last executing test programs: 7.745886962s ago: executing program 3 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001316715f8bda55daef50de7e260c04d688a7328754a4aee2669e194b7106a1dc5e64e4934b4d51016d39f32454740a1dfc6798461c881b78d70007287d429a9ac7c3cb1259c1b78bc6b9ce1c6d094a6db27137c02326b3127af0f8b13f2a59a8a6bf8c1b898d1854b364f23a2b51e5e9857b459046cc281aaa23fdf3ab789dad675e6afbe20a2a30fe2eb520dfbfb4403991bd3a14fe3c07a71bd6163d52ddf42bdfce7fa1546954452e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000004c0)) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000001500000818110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14, 0x800) accept$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000380)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000007000047fc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 5.249909005s ago: executing program 4 (id=638): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getresuid(0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x800}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@obj_role={'obj_role', 0x3d, '\xe0(\x006wE\xff{\xf9\x17\x98\f.\xeb\xde\xf1*\xbf\x8b\\:\x19\xf9Q\xc0\xb3\xaf\xf7\x0f\xf7\xb8\x80\x96XW\x98v\x93\x97.4p\xd0\xb6;\xfa\xc6\xea\x13\xc0\x03\xd5\xa98}\xf5Q\xf9\xc6KYG\x8b\xb1\xba\x87\xec\xbd\xdb\a\x84\xff\a\x86\xd7\x87+\xa7C\x19R\xfc\a\xf5\xb2k\x8fa\x1fw\xd3<=;\xd3\x83Q\x1a-.\xd7BK\xec\x12=[,K%'}}, {@obj_role={'obj_role', 0x3d, '6'}}, {@euid_gt={'euid>', r0}}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x5}, 0x1c) write$P9_RGETLOCK(r5, &(0x7f0000000040)={0x21, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, '%+('}}, 0xe6da) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r6, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.161839985s ago: executing program 2 (id=641): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x75f, 0x10f242) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) sendfile(r0, r0, 0x0, 0x24002de8) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00110d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x40, 0x17, 0xd, "c421a10832579f624f1de557f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000d80)={0x40, 0x31, 0xd, "471ccdb657dad24d806c5e9cdc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x0, 0x4, 0xc, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec"}) 4.22410738s ago: executing program 4 (id=647): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000300), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x36a3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x400000}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x20}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x248, &(0x7f0000000540)={[{@data_ordered}, {@usrjquota}, {}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@dioread_nolock}, {@usrjquota}, {@nodelalloc}, {@delalloc}, {@nodiscard}], [{@uid_lt}, {@measure}]}, 0xfd, 0x4ad, &(0x7f00000010c0)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0xc0, &(0x7f0000000400)={[{@subsystem='rlimit'}, {@subsystem='net_cls'}, {@subsystem='net'}]}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000240)={0x3920e, r5, 0x0, 0x0, 0x10000000000000}) 4.05148762s ago: executing program 0 (id=649): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x698, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000001) 4.022763201s ago: executing program 0 (id=650): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000cc0)={0x0, r3}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000cff000/0x3000)=nil, 0x3000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb2c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000100), &(0x7f00000001c0)=r4}, 0x20) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.802574602s ago: executing program 4 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000300), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x36a3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x400000}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x20}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x248, &(0x7f0000000540)={[{@data_ordered}, {@usrjquota}, {}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@dioread_nolock}, {@usrjquota}, {@nodelalloc}, {@delalloc}, {@nodiscard}], [{@uid_lt}, {@measure}]}, 0xfd, 0x4ad, &(0x7f00000010c0)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0xc0, &(0x7f0000000400)={[{@subsystem='rlimit'}, {@subsystem='net_cls'}, {@subsystem='net'}]}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000240)={0x3920e, r5, 0x0, 0x0, 0x10000000000000}) 3.802271201s ago: executing program 3 (id=653): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000cc0)={0x0, r3}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000cff000/0x3000)=nil, 0x3000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) fsopen(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb2c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000100), 0x0}, 0x20) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.801618662s ago: executing program 0 (id=654): r0 = socket$inet(0x2, 0x802, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x101) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000300)={0x3, 0x0, 0x7, 0x9, 0xa, &(0x7f0000000940)}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0x1, 0x5521, &(0x7f0000005a80)="$eJzs3E1vG1UXAODjpGmbtm/fCLFg15EqpESqTZ1+CHYFWvEhWlUFFqzAsR3Lre2JYscJWbFgiVjwTxBIrFjyG1iwZodYgNghgTx3Ag0foihOTJvnkcZn7vX1mXOtqtKZiRzAsbWU/fRDJc7HYkTMR8S5iOK8Uh6FGyk8ExEXImLuoaNSzv82cTIizkTE+UnylLNSvvXJpfHFa9+//uOXX586cfbTL76Z3a6BWXs2Ivob6Xy7n2LeSfF+Od8Yd4vYvzouY3qj/6Ac5ylut9eKDNuNvXWNIl7ppPX5xtZwEtd7jeYkdrrrxfzGIF1wOO7s5Sk+cL+xWYxb7bUidod5ETu7qa6d3fR/2+5wlPK0ynzvF+ljNNqLab6900772XhQxOZgVM6nvHmrvTOJ4zKWl4tm3msVdawd5Jv+b3ujO9jaycbtzWE3H2TXavXna/Xr1fpm3mqP2lerjX7r+tVsudObLKuO2o3+jU6ed3rtWjPvr2TLnWazWq9nyzfba93GIKvXa1dql6vXVsqzS9krd97Oeq1seRJf6g62Rt3eMFvPN7P0iZVstXblhZXsYj178/bd7O69W7du333r3Zvv3Hnx9msvl4v+VFa2vHp5dbVav1xdra8co/1/WBY9xf3DgVRmXQDA40f/D8zC4fX/m/ciDr//D/3/VEy5/13U//+r/W8/FzHT/cOB6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6tbxc+e7U4WUrjs+X8/8qpp8pxJSLmIuKXvzAfJ/flnC/zLPzN+oU/1PBVJYoMk2ucKo8zEXGjPH7+/2F/CwAAAPDk+vyDCx+nbj29LM26II5Sumkzd+69KeWrRMTC0ndTyjY3eXn6n9ctPlK2yb/vE7Fz4KqS4gbW6SklS7fcTkwr2yOZ3xdOPxQqKcwdaTkAAMCR2N8JHG0XAgAAwFH6aNYFMBuV2HuUufcsuPjL+98fCC7uGwEAAACPocqsCwAAAAAOXdH/+/0/AAAAeLKl3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fd27uZGbSCOA+gfgwP5UlCUe1rJDcpICTnmEimigDRBATmQFtIANZBbSoggwjNi8cJhZRt7d/WeZAYb++cZBIeZsQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Jb+lJvlr+8ff7TN2R/a6aY1AAAAwDW7crOs3szT/ut8/G0+9D7vjyKiiIhrffdxvKhljnNOeXf+z/Pzy3t1+B1RJRzvMc3bq4j4lLd/7279LQAAAMDztV2tF6m3nl7mQ1eIPqVBm+LN547yRhFRzv9efvCtSVpxzPtweYdmjr/vSXxtfH1dNYA16ygsDblNukp7kOrvfhq1m50Vo1QUVy87VbKztgMAAD0a14p+eyEAAAD06cvQFWAY1WxqfhY/TwVOU5Gn917W9gAAAIAnqPnT1AAAAMDjl6b5q/5/T+v/Haz/BwAAAMNI6/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwS7tys9yu1ou2OftDO920BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6zP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCb3/3l/8TUOJPMvTaWnkeStVNj69TYOzeO/jC+fg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EW/++X/xNQ4k8ydNpaOR5K1q8bWVWPvQePowXj7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bTGUYYBAH9mZmdrW8UYJYeIKHjQi023tbU38aAED34EIaTbGrv1TxvEliLm4k1y7kX0KCIo8dbv0HMLvdRbD3uo4FmZ2ZnstA24apnZJr8fvPM+MwzzPu8MhDzzTgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBt/M40zorNwiROq2O37l9bL/rbD/WFG9t3lotWxEmbST8ZXmruJEsRcXS63+sgIQAAAPa/rK7vI+JuvrNa9OlCWf/n9TlFzf/9M5O4que/qEvWh+v/uvYv2m+/3nthd6CF6VjnNkbD44+mcmBL32f/8YxeeefLdy9Z+UDS97eeHxcPKI/k25s33+2X4aE2sgUA/otjdV8F9e9DRT/oMjEADoxeo/Cu6/9soducAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANow3oqjdZxExHJvGhdu37+2vld/Y/vOct1OX7++HV9Pr1lcIo+Icxuj4fFWZzPfLl+5emFtNBpeaj94OSK6Gv3tavoXPpzh5IhO7o/gMQVp9bDnJZ8nI+jwhxIAAPtSXrWirr+b76wWx5LFiL9+eLD+f60Rx4z1/72PTt9qjtWs/wetzXD+rWxe/Gzl8pWrb2xcXDs/PD/85M0Tg7cGJ8+cOnVmpXxXsuKNCQAAAP9Pv2rN+j9dfHT9/0gjjhnr/8+/G3zVHCtT/+9puujXdSYAAAAH23Ov/PlHssfxpN+PL9c2Ny8NJtvd/ROTbQep/muHqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f+nf3zx5+Y1s4g4XK3/H1v/dHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5ff/6e4nD2lEvP7qJK7+DeBM9X/23jc/Ncdqfv9/sr0pzqV0aXI/yn4porfUdUYAAADsZ09VrSj2f893Vj/+5cgHfd//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTt7wAAAP//QZw82g==") r2 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r2}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)) socket(0xf, 0x2, 0x5) 3.595207022s ago: executing program 1 (id=656): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000340)={{&(0x7f000068a000/0x2000)=nil, 0x2000}, 0x1}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x101c08a, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x7, 0x2da, &(0x7f0000000f00)="$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") r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031400d877120006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x40}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x2, 0x8) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180010000000f6142500"/24], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x10) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x2000e881) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r10 = dup2(r9, r9) bind$vsock_stream(r10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) pipe2$9p(&(0x7f0000002180), 0x0) 3.452583234s ago: executing program 4 (id=657): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getresuid(0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x800}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@obj_role={'obj_role', 0x3d, '\xe0(\x006wE\xff{\xf9\x17\x98\f.\xeb\xde\xf1*\xbf\x8b\\:\x19\xf9Q\xc0\xb3\xaf\xf7\x0f\xf7\xb8\x80\x96XW\x98v\x93\x97.4p\xd0\xb6;\xfa\xc6\xea\x13\xc0\x03\xd5\xa98}\xf5Q\xf9\xc6KYG\x8b\xb1\xba\x87\xec\xbd\xdb\a\x84\xff\a\x86\xd7\x87+\xa7C\x19R\xfc\a\xf5\xb2k\x8fa\x1fw\xd3<=;\xd3\x83Q\x1a-.\xd7BK\xec\x12=[,K%'}}, {@obj_role={'obj_role', 0x3d, '6'}}, {@euid_gt={'euid>', r0}}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x5}, 0x1c) write$P9_RGETLOCK(r5, &(0x7f0000000040)={0x21, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, '%+('}}, 0xe6da) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r6, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.228942634s ago: executing program 3 (id=658): syz_emit_ethernet(0x7a, &(0x7f0000000500)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @private0}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000140)="0c268a", 0x3, 0x11, 0x0, 0x0) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000980)=""/220, 0xfc}], 0x1}, 0x40010063) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x80000, @remote, 0x6}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ftruncate(r4, 0x8001) sendfile(r5, r4, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073119a000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000040020000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TCSETS(0xffffffffffffffff, 0x8910, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000040)={0x242, 0xcf4, 0x7, 0x6}, 0x10) fadvise64(r1, 0x7a1a, 0xa000000000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000240)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="59327c00e2abb8fc", 0x8}], 0x1}}], 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="a54d1ccd93b998fb63b1573bcf3581142dc228dbfb4b6ccc62bc7f5d8fb295677b708e3e796dd7bc1324466289eefb1a24ac1b4cf3b0461546f234ec85698c037041791774b5772354b88131cb46e56752d06c61bbb29de99b5a9ba9c5dfe7331cb45694973ab14e95", 0x69}, {&(0x7f0000001080)="fdfb554cdca9ff67c47917a3e049e9436d04074a0b07cd28f0d126ee5ec8045293e989e1861b1b9adc8d8efd74ccd596f523d5dc25c1990408fa10afece212232b086fcbf5f0abdb9a53f8a810ee02e6a4c6efb0979e640830b2dbe2151113aabfebe6536534463f7e8f21cad07adcfd49449853624f5f07a152b0f226926dfc85308152460209b57438db0b708d528b21ea1883f828faab29295e539bfbd776c0b6802a673d7b50fc8ba85937f1fb92dacf011ca5d86bad3f3c972eb0ac88d780945315e092e4d7d64c68dbcce858d6b81c7f5a73bdc212e77e66786a6fb03a6960b6fca4e29f89bfd59a249e14c3bcb2fb258b2ce124fd", 0xf8}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 3.113274725s ago: executing program 3 (id=659): writev(0xffffffffffffffff, &(0x7f00000017c0)=[{&(0x7f0000000400)="a1463c13506168f92ed0743ec5fed6b5fa52f58b8c7c9a84b67293bfa0b93590c2bc0f71bf662feaddcab49e7dfffe88292a2bd566684776ae8426d5251d7698efe7ab5aac8d4f122c7c99ad520cb5f5566451662e67872742fbacc9ae105608ea9e64aef23db480f517f602e96f99ca5a56063557f5066d46f48f06cd880da21e07d1827c24a30af0cab681ce587598d4a6f34a59941f20e973e4025b8f36a81397d1bb973878151d6a17ecb47895e3d2ea3ec2f4de10ba472bb19f4ae2838d760c94a11acf8c3ea72fd940468cbfeb4d90bbb1d8dfe543fc2f5b99202aeb23e29f", 0xe2}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000000)="821eafaef0c096a987887844a850f03a03920181113b6f4f3ce84a31367e8aaf7ee10d1de654ab73f1056600d099809b6f390b127d783583c3b8e660686a6d008bd792e85a9d2d1770f3cf5e65a76cdc468fb3d62459b6de18ad75224b8ac9", 0x5f}, {&(0x7f0000000240)="bed17c264886933aa6bf6f8398f803a93a789675d15eb3f79e8fb650ebbe88d232ce4ea67c46cacc14d8a6f881dff9732f51e9ce6c88c51de93eab1e6d9a7e34c66ce5faf44bec0036e741", 0x4b}, {&(0x7f0000000300)="55e8b3229940166553a2d5099014e0291c19fefb7f0797417b7337f78b9401c3a28919878183f9d963a3ce6c10170b26995a9a64aaf3eaf97615cebd32bec2ade58d0fcb2b28686e7a58ff6698f8038bea9e20c3b1cfcde13b2ea81513f75d8b2f5f37d70168a61fd2ec4ee5", 0x6c}, {&(0x7f0000000080)="e9d8401e4ca4", 0x6}, {&(0x7f0000001580)="2463247a3c35c50f3a54f0ebc0d8f955a0542b302129abef475a0ea840aac8e274de8b8441ad44c34d352a60ce0fc0f53205936381fe0754f6ee21e5970a7da349cb13c6109bb0e3f3126629748adf1846aed5fa1a38df515e9874c6f7d0567ebe82128f89c70ca51acb", 0x6a}, {&(0x7f0000001600)="01696bed101b641dab793783c4d36d40915a51e9278b21c6ea3a00be0f4fbe762d7f7048b8f42a18eaf495b69898cdb11f2bb1cfb3d9ab12afed3bb043d1b8e1804bd9abbaf68369435fb84875bcae9162ca3d1b52cc28933af01dd238b026cafe9d987e124fe8c517d7d2b19285f3f693603d22011b3d9ec9eabe9596883b2a5f6897fc6356105047c9c759f3374e75bfb257a22892aa78048434a9b04b5da56b5d1cfbf9797831155e2f33d543eae5025341e6ce0cd8778d8930357c79940cce7fd9cef63d739df30cc6e2fce41a2064b8477dab493bb471380ae7f87032200659b98b94fc49459b4b2fc4002f4d7d20fdd11eac", 0xf5}, {&(0x7f0000001700)="9bd44f8b69abf13e2c541a37a5e37bf9f6c7977dadb3541c2318d95fbd6e810b8987bfc6379bf8c6f77072ff5e49d6ac8f14164c7ce0cce5bfb413aaee7763adb1e3f83ff1102e42837ddfa96d4390fbfe6e750de2121f5e5dc716a6c0929d7bea22592c78c6a57cfdea8f5b0490774700d56e5298a59521be498999b5f99035a1842cbb65b41f340cf8b3e0f80aac517ef307", 0x93}], 0x9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000001880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10}, 0x18) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf5, 0x31b, &(0x7f0000000440)="$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") syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="0f539af21094", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x8, 0x2000000, 0x23aa34b, 0x401, 0x8}}, 0x50) lgetxattr(&(0x7f0000002140)='./file0\x00', &(0x7f0000000000)=@random={'user.', 'fuse\x00'}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000000100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/15], 0x48) 2.931754606s ago: executing program 0 (id=660): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x698, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000001) 2.910610766s ago: executing program 0 (id=661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x3245008, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x193, &(0x7f0000000b00)="$eJzs281qE10YB/B/+vataV0kC1fiYpauQtMrMEgFMSAoWSgIim1AOlKwENCF7c6FN+HluNUrcdmFMNJOYz9IQEGb2Px+m3ngzB+ec2A+zsA8v/V6Z2t3b/hs+DnNRiNLd1LksJF2ljJ2EADgKjmsqnyrqqq6dpDVT6mqatYdAQB/m+c/ACyex0+ePuj1+5uPiqKZlB9Gg9GgPtbjvWFepcx21tPK9xy9IJyo63v3+5vrxbF2Ppb7J/n90eC/8/luWmlPznfrfHE+/3/WzuY30sqNyfmNifmV3F45k++kla8vs5syWznKnubfd4vi7sP+hfz14/MAAADgKugUP03cv3c608brfK/xy98HLuyvl3NzebZzB4BFtff23c6Lstx+M6/Fl7W60XnpZ3oxXtJ56ef3i9XMRRt/sGgkmYM2/qGiOV6xGd6UgEtxevXPuhMAAAAAAAAAAAAAAGCay/ivaNZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDx/AgAAP//fVyNVw==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, r3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000", 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x200020, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) creat(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x8, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0}) 2.678445407s ago: executing program 1 (id=662): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x41, 0x2f9, &(0x7f0000000e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x282, 0x24) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 2.670012207s ago: executing program 1 (id=663): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) (fail_nth: 5) 2.289593619s ago: executing program 3 (id=664): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000240)='mm_page_alloc\x00', r2}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r4, 0xe0ffff, 0x4101, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000003c0)='bpf_lsm_xfrm_policy_delete_security\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x12, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3480, 0x0, 0x0, 0x0, 0x9c}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x50, &(0x7f0000000580)=""/80, 0x41100, 0xa1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x0, 0xffff, 0x1}, 0x10, r6, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x2, 0x2, 0x6, 0x1}, {0x5, 0x1, 0xb, 0x3}], 0x10, 0x1, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000b, 0x10012, r8, 0x0) ftruncate(r8, 0x80000) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) dup3(r1, r0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000200)={[{@resuid}, {@delalloc}, {@nouid32}, {@commit={'commit', 0x3d, 0x5}}, {@norecovery}]}, 0x9, 0x613, &(0x7f0000000d80)="$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") 2.23041743s ago: executing program 1 (id=665): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x1008, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0xb, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e3000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x1b8, 0x0, 0x1b8, 0x460, 0x318, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'hsr0\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'pimreg1\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 2.14455727s ago: executing program 4 (id=666): syz_emit_ethernet(0x7a, &(0x7f0000000500)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @private0}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000140)="0c268a", 0x3, 0x11, 0x0, 0x0) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000980)=""/220, 0xfc}], 0x1}, 0x40010063) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x80000, @remote, 0x6}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ftruncate(r4, 0x8001) sendfile(r5, r4, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073119a000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000040)={0x242, 0xcf4, 0x7, 0x6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.943159941s ago: executing program 2 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xa68d7c519e801be0, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val}, {@nolazytime}, {@jqfmt_vfsv1}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7fff}}, {@grpquota}, {@errors_continue}, {@errors_continue}, {@test_dummy_encryption}]}, 0x1, 0x472, &(0x7f0000000c00)="$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") 1.918936131s ago: executing program 1 (id=668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000009000000000000000000000000000000000082e707f74ee6", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800eaff00"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.127984465s ago: executing program 4 (id=669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xa68d7c519e801be0, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, 0x0) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val}, {@nolazytime}, {@jqfmt_vfsv1}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7fff}}, {@grpquota}, {@errors_continue}, {@errors_continue}, {@test_dummy_encryption}]}, 0x1, 0x472, &(0x7f0000000c00)="$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") 1.004460005s ago: executing program 1 (id=670): r0 = socket$inet(0x2, 0x802, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x101) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000300)={0x3, 0x0, 0x7, 0x9, 0xa, &(0x7f0000000940)}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0x1, 0x5521, &(0x7f0000005a80)="$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") r2 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r2}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)) socket(0xf, 0x2, 0x5) 918.334726ms ago: executing program 2 (id=671): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x698, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000001) 642.629567ms ago: executing program 2 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="ead061d5b2543002fd21c95eaf7201b825bdc788b8decd509398dd394bdd5ae1", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x43}}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/reserved_size', 0x68000, 0x52) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x10000, 0x41e, 0xe, 0x20, 0x1, 0xfffffff8, '\x00', r2, r4, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x23b, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 609.836087ms ago: executing program 2 (id=673): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x41, 0x2f9, &(0x7f0000000e40)="$eJzs3M9rE1sUwPGTNK9JU9pk8XjwFOlFN7oZ2rgXgrQgBpTaiD9AmDYTDRmTkAmViNi4cuu/YeiyGylo/QO6cefKjbjpRnBT0BpJZmIn7aRNou205PuBck/n3pPcyZ2EMwMzW3dePc5nLS2rVyQYURIUqcmOSLwZOZYmRCQgAWk1o/bGiN3U5NL4t4/nlIgkU6nZeaXmkguXE0qpyam3T56tnt+ojN9em1wPy2b8wdbXxOfN/zb/3/q58ChnqZylCsWK0tVi8VNFXzQNlclZeU2pm6ahW4bKFSyjbPcXK87bSqlUVXohMxEtlQ3LUnqhqvJGVVWKqlKuKv2hnisoTdPURFSGx/ZUqyn1m5euz8/ryQHfdGnAPPx1Gwf2lsvtL8/7RmdPun50cwIAACdVu/4Pu+v/7c76P+C0QXf976hJrVn/37p773oP9f/6aJf6v7iv/nfOL6SjP2sWqf8HFdm/KV0fGbz+xylRHhOpr8ruN/rF/dXpVkD9DwAAAAAAAAAAAAAAAAAAAADAabDdaMQajUas2QbFjpt/YeeGkfb/fs8TR8O9/vZah5qrzvoPCdeNexER8+Vyejltt3Z/Mis5McWQaYnJj9bx4LDjuWup2YBqics7c8XJX1lOj3Tmz0hM4t75M3a+6sz/R6Lu/ITE5F/v/IRn/qhcvODK1yQmH5akKKZkWsf1bv7zGaWu3kjtyR+TjMcdcwAAAAAAnEaa+s3z/F3TuvXb+b1cH5j2PD8PyZmQv/sOAAAAAMCwsKpP87ppGuVDg9dOxqGDvzgDe37lPwwi/exFr8GbVhDo9sqRvj66Iwjaz2Q+cPCYM6ijy7k8s+Lj5F1BoJ/jcMqXqYaaB71rS7Tr4MkRrw/8oCDsPJW5uWWnsWfMlbWz3/1bnWP7CQIAAABwTHaLfr9nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8DqOx4n5vY8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASfErAAD//zVaEmc=") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 554.446568ms ago: executing program 0 (id=674): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback={0x100000000000000}}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x1, 0x101, 0x3, 0x2484c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) 473.271678ms ago: executing program 3 (id=675): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) 0s ago: executing program 2 (id=676): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getresuid(0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x800}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@obj_role={'obj_role', 0x3d, '\xe0(\x006wE\xff{\xf9\x17\x98\f.\xeb\xde\xf1*\xbf\x8b\\:\x19\xf9Q\xc0\xb3\xaf\xf7\x0f\xf7\xb8\x80\x96XW\x98v\x93\x97.4p\xd0\xb6;\xfa\xc6\xea\x13\xc0\x03\xd5\xa98}\xf5Q\xf9\xc6KYG\x8b\xb1\xba\x87\xec\xbd\xdb\a\x84\xff\a\x86\xd7\x87+\xa7C\x19R\xfc\a\xf5\xb2k\x8fa\x1fw\xd3<=;\xd3\x83Q\x1a-.\xd7BK\xec\x12=[,K%'}}, {@obj_role={'obj_role', 0x3d, '6'}}, {@euid_gt={'euid>', r0}}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x5}, 0x1c) write$P9_RGETLOCK(r5, &(0x7f0000000040)={0x21, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, '%+('}}, 0xe6da) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r6, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): [ 60.930459][ T1228] 9pnet_fd: Insufficient options for proto=fd [ 61.015863][ T1233] loop3: detected capacity change from 0 to 256 [ 61.042757][ T1233] FAT-fs (loop3): Directory bread(block 64) failed [ 61.049243][ T1233] FAT-fs (loop3): Directory bread(block 65) failed [ 61.055834][ T1233] FAT-fs (loop3): Directory bread(block 66) failed [ 61.062277][ T1233] FAT-fs (loop3): Directory bread(block 67) failed [ 61.068624][ T1233] FAT-fs (loop3): Directory bread(block 68) failed [ 61.075387][ T1233] FAT-fs (loop3): Directory bread(block 69) failed [ 61.081826][ T1233] FAT-fs (loop3): Directory bread(block 70) failed [ 61.088259][ T1233] FAT-fs (loop3): Directory bread(block 71) failed [ 61.097816][ T1233] FAT-fs (loop3): Directory bread(block 72) failed [ 61.105412][ T1233] FAT-fs (loop3): Directory bread(block 73) failed [ 61.462359][ T1233] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.483786][ T1233] FAT-fs (loop3): Filesystem has been set read-only [ 61.504924][ T1233] syz.3.238: attempt to access beyond end of device [ 61.504924][ T1233] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 61.519534][ T1233] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.528214][ T1233] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.537055][ T1246] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.563418][ T28] audit: type=1400 audit(1732224466.157:261): avc: denied { write } for pid=1247 comm="syz.4.243" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 61.568815][ T1233] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.587199][ T1249] 9pnet_fd: Insufficient options for proto=fd [ 61.600551][ T1233] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.633373][ T1233] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.633618][ T28] audit: type=1400 audit(1732224466.187:262): avc: denied { mounton } for pid=1232 comm="syz.3.238" path="/43/file1" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 61.652522][ T1233] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.722626][ T1233] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.731352][ T1233] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.750035][ T1233] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.769324][ T1256] loop2: detected capacity change from 0 to 16 [ 61.773310][ T1233] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.803322][ T1233] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 61.821938][ T1233] syz.3.238: attempt to access beyond end of device [ 61.821938][ T1233] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 61.898036][ T1258] incfs: Can't find or create .index dir in ./file0 [ 61.913912][ T1256] erofs: Unknown parameter 'ÿ/file1' [ 61.933465][ T1258] incfs: mount failed -14 [ 62.022111][ T1248] loop4: detected capacity change from 0 to 40427 [ 62.039571][ T1262] 9pnet_fd: Insufficient options for proto=fd [ 62.063495][ T1248] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 62.069667][ T1248] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 62.118609][ T1248] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 62.160192][ T1248] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 62.173292][ T1248] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.412030][ T292] syz-executor: attempt to access beyond end of device [ 62.412030][ T292] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.612441][ T1242] loop0: detected capacity change from 0 to 131072 [ 62.619435][ T1242] F2FS-fs (loop0): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 62.627916][ T1242] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 62.636776][ T1242] F2FS-fs (loop0): invalid crc value [ 62.644034][ T1242] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.680096][ T1242] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 62.687249][ T1242] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 62.713632][ T28] audit: type=1400 audit(1732224467.307:263): avc: denied { setattr } for pid=1239 comm="syz.0.240" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.831466][ T411] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 62.917419][ T1242] F2FS-fs (loop0): sanity_check_inode: corrupted inode i_blocks i_ino=8 iblocks=0, run fsck to fix. [ 62.929478][ T28] audit: type=1400 audit(1732224467.517:264): avc: denied { read } for pid=1239 comm="syz.0.240" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.952238][ T28] audit: type=1400 audit(1732224467.517:265): avc: denied { open } for pid=1239 comm="syz.0.240" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.141914][ T1287] loop0: detected capacity change from 0 to 1024 [ 63.148894][ T1287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.155770][ T411] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 63.163546][ T1287] ext4: Unknown parameter 'obj_role' [ 63.753909][ T1297] loop3: detected capacity change from 0 to 512 [ 63.785737][ T1297] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.794777][ T1297] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 63.873390][ T411] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 63.891833][ T411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.919030][ T1297] overlayfs: missing 'lowerdir' [ 63.952458][ T291] EXT4-fs (loop3): unmounting filesystem. [ 64.133871][ T1302] loop3: detected capacity change from 0 to 40427 [ 64.140703][ T1302] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 64.148772][ T1302] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.157980][ T1305] FAULT_INJECTION: forcing a failure. [ 64.157980][ T1305] name failslab, interval 1, probability 0, space 0, times 0 [ 64.158275][ T1302] F2FS-fs (loop3): invalid crc value [ 64.170501][ T1305] CPU: 1 PID: 1305 Comm: syz.0.257 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 64.185179][ T1305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 64.195073][ T1305] Call Trace: [ 64.198196][ T1305] [ 64.200978][ T1305] dump_stack_lvl+0x151/0x1b7 [ 64.205482][ T1305] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 64.210779][ T1305] dump_stack+0x15/0x1e [ 64.214773][ T1305] should_fail_ex+0x3d0/0x520 [ 64.219284][ T1305] ? security_file_alloc+0x29/0x120 [ 64.224317][ T1305] __should_failslab+0xaf/0xf0 [ 64.228920][ T1305] should_failslab+0x9/0x20 [ 64.233254][ T1305] kmem_cache_alloc+0x3b/0x320 [ 64.237854][ T1305] ? __alloc_file+0x29/0x2a0 [ 64.242285][ T1305] security_file_alloc+0x29/0x120 [ 64.247145][ T1305] __alloc_file+0xb2/0x2a0 [ 64.251393][ T1305] alloc_empty_file+0x95/0x180 [ 64.255999][ T1305] alloc_file+0x5a/0x5e0 [ 64.260075][ T1305] alloc_file_pseudo+0x259/0x2f0 [ 64.264849][ T1305] ? alloc_empty_file_noaccount+0x80/0x80 [ 64.270403][ T1305] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 64.275267][ T1305] anon_inode_getfile+0xa7/0x180 [ 64.280037][ T1305] bpf_link_prime+0xed/0x250 [ 64.284464][ T1305] bpf_raw_tp_link_attach+0x2e6/0x6b0 [ 64.289671][ T1305] ? bpf_insn_prepare_dump+0x950/0x950 [ 64.294972][ T1305] ? __kasan_check_write+0x14/0x20 [ 64.299917][ T1305] ? fput+0x15b/0x1b0 [ 64.303736][ T1305] bpf_raw_tracepoint_open+0x22d/0x4a0 [ 64.309026][ T1305] ? bpf_obj_get_info_by_fd+0x3e60/0x3e60 [ 64.314578][ T1305] ? selinux_bpf+0xd2/0x100 [ 64.318925][ T1305] ? security_bpf+0x82/0xb0 [ 64.323273][ T1305] __sys_bpf+0x4f5/0x7f0 [ 64.327345][ T1305] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 64.332582][ T1305] ? __ia32_sys_read+0x90/0x90 [ 64.337155][ T1305] ? debug_smp_processor_id+0x17/0x20 [ 64.342352][ T1305] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 64.348253][ T1305] __x64_sys_bpf+0x7c/0x90 [ 64.352508][ T1305] x64_sys_call+0x87f/0x9a0 [ 64.356849][ T1305] do_syscall_64+0x3b/0xb0 [ 64.361095][ T1305] ? clear_bhb_loop+0x55/0xb0 [ 64.365612][ T1305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.371340][ T1305] RIP: 0033:0x7f8e7ef7e819 [ 64.375596][ T1305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.395129][ T1305] RSP: 002b:00007f8e7fd0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.403368][ T1305] RAX: ffffffffffffffda RBX: 00007f8e7f136080 RCX: 00007f8e7ef7e819 [ 64.411189][ T1305] RDX: 0000000000000010 RSI: 00000000200006c0 RDI: 0000000000000011 [ 64.419008][ T1305] RBP: 00007f8e7fd0a090 R08: 0000000000000000 R09: 0000000000000000 [ 64.426801][ T1305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.434610][ T1305] R13: 0000000000000000 R14: 00007f8e7f136080 R15: 00007ffc2db481b8 [ 64.442436][ T1305] [ 64.447303][ T1276] Driver unsupported XDP return value 0 on prog (id 132) dev N/A, expect packet loss! [ 64.451421][ T1302] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.537025][ T1302] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 64.544041][ T1302] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.753420][ T411] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 64.762921][ T411] usb 2-1: No valid video chain found. [ 64.914236][ T1319] incfs: Can't find or create .index dir in ./file0 [ 64.920794][ T1319] incfs: mount failed -14 [ 64.972250][ T314] usb 2-1: USB disconnect, device number 4 [ 65.003754][ T28] audit: type=1400 audit(1732224469.547:266): avc: denied { bind } for pid=1274 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.072488][ T1325] FAULT_INJECTION: forcing a failure. [ 65.072488][ T1325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.085430][ T1325] CPU: 1 PID: 1325 Comm: syz.1.261 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 65.094897][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 65.104791][ T1325] Call Trace: [ 65.107917][ T1325] [ 65.110689][ T1325] dump_stack_lvl+0x151/0x1b7 [ 65.115205][ T1325] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 65.120499][ T1325] ? __mutex_lock_slowpath+0x10/0x10 [ 65.125620][ T1325] dump_stack+0x15/0x1e [ 65.129608][ T1325] should_fail_ex+0x3d0/0x520 [ 65.134213][ T1325] should_fail+0xb/0x10 [ 65.138199][ T1325] should_fail_usercopy+0x1a/0x20 [ 65.143062][ T1325] strncpy_from_user+0x24/0x2b0 [ 65.147750][ T1325] ? getname_flags+0xba/0x520 [ 65.152269][ T1325] getname_flags+0xf2/0x520 [ 65.156606][ T1325] __x64_sys_renameat2+0xc8/0xf0 [ 65.161395][ T1325] x64_sys_call+0x85c/0x9a0 [ 65.165713][ T1325] do_syscall_64+0x3b/0xb0 [ 65.169966][ T1325] ? clear_bhb_loop+0x55/0xb0 [ 65.174482][ T1325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.180206][ T1325] RIP: 0033:0x7f575eb7e819 [ 65.184461][ T1325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.203908][ T1325] RSP: 002b:00007f575f972038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 65.212145][ T1325] RAX: ffffffffffffffda RBX: 00007f575ed35fa0 RCX: 00007f575eb7e819 [ 65.219960][ T1325] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 0000000000000003 [ 65.227779][ T1325] RBP: 00007f575f972090 R08: 0000000000000002 R09: 0000000000000000 [ 65.235712][ T1325] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 65.243525][ T1325] R13: 0000000000000000 R14: 00007f575ed35fa0 R15: 00007ffd51956a68 [ 65.251358][ T1325] [ 65.717214][ T1335] loop3: detected capacity change from 0 to 512 [ 65.727563][ T1335] EXT4-fs (loop3): Test dummy encryption mode enabled [ 65.808711][ T1335] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.264: inline data xattr refers to an external xattr inode [ 65.823454][ T1335] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.264: couldn't read orphan inode 12 (err -117) [ 65.835435][ T1335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 65.847990][ T1335] EXT4-fs (loop3): unmounting filesystem. [ 65.861100][ T1345] loop0: detected capacity change from 0 to 1024 [ 65.883554][ T1345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.892709][ T1345] ext4: Unknown parameter 'obj_role' [ 66.003303][ T314] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 66.400242][ T1354] loop3: detected capacity change from 0 to 256 [ 66.414130][ T344] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 66.428040][ T1350] loop4: detected capacity change from 0 to 512 [ 66.438386][ T1350] EXT4-fs (loop4): Test dummy encryption mode enabled [ 66.453881][ T1350] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.268: inline data xattr refers to an external xattr inode [ 66.468632][ T1350] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.268: couldn't read orphan inode 12 (err -117) [ 66.480365][ T1350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.489860][ T1350] EXT4-fs (loop4): unmounting filesystem. [ 66.530195][ T1354] loop3: detected capacity change from 0 to 512 [ 66.536664][ T1354] EXT4-fs: Ignoring removed i_version option [ 66.542660][ T1354] journal_path: Lookup failure for './file0' [ 66.549908][ T1354] EXT4-fs: error: could not find journal device path [ 66.715441][ T314] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 66.730556][ T314] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 66.741806][ T314] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 66.750744][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.443498][ T1329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.497778][ T1363] incfs: Can't find or create .index dir in ./file0 [ 67.520741][ T1363] incfs: mount failed -14 [ 68.223332][ T314] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 68.230800][ T314] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input4 [ 68.240424][ T28] audit: type=1400 audit(1732224472.827:267): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=694 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.263867][ T314] usb 2-1: USB disconnect, device number 5 [ 68.269942][ T28] audit: type=1400 audit(1732224472.827:268): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=694 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.293022][ T28] audit: type=1400 audit(1732224472.827:269): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=694 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.428275][ T1393] syz.2.279[1393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.428353][ T1393] syz.2.279[1393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.736982][ T1339] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.113326][ T1339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.124128][ T1339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.133717][ T1339] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 69.142582][ T1339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.151056][ T1339] usb 3-1: config 0 descriptor?? [ 69.350503][ T1414] incfs: Can't find or create .index dir in ./file0 [ 69.357052][ T1414] incfs: mount failed -14 [ 70.169577][ T1420] fuse: Bad value for 'fd' [ 70.322723][ T1422] fuse: blksize only supported for fuseblk [ 70.639007][ T1339] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 70.730302][ T1428] loop3: detected capacity change from 0 to 256 [ 70.811901][ T1428] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 70.841495][ T1433] loop0: detected capacity change from 0 to 512 [ 70.848000][ T1433] ext3: Unknown parameter 'uid<00000000000000000000' [ 70.855437][ T28] audit: type=1400 audit(1732224475.457:270): avc: denied { append } for pid=1427 comm="syz.3.289" path="/59/file0/cgroup.stat" dev="loop3" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.886822][ T1433] cgroup: Unknown subsys name 'rlimit' [ 70.901241][ T28] audit: type=1400 audit(1732224475.477:271): avc: denied { nlmsg_read } for pid=1427 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.967043][ T28] audit: type=1400 audit(1732224475.487:272): avc: denied { map } for pid=1427 comm="syz.3.289" path="/59/file0/cgroup.stat" dev="loop3" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.977141][ T1437] loop0: detected capacity change from 0 to 512 [ 70.991103][ T28] audit: type=1400 audit(1732224475.487:273): avc: denied { execute } for pid=1427 comm="syz.3.289" path="/59/file0/cgroup.stat" dev="loop3" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.028841][ T28] audit: type=1400 audit(1732224475.517:274): avc: denied { write } for pid=1432 comm="syz.0.291" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.155446][ T1437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.169112][ T1437] ext4 filesystem being mounted at /61/bus supports timestamps until 2038 (0x7fffffff) [ 71.234491][ T28] audit: type=1400 audit(1732224475.827:275): avc: denied { ioctl } for pid=1432 comm="syz.0.291" path="/61/bus/file2" dev="loop0" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.273858][ T289] EXT4-fs (loop0): unmounting filesystem. [ 71.721589][ T1458] incfs: Can't find or create .index dir in ./file0 [ 71.728169][ T1458] incfs: mount failed -14 [ 71.932986][ T1462] fuse: Bad value for 'fd' [ 72.053592][ T1339] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 72.105140][ T1339] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 72.204568][ T1339] pyra: probe of 0003:1E7D:2CF6.0006 failed with error -71 [ 72.225031][ T1339] usb 3-1: USB disconnect, device number 2 [ 72.300418][ T28] audit: type=1400 audit(1732224476.887:276): avc: denied { setopt } for pid=1467 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.409995][ T1471] loop0: detected capacity change from 0 to 1024 [ 72.416632][ T1471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.423738][ T1471] ext4: Unknown parameter 'obj_role' [ 72.768186][ T1480] 9pnet_fd: Insufficient options for proto=fd [ 72.949333][ T1482] loop2: detected capacity change from 0 to 40427 [ 72.956448][ T1482] F2FS-fs (loop2): fault_injection options not supported [ 72.964304][ T1482] F2FS-fs (loop2): invalid crc value [ 72.970632][ T1482] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 2 [ 72.977343][ T1482] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 73.001839][ T1493] incfs: Can't find or create .index dir in ./file0 [ 73.008493][ T1493] incfs: mount failed -14 [ 73.266812][ T1504] FAULT_INJECTION: forcing a failure. [ 73.266812][ T1504] name failslab, interval 1, probability 0, space 0, times 0 [ 73.293271][ T1504] CPU: 1 PID: 1504 Comm: syz.1.312 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 73.302844][ T1504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 73.312733][ T1504] Call Trace: [ 73.315853][ T1504] [ 73.318629][ T1504] dump_stack_lvl+0x151/0x1b7 [ 73.323140][ T1504] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 73.328452][ T1504] dump_stack+0x15/0x1e [ 73.332426][ T1504] should_fail_ex+0x3d0/0x520 [ 73.336940][ T1504] __should_failslab+0xaf/0xf0 [ 73.341549][ T1504] ? p9_client_prepare_req+0x574/0xe60 [ 73.346844][ T1504] should_failslab+0x9/0x20 [ 73.351178][ T1504] __kmem_cache_alloc_node+0x3d/0x2a0 [ 73.356391][ T1504] ? kasan_save_alloc_info+0x1f/0x30 [ 73.361514][ T1504] ? p9_client_prepare_req+0x574/0xe60 [ 73.366888][ T1504] __kmalloc+0xa3/0x1e0 [ 73.370920][ T1504] p9_client_prepare_req+0x574/0xe60 [ 73.376005][ T1504] ? kasan_set_track+0x4b/0x70 [ 73.380595][ T1504] ? kasan_save_alloc_info+0x1f/0x30 [ 73.385719][ T1504] ? __kasan_kmalloc+0x9c/0xb0 [ 73.390320][ T1504] ? trace_raw_output_9p_fid_ref+0x160/0x160 [ 73.396137][ T1504] ? v9fs_xattr_handler_get+0x3d/0x50 [ 73.401350][ T1504] ? __x64_sys_lgetxattr+0x9e/0xb0 [ 73.406289][ T1504] ? x64_sys_call+0x51b/0x9a0 [ 73.410834][ T1504] ? do_syscall_64+0x3b/0xb0 [ 73.415493][ T1504] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.421394][ T1504] p9_client_rpc+0x18b/0xaa0 [ 73.425819][ T1504] ? p9_fid_create+0x360/0x360 [ 73.430425][ T1504] ? __fprop_add_percpu_max+0x310/0x310 [ 73.435793][ T1504] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 73.440836][ T1504] ? debug_smp_processor_id+0x17/0x20 [ 73.446040][ T1504] ? __radix_tree_preload+0x351/0x3d0 [ 73.451246][ T1504] p9_client_attach+0x15e/0x3e0 [ 73.455933][ T1504] ? _raw_spin_trylock_bh+0x190/0x190 [ 73.461136][ T1504] ? p9_client_begin_disconnect+0x50/0x50 [ 73.466691][ T1504] ? avc_has_perm+0x16f/0x260 [ 73.471225][ T1504] ? _raw_spin_unlock+0x4c/0x70 [ 73.475893][ T1504] ? v9fs_fid_find+0x331/0x3a0 [ 73.480493][ T1504] v9fs_fid_lookup_with_uid+0x84c/0xe60 [ 73.485875][ T1504] ? v9fs_fid_lookup+0x160/0x160 [ 73.490644][ T1504] ? selinux_inode_getxattr+0x2b6/0x3d0 [ 73.496027][ T1504] ? selinux_inode_post_setxattr+0x510/0x510 [ 73.501853][ T1504] v9fs_fid_lookup+0x118/0x160 [ 73.506443][ T1504] v9fs_xattr_get+0x26/0x100 [ 73.510867][ T1504] v9fs_xattr_handler_get+0x3d/0x50 [ 73.515900][ T1504] ? v9fs_listxattr+0x40/0x40 [ 73.520507][ T1504] vfs_getxattr+0x666/0x740 [ 73.524854][ T1504] ? __vfs_getxattr+0x3f0/0x3f0 [ 73.529527][ T1504] ? __check_object_size+0xa1/0x650 [ 73.534562][ T1504] do_getxattr+0x182/0x380 [ 73.538820][ T1504] path_getxattr+0x2e8/0x410 [ 73.543242][ T1504] ? setxattr+0x2b0/0x2b0 [ 73.547422][ T1504] ? fput+0x15b/0x1b0 [ 73.551318][ T1504] ? ksys_write+0x260/0x2c0 [ 73.555663][ T1504] ? debug_smp_processor_id+0x17/0x20 [ 73.560861][ T1504] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 73.566764][ T1504] __x64_sys_lgetxattr+0x9e/0xb0 [ 73.571537][ T1504] x64_sys_call+0x51b/0x9a0 [ 73.575876][ T1504] do_syscall_64+0x3b/0xb0 [ 73.580124][ T1504] ? clear_bhb_loop+0x55/0xb0 [ 73.584657][ T1504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.590370][ T1504] RIP: 0033:0x7f575eb7e819 [ 73.594621][ T1504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.614064][ T1504] RSP: 002b:00007f575f972038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 73.622309][ T1504] RAX: ffffffffffffffda RBX: 00007f575ed35fa0 RCX: 00007f575eb7e819 [ 73.630127][ T1504] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 00000000200001c0 [ 73.637932][ T1504] RBP: 00007f575f972090 R08: 0000000000000000 R09: 0000000000000000 [ 73.645742][ T1504] R10: 00000000000000f9 R11: 0000000000000246 R12: 0000000000000001 [ 73.653557][ T1504] R13: 0000000000000000 R14: 00007f575ed35fa0 R15: 00007ffd51956a68 [ 73.661369][ T1504] [ 73.741301][ T1512] FAULT_INJECTION: forcing a failure. [ 73.741301][ T1512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.754649][ T1512] CPU: 0 PID: 1512 Comm: syz.4.315 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 73.764207][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 73.774094][ T1512] Call Trace: [ 73.777226][ T1512] [ 73.779992][ T1512] dump_stack_lvl+0x151/0x1b7 [ 73.784507][ T1512] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 73.789803][ T1512] ? vsnprintf+0x1b93/0x1c70 [ 73.794232][ T1512] dump_stack+0x15/0x1e [ 73.798222][ T1512] should_fail_ex+0x3d0/0x520 [ 73.802768][ T1512] should_fail+0xb/0x10 [ 73.806725][ T1512] should_fail_usercopy+0x1a/0x20 [ 73.811586][ T1512] _copy_to_user+0x1e/0x90 [ 73.815840][ T1512] bpf_verifier_vlog+0x181/0x390 [ 73.820612][ T1512] __btf_verifier_log+0xd1/0x120 [ 73.825392][ T1512] ? kvmalloc_node+0x221/0x640 [ 73.829982][ T1512] ? bpf_verifier_vlog+0x18e/0x390 [ 73.834931][ T1512] ? btf_check_sec_info+0x4f0/0x4f0 [ 73.839967][ T1512] ? kvmalloc_node+0x26c/0x640 [ 73.844565][ T1512] ? memcpy+0x56/0x70 [ 73.848393][ T1512] btf_parse_hdr+0x37a/0x7c0 [ 73.852813][ T1512] btf_new_fd+0x39e/0x7c0 [ 73.856991][ T1512] bpf_btf_load+0x6f/0x90 [ 73.861146][ T1512] __sys_bpf+0x586/0x7f0 [ 73.865222][ T1512] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 73.870432][ T1512] ? __ia32_sys_read+0x90/0x90 [ 73.875035][ T1512] ? debug_smp_processor_id+0x17/0x20 [ 73.880234][ T1512] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 73.886139][ T1512] __x64_sys_bpf+0x7c/0x90 [ 73.890391][ T1512] x64_sys_call+0x87f/0x9a0 [ 73.894729][ T1512] do_syscall_64+0x3b/0xb0 [ 73.898983][ T1512] ? clear_bhb_loop+0x55/0xb0 [ 73.903498][ T1512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.909225][ T1512] RIP: 0033:0x7f726dd7e819 [ 73.913478][ T1512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.933008][ T1512] RSP: 002b:00007f726eb1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.941249][ T1512] RAX: ffffffffffffffda RBX: 00007f726df35fa0 RCX: 00007f726dd7e819 [ 73.949064][ T1512] RDX: 0000000000000028 RSI: 0000000020000440 RDI: 0000000000000012 [ 73.956879][ T1512] RBP: 00007f726eb1e090 R08: 0000000000000000 R09: 0000000000000000 [ 73.964683][ T1512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.972669][ T1512] R13: 0000000000000001 R14: 00007f726df35fa0 R15: 00007fffa0dc47d8 [ 73.980749][ T1512] [ 74.007115][ T1515] 9pnet_fd: Insufficient options for proto=fd [ 74.066017][ T1521] incfs: Can't find or create .index dir in ./file0 [ 74.087509][ T1521] incfs: mount failed -14 [ 74.099019][ T1522] fuse: Bad value for 'fd' [ 74.386952][ T1518] loop4: detected capacity change from 0 to 2048 [ 74.483532][ T1518] loop4: p2 < > p4 [ 74.490880][ T1518] loop4: p4 size 8192 extends beyond EOD, truncated [ 75.449903][ T102] loop4: p2 < > p4 [ 75.464006][ T102] loop4: p4 size 8192 extends beyond EOD, truncated [ 75.490709][ T344] udevd[344]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 75.506465][ T319] udevd[319]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 75.633715][ T1544] loop2: detected capacity change from 0 to 2048 [ 75.644368][ T1544] EXT4-fs: Ignoring removed oldalloc option [ 75.817468][ T319] udevd[319]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 75.876770][ T1544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.912845][ T344] udevd[344]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 75.937114][ T1543] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.978296][ T1537] loop0: detected capacity change from 0 to 512 [ 76.028796][ T1537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.038932][ T1559] 9pnet_fd: Insufficient options for proto=fd [ 76.039510][ T1526] loop3: detected capacity change from 0 to 40427 [ 76.051252][ T1537] ext4 filesystem being mounted at /66/bus supports timestamps until 2038 (0x7fffffff) [ 76.064572][ T1526] F2FS-fs (loop3): fault_injection options not supported [ 76.087473][ T1537] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 76.090201][ T1561] loop4: detected capacity change from 0 to 256 [ 76.100448][ T1526] F2FS-fs (loop3): invalid crc value [ 76.107001][ T1526] F2FS-fs (loop3): Mismatch valid blocks 0 vs. 2 [ 76.108777][ T1561] exfat: Bad value for 'uid' [ 76.120577][ T1526] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 76.133626][ T1537] device syzkaller0 entered promiscuous mode [ 76.154776][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 76.154793][ T28] audit: type=1400 audit(1732224480.751:280): avc: denied { view } for pid=1560 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 76.261474][ T1566] FAULT_INJECTION: forcing a failure. [ 76.261474][ T1566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.275299][ T1566] CPU: 0 PID: 1566 Comm: syz.3.329 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 76.282996][ T28] audit: type=1400 audit(1732224480.871:281): avc: denied { read write } for pid=1567 comm="syz.1.330" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.284845][ T1566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 76.284858][ T1566] Call Trace: [ 76.284865][ T1566] [ 76.284872][ T1566] dump_stack_lvl+0x151/0x1b7 [ 76.284901][ T1566] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 76.333454][ T1566] ? __kasan_check_write+0x14/0x20 [ 76.338400][ T1566] dump_stack+0x15/0x1e [ 76.342390][ T1566] should_fail_ex+0x3d0/0x520 [ 76.346905][ T1566] should_fail+0xb/0x10 [ 76.351020][ T1566] should_fail_usercopy+0x1a/0x20 [ 76.355876][ T1566] _copy_to_user+0x1e/0x90 [ 76.360216][ T1566] simple_read_from_buffer+0xc7/0x150 [ 76.365419][ T1566] proc_fail_nth_read+0x1a3/0x210 [ 76.370275][ T1566] ? proc_fault_inject_write+0x390/0x390 [ 76.375742][ T1566] ? fsnotify_perm+0x269/0x5b0 [ 76.380344][ T1566] ? security_file_permission+0x86/0xb0 [ 76.385722][ T1566] ? proc_fault_inject_write+0x390/0x390 [ 76.391550][ T1566] vfs_read+0x26c/0xae0 [ 76.395530][ T1566] ? kernel_read+0x1f0/0x1f0 [ 76.399954][ T1566] ? mutex_lock+0xb1/0x1e0 [ 76.404212][ T1566] ? bit_wait_io_timeout+0x120/0x120 [ 76.409338][ T1566] ? __fdget_pos+0x2e2/0x390 [ 76.413756][ T1566] ? ksys_read+0x77/0x2c0 [ 76.417925][ T1566] ksys_read+0x199/0x2c0 [ 76.422008][ T1566] ? __this_cpu_preempt_check+0x13/0x20 [ 76.427385][ T1566] ? vfs_write+0xed0/0xed0 [ 76.431642][ T1566] __x64_sys_read+0x7b/0x90 [ 76.435975][ T1566] x64_sys_call+0x28/0x9a0 [ 76.440229][ T1566] do_syscall_64+0x3b/0xb0 [ 76.444478][ T1566] ? clear_bhb_loop+0x55/0xb0 [ 76.449013][ T1566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.454726][ T1566] RIP: 0033:0x7f7af477d25c [ 76.458976][ T1566] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 76.478549][ T1566] RSP: 002b:00007f7af550c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.486793][ T1566] RAX: ffffffffffffffda RBX: 00007f7af4935fa0 RCX: 00007f7af477d25c [ 76.494602][ T1566] RDX: 000000000000000f RSI: 00007f7af550c0a0 RDI: 0000000000000007 [ 76.502411][ T1566] RBP: 00007f7af550c090 R08: 0000000000000000 R09: 0000000000000000 [ 76.510229][ T1566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.518032][ T1566] R13: 0000000000000000 R14: 00007f7af4935fa0 R15: 00007ffd48aea308 [ 76.526112][ T1566] [ 76.557766][ T1314] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 76.574360][ T28] audit: type=1400 audit(1732224480.901:282): avc: denied { open } for pid=1567 comm="syz.1.330" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.587331][ T1314] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 76.613938][ T290] EXT4-fs (loop2): unmounting filesystem. [ 76.647118][ T1573] loop3: detected capacity change from 0 to 256 [ 76.650186][ T1314] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 76.672458][ T1314] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 76.723935][ T289] EXT4-fs (loop0): unmounting filesystem. [ 76.871840][ T1589] fuse: blksize only supported for fuseblk [ 76.925106][ T1588] 9pnet_fd: Insufficient options for proto=fd [ 76.971001][ T1580] loop3: detected capacity change from 0 to 512 [ 77.028785][ T1580] EXT4-fs: Ignoring removed i_version option [ 77.073413][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.115865][ T1580] journal_path: Lookup failure for './file0' [ 77.121702][ T1580] EXT4-fs: error: could not find journal device path [ 77.180272][ T1573] kvm: emulating exchange as write [ 77.335773][ T1593] loop0: detected capacity change from 0 to 40427 [ 77.349243][ T1593] F2FS-fs (loop0): fault_injection options not supported [ 77.362333][ T1593] F2FS-fs (loop0): invalid crc value [ 77.369166][ T1593] F2FS-fs (loop0): Mismatch valid blocks 0 vs. 2 [ 77.376240][ T1593] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 77.393634][ T39] usb 5-1: device descriptor read/64, error -71 [ 77.550004][ T1597] loop2: detected capacity change from 0 to 1024 [ 77.559633][ T1597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.568404][ T1597] ext4: Unknown parameter 'obj_role' [ 77.710166][ T1609] loop3: detected capacity change from 0 to 2048 [ 77.782588][ T1610] FAULT_INJECTION: forcing a failure. [ 77.782588][ T1610] name failslab, interval 1, probability 0, space 0, times 0 [ 77.795115][ T1610] CPU: 1 PID: 1610 Comm: syz.1.341 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 77.804573][ T1610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 77.814464][ T1610] Call Trace: [ 77.817591][ T1610] [ 77.820368][ T1610] dump_stack_lvl+0x151/0x1b7 [ 77.824879][ T1610] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 77.830273][ T1610] ? kasan_set_track+0x60/0x70 [ 77.834861][ T1610] ? kmalloc_trace+0x44/0xa0 [ 77.839285][ T1610] ? dup_fd+0x5f5/0x960 [ 77.843276][ T1610] ? ksys_unshare+0x4a0/0xa00 [ 77.847790][ T1610] ? __x64_sys_unshare+0x38/0x40 [ 77.852564][ T1610] ? do_syscall_64+0x3b/0xb0 [ 77.856993][ T1610] dump_stack+0x15/0x1e [ 77.860985][ T1610] should_fail_ex+0x3d0/0x520 [ 77.865507][ T1610] __should_failslab+0xaf/0xf0 [ 77.870098][ T1610] ? kvmalloc_node+0x221/0x640 [ 77.874699][ T1610] should_failslab+0x9/0x20 [ 77.879038][ T1610] __kmem_cache_alloc_node+0x3d/0x2a0 [ 77.884274][ T1610] ? kvmalloc_node+0x221/0x640 [ 77.888845][ T1610] __kmalloc_node+0xa3/0x1e0 [ 77.893270][ T1610] kvmalloc_node+0x221/0x640 [ 77.897703][ T1610] ? vm_mmap+0xb0/0xb0 [ 77.901599][ T1610] ? kasan_save_alloc_info+0x1f/0x30 [ 77.906721][ T1610] ? __kasan_kmalloc+0x9c/0xb0 [ 77.911326][ T1610] ? kmalloc_trace+0x44/0xa0 [ 77.915847][ T1610] alloc_fdtable+0xeb/0x2a0 [ 77.920177][ T1610] dup_fd+0x5f5/0x960 [ 77.924002][ T1610] ksys_unshare+0x4a0/0xa00 [ 77.928524][ T1610] ? fput+0x15b/0x1b0 [ 77.932440][ T1610] ? unshare_fd+0x240/0x240 [ 77.936780][ T1610] __x64_sys_unshare+0x38/0x40 [ 77.941372][ T1610] x64_sys_call+0x728/0x9a0 [ 77.945709][ T1610] do_syscall_64+0x3b/0xb0 [ 77.949957][ T1610] ? clear_bhb_loop+0x55/0xb0 [ 77.954473][ T1610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.960200][ T1610] RIP: 0033:0x7f575eb7e819 [ 77.964453][ T1610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.983892][ T1610] RSP: 002b:00007f575f930038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 77.992145][ T1610] RAX: ffffffffffffffda RBX: 00007f575ed36160 RCX: 00007f575eb7e819 [ 77.999970][ T1610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002000680 [ 78.007759][ T1610] RBP: 00007f575f930090 R08: 0000000000000000 R09: 0000000000000000 [ 78.015569][ T1610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.023383][ T1610] R13: 0000000000000000 R14: 00007f575ed36160 R15: 00007ffd51956a68 [ 78.031203][ T1610] [ 78.034966][ T39] usb 5-1: device descriptor read/64, error -71 [ 78.231829][ T1609] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 78.323300][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.455362][ T1615] loop0: detected capacity change from 0 to 1024 [ 78.465195][ T291] EXT4-fs (loop3): unmounting filesystem. [ 78.480008][ T1615] EXT4-fs: Ignoring removed nobh option [ 78.486522][ T1615] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.497857][ T1615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.524925][ T1615] FAULT_INJECTION: forcing a failure. [ 78.524925][ T1615] name failslab, interval 1, probability 0, space 0, times 0 [ 78.537544][ T1615] CPU: 1 PID: 1615 Comm: syz.0.344 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 78.547095][ T1615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 78.556987][ T1615] Call Trace: [ 78.560112][ T1615] [ 78.562888][ T1615] dump_stack_lvl+0x151/0x1b7 [ 78.567404][ T1615] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 78.572694][ T1615] ? stack_trace_save+0x1c0/0x1c0 [ 78.577556][ T1615] ? kernel_text_address+0xa9/0xe0 [ 78.582505][ T1615] dump_stack+0x15/0x1e [ 78.586494][ T1615] should_fail_ex+0x3d0/0x520 [ 78.591011][ T1615] __should_failslab+0xaf/0xf0 [ 78.595628][ T1615] should_failslab+0x9/0x20 [ 78.599946][ T1615] slab_pre_alloc_hook+0x2e/0x1b0 [ 78.604811][ T1615] ? avc_denied+0x1b0/0x1b0 [ 78.609160][ T1615] kmem_cache_alloc_lru+0x49/0x270 [ 78.614095][ T1615] ? __d_alloc+0x34/0x700 [ 78.618263][ T1615] __d_alloc+0x34/0x700 [ 78.622263][ T1615] ? avc_has_perm_noaudit+0x2dd/0x430 [ 78.627464][ T1615] d_alloc_parallel+0xe6/0x12e0 [ 78.632269][ T1615] ? down_read+0xeb7/0x1aa0 [ 78.636694][ T1615] ? d_hash_and_lookup+0x1e0/0x1e0 [ 78.641637][ T1615] ? __down_common+0x690/0x690 [ 78.646339][ T1615] ? capable_wrt_inode_uidgid+0xe9/0x130 [ 78.651801][ T1615] __lookup_slow+0x154/0x3e0 [ 78.656223][ T1615] ? lookup_one_len+0x2c0/0x2c0 [ 78.660911][ T1615] ? lookup_one_common+0x2f9/0x460 [ 78.665857][ T1615] lookup_one_unlocked+0x19c/0x280 [ 78.670799][ T1615] ? __stack_depot_save+0x419/0x480 [ 78.675834][ T1615] ? lookup_one+0x2e0/0x2e0 [ 78.680182][ T1615] ovl_lookup_single+0x11c/0x9f0 [ 78.684947][ T1615] ? lookup_slow+0x5a/0x80 [ 78.689202][ T1615] ? walk_component+0x2e7/0x410 [ 78.693893][ T1615] ? ovl_lower_positive+0x350/0x350 [ 78.698932][ T1615] ovl_lookup_layer+0x413/0x510 [ 78.703628][ T1615] ? ovl_lookup+0x2340/0x2340 [ 78.708122][ T1615] ? override_creds+0x7d/0x100 [ 78.712727][ T1615] ovl_lookup+0x51f/0x2340 [ 78.716982][ T1615] ? __kasan_slab_alloc+0x6c/0x80 [ 78.721837][ T1615] ? slab_post_alloc_hook+0x72/0x2c0 [ 78.726969][ T1615] ? _raw_spin_lock+0xa4/0x1b0 [ 78.731568][ T1615] ? ovl_path_next+0x290/0x290 [ 78.736156][ T1615] ? d_alloc_parallel+0x116c/0x12e0 [ 78.741196][ T1615] ? d_hash_and_lookup+0x1e0/0x1e0 [ 78.746135][ T1615] ? __down_common+0x690/0x690 [ 78.750737][ T1615] ? lockref_get_not_dead+0x248/0x340 [ 78.755947][ T1615] ? lockref_mark_dead+0xb0/0xb0 [ 78.760814][ T1615] __lookup_slow+0x2b9/0x3e0 [ 78.765237][ T1615] ? lookup_one_len+0x2c0/0x2c0 [ 78.769946][ T1615] lookup_slow+0x5a/0x80 [ 78.774132][ T1615] walk_component+0x2e7/0x410 [ 78.778608][ T1615] path_lookupat+0x16d/0x450 [ 78.783033][ T1615] filename_lookup+0x251/0x600 [ 78.787623][ T1615] ? hashlen_string+0x120/0x120 [ 78.792326][ T1615] ? strncpy_from_user+0x169/0x2b0 [ 78.797266][ T1615] ? getname_flags+0x1fd/0x520 [ 78.801860][ T1615] user_path_at_empty+0x43/0x1a0 [ 78.806628][ T1615] do_fchownat+0xec/0x240 [ 78.810798][ T1615] ? chown_common+0x8b0/0x8b0 [ 78.815309][ T1615] ? debug_smp_processor_id+0x17/0x20 [ 78.820513][ T1615] __x64_sys_fchownat+0xbf/0xd0 [ 78.825204][ T1615] x64_sys_call+0x6d4/0x9a0 [ 78.829538][ T1615] do_syscall_64+0x3b/0xb0 [ 78.833794][ T1615] ? clear_bhb_loop+0x55/0xb0 [ 78.838325][ T1615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.844035][ T1615] RIP: 0033:0x7f8e7ef7e819 [ 78.848295][ T1615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.867730][ T1615] RSP: 002b:00007f8e7fd2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 78.875979][ T1615] RAX: ffffffffffffffda RBX: 00007f8e7f135fa0 RCX: 00007f8e7ef7e819 [ 78.883787][ T1615] RDX: 0000000000000000 RSI: 0000000020000440 RDI: ffffffffffffff9c [ 78.891607][ T1615] RBP: 00007f8e7fd2b090 R08: 0000000000000000 R09: 0000000000000000 [ 78.899410][ T1615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.907221][ T1615] R13: 0000000000000000 R14: 00007f8e7f135fa0 R15: 00007ffc2db481b8 [ 78.917292][ T1615] [ 78.963587][ T1620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 78.978404][ T289] EXT4-fs (loop0): unmounting filesystem. [ 79.006725][ T1626] device veth0_to_batadv entered promiscuous mode [ 79.013381][ T39] usb 5-1: device descriptor read/64, error -71 [ 79.014648][ T1626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 79.024144][ T1624] loop2: detected capacity change from 0 to 512 [ 79.036632][ T28] audit: type=1400 audit(1732224483.631:283): avc: denied { set_context_mgr } for pid=1625 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 79.058362][ T28] audit: type=1400 audit(1732224483.651:284): avc: denied { map } for pid=1625 comm="syz.0.347" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.083793][ T1624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.107688][ T1630] 9pnet_fd: Insufficient options for proto=fd [ 79.113624][ T1624] tipc: Started in network mode [ 79.118549][ T1624] tipc: Node identity 1, cluster identity 4711 [ 79.124828][ T1624] tipc: Node number set to 1 [ 79.129618][ T1624] tipc: Cannot configure node identity twice [ 79.162759][ T28] audit: type=1400 audit(1732224483.751:285): avc: denied { map } for pid=1623 comm="syz.2.348" path="/64/file0/memory.events.local" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.187039][ T28] audit: type=1400 audit(1732224483.761:286): avc: denied { map } for pid=1623 comm="syz.2.348" path="/64/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.214643][ T290] EXT4-fs (loop2): unmounting filesystem. [ 79.413293][ T39] usb 5-1: device descriptor read/64, error -71 [ 79.443448][ T1640] loop3: detected capacity change from 0 to 40427 [ 79.467080][ T1642] loop2: detected capacity change from 0 to 40427 [ 79.475105][ T1640] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 79.482858][ T1642] F2FS-fs (loop2): fault_injection options not supported [ 79.485370][ T1640] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 79.490956][ T1642] F2FS-fs (loop2): invalid crc value [ 79.499001][ T1640] F2FS-fs (loop3): invalid crc value [ 79.504444][ T1642] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 2 [ 79.511069][ T1640] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.514892][ T1642] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 79.533421][ T39] usb usb5-port1: attempt power cycle [ 79.555605][ T1640] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 79.562511][ T1640] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.587413][ T28] audit: type=1400 audit(1732224484.181:287): avc: denied { read write } for pid=1649 comm="syz.1.355" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.614236][ T28] audit: type=1400 audit(1732224484.211:288): avc: denied { open } for pid=1649 comm="syz.1.355" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.665443][ T28] audit: type=1400 audit(1732224484.211:289): avc: denied { ioctl } for pid=1649 comm="syz.1.355" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.972659][ T1625] device veth0_to_batadv left promiscuous mode [ 80.033370][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 80.243782][ T39] usb 5-1: device descriptor read/8, error -71 [ 80.284782][ T1664] loop4: detected capacity change from 0 to 1024 [ 80.324774][ T1664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.346812][ T1664] ext4: Unknown parameter 'obj_role' [ 80.810231][ T39] usb 5-1: device descriptor read/8, error -71 [ 80.844672][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 80.929009][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 81.195511][ T1674] 9pnet_fd: Insufficient options for proto=fd [ 81.275018][ T1683] loop3: detected capacity change from 0 to 1024 [ 81.317972][ T1683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 81.340193][ T1677] FAULT_INJECTION: forcing a failure. [ 81.340193][ T1677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.362222][ T1677] CPU: 0 PID: 1677 Comm: syz.3.360 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 81.371787][ T1677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 81.374834][ T1679] loop0: detected capacity change from 0 to 1024 [ 81.381676][ T1677] Call Trace: [ 81.381688][ T1677] [ 81.393742][ T1677] dump_stack_lvl+0x151/0x1b7 [ 81.398256][ T1677] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 81.403550][ T1677] ? signal_setup_done+0x448/0x5f0 [ 81.408494][ T1677] dump_stack+0x15/0x1e [ 81.412484][ T1677] should_fail_ex+0x3d0/0x520 [ 81.417002][ T1677] should_fail+0xb/0x10 [ 81.420996][ T1677] should_fail_usercopy+0x1a/0x20 [ 81.425850][ T1677] _copy_from_user+0x1e/0xc0 [ 81.430281][ T1677] restore_sigcontext+0xce/0x700 [ 81.435054][ T1677] ? fpu__clear_user_states+0x171/0x200 [ 81.440436][ T1677] ? __do_compat_sys_x32_rt_sigreturn+0x1e0/0x1e0 [ 81.446682][ T1677] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 81.451650][ T1677] __do_sys_rt_sigreturn+0x153/0x1e0 [ 81.456750][ T1677] ? x32_copy_siginfo_to_user+0x270/0x270 [ 81.462304][ T1677] ? debug_smp_processor_id+0x17/0x20 [ 81.467513][ T1677] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 81.473414][ T1677] ? exit_to_user_mode_prepare+0x39/0xa0 [ 81.478881][ T1677] x64_sys_call+0x91/0x9a0 [ 81.483134][ T1677] do_syscall_64+0x3b/0xb0 [ 81.487388][ T1677] ? clear_bhb_loop+0x55/0xb0 [ 81.491902][ T1677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.497629][ T1677] RIP: 0033:0x7f7af471a1a9 [ 81.501880][ T1677] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 81.521352][ T1677] RSP: 002b:00007f7af550ba80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 81.529671][ T1677] RAX: ffffffffffffffda RBX: 00007f7af4935fa0 RCX: 00007f7af471a1a9 [ 81.537485][ T1677] RDX: 00007f7af550ba80 RSI: 00007f7af550bbb0 RDI: 0000000000000021 [ 81.545295][ T1677] RBP: 00007f7af550c090 R08: 0000000000000000 R09: 0000000000000000 [ 81.553106][ T1677] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 81.561126][ T1677] R13: 0000000000000000 R14: 00007f7af4935fa0 R15: 00007ffd48aea308 [ 81.568950][ T1677] [ 81.595281][ T1679] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.599639][ T1692] loop2: detected capacity change from 0 to 1024 [ 81.639188][ T1692] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 81.805685][ T289] EXT4-fs (loop0): unmounting filesystem. [ 81.916756][ T1700] loop4: detected capacity change from 0 to 40427 [ 81.960878][ T1700] F2FS-fs (loop4): fault_injection options not supported [ 81.975492][ T1700] F2FS-fs (loop4): invalid crc value [ 81.981584][ T1700] F2FS-fs (loop4): Mismatch valid blocks 0 vs. 2 [ 81.988405][ T1700] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 82.076905][ T1707] binder: 1701:1707 ioctl c0306201 0 returned -14 [ 82.757626][ T290] EXT4-fs (loop2): unmounting filesystem. [ 82.856269][ T291] EXT4-fs (loop3): unmounting filesystem. [ 82.892006][ T1713] loop0: detected capacity change from 0 to 1024 [ 82.933265][ T1713] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.058422][ T1723] loop4: detected capacity change from 0 to 256 [ 83.363380][ T1726] binder: BINDER_SET_CONTEXT_MGR already set [ 83.369273][ T1726] binder: 1716:1726 ioctl 4018620d 20004a80 returned -16 [ 83.600289][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 83.600318][ T28] audit: type=1400 audit(1732224487.891:293): avc: denied { append } for pid=1716 comm="syz.3.371" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.656420][ T1723] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 83.718333][ T1711] loop2: detected capacity change from 0 to 512 [ 83.725300][ T1711] EXT4-fs (loop2): Test dummy encryption mode enabled [ 83.741804][ T1711] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.369: inline data xattr refers to an external xattr inode [ 83.757852][ T1711] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.369: couldn't read orphan inode 12 (err -117) [ 83.769936][ T1711] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.779502][ T1711] EXT4-fs (loop2): unmounting filesystem. [ 83.928331][ T1735] loop3: detected capacity change from 0 to 1024 [ 83.941270][ T1735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.976452][ T1735] ext4: Unknown parameter 'obj_role' [ 84.050955][ T411] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 84.092106][ T289] EXT4-fs (loop0): unmounting filesystem. [ 84.120804][ T1741] loop2: detected capacity change from 0 to 2048 [ 84.153759][ T1741] loop2: p2 < > p4 [ 84.158233][ T1741] loop2: p4 size 8192 extends beyond EOD, truncated [ 84.180292][ T102] loop2: p2 < > p4 [ 84.184731][ T102] loop2: p4 size 8192 extends beyond EOD, truncated [ 84.314198][ T1746] loop0: detected capacity change from 0 to 40427 [ 84.321294][ T1746] F2FS-fs (loop0): fault_injection options not supported [ 84.338946][ T1746] F2FS-fs (loop0): invalid crc value [ 84.349042][ T1746] F2FS-fs (loop0): Mismatch valid blocks 0 vs. 2 [ 84.355821][ T1746] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 84.381001][ T1749] loop2: detected capacity change from 0 to 8192 [ 84.453497][ T411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.473688][ T411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.563339][ T411] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 84.576804][ T411] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 84.590966][ T411] usb 5-1: Product: syz [ 84.611084][ T411] usb 5-1: config 0 descriptor?? [ 84.662129][ T1755] syz.0.382 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 84.759078][ T1765] loop0: detected capacity change from 0 to 1024 [ 84.770534][ T1765] EXT4-fs: Ignoring removed orlov option [ 84.804286][ T1765] EXT4-fs (loop0): Test dummy encryption mode enabled [ 84.868253][ T1765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 85.926712][ T1775] loop3: detected capacity change from 0 to 512 [ 85.946341][ T1775] EXT4-fs (loop3): Test dummy encryption mode enabled [ 86.254369][ T411] konepure 0003:1E7D:2DB4.0008: item fetching failed at offset 10/11 [ 86.262514][ T411] konepure 0003:1E7D:2DB4.0008: parse failed [ 86.311544][ T411] konepure: probe of 0003:1E7D:2DB4.0008 failed with error -22 [ 86.320296][ T1775] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.388: inline data xattr refers to an external xattr inode [ 86.338322][ T1775] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.388: couldn't read orphan inode 12 (err -117) [ 86.363040][ T1775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.373186][ T1775] EXT4-fs (loop3): unmounting filesystem. [ 86.684552][ T1789] binder: 1783:1789 ioctl c0306201 0 returned -14 [ 87.800262][ T1791] loop2: detected capacity change from 0 to 512 [ 87.814073][ T1791] EXT4-fs (loop2): Test dummy encryption mode enabled [ 87.904311][ T1787] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 87.919141][ T1791] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.390: inline data xattr refers to an external xattr inode [ 87.935099][ T1791] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.390: couldn't read orphan inode 12 (err -117) [ 87.949955][ T1791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.961293][ T1791] EXT4-fs (loop2): unmounting filesystem. [ 87.963719][ T1796] 9pnet_fd: Insufficient options for proto=fd [ 87.987451][ T1787] kernel profiling enabled (shift: 17) [ 87.989756][ T39] usb 5-1: USB disconnect, device number 9 [ 88.030593][ T319] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.042573][ T28] audit: type=1400 audit(1732224492.641:294): avc: denied { write } for pid=1803 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.110068][ T28] audit: type=1400 audit(1732224492.671:295): avc: denied { ioctl } for pid=1803 comm="syz.1.396" path="socket:[21607]" dev="sockfs" ino=21607 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 88.191780][ T1810] loop4: detected capacity change from 0 to 1024 [ 88.202042][ T1810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.209313][ T1810] ext4: Unknown parameter 'obj_role' [ 88.254847][ T289] EXT4-fs (loop0): unmounting filesystem. [ 88.275125][ T344] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.453009][ T1800] loop3: detected capacity change from 0 to 40427 [ 88.507821][ T1800] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 88.961517][ T1800] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.031550][ T1833] device vlan2 entered promiscuous mode [ 89.293826][ T1800] F2FS-fs (loop3): invalid crc value [ 89.334185][ T1837] incfs: Can't find or create .index dir in ./file0 [ 89.340876][ T1837] incfs: mount failed -14 [ 89.367598][ T1839] 9pnet_fd: Insufficient options for proto=fd [ 89.380127][ T1800] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.466227][ T1800] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.473723][ T1800] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.765640][ T312] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 89.779587][ T312] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 89.866110][ T1314] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.301803][ T1314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.312874][ T1314] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 90.322605][ T1314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.331333][ T1314] usb 3-1: config 0 descriptor?? [ 91.003483][ T1865] fuse: blksize only supported for fuseblk [ 91.804398][ T1871] FAULT_INJECTION: forcing a failure. [ 91.804398][ T1871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.818010][ T1871] CPU: 1 PID: 1871 Comm: syz.3.410 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 91.819426][ T28] audit: type=1400 audit(1732224496.411:296): avc: denied { create } for pid=1876 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 91.827557][ T1871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 91.827571][ T1871] Call Trace: [ 91.827576][ T1871] [ 91.827583][ T1871] dump_stack_lvl+0x151/0x1b7 [ 91.827612][ T1871] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 91.827638][ T1871] dump_stack+0x15/0x1e [ 91.827658][ T1871] should_fail_ex+0x3d0/0x520 [ 91.852975][ T1878] 9pnet_fd: Insufficient options for proto=fd [ 91.857332][ T1871] should_fail+0xb/0x10 [ 91.857371][ T1871] should_fail_usercopy+0x1a/0x20 [ 91.896315][ T1871] _copy_from_user+0x1e/0xc0 [ 91.899458][ T1882] tmpfs: Bad value for 'huge' [ 91.900724][ T1871] generic_map_delete_batch+0x2c7/0x5c0 [ 91.910635][ T1871] ? bpf_map_inc_not_zero+0x120/0x120 [ 91.915836][ T1871] ? bpf_map_inc_not_zero+0x120/0x120 [ 91.921043][ T1871] bpf_map_do_batch+0x4cc/0x630 [ 91.925730][ T1871] __sys_bpf+0x66b/0x7f0 [ 91.929809][ T1871] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 91.935020][ T1871] ? __ia32_sys_read+0x90/0x90 [ 91.939624][ T1871] ? debug_smp_processor_id+0x17/0x20 [ 91.944820][ T1871] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 91.950728][ T1871] __x64_sys_bpf+0x7c/0x90 [ 91.954307][ T1887] loop4: detected capacity change from 0 to 1024 [ 91.954970][ T1871] x64_sys_call+0x87f/0x9a0 [ 91.965477][ T1871] do_syscall_64+0x3b/0xb0 [ 91.969726][ T1871] ? clear_bhb_loop+0x55/0xb0 [ 91.974241][ T1871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.979988][ T1871] RIP: 0033:0x7f7af477e819 [ 91.984312][ T1871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.003845][ T1871] RSP: 002b:00007f7af550c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.012154][ T1871] RAX: ffffffffffffffda RBX: 00007f7af4935fa0 RCX: 00007f7af477e819 [ 92.019901][ T1871] RDX: 0000000000000038 RSI: 0000000020000280 RDI: 000000000000001b [ 92.027708][ T1871] RBP: 00007f7af550c090 R08: 0000000000000000 R09: 0000000000000000 [ 92.035517][ T1871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.043335][ T1871] R13: 0000000000000000 R14: 00007f7af4935fa0 R15: 00007ffd48aea308 [ 92.051144][ T1871] [ 92.054627][ T1887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.101351][ T1887] ext4: Unknown parameter 'obj_role' [ 92.131406][ T28] audit: type=1400 audit(1732224496.721:297): avc: denied { setopt } for pid=1892 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.151317][ T1893] loop0: detected capacity change from 0 to 256 [ 92.151469][ T28] audit: type=1400 audit(1732224496.741:298): avc: denied { read } for pid=1892 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.157842][ T1314] usbhid 3-1:0.0: can't add hid device: -71 [ 92.194732][ T1314] usbhid: probe of 3-1:0.0 failed with error -71 [ 92.204812][ T1314] usb 3-1: USB disconnect, device number 3 [ 92.230742][ T1893] FAT-fs (loop0): Directory bread(block 64) failed [ 92.235247][ T1895] loop3: detected capacity change from 0 to 512 [ 92.237306][ T1893] FAT-fs (loop0): Directory bread(block 65) failed [ 92.248653][ T1895] ext3: Unknown parameter 'uid<00000000000000000000' [ 92.262627][ T1893] FAT-fs (loop0): Directory bread(block 66) failed [ 92.276919][ T1893] FAT-fs (loop0): Directory bread(block 67) failed [ 92.285449][ T1893] FAT-fs (loop0): Directory bread(block 68) failed [ 92.291860][ T1893] FAT-fs (loop0): Directory bread(block 69) failed [ 92.298510][ T1893] FAT-fs (loop0): Directory bread(block 70) failed [ 92.305346][ T1893] FAT-fs (loop0): Directory bread(block 71) failed [ 92.311806][ T1893] FAT-fs (loop0): Directory bread(block 72) failed [ 92.318523][ T1893] FAT-fs (loop0): Directory bread(block 73) failed [ 92.324875][ T1895] cgroup: Unknown subsys name 'rlimit' [ 92.442745][ T1897] loop3: detected capacity change from 0 to 512 [ 92.556730][ T1897] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.579947][ T1897] ext4 filesystem being mounted at /80/bus supports timestamps until 2038 (0x7fffffff) [ 92.696659][ T291] EXT4-fs (loop3): unmounting filesystem. [ 92.716206][ T1902] loop2: detected capacity change from 0 to 1024 [ 92.729423][ T1902] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.757642][ T290] EXT4-fs (loop2): unmounting filesystem. [ 92.774984][ T298] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.291277][ T1917] binder: 1912:1917 ioctl c0306201 0 returned -14 [ 93.818689][ T1924] loop2: detected capacity change from 0 to 2048 [ 93.957189][ T1924] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.965724][ T298] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.976215][ T298] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.007306][ T28] audit: type=1400 audit(1732224498.601:299): avc: denied { execute } for pid=1923 comm="syz.2.427" path="/81/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.083341][ T298] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.092311][ T298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.133288][ T298] usb 1-1: SerialNumber: syz [ 94.225993][ T1924] overlayfs: missing 'lowerdir' [ 94.242876][ T1924] overlayfs: './file1' not a directory [ 94.265797][ T290] EXT4-fs (loop2): unmounting filesystem. [ 94.315294][ T28] audit: type=1400 audit(1732224498.911:300): avc: denied { ioctl } for pid=1939 comm="syz.2.430" path="socket:[21479]" dev="sockfs" ino=21479 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.383818][ T1948] loop2: detected capacity change from 0 to 512 [ 94.400732][ T1948] ext3: Unknown parameter 'uid<00000000000000000000' [ 94.454203][ T298] usb 1-1: 0:2 : does not exist [ 94.465125][ T1948] cgroup: Unknown subsys name 'rlimit' [ 94.465275][ T1952] FAULT_INJECTION: forcing a failure. [ 94.465275][ T1952] name failslab, interval 1, probability 0, space 0, times 0 [ 94.493492][ T1952] CPU: 1 PID: 1952 Comm: syz.1.434 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 94.503057][ T1952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 94.512952][ T1952] Call Trace: [ 94.516070][ T1952] [ 94.518850][ T1952] dump_stack_lvl+0x151/0x1b7 [ 94.523361][ T1952] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 94.528665][ T1952] dump_stack+0x15/0x1e [ 94.532760][ T1952] should_fail_ex+0x3d0/0x520 [ 94.532947][ T1928] loop3: detected capacity change from 0 to 40427 [ 94.537265][ T1952] ? prepare_creds+0x2f/0x6a0 [ 94.537289][ T1952] __should_failslab+0xaf/0xf0 [ 94.537313][ T1952] should_failslab+0x9/0x20 [ 94.556979][ T1952] kmem_cache_alloc+0x3b/0x320 [ 94.561580][ T1952] prepare_creds+0x2f/0x6a0 [ 94.565909][ T1952] ? bpf_trace_run1+0x240/0x240 [ 94.570596][ T1952] __sys_setreuid+0x105/0x8e0 [ 94.575115][ T1952] ? __bpf_trace_sys_enter+0x62/0x70 [ 94.580235][ T1952] __x64_sys_setreuid+0x5a/0x70 [ 94.584915][ T1952] x64_sys_call+0x33f/0x9a0 [ 94.589258][ T1952] do_syscall_64+0x3b/0xb0 [ 94.593507][ T1952] ? clear_bhb_loop+0x55/0xb0 [ 94.598032][ T1952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.603761][ T1952] RIP: 0033:0x7f575eb7e819 [ 94.603890][ T1953] loop2: detected capacity change from 0 to 512 [ 94.608003][ T1952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.633518][ T1952] RSP: 002b:00007f575f972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 94.641766][ T1952] RAX: ffffffffffffffda RBX: 00007f575ed35fa0 RCX: 00007f575eb7e819 [ 94.649571][ T1952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.657384][ T1952] RBP: 00007f575f972090 R08: 0000000000000000 R09: 0000000000000000 [ 94.665194][ T1952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.673006][ T1952] R13: 0000000000000000 R14: 00007f575ed35fa0 R15: 00007ffd51956a68 [ 94.680828][ T1952] [ 94.685426][ T1928] F2FS-fs (loop3): LFS is not compatible with checkpoint=disable [ 94.687253][ T411] usb 1-1: USB disconnect, device number 5 [ 94.712435][ T1953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.721517][ T1953] ext4 filesystem being mounted at /83/bus supports timestamps until 2038 (0x7fffffff) [ 94.752753][ T290] EXT4-fs (loop2): unmounting filesystem. [ 94.872931][ T1963] loop2: detected capacity change from 0 to 1024 [ 94.889661][ T1963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.896539][ T1963] ext4: Unknown parameter 'obj_role' [ 95.363279][ T407] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 95.881708][ T1981] 9pnet: Could not find request transport: fd0x0000000000000003 [ 96.366782][ T1987] loop2: detected capacity change from 0 to 2048 [ 96.386602][ T28] audit: type=1400 audit(1732224500.981:301): avc: denied { getopt } for pid=1990 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.407086][ T1987] loop2: p2 < > p4 [ 96.408483][ T28] audit: type=1400 audit(1732224500.981:302): avc: denied { bind } for pid=1990 comm="syz.0.445" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.412154][ T1987] loop2: p4 size 8192 extends beyond EOD, truncated [ 96.432327][ T28] audit: type=1400 audit(1732224500.981:303): avc: denied { name_bind } for pid=1990 comm="syz.0.445" src=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 96.461411][ T1983] loop3: detected capacity change from 0 to 512 [ 96.468247][ T1983] EXT4-fs (loop3): Test dummy encryption mode enabled [ 96.478365][ T28] audit: type=1400 audit(1732224500.981:304): avc: denied { node_bind } for pid=1990 comm="syz.0.445" saddr=ff01::1 src=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 96.504510][ T1983] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.440: inline data xattr refers to an external xattr inode [ 96.519564][ T1983] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.440: couldn't read orphan inode 12 (err -117) [ 96.531553][ T1983] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.541707][ T1983] EXT4-fs (loop3): unmounting filesystem. [ 96.543314][ T407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.566374][ T407] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 96.578883][ T407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.589052][ T407] usb 5-1: config 0 descriptor?? [ 96.746126][ T28] audit: type=1400 audit(1732224501.341:305): avc: denied { write } for pid=2006 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.791338][ T2004] loop2: detected capacity change from 0 to 512 [ 96.806184][ T2004] ext3: Unknown parameter 'uid<00000000000000000000' [ 96.854925][ T2004] cgroup: Unknown subsys name 'rlimit' [ 96.938247][ T2013] loop2: detected capacity change from 0 to 512 [ 96.973407][ T407] usbhid 5-1:0.0: can't add hid device: -71 [ 97.003915][ T407] usbhid: probe of 5-1:0.0 failed with error -71 [ 97.040660][ T407] usb 5-1: USB disconnect, device number 10 [ 97.071353][ T2013] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.089822][ T2013] ext4 filesystem being mounted at /87/bus supports timestamps until 2038 (0x7fffffff) [ 97.176946][ T290] EXT4-fs (loop2): unmounting filesystem. [ 97.184462][ T2018] loop3: detected capacity change from 0 to 256 [ 97.254671][ T2020] FAULT_INJECTION: forcing a failure. [ 97.254671][ T2020] name failslab, interval 1, probability 0, space 0, times 0 [ 97.276251][ T2020] CPU: 1 PID: 2020 Comm: syz.2.451 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 97.285819][ T2020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 97.295711][ T2020] Call Trace: [ 97.298834][ T2020] [ 97.301623][ T2020] dump_stack_lvl+0x151/0x1b7 [ 97.306127][ T2020] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 97.311422][ T2020] ? avc_denied+0x1b0/0x1b0 [ 97.315761][ T2020] dump_stack+0x15/0x1e [ 97.319752][ T2020] should_fail_ex+0x3d0/0x520 [ 97.324267][ T2020] __should_failslab+0xaf/0xf0 [ 97.328880][ T2020] ? sk_prot_alloc+0xf9/0x330 [ 97.333375][ T2020] should_failslab+0x9/0x20 [ 97.337729][ T2020] __kmem_cache_alloc_node+0x3d/0x2a0 [ 97.342941][ T2020] ? slab_post_alloc_hook+0x72/0x2c0 [ 97.348049][ T2020] ? sk_prot_alloc+0xf9/0x330 [ 97.352556][ T2020] __kmalloc+0xa3/0x1e0 [ 97.356549][ T2020] ? security_inode_alloc+0x29/0x120 [ 97.361846][ T2020] sk_prot_alloc+0xf9/0x330 [ 97.366184][ T2020] sk_alloc+0x38/0x440 [ 97.370086][ T2020] ? ns_capable+0x89/0xe0 [ 97.374251][ T2020] packet_create+0x104/0x880 [ 97.378679][ T2020] __sock_create+0x3a6/0x760 [ 97.383107][ T2020] __sys_socketpair+0x313/0x6e0 [ 97.387791][ T2020] ? __ia32_sys_socket+0x90/0x90 [ 97.392566][ T2020] ? __ia32_sys_read+0x90/0x90 [ 97.397165][ T2020] ? debug_smp_processor_id+0x17/0x20 [ 97.402384][ T2020] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 97.408281][ T2020] __x64_sys_socketpair+0x9b/0xb0 [ 97.413135][ T2020] x64_sys_call+0x19b/0x9a0 [ 97.417470][ T2020] do_syscall_64+0x3b/0xb0 [ 97.421725][ T2020] ? clear_bhb_loop+0x55/0xb0 [ 97.426239][ T2020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.431968][ T2020] RIP: 0033:0x7f33c9f7e819 [ 97.436227][ T2020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.455661][ T2020] RSP: 002b:00007f33cacaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 97.463905][ T2020] RAX: ffffffffffffffda RBX: 00007f33ca135fa0 RCX: 00007f33c9f7e819 [ 97.471724][ T2020] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000011 [ 97.479527][ T2020] RBP: 00007f33cacaa090 R08: 0000000000000000 R09: 0000000000000000 [ 97.487352][ T2020] R10: 0000000020001080 R11: 0000000000000246 R12: 0000000000000001 [ 97.495147][ T2020] R13: 0000000000000000 R14: 00007f33ca135fa0 R15: 00007ffee5cca648 [ 97.502969][ T2020] [ 98.410607][ T2038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=2038 comm=syz.4.453 [ 99.561352][ T2048] loop0: detected capacity change from 0 to 512 [ 99.583393][ T1314] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 99.603905][ T2048] EXT4-fs (loop0): Test dummy encryption mode enabled [ 99.658821][ T2048] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.452: inline data xattr refers to an external xattr inode [ 99.658833][ T2044] loop3: detected capacity change from 0 to 1024 [ 99.680212][ T2048] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.452: couldn't read orphan inode 12 (err -117) [ 99.684147][ T2044] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.459: Invalid block bitmap block 0 in block_group 0 [ 99.705522][ T2048] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.715042][ T2048] EXT4-fs (loop0): unmounting filesystem. [ 99.754339][ T2044] Quota error (device loop3): write_blk: dquota write failed [ 99.761564][ T2044] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 99.775547][ T351] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.783999][ T2044] EXT4-fs error (device loop3): ext4_acquire_dquot:6787: comm syz.3.459: Failed to acquire dquot type 0 [ 99.795571][ T2044] EXT4-fs error (device loop3): ext4_free_blocks:6212: comm syz.3.459: Freeing blocks not in datazone - block = 0, count = 4096 [ 99.809424][ T2044] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.459: Invalid inode bitmap blk 0 in block_group 0 [ 99.822757][ T2044] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 99.833292][ T10] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 99.840797][ T2044] EXT4-fs (loop3): 1 orphan inode deleted [ 99.842144][ T1314] usb 5-1: Using ep0 maxpacket: 16 [ 99.852864][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6810: comm kworker/u4:1: Failed to release dquot type 0 [ 99.854992][ T2044] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.883239][ T2044] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 99.983490][ T1314] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.994288][ T1314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.006831][ T1314] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 100.023495][ T1314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.038650][ T1314] usb 5-1: config 0 descriptor?? [ 100.044033][ T351] usb 3-1: Using ep0 maxpacket: 16 [ 100.163509][ T351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.179155][ T351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.226630][ T291] EXT4-fs (loop3): unmounting filesystem. [ 100.363404][ T351] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 100.429362][ T2067] binder: 2061:2067 ioctl c0306201 0 returned -14 [ 101.573386][ T1314] hid (null): global environment stack underflow [ 101.582119][ T1314] hid (null): invalid report_size 5201 [ 101.587530][ T351] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 101.595773][ T351] usb 3-1: Product: syz [ 101.599684][ T351] usb 3-1: Manufacturer: syz [ 101.604208][ T1314] hid (null): global environment stack underflow [ 101.610293][ T1314] hid (null): global environment stack underflow [ 101.667615][ T1314] hid (null): bogus close delimiter [ 101.673160][ T351] usb 3-1: config 0 descriptor?? [ 101.678223][ T1314] hid (null): unknown global tag 0xc [ 101.687639][ T1314] hid (null): unknown global tag 0xe1 [ 101.692863][ T1314] hid (null): unknown global tag 0xe [ 101.699716][ T1314] hid-generic 0003:060B:500A.0009: unexpected long global item [ 101.717326][ T2082] loop0: detected capacity change from 0 to 2048 [ 101.724730][ T1314] hid-generic: probe of 0003:060B:500A.0009 failed with error -22 [ 101.774248][ T2082] loop0: p2 < > p4 [ 101.779034][ T2082] loop0: p4 size 8192 extends beyond EOD, truncated [ 101.805155][ T1314] usb 5-1: USB disconnect, device number 11 [ 101.953312][ T407] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.266443][ T2089] loop0: detected capacity change from 0 to 40427 [ 102.274844][ T2089] F2FS-fs (loop0): fault_injection options not supported [ 102.282551][ T2089] F2FS-fs (loop0): invalid crc value [ 102.288886][ T2089] F2FS-fs (loop0): Mismatch valid blocks 0 vs. 2 [ 102.296050][ T2089] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 102.343371][ T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.376745][ T407] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 102.396086][ T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.418753][ T407] usb 2-1: config 0 descriptor?? [ 103.229415][ T2102] fuse: Bad value for 'fd' [ 103.263336][ T407] usbhid 2-1:0.0: can't add hid device: -71 [ 103.274152][ T407] usbhid: probe of 2-1:0.0 failed with error -71 [ 103.297078][ T407] usb 2-1: USB disconnect, device number 6 [ 103.310865][ T2109] incfs: Can't find or create .index dir in ./file0 [ 103.317515][ T2109] incfs: mount failed -14 [ 103.365063][ T2113] syz.0.477[2113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.365145][ T2113] syz.0.477[2113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.483254][ T28] audit: type=1400 audit(1732224508.071:306): avc: denied { setopt } for pid=2112 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.497772][ T2107] loop4: detected capacity change from 0 to 40427 [ 103.517201][ T2113] loop0: detected capacity change from 0 to 2048 [ 103.534859][ T2107] F2FS-fs (loop4): fault_injection options not supported [ 103.558188][ T2117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2117 comm=syz.1.478 [ 103.574141][ T2107] F2FS-fs (loop4): invalid crc value [ 103.594869][ T2118] binder: 2110:2118 ioctl c0306201 0 returned -14 [ 104.283271][ T2107] F2FS-fs (loop4): Mismatch valid blocks 0 vs. 2 [ 104.283293][ T351] usbhid 3-1:0.0: can't add hid device: -71 [ 104.283348][ T351] usbhid: probe of 3-1:0.0 failed with error -71 [ 104.302392][ T2107] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 104.327672][ T2127] loop3: detected capacity change from 0 to 512 [ 104.337819][ T102] Alternate GPT is invalid, using primary GPT. [ 104.345394][ T351] usb 3-1: USB disconnect, device number 4 [ 104.352214][ T102] loop0: p2 p3 p7 [ 104.357124][ T2127] ext3: Unknown parameter 'smackfstransmute' [ 104.388790][ T319] udevd[319]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 104.418097][ T344] udevd[344]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 104.427713][ T2131] loop0: detected capacity change from 0 to 256 [ 104.435052][ T346] udevd[346]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 104.445210][ T2131] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿ18446744073709551615" or missing value [ 104.447340][ T317] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.407877][ T2125] loop2: detected capacity change from 0 to 40427 [ 105.443719][ T2125] F2FS-fs (loop2): fault_injection options not supported [ 105.460256][ T2125] F2FS-fs (loop2): invalid crc value [ 105.477251][ T2147] incfs: Can't find or create .index dir in ./file0 [ 105.487972][ T2147] incfs: mount failed -14 [ 105.492845][ T2125] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 2 [ 105.613908][ T2125] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 105.791310][ T2159] syz.4.490[2159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.791389][ T2159] syz.4.490[2159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.919877][ T2150] device vlan2 entered promiscuous mode [ 106.783858][ T28] audit: type=1400 audit(1732224511.381:307): avc: denied { map } for pid=2185 comm="syz.0.497" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.018653][ T2188] binder: 2185:2188 ioctl c018620c 20000100 returned -22 [ 107.163364][ T28] audit: type=1400 audit(1732224511.621:308): avc: denied { mount } for pid=2185 comm="syz.0.497" name="/" dev="configfs" ino=14350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 107.378599][ T28] audit: type=1400 audit(1732224511.971:309): avc: denied { wake_alarm } for pid=2189 comm="syz.3.498" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.485432][ T28] audit: type=1400 audit(1732224512.081:310): avc: denied { bind } for pid=2196 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.596032][ T2183] loop4: detected capacity change from 0 to 40427 [ 107.610530][ T2183] F2FS-fs (loop4): fault_injection options not supported [ 107.649782][ T2183] F2FS-fs (loop4): invalid crc value [ 107.656558][ T2183] F2FS-fs (loop4): Mismatch valid blocks 0 vs. 2 [ 107.663636][ T2183] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 107.746383][ T1314] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 107.795686][ T2208] loop2: detected capacity change from 0 to 1024 [ 107.810616][ T2208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.833437][ T2208] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.862549][ T2208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.695173][ T2216] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 108.763417][ T1314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.809601][ T1314] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.023277][ T1314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.031877][ T1314] usb 4-1: config 0 descriptor?? [ 109.059711][ T290] EXT4-fs (loop2): unmounting filesystem. [ 109.065997][ T28] audit: type=1400 audit(1732224513.661:311): avc: denied { write } for pid=2230 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.124074][ T2239] syz.2.505[2239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.124154][ T2239] syz.2.505[2239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.316991][ T2195] loop3: detected capacity change from 0 to 512 [ 109.353352][ T593] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.429423][ T2195] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 109.603354][ T593] usb 1-1: Using ep0 maxpacket: 16 [ 109.663297][ T407] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 109.670737][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.763392][ T593] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.843360][ T593] usb 1-1: config 156 has an invalid descriptor of length 0, skipping remainder of the config [ 109.853764][ T593] usb 1-1: config 156 has 0 interfaces, different from the descriptor's value: 1 [ 110.023433][ T593] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=80.a7 [ 110.032942][ T593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.040719][ T2256] tipc: Started in network mode [ 110.045764][ T407] usb 5-1: config index 0 descriptor too short (expected 548, got 36) [ 110.047202][ T593] usb 1-1: Product: syz [ 110.053915][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.058359][ T593] usb 1-1: Manufacturer: syz [ 110.068700][ T407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.073165][ T593] usb 1-1: SerialNumber: syz [ 110.083868][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.088246][ T2256] tipc: Node identity 1, cluster identity 4711 [ 110.103736][ T407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.103777][ T407] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 110.103803][ T407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.104206][ T6] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 110.114128][ T2256] tipc: Node number set to 1 [ 110.123384][ T407] usb 5-1: config 0 descriptor?? [ 110.134481][ T2256] tipc: Cannot configure node identity twice [ 110.154465][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.167945][ T6] usb 3-1: config 0 descriptor?? [ 110.398209][ T2245] loop4: detected capacity change from 0 to 512 [ 110.404616][ T593] usb 1-1: USB disconnect, device number 6 [ 110.425637][ T2245] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.438236][ T2245] EXT4-fs (loop4): 1 truncate cleaned up [ 110.443817][ T2245] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.663322][ T1314] usbhid 4-1:0.0: can't add hid device: -71 [ 110.669185][ T1314] usbhid: probe of 4-1:0.0 failed with error -71 [ 110.686023][ T1314] usb 4-1: USB disconnect, device number 8 [ 110.754950][ T407] uclogic 0003:5543:0781.000A: unknown main item tag 0x0 [ 110.761850][ T407] uclogic 0003:5543:0781.000A: unknown main item tag 0x0 [ 110.769208][ T407] uclogic 0003:5543:0781.000A: unknown main item tag 0x0 [ 110.776389][ T407] uclogic 0003:5543:0781.000A: unknown main item tag 0x0 [ 110.783877][ T407] uclogic 0003:5543:0781.000A: unknown main item tag 0x0 [ 110.790786][ T407] uclogic 0003:5543:0781.000A: unknown main item tag 0x0 [ 110.801369][ T407] uclogic 0003:5543:0781.000A: unknown main item tag 0x0 [ 110.808474][ T6] usbhid 3-1:0.0: can't add hid device: -32 [ 110.815491][ T6] usbhid: probe of 3-1:0.0 failed with error -32 [ 110.821930][ T407] uclogic 0003:5543:0781.000A: No inputs registered, leaving [ 110.966986][ T407] uclogic 0003:5543:0781.000A: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 111.015411][ T1314] usb 5-1: USB disconnect, device number 12 [ 112.079744][ T2291] binder: 2285:2291 ioctl c0306201 0 returned -14 [ 112.599046][ T407] usb 3-1: USB disconnect, device number 5 [ 112.677987][ T28] audit: type=1400 audit(1732224517.271:312): avc: denied { create } for pid=2300 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.703875][ T292] EXT4-fs (loop4): unmounting filesystem. [ 112.716784][ T28] audit: type=1400 audit(1732224517.271:313): avc: denied { connect } for pid=2300 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 113.810305][ T2326] FAULT_INJECTION: forcing a failure. [ 113.810305][ T2326] name failslab, interval 1, probability 0, space 0, times 0 [ 113.823038][ T2326] CPU: 0 PID: 2326 Comm: syz.1.530 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 113.832581][ T2326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 113.842475][ T2326] Call Trace: [ 113.845618][ T2326] [ 113.848374][ T2326] dump_stack_lvl+0x151/0x1b7 [ 113.852891][ T2326] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 113.858188][ T2326] dump_stack+0x15/0x1e [ 113.862172][ T2326] should_fail_ex+0x3d0/0x520 [ 113.866689][ T2326] ? security_inode_alloc+0x29/0x120 [ 113.871874][ T2326] __should_failslab+0xaf/0xf0 [ 113.876408][ T2326] should_failslab+0x9/0x20 [ 113.880749][ T2326] kmem_cache_alloc+0x3b/0x320 [ 113.885352][ T2326] security_inode_alloc+0x29/0x120 [ 113.890294][ T2326] inode_init_always+0x720/0x970 [ 113.895070][ T2326] ? shmem_match+0x180/0x180 [ 113.899493][ T2326] new_inode_pseudo+0x98/0x1d0 [ 113.904096][ T2326] new_inode+0x28/0x1c0 [ 113.908091][ T2326] shmem_get_inode+0x32d/0xc20 [ 113.912689][ T2326] __shmem_file_setup+0x111/0x2a0 [ 113.917552][ T2326] shmem_file_setup+0x2f/0x40 [ 113.922082][ T2326] __se_sys_memfd_create+0x1e1/0x3e0 [ 113.927186][ T2326] __x64_sys_memfd_create+0x5b/0x70 [ 113.932218][ T2326] x64_sys_call+0x871/0x9a0 [ 113.936557][ T2326] do_syscall_64+0x3b/0xb0 [ 113.940814][ T2326] ? clear_bhb_loop+0x55/0xb0 [ 113.945322][ T2326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.951048][ T2326] RIP: 0033:0x7f575eb7e819 [ 113.955315][ T2326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.974748][ T2326] RSP: 002b:00007f575f92fe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 113.982993][ T2326] RAX: ffffffffffffffda RBX: 0000000000000493 RCX: 00007f575eb7e819 [ 113.990801][ T2326] RDX: 00007f575f92fef0 RSI: 0000000000000000 RDI: 00007f575ebf1fca [ 113.998610][ T2326] RBP: 0000000020001340 R08: 00007f575f92fbb7 R09: 00007f575f92fe40 [ 114.006423][ T2326] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200000c0 [ 114.014237][ T2326] R13: 00007f575f92fef0 R14: 00007f575f92feb0 R15: 0000000020000240 [ 114.022052][ T2326] [ 114.045973][ T28] audit: type=1400 audit(1732224518.641:314): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.187590][ T2330] loop4: detected capacity change from 0 to 1024 [ 114.217941][ T2331] syz.2.536[2331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.218024][ T2331] syz.2.536[2331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.270605][ T2330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.288210][ T2330] ext4: Unknown parameter 'obj_role' [ 114.353738][ T344] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.633344][ T1314] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.333313][ T1314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.353236][ T1314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.363046][ T1314] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 115.394766][ T1314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.413796][ T1314] usb 3-1: config 0 descriptor?? [ 116.113332][ T1314] usbhid 3-1:0.0: can't add hid device: -32 [ 116.119127][ T1314] usbhid: probe of 3-1:0.0 failed with error -32 [ 116.133293][ T6] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 116.610674][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 116.720362][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 116.743436][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.763155][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.772069][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.817408][ T6] usb 4-1: config 0 descriptor?? [ 116.833309][ T2379] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 116.939327][ T2417] tipc: Started in network mode [ 116.949231][ T2417] tipc: Node identity 1, cluster identity 4711 [ 116.955570][ T2417] tipc: Node number set to 1 [ 116.960150][ T2417] tipc: Cannot configure node identity twice [ 117.151884][ T2420] binder: 2414:2420 ioctl c0306201 0 returned -14 [ 117.781181][ T593] usb 3-1: USB disconnect, device number 6 [ 117.848052][ T6] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 117.856853][ T6] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 117.873852][ T6] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 117.991259][ T28] audit: type=1400 audit(1732224522.581:315): avc: denied { ioctl } for pid=2431 comm="syz.0.566" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 118.029973][ T2434] loop4: detected capacity change from 0 to 512 [ 118.058035][ T2379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.081985][ T2379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.219026][ T294] usb 4-1: USB disconnect, device number 9 [ 118.273383][ T593] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.301943][ T2434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.350864][ T2434] tipc: Started in network mode [ 118.355823][ T2434] tipc: Node identity 1, cluster identity 4711 [ 118.361991][ T2434] tipc: Node number set to 1 [ 118.370635][ T2434] tipc: Cannot configure node identity twice [ 118.433800][ T292] EXT4-fs (loop4): unmounting filesystem. [ 118.593236][ T593] usb 3-1: Using ep0 maxpacket: 8 [ 118.700450][ T2445] binder: 2442:2445 ioctl c0306201 0 returned -14 [ 119.453678][ T593] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 119.464681][ T593] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 119.474744][ T593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.483288][ T593] usb 3-1: config 0 descriptor?? [ 119.523841][ T593] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 120.213662][ T294] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 120.563334][ T294] usb 5-1: Using ep0 maxpacket: 8 [ 120.693406][ T294] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 120.712231][ T294] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 120.722581][ T294] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.731754][ T6] usb 3-1: USB disconnect, device number 7 [ 120.923316][ T294] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.932270][ T294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.940069][ T294] usb 5-1: Product: syz [ 120.944043][ T294] usb 5-1: Manufacturer: syz [ 120.948413][ T294] usb 5-1: SerialNumber: syz [ 121.027320][ T2477] binder: 2474:2477 ioctl c0306201 0 returned -14 [ 121.582915][ T28] audit: type=1326 audit(1732224526.171:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2479 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7ef7e819 code=0x7ffc0000 [ 121.609633][ T28] audit: type=1326 audit(1732224526.201:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2479 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e7ef7e819 code=0x7ffc0000 [ 121.706030][ T28] audit: type=1326 audit(1732224526.201:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2479 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7ef7e819 code=0x7ffc0000 [ 121.729175][ T28] audit: type=1326 audit(1732224526.201:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2479 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8e7ef7e819 code=0x7ffc0000 [ 121.739386][ T2452] loop4: detected capacity change from 0 to 16 [ 121.752506][ T28] audit: type=1326 audit(1732224526.201:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2479 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7ef7e819 code=0x7ffc0000 [ 121.781562][ T28] audit: type=1326 audit(1732224526.201:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2479 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8e7ef7e819 code=0x7ffc0000 [ 121.812699][ T2487] fuse: blksize only supported for fuseblk [ 121.843809][ T2452] erofs: (device loop4): erofs_read_superblock: blkszbits 0 isn't supported [ 122.030579][ T28] audit: type=1326 audit(1732224526.201:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2479 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e7ef7e853 code=0x7ffc0000 [ 122.053641][ T28] audit: type=1326 audit(1732224526.201:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2479 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e7ef7d2ff code=0x7ffc0000 [ 122.076566][ T28] audit: type=1326 audit(1732224526.201:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2479 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8e7ef7e8a7 code=0x7ffc0000 [ 122.115912][ T2495] loop2: detected capacity change from 0 to 1024 [ 122.136987][ T2495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.147702][ T2452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.154691][ T2495] ext4: Unknown parameter 'obj_role' [ 122.161335][ T2452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.192226][ T2499] loop3: detected capacity change from 0 to 1024 [ 122.198833][ T2499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.205634][ T2499] ext4: Unknown parameter 'obj_role' [ 122.233807][ T346] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.303247][ T351] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.445548][ T294] usb 5-1: 0:2 : does not exist [ 122.458190][ T294] usb 5-1: USB disconnect, device number 13 [ 122.482948][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.563235][ T351] usb 1-1: Using ep0 maxpacket: 16 [ 122.683271][ T351] usb 1-1: config index 0 descriptor too short (expected 8228, got 36) [ 122.691412][ T351] usb 1-1: config 32 has an invalid descriptor of length 32, skipping remainder of the config [ 122.701866][ T351] usb 1-1: config 32 has 0 interfaces, different from the descriptor's value: 32 [ 122.823344][ T351] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 122.832331][ T351] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 122.840580][ T351] usb 1-1: Product: syz [ 122.844557][ T351] usb 1-1: Manufacturer: syz [ 122.919066][ T2510] loop4: detected capacity change from 0 to 512 [ 122.927801][ T2510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.991497][ T292] EXT4-fs (loop4): unmounting filesystem. [ 123.001781][ T2514] loop2: detected capacity change from 0 to 512 [ 123.021636][ T2514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 123.044797][ T2514] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038 (0x7fffffff) [ 123.172421][ T2514] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 123.191043][ T290] EXT4-fs (loop2): unmounting filesystem. [ 123.618609][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 123.618626][ T28] audit: type=1400 audit(1732224528.211:350): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 123.723263][ T6] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 123.848992][ T2544] fuse: blksize only supported for fuseblk [ 124.433313][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.846689][ T407] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 124.885960][ T6] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 124.895278][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.906695][ T6] usb 5-1: config 0 descriptor?? [ 124.924786][ T351] usb 1-1: USB disconnect, device number 7 [ 125.553344][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 125.559277][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 125.570434][ T6] usb 5-1: USB disconnect, device number 14 [ 125.623325][ T407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.634320][ T407] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 125.643525][ T407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.652668][ T407] usb 3-1: config 0 descriptor?? [ 126.003316][ T407] usbhid 3-1:0.0: can't add hid device: -71 [ 126.012057][ T407] usbhid: probe of 3-1:0.0 failed with error -71 [ 126.032032][ T407] usb 3-1: USB disconnect, device number 8 [ 126.620218][ T2594] device vlan2 entered promiscuous mode [ 126.715880][ T2598] loop4: detected capacity change from 0 to 512 [ 126.722771][ T2598] EXT4-fs (loop4): Test dummy encryption mode enabled [ 126.735921][ T28] audit: type=1400 audit(1732224531.331:351): avc: denied { read } for pid=2602 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 126.777148][ T2598] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.612: inline data xattr refers to an external xattr inode [ 126.792927][ T2598] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.612: couldn't read orphan inode 12 (err -117) [ 126.823432][ T2598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.985972][ T2610] loop2: detected capacity change from 0 to 1024 [ 127.016839][ T2610] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.123396][ T294] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 127.569943][ T290] EXT4-fs (loop2): unmounting filesystem. [ 127.589366][ T2624] loop2: detected capacity change from 0 to 512 [ 127.633871][ T344] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.647327][ T2624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.654395][ T2624] IPv6: NLM_F_CREATE should be set when creating new route [ 127.674760][ T2626] capability: warning: `syz.2.619' uses deprecated v2 capabilities in a way that may be insecure [ 127.685273][ T294] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 127.690681][ T2626] loop2: detected capacity change from 0 to 512 [ 127.694338][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.708302][ T294] usb 4-1: Product: syz [ 127.712290][ T294] usb 4-1: Manufacturer: syz [ 127.717013][ T294] usb 4-1: SerialNumber: syz [ 127.717528][ T2626] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.722215][ T294] usb 4-1: config 0 descriptor?? [ 127.736442][ T2626] EXT4-fs (loop2): 1 truncate cleaned up [ 127.741978][ T2626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 127.755644][ T28] audit: type=1400 audit(1732224532.351:352): avc: denied { rename } for pid=2625 comm="syz.2.619" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.799646][ T290] EXT4-fs (loop2): unmounting filesystem. [ 127.941785][ T2642] loop2: detected capacity change from 0 to 512 [ 127.963482][ T2642] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.975533][ T2642] EXT4-fs (loop2): 1 truncate cleaned up [ 127.991485][ T2642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.000967][ T28] audit: type=1400 audit(1732224532.601:353): avc: denied { write } for pid=2602 comm="syz.3.614" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 128.001547][ T2603] 9pnet_fd: Insufficient options for proto=fd [ 128.023614][ T28] audit: type=1400 audit(1732224532.601:354): avc: denied { write } for pid=2602 comm="syz.3.614" dev="sockfs" ino=24462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.035042][ T351] usb 4-1: USB disconnect, device number 10 [ 128.079118][ T290] EXT4-fs (loop2): unmounting filesystem. [ 128.159873][ T294] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.275255][ T2649] fuse: blksize only supported for fuseblk [ 128.403274][ T294] usb 1-1: Using ep0 maxpacket: 32 [ 128.523415][ T294] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 128.532069][ T294] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 128.544985][ T294] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 128.554249][ T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.563827][ T294] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 128.573610][ T294] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 128.591849][ T294] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 128.601045][ T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.612755][ T294] usb 1-1: config 0 descriptor?? [ 129.005494][ T6] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 129.036914][ T2598] EXT4-fs (loop4): unmounting filesystem. [ 130.101731][ T2660] sched: RT throttling activated [ 130.957498][ T2665] loop2: detected capacity change from 0 to 512 [ 130.967614][ T294] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 130.981373][ T294] usb 1-1: USB disconnect, device number 8 [ 130.996188][ T2665] EXT4-fs (loop2): Test dummy encryption mode enabled [ 131.020467][ T294] usblp0: removed [ 131.032181][ T2665] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.633: inline data xattr refers to an external xattr inode [ 131.047622][ T2665] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.633: couldn't read orphan inode 12 (err -117) [ 131.062391][ T2665] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 131.072014][ T2665] EXT4-fs (loop2): unmounting filesystem. [ 131.093152][ T28] audit: type=1400 audit(1732224535.681:355): avc: denied { getopt } for pid=2674 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.143788][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.157922][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.180151][ T6] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 131.201549][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.206748][ T2679] loop4: detected capacity change from 0 to 1024 [ 131.220090][ T6] usb 4-1: config 0 descriptor?? [ 131.246811][ T2683] input: syz1 as /devices/virtual/input/input7 [ 131.273395][ T2679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.284420][ T2679] ext4: Unknown parameter 'obj_role' [ 131.292381][ T2686] syz.2.641[2686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.294344][ T2686] syz.2.641[2686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.603248][ T314] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.724130][ T6] elo 0003:04E7:0030.000C: item fetching failed at offset 5/7 [ 131.731565][ T6] elo 0003:04E7:0030.000C: parse failed [ 131.737134][ T6] elo: probe of 0003:04E7:0030.000C failed with error -22 [ 132.061378][ T294] usb 4-1: USB disconnect, device number 11 [ 132.339516][ T2704] loop4: detected capacity change from 0 to 512 [ 132.370741][ T2704] ext3: Unknown parameter 'uid<00000000000000000000' [ 132.435070][ T2704] cgroup: Unknown subsys name 'rlimit' [ 132.472335][ T2704] loop4: detected capacity change from 0 to 512 [ 132.530008][ T2704] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.549475][ T2704] ext4 filesystem being mounted at /115/bus supports timestamps until 2038 (0x7fffffff) [ 132.613590][ T292] EXT4-fs (loop4): unmounting filesystem. [ 132.623293][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.643710][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.661306][ T28] audit: type=1400 audit(1732224537.251:356): avc: denied { append } for pid=2717 comm="syz.1.651" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 132.700160][ T314] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 132.709070][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.729236][ T314] usb 3-1: config 0 descriptor?? [ 132.784781][ T2725] loop4: detected capacity change from 0 to 512 [ 132.791169][ T2725] ext3: Unknown parameter 'uid<00000000000000000000' [ 132.867200][ T2725] cgroup: Unknown subsys name 'rlimit' [ 132.896735][ T2725] loop4: detected capacity change from 0 to 512 [ 132.934847][ T2725] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.953306][ T2725] ext4 filesystem being mounted at /116/bus supports timestamps until 2038 (0x7fffffff) [ 132.979013][ T292] EXT4-fs (loop4): unmounting filesystem. [ 133.036537][ T2736] loop4: detected capacity change from 0 to 1024 [ 133.053669][ T2736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.060192][ T2736] ext4: Unknown parameter 'obj_role' [ 133.220156][ T28] audit: type=1400 audit(1732224537.811:357): avc: denied { bind } for pid=2730 comm="syz.1.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.285931][ T2742] loop3: detected capacity change from 0 to 128 [ 133.299507][ T2742] FAT-fs (loop3): bogus number of reserved sectors [ 133.308294][ T2742] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 133.317985][ T2742] FAT-fs (loop3): Can't find a valid FAT filesystem [ 133.353288][ T314] usbhid 3-1:0.0: can't add hid device: -32 [ 133.370031][ T314] usbhid: probe of 3-1:0.0 failed with error -32 [ 133.532627][ T2750] syz.0.661[2750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.532752][ T2750] syz.0.661[2750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.724120][ T28] audit: type=1326 audit(1732224538.321:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575eb7e819 code=0x7ffc0000 [ 133.758536][ T28] audit: type=1326 audit(1732224538.321:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575eb7e819 code=0x7ffc0000 [ 133.773779][ T2755] FAULT_INJECTION: forcing a failure. [ 133.773779][ T2755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.781728][ T28] audit: type=1326 audit(1732224538.321:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f575eb7e819 code=0x7ffc0000 [ 133.794610][ T2755] CPU: 1 PID: 2755 Comm: syz.1.663 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 133.818130][ T28] audit: type=1326 audit(1732224538.321:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575eb7e819 code=0x7ffc0000 [ 133.827190][ T2755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 133.827206][ T2755] Call Trace: [ 133.827212][ T2755] [ 133.827220][ T2755] dump_stack_lvl+0x151/0x1b7 [ 133.850843][ T28] audit: type=1326 audit(1732224538.321:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575eb7e819 code=0x7ffc0000 [ 133.860269][ T2755] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 133.860306][ T2755] dump_stack+0x15/0x1e [ 133.864368][ T28] audit: type=1326 audit(1732224538.321:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f575eb7e819 code=0x7ffc0000 [ 133.866169][ T2755] should_fail_ex+0x3d0/0x520 [ 133.870713][ T28] audit: type=1326 audit(1732224538.321:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575eb7e819 code=0x7ffc0000 [ 133.893679][ T2755] should_fail+0xb/0x10 [ 133.893717][ T2755] should_fail_usercopy+0x1a/0x20 [ 133.893747][ T2755] _copy_to_user+0x1e/0x90 [ 133.893772][ T2755] simple_read_from_buffer+0xc7/0x150 [ 133.971971][ T2755] proc_fail_nth_read+0x1a3/0x210 [ 133.976826][ T2755] ? proc_fault_inject_write+0x390/0x390 [ 133.982293][ T2755] ? fsnotify_perm+0x269/0x5b0 [ 133.986939][ T2755] ? security_file_permission+0x86/0xb0 [ 133.992273][ T2755] ? proc_fault_inject_write+0x390/0x390 [ 133.997744][ T2755] vfs_read+0x26c/0xae0 [ 134.001737][ T2755] ? kernel_read+0x1f0/0x1f0 [ 134.006159][ T2755] ? mutex_lock+0xb1/0x1e0 [ 134.010418][ T2755] ? bit_wait_io_timeout+0x120/0x120 [ 134.015557][ T2755] ? __fdget_pos+0x2e2/0x390 [ 134.019962][ T2755] ? ksys_read+0x77/0x2c0 [ 134.024130][ T2755] ksys_read+0x199/0x2c0 [ 134.028207][ T2755] ? vfs_write+0xed0/0xed0 [ 134.032461][ T2755] ? debug_smp_processor_id+0x17/0x20 [ 134.037671][ T2755] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 134.043570][ T2755] __x64_sys_read+0x7b/0x90 [ 134.047909][ T2755] x64_sys_call+0x28/0x9a0 [ 134.052171][ T2755] do_syscall_64+0x3b/0xb0 [ 134.056413][ T2755] ? clear_bhb_loop+0x55/0xb0 [ 134.060933][ T2755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.066681][ T2755] RIP: 0033:0x7f575eb7d25c [ 134.070996][ T2755] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 134.090437][ T2755] RSP: 002b:00007f575f972030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.098679][ T2755] RAX: ffffffffffffffda RBX: 00007f575ed35fa0 RCX: 00007f575eb7d25c [ 134.106493][ T2755] RDX: 000000000000000f RSI: 00007f575f9720a0 RDI: 0000000000000004 [ 134.114318][ T2755] RBP: 00007f575f972090 R08: 0000000000000000 R09: 0000000000000000 [ 134.122118][ T2755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.130040][ T2755] R13: 0000000000000000 R14: 00007f575ed35fa0 R15: 00007ffd51956a68 [ 134.137888][ T2755] [ 134.145255][ T294] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 134.413278][ T294] usb 1-1: Using ep0 maxpacket: 32 [ 134.464039][ T1314] usb 3-1: USB disconnect, device number 9 [ 134.502523][ T2766] xt_hashlimit: size too large, truncated to 1048576 [ 134.617730][ T294] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 134.830267][ T2775] binder: 2768:2775 ioctl c0306201 0 returned -14 [ 134.958915][ T2776] loop2: detected capacity change from 0 to 512 [ 135.022941][ T2776] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.154119][ T294] usb 1-1: config 1 interface 0 has no altsetting 0 [ 135.175983][ T2776] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.667: inline data xattr refers to an external xattr inode [ 135.190859][ T2776] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.667: couldn't read orphan inode 12 (err -117) [ 135.202718][ T2776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 135.212612][ T2776] EXT4-fs (loop2): unmounting filesystem. [ 135.284732][ T294] usb 1-1: string descriptor 0 read error: -71 [ 135.298702][ T2761] loop3: detected capacity change from 0 to 1024 [ 135.334291][ T2761] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 135.346804][ T2761] EXT4-fs error (device loop3): ext4_get_journal_inode:5720: inode #32: comm syz.3.664: iget: special inode unallocated [ 135.359946][ T2761] EXT4-fs (loop3): no journal found [ 135.365819][ T2761] EXT4-fs (loop3): can't get journal size [ 135.416610][ T294] usb 1-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.40 [ 135.426444][ T294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.435472][ T294] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 135.444426][ T294] usb 1-1: no configuration chosen from 1 choice [ 135.451090][ T294] usb 1-1: USB disconnect, device number 9 [ 135.461875][ T2761] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.664: iget: special inode unallocated [ 135.577156][ T2761] EXT4-fs (loop3): failed to initialize system zone (-117) [ 135.664105][ T2786] loop4: detected capacity change from 0 to 512 [ 135.675234][ T2786] EXT4-fs (loop4): Test dummy encryption mode enabled [ 135.745144][ T2786] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.669: inline data xattr refers to an external xattr inode [ 135.758597][ T2761] EXT4-fs (loop3): mount failed [ 135.764822][ T2786] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.669: couldn't read orphan inode 12 (err -117) [ 135.776625][ T2786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.786103][ T2786] EXT4-fs (loop4): unmounting filesystem. [ 135.832780][ T2795] loop2: detected capacity change from 0 to 1024 [ 135.884908][ T289] ------------[ cut here ]------------ [ 135.890316][ T289] WARNING: CPU: 0 PID: 289 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 135.898148][ T289] Modules linked in: [ 135.901845][ T289] CPU: 0 PID: 289 Comm: syz-executor Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 135.911634][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 135.921507][ T289] RIP: 0010:drop_nlink+0xc1/0x110 [ 135.926353][ T289] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 b7 e2 ef ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ef 74 a8 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 135.945789][ T289] RSP: 0018:ffffc90000e97bf0 EFLAGS: 00010293 [ 135.951649][ T289] RAX: ffffffff81cd30c1 RBX: 0000000000000000 RCX: ffff88810f682880 [ 135.959642][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.967439][ T289] RBP: ffffc90000e97c18 R08: ffffffff81cd3044 R09: 0000000000000003 [ 135.975284][ T289] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 135.983034][ T289] R13: 1ffff1102219b3e1 R14: ffff888110cd9ec0 R15: ffff888110cd9f08 [ 135.990904][ T289] FS: 000055557e452500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 135.999673][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.006060][ T289] CR2: 000055557e4754e8 CR3: 000000012f36d000 CR4: 00000000003506b0 [ 136.013876][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.021651][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.029614][ T289] Call Trace: [ 136.032704][ T289] [ 136.035537][ T289] ? show_regs+0x58/0x60 [ 136.039560][ T289] ? __warn+0x160/0x3d0 [ 136.043594][ T289] ? drop_nlink+0xc1/0x110 [ 136.047809][ T289] ? report_bug+0x4d5/0x7d0 [ 136.052146][ T289] ? drop_nlink+0xc1/0x110 [ 136.056440][ T289] ? handle_bug+0x41/0x70 [ 136.060575][ T289] ? exc_invalid_op+0x1b/0x50 [ 136.065128][ T289] ? asm_exc_invalid_op+0x1b/0x20 [ 136.069949][ T289] ? drop_nlink+0x44/0x110 [ 136.074232][ T289] ? drop_nlink+0xc1/0x110 [ 136.078446][ T289] ? drop_nlink+0xc1/0x110 [ 136.082700][ T289] shmem_rmdir+0x59/0x90 [ 136.086816][ T289] vfs_rmdir+0x398/0x500 [ 136.090859][ T289] incfs_kill_sb+0x113/0x230 [ 136.095325][ T289] deactivate_locked_super+0xad/0x110 [ 136.100492][ T289] deactivate_super+0xbe/0xf0 [ 136.105033][ T289] cleanup_mnt+0x485/0x510 [ 136.109253][ T289] ? user_path_at_empty+0x14e/0x1a0 [ 136.114321][ T289] __cleanup_mnt+0x19/0x20 [ 136.118542][ T289] task_work_run+0x24d/0x2e0 [ 136.122974][ T289] ? task_work_cancel+0x2e0/0x2e0 [ 136.127870][ T289] ? __x64_sys_umount+0x122/0x170 [ 136.132689][ T289] exit_to_user_mode_loop+0x94/0xa0 [ 136.137768][ T289] exit_to_user_mode_prepare+0x5a/0xa0 [ 136.138966][ T2795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.143014][ T289] syscall_exit_to_user_mode+0x26/0x130 [ 136.143050][ T289] do_syscall_64+0x47/0xb0 [ 136.154601][ T2795] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038 (0x7fffffff) [ 136.156682][ T289] ? clear_bhb_loop+0x55/0xb0 [ 136.174058][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 136.174076][ T28] audit: type=1326 audit(1732224540.761:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2794 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c9f7e819 code=0x7ffc0000 [ 136.175144][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.181062][ T28] audit: type=1326 audit(1732224540.761:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2794 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33c9f7e819 code=0x7ffc0000 [ 136.204097][ T289] RIP: 0033:0x7f8e7ef7fb47 [ 136.204129][ T289] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 136.204147][ T289] RSP: 002b:00007ffc2db47458 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 136.264984][ T289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8e7ef7fb47 [ 136.272193][ T28] audit: type=1326 audit(1732224540.761:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2794 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c9f7e819 code=0x7ffc0000 [ 136.272768][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2db47510 [ 136.295904][ T28] audit: type=1326 audit(1732224540.761:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2794 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f33c9f7e819 code=0x7ffc0000 [ 136.303588][ T289] RBP: 00007ffc2db47510 R08: 0000000000000000 R09: 0000000000000000 [ 136.326713][ T28] audit: type=1326 audit(1732224540.761:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2794 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c9f7e819 code=0x7ffc0000 [ 136.334419][ T289] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffc2db48590 [ 136.357795][ T28] audit: type=1326 audit(1732224540.761:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2794 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f33c9f7e819 code=0x7ffc0000 [ 136.365221][ T289] R13: 00007f8e7eff15fc R14: 000000000002097e R15: 00007ffc2db485d0 [ 136.396146][ T289] [ 136.396152][ T28] audit: type=1326 audit(1732224540.761:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2794 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f33c9f7e853 code=0x7ffc0000 [ 136.398964][ T289] ---[ end trace 0000000000000000 ]--- [ 136.431382][ T290] EXT4-fs (loop2): unmounting filesystem. [ 136.432577][ T289] ================================================================== [ 136.438401][ T28] audit: type=1326 audit(1732224540.761:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2794 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f33c9f7d2ff code=0x7ffc0000 [ 136.444952][ T289] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 136.444982][ T289] Write of size 4 at addr 0000000000000170 by task syz-executor/289 [ 136.444998][ T289] [ 136.445005][ T289] CPU: 0 PID: 289 Comm: syz-executor Tainted: G W 6.1.112-syzkaller-00026-g51bee181735e #0 [ 136.445027][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 136.445039][ T289] Call Trace: [ 136.445045][ T289] [ 136.468722][ T28] audit: type=1326 audit(1732224540.761:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2794 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f33c9f7e8a7 code=0x7ffc0000 [ 136.473936][ T289] dump_stack_lvl+0x151/0x1b7 [ 136.473966][ T289] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 136.483036][ T28] audit: type=1326 audit(1732224540.771:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2794 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33c9f7d1b0 code=0x7ffc0000 [ 136.483916][ T289] ? _printk+0xd1/0x111 [ 136.483954][ T289] print_report+0xe1/0x4e0 [ 136.575089][ T289] ? __virt_addr_valid+0x59/0x2f0 [ 136.579994][ T289] ? kasan_addr_to_slab+0xd/0x80 [ 136.584770][ T289] ? ihold+0x20/0x60 [ 136.588506][ T289] kasan_report+0x13c/0x170 [ 136.592838][ T289] ? ihold+0x20/0x60 [ 136.596573][ T289] kasan_check_range+0x294/0x2a0 [ 136.601347][ T289] __kasan_check_write+0x14/0x20 [ 136.606118][ T289] ihold+0x20/0x60 [ 136.609678][ T289] vfs_rmdir+0x268/0x500 [ 136.613842][ T289] incfs_kill_sb+0x113/0x230 [ 136.618271][ T289] deactivate_locked_super+0xad/0x110 [ 136.623484][ T289] deactivate_super+0xbe/0xf0 [ 136.627990][ T289] cleanup_mnt+0x485/0x510 [ 136.632276][ T289] ? user_path_at_empty+0x14e/0x1a0 [ 136.637275][ T289] __cleanup_mnt+0x19/0x20 [ 136.641624][ T289] task_work_run+0x24d/0x2e0 [ 136.646049][ T289] ? task_work_cancel+0x2e0/0x2e0 [ 136.650928][ T289] ? __x64_sys_umount+0x122/0x170 [ 136.655785][ T289] exit_to_user_mode_loop+0x94/0xa0 [ 136.660824][ T289] exit_to_user_mode_prepare+0x5a/0xa0 [ 136.666093][ T289] syscall_exit_to_user_mode+0x26/0x130 [ 136.671470][ T289] do_syscall_64+0x47/0xb0 [ 136.675725][ T289] ? clear_bhb_loop+0x55/0xb0 [ 136.680235][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.685964][ T289] RIP: 0033:0x7f8e7ef7fb47 [ 136.690221][ T289] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 136.709677][ T289] RSP: 002b:00007ffc2db47458 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 136.717905][ T289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8e7ef7fb47 [ 136.725714][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2db47510 [ 136.733526][ T289] RBP: 00007ffc2db47510 R08: 0000000000000000 R09: 0000000000000000 [ 136.741338][ T289] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffc2db48590 [ 136.749151][ T289] R13: 00007f8e7eff15fc R14: 000000000002097e R15: 00007ffc2db485d0 [ 136.756968][ T289] [ 136.759824][ T289] ================================================================== [ 136.795093][ T289] Disabling lock debugging due to kernel taint [ 136.801286][ T289] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 136.808908][ T289] #PF: supervisor write access in kernel mode [ 136.814821][ T289] #PF: error_code(0x0002) - not-present page [ 136.820627][ T289] PGD 132b22067 P4D 132b22067 PUD 0 [ 136.823300][ T2804] loop2: detected capacity change from 0 to 1024 [ 136.825743][ T289] Oops: 0002 [#1] PREEMPT SMP KASAN [ 136.825770][ T289] CPU: 1 PID: 289 Comm: syz-executor Tainted: G B W 6.1.112-syzkaller-00026-g51bee181735e #0 [ 136.832304][ T2804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.836937][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 136.836951][ T289] RIP: 0010:ihold+0x25/0x60 [ 136.836980][ T289] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 c1 6c a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 60 da ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 44 70 a8 [ 136.851997][ T2804] ext4: Unknown parameter 'obj_role' [ 136.854557][ T289] RSP: 0018:ffffc90000e97c30 EFLAGS: 00010246 [ 136.854581][ T289] RAX: ffff88810f682800 RBX: 0000000000000001 RCX: ffff88810f682880 [ 136.907154][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.914966][ T289] RBP: ffffc90000e97c40 R08: ffffffff8144a2c3 R09: fffffbfff0f6e0fd [ 136.922778][ T289] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110261a388d [ 136.930590][ T289] R13: ffff8881140a4660 R14: 0000000000000000 R15: 1ffff110228148d2 [ 136.938398][ T289] FS: 000055557e452500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 136.947166][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.953590][ T289] CR2: 0000000000000170 CR3: 000000012f36d000 CR4: 00000000003506a0 [ 136.961398][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.969207][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.977020][ T289] Call Trace: [ 136.980142][ T289] [ 136.982924][ T289] ? __die_body+0x62/0xb0 [ 136.987176][ T289] ? __die+0x7e/0x90 [ 136.991253][ T289] ? page_fault_oops+0x7f9/0xa90 [ 136.996036][ T289] ? vprintk_default+0x26/0x30 [ 137.000629][ T289] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 137.006007][ T289] ? add_taint+0x44/0xe0 [ 137.010085][ T289] ? panic+0x667/0x667 [ 137.013995][ T289] ? preempt_schedule_thunk+0x16/0x18 [ 137.019203][ T289] ? exc_page_fault+0x529/0x6d0 [ 137.023887][ T289] ? asm_exc_page_fault+0x27/0x30 [ 137.028747][ T289] ? add_taint+0x93/0xe0 [ 137.032825][ T289] ? ihold+0x25/0x60 [ 137.036561][ T289] vfs_rmdir+0x268/0x500 [ 137.040638][ T289] incfs_kill_sb+0x113/0x230 [ 137.045066][ T289] deactivate_locked_super+0xad/0x110 [ 137.050274][ T289] deactivate_super+0xbe/0xf0 [ 137.054801][ T289] cleanup_mnt+0x485/0x510 [ 137.059038][ T289] ? user_path_at_empty+0x14e/0x1a0 [ 137.064073][ T289] __cleanup_mnt+0x19/0x20 [ 137.068324][ T289] task_work_run+0x24d/0x2e0 [ 137.072749][ T289] ? task_work_cancel+0x2e0/0x2e0 [ 137.077612][ T289] ? __x64_sys_umount+0x122/0x170 [ 137.082472][ T289] exit_to_user_mode_loop+0x94/0xa0 [ 137.087504][ T289] exit_to_user_mode_prepare+0x5a/0xa0 [ 137.092798][ T289] syscall_exit_to_user_mode+0x26/0x130 [ 137.098181][ T289] do_syscall_64+0x47/0xb0 [ 137.102443][ T289] ? clear_bhb_loop+0x55/0xb0 [ 137.106945][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.112674][ T289] RIP: 0033:0x7f8e7ef7fb47 [ 137.116934][ T289] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 137.136469][ T289] RSP: 002b:00007ffc2db47458 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 137.144810][ T289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8e7ef7fb47 [ 137.152616][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2db47510 [ 137.160431][ T289] RBP: 00007ffc2db47510 R08: 0000000000000000 R09: 0000000000000000 [ 137.168240][ T289] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffc2db48590 [ 137.176051][ T289] R13: 00007f8e7eff15fc R14: 000000000002097e R15: 00007ffc2db485d0 [ 137.183872][ T289] [ 137.186735][ T289] Modules linked in: [ 137.190476][ T289] CR2: 0000000000000170 [ 137.194522][ T289] ---[ end trace 0000000000000000 ]--- [ 137.199748][ T289] RIP: 0010:ihold+0x25/0x60 [ 137.204084][ T289] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 c1 6c a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 60 da ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 44 70 a8 [ 137.223526][ T289] RSP: 0018:ffffc90000e97c30 EFLAGS: 00010246 [ 137.229425][ T289] RAX: ffff88810f682800 RBX: 0000000000000001 RCX: ffff88810f682880 [ 137.237499][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.245312][ T289] RBP: ffffc90000e97c40 R08: ffffffff8144a2c3 R09: fffffbfff0f6e0fd [ 137.253120][ T289] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110261a388d [ 137.260931][ T289] R13: ffff8881140a4660 R14: 0000000000000000 R15: 1ffff110228148d2 [ 137.268746][ T289] FS: 000055557e452500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 137.277511][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.283931][ T289] CR2: 0000000000000170 CR3: 000000012f36d000 CR4: 00000000003506a0 [ 137.291772][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.299582][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.307369][ T289] Kernel panic - not syncing: Fatal exception [ 137.313584][ T289] Kernel Offset: disabled [ 137.317714][ T289] Rebooting in 86400 seconds..