 37.370074][ T640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.377894][ T640] R13: 0000000000000000 R14: 00007f6e5f24dfa0 R15: 00007ffcc6d1c6c8 [ 37.385702][ T640] [ 37.578354][ T651] loop2: detected capacity change from 0 to 512 [ 37.661062][ T651] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.709613][ T651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 37.717708][ T651] System zones: 1-12 [ 37.724781][ T651] EXT4-fs (loop2): 1 truncate cleaned up [ 37.730739][ T651] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 38.248041][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 38.503627][ T671] loop1: detected capacity change from 0 to 512 [ 38.540340][ T671] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.551684][ T671] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 38.561935][ T671] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.102: Corrupt directory, running e2fsck is recommended [ 38.575578][ T671] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 38.583687][ T671] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.102: corrupted in-inode xattr [ 38.595618][ T671] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.102: couldn't read orphan inode 15 (err -117) [ 38.607478][ T671] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 38.705521][ T662] FAULT_INJECTION: forcing a failure. [ 38.705521][ T662] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 38.718622][ T662] CPU: 0 PID: 662 Comm: syz.2.98 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 38.728003][ T662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 38.737893][ T662] Call Trace: [ 38.741020][ T662] [ 38.743794][ T662] dump_stack_lvl+0x151/0x1c0 [ 38.748314][ T662] ? io_uring_drop_tctx_refs+0x190/0x190 [ 38.753780][ T662] dump_stack+0x15/0x20 [ 38.757768][ T662] should_fail+0x3c6/0x510 [ 38.762023][ T662] should_fail_alloc_page+0x5a/0x80 [ 38.767056][ T662] prepare_alloc_pages+0x15c/0x700 [ 38.772008][ T662] ? __alloc_pages_bulk+0xe40/0xe40 [ 38.777163][ T662] ? __kernel_text_address+0x9b/0x110 [ 38.782365][ T662] __alloc_pages+0x18c/0x8f0 [ 38.786789][ T662] ? prep_new_page+0x110/0x110 [ 38.791389][ T662] ? stack_trace_snprint+0xf0/0xf0 [ 38.796335][ T662] handle_pte_fault+0xe7e/0x25c0 [ 38.801109][ T662] ? irqentry_exit+0x30/0x40 [ 38.805536][ T662] ? fault_around_bytes_set+0xc0/0xc0 [ 38.810748][ T662] ? do_handle_mm_fault+0x15d4/0x2400 [ 38.815953][ T662] ? do_handle_mm_fault+0x20b4/0x2400 [ 38.821163][ T662] do_handle_mm_fault+0x20bc/0x2400 [ 38.826197][ T662] ? numa_migrate_prep+0xe0/0xe0 [ 38.830965][ T662] ? call_rcu+0xc4b/0x10b0 [ 38.835232][ T662] ? __fget_files+0x31e/0x380 [ 38.839731][ T662] ? exc_page_fault+0x222/0x7f0 [ 38.844504][ T662] ? access_error+0x246/0x270 [ 38.849018][ T662] exc_page_fault+0x26f/0x7f0 [ 38.853540][ T662] asm_exc_page_fault+0x27/0x30 [ 38.858229][ T662] RIP: 0033:0x7f5a9626cb6b [ 38.862576][ T662] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 38.866780][ T664] FAULT_INJECTION: forcing a failure. [ 38.866780][ T664] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 38.881998][ T662] RSP: 002b:00007f5a94935e10 EFLAGS: 00010246 [ 38.882018][ T662] RAX: 00007f5a94937f30 RBX: 00007f5a9644d620 RCX: 0000000000000000 [ 38.882028][ T662] RDX: 00007f5a94937f78 RSI: 00007f5a9631e8d8 RDI: 00007f5a94935e30 [ 38.882039][ T662] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 38.882048][ T662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.882057][ T662] R13: 0000000000000000 R14: 00007f5a96476fa0 R15: 00007ffca0bbacb8 [ 38.882071][ T662] [ 38.942930][ T664] CPU: 1 PID: 664 Comm: syz.5.99 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 38.952396][ T664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 38.962379][ T664] Call Trace: [ 38.965498][ T664] [ 38.968274][ T664] dump_stack_lvl+0x151/0x1c0 [ 38.972781][ T664] ? io_uring_drop_tctx_refs+0x190/0x190 [ 38.978256][ T664] dump_stack+0x15/0x20 [ 38.982246][ T664] should_fail+0x3c6/0x510 [ 38.986500][ T664] should_fail_alloc_page+0x5a/0x80 [ 38.991536][ T664] prepare_alloc_pages+0x15c/0x700 [ 38.996482][ T664] ? __alloc_pages_bulk+0xe40/0xe40 [ 39.001512][ T664] ? __kernel_text_address+0x9b/0x110 [ 39.006717][ T664] __alloc_pages+0x18c/0x8f0 [ 39.011180][ T664] ? prep_new_page+0x110/0x110 [ 39.015745][ T664] ? stack_trace_snprint+0xf0/0xf0 [ 39.020695][ T664] handle_pte_fault+0xe7e/0x25c0 [ 39.025466][ T664] ? kasan_save_stack+0x3b/0x60 [ 39.030153][ T664] ? fault_around_bytes_set+0xc0/0xc0 [ 39.035373][ T664] ? ____fput+0x15/0x20 [ 39.039360][ T664] ? task_work_run+0x129/0x190 [ 39.043954][ T664] ? exit_to_user_mode_loop+0xc4/0xe0 [ 39.049246][ T664] ? do_handle_mm_fault+0x159f/0x2400 [ 39.054453][ T664] ? memcpy+0x56/0x70 [ 39.058271][ T664] do_handle_mm_fault+0x20bc/0x2400 [ 39.063312][ T664] ? numa_migrate_prep+0xe0/0xe0 [ 39.068082][ T664] ? call_rcu+0xc4b/0x10b0 [ 39.072333][ T664] ? __fget_files+0x31e/0x380 [ 39.076846][ T664] ? exc_page_fault+0x222/0x7f0 [ 39.081544][ T664] ? access_error+0x246/0x270 [ 39.086053][ T664] exc_page_fault+0x26f/0x7f0 [ 39.090564][ T664] asm_exc_page_fault+0x27/0x30 [ 39.095257][ T664] RIP: 0033:0x7f7a8cde5b6b [ 39.099502][ T664] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 39.118943][ T664] RSP: 002b:00007f7a8b4aee10 EFLAGS: 00010246 [ 39.124841][ T664] RAX: 00007f7a8b4b0f30 RBX: 00007f7a8cfc6620 RCX: 0000000000000000 [ 39.132655][ T664] RDX: 00007f7a8b4b0f78 RSI: 00007f7a8ce978d8 RDI: 00007f7a8b4aee30 [ 39.140463][ T664] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 39.148276][ T664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.156086][ T664] R13: 0000000000000000 R14: 00007f7a8cfeffa0 R15: 00007fff0aeecc28 [ 39.163903][ T664] [ 39.170861][ T676] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 39.182184][ T676] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 39.192097][ T676] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.102: Corrupt directory, running e2fsck is recommended [ 39.204870][ T676] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 39.216167][ T676] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 39.226072][ T676] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.102: Corrupt directory, running e2fsck is recommended [ 39.238671][ T676] EXT4-fs error (device loop1): ext4_find_dest_de:2113: inode #2: block 3: comm syz.1.102: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 39.355995][ T693] loop5: detected capacity change from 0 to 512 [ 39.364797][ T693] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 39.376302][ T693] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 39.384145][ T693] System zones: 1-12 [ 39.388622][ T693] EXT4-fs (loop5): 1 truncate cleaned up [ 39.394058][ T693] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 39.588057][ T298] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 39.656274][ T703] netlink: 68 bytes leftover after parsing attributes in process `syz.5.112'. [ 39.702256][ T703] device dummy0 entered promiscuous mode [ 39.710437][ T703] device dummy0 left promiscuous mode [ 39.827546][ T706] loop2: detected capacity change from 0 to 2048 [ 39.898149][ T298] usb 5-1: too many configurations: 28, using maximum allowed: 8 [ 39.901224][ T706] EXT4-fs (loop2): Unrecognized mount option "measure" or missing value [ 39.978131][ T298] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 39.991455][ T298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.001484][ T298] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.088180][ T298] usb 5-1: config index 1 descriptor too short (expected 1051, got 27) [ 40.096317][ T298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.106230][ T298] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.198105][ T298] usb 5-1: config index 2 descriptor too short (expected 1051, got 27) [ 40.206220][ T298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.216311][ T298] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.288082][ T315] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.313620][ T298] usb 5-1: config index 3 descriptor too short (expected 1051, got 27) [ 40.322148][ T298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.346790][ T298] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.389737][ T711] loop5: detected capacity change from 0 to 1024 [ 40.438217][ T298] usb 5-1: config index 4 descriptor too short (expected 1051, got 27) [ 40.446700][ T298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.465924][ T713] netlink: 68 bytes leftover after parsing attributes in process `syz.1.114'. [ 40.511222][ T713] device dummy0 entered promiscuous mode [ 40.519134][ T713] device dummy0 left promiscuous mode [ 40.535870][ T298] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.594526][ T711] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.678108][ T315] usb 3-1: Using ep0 maxpacket: 16 [ 40.678139][ T298] usb 5-1: config index 5 descriptor too short (expected 1051, got 27) [ 40.691171][ T298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.701234][ T298] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.751980][ T722] FAULT_INJECTION: forcing a failure. [ 40.751980][ T722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.764891][ T722] CPU: 1 PID: 722 Comm: syz.1.116 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 40.774393][ T722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 40.784288][ T722] Call Trace: [ 40.787408][ T722] [ 40.790188][ T722] dump_stack_lvl+0x151/0x1c0 [ 40.794699][ T722] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.800168][ T722] ? sched_clock+0x9/0x10 [ 40.804336][ T722] dump_stack+0x15/0x20 [ 40.808330][ T722] should_fail+0x3c6/0x510 [ 40.812582][ T722] should_fail_usercopy+0x1a/0x20 [ 40.817437][ T722] _copy_to_user+0x20/0x90 [ 40.821694][ T722] simple_read_from_buffer+0xc7/0x150 [ 40.826905][ T722] proc_fail_nth_read+0x1a3/0x210 [ 40.831776][ T722] ? proc_fault_inject_write+0x390/0x390 [ 40.837224][ T722] ? fsnotify_perm+0x269/0x5b0 [ 40.841826][ T722] ? security_file_permission+0x86/0xb0 [ 40.847207][ T722] ? proc_fault_inject_write+0x390/0x390 [ 40.852676][ T722] vfs_read+0x27d/0xd40 [ 40.856666][ T722] ? kernel_read+0x1f0/0x1f0 [ 40.861093][ T722] ? irqentry_exit_cond_resched+0x2a/0x30 [ 40.866649][ T722] ? irqentry_exit+0x30/0x40 [ 40.871075][ T722] ? sysvec_reschedule_ipi+0x7d/0x150 [ 40.876280][ T722] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 40.881750][ T722] ? ksys_read+0xfd/0x2c0 [ 40.885914][ T722] ksys_read+0x199/0x2c0 [ 40.889999][ T722] ? vfs_write+0x1110/0x1110 [ 40.894422][ T722] ? __kasan_check_write+0x14/0x20 [ 40.899367][ T722] ? switch_fpu_return+0x15f/0x2e0 [ 40.904317][ T722] __x64_sys_read+0x7b/0x90 [ 40.908656][ T722] x64_sys_call+0x28/0x9a0 [ 40.912906][ T722] do_syscall_64+0x3b/0xb0 [ 40.917161][ T722] ? clear_bhb_loop+0x35/0x90 [ 40.921677][ T722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.927402][ T722] RIP: 0033:0x7f6e5f09525c [ 40.931658][ T722] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 40.951099][ T722] RSP: 002b:00007f6e5d6cd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.959341][ T722] RAX: ffffffffffffffda RBX: 00007f6e5f24e160 RCX: 00007f6e5f09525c [ 40.967155][ T722] RDX: 000000000000000f RSI: 00007f6e5d6cd0a0 RDI: 0000000000000009 [ 40.974965][ T722] RBP: 00007f6e5d6cd090 R08: 0000000000000000 R09: 0000000000000000 [ 40.982778][ T722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.990589][ T722] R13: 0000000000000000 R14: 00007f6e5f24e160 R15: 00007ffcc6d1c6c8 [ 40.998414][ T722] [ 41.013197][ T719] EXT4-fs (loop5): shut down requested (0) [ 41.034439][ T725] loop1: detected capacity change from 0 to 256 [ 41.038204][ T298] usb 5-1: config index 6 descriptor too short (expected 1051, got 27) [ 41.048955][ T298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.051962][ T725] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 41.059397][ T298] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.071315][ T725] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 41.092074][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.105056][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.114754][ T315] usb 3-1: New USB device found, idVendor=1aad, idProduct=000f, bcdDevice= 0.00 [ 41.123786][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.134193][ T315] usb 3-1: config 0 descriptor?? [ 41.158114][ T298] usb 5-1: config index 7 descriptor too short (expected 1051, got 27) [ 41.166344][ T298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.180858][ T298] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.288152][ T380] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 41.317069][ T735] loop1: detected capacity change from 0 to 512 [ 41.348103][ T298] usb 5-1: New USB device found, idVendor=06f8, idProduct=b040, bcdDevice=7d.f9 [ 41.357004][ T298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.364784][ T298] usb 5-1: Product: syz [ 41.368880][ T298] usb 5-1: Manufacturer: syz [ 41.373255][ T298] usb 5-1: SerialNumber: syz [ 41.378586][ T298] usb 5-1: config 0 descriptor?? [ 41.383575][ T735] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.393806][ T735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 41.401733][ T735] System zones: 1-12 [ 41.405852][ T735] EXT4-fs (loop1): 1 truncate cleaned up [ 41.411428][ T735] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 41.528287][ T380] usb 6-1: Invalid ep0 maxpacket: 64 [ 41.608860][ T706] UDC core: couldn't find an available UDC or it's busy: -16 [ 41.616157][ T706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 41.624441][ T706] UDC core: couldn't find an available UDC or it's busy: -16 [ 41.631809][ T706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 41.658623][ T315] hid (null): global environment stack underflow [ 41.665187][ T315] hid (null): report_id 0 is invalid [ 41.672850][ T315] hid (null): unknown global tag 0x11 [ 41.678089][ T380] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 41.678519][ T315] hid (null): unknown global tag 0x31 [ 41.690488][ T315] hid (null): unknown global tag 0xd [ 41.695628][ T315] hid (null): unknown global tag 0xe8 [ 41.704472][ T315] hid-generic 0003:1AAD:000F.0003: unknown main item tag 0x0 [ 41.711938][ T315] hid-generic 0003:1AAD:000F.0003: unknown main item tag 0x4 [ 41.713860][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 41.713873][ T30] audit: type=1400 audit(1732135119.134:900): avc: denied { setopt } for pid=684 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.719418][ T315] hid-generic 0003:1AAD:000F.0003: collection stack underflow [ 41.726161][ T743] 9pnet: Insufficient options for proto=fd [ 41.744587][ T30] audit: type=1400 audit(1732135119.144:901): avc: denied { mounton } for pid=684 comm="syz.4.106" path="/27/file0" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.779802][ T315] hid-generic 0003:1AAD:000F.0003: item 0 2 0 12 parsing failed [ 41.779936][ T298] usb 5-1: USB disconnect, device number 3 [ 41.787515][ T315] hid-generic: probe of 0003:1AAD:000F.0003 failed with error -22 [ 41.876569][ T582] usb 3-1: USB disconnect, device number 4 [ 41.918064][ T380] usb 6-1: Invalid ep0 maxpacket: 64 [ 41.923265][ T380] usb usb6-port1: attempt power cycle [ 42.338098][ T380] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 42.380452][ T750] loop4: detected capacity change from 0 to 256 [ 42.428199][ T380] usb 6-1: Invalid ep0 maxpacket: 64 [ 42.459647][ T750] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.479113][ T753] loop2: detected capacity change from 0 to 16 [ 42.541149][ T753] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.578039][ T380] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 42.578323][ T757] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 42.594368][ T757] fuse: Bad value for 'fd' [ 42.669830][ T380] usb 6-1: Invalid ep0 maxpacket: 64 [ 42.675639][ T380] usb usb6-port1: unable to enumerate USB device [ 42.682521][ T30] audit: type=1326 audit(1732135120.114:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a962bf819 code=0x7ffc0000 [ 42.705748][ T30] audit: type=1326 audit(1732135120.114:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a962bf819 code=0x7ffc0000 [ 42.728926][ T30] audit: type=1326 audit(1732135120.114:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a962bf819 code=0x7ffc0000 [ 42.752045][ T582] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.759397][ T30] audit: type=1326 audit(1732135120.114:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a962bf819 code=0x7ffc0000 [ 42.782464][ T30] audit: type=1326 audit(1732135120.114:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a962bf819 code=0x7ffc0000 [ 42.805481][ T30] audit: type=1326 audit(1732135120.114:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a962bf819 code=0x7ffc0000 [ 42.828485][ T30] audit: type=1326 audit(1732135120.154:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a9625b1a9 code=0x7ffc0000 [ 42.851456][ T313] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.858982][ T30] audit: type=1326 audit(1732135120.154:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a962bf819 code=0x7ffc0000 [ 42.895315][ T760] loop2: detected capacity change from 0 to 512 [ 42.970377][ T760] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 42.981807][ T760] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 42.992022][ T760] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.129: Corrupt directory, running e2fsck is recommended [ 43.004776][ T760] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 43.012767][ T760] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.129: corrupted in-inode xattr [ 43.024694][ T760] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.129: couldn't read orphan inode 15 (err -117) [ 43.036561][ T760] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 43.058183][ T582] usb 5-1: Using ep0 maxpacket: 32 [ 43.128147][ T313] usb 1-1: Using ep0 maxpacket: 32 [ 43.178604][ T582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.189827][ T582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.199618][ T582] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 43.209032][ T582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.220456][ T582] usb 5-1: config 0 descriptor?? [ 43.227062][ T765] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.238480][ T765] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 43.248438][ T765] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.129: Corrupt directory, running e2fsck is recommended [ 43.261924][ T765] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.273272][ T765] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 43.283158][ T765] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.129: Corrupt directory, running e2fsck is recommended [ 43.295845][ T765] EXT4-fs error (device loop2): ext4_find_dest_de:2113: inode #2: block 3: comm syz.2.129: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 43.364583][ T768] 9pnet: Insufficient options for proto=fd [ 43.372210][ T768] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.377526][ T313] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 43.386911][ T313] usb 1-1: config 0 has no interface number 0 [ 43.392934][ T313] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.403830][ T313] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.413667][ T313] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 43.422597][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.430789][ T582] hub 5-1:0.0: USB hub found [ 43.435666][ T313] usb 1-1: config 0 descriptor?? [ 43.606995][ T775] loop2: detected capacity change from 0 to 512 [ 43.614151][ T775] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.626982][ T775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 43.636344][ T775] System zones: 1-12 [ 43.644862][ T775] EXT4-fs (loop2): 1 truncate cleaned up [ 43.652064][ T775] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 43.681081][ T778] netlink: 68 bytes leftover after parsing attributes in process `syz.5.132'. [ 43.726275][ T778] device dummy0 entered promiscuous mode [ 43.738398][ T778] device dummy0 left promiscuous mode [ 43.763616][ T755] syz.0.127[755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.763959][ T755] syz.0.127[755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.775897][ T582] hub 5-1:0.0: 1 port detected [ 43.856021][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 44.108269][ T582] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 44.117897][ T582] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 44.218076][ T582] usbhid 5-1:0.0: can't add hid device: -71 [ 44.223906][ T582] usbhid: probe of 5-1:0.0 failed with error -71 [ 44.238111][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.258076][ T6] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 44.258299][ T582] usb 5-1: USB disconnect, device number 4 [ 44.267028][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.281282][ T6] usb 2-1: config 0 descriptor?? [ 44.318503][ T6] usb 2-1: bad CDC descriptors [ 44.329663][ T313] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0004/input/input5 [ 44.376272][ T313] uclogic 0003:28BD:0094.0004: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 44.416278][ T795] loop5: detected capacity change from 0 to 16 [ 44.426988][ T795] erofs: (device loop5): mounted with root inode @ nid 36. [ 44.497721][ T797] xt_hashlimit: size too large, truncated to 1048576 [ 44.521198][ T20] usb 2-1: USB disconnect, device number 3 [ 44.548502][ T6] usb 1-1: USB disconnect, device number 3 [ 44.573730][ T799] loop2: detected capacity change from 0 to 512 [ 44.653640][ T799] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 44.668059][ T799] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 44.678340][ T799] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.140: Corrupt directory, running e2fsck is recommended [ 44.692905][ T799] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 44.700981][ T799] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.140: corrupted in-inode xattr [ 44.712923][ T799] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.140: couldn't read orphan inode 15 (err -117) [ 44.731588][ T799] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 44.873731][ T804] device pim6reg1 entered promiscuous mode [ 44.932951][ T807] loop5: detected capacity change from 0 to 512 [ 44.941176][ T810] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 44.952557][ T810] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 44.962426][ T810] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.140: Corrupt directory, running e2fsck is recommended [ 44.976045][ T810] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 44.987375][ T810] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 44.997277][ T810] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.140: Corrupt directory, running e2fsck is recommended [ 45.010011][ T810] EXT4-fs error (device loop2): ext4_find_dest_de:2113: inode #2: block 3: comm syz.2.140: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 45.094913][ T807] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.106448][ T807] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 45.116771][ T807] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.142: Corrupt directory, running e2fsck is recommended [ 45.134653][ T807] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 45.155165][ T807] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.142: corrupted in-inode xattr [ 45.194909][ T813] device pim6reg1 entered promiscuous mode [ 45.220143][ T807] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.142: couldn't read orphan inode 15 (err -117) [ 45.232108][ T807] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 45.486678][ T828] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.498109][ T828] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 45.507968][ T828] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.142: Corrupt directory, running e2fsck is recommended [ 45.523876][ T828] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.535318][ T828] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 45.545353][ T828] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.142: Corrupt directory, running e2fsck is recommended [ 45.558691][ T828] EXT4-fs error (device loop5): ext4_find_dest_de:2113: inode #2: block 3: comm syz.5.142: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 45.967794][ T832] loop2: detected capacity change from 0 to 512 [ 46.032962][ T837] loop5: detected capacity change from 0 to 256 [ 46.041513][ T839] FAULT_INJECTION: forcing a failure. [ 46.041513][ T839] name failslab, interval 1, probability 0, space 0, times 0 [ 46.060254][ T839] CPU: 0 PID: 839 Comm: syz.4.151 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 46.069800][ T839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 46.079695][ T839] Call Trace: [ 46.082814][ T839] [ 46.085591][ T839] dump_stack_lvl+0x151/0x1c0 [ 46.090107][ T839] ? io_uring_drop_tctx_refs+0x190/0x190 [ 46.095581][ T839] dump_stack+0x15/0x20 [ 46.099568][ T839] should_fail+0x3c6/0x510 [ 46.103823][ T839] __should_failslab+0xa4/0xe0 [ 46.108445][ T839] ? alloc_vmap_area+0x19e/0x1a80 [ 46.113279][ T839] should_failslab+0x9/0x20 [ 46.117617][ T839] slab_pre_alloc_hook+0x37/0xd0 [ 46.122392][ T839] ? alloc_vmap_area+0x19e/0x1a80 [ 46.127251][ T839] kmem_cache_alloc+0x44/0x200 [ 46.131854][ T839] alloc_vmap_area+0x19e/0x1a80 [ 46.136540][ T839] ? vm_map_ram+0xa90/0xa90 [ 46.140880][ T839] ? kmem_cache_alloc_trace+0x115/0x210 [ 46.146260][ T839] ? __get_vm_area_node+0x117/0x360 [ 46.151301][ T839] __get_vm_area_node+0x158/0x360 [ 46.156155][ T839] __vmalloc_node_range+0xe2/0x8d0 [ 46.161099][ T839] ? kvm_dev_ioctl+0x164/0x1b20 [ 46.165790][ T839] ? file_end_write+0x1c0/0x1c0 [ 46.170476][ T839] ? kvm_dev_ioctl+0x164/0x1b20 [ 46.175159][ T839] __vmalloc+0x7a/0x90 [ 46.179065][ T839] ? kvm_dev_ioctl+0x164/0x1b20 [ 46.183751][ T839] kvm_dev_ioctl+0x164/0x1b20 [ 46.188265][ T839] ? selinux_file_alloc_security+0x120/0x120 [ 46.194080][ T839] ? __fget_files+0x31e/0x380 [ 46.198592][ T839] ? kvm_reboot+0x40/0x40 [ 46.202762][ T839] ? security_file_ioctl+0x84/0xb0 [ 46.207707][ T839] ? kvm_reboot+0x40/0x40 [ 46.211871][ T839] __se_sys_ioctl+0x114/0x190 [ 46.216393][ T839] __x64_sys_ioctl+0x7b/0x90 [ 46.220815][ T839] x64_sys_call+0x98/0x9a0 [ 46.225065][ T839] do_syscall_64+0x3b/0xb0 [ 46.229318][ T839] ? clear_bhb_loop+0x35/0x90 [ 46.233831][ T839] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.239562][ T839] RIP: 0033:0x7fdc25825819 [ 46.243815][ T839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.263254][ T839] RSP: 002b:00007fdc23e9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.271499][ T839] RAX: ffffffffffffffda RBX: 00007fdc259dcfa0 RCX: 00007fdc25825819 [ 46.279312][ T839] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 46.287124][ T839] RBP: 00007fdc23e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 46.294935][ T839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.302745][ T839] R13: 0000000000000000 R14: 00007fdc259dcfa0 R15: 00007ffe936e3eb8 [ 46.311079][ T839] [ 46.317140][ T839] syz.4.151: vmalloc error: size 44480, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 46.339017][ T837] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.367569][ T832] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.148: bg 0: block 248: padding at end of block bitmap is not set [ 46.381752][ T839] CPU: 0 PID: 839 Comm: syz.4.151 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 46.384557][ T844] tipc: Started in network mode [ 46.391284][ T839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 46.391297][ T839] Call Trace: [ 46.391301][ T839] [ 46.391307][ T839] dump_stack_lvl+0x151/0x1c0 [ 46.391332][ T839] ? io_uring_drop_tctx_refs+0x190/0x190 [ 46.391350][ T839] ? pr_cont_kernfs_name+0xf0/0x100 [ 46.408324][ T832] EXT4-fs error (device loop2): ext4_acquire_dquot:6187: comm syz.2.148: Failed to acquire dquot type 1 [ 46.408991][ T839] dump_stack+0x15/0x20 [ 46.412446][ T844] tipc: Node identity ffffffff, cluster identity 4711 [ 46.416277][ T839] warn_alloc+0x21a/0x390 [ 46.416301][ T839] ? zone_watermark_ok_safe+0x270/0x270 [ 46.424002][ T832] EXT4-fs (loop2): 1 truncate cleaned up [ 46.426876][ T839] ? __get_vm_area_node+0x16e/0x360 [ 46.446965][ T843] loop1: detected capacity change from 0 to 2048 [ 46.448481][ T839] __vmalloc_node_range+0x2c1/0x8d0 [ 46.448505][ T839] ? file_end_write+0x1c0/0x1c0 [ 46.448520][ T839] ? kvm_dev_ioctl+0x164/0x1b20 [ 46.448536][ T839] __vmalloc+0x7a/0x90 [ 46.493005][ T839] ? kvm_dev_ioctl+0x164/0x1b20 [ 46.497689][ T839] kvm_dev_ioctl+0x164/0x1b20 [ 46.502200][ T839] ? selinux_file_alloc_security+0x120/0x120 [ 46.508021][ T839] ? __fget_files+0x31e/0x380 [ 46.512534][ T839] ? kvm_reboot+0x40/0x40 [ 46.516697][ T839] ? security_file_ioctl+0x84/0xb0 [ 46.521644][ T839] ? kvm_reboot+0x40/0x40 [ 46.525809][ T839] __se_sys_ioctl+0x114/0x190 [ 46.530341][ T839] __x64_sys_ioctl+0x7b/0x90 [ 46.534755][ T839] x64_sys_call+0x98/0x9a0 [ 46.539000][ T839] do_syscall_64+0x3b/0xb0 [ 46.543280][ T839] ? clear_bhb_loop+0x35/0x90 [ 46.547770][ T839] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.553498][ T839] RIP: 0033:0x7fdc25825819 [ 46.557751][ T839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.577199][ T839] RSP: 002b:00007fdc23e9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.585441][ T839] RAX: ffffffffffffffda RBX: 00007fdc259dcfa0 RCX: 00007fdc25825819 [ 46.593252][ T839] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 46.601059][ T839] RBP: 00007fdc23e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 46.608873][ T839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.616816][ T839] R13: 0000000000000000 R14: 00007fdc259dcfa0 R15: 00007ffe936e3eb8 [ 46.624620][ T839] [ 46.627796][ T832] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,inlinecrypt,,errors=continue. Quota mode: writeback. [ 46.640692][ T839] Mem-Info: [ 46.641388][ T844] tipc: Node number set to 4294967295 [ 46.644405][ T839] active_anon:109 inactive_anon:11844 isolated_anon:0 [ 46.644405][ T839] active_file:14469 inactive_file:3201 isolated_file:0 [ 46.644405][ T839] unevictable:0 dirty:971 writeback:0 [ 46.644405][ T839] slab_reclaimable:8219 slab_unreclaimable:73581 [ 46.644405][ T839] mapped:32283 shmem:7252 pagetables:704 bounce:0 [ 46.644405][ T839] kernel_misc_reclaimable:0 [ 46.644405][ T839] free:1543557 free_pcp:15374 free_cma:0 [ 46.690535][ T832] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.691150][ T839] Node 0 active_anon:436kB inactive_anon:47376kB active_file:57876kB inactive_file:12804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129132kB dirty:3884kB writeback:0kB shmem:29008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4748kB pagetables:2816kB all_unreclaimable? no [ 46.737213][ T839] DMA32 free:2974676kB min:62568kB low:78208kB high:93848kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2978968kB mlocked:0kB bounce:0kB free_pcp:4292kB local_pcp:4236kB free_cma:0kB [ 46.764809][ T839] lowmem_reserve[]: 0 3941 3941 [ 46.769931][ T839] Normal free:3198544kB min:84884kB low:106104kB high:127324kB reserved_highatomic:0KB active_anon:436kB inactive_anon:48276kB active_file:57876kB inactive_file:12804kB unevictable:0kB writepending:3884kB present:5242880kB managed:4035584kB mlocked:0kB bounce:0kB free_pcp:57464kB local_pcp:46896kB free_cma:0kB [ 46.799276][ T839] lowmem_reserve[]: 0 0 0 [ 46.803503][ T839] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 723*4096kB (M) = 2974676kB [ 46.849565][ T839] Normal: 15*4kB (UME) 27*8kB (UME) 20*16kB (UE) 3*32kB (UE) 3*64kB (E) 3*128kB (UM) 9*256kB (U) 4*512kB (UM) 2*1024kB (ME) 5*2048kB (UME) 774*4096kB (UM) = 3188212kB [ 46.854889][ T30] kauditd_printk_skb: 507 callbacks suppressed [ 46.854906][ T30] audit: type=1326 audit(1732135124.244:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=833 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621663d819 code=0x7ffc0000 [ 46.866253][ T839] 24995 total pagecache pages [ 46.903901][ T30] audit: type=1326 audit(1732135124.244:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=833 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621663d819 code=0x7ffc0000 [ 46.928565][ T839] 0 pages in swap cache [ 46.932557][ T839] Swap cache stats: add 1, delete 1, find 1/1 [ 46.938893][ T839] Free swap = 124984kB [ 46.942872][ T839] Total swap = 124996kB [ 46.946864][ T839] 2097051 pages RAM [ 47.067054][ T857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.148'. [ 47.079130][ T30] audit: type=1400 audit(1732135124.464:1417): avc: denied { name_bind } for pid=831 comm="syz.2.148" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 47.581750][ T832] syz.2.148 (832) used greatest stack depth: 19824 bytes left [ 47.647073][ T30] audit: type=1400 audit(1732135124.464:1418): avc: denied { node_bind } for pid=831 comm="syz.2.148" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 47.667376][ T839] 0 pages HighMem/MovableOnly [ 47.678639][ T839] 343413 pages reserved [ 47.689419][ T839] 0 pages cma reserved [ 47.722727][ T30] audit: type=1326 audit(1732135125.104:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=862 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621663d819 code=0x7ffc0000 [ 47.745909][ T30] audit: type=1326 audit(1732135125.104:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=862 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621663d819 code=0x7ffc0000 [ 47.769130][ T30] audit: type=1326 audit(1732135125.104:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=862 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f621663d819 code=0x7ffc0000 [ 47.792372][ T30] audit: type=1326 audit(1732135125.104:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=862 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621663d819 code=0x7ffc0000 [ 47.824250][ T867] loop5: detected capacity change from 0 to 512 [ 47.848375][ T30] audit: type=1326 audit(1732135125.104:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=862 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621663d819 code=0x7ffc0000 [ 47.877575][ T30] audit: type=1326 audit(1732135125.104:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=862 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f621663d819 code=0x7ffc0000 [ 47.911731][ T863] device pim6reg1 entered promiscuous mode [ 47.920566][ T867] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 47.935670][ T867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 47.943789][ T867] System zones: 1-12 [ 47.948659][ T867] EXT4-fs (loop5): 1 truncate cleaned up [ 47.960555][ T867] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 48.623604][ T891] loop5: detected capacity change from 0 to 512 [ 48.650068][ T897] FAULT_INJECTION: forcing a failure. [ 48.650068][ T897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.675386][ T897] CPU: 1 PID: 897 Comm: syz.2.157 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 48.684939][ T897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 48.694833][ T897] Call Trace: [ 48.697958][ T897] [ 48.700733][ T897] dump_stack_lvl+0x151/0x1c0 [ 48.705248][ T897] ? io_uring_drop_tctx_refs+0x190/0x190 [ 48.710901][ T897] dump_stack+0x15/0x20 [ 48.714896][ T897] should_fail+0x3c6/0x510 [ 48.719140][ T897] should_fail_usercopy+0x1a/0x20 [ 48.724006][ T897] strncpy_from_user+0x24/0x2d0 [ 48.728691][ T897] ? kmem_cache_alloc+0xf5/0x200 [ 48.733475][ T897] getname_flags+0xf2/0x520 [ 48.737807][ T897] __x64_sys_rmdir+0x3c/0x50 [ 48.742230][ T897] x64_sys_call+0x274/0x9a0 [ 48.746599][ T897] do_syscall_64+0x3b/0xb0 [ 48.750821][ T897] ? clear_bhb_loop+0x35/0x90 [ 48.755340][ T897] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.761064][ T897] RIP: 0033:0x7f5a962bf819 [ 48.765314][ T897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.784757][ T897] RSP: 002b:00007f5a948f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 48.793004][ T897] RAX: ffffffffffffffda RBX: 00007f5a96477160 RCX: 00007f5a962bf819 [ 48.800812][ T897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 48.808620][ T897] RBP: 00007f5a948f6090 R08: 0000000000000000 R09: 0000000000000000 [ 48.816429][ T897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.824244][ T897] R13: 0000000000000000 R14: 00007f5a96477160 R15: 00007ffca0bbacb8 [ 48.832059][ T897] [ 48.848697][ T891] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.860420][ T891] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 48.870724][ T891] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.164: Corrupt directory, running e2fsck is recommended [ 48.883827][ T891] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 48.892142][ T891] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.164: corrupted in-inode xattr [ 48.917906][ T891] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.164: couldn't read orphan inode 15 (err -117) [ 48.938868][ T891] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 49.124642][ T910] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.136037][ T910] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 49.145888][ T910] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.164: Corrupt directory, running e2fsck is recommended [ 49.158682][ T910] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.169999][ T910] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 49.179897][ T910] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.164: Corrupt directory, running e2fsck is recommended [ 49.192545][ T910] EXT4-fs error (device loop5): ext4_find_dest_de:2113: inode #2: block 3: comm syz.5.164: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 49.357820][ T924] FAULT_INJECTION: forcing a failure. [ 49.357820][ T924] name failslab, interval 1, probability 0, space 0, times 0 [ 49.379689][ T924] CPU: 0 PID: 924 Comm: syz.2.175 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 49.389242][ T924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 49.399137][ T924] Call Trace: [ 49.402260][ T924] [ 49.405036][ T924] dump_stack_lvl+0x151/0x1c0 [ 49.409552][ T924] ? io_uring_drop_tctx_refs+0x190/0x190 [ 49.415016][ T924] dump_stack+0x15/0x20 [ 49.419006][ T924] should_fail+0x3c6/0x510 [ 49.423261][ T924] __should_failslab+0xa4/0xe0 [ 49.427865][ T924] ? audit_log_start+0x42f/0xa80 [ 49.432765][ T924] should_failslab+0x9/0x20 [ 49.437099][ T924] slab_pre_alloc_hook+0x37/0xd0 [ 49.441872][ T924] ? audit_log_start+0x42f/0xa80 [ 49.446645][ T924] kmem_cache_alloc+0x44/0x200 [ 49.451248][ T924] audit_log_start+0x42f/0xa80 [ 49.455847][ T924] ? audit_serial+0x30/0x30 [ 49.460184][ T924] ? __kasan_check_write+0x14/0x20 [ 49.465133][ T924] ? migrate_enable+0x1c1/0x2a0 [ 49.469817][ T924] audit_seccomp+0x61/0x1e0 [ 49.474166][ T924] ? migrate_disable+0xd9/0x190 [ 49.478844][ T924] __seccomp_filter+0xc08/0x1c60 [ 49.483618][ T924] ? file_end_write+0x1c0/0x1c0 [ 49.488306][ T924] ? __kasan_check_write+0x14/0x20 [ 49.493250][ T924] ? __secure_computing+0x300/0x300 [ 49.498284][ T924] ? __mutex_lock_slowpath+0x10/0x10 [ 49.503405][ T924] ? __kasan_check_write+0x14/0x20 [ 49.508354][ T924] ? fput_many+0x160/0x1b0 [ 49.512609][ T924] __secure_computing+0xf0/0x300 [ 49.517385][ T924] syscall_enter_from_user_mode+0xd5/0x1b0 [ 49.523022][ T924] do_syscall_64+0x1e/0xb0 [ 49.527273][ T924] ? clear_bhb_loop+0x35/0x90 [ 49.531788][ T924] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.537515][ T924] RIP: 0033:0x7f5a962bf819 [ 49.541770][ T924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.561209][ T924] RSP: 002b:00007f5a94938038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 49.569460][ T924] RAX: ffffffffffffffda RBX: 00007f5a96476fa0 RCX: 00007f5a962bf819 [ 49.577265][ T924] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000008 [ 49.585085][ T924] RBP: 00007f5a94938090 R08: 0000000000000000 R09: 0000000000000000 [ 49.592887][ T924] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.600698][ T924] R13: 0000000000000000 R14: 00007f5a96476fa0 R15: 00007ffca0bbacb8 [ 49.608516][ T924] [ 49.711046][ T941] FAULT_INJECTION: forcing a failure. [ 49.711046][ T941] name failslab, interval 1, probability 0, space 0, times 0 [ 49.723534][ T941] CPU: 0 PID: 941 Comm: syz.1.181 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 49.733014][ T941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 49.742909][ T941] Call Trace: [ 49.746031][ T941] [ 49.748808][ T941] dump_stack_lvl+0x151/0x1c0 [ 49.753328][ T941] ? io_uring_drop_tctx_refs+0x190/0x190 [ 49.758792][ T941] ? avc_has_perm_noaudit+0x348/0x430 [ 49.764054][ T941] dump_stack+0x15/0x20 [ 49.767994][ T941] should_fail+0x3c6/0x510 [ 49.772246][ T941] __should_failslab+0xa4/0xe0 [ 49.776842][ T941] should_failslab+0x9/0x20 [ 49.781193][ T941] slab_pre_alloc_hook+0x37/0xd0 [ 49.785952][ T941] kmem_cache_alloc_trace+0x48/0x210 [ 49.791072][ T941] ? tipc_nametbl_insert_publ+0x62/0x1490 [ 49.796629][ T941] tipc_nametbl_insert_publ+0x62/0x1490 [ 49.802010][ T941] ? _kstrtoull+0x3a0/0x4a0 [ 49.806350][ T941] ? __kasan_check_write+0x14/0x20 [ 49.811298][ T941] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 49.816157][ T941] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 49.821188][ T941] ? __kasan_check_write+0x14/0x20 [ 49.826137][ T941] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 49.830998][ T941] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 49.836044][ T941] tipc_nametbl_publish+0x18c/0x300 [ 49.841068][ T941] tipc_sk_publish+0x238/0x4b0 [ 49.845669][ T941] ? sock_init_data+0xc0/0xc0 [ 49.850182][ T941] ? tipc_sk_withdraw+0x890/0x890 [ 49.855037][ T941] ? fsnotify_perm+0x6a/0x5b0 [ 49.859552][ T941] tipc_sk_bind+0x25a/0x7f0 [ 49.863893][ T941] ? tsk_set_importance+0x1c0/0x1c0 [ 49.868924][ T941] ? check_stack_object+0xf4/0x130 [ 49.873873][ T941] tipc_bind+0x80/0x260 [ 49.877866][ T941] __sys_bind+0x388/0x400 [ 49.882030][ T941] ? __ia32_sys_socketpair+0xb0/0xb0 [ 49.887154][ T941] ? debug_smp_processor_id+0x17/0x20 [ 49.892358][ T941] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 49.898261][ T941] __x64_sys_bind+0x7a/0x90 [ 49.902600][ T941] x64_sys_call+0x17f/0x9a0 [ 49.907066][ T941] do_syscall_64+0x3b/0xb0 [ 49.911283][ T941] ? clear_bhb_loop+0x35/0x90 [ 49.915792][ T941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.921519][ T941] RIP: 0033:0x7f6e5f096819 [ 49.925777][ T941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.945218][ T941] RSP: 002b:00007f6e5d70f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 49.953462][ T941] RAX: ffffffffffffffda RBX: 00007f6e5f24dfa0 RCX: 00007f6e5f096819 [ 49.961270][ T941] RDX: 0000000000000010 RSI: 0000000020000180 RDI: 0000000000000003 [ 49.969083][ T941] RBP: 00007f6e5d70f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.976897][ T941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.984706][ T941] R13: 0000000000000000 R14: 00007f6e5f24dfa0 R15: 00007ffcc6d1c6c8 [ 49.992521][ T941] [ 51.560262][ T973] loop5: detected capacity change from 0 to 1024 [ 51.865607][ T973] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 51.886143][ T30] kauditd_printk_skb: 419 callbacks suppressed [ 51.886157][ T30] audit: type=1404 audit(1732135129.304:1842): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 51.919543][ T30] audit: type=1400 audit(1732135129.304:1843): avc: denied { write } for pid=968 comm="syz.5.189" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 51.942469][ T30] audit: type=1326 audit(1732135129.334:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=976 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc25825819 code=0x7ffc0000 [ 51.969059][ T30] audit: type=1326 audit(1732135129.334:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=976 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc25825819 code=0x7ffc0000 [ 51.992583][ T30] audit: type=1400 audit(1732135129.334:1846): avc: denied { map_create } for pid=976 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 52.012714][ T30] audit: type=1326 audit(1732135129.334:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=976 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc25825819 code=0x7ffc0000 [ 52.036441][ T30] audit: type=1326 audit(1732135129.334:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=976 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc25825819 code=0x7ffc0000 [ 52.060130][ T30] audit: type=1400 audit(1732135129.334:1849): avc: denied { prog_load } for pid=976 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 52.079630][ T30] audit: type=1326 audit(1732135129.334:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=976 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc25825819 code=0x7ffc0000 [ 52.102960][ T30] audit: type=1326 audit(1732135129.334:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=976 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc25825819 code=0x7ffc0000 [ 52.358084][ T592] EXT4-fs error (device loop5): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /24/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 52.570975][ T1023] FAULT_INJECTION: forcing a failure. [ 52.570975][ T1023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.584966][ T1023] CPU: 0 PID: 1023 Comm: syz.1.206 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 52.594600][ T1023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 52.604493][ T1023] Call Trace: [ 52.607615][ T1023] [ 52.610395][ T1023] dump_stack_lvl+0x151/0x1c0 [ 52.614907][ T1023] ? io_uring_drop_tctx_refs+0x190/0x190 [ 52.620388][ T1023] ? __alloc_pages+0x27e/0x8f0 [ 52.624978][ T1023] dump_stack+0x15/0x20 [ 52.628966][ T1023] should_fail+0x3c6/0x510 [ 52.633232][ T1023] should_fail_usercopy+0x1a/0x20 [ 52.638083][ T1023] copy_page_from_iter+0x2eb/0x640 [ 52.643030][ T1023] tun_get_user+0x76e/0x3aa0 [ 52.647458][ T1023] ? __x64_sys_openat+0x210/0x290 [ 52.652327][ T1023] ? tun_do_read+0x2010/0x2010 [ 52.656915][ T1023] ? kstrtouint_from_user+0x20a/0x2a0 [ 52.662120][ T1023] ? kstrtol_from_user+0x310/0x310 [ 52.667065][ T1023] ? avc_policy_seqno+0x1b/0x70 [ 52.671753][ T1023] ? selinux_file_permission+0x2c4/0x570 [ 52.677218][ T1023] tun_chr_write_iter+0x1e1/0x2e0 [ 52.682079][ T1023] vfs_write+0xd5d/0x1110 [ 52.686367][ T1023] ? putname+0xfa/0x150 [ 52.690353][ T1023] ? file_end_write+0x1c0/0x1c0 [ 52.695040][ T1023] ? __fdget_pos+0x209/0x3a0 [ 52.699463][ T1023] ? ksys_write+0x77/0x2c0 [ 52.703716][ T1023] ksys_write+0x199/0x2c0 [ 52.707884][ T1023] ? __ia32_sys_read+0x90/0x90 [ 52.712482][ T1023] ? debug_smp_processor_id+0x17/0x20 [ 52.717688][ T1023] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 52.723590][ T1023] __x64_sys_write+0x7b/0x90 [ 52.728018][ T1023] x64_sys_call+0x2f/0x9a0 [ 52.732271][ T1023] do_syscall_64+0x3b/0xb0 [ 52.736523][ T1023] ? clear_bhb_loop+0x35/0x90 [ 52.741037][ T1023] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.746766][ T1023] RIP: 0033:0x7f6e5f0952ff [ 52.751020][ T1023] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 52.770739][ T1023] RSP: 002b:00007f6e5d70f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 52.778982][ T1023] RAX: ffffffffffffffda RBX: 00007f6e5f24dfa0 RCX: 00007f6e5f0952ff [ 52.786790][ T1023] RDX: 000000000000006e RSI: 0000000020000180 RDI: 00000000000000c8 [ 52.794601][ T1023] RBP: 00007f6e5d70f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.802413][ T1023] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 52.810225][ T1023] R13: 0000000000000000 R14: 00007f6e5f24dfa0 R15: 00007ffcc6d1c6c8 [ 52.818044][ T1023] [ 53.328696][ T10] device bridge_slave_1 left promiscuous mode [ 53.334630][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.342095][ T10] device bridge_slave_0 left promiscuous mode [ 53.348196][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.355852][ T10] device veth1_macvtap left promiscuous mode [ 53.361695][ T10] device veth0_vlan left promiscuous mode [ 53.508913][ T1042] FAULT_INJECTION: forcing a failure. [ 53.508913][ T1042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.538043][ T1042] CPU: 1 PID: 1042 Comm: syz.4.215 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 53.547682][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 53.557572][ T1042] Call Trace: [ 53.560694][ T1042] [ 53.563469][ T1042] dump_stack_lvl+0x151/0x1c0 [ 53.567996][ T1042] ? io_uring_drop_tctx_refs+0x190/0x190 [ 53.573799][ T1042] dump_stack+0x15/0x20 [ 53.577789][ T1042] should_fail+0x3c6/0x510 [ 53.582062][ T1042] should_fail_usercopy+0x1a/0x20 [ 53.586906][ T1042] strncpy_from_user+0x24/0x2d0 [ 53.591593][ T1042] ? kmem_cache_alloc+0xf5/0x200 [ 53.596373][ T1042] getname_flags+0xf2/0x520 [ 53.600705][ T1042] getname+0x19/0x20 [ 53.604436][ T1042] do_sys_openat2+0xd7/0x820 [ 53.608863][ T1042] ? wait_for_completion_killable_timeout+0x10/0x10 [ 53.615284][ T1042] ? __mutex_lock_slowpath+0x10/0x10 [ 53.620405][ T1042] ? do_sys_open+0x220/0x220 [ 53.624837][ T1042] ? __kasan_check_write+0x14/0x20 [ 53.629779][ T1042] ? ksys_write+0x260/0x2c0 [ 53.634118][ T1042] __x64_sys_openat+0x243/0x290 [ 53.638805][ T1042] ? __ia32_sys_open+0x270/0x270 [ 53.643582][ T1042] ? debug_smp_processor_id+0x17/0x20 [ 53.648787][ T1042] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 53.654688][ T1042] ? exit_to_user_mode_prepare+0x39/0xa0 [ 53.660167][ T1042] x64_sys_call+0x6bf/0x9a0 [ 53.664496][ T1042] do_syscall_64+0x3b/0xb0 [ 53.668749][ T1042] ? clear_bhb_loop+0x35/0x90 [ 53.673263][ T1042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.678993][ T1042] RIP: 0033:0x7fdc25825819 [ 53.683243][ T1042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.702685][ T1042] RSP: 002b:00007fdc23e9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 53.710929][ T1042] RAX: ffffffffffffffda RBX: 00007fdc259dcfa0 RCX: 00007fdc25825819 [ 53.718747][ T1042] RDX: 000000000000275a RSI: 0000000020000040 RDI: 0000000000000005 [ 53.726640][ T1042] RBP: 00007fdc23e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 53.734450][ T1042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.742259][ T1042] R13: 0000000000000000 R14: 00007fdc259dcfa0 R15: 00007ffe936e3eb8 [ 53.750075][ T1042] [ 54.113228][ T1053] FAULT_INJECTION: forcing a failure. [ 54.113228][ T1053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.152880][ T1053] CPU: 0 PID: 1053 Comm: syz.4.219 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 54.162531][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 54.172426][ T1053] Call Trace: [ 54.175552][ T1053] [ 54.178324][ T1053] dump_stack_lvl+0x151/0x1c0 [ 54.182840][ T1053] ? io_uring_drop_tctx_refs+0x190/0x190 [ 54.188317][ T1053] ? vsnprintf+0x1dd/0x1c70 [ 54.192644][ T1053] dump_stack+0x15/0x20 [ 54.196640][ T1053] should_fail+0x3c6/0x510 [ 54.200896][ T1053] should_fail_usercopy+0x1a/0x20 [ 54.205752][ T1053] _copy_from_user+0x20/0xd0 [ 54.210265][ T1053] kstrtouint_from_user+0xca/0x2a0 [ 54.215216][ T1053] ? kstrtol_from_user+0x310/0x310 [ 54.220161][ T1053] ? snprintf+0xd6/0x120 [ 54.224250][ T1053] ? check_stack_object+0x114/0x130 [ 54.229710][ T1053] ? __kasan_check_read+0x11/0x20 [ 54.234569][ T1053] ? _copy_to_user+0x78/0x90 [ 54.239257][ T1053] proc_fail_nth_write+0xa6/0x290 [ 54.244120][ T1053] ? selinux_file_permission+0x2c4/0x570 [ 54.249584][ T1053] ? proc_fail_nth_read+0x210/0x210 [ 54.254618][ T1053] ? fsnotify_perm+0x6a/0x5b0 [ 54.259130][ T1053] ? security_file_permission+0x86/0xb0 [ 54.264518][ T1053] ? proc_fail_nth_read+0x210/0x210 [ 54.269547][ T1053] vfs_write+0x406/0x1110 [ 54.273713][ T1053] ? file_end_write+0x1c0/0x1c0 [ 54.278397][ T1053] ? __kasan_check_write+0x14/0x20 [ 54.283342][ T1053] ? mutex_lock+0xb6/0x1e0 [ 54.287595][ T1053] ? wait_for_completion_killable_timeout+0x10/0x10 [ 54.294021][ T1053] ? __fdget_pos+0x2e7/0x3a0 [ 54.298447][ T1053] ? ksys_write+0x77/0x2c0 [ 54.302699][ T1053] ksys_write+0x199/0x2c0 [ 54.306864][ T1053] ? __ia32_sys_read+0x90/0x90 [ 54.311466][ T1053] ? debug_smp_processor_id+0x17/0x20 [ 54.316670][ T1053] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 54.322574][ T1053] __x64_sys_write+0x7b/0x90 [ 54.327000][ T1053] x64_sys_call+0x2f/0x9a0 [ 54.331258][ T1053] do_syscall_64+0x3b/0xb0 [ 54.335507][ T1053] ? clear_bhb_loop+0x35/0x90 [ 54.340020][ T1053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.345747][ T1053] RIP: 0033:0x7fdc258242ff [ 54.350001][ T1053] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 54.369442][ T1053] RSP: 002b:00007fdc23e9e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 54.377684][ T1053] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc258242ff [ 54.385496][ T1053] RDX: 0000000000000001 RSI: 00007fdc23e9e0a0 RDI: 0000000000000003 [ 54.393304][ T1053] RBP: 00007fdc23e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 54.401113][ T1053] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 54.408932][ T1053] R13: 0000000000000000 R14: 00007fdc259dcfa0 R15: 00007ffe936e3eb8 [ 54.416744][ T1053] [ 56.551157][ T1091] device pim6reg1 entered promiscuous mode [ 57.042694][ T30] kauditd_printk_skb: 648 callbacks suppressed [ 57.042708][ T30] audit: type=1400 audit(1732135134.464:2500): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 57.072769][ T30] audit: type=1400 audit(1732135134.474:2501): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 57.094701][ T30] audit: type=1400 audit(1732135134.524:2502): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 57.117004][ T30] audit: type=1400 audit(1732135134.534:2503): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 57.139083][ T30] audit: type=1400 audit(1732135134.564:2504): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 57.161044][ T30] audit: type=1400 audit(1732135134.584:2505): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 57.183041][ T30] audit: type=1400 audit(1732135134.614:2506): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 57.205147][ T30] audit: type=1400 audit(1732135134.624:2507): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 57.227081][ T30] audit: type=1400 audit(1732135134.654:2508): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 57.249025][ T30] audit: type=1400 audit(1732135134.674:2509): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 57.551400][ T1099] FAULT_INJECTION: forcing a failure. [ 57.551400][ T1099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.564376][ T1099] CPU: 0 PID: 1099 Comm: syz.1.232 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 57.573990][ T1099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 57.583901][ T1099] Call Trace: [ 57.583913][ T1099] [ 57.583919][ T1099] dump_stack_lvl+0x151/0x1c0 [ 57.583944][ T1099] ? io_uring_drop_tctx_refs+0x190/0x190 [ 57.599777][ T1099] dump_stack+0x15/0x20 [ 57.603764][ T1099] should_fail+0x3c6/0x510 [ 57.608017][ T1099] should_fail_usercopy+0x1a/0x20 [ 57.612874][ T1099] _copy_from_user+0x20/0xd0 [ 57.617354][ T1099] strndup_user+0xb3/0x150 [ 57.621549][ T1099] __se_sys_mount+0x9b/0x3b0 [ 57.625985][ T1099] ? __x64_sys_mount+0xd0/0xd0 [ 57.630578][ T1099] ? debug_smp_processor_id+0x17/0x20 [ 57.635784][ T1099] __x64_sys_mount+0xbf/0xd0 [ 57.640211][ T1099] x64_sys_call+0x49d/0x9a0 [ 57.644549][ T1099] do_syscall_64+0x3b/0xb0 [ 57.648802][ T1099] ? clear_bhb_loop+0x35/0x90 [ 57.653316][ T1099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.659041][ T1099] RIP: 0033:0x7f6e5f096819 [ 57.663299][ T1099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.682741][ T1099] RSP: 002b:00007f6e5d70f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.690985][ T1099] RAX: ffffffffffffffda RBX: 00007f6e5f24dfa0 RCX: 00007f6e5f096819 [ 57.698794][ T1099] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 57.706604][ T1099] RBP: 00007f6e5d70f090 R08: 00000000200002c0 R09: 0000000000000000 [ 57.714418][ T1099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.722226][ T1099] R13: 0000000000000000 R14: 00007f6e5f24dfa0 R15: 00007ffcc6d1c6c8 [ 57.730041][ T1099] [ 61.178587][ T1138] FAULT_INJECTION: forcing a failure. [ 61.178587][ T1138] name failslab, interval 1, probability 0, space 0, times 0 [ 61.191143][ T1138] CPU: 1 PID: 1138 Comm: syz.4.246 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 61.200758][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 61.210654][ T1138] Call Trace: [ 61.213777][ T1138] [ 61.216662][ T1138] dump_stack_lvl+0x151/0x1c0 [ 61.221176][ T1138] ? io_uring_drop_tctx_refs+0x190/0x190 [ 61.226646][ T1138] dump_stack+0x15/0x20 [ 61.230640][ T1138] should_fail+0x3c6/0x510 [ 61.234888][ T1138] __should_failslab+0xa4/0xe0 [ 61.239490][ T1138] ? audit_log_start+0x42f/0xa80 [ 61.244262][ T1138] should_failslab+0x9/0x20 [ 61.249469][ T1138] slab_pre_alloc_hook+0x37/0xd0 [ 61.254245][ T1138] ? audit_log_start+0x42f/0xa80 [ 61.259020][ T1138] kmem_cache_alloc+0x44/0x200 [ 61.263625][ T1138] audit_log_start+0x42f/0xa80 [ 61.268218][ T1138] ? ebitmap_cmp+0x159/0x1c0 [ 61.272645][ T1138] ? audit_serial+0x30/0x30 [ 61.277022][ T1138] ? sidtab_context_to_sid+0x81/0xc60 [ 61.282190][ T1138] ? __cpuidle_text_end+0x2/0x2 [ 61.286876][ T1138] ? mls_context_isvalid+0xaa/0x3b0 [ 61.291911][ T1138] ? slow_avc_audit+0x3c0/0x3c0 [ 61.296598][ T1138] common_lsm_audit+0xd8/0x18b0 [ 61.301285][ T1138] ? ebitmap_destroy+0x4b/0xe0 [ 61.305883][ T1138] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 61.311265][ T1138] ? security_compute_sid+0x1ddb/0x1f40 [ 61.316648][ T1138] ? ipv6_skb_to_auditdata+0xd90/0xd90 [ 61.321940][ T1138] ? ksys_readahead+0x93/0x220 [ 61.326542][ T1138] slow_avc_audit+0x26c/0x3c0 [ 61.331056][ T1138] ? avc_get_hash_stats+0x180/0x180 [ 61.336088][ T1138] ? avc_has_perm_noaudit+0x2dd/0x430 [ 61.341298][ T1138] avc_has_perm+0x1f5/0x260 [ 61.345637][ T1138] ? avc_has_perm_noaudit+0x430/0x430 [ 61.350843][ T1138] ? security_transition_sid+0x7d/0x90 [ 61.356235][ T1138] selinux_socket_create+0x1c2/0x330 [ 61.361352][ T1138] ? selinux_socket_unix_may_send+0x2f0/0x2f0 [ 61.367251][ T1138] ? __kasan_check_write+0x14/0x20 [ 61.372195][ T1138] ? mutex_unlock+0xb2/0x260 [ 61.376620][ T1138] security_socket_create+0x77/0xb0 [ 61.381655][ T1138] __sock_create+0xd6/0x760 [ 61.385993][ T1138] ? exit_to_user_mode_prepare+0x39/0xa0 [ 61.391493][ T1138] ? irqentry_exit_to_user_mode+0xe/0x10 [ 61.396929][ T1138] __sys_socket+0x132/0x370 [ 61.401270][ T1138] ? sock_create_kern+0x50/0x50 [ 61.405956][ T1138] __x64_sys_socket+0x7a/0x90 [ 61.410469][ T1138] x64_sys_call+0x147/0x9a0 [ 61.414810][ T1138] do_syscall_64+0x3b/0xb0 [ 61.419063][ T1138] ? clear_bhb_loop+0x35/0x90 [ 61.423632][ T1138] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.429305][ T1138] RIP: 0033:0x7fdc25827737 [ 61.433557][ T1138] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.453226][ T1138] RSP: 002b:00007fdc23e9cfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 61.461430][ T1138] RAX: ffffffffffffffda RBX: 00007fdc259dcfa0 RCX: 00007fdc25827737 [ 61.469246][ T1138] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 61.477125][ T1138] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 61.485458][ T1138] R10: 0000000020000780 R11: 0000000000000286 R12: 0000000000000001 [ 61.493269][ T1138] R13: 0000000000000000 R14: 00007fdc259dcfa0 R15: 00007ffe936e3eb8 [ 61.501083][ T1138] [ 62.507121][ T30] kauditd_printk_skb: 176 callbacks suppressed [ 62.507136][ T30] audit: type=1400 audit(1732135139.934:2684): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 62.535628][ T30] audit: type=1400 audit(1732135139.964:2685): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 62.557623][ T30] audit: type=1400 audit(1732135139.984:2686): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 62.584479][ T30] audit: type=1400 audit(1732135140.004:2687): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 62.607933][ T30] audit: type=1400 audit(1732135140.004:2688): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 62.630048][ T30] audit: type=1400 audit(1732135140.004:2689): avc: denied { execmem } for pid=1144 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 62.649553][ T30] audit: type=1400 audit(1732135140.004:2690): avc: denied { map_create } for pid=1147 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 62.669049][ T30] audit: type=1400 audit(1732135140.004:2691): avc: denied { prog_load } for pid=1147 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 62.687894][ T30] audit: type=1400 audit(1732135140.004:2692): avc: denied { mounton } for pid=1147 comm="syz.1.248" path="/61/file0" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 62.710072][ T30] audit: type=1400 audit(1732135140.004:2693): avc: denied { prog_load } for pid=1145 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 64.094520][ T1161] FAULT_INJECTION: forcing a failure. [ 64.094520][ T1161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.107608][ T1161] CPU: 1 PID: 1161 Comm: syz.0.251 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 64.117229][ T1161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 64.127130][ T1161] Call Trace: [ 64.130250][ T1161] [ 64.133024][ T1161] dump_stack_lvl+0x151/0x1c0 [ 64.137538][ T1161] ? io_uring_drop_tctx_refs+0x190/0x190 [ 64.143013][ T1161] dump_stack+0x15/0x20 [ 64.147112][ T1161] should_fail+0x3c6/0x510 [ 64.151354][ T1161] should_fail_usercopy+0x1a/0x20 [ 64.156221][ T1161] _copy_from_user+0x20/0xd0 [ 64.160650][ T1161] strndup_user+0xb3/0x150 [ 64.164900][ T1161] __se_sys_mount+0x9b/0x3b0 [ 64.169323][ T1161] ? __x64_sys_mount+0xd0/0xd0 [ 64.173932][ T1161] ? debug_smp_processor_id+0x17/0x20 [ 64.179130][ T1161] __x64_sys_mount+0xbf/0xd0 [ 64.183559][ T1161] x64_sys_call+0x49d/0x9a0 [ 64.187892][ T1161] do_syscall_64+0x3b/0xb0 [ 64.192231][ T1161] ? clear_bhb_loop+0x35/0x90 [ 64.196743][ T1161] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.202558][ T1161] RIP: 0033:0x7f621663d819 [ 64.206830][ T1161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.226254][ T1161] RSP: 002b:00007f6214cb6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.234499][ T1161] RAX: ffffffffffffffda RBX: 00007f62167f4fa0 RCX: 00007f621663d819 [ 64.242310][ T1161] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 64.250124][ T1161] RBP: 00007f6214cb6090 R08: 0000000020000480 R09: 0000000000000000 [ 64.257934][ T1161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.265749][ T1161] R13: 0000000000000000 R14: 00007f62167f4fa0 R15: 00007ffd922bc168 [ 64.273557][ T1161] [ 67.414485][ T1191] FAULT_INJECTION: forcing a failure. [ 67.414485][ T1191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.427381][ T1191] CPU: 1 PID: 1191 Comm: syz.4.262 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 67.436965][ T1191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 67.446863][ T1191] Call Trace: [ 67.449985][ T1191] [ 67.452767][ T1191] dump_stack_lvl+0x151/0x1c0 [ 67.457379][ T1191] ? io_uring_drop_tctx_refs+0x190/0x190 [ 67.462844][ T1191] dump_stack+0x15/0x20 [ 67.466837][ T1191] should_fail+0x3c6/0x510 [ 67.471085][ T1191] should_fail_usercopy+0x1a/0x20 [ 67.475944][ T1191] _copy_from_user+0x20/0xd0 [ 67.480378][ T1191] strndup_user+0xb3/0x150 [ 67.484627][ T1191] __se_sys_mount+0x9b/0x3b0 [ 67.489049][ T1191] ? __x64_sys_mount+0xd0/0xd0 [ 67.493653][ T1191] ? debug_smp_processor_id+0x17/0x20 [ 67.498857][ T1191] __x64_sys_mount+0xbf/0xd0 [ 67.503284][ T1191] x64_sys_call+0x49d/0x9a0 [ 67.507623][ T1191] do_syscall_64+0x3b/0xb0 [ 67.511875][ T1191] ? clear_bhb_loop+0x35/0x90 [ 67.516390][ T1191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.522119][ T1191] RIP: 0033:0x7fdc25825819 [ 67.526372][ T1191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.545811][ T1191] RSP: 002b:00007fdc23e9e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.554171][ T1191] RAX: ffffffffffffffda RBX: 00007fdc259dcfa0 RCX: 00007fdc25825819 [ 67.561981][ T1191] RDX: 0000000020000180 RSI: 00000000200000c0 RDI: 0000000020000080 [ 67.569793][ T1191] RBP: 00007fdc23e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 67.577606][ T1191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.585413][ T1191] R13: 0000000000000000 R14: 00007fdc259dcfa0 R15: 00007ffe936e3eb8 [ 67.593230][ T1191] [ 67.600064][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 67.600077][ T30] audit: type=1400 audit(1732135145.024:2847): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 67.628118][ T30] audit: type=1400 audit(1732135145.024:2848): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 67.650248][ T30] audit: type=1400 audit(1732135145.024:2849): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 67.672383][ T30] audit: type=1400 audit(1732135145.024:2850): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 67.694138][ T30] audit: type=1400 audit(1732135145.024:2851): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 67.715742][ T30] audit: type=1400 audit(1732135145.024:2852): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 67.737417][ T30] audit: type=1400 audit(1732135145.024:2853): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 67.759299][ T30] audit: type=1400 audit(1732135145.024:2854): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 67.781651][ T30] audit: type=1400 audit(1732135145.024:2855): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 67.803592][ T30] audit: type=1400 audit(1732135145.024:2856): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 71.251018][ T1225] FAULT_INJECTION: forcing a failure. [ 71.251018][ T1225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.281166][ T1225] CPU: 0 PID: 1225 Comm: syz.1.268 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 71.290810][ T1225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 71.300699][ T1225] Call Trace: [ 71.303830][ T1225] [ 71.306602][ T1225] dump_stack_lvl+0x151/0x1c0 [ 71.311112][ T1225] ? io_uring_drop_tctx_refs+0x190/0x190 [ 71.316582][ T1225] dump_stack+0x15/0x20 [ 71.320572][ T1225] should_fail+0x3c6/0x510 [ 71.324828][ T1225] should_fail_usercopy+0x1a/0x20 [ 71.329687][ T1225] _copy_from_user+0x20/0xd0 [ 71.334113][ T1225] strndup_user+0xb3/0x150 [ 71.338368][ T1225] __se_sys_mount+0x9b/0x3b0 [ 71.342795][ T1225] ? __x64_sys_mount+0xd0/0xd0 [ 71.347393][ T1225] ? debug_smp_processor_id+0x17/0x20 [ 71.352609][ T1225] __x64_sys_mount+0xbf/0xd0 [ 71.357032][ T1225] x64_sys_call+0x49d/0x9a0 [ 71.361369][ T1225] do_syscall_64+0x3b/0xb0 [ 71.365617][ T1225] ? clear_bhb_loop+0x35/0x90 [ 71.370130][ T1225] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.375859][ T1225] RIP: 0033:0x7f6e5f096819 [ 71.380117][ T1225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.399557][ T1225] RSP: 002b:00007f6e5d6cd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.407801][ T1225] RAX: ffffffffffffffda RBX: 00007f6e5f24e160 RCX: 00007f6e5f096819 [ 71.415611][ T1225] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 71.423423][ T1225] RBP: 00007f6e5d6cd090 R08: 0000000020000340 R09: 0000000000000000 [ 71.431234][ T1225] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 71.439050][ T1225] R13: 0000000000000000 R14: 00007f6e5f24e160 R15: 00007ffcc6d1c6c8 [ 71.446954][ T1225] [ 72.787823][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 72.787838][ T30] audit: type=1400 audit(1732135150.214:2976): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 72.815692][ T30] audit: type=1400 audit(1732135150.214:2977): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 72.837759][ T30] audit: type=1400 audit(1732135150.264:2978): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 72.859938][ T30] audit: type=1400 audit(1732135150.284:2979): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 72.881844][ T30] audit: type=1400 audit(1732135150.304:2980): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 72.903811][ T30] audit: type=1400 audit(1732135150.324:2981): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 72.925757][ T30] audit: type=1400 audit(1732135150.354:2982): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 72.947708][ T30] audit: type=1400 audit(1732135150.374:2983): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 72.969829][ T30] audit: type=1400 audit(1732135150.394:2984): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 72.992911][ T30] audit: type=1400 audit(1732135150.424:2985): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 73.370795][ T290] syz-executor (290) used greatest stack depth: 19296 bytes left [ 74.318744][ T346] device bridge_slave_1 left promiscuous mode [ 74.324675][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.332173][ T346] device bridge_slave_0 left promiscuous mode [ 74.338249][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.345932][ T346] device veth1_macvtap left promiscuous mode [ 74.351802][ T346] device veth0_vlan left promiscuous mode [ 74.890041][ T346] tipc: Left network mode [ 75.728934][ T346] device bridge_slave_1 left promiscuous mode [ 75.734984][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.742392][ T346] device bridge_slave_0 left promiscuous mode [ 75.748360][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.755839][ T346] device bridge_slave_1 left promiscuous mode [ 75.762066][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.769430][ T346] device bridge_slave_0 left promiscuous mode [ 75.775361][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.783508][ T346] device bridge_slave_1 left promiscuous mode [ 75.789567][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.796900][ T346] device bridge_slave_0 left promiscuous mode [ 75.802982][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.811184][ T346] device veth1_macvtap left promiscuous mode [ 75.817009][ T346] device veth0_vlan left promiscuous mode [ 75.822827][ T346] device veth1_macvtap left promiscuous mode [ 75.829013][ T346] device veth0_vlan left promiscuous mode [ 75.834742][ T346] device veth1_macvtap left promiscuous mode [ 75.840751][ T346] device veth0_vlan left promiscuous mode [ 77.801014][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 77.801029][ T30] audit: type=1400 audit(1732135155.224:3051): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 77.828815][ T30] audit: type=1400 audit(1732135155.224:3052): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 77.850801][ T30] audit: type=1400 audit(1732135155.274:3053): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 77.872978][ T30] audit: type=1400 audit(1732135155.294:3054): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 77.895015][ T30] audit: type=1400 audit(1732135155.324:3055): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 77.916995][ T30] audit: type=1400 audit(1732135155.344:3056): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 77.938982][ T30] audit: type=1400 audit(1732135155.364:3057): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 77.960950][ T30] audit: type=1400 audit(1732135155.384:3058): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 77.982901][ T30] audit: type=1400 audit(1732135155.414:3059): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 78.004831][ T30] audit: type=1400 audit(1732135155.434:3060): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0