last executing test programs: 5m54.445143651s ago: executing program 32 (id=202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074088ff0000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) 4m8.99824042s ago: executing program 33 (id=1053): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 3m34.129363904s ago: executing program 34 (id=1312): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x600, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x101800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f00000009c0)={[0xfec00000, 0xf000, 0x8080000, 0x60000], 0x6cbf, 0x20, 0x7e31}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x7c, 0x10, 0x5, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x5, 0x0, 0x7ff, 0x4, 0x1, 0x5, 0x2, 0x3}}, {0xa, 0x2, [0x6, 0x3, 0x7]}}]}]}, 0x7c}}, 0x0) 3m32.91341025s ago: executing program 7 (id=1313): bpf$ENABLE_STATS(0x20, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xa, 0x0, 0x4, 0x0, 0x8, 0xffffffffffffffff, 0xc0c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="a183e64f0c186f0000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000247000000"], 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000940), 0x1000000000000103) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x6000, &(0x7f0000000780)=[{&(0x7f00000007c0)='U', 0xa00120}], 0x1}, 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3a) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfd000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000002c0)={0x0, &(0x7f00000003c0)=[@rdmsr={0x66, 0x18, {0xda0}}], 0x18}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x4, 0x1, 0x6, 0xc, 0x10000, 0x6, 0x6}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_gettime(r4, &(0x7f0000000080)) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f0000000940)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) listen(r9, 0xfffffffe) ioctl$sock_TIOCOUTQ(r9, 0x5411, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x80010, 0xffffffffffffffff, 0x42795000) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r10, 0x89e0, &(0x7f0000000340)={0x4, 0x1}) 3m32.872872363s ago: executing program 7 (id=1320): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0xa1081a, &(0x7f0000000840)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32, @ANYRES16=0x0, @ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT], 0x21, 0x14fd, &(0x7f0000003f40)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x4000, 0x0) 3m32.769208314s ago: executing program 7 (id=1321): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25ac1e0101000000000000000000000000200100000000000000000080ffffff02000080024a2100020a0000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) 3m32.747799956s ago: executing program 7 (id=1322): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000005c0)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000600)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000140001000000000000000000e6"], 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_pidfd_open(0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100000a082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) 3m32.728676369s ago: executing program 35 (id=1322): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000005c0)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000600)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000140001000000000000000000e6"], 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_pidfd_open(0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100000a082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) 44.084459778s ago: executing program 8 (id=2791): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25ac1e010100000000000000000000000020010000000000000000000000000002000080024a2100020a0080ff1d00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fd32000000ffffffff00000000000000000000000000000000060000000000000000000000fdffffffffffffff0b0000000000000001000000000000000900000000000000000000000000000043050000200000000400000000000000ffffff7fffffff7f000000000000000000000000000000000300000001000000000000002cbd70000035000002"], 0x16c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) 44.05980573s ago: executing program 8 (id=2792): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x550, &(0x7f0000000500)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x80000001}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6f75}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048865}, 0x44) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x69, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) statx(r2, 0x0, 0x100, 0x40, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r1, &(0x7f0000003d40)={0x20, 0x40000, r3, {0x403, 0x0, 0x8, 0xfff}}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000ac0)=0xd, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000b00)=0xb27, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x2, 0x4e23, @loopback}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000fc0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001000)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = io_uring_setup(0x59b4, &(0x7f0000001080)={0x0, 0x9023, 0x1000, 0x2, 0xf8}) poll(&(0x7f0000001100)=[{r4, 0x4348}, {r1, 0x268}, {r5}], 0x3, 0x7ff) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="2213d3ae3000049be5e169931e92dee61d15238c574a8505d2c6fb75bd2f21b52206f3fc8231dae59d2a3c80dd1cf71df19c3994e65be6ee47379df730f69b6ad5e2fbb25d067d8b7675bed674ff6c823b033239b50b19d8684ba2398a58", 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="92dba7cc4e4fe50a93d5de1baaf50bbbf2eabd1d9a34aa9072af6fee1096e10f7d3457909b2d05533e04734c882101a130479f1f2fb09b39bb384f5d03b064388215c1f38cd1e8e12bdb765610e6cc54c60abc2b594784cd1396f265db", 0x5d}], 0x1}}], 0x2, 0x4080) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000cd00000000000000ff7f0000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000001080000400000000180000000000000000000000000000000000000000000000100"/192]) connect$unix(r7, &(0x7f0000000440)=@file={0x1, './file1\x00'}, 0x6e) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x4004}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40094}, 0x0) sendmsg$can_raw(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x1d, r10}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)=@canfd={{0x4, 0x1}, 0x1f, 0x0, 0x0, 0x0, "c1e8318d701c9e4f56f95f9b386b1833a137f72b60caf90a0112dec5773815b1a4655f1e1dc4d265e9b8c7b8312d348ecb6a68ab41fc962e0b0778bf000f55de"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) lsetxattr$security_capability(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), &(0x7f0000001cc0)=@v3={0x3000000, [{0x1, 0x3}, {0x6, 0x6f5b1000}]}, 0x18, 0x1) 43.462958161s ago: executing program 8 (id=2798): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001740)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'veth0_macvtap\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000017c0)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000001800)={0x11, 0x86dd, r0}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x783, &(0x7f00000001c0)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0, 0x10) pipe(&(0x7f0000001840)={0xffffffffffffffff}) setuid(0xee01) utimensat(r2, 0x0, &(0x7f0000001880)={{}, {0x0, 0xea60}}, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, 0x0, 0x0) 43.269144611s ago: executing program 8 (id=2804): personality(0xfe47fef9f5ff7379) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1208002, &(0x7f0000000180)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f0000001c80)="$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") syz_mount_image$vfat(&(0x7f0000002280), &(0x7f00000022c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000002300)) chdir(&(0x7f0000002340)='./bus\x00') ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002380)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000023c0)=@v1={0x0, @aes128, 0x4, @auto="4b04897f05f9e881"}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) syz_clone(0xc030a011, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x4000c010) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005"], 0x50) fsetxattr$trusted_overlay_origin(r1, 0x0, &(0x7f0000000080), 0x2, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r2, 0x80000001, 0x6, &(0x7f0000000c80)="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", 0xffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) 43.044071574s ago: executing program 8 (id=2808): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000840)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="010000000300000064000000000000000000000000000000000000000000000000000000007ffffffe000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 42.861126733s ago: executing program 8 (id=2812): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000004004000000b7080000008000007b8af8ff00000000b7080000020000007b8af04c00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000cc0)='GPL\x00', 0x3, 0x1005, &(0x7f0000000d00)=""/4101, 0x0, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd4a}, 0x22) 42.815122928s ago: executing program 36 (id=2812): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000004004000000b7080000008000007b8af8ff00000000b7080000020000007b8af04c00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000cc0)='GPL\x00', 0x3, 0x1005, &(0x7f0000000d00)=""/4101, 0x0, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd4a}, 0x22) 25.391605385s ago: executing program 5 (id=2950): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@resgid}, {@norecovery}, {@inlinecrypt}, {@test_dummy_encryption}]}, 0xa, 0x621, &(0x7f0000000200)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000000000000000000000000000000000027e220f0296d11e750addfd1dbc9434f7d4a00a819814b30a014a905d42fe13fbfd80c5849165c19f2767f7aa0c447639e386f7484600e3b837fa4c1fb49c48cc8048584883f1c62370493b708a31c64349a79d8ab3a27afa64093aef914487fba12736e9da44fb0d9", @ANYRES32=0x0, @ANYBLOB="a142000020000000"], 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ad5000/0x3000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000a40)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x3a, 0x7ff, 0x67, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp_prespec={0x44, 0x1c, 0x62, 0x3, 0x2, [{@empty, 0x5}, {@loopback, 0x6}, {@rand_addr=0x64010101, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x5}, {@loopback, 0x20005}, {@loopback}, {@remote, 0x329}]}]}}}}}}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181643, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xe, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB="611570000000000061136c0000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf0700000000000026050700fcffffff6706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001540), 0xffffffffffffffd2}, 0x48) 24.300517467s ago: executing program 5 (id=2956): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000900)={0x700, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a00000000000000000000000000000000008003000008000000000000000000080012000200020000000000000000003000"], 0xa0}}, 0x0) 24.213838216s ago: executing program 5 (id=2958): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d80)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000b00), 0xffffffffffffffd2}, 0x48) 24.213313336s ago: executing program 5 (id=2960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x51) (async, rerun: 64) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f00000007c0)='./file0\x00', 0x0, 0x81899, 0x0) (rerun: 64) chdir(&(0x7f0000000800)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x88) (async) mount(0x0, &(0x7f00000009c0)='./file0/../file0\x00', &(0x7f0000000a00)='sysfs\x00', 0x1214040, 0x0) (async) setxattr$trusted_overlay_origin(&(0x7f0000000a40)='./file0/../file0\x00', &(0x7f0000000a80), 0x0, 0x0, 0x0) ptrace(0x10, r2) (async, rerun: 32) ptrace$setregs(0xd, r2, 0xfffffffffffffffc, &(0x7f0000000540)="18607651149d7b10b4024fbbdc08899b8f589df2db8ebcd920a2b5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b250a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7") (rerun: 32) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000600)={0x0}) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f0000000640)={[0x3]}) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000000000000010001000900000001000000", @ANYRES32=r1, @ANYBLOB="000000000000002605000000000000009099c585fe0014b0465954fbb19700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0xd, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdd4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r5}, 0xc) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000480)) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000500)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint={0x0, 0x20}}]}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x440, 0x0) (async, rerun: 32) fcntl$setlease(r1, 0x400, 0x2) (rerun: 32) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000280)=0x5) (async) r8 = syz_open_procfs(r7, &(0x7f0000000080)='fdinfo/4\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/201, 0xc9}], 0x1, 0x0, 0x0) 23.967423711s ago: executing program 5 (id=2963): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x180, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x64}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x2c}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x306943}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40800}, 0x4000090) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000400)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000440)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000840)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r4, 0xffffffffffffff84, &(0x7f0000000900)}, 0x8) add_key(0x0, &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000a00)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000a40)) 23.892692339s ago: executing program 5 (id=2965): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000200000000000000000ffffff7f00000000000000000000000002000008000000000000000000000000000000a74972841c9820fdffffffffffffffffffffffffff000000000000000000fa19f10c92e678350000000000000001000103000000004400050020010000000000000000000000000000000000022b2f430aa5"], 0xfc}}, 0x0) 23.769471781s ago: executing program 37 (id=2965): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000200000000000000000ffffff7f00000000000000000000000002000008000000000000000000000000000000a74972841c9820fdffffffffffffffffffffffffff000000000000000000fa19f10c92e678350000000000000001000103000000004400050020010000000000000000000000000000000000022b2f430aa5"], 0xfc}}, 0x0) 11.50258201s ago: executing program 2 (id=3070): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25ac1e010100000000000000000000000020010000000000000000000000000002000080024a2100020a0000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000080ff000000000000000000000000fd32000000ffffffff00000000000000000000000000000000060000000000000000000000fdffffffffffffff0b0000000000000001000000000000000900000000000000000000000000000043050000200000000400000000000000ffffff7fffffff7f000000000000000000000000000000000300000001000000000000002cbd7000003500000200040050000000000000001c00040002004e264e200000fc010000000000000000000000000000600012006d6f7275733634302d73736532000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) 11.373937163s ago: executing program 2 (id=3071): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e0001080007400000000118000680140004"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012c000680140004000000000000000000000000000000000114000500"], 0xc0}}, 0x0) (async) connect$unix(r3, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r3, &(0x7f0000000340), 0x307017fdb7a66cb, 0x0) (async) connect$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) ppoll(&(0x7f0000000400)=[{r2, 0x4636}, {r3, 0xc198}, {r3, 0x8023}], 0x3, 0x0, 0x0, 0x0) close(r1) (async, rerun: 32) io_setup(0x1, &(0x7f0000000080)=0x0) (rerun: 32) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000140)=' ', 0x1, 0xe3}]) syz_mount_image$erofs(&(0x7f0000000680), &(0x7f00000006c0)='./file2\x00', 0x280400b, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES8, @ANYRES16], 0x1, 0x23a, &(0x7f0000000740)="$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") (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00009d2000/0x400000)=nil) (async) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000000980)) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d7cd8f7a812468c9ce70f7504ddcc4c99a8eb0ceebdac0c7e67900f356708d4e3db695136e13f93bf29bac896ef2cafbc5c834ac9050f53b8c97e5e612afd9be53725bfc8214557dfa8dffcdbcc97770f14d8a0f242ed3e12f96a4433ad4dc11", 0x60}], 0x1) syz_usb_connect$midi(0x2, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020e809620040000102030109022c0001011810010904000002010330060905070b00020fff020425010009058c0200026df78004250100"], 0x0) 9.700273205s ago: executing program 2 (id=3088): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x783, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14) sendmsg$nl_route(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}, {0x5, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x0) setuid(0xee01) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000e00)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, 0x0, 0xb313, &(0x7f0000000dc0)='veth1_to_team\x00', 0x80000000, 0xe2, 0x9ffb}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000009c0)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4}}, &(0x7f0000000040)=0xe8) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, r6, &(0x7f0000000b00)={0x4, 0x3, 0x1, 0x5}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET_DEF(r7, 0x4b72, &(0x7f0000000e80)={0x2, 0x1, 0x1, 0x18, 0x11a, 0x0}) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, 0x0, 0x0) 9.457175349s ago: executing program 2 (id=3099): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000040, &(0x7f00000001c0), 0x1, 0x5a3, &(0x7f0000000a80)="$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") ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='haltpoll', 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a01) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000880), 0x12) pwrite64(r2, &(0x7f0000000540)='2', 0xfdef, 0xe7c) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000400)=""/208, &(0x7f0000000580)=0xd0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x81901) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt(r8, 0x12, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 8.837345913s ago: executing program 2 (id=3102): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'team_slave_0\x00', {'bridge0\x00'}, 0x4}) 8.492018478s ago: executing program 2 (id=3107): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002b00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000007c0)={0x1, &(0x7f0000002800)=[{0x6, 0xfd, 0x3, 0x7ffcfffb}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000006c0)={0x1d, r4}, 0x10) sendmmsg$sock(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001880)="0100000003000000640000000000000000000000000000000000000000000000000000000200000000000000010000000100000001000000010000000000ffffffffffffffea0000", 0x48}], 0x1}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2004800, &(0x7f0000000180)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f00000002c0)="$eJzs3cGLG2UUAPC32e3uttrNgiKoiB8FD17Cdv0HukgL4oJSG6kehKmb1ZA0KUlYSREtXrz6H3gvHr0J4j/Qg969eevFYw+lI8kku8k2bV3rbqj+frDMy3zfm3wzQ4a3h+Hdvfrd9cZut7Kb9aJ0IUUpIkr3ItaHUWFhtC0N4+WYdCveLF/9/bUPPvr43a3t7YuXU7q0deWtzZTS2us/f/HlD+d+6T334Y9rP63EnfVP7v65+cedl+68fPfBlc/r3VTvpqV2L2XpWrvdy641a2mn3m1UUnq/Wcu6tVRvdWudqfHdZvvGjX7KWjtnz9zo1LrdlLX6qVHrp1479db6Kfssq7dSpVJJZ88ET1K9fflytlXEq4+Zd+GkFsQx6HS2ssFveOWhkertuSwIAJirp63/l5+u/m9N1/+notuovPBGcegj1/8d9f8RTdb//FcN6v/l0e83IvKD/wPU/wAAAAAAAAAAAAAA8Cy4l+flPM/L4+3+ywGjz3NeHsfsoft/6G/e6+N4Tby4txrR/HavulcttsX41m7Uoxm12Ihy3B88FsaK+NI72xc30tB6nL3+9TD/3K8R1cXp/PNRjvXZ+eeL/LSfH4PtqTgzmb8Z5Xhxdv7mfn6+cJC/HBvfT+RXohy/fRrtaMbO8PF2kP/V+ZTefm/70PevDOcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P9QSWOvRtH3fq8acTr2Rv37KwcT1qf74xf5o/76pdiIctyf3Z9/Y2Z//6V4ZWm+5w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY93+zUbWbNY6JxWMe/4P9yyPg0dnLRTTbx0aOh3Tk1eedJy/H+R5nj/I83xqqHSk45weneSMocGRv1kthos9O61/6/KuLpzorXya4FREPGZOPrqAk0OL8U++6/n96zxzzkpEHOuZrg2C0tHTyzHn23TijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MPC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTi8J2suxiMmPyqY9zkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//31oB3w=") 8.414044146s ago: executing program 38 (id=3107): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002b00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000007c0)={0x1, &(0x7f0000002800)=[{0x6, 0xfd, 0x3, 0x7ffcfffb}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000006c0)={0x1d, r4}, 0x10) sendmmsg$sock(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001880)="0100000003000000640000000000000000000000000000000000000000000000000000000200000000000000010000000100000001000000010000000000ffffffffffffffea0000", 0x48}], 0x1}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2004800, &(0x7f0000000180)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f00000002c0)="$eJzs3cGLG2UUAPC32e3uttrNgiKoiB8FD17Cdv0HukgL4oJSG6kehKmb1ZA0KUlYSREtXrz6H3gvHr0J4j/Qg969eevFYw+lI8kku8k2bV3rbqj+frDMy3zfm3wzQ4a3h+Hdvfrd9cZut7Kb9aJ0IUUpIkr3ItaHUWFhtC0N4+WYdCveLF/9/bUPPvr43a3t7YuXU7q0deWtzZTS2us/f/HlD+d+6T334Y9rP63EnfVP7v65+cedl+68fPfBlc/r3VTvpqV2L2XpWrvdy641a2mn3m1UUnq/Wcu6tVRvdWudqfHdZvvGjX7KWjtnz9zo1LrdlLX6qVHrp1479db6Kfssq7dSpVJJZ88ET1K9fflytlXEq4+Zd+GkFsQx6HS2ssFveOWhkertuSwIAJirp63/l5+u/m9N1/+notuovPBGcegj1/8d9f8RTdb//FcN6v/l0e83IvKD/wPU/wAAAAAAAAAAAAAA8Cy4l+flPM/L4+3+ywGjz3NeHsfsoft/6G/e6+N4Tby4txrR/HavulcttsX41m7Uoxm12Ihy3B88FsaK+NI72xc30tB6nL3+9TD/3K8R1cXp/PNRjvXZ+eeL/LSfH4PtqTgzmb8Z5Xhxdv7mfn6+cJC/HBvfT+RXohy/fRrtaMbO8PF2kP/V+ZTefm/70PevDOcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P9QSWOvRtH3fq8acTr2Rv37KwcT1qf74xf5o/76pdiIctyf3Z9/Y2Z//6V4ZWm+5w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY93+zUbWbNY6JxWMe/4P9yyPg0dnLRTTbx0aOh3Tk1eedJy/H+R5nj/I83xqqHSk45weneSMocGRv1kthos9O61/6/KuLpzorXya4FREPGZOPrqAk0OL8U++6/n96zxzzkpEHOuZrg2C0tHTyzHn23TijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MPC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTi8J2suxiMmPyqY9zkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//31oB3w=") 6.296718894s ago: executing program 6 (id=3133): openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) unshare(0x22020600) (async, rerun: 64) r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000017c0)=0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000002000)=0x80000004, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000002040)={0x1, &(0x7f0000002080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (async) sendmsg(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002140)="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", 0xfd}, {&(0x7f0000002240)="44da1e8bb028b08ffb7a0fb1b0a0a57d86ae00b5abaf5a9a93e63b7ee683043ce337734fb59cc47c1f01a459a29492d59e0553df2974cabe98f501b08c9008a26e53e234187d747b65b90e0f02b06fddc46576db41d131247c52d57ca1dc1eef2fa3", 0x62}], 0x2, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x1610}, 0x800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003980)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003a00)=@newqdisc={0x88, 0x24, 0x800, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x0) (async, rerun: 32) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000003ac0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4e22, 0x0, 0x4e24, 0x5, 0xa, 0x20, 0x80, 0x67}, {0x10, 0xfffffffffffffffb, 0x1000, 0x4, 0xe1, 0x5, 0xffffffffffffffff, 0x10001}, {0x4000003, 0x796f, 0x3, 0xd58}, 0x8, 0x0, 0x3, 0x1, 0x3, 0x2}, {{@in6=@private2, 0x4d5, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x3501, 0x0, 0x1, 0xfe, 0x9, 0x9, 0x5}}, 0xe8) (async) bind$inet6(r3, &(0x7f0000003bc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffffffc}, 0x1c) (async, rerun: 32) listen(r3, 0x8) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003c00)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c80)={&(0x7f0000000040)=@gettaction={0x7c, 0x32, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x7c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003d40)={&(0x7f0000003d80)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0xfce0, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000003e80)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xda, 0xe}}]}, 0x38}}, 0x4004000) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000001800)={0x0, 0x0, 0x3ed4, 0x5}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001980)='./file0\x00', 0x10000, &(0x7f00000019c0), 0x1, 0x50a, &(0x7f0000001a00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000001f40)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001f80)='./bus\x00', 0x1c1002, 0x12) write(r7, &(0x7f0000001fc0)="c7", 0x1) (async) sendfile(r7, r6, 0x0, 0x3ffff) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000001840), 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000001900)) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (rerun: 32) io_uring_setup(0x3450, &(0x7f0000001880)={0x0, 0x1539, 0x0, 0x2}) 6.105248363s ago: executing program 6 (id=3136): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000075000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000003c000000ff0200000000000000000000000000010000000000000000000000000000000002000000feffffff0000000000000000000000100000000000000000000000000000000000000000feffffffffffffff000000000015000000002000000000000700000000000000000000000000000000000400fdffffff0101000000000000feffffff0a000400700000000000000014000e"], 0x104}}, 0x0) 6.099527474s ago: executing program 6 (id=3137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25ac1e010100000000000000000000000020010000000000000000000000000002000080024a2100020a0080ff1d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fd32000000ffff80ff00000000000000000000000000000000060000000000000000000000fdffffffffffffff0b0000000000000001000000000000000900000000000000000000000000000043050000200000000400000000000000ffffff7fffffff7f000000000000000000000000000000000300000001000000000000002cbd70000035000002"], 0x16c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) 6.077450986s ago: executing program 6 (id=3138): mount$tmpfs(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000640), 0x2210081, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x811000, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000780)='\x00', 0x9801) move_mount(r0, &(0x7f00000007c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0) (async) umount2(&(0x7f0000000880)='./file0\x00', 0x9) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xa00040, &(0x7f0000000bc0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743da8853836322c756e695f786c6174653d302c696f636861727365743d757466382c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',shortname=mixed,shortname=win95,sys_immutable,utf8=0,\x00'], 0x21, 0x373, &(0x7f0000000cc0)="$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") 5.925222852s ago: executing program 6 (id=3139): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000ff0f0000000000000000000071113a000000000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x3f00}, 0x94) 5.852375129s ago: executing program 6 (id=3141): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfffffffc, 0x1}, 0x10) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x5f, 0x2e, 0x0, 0x2e, 0x61, 0x1e]}}, &(0x7f0000000900)=""/4096, 0x2d, 0x1000, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYRESHEX=r5, @ANYRES64=0x0], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x2) unshare(0x62040200) read(0xffffffffffffffff, &(0x7f00000001c0)=""/245, 0xf5) 5.802785504s ago: executing program 39 (id=3141): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfffffffc, 0x1}, 0x10) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x5f, 0x2e, 0x0, 0x2e, 0x61, 0x1e]}}, &(0x7f0000000900)=""/4096, 0x2d, 0x1000, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYRESHEX=r5, @ANYRES64=0x0], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x2) unshare(0x62040200) read(0xffffffffffffffff, &(0x7f00000001c0)=""/245, 0xf5) 4.350017493s ago: executing program 4 (id=3154): mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000b40)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0x1, 0x110) write$tcp_mem(r0, &(0x7f0000000bc0)={0x9, 0x20, 0x7fffffffffffffff, 0x20, 0x4000000007}, 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) (async, rerun: 32) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) (rerun: 32) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000500)=""/158) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f00000005c0)={0x0, 0x30b5, 0x12002, 0x2, 0x154}, &(0x7f0000000b00)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x2, 0xa30, 0x0, 0x0, 0x1000, 0x8000, 0xffffffffffffffff, 0x0, 0x20}}}, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r6 = dup(r2) (rerun: 32) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000cc0)={0x0, 0x1020fb87, 0x800, 0x3, 0x328}, &(0x7f0000001000)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1006, 0x183, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x80, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x2, 0xbf}}], 0x1, &(0x7f0000000200)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff1, 0x826, 0x0, 0x0}}, 0x0) (async, rerun: 64) syz_mount_image$fuse(0x0, &(0x7f0000000640)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x158) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x8, &(0x7f0000000f00)={[{@workdir={'workdir', 0x3d, './sys/class/net/bridge_slave_0/brport/multicast_fast_leave'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}], [{@euid_eq}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_gt}]}) (rerun: 64) chdir(&(0x7f0000000780)='./bus\x00') (async, rerun: 32) fchmodat(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0xffffffd3) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x14e174135c0b86de) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) (async) r7 = gettid() timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000080)) (async) r8 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000440)={0x0, &(0x7f0000000c40)=[@enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x83d5, 0x1, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro64=0x2400, 0x10200000}}], 0x78}) ioctl$KVM_RUN(r11, 0xae80, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.28213691s ago: executing program 0 (id=3158): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000000)="b6c1fa883353b9d17d6e830130f3efa465b79c70c29bcce20bf9f25a00802c0a907176a2bd71f5cb2244b4b6a7a94614b089a2336de5ca8eb1ad5d20c100cde5c5fa59d269163bcbdc3811c9c193fb714aa416fa62f5312327682bc1d86715dbcf612d410a06c74b60b04106e7cab30f0b4a2d633c8415802bf0294441ef558d8100d29fb4dd7fed5ed7429482", 0x8d) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800) getsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0/file0\x00') mount(&(0x7f0000000240)=@sr0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x2c088, &(0x7f0000000300)='\':%$\x00') r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x40800) read(r1, &(0x7f0000000480)=""/88, 0x58) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000005}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x35}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) sendmmsg$inet(r1, &(0x7f0000000780), 0x0, 0x816) linkat(r2, &(0x7f00000007c0)='./file0\x00', r2, &(0x7f0000000800)='./file0/file0\x00', 0x1400) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r8, 0x338, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x43}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x4051) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r5) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r11, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000801) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r12, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r13, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004001) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0}, &(0x7f0000000d40)=0xc) mount$fuse(0x0, &(0x7f0000000c80)='./file0/file0\x00', &(0x7f0000000cc0), 0x4082, &(0x7f0000000e40)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r14}, 0x2c, {}, 0x2c, {[], [{@obj_type}, {@obj_type={'obj_type', 0x3d, '802.15.4 MAC\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '!'}}]}}) 4.129845826s ago: executing program 3 (id=3160): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e88330009050202000202000009058202"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000240)={0x34, &(0x7f0000000280)={0x0, 0x15, 0x3, "6209b9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="2009028000003aba"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) 4.129759486s ago: executing program 4 (id=3161): syz_mount_image$ext4(&(0x7f0000000700)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x21980065}}]}, 0x1, 0x4e1, &(0x7f0000000740)="$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") r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 4.082164211s ago: executing program 4 (id=3163): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x200008, &(0x7f0000000bc0)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRES64=r1], 0x1, 0x39a, &(0x7f0000000c00)="$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") statx(0xffffffffffffff9c, &(0x7f0000000a00)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000a40)) 4.046613654s ago: executing program 4 (id=3164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x200800, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file1/file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@index_on}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000005700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.008219198s ago: executing program 9 (id=3165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000020300)={0x2, &(0x7f0000020540)=[{0x6, 0x45, 0x8, 0x7ffc0001}, {0x7ff, 0x9, 0x5, 0xfffffe00}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_open_procfs(0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setitimer(0x2, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) userfaultfd(0x801) syz_io_uring_setup(0x400048ba, &(0x7f0000020380)={0x0, 0xfffffffd, 0x4000, 0xfffffff7, 0x182}, &(0x7f0000020400), &(0x7f0000020440), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x6a7}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000020340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000020600)={0x2, 0x0, [{0x40000098, 0x0, 0x5}, {0x28, 0x0, 0x2}]}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r7, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000020580)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x400000b2, 0xbc9faef6, 0xbf}]}) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x7, &(0x7f0000000280)=ANY=[@ANYRES64=r3], &(0x7f00000002c0)='GPL\x00', 0x2, 0x20000, &(0x7f0000000300)=""/131072, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000020480)={0x19980330}, &(0x7f00000204c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) 3.928002177s ago: executing program 4 (id=3166): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x4, r1}, 0x38) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, 0x0, 0x0, r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000700000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x28) 2.786671374s ago: executing program 9 (id=3168): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000900)={0x700, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a0000000000000000000000000000000080ffffff0008000000000000000000080012000200020000000000000000003000"], 0xa0}}, 0x0) 2.786163194s ago: executing program 0 (id=3170): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe40, 0xe40, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000240)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0xb, "76680582"}, @global=@item_012={0x2, 0x1, 0x1, "00ce"}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x5, "04"}, @main=@item_012={0x1, 0x0, 0x0, "01"}, @main=@item_4={0x3, 0x0, 0xb, "e9ff7f00"}, @global=@item_4={0x3, 0x1, 0x2, "ff3f08a3"}]}}, 0x0}, 0x0) 2.785958803s ago: executing program 9 (id=3172): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25ac1e010100000000000000000000000020010000000000000000000000000002000080024a2100020a0080ff1d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fd32000000ffffffff00000000000000000000000000000000060000000000000000000000fdffffffffffffff0b0000000000000001000000000000000900000000000000000000000000000043050000200000000400000000000000ffffff7fffffff7f000000000000000000000000000000000300000001000000000000002cbd70000035000002"], 0x16c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) (fail_nth: 7) 2.784546164s ago: executing program 4 (id=3173): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = creat(&(0x7f0000000380)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r0, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xd, 0x4, 0x0, 0x100020001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x5, 0x20, 0x1, 0x5, 0xd, 0x100}, [{0x3, 0x0, 0x40005, 0x6, 0x80, 0x6, 0x2, 0x5ba2}], "", ['\x00']}, 0x158) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000b40)='.\x00', 0x5000100) close(r0) execve(&(0x7f0000000b80)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000540)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000580)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000006c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1a06, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x80, 0x0, 0x8}}], 0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x161242, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) syz_usb_connect(0x0, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002ff000040da0b538100300000000109022700010100a0320904000003ffff0000070581020002000705020200020007058303400008"], 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) pwritev2(r8, &(0x7f0000000080)=[{&(0x7f0000000040)="010130a7cd08f1cac7c721e886dd", 0xe}, {&(0x7f0000001040)="389bfcf4076404f2d8802ba6f96ec57f50d3fb13a7d754ea2f77e19fb0c5f795a9b0eba24f0b73c048b74e3fc0a04e2d90e6079a5dcfff613070560df6d9", 0x3e}], 0x2, 0xa74a, 0xfff7, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0x71) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r9, 0xfffffffffffffff4, 0x80000000, 0x80000000, 0xa227}) 2.784426534s ago: executing program 9 (id=3174): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x4, r2}, 0x38) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001b00)={0x0, 0xfff0}, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000020000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r5, 0x4, 0x1}, 0x50) fcntl$getown(r0, 0x9) socket$nl_route(0x10, 0x3, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000088d000/0x1000)=nil) 1.973689027s ago: executing program 1 (id=3177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000028c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x176, &(0x7f0000002e80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232501402c00fc010000000000000000000000000000fe8000000000000000000000000040aa08000109"], 0x0) 1.913355364s ago: executing program 9 (id=3178): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000840)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="01000000030000006400000000000000000000000000000000000000000000000000000000000000023f420f000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 1.8491591s ago: executing program 9 (id=3179): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x8000d0, &(0x7f0000000380), 0x1, 0x586, &(0x7f00000006c0)="$eJzs3U9sHFcZAPBvdx0ncd2mCY3UlIMDqUj/KLbblZwaDoQDHCjqpUioUjlYycYOXsfGdkVtLu6NE0UCBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHigBjGZ31t54Z51Ftndbz+8nbfbNm7G/93bzvd19b9YTQG6dTv4pRAxGxI2IOFbfvPWA0/W775RXp66XV6cKsbHx5N8KteOulVenGoc2fu6OiFiJiHsj4seXIy4eao27sLQ8PVGtVubT7ZHFmbmRhaXlc1dmJiYrk5Wr5fJj42Nj4+fHRv+P3hR23PuJuddP/GbqicmXhv791PmZb/y1EBdq/Y5t/dhLWS3qK0Rc2I9gPVBK+hMRAx0ef7Ly/Mv73CQ69KUTayPJc3dPRNxfy/9jUao9mxEffPHpfxyLD9xs97M31l78UzfbCgDsnY3E4Z13AwdTMZLP/oXicETUy8Xi8HD9M/w9MVCszi4sPnx59pmrl+pzBHfHoeLlK9XKaDpXcHccKiTbj9TKW9uPbtsuR8TxiPhc6Whte/jibPVSV0c6oGEw4rXvfvpi/x3b8v+PpXr+AwdXkv+/+sn3f5iU3yz1ujVANyX5/603Zx4P+Q+5c/v8P9L1NgHd4fUf8kv+Q3615v/O584CB4fXf8gv+Q/5Jf8hv+Q/5Jf8h/xqzn/pD/l0fOiVtUJErLz/aO2W6E/3ZfzZHuAA2bjTt/whr7z3h/zq2yoe7WU7gO7zGR+43dn/bb8NPLf3bQG6o9jrBgA9c/aU9T/IK/P/kF99vW4A0DPe4wPm/yF/zP9Dfg22uf7XnU3X7hqNiLsi4melQ4cb1/oC3rkGI1574cb3no4o/rmQvv9PxoKJ11/9UfNx/YV/1pYI+iPiMy88+ZVnJxYX5x9J6v++Wb/41bT+0V71BuhEI08beQzk18LS8vREtVqZV1DYVoh4WzRDYR8LjXHgWnl1qnHr1tjz/EMRb3yofhJCEvd6eqvv7UvnJo/U1igH1gu3nKtQ2IO1y8+fi1h5LiLuzep/Ib3eeX3lY2C91BL/Xel9cjuVzp8kx5zsMH7prt3Fv68p/lBT/Hd3GH/t4x0euE+Of7u38V/67eayV1/W49+3y6/EnrjN/se/uatfv2t/+H1v498/1Nv4X56NeCUZf0az8q+YpOXmymfz+PPFL9TnSvp3Gf+zZ7fGv+st419xc/wrtRn/TncY56dPVT6ZVV/6ecQbz0Xclxm/Ee9ILdbAerEl/pmm8eeBHeL/5WO/nM6qv/BqxMa1iLORHb851sjizNzIwtLyuSszE5OVycrVcvmx8bGx8fNjoyO1OeqRxkx1qydunvxwVv2Zr9f7P9AmfqP/7R7/jR363Gz5a58afE9G/S9O1eM/cCb7+T+Rxq8//n0t8d+b3if/T/6TnsubHPNWRBxO6x+MiB+8fPyhrHZ99GY9/qU2/S/eEr+1/w932P/43X+fyap+9iOd/gIAYC+1nxrodcsAAIC91o2Vxl73Ecg2sN4fzcvAhZWmdYWVrXWFpP6tdH2htBLxr3SNIal/MF0lS8qZCw3A287J5ff9utdtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMi7haXl6YlqtTK/0OuWAN32vwAAAP//mSj9Tw==") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = open(&(0x7f0000000c80)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000200000020d21f076000000000000109022400010000900200092100004001223ef8c61800090581032000001587000000e700"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x789}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@policy_type={0xa}]}, 0xc4}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)=@secondary) syz_usb_control_io$hid(r2, &(0x7f0000004840)={0x24, 0x0, 0x0, &(0x7f0000004880)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000048c0), 0xa, 0x62080) close_range(r0, 0xffffffffffffffff, 0x0) 1.622596943s ago: executing program 1 (id=3180): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.610410114s ago: executing program 1 (id=3181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000800000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000006400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.55323478s ago: executing program 1 (id=3182): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21081e, &(0x7f0000000180)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000000340)="$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") r0 = socket(0x27, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000880)={0xa, 0x0, [{0x7, 0x3d7, 0xa72, 0x80}, {0xc0000001, 0x52c8542c, 0x6, 0x6, 0x140000}, {0xc0000001, 0x9f6, 0x6, 0x295a, 0x6}, {0xd, 0x3, 0x7, 0xba94, 0x9}, {0xd, 0x2, 0x3, 0x3, 0x200020}, {0x7, 0x9, 0x7f, 0x8, 0xfffffff0}, {0x40000000, 0x68d, 0x1, 0x80000000}, {0x40000000, 0x9, 0x7, 0x1, 0x6}, {0xa, 0x10e304ea, 0x12, 0x3, 0x3}, {0x6, 0xb, 0x6, 0x7, 0x9}]}) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) select(0x40, &(0x7f0000000240)={0x4f2, 0xfffffffffffffffc, 0x6, 0x1, 0x1, 0x80, 0x7f, 0x2}, &(0x7f0000000280)={0x2, 0x3, 0x7ae, 0xfffffffffffffffa, 0x981, 0x1, 0xffff, 0x3}, &(0x7f00000002c0)={0xfffffffffffff2eb, 0x3, 0x3ff, 0xffff, 0xdc0000000000000, 0x89, 0xffffffff, 0x8}, &(0x7f0000000300)={0x77359400}) listen(r0, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@random='\tE\x00', @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0xd, 0x0, @val=0x80}}}}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) listen(r4, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000009c0)) sendfile(r4, r4, 0x0, 0xff) 1.533176322s ago: executing program 1 (id=3183): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='GPL\x00'}, 0x48) 1.416978794s ago: executing program 1 (id=3184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x17d, &(0x7f0000001e00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4286dd6481e04e000032fffe8000000000000000400000000000bbfc"], 0x0) 1.364679839s ago: executing program 40 (id=3184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x17d, &(0x7f0000001e00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4286dd6481e04e000032fffe8000000000000000400000000000bbfc"], 0x0) 1.110813775s ago: executing program 3 (id=3186): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x10, &(0x7f00000003c0), 0x1, 0x3f7, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x80342, 0xcc) pwrite64(r0, &(0x7f0000000d00)='2', 0xfdef, 0xfecc) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x1, {0x0, 0x1c1ab397, 0x5, 0xfffffffffffff86b, 0xb, 0x6, 0xd, 0x6, 0x3}}, 0x43) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x8441, 0x1ac) fallocate(r1, 0x8, 0x4000, 0x8000) 992.029018ms ago: executing program 3 (id=3187): memfd_create(0x0, 0x8) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000003c0)='./file2\x00', 0x4004, &(0x7f0000000400)={[{@adaptive_mode}, {@jqfmt_vfsold}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_xattr}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@noinline_xattr}, {@discard_unit_segment}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x5544, &(0x7f0000000a80)="$eJzs3E1vG1UXAOBjp+n32zdCLNh1UIWUSLVVpx+CXYFWfKitqgILVuDYruXW9kSx64auWLBELPgnCCRWLPkNLFizQyxA7JBAnjuBJlAJNU5MmueRxmfunTtn7h1Zlc5M4wAOraXs158rcSZORMRCRJyOKPYr5Va4msILEXE2IqqPbZWy/8+OoxFxMiLOTJOnnJXy0OfnJ+cu//T2L998d+zIqS++/n5+qwZmpPq0J74UEYP1tP9wkGLeTfFe2d+c9Io4uDQpYzowuF+28xQfdtaKDA+bW+OaRbzYTePz9Qejabzbb7amsdu7W/SvD9MFR5PuVp7ihHvNjaLd7qwVsTfKi9h9lOa1+Sj92/ZoNE552mW+j4r0MR5vxdTf2eyk9azfL2JrOC77U9683dmcxkkZy8tFK++3i3msPe1d/s978UZv+GAzm3Q2Rr18mF2uN16uN67UGht5uzPuXKo1B+0rl7Llbn86rDbuNAdXu3ne7XfqrXywki13W61ao5EtX+us9ZrDrNGoX6xfqF1eKffOZ2/cei/rt7PlaXytN3ww7vVH2d18I0tnrGSr9YuvrGTnGtk7N29nt+9cv37z9rsfXHv/1qs333q9HPS3aWXLqxdWV2uNC7XVxsrubsCN3vSbdEDW/0k56RmuH3alMu8JABw86n9gHvau/t+4E7H39X+o/2dC/X+41w+7ov4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi0flj88s1iZym1T5X9/yu7nivblYioRsTv/2Ahjm7LuVDmWXzC+MUdc/i2EkWG6TWOldvJiLhabr/9f6/vAgAAADy7vvr47GepWk8fS/OeEPspPbSpnv5wRvkqEbG49OOMslWnH8/PKFnx/T4SmzPKVjzAOj6jZOmR25FZZftXFraF44+FSgrVnWfMbLUAAMDcbK8E9rcKAQAAYD99+sQj9/d1HuyzSmy9ytx6F1z8z/u/XvadSG2v/gAAAODgqsx7AgAAAMDM7fyb3qL+9/t/AAAA8GxLv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ac7d3OjNhDHAfRvGwfypaAo97SSG5SREnLMMaKANEEJpIU0QA3klhJWsMLjRcsKVst6jLWr9yR7sME/zwA+zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD06V+9mv/59fV315ztrps8rQEAAABO2dSrefNimo7ft+c/tqc+t8dFRJQRcarvXsWbo8yqzanPfL5+UIe/EU3C/h7jdnsXEd/StotPfX8LAAAA8CqN9rv1YjlLvfW0mw5dKzq74DdMgzblh++Zbl1ERD39f9lFb8+9Ue7zvmSoVqNq/vM/M6U1A1iTTGFpyG2UK+1Jmsf9MGo3uVcUqSgfvz5b2wEAgCuqjorr9kIAAAC4ph9DV4A+nJ1YPSjibirzMBU4TsXkKMJkHwAAALxcxdAVAAAAAHrX9P8vWf8vhln/L26s/wcAAADPltb/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE+bejVfL5azrjnbXTd5WgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC37844CIRAGYbB3fWcy9z+sNGhqalIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw5nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcz2scVRwA8DczO5u2KsYoe4iIgge92O22tvYmHpTgwT9BCOm2xm790eZgSxFy8SY59yJ6FBGUeOs/4Kk3oYVe6q2HPVTw4mVlfmUnjeLWkplt8vnAm/fdzeS975uFkO+8SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgMn5nGifZYbGI4/K92w+ur2X9nYf6zM2tu8tZy+KoyaSfDC/VX0S99hIBAADg8Eiq+j6EcC/dXsn6eDGv/9PqnKzm//aZIq7q+Yfr/qqvav+s/fLz/Rd2Jlos5skGPb8+Gp7Ym0pn/1Y53579zzM6+ZXP770k+QcSv7/5/DjNr2f09a1b73bzcKGJbAGA/+N41ZdB9ftQ1g/aTAyAQ6NTK7yr+j9ZbDcnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCaMN8NTVRyFEJY70zhz58H1tX/qb27dXa7amRs3tupjZkOkIYTz66PhiQbXMu+uXL12cXU0Gl5uPng5hLA/I08WisX9+zlvl8u/+OEMA4bQyvXZr+CvyWTySN91pP2cHyuIyw97XvJ5MoK2fiIBAHBQpWXL6vp76fZK9l60FMLku931/2u1OMxY/9//6Mzt+lz1+n/Q2ArnX3/j0mf9K1evvbF+afXC8MLwkzdPDt4anDp7+vTZfn6vpO+OCQAAAI+nW7Z6/R8v7d3/P1aLw4z1/+ffDL6czvRbflT/7zXd9Gs7EwAAgMPtuVf+/COqve6WfdTthi9WNzYuD4rjzuuTxbGldB/JQtnq9X+y1HZWAAAAQBPGm9Gu/f9ztTjMuP//9Pcv/lgfMwkhHC33/4+vfTo619xy5loTf07c9hoBAABo19Gy1ff/0/z5/3jnkYc4hPD6q0Vc/hvAmer/5L2vfqjPldSe/z/V3BLnUtwrrkfe90Lo9HZ9+dfWEgMAAOBAOlK2rNj/Pd1e+finYx90Pf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//8nXD7M") syz_mount_image$fuse(0x0, &(0x7f0000006040)='./file0\x00', 0x14a0, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000580), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000006080)='./tracing\x00', 0x1ed) geteuid() geteuid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1808001bc81a00000000000000000185100000060000001800000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000030000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0xff5c, &(0x7f00000002c0)=""/222}, 0x78) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f00000063c0)={{&(0x7f0000000800)=[{0x80000000, 0x1, 0x7fffffffffffffff, {0x8, 0x9c}, 0x83, 0x2, 0x10001}, {0x8d44, 0x10000, 0x5, {0xffffffffffffff8e, 0xc}, 0x2, 0x25271023, 0x81}, {0x8, 0x1, 0x2, {0xcbb, 0x3}, 0x4, 0x7fff, 0xc}], 0x3, 0x40, 0x0, 0x8}, {&(0x7f0000006180)=[{0xfff, 0x8}, {0x10001, 0x9e}, {0x4, 0xfffffffffffffffd}, {0x5, 0x4}, {0x48, 0x1}, {0x1, 0xb361}, {0x51, 0xffffffffffffff01}, {0x8, 0x4}, {0x9, 0x1}, {0x6a1, 0x7}], 0xa, 0x10, 0x80, 0x5}, {&(0x7f0000006240)=[0x7, 0xa00000000000000, 0x5f, 0x9, 0x4], 0x5, 0x8, 0x1, 0xa10a}, {&(0x7f0000006280)=[{0x2, 0x2c7, 0x6, 0xfffffffffffffff8, 0x1ede}, {0x6, 0x101, 0x7, 0x7fff, 0x1}, {0x7fffffff, 0x7, 0x3, 0x10000, 0x7}, {0x2, 0x10000, 0x3fd, 0x5, 0x93}, {0xba46, 0xc0000000, 0x4, 0x7f, 0xaa}], 0x5, 0x28, 0x3, 0x3}, {&(0x7f0000006380)=[0x5f9, 0x100000000], 0x2, 0x8, 0xf24, 0x5}}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) r2 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000740)={0x2, &(0x7f0000000780)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000007c0)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000, 0x0, 0x80000}}}}}, 0x0) 810.868756ms ago: executing program 7 (id=3185): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000100)) (async) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x3, 0x2, 0x3}}, 0x2e) (async) setsockopt(r3, 0x111, 0x4, &(0x7f00000001c0)="300b8791", 0x4) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008410e4842400001020301090275000301038040080b0001010920000904000000010120000924010000051500020c24030505034f040207000709040100000102200009040101010102200009050109ff03400109082501c800050200090402200009"], 0x0) (async) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) getsockopt(r0, 0x0, 0x3624, &(0x7f0000000240)=""/139, &(0x7f0000000300)=0x8b) (async) ioctl$NILFS_IOCTL_GET_BDESCS(r4, 0xc0186e87, &(0x7f0000000140)={&(0x7f0000000080)=[{0xffff, 0x200, 0x9, 0x6b50, 0xfc}, {0x1e37, 0x7, 0x200, 0x6, 0x4}], 0x2, 0x28, 0x4, 0x80003fd58ad}) 523.875286ms ago: executing program 3 (id=3188): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006880)={&(0x7f00000068c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000210000000504000000002e"], &(0x7f0000006900)=""/237, 0x37, 0xed, 0x1}, 0x20) 353.269433ms ago: executing program 3 (id=3189): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000340)={0x0, 0x0, 0x1, r1}, 0xc) setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f00000003c0)="0a00000000000000fe8000000000000000000000000000bb000000000a00000000000000ff0e0000000000000000000000001234000000000000000002000000000000000000000000000000000200"/92, 0x5c) 352.685323ms ago: executing program 3 (id=3190): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0xa04080, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC=r0, @ANYBLOB="92dd9095f38745d15c06a1b24b60a90f61e0e292035c59fd7d58731a95793c4ed38b8146998fbf85ec961d3148e08bd54cd4bd105c1843fd863080704fbab4b36b6518e5e4683044a9dd7bfe1308339adf4f246d81081f664c", @ANYBLOB="e4313c6ffe3711cd8932be9273592b06e18ed777827dc810aa84a171e3c650e4786e1dcd3bb77fc11e2bd92a41cbd4f6c639a2414e8bd4c895cfeac249aeff7739fb349623e238e3e64971d097928c33aeb6b75e23e38c73beacf85c11a96193e08c938b17300d8f263c99cff7aef1407398387c2e5dc510887031062fd42b"], 0x2, 0x5524, &(0x7f0000000900)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000005e40)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000005e80)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000005ec0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000005f00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005f40)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r2, 0x0, 0x0) connect$unix(r3, &(0x7f0000005f80)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000006000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000006040), 0x4000087, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x440200, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000006e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000280), &(0x7f0000000340)=r6}, 0x20) 211.056218ms ago: executing program 0 (id=3191): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1) recvmmsg(r0, &(0x7f0000000440), 0x40000000000049e, 0x1000000000fe, 0x0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key(&(0x7f0000001380)='asymmetric\x00', 0x0, &(0x7f00000013c0)="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", 0x559, r3) connect$unix(0xffffffffffffffff, &(0x7f0000001940)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000019c0)={r4, 0x159, 0x1c}, &(0x7f0000001a00)=ANY=[], &(0x7f0000001a40)="929835a77d8fae0300000000000000a804bfc80349e1f140d6d7feda074c01e9c88fbc79dc97601bddeea9d91438988e68899922f6496ce14176489e4bbe211cee39ee49b5542d47903d8d802603a4e73dde649aacebb145381a46f82747f0db81470d91a84ea4cb1d1c8d6558aaab1171ba3dd7749ccdaa11a46f5c9d716c2820", 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000001280)='syzkaller\x00'}, 0x48) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/features/extended_error\x00', 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000080)={0x4, 0x4}, &(0x7f00000000c0)) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r7, 0x4c000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="160000000000000008000000ffffffff00000000e1a93d4d7e5322d28737a846969b143b2ddf3899483e0a8b1d8bd49799e5da02b6babac3c845201682f2463025e69c61f42b0a3040", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r9 = socket(0x28, 0x5, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000200)=0x8) bind$vsock_stream(r9, &(0x7f0000000240), 0x10) mount(0x0, 0x0, 0x0, 0x2, 0x0) listen(r9, 0x0) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r9, 0x0, 0x0, 0x0) sendfile(r6, r8, 0x0, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000001340)="e02742e8680d597d164cda7289e9", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 94.01493ms ago: executing program 0 (id=3192): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xe, 0x16, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/3605], &(0x7f0000001f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001f40), 0x1f1, 0x10, &(0x7f0000001f80), 0x39}, 0x48) 37.234666ms ago: executing program 0 (id=3193): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d80)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000b00), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 0 (id=3194): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x12}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x60d3, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x40, r4, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x4048086) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x39000, 0x0) io_uring_setup(0x56ab, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x2c}}, 0x0) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f00000008c0), 0x10) listen(r9, 0x0) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000900)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r10, &(0x7f0000000940)=ANY=[], 0x40000) r11 = accept4$unix(r9, 0x0, 0x0, 0x80000) recvmmsg(r11, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/240, 0x40000}], 0x1}, 0x1bf}], 0x4000000000000ae, 0x40020022, 0x0) sched_setaffinity(0x0, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x408cd, 0x0) kernel console output (not intermixed with test programs): 48714][ T8600] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 359.152534][ T8615] loop8: detected capacity change from 0 to 40427 [ 359.162178][ T8600] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 359.162251][ T8600] F2FS-fs (loop2): fault_injection options not supported [ 359.189746][ T8638] xt_hashlimit: size too large, truncated to 1048576 [ 359.200549][ T8600] F2FS-fs (loop2): fault_type options not supported [ 359.206597][ T8643] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2751'. [ 359.214012][ T8600] F2FS-fs (loop2): invalid crc value [ 359.253540][ T8615] F2FS-fs (loop8): invalid crc value [ 359.265214][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2752'. [ 359.274885][ T8600] F2FS-fs (loop2): Found nat_bits in checkpoint [ 359.369137][ T8615] F2FS-fs (loop8): Found nat_bits in checkpoint [ 359.487264][ T8615] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 359.534899][ T8600] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 359.552544][ T8600] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 359.819541][ T8615] F2FS-fs (loop8): switch extent_cache option is not allowed [ 359.922052][ T8600] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 359.970295][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 359.970316][ T28] audit: type=1400 audit(1793290173.691:3867): avc: denied { watch watch_reads } for pid=8614 comm="syz.8.2739" path="/205/bus" dev="loop8" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.258693][ T8246] syz-executor: attempt to access beyond end of device [ 360.258693][ T8246] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 360.308704][ T8658] loop6: detected capacity change from 0 to 512 [ 360.363234][ T8658] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 360.388144][ T8658] FAT-fs (loop6): Filesystem has been set read-only [ 360.420976][ T8658] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2754'. [ 360.458219][ T8658] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2754'. [ 360.520426][ T28] audit: type=1400 audit(1793290174.241:3868): avc: denied { setopt } for pid=8660 comm="syz.3.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 360.560760][ T28] audit: type=1400 audit(1793290174.241:3869): avc: denied { read } for pid=8660 comm="syz.3.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 360.573538][ T8668] loop3: detected capacity change from 0 to 512 [ 360.602052][ T8671] loop2: detected capacity change from 0 to 128 [ 360.635494][ T28] audit: type=1400 audit(1793290174.321:3870): avc: denied { write } for pid=8660 comm="syz.3.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 360.717472][ T8674] loop6: detected capacity change from 0 to 512 [ 360.726484][ T8674] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 360.948009][ T28] audit: type=1326 audit(1793290174.421:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.6.2757" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261c19f559 code=0x7ffc0000 [ 360.989895][ T28] audit: type=1326 audit(1793290174.421:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.6.2757" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261c19f559 code=0x7ffc0000 [ 361.019370][ T8678] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2761'. [ 361.028635][ T8678] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2761'. [ 361.052294][ T28] audit: type=1326 audit(1793290174.421:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.6.2757" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f261c19f559 code=0x7ffc0000 [ 361.084142][ T28] audit: type=1326 audit(1793290174.421:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.6.2757" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261c19f559 code=0x7ffc0000 [ 361.109378][ T28] audit: type=1326 audit(1793290174.421:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.6.2757" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261c19f559 code=0x7ffc0000 [ 361.142012][ T8682] loop2: detected capacity change from 0 to 2048 [ 361.171032][ T28] audit: type=1326 audit(1793290174.421:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.6.2757" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f261c19f559 code=0x7ffc0000 [ 361.197506][ T8682] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 361.208275][ T8682] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.238366][ T8246] EXT4-fs (loop2): unmounting filesystem. [ 361.526228][ T8704] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 361.575133][ T8704] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.654725][ T8687] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 361.683300][ T8687] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 361.698883][ T6966] EXT4-fs (loop6): unmounting filesystem. [ 361.715229][ T8687] F2FS-fs (loop8): fault_injection options not supported [ 361.731070][ T8687] F2FS-fs (loop8): fault_type options not supported [ 361.743203][ T8687] F2FS-fs (loop8): invalid crc value [ 361.771533][ T8687] F2FS-fs (loop8): Found nat_bits in checkpoint [ 361.796081][ T8716] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 361.844652][ T8716] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.865578][ T8687] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 361.879971][ T8687] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 361.911056][ T6966] EXT4-fs (loop6): unmounting filesystem. [ 361.939217][ T8687] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 361.972266][ T4396] syz-executor: attempt to access beyond end of device [ 361.972266][ T4396] loop8: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 362.004756][ T8727] 9pnet_virtio: no channels available for device ./file0 [ 362.062455][ T8713] F2FS-fs (loop3): invalid crc value [ 362.085303][ T8713] F2FS-fs (loop3): Found nat_bits in checkpoint [ 362.188174][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.199262][ T8713] F2FS-fs (loop3): Start checkpoint disabled! [ 362.206957][ T8713] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 362.216849][ T8727] kvm [8726]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x4507 [ 362.234438][ T8713] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 362.243674][ T8727] kvm [8726]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xbd02 [ 362.278041][ T8727] kvm [8726]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xc129 [ 362.765378][ T2772] kworker/u4:7: attempt to access beyond end of device [ 362.765378][ T2772] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 363.185081][ T8756] set_capacity_and_notify: 5 callbacks suppressed [ 363.185108][ T8756] loop3: detected capacity change from 0 to 16 [ 363.219869][ T8768] netlink: 124 bytes leftover after parsing attributes in process `syz.8.2791'. [ 363.241780][ T8770] loop8: detected capacity change from 0 to 512 [ 363.256189][ T8756] erofs: (device loop3): mounted with root inode @ nid 36. [ 363.286206][ T8770] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 363.309778][ T8770] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 363.348794][ T8770] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 363.376651][ T8770] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2792: bg 0: block 248: padding at end of block bitmap is not set [ 363.398996][ T8770] EXT4-fs error (device loop8): ext4_acquire_dquot:6828: comm syz.8.2792: Failed to acquire dquot type 1 [ 363.427166][ T8770] EXT4-fs (loop8): 1 truncate cleaned up [ 363.439040][ T8770] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 363.462565][ T8770] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2792'. [ 363.520760][ T8770] EXT4-fs error (device loop8): ext4_lookup:1862: inode #2: comm syz.8.2792: deleted inode referenced: 12 [ 363.537595][ T8778] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 363.545067][ T8778] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 363.618879][ T8770] EXT4-fs error (device loop8): ext4_lookup:1862: inode #2: comm syz.8.2792: deleted inode referenced: 12 [ 363.758860][ T8766] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 363.766701][ T8781] loop2: detected capacity change from 0 to 128 [ 363.793786][ T4396] EXT4-fs (loop8): unmounting filesystem. [ 363.803364][ T8785] 9pnet_fd: Insufficient options for proto=fd [ 363.819275][ T8170] EXT4-fs error (device loop8): ext4_release_dquot:6864: comm kworker/u4:12: Failed to release dquot type 1 [ 363.872792][ T8793] loop8: detected capacity change from 0 to 2048 [ 363.922306][ T8793] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 363.938190][ T8793] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.959199][ T8803] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2802'. [ 363.981338][ T4396] EXT4-fs (loop8): unmounting filesystem. [ 364.004140][ T8805] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2803'. [ 364.013417][ T8805] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2803'. [ 364.027011][ T8807] loop8: detected capacity change from 0 to 1024 [ 364.052057][ T8807] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 364.065050][ T8807] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 364.088287][ T8807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 364.105986][ T8807] System zones: 0-1, 3-36 [ 364.111907][ T8813] /dev/loop5: Can't open blockdev [ 364.112836][ T8807] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 364.131564][ T8807] fscrypt (loop8, inode 18): Direct key flag not allowed with different contents and filenames modes [ 364.360007][ T8816] EXT4-fs (loop8): unmounting filesystem. [ 364.461050][ T8815] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 364.584670][ T8829] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2816'. [ 364.602361][ T8822] loop6: detected capacity change from 0 to 40427 [ 364.651949][ T8836] x_tables: duplicate underflow at hook 2 [ 364.671047][ T8838] loop6: detected capacity change from 0 to 512 [ 364.680908][ T8838] EXT4-fs: Ignoring removed oldalloc option [ 364.686857][ T8838] EXT4-fs: Ignoring removed nobh option [ 364.728318][ T8838] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 364.929342][ T8838] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.041607][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 365.041629][ T28] audit: type=1326 audit(1793290178.761:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.2817" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f988ad408d9 code=0x7ffc0000 [ 365.226843][ T8838] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.2820: corrupted inode contents [ 365.558688][ T8838] EXT4-fs error (device loop6): ext4_dirty_inode:6158: inode #2: comm syz.6.2820: mark_inode_dirty error [ 365.592693][ T28] audit: type=1326 audit(1793290178.801:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.2817" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988ad9f559 code=0x7ffc0000 [ 365.633127][ T8838] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.2820: corrupted inode contents [ 365.649123][ T8856] xt_hashlimit: size too large, truncated to 1048576 [ 365.665596][ T8830] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.688599][ T28] audit: type=1326 audit(1793290179.411:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.2817" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f988ad9f559 code=0x7ffc0000 [ 365.721578][ T8849] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.2820: corrupted inode contents [ 365.760744][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.778783][ T8849] EXT4-fs error (device loop6): ext4_dirty_inode:6158: inode #2: comm syz.6.2820: mark_inode_dirty error [ 365.800683][ T8830] device bridge_slave_0 entered promiscuous mode [ 365.832063][ T8849] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.2820: corrupted inode contents [ 365.844872][ T8830] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.854106][ T8830] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.864485][ T8849] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.2820: mark_inode_dirty error [ 365.871314][ T8830] device bridge_slave_1 entered promiscuous mode [ 365.934196][ T8849] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.2820: corrupted inode contents [ 366.011338][ T8849] EXT4-fs error (device loop6): ext4_dirty_inode:6158: inode #2: comm syz.6.2820: mark_inode_dirty error [ 366.086677][ T8861] loop3: detected capacity change from 0 to 40427 [ 366.098645][ T8854] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.2820: corrupted inode contents [ 366.114742][ T8861] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 366.124410][ T10] device bridge_slave_1 left promiscuous mode [ 366.131771][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.145394][ T8861] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 366.156050][ T10] device bridge_slave_0 left promiscuous mode [ 366.166517][ T8861] F2FS-fs (loop3): fault_injection options not supported [ 366.174992][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.183712][ T6966] EXT4-fs (loop6): unmounting filesystem. [ 366.192249][ T8861] F2FS-fs (loop3): fault_type options not supported [ 366.220055][ T8861] F2FS-fs (loop3): invalid crc value [ 366.245931][ T8866] loop6: detected capacity change from 0 to 2048 [ 366.256151][ T8861] F2FS-fs (loop3): Found nat_bits in checkpoint [ 366.309447][ T8866] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 366.326256][ T8866] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.385731][ T28] audit: type=1400 audit(1793290180.101:3989): avc: denied { write } for pid=8874 comm="syz.5.2827" path="socket:[49922]" dev="sockfs" ino=49922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 366.446787][ T6966] EXT4-fs (loop6): unmounting filesystem. [ 366.453459][ T8861] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 366.472357][ T8861] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 366.520405][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.533020][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.571494][ T8878] loop6: detected capacity change from 0 to 512 [ 366.588299][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.603997][ T8878] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 366.612310][ T7389] syz-executor: attempt to access beyond end of device [ 366.612310][ T7389] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 366.637292][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.648113][ T8878] FAT-fs (loop6): Filesystem has been set read-only [ 366.656083][ T2772] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.663138][ T2772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.680902][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.698500][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.734299][ T2772] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.741376][ T2772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.778344][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.806699][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.825006][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.843346][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.860274][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.878157][ T8878] __nla_validate_parse: 1 callbacks suppressed [ 366.878173][ T8878] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2828'. [ 366.900568][ T8886] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2831'. [ 366.915330][ T8878] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2828'. [ 366.924387][ T8886] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2831'. [ 366.928986][ T28] audit: type=1400 audit(1793290180.641:3990): avc: denied { ioctl } for pid=8874 comm="syz.5.2827" path="/592/file0" dev="tmpfs" ino=3188 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 366.965024][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.971042][ T28] audit: type=1400 audit(1793290180.641:3991): avc: denied { read } for pid=8874 comm="syz.5.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 366.980330][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.013298][ T8892] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 367.023611][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.031453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 367.038159][ T1370] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 367.040226][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.055990][ T8892] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 367.068577][ T8830] device veth0_vlan entered promiscuous mode [ 367.075440][ T8892] System zones: 0-2, 18-18, 34-35 [ 367.102920][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.114658][ T8830] device veth1_macvtap entered promiscuous mode [ 367.124399][ T8892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 367.145784][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.154933][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.170114][ T8892] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.198061][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.211986][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.228137][ T1370] usb 3-1: Invalid ep0 maxpacket: 64 [ 367.253432][ T8904] netlink: 124 bytes leftover after parsing attributes in process `syz.9.2813'. [ 367.271919][ T8902] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 367.285185][ T8902] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.322021][ T6966] EXT4-fs (loop6): unmounting filesystem. [ 367.333394][ T28] audit: type=1400 audit(1793290181.051:3992): avc: denied { connect } for pid=8890 comm="syz.3.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.378175][ T1370] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 367.422761][ T8912] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 367.441939][ T8912] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.458137][ T8913] /dev/loop3: Can't open blockdev [ 367.485818][ T8912] cgroup: noprefix used incorrectly [ 367.608118][ T1370] usb 3-1: Invalid ep0 maxpacket: 64 [ 367.613717][ T1370] usb usb3-port1: attempt power cycle [ 368.250965][ T6966] EXT4-fs (loop6): unmounting filesystem. [ 368.478166][ T1370] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 368.491472][ T8921] set_capacity_and_notify: 3 callbacks suppressed [ 368.491487][ T8921] loop9: detected capacity change from 0 to 512 [ 368.518462][ T1370] usb 3-1: Invalid ep0 maxpacket: 64 [ 368.538578][ T8921] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 368.556184][ T8921] FAT-fs (loop9): Filesystem has been set read-only [ 368.571187][ T8921] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2842'. [ 368.591098][ T8921] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2842'. [ 368.668171][ T1370] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 368.708457][ T1370] usb 3-1: Invalid ep0 maxpacket: 64 [ 368.713879][ T1370] usb usb3-port1: unable to enumerate USB device [ 368.952585][ T8954] loop9: detected capacity change from 0 to 2048 [ 368.992229][ T8954] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 369.008349][ T8954] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.104320][ T8830] EXT4-fs (loop9): unmounting filesystem. [ 369.168146][ T8960] netlink: 124 bytes leftover after parsing attributes in process `syz.9.2848'. [ 369.225777][ T8962] loop9: detected capacity change from 0 to 2048 [ 369.288157][ T8962] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 369.298347][ T7389] EXT4-fs (loop3): unmounting filesystem. [ 369.307432][ T8962] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.361336][ T8830] EXT4-fs (loop9): unmounting filesystem. [ 369.422683][ T8966] loop3: detected capacity change from 0 to 8192 [ 369.471555][ T8966] loop3: p1 < > p2 < > p4 < > [ 369.486709][ T8966] loop3: partition table partially beyond EOD, truncated [ 369.999485][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2850'. [ 370.214508][ T8966] loop3: p2 start 16776960 is beyond EOD, truncated [ 370.342667][ T8981] loop6: detected capacity change from 0 to 512 [ 370.428654][ T8981] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 370.436502][ T8981] FAT-fs (loop6): Filesystem has been set read-only [ 370.448715][ T7258] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 370.448749][ T7389] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 370.465778][ T7257] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 370.479029][ T8981] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2855'. [ 370.488188][ T7258] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.488372][ T7257] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.497296][ T7258] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 370.497445][ T7258] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.533496][ T7257] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 370.541632][ T7258] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 370.550349][ T7257] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.559705][ T7257] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 370.567968][ T7257] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.578512][ T7257] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 370.587836][ T7257] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.597037][ T7257] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 370.609334][ T8970] loop9: detected capacity change from 0 to 40427 [ 370.628271][ T7257] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.637406][ T7257] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 370.644222][ T7258] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.658981][ T8970] F2FS-fs (loop9): invalid crc value [ 370.659494][ T8995] loop6: detected capacity change from 0 to 2048 [ 370.690095][ T8970] F2FS-fs (loop9): Found nat_bits in checkpoint [ 370.709021][ T7258] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 370.727838][ T7258] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 370.758163][ T7258] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 370.788228][ T9007] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 370.795675][ T9007] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 370.890167][ T8995] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 370.903078][ T8970] F2FS-fs (loop9): Start checkpoint disabled! [ 370.951802][ T8995] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.964420][ T8970] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 370.970294][ T3622] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 370.982412][ T8970] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 370.998594][ T6966] EXT4-fs (loop6): unmounting filesystem. [ 371.304107][ T3622] usb 3-1: Using ep0 maxpacket: 32 [ 371.311312][ T3622] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 371.323519][ T3622] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 371.335420][ T3622] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 372.272291][ T3622] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 372.294669][ T3622] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 372.310431][ T3622] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 372.378181][ T9031] loop9: detected capacity change from 0 to 512 [ 372.386257][ T3622] usb 3-1: New USB device found, idVendor=0763, idProduct=200d, bcdDevice= 0.40 [ 372.395383][ T3622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.403425][ T3622] usb 3-1: Product: Д [ 372.405472][ T9031] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 372.407515][ T3622] usb 3-1: Manufacturer: ㊠[ 372.407532][ T3622] usb 3-1: SerialNumber: 㷬ꚴî€î¯“è·¯ì¢ç¥¼ä„ì¦é—¼î‚¢î€­Ü™âˆæ¤‰å›èµ†î®”罾﬑鼡ࢀ곖擆뽜訳맘믗✠輤ᮣ掩èµè·³Ú…ï¯ç‘§ì°–殖㬘腆 [ 372.416699][ T9031] FAT-fs (loop9): Filesystem has been set read-only [ 373.096248][ T8999] loop2: detected capacity change from 0 to 512 [ 373.262931][ T9014] kvm [9013]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 373.294123][ T8999] EXT4-fs (loop2): Test dummy encryption mode enabled [ 373.349429][ T8999] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.2.2862: corrupted xattr block 95 [ 373.395610][ T8999] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 373.409417][ T8999] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2862: bg 0: block 7: invalid block bitmap [ 373.416783][ T9047] FAULT_INJECTION: forcing a failure. [ 373.416783][ T9047] name failslab, interval 1, probability 0, space 0, times 0 [ 373.439022][ T9047] CPU: 0 PID: 9047 Comm: syz.3.2876 Not tainted syzkaller #0 [ 373.445016][ T8999] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 373.446408][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 373.446422][ T9047] Call Trace: [ 373.446428][ T9047] [ 373.446435][ T9047] __dump_stack+0x21/0x24 [ 373.475580][ T9047] dump_stack_lvl+0x110/0x170 [ 373.480247][ T9047] ? __cfi_dump_stack_lvl+0x8/0x8 [ 373.485257][ T9047] dump_stack+0x15/0x24 [ 373.489398][ T9047] should_fail_ex+0x3bf/0x510 [ 373.494070][ T9047] __should_failslab+0xac/0xf0 [ 373.498821][ T9047] should_failslab+0x9/0x20 [ 373.503314][ T9047] __kmem_cache_alloc_node+0x3d/0x2d0 [ 373.508673][ T9047] ? kvmalloc_node+0x28a/0x460 [ 373.513421][ T9047] ? kvmalloc_node+0x28a/0x460 [ 373.518168][ T9047] __kmalloc_node+0xa2/0x1e0 [ 373.522743][ T9047] kvmalloc_node+0x28a/0x460 [ 373.527315][ T9047] ? __cfi_kvmalloc_node+0x10/0x10 [ 373.532414][ T9047] keyctl_update_key+0x61/0x120 [ 373.537251][ T9047] __se_sys_keyctl+0x33c/0xe10 [ 373.542002][ T9047] ? __x64_sys_keyctl+0xd0/0xd0 [ 373.546838][ T9047] ? do_futex+0x2e2/0x430 [ 373.551152][ T9047] ? __cfi_do_futex+0x10/0x10 [ 373.555823][ T9047] ? __se_sys_futex+0x136/0x310 [ 373.560676][ T9047] ? __this_cpu_preempt_check+0x13/0x20 [ 373.566225][ T9047] ? xfd_validate_state+0x70/0x150 [ 373.571327][ T9047] ? __kasan_check_write+0x14/0x20 [ 373.576425][ T9047] ? fpregs_restore_userregs+0x128/0x260 [ 373.582061][ T9047] __x64_sys_keyctl+0xbf/0xd0 [ 373.586734][ T9047] x64_sys_call+0x71a/0x9a0 [ 373.591226][ T9047] do_syscall_64+0x4c/0xa0 [ 373.595626][ T9047] ? clear_bhb_loop+0x30/0x80 [ 373.600289][ T9047] ? clear_bhb_loop+0x30/0x80 [ 373.604949][ T9047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.610832][ T9047] RIP: 0033:0x7f988ad9f559 [ 373.615228][ T9047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.634818][ T9047] RSP: 002b:00007f988bc69028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 373.643215][ T9047] RAX: ffffffffffffffda RBX: 00007f988b025fa0 RCX: 00007f988ad9f559 [ 373.651179][ T9047] RDX: 0000200000001cc0 RSI: 0000000000000000 RDI: 0000000000000002 [ 373.659131][ T9047] RBP: 00007f988ae36b20 R08: 0000000000000000 R09: 0000000000000000 [ 373.667087][ T9047] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 373.675041][ T9047] R13: 00007f988b026038 R14: 00007f988b025fa0 R15: 00007ffecff66038 [ 373.683000][ T9047] [ 373.694867][ T8999] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2918: inode #11: comm syz.2.2862: corrupted xattr block 95 [ 373.696347][ T9050] xt_hashlimit: size too large, truncated to 1048576 [ 373.714259][ T8999] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 373.723590][ T8999] EXT4-fs (loop2): 1 orphan inode deleted [ 373.729499][ T8999] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 373.751845][ T3622] usb 3-1: MIDIStreaming interface descriptor not found [ 373.779199][ T3622] usb 3-1: USB disconnect, device number 15 [ 373.819660][ T9052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9052 comm=syz.3.2876 [ 374.793287][ T8246] EXT4-fs (loop2): unmounting filesystem. [ 374.855224][ T9069] loop3: detected capacity change from 0 to 512 [ 375.001076][ T9069] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 375.031297][ T9069] FAT-fs (loop3): Filesystem has been set read-only [ 375.116368][ T28] audit: type=1400 audit(1793290188.831:3993): avc: denied { setattr } for pid=9084 comm="syz.6.2892" name="pfkey" dev="proc" ino=4026532553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 375.183719][ T28] audit: type=1400 audit(1793290188.901:3994): avc: denied { read write } for pid=9091 comm="syz.3.2895" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 375.246042][ T28] audit: type=1400 audit(1793290188.921:3995): avc: denied { open } for pid=9091 comm="syz.3.2895" path="/107/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 375.288332][ T9094] loop9: detected capacity change from 0 to 512 [ 375.297270][ T9094] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 375.468164][ T28] audit: type=1400 audit(1793290188.921:3996): avc: denied { ioctl } for pid=9091 comm="syz.3.2895" path="/107/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 375.495341][ T9095] loop3: detected capacity change from 0 to 128 [ 375.502069][ T28] audit: type=1326 audit(1793290188.991:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.9.2893" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a739f559 code=0x7ffc0000 [ 375.533190][ T9098] __nla_validate_parse: 1 callbacks suppressed [ 375.533205][ T9098] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2896'. [ 375.546450][ T28] audit: type=1326 audit(1793290188.991:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.9.2893" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a739f559 code=0x7ffc0000 [ 375.588242][ T28] audit: type=1326 audit(1793290188.991:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.9.2893" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f23a739f559 code=0x7ffc0000 [ 375.614455][ T28] audit: type=1326 audit(1793290188.991:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.9.2893" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a739f559 code=0x7ffc0000 [ 375.649263][ T28] audit: type=1326 audit(1793290188.991:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.9.2893" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a739f559 code=0x7ffc0000 [ 375.693448][ T28] audit: type=1326 audit(1793290188.991:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.9.2893" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23a739f559 code=0x7ffc0000 [ 375.754049][ T9106] loop3: detected capacity change from 0 to 512 [ 376.578202][ T9106] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 376.588496][ T9121] FAULT_INJECTION: forcing a failure. [ 376.588496][ T9121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.624665][ T9106] FAT-fs (loop3): Filesystem has been set read-only [ 376.658181][ T9121] CPU: 1 PID: 9121 Comm: syz.9.2904 Not tainted syzkaller #0 [ 376.665584][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 376.675643][ T9121] Call Trace: [ 376.678917][ T9121] [ 376.681847][ T9121] __dump_stack+0x21/0x24 [ 376.686177][ T9121] dump_stack_lvl+0x110/0x170 [ 376.690849][ T9121] ? __cfi_dump_stack_lvl+0x8/0x8 [ 376.695868][ T9121] ? _parse_integer+0x2a/0x40 [ 376.700538][ T9121] dump_stack+0x15/0x24 [ 376.704686][ T9121] should_fail_ex+0x3bf/0x510 [ 376.709359][ T9121] should_fail+0xb/0x10 [ 376.713508][ T9121] should_fail_usercopy+0x1a/0x20 [ 376.718527][ T9121] _copy_from_user+0x1e/0xc0 [ 376.723110][ T9121] ___sys_sendmsg+0x1c3/0x360 [ 376.727782][ T9121] ? __sys_sendmsg+0x290/0x290 [ 376.732541][ T9121] ? __kasan_check_write+0x14/0x20 [ 376.737643][ T9121] ? proc_fail_nth_write+0x180/0x200 [ 376.742926][ T9121] ? vfs_write+0xa51/0xd00 [ 376.747338][ T9121] ? __fdget+0x19c/0x220 [ 376.751578][ T9121] __x64_sys_sendmsg+0x20d/0x2e0 [ 376.756512][ T9121] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 376.761968][ T9121] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 376.768026][ T9121] x64_sys_call+0x171/0x9a0 [ 376.772511][ T9121] do_syscall_64+0x4c/0xa0 [ 376.776907][ T9121] ? clear_bhb_loop+0x30/0x80 [ 376.781564][ T9121] ? clear_bhb_loop+0x30/0x80 [ 376.786225][ T9121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.792102][ T9121] RIP: 0033:0x7f23a739f559 [ 376.796499][ T9121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.816084][ T9121] RSP: 002b:00007f23a828e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.824480][ T9121] RAX: ffffffffffffffda RBX: 00007f23a7625fa0 RCX: 00007f23a739f559 [ 376.832434][ T9121] RDX: 0000000000048080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 376.840413][ T9121] RBP: 00007f23a828e090 R08: 0000000000000000 R09: 0000000000000000 [ 376.848362][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.856398][ T9121] R13: 00007f23a7626038 R14: 00007f23a7625fa0 R15: 00007fff4a0111d8 [ 376.864353][ T9121] [ 376.877697][ T9124] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2905'. [ 376.895558][ T9126] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 376.961390][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2910'. [ 377.064712][ T9137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2910'. [ 377.082738][ T9142] xt_hashlimit: max too large, truncated to 1048576 [ 377.320108][ T9151] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 377.390569][ T9152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2913'. [ 377.408141][ T9152] IPv6: Can't replace route, no match found [ 377.413421][ T9154] loop3: detected capacity change from 0 to 2048 [ 377.449039][ T9154] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 377.464712][ T9163] x_tables: duplicate underflow at hook 2 [ 377.467849][ T9154] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.488877][ T9146] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.516490][ T9126] ./dev/sda1: Can't open blockdev [ 377.524510][ T9146] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.533147][ T9146] device bridge_slave_0 entered promiscuous mode [ 377.556591][ T7389] EXT4-fs (loop3): unmounting filesystem. [ 377.562962][ T9146] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.580640][ T9146] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.594093][ T9146] device bridge_slave_1 entered promiscuous mode [ 377.650103][ T9167] loop3: detected capacity change from 0 to 512 [ 378.418672][ T9167] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 378.426534][ T9167] FAT-fs (loop3): Filesystem has been set read-only [ 378.482340][ T9177] loop9: detected capacity change from 0 to 512 [ 378.506583][ T9179] loop9: detected capacity change from 0 to 512 [ 378.612100][ T9185] overlayfs: filesystem on './file0' not supported as upperdir [ 378.663986][ T9180] loop2: detected capacity change from 0 to 40427 [ 378.710435][ T9180] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 378.731341][ T9184] loop3: detected capacity change from 0 to 128 [ 378.741594][ T9180] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 379.215441][ T9180] F2FS-fs (loop2): fault_injection options not supported [ 379.336941][ T8170] device bridge_slave_1 left promiscuous mode [ 379.382703][ T9180] F2FS-fs (loop2): fault_type options not supported [ 379.403890][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.529234][ T9180] F2FS-fs (loop2): invalid crc value [ 379.548266][ T8170] device bridge_slave_0 left promiscuous mode [ 379.554419][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.593011][ T8170] device veth1_macvtap left promiscuous mode [ 379.599850][ T9180] F2FS-fs (loop2): Found nat_bits in checkpoint [ 379.618004][ T8170] device veth0_vlan left promiscuous mode [ 379.664490][ T9180] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 379.674872][ T9180] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 379.724151][ T9205] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 379.734446][ T9205] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 379.742947][ T9205] System zones: 0-1, 15-15, 18-18, 34-34 [ 379.743186][ T8246] syz-executor: attempt to access beyond end of device [ 379.743186][ T8246] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 379.750082][ T9205] EXT4-fs (loop3): orphan cleanup on readonly fs [ 379.769157][ T9205] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 379.783781][ T9205] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 379.798331][ T9205] EXT4-fs (loop3): 1 truncate cleaned up [ 379.804602][ T9205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 379.820801][ T9205] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 379.866252][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.883753][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.901984][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.914197][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.923338][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.930404][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.948008][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 379.952485][ T9215] set_capacity_and_notify: 2 callbacks suppressed [ 379.952501][ T9215] loop6: detected capacity change from 0 to 1024 [ 379.969750][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 379.982508][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 379.991020][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.998097][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.010976][ T9215] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 380.033410][ T7389] EXT4-fs (loop3): unmounting filesystem. [ 380.043467][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.065915][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.081157][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.173685][ T9219] loop3: detected capacity change from 0 to 128 [ 380.600980][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.877671][ T9215] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 380.897898][ T9146] device veth0_vlan entered promiscuous mode [ 380.914392][ T9215] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.955600][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 380.965704][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 380.977181][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 380.977195][ T28] audit: type=1400 audit(1793290194.701:4040): avc: denied { read write } for pid=9214 comm="syz.6.2934" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 380.985768][ T9232] loop3: detected capacity change from 0 to 256 [ 381.006624][ T28] audit: type=1400 audit(1793290194.731:4041): avc: denied { open } for pid=9214 comm="syz.6.2934" path="/146/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 381.028263][ T9215] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm syz.6.2934: lblock 0 mapped to illegal pblock 0 (length 1) [ 381.035889][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.059049][ T9232] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 381.061988][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.076706][ T9236] loop2: detected capacity change from 0 to 512 [ 381.103453][ T6966] EXT4-fs (loop6): unmounting filesystem. [ 381.109983][ T7257] blk_print_req_error: 2 callbacks suppressed [ 381.109998][ T7257] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 381.112292][ T9236] loop2: detected capacity change from 0 to 512 [ 381.116126][ T7257] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.130005][ T9232] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2048) [ 381.143071][ T9146] device veth1_macvtap entered promiscuous mode [ 381.154781][ T7257] Buffer I/O error on dev loop2, logical block 0, async page read [ 381.157337][ T9232] FAT-fs (loop3): Filesystem has been set read-only [ 381.188150][ T9232] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 8200) [ 381.201951][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 381.212333][ T9248] FAULT_INJECTION: forcing a failure. [ 381.212333][ T9248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.220743][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 381.233570][ T9232] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 8200) [ 381.242535][ T9246] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2054) [ 381.250783][ T9248] CPU: 0 PID: 9248 Comm: syz.6.2942 Not tainted syzkaller #0 [ 381.258164][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 381.261686][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 381.268219][ T9248] Call Trace: [ 381.268230][ T9248] [ 381.268237][ T9248] __dump_stack+0x21/0x24 [ 381.268258][ T9248] dump_stack_lvl+0x110/0x170 [ 381.268272][ T9248] ? __cfi_dump_stack_lvl+0x8/0x8 [ 381.268287][ T9248] dump_stack+0x15/0x24 [ 381.268300][ T9248] should_fail_ex+0x3bf/0x510 [ 381.268317][ T9248] should_fail+0xb/0x10 [ 381.283654][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.286682][ T9248] should_fail_usercopy+0x1a/0x20 [ 381.310062][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 381.317128][ T9248] _copy_to_user+0x1e/0x90 [ 381.317151][ T9248] simple_read_from_buffer+0xe9/0x160 [ 381.339233][ T9248] proc_fail_nth_read+0x1a6/0x220 [ 381.344261][ T9248] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 381.349795][ T9248] ? security_file_permission+0x94/0xb0 [ 381.355325][ T9248] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 381.360859][ T9248] vfs_read+0x286/0x930 [ 381.365008][ T9248] ? __cfi_vfs_read+0x10/0x10 [ 381.369670][ T9248] ? __kasan_check_write+0x14/0x20 [ 381.374767][ T9248] ? mutex_lock+0x93/0x1b0 [ 381.379169][ T9248] ? __cfi_mutex_lock+0x10/0x10 [ 381.384007][ T9248] ? __fdget_pos+0x2cd/0x380 [ 381.388602][ T9248] ? ksys_read+0x70/0x260 [ 381.392923][ T9248] ksys_read+0x14a/0x260 [ 381.397149][ T9248] ? __cfi_ksys_read+0x10/0x10 [ 381.401898][ T9248] ? debug_smp_processor_id+0x17/0x20 [ 381.407261][ T9248] __x64_sys_read+0x7b/0x90 [ 381.411748][ T9248] x64_sys_call+0x2f/0x9a0 [ 381.416161][ T9248] do_syscall_64+0x4c/0xa0 [ 381.420562][ T9248] ? clear_bhb_loop+0x30/0x80 [ 381.425223][ T9248] ? clear_bhb_loop+0x30/0x80 [ 381.429880][ T9248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.435784][ T9248] RIP: 0033:0x7f261c15fd8e [ 381.440194][ T9248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 381.459776][ T9248] RSP: 002b:00007f261cf87fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 381.468168][ T9248] RAX: ffffffffffffffda RBX: 00007f261cf886c0 RCX: 00007f261c15fd8e [ 381.476121][ T9248] RDX: 000000000000000f RSI: 00007f261cf880a0 RDI: 0000000000000003 [ 381.484068][ T9248] RBP: 00007f261cf88090 R08: 0000000000000000 R09: 0000000000000000 [ 381.492026][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.500001][ T9248] R13: 00007f261c426038 R14: 00007f261c425fa0 R15: 00007ffd8078e178 [ 381.507970][ T9248] [ 381.517558][ T9236] loop2: detected capacity change from 0 to 512 [ 381.532512][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 381.551468][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.574760][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.590912][ T9236] loop2: detected capacity change from 0 to 512 [ 381.597211][ T7258] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 381.618545][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.635128][ T9236] loop2: detected capacity change from 0 to 512 [ 381.692786][ T9236] loop2: detected capacity change from 0 to 512 [ 381.699257][ T7258] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 381.735960][ T9236] loop2: detected capacity change from 0 to 512 [ 381.758048][ T9259] overlayfs: filesystem on './file0' not supported as upperdir [ 381.826486][ T9265] FAULT_INJECTION: forcing a failure. [ 381.826486][ T9265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.868961][ T9267] EXT4-fs: test_dummy_encryption requires encrypt feature [ 381.880629][ T9265] CPU: 1 PID: 9265 Comm: syz.3.2949 Not tainted syzkaller #0 [ 381.888030][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 381.897961][ T9250] F2FS-fs (loop9): invalid crc value [ 381.898085][ T9265] Call Trace: [ 381.898092][ T9265] [ 381.898098][ T9265] __dump_stack+0x21/0x24 [ 381.898121][ T9265] dump_stack_lvl+0x110/0x170 [ 381.918523][ T9265] ? __cfi_dump_stack_lvl+0x8/0x8 [ 381.923555][ T9265] dump_stack+0x15/0x24 [ 381.926745][ T9250] F2FS-fs (loop9): Found nat_bits in checkpoint [ 381.927713][ T9265] should_fail_ex+0x3bf/0x510 [ 381.938584][ T9265] should_fail+0xb/0x10 [ 381.942733][ T9265] should_fail_usercopy+0x1a/0x20 [ 381.947753][ T9265] _copy_from_user+0x1e/0xc0 [ 381.952336][ T9265] __sys_bpf+0x2a0/0x850 [ 381.956574][ T9265] ? bpf_link_show_fdinfo+0x330/0x330 [ 381.957425][ T9250] F2FS-fs (loop9): Start checkpoint disabled! [ 381.961941][ T9265] ? __cfi_ksys_write+0x10/0x10 [ 381.961960][ T9265] ? debug_smp_processor_id+0x17/0x20 [ 381.968962][ T9250] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 381.972831][ T9265] __x64_sys_bpf+0x7c/0x90 [ 381.989733][ T9265] x64_sys_call+0x488/0x9a0 [ 381.989880][ T9250] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 381.994239][ T9265] do_syscall_64+0x4c/0xa0 [ 381.994258][ T9265] ? clear_bhb_loop+0x30/0x80 [ 382.010731][ T9265] ? clear_bhb_loop+0x30/0x80 [ 382.015411][ T9265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.021304][ T9265] RIP: 0033:0x7f988ad9f559 [ 382.025718][ T9265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.045321][ T9265] RSP: 002b:00007f988bc69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.053739][ T9265] RAX: ffffffffffffffda RBX: 00007f988b025fa0 RCX: 00007f988ad9f559 [ 382.061710][ T9265] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 382.069685][ T9265] RBP: 00007f988bc69090 R08: 0000000000000000 R09: 0000000000000000 [ 382.077650][ T9265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.085621][ T9265] R13: 00007f988b026038 R14: 00007f988b025fa0 R15: 00007ffecff66038 [ 382.093598][ T9265] [ 382.113500][ T7258] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 382.196165][ T9278] EXT4-fs (loop2): Test dummy encryption mode enabled [ 382.222988][ T9278] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 382.510909][ T9278] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.2953: bad orphan inode 131083 [ 382.607949][ T9278] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 382.816946][ T9278] bridge_slave_0: default FDB implementation only supports local addresses [ 382.959255][ T8246] EXT4-fs (loop2): unmounting filesystem. [ 383.102578][ T28] audit: type=1326 audit(1793290196.821:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.2.2959" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 383.129315][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2959'. [ 383.153084][ T28] audit: type=1326 audit(1793290196.821:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.2.2959" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 383.174579][ T9293] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2959'. [ 383.185094][ T9303] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2954'. [ 383.208549][ T28] audit: type=1326 audit(1793290196.821:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.2.2959" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 383.264862][ T28] audit: type=1326 audit(1793290196.821:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.2.2959" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 383.298107][ T28] audit: type=1326 audit(1793290196.851:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.2.2959" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 383.371279][ T28] audit: type=1326 audit(1793290196.851:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.2.2959" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 383.423854][ T28] audit: type=1326 audit(1793290196.851:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.2.2959" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 383.488343][ T28] audit: type=1326 audit(1793290196.851:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.2.2959" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 383.569897][ T9314] netlink: 'syz.3.2967': attribute type 29 has an invalid length. [ 383.638134][ T3558] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 383.656245][ T9307] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 383.676139][ T9307] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 383.691774][ T9307] F2FS-fs (loop2): fault_injection options not supported [ 383.711716][ T9307] F2FS-fs (loop2): fault_type options not supported [ 383.909208][ T9307] F2FS-fs (loop2): invalid crc value [ 383.986347][ T9307] F2FS-fs (loop2): Found nat_bits in checkpoint [ 384.078113][ T3558] usb 10-1: Using ep0 maxpacket: 32 [ 384.088869][ T3558] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 384.097136][ T3558] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.126345][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.128231][ T3558] usb 10-1: config 0 has no interface number 0 [ 384.139580][ T9307] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 384.141598][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.146599][ T9307] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 384.164680][ T3558] usb 10-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.185848][ T9317] device bridge_slave_0 entered promiscuous mode [ 384.198256][ T8246] syz-executor: attempt to access beyond end of device [ 384.198256][ T8246] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 384.215641][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.225012][ T3558] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 384.240532][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.250105][ T3558] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.276034][ T9317] device bridge_slave_1 entered promiscuous mode [ 384.282601][ T3558] usb 10-1: Product: syz [ 384.312823][ T3558] usb 10-1: Manufacturer: syz [ 384.317534][ T3558] usb 10-1: SerialNumber: syz [ 384.329670][ T2772] device bridge_slave_1 left promiscuous mode [ 384.336867][ T2772] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.344031][ T3558] usb 10-1: config 0 descriptor?? [ 384.358466][ T3558] asix: probe of 10-1:0.188 failed with error -22 [ 384.358534][ T2772] device bridge_slave_0 left promiscuous mode [ 384.387768][ T2772] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.406061][ T2772] device veth1_macvtap left promiscuous mode [ 384.415458][ T2772] device veth0_vlan left promiscuous mode [ 384.492111][ T9333] FAULT_INJECTION: forcing a failure. [ 384.492111][ T9333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.518215][ T9333] CPU: 1 PID: 9333 Comm: syz.3.2971 Not tainted syzkaller #0 [ 384.525634][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 384.535698][ T9333] Call Trace: [ 384.538983][ T9333] [ 384.541906][ T9333] __dump_stack+0x21/0x24 [ 384.546236][ T9333] dump_stack_lvl+0x110/0x170 [ 384.550902][ T9333] ? __cfi_dump_stack_lvl+0x8/0x8 [ 384.555914][ T9333] ? memcpy+0x56/0x70 [ 384.559898][ T9333] dump_stack+0x15/0x24 [ 384.564057][ T9333] should_fail_ex+0x3bf/0x510 [ 384.568735][ T9333] should_fail+0xb/0x10 [ 384.572872][ T9333] should_fail_usercopy+0x1a/0x20 [ 384.577881][ T9333] strncpy_from_user+0x24/0x2c0 [ 384.582714][ T9333] bpf_prog_load+0x1f1/0x1670 [ 384.587381][ T9333] ? map_freeze+0x3a0/0x3a0 [ 384.591865][ T9333] ? selinux_bpf+0xc7/0xf0 [ 384.596262][ T9333] ? security_bpf+0x93/0xb0 [ 384.600747][ T9333] __sys_bpf+0x57b/0x850 [ 384.604966][ T9333] ? bpf_link_show_fdinfo+0x330/0x330 [ 384.610323][ T9333] ? __cfi_ksys_write+0x10/0x10 [ 384.615154][ T9333] ? debug_smp_processor_id+0x17/0x20 [ 384.620507][ T9333] __x64_sys_bpf+0x7c/0x90 [ 384.624921][ T9333] x64_sys_call+0x488/0x9a0 [ 384.629408][ T9333] do_syscall_64+0x4c/0xa0 [ 384.633803][ T9333] ? clear_bhb_loop+0x30/0x80 [ 384.638462][ T9333] ? clear_bhb_loop+0x30/0x80 [ 384.643139][ T9333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.649012][ T9333] RIP: 0033:0x7f988ad9f559 [ 384.653408][ T9333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.672992][ T9333] RSP: 002b:00007f988bc69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.681404][ T9333] RAX: ffffffffffffffda RBX: 00007f988b025fa0 RCX: 00007f988ad9f559 [ 384.689355][ T9333] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 384.697310][ T9333] RBP: 00007f988bc69090 R08: 0000000000000000 R09: 0000000000000000 [ 384.705258][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.713206][ T9333] R13: 00007f988b026038 R14: 00007f988b025fa0 R15: 00007ffecff66038 [ 384.721184][ T9333] [ 385.016619][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 385.018115][ T309] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 385.024779][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.055321][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.070135][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.093700][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.100780][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.148260][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 385.178344][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.193976][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.212408][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.218106][ T309] usb 3-1: Using ep0 maxpacket: 32 [ 385.219482][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.236637][ T309] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 385.245191][ T309] usb 3-1: config 0 has no interface number 0 [ 385.248235][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.251505][ T309] usb 3-1: config 0 interface 184 has no altsetting 0 [ 385.267425][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.278244][ T309] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 385.287353][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.290864][ T9317] device veth0_vlan entered promiscuous mode [ 385.301366][ T309] usb 3-1: Product: syz [ 385.305564][ T309] usb 3-1: Manufacturer: syz [ 385.310456][ T309] usb 3-1: SerialNumber: syz [ 385.315427][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 385.316064][ T309] usb 3-1: config 0 descriptor?? [ 385.333318][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.348670][ T309] smsc75xx v1.0.0 [ 385.350383][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.368344][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.395402][ T9317] device veth1_macvtap entered promiscuous mode [ 385.414547][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 385.432686][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.449461][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 385.503678][ T9355] x_tables: duplicate underflow at hook 2 [ 385.546105][ T9357] set_capacity_and_notify: 10 callbacks suppressed [ 385.546123][ T9357] loop4: detected capacity change from 0 to 2048 [ 385.579002][ T9357] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 385.709697][ T310] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 385.979270][ T310] usb 7-1: Using ep0 maxpacket: 16 [ 386.458894][ T309] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 386.504928][ T309] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 386.593811][ T3622] usb 10-1: USB disconnect, device number 2 [ 386.742439][ T310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 386.744550][ T9368] loop3: detected capacity change from 0 to 512 [ 386.758112][ T310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 386.779002][ T310] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 386.798159][ T310] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.808275][ T310] usb 7-1: Product: syz [ 386.812455][ T310] usb 7-1: Manufacturer: syz [ 386.827183][ T310] usb 7-1: SerialNumber: syz [ 386.839962][ T310] usb 7-1: config 0 descriptor?? [ 386.855496][ T310] hub 7-1:0.0: bad descriptor, ignoring hub [ 386.861598][ T310] hub: probe of 7-1:0.0 failed with error -5 [ 386.881007][ T310] snd-usb-audio: probe of 7-1:0.0 failed with error -12 [ 386.908258][ T7259] udevd[7259]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 386.972686][ T9366] loop9: detected capacity change from 0 to 40427 [ 387.043787][ T9372] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 387.051281][ T9372] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 387.130211][ T9366] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 387.152003][ T9366] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 387.246206][ T9366] F2FS-fs (loop9): fault_injection options not supported [ 387.254862][ T9366] F2FS-fs (loop9): fault_type options not supported [ 387.271656][ T9366] F2FS-fs (loop9): invalid crc value [ 387.292527][ T9366] F2FS-fs (loop9): Found nat_bits in checkpoint [ 387.361986][ T9366] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 387.369283][ T3622] usb 7-1: USB disconnect, device number 13 [ 387.375212][ T9366] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 387.438860][ T8830] syz-executor: attempt to access beyond end of device [ 387.438860][ T8830] loop9: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 387.599437][ T9378] loop9: detected capacity change from 0 to 128 [ 387.681052][ T9387] loop9: detected capacity change from 0 to 128 [ 387.695863][ T9387] FAT-fs (loop9): Unrecognized mount option "gid_map" or missing value [ 387.794923][ T9399] loop3: detected capacity change from 0 to 512 [ 387.836358][ T9399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 387.845508][ T9399] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.875192][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 387.875207][ T28] audit: type=1400 audit(1793290201.591:4103): avc: denied { append } for pid=9397 comm="syz.3.2990" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 387.911658][ T7389] EXT4-fs (loop3): unmounting filesystem. [ 388.461800][ T309] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 388.563766][ T28] audit: type=1400 audit(1793290201.621:4104): avc: denied { ioctl } for pid=9397 comm="syz.3.2990" path="/130/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 388.688447][ T309] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 388.703210][ T9408] loop3: detected capacity change from 0 to 2048 [ 388.726864][ T9412] loop4: detected capacity change from 0 to 2048 [ 388.738107][ T309] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 388.777894][ T309] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 388.785475][ T9408] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 388.795846][ T9408] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.795930][ T9412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 388.808583][ T309] usb 3-1: USB disconnect, device number 16 [ 388.828297][ T310] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 388.838486][ T7389] EXT4-fs (loop3): unmounting filesystem. [ 388.866343][ T9422] loop3: detected capacity change from 0 to 512 [ 388.876802][ T9412] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.892771][ T9422] EXT4-fs: Ignoring removed nobh option [ 388.928933][ T9422] EXT4-fs (loop3): orphan cleanup on readonly fs [ 388.945723][ T9422] EXT4-fs warning (device loop3): ext4_xattr_inode_get:506: inode #11: comm syz.3.2997: EA inode hash validation failed [ 388.958954][ T9317] EXT4-fs (loop4): unmounting filesystem. [ 388.968167][ T9422] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 388.986935][ T9411] loop2: detected capacity change from 0 to 40427 [ 389.005497][ T9422] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.2997: corrupted inode contents [ 389.018140][ T310] usb 10-1: Using ep0 maxpacket: 32 [ 389.025019][ T310] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 389.036699][ T9411] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 389.040774][ T9425] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 389.058100][ T9411] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 389.066314][ T9411] F2FS-fs (loop2): fault_injection options not supported [ 389.068104][ T310] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.084082][ T9422] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #15: comm syz.3.2997: mark_inode_dirty error [ 389.088147][ T9411] F2FS-fs (loop2): fault_type options not supported [ 389.095653][ T403] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 389.112092][ T9422] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #15: comm syz.3.2997: corrupted inode contents [ 389.124274][ T310] usb 10-1: config 0 has no interface number 0 [ 389.130519][ T9411] F2FS-fs (loop2): invalid crc value [ 389.130635][ T310] usb 10-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.149188][ T9422] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2947: inode #15: comm syz.3.2997: mark_inode_dirty error [ 389.166235][ T9422] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2950: inode #15: comm syz.3.2997: mark inode dirty (error -117) [ 389.183989][ T9422] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 389.184882][ T9411] F2FS-fs (loop2): Found nat_bits in checkpoint [ 389.193798][ T9422] EXT4-fs (loop3): 1 orphan inode deleted [ 389.205461][ T9422] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 389.215577][ T310] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 389.232345][ T310] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.246104][ T310] usb 10-1: Product: syz [ 389.258138][ T310] usb 10-1: Manufacturer: syz [ 389.262826][ T310] usb 10-1: SerialNumber: syz [ 389.271173][ T7389] EXT4-fs (loop3): unmounting filesystem. [ 389.285722][ T310] usb 10-1: config 0 descriptor?? [ 389.298107][ T403] usb 7-1: Using ep0 maxpacket: 32 [ 389.303389][ T9411] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 389.304293][ T403] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30 [ 389.318123][ T9411] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 389.327619][ T403] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.341417][ T310] asix: probe of 10-1:0.188 failed with error -22 [ 389.349606][ T403] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146 [ 389.378402][ T403] usb 7-1: config 0 interface 0 has no altsetting 0 [ 389.385155][ T403] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 389.394445][ T7257] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 389.395677][ T403] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.435095][ T403] usb 7-1: config 0 descriptor?? [ 389.438869][ T9445] erofs: (device loop3): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 389.453257][ T8246] syz-executor: attempt to access beyond end of device [ 389.453257][ T8246] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 389.488535][ T9447] FAULT_INJECTION: forcing a failure. [ 389.488535][ T9447] name failslab, interval 1, probability 0, space 0, times 0 [ 389.503718][ T9445] netlink: 'syz.3.3006': attribute type 1 has an invalid length. [ 389.522411][ T9447] CPU: 1 PID: 9447 Comm: syz.4.3008 Not tainted syzkaller #0 [ 389.529806][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 389.539845][ T9447] Call Trace: [ 389.543107][ T9447] [ 389.546021][ T9447] __dump_stack+0x21/0x24 [ 389.550339][ T9447] dump_stack_lvl+0x110/0x170 [ 389.555005][ T9447] ? __cfi_dump_stack_lvl+0x8/0x8 [ 389.560022][ T9447] ? release_sock+0x169/0x1c0 [ 389.564692][ T9447] dump_stack+0x15/0x24 [ 389.568838][ T9447] should_fail_ex+0x3bf/0x510 [ 389.573500][ T9447] __should_failslab+0xac/0xf0 [ 389.578253][ T9447] should_failslab+0x9/0x20 [ 389.582744][ T9447] kmem_cache_alloc_node+0x42/0x330 [ 389.587936][ T9447] ? __alloc_skb+0xe8/0x4a0 [ 389.592430][ T9447] __alloc_skb+0xe8/0x4a0 [ 389.596747][ T9447] netlink_sendmsg+0x635/0xbd0 [ 389.601497][ T9447] ? __cfi_netlink_sendmsg+0x10/0x10 [ 389.606769][ T9447] ? preempt_schedule_irq+0xca/0x120 [ 389.612035][ T9447] ? security_socket_sendmsg+0x93/0xb0 [ 389.617476][ T9447] ? __cfi_netlink_sendmsg+0x10/0x10 [ 389.622745][ T9447] ____sys_sendmsg+0x5fb/0x9c0 [ 389.627580][ T9447] ? __sys_sendmsg_sock+0x40/0x40 [ 389.632586][ T9447] ? import_iovec+0x7c/0xb0 [ 389.637072][ T9447] ___sys_sendmsg+0x2a2/0x360 [ 389.641738][ T9447] ? __sys_sendmsg+0x290/0x290 [ 389.646484][ T9447] ? __kasan_check_write+0x14/0x20 [ 389.651579][ T9447] ? proc_fail_nth_write+0x180/0x200 [ 389.656846][ T9447] ? vfs_write+0xa51/0xd00 [ 389.661248][ T9447] ? __fdget+0x19c/0x220 [ 389.665474][ T9447] __x64_sys_sendmsg+0x20d/0x2e0 [ 389.670390][ T9447] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 389.675831][ T9447] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 389.681885][ T9447] x64_sys_call+0x171/0x9a0 [ 389.686371][ T9447] do_syscall_64+0x4c/0xa0 [ 389.690769][ T9447] ? clear_bhb_loop+0x30/0x80 [ 389.695428][ T9447] ? clear_bhb_loop+0x30/0x80 [ 389.700090][ T9447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.705969][ T9447] RIP: 0033:0x7f8f1e19f559 [ 389.710366][ T9447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.729949][ T9447] RSP: 002b:00007f8f1cbf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.738349][ T9447] RAX: ffffffffffffffda RBX: 00007f8f1e425fa0 RCX: 00007f8f1e19f559 [ 389.746301][ T9447] RDX: 0000000000048080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 389.754251][ T9447] RBP: 00007f8f1cbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 389.762206][ T9447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.770159][ T9447] R13: 00007f8f1e426038 R14: 00007f8f1e425fa0 R15: 00007fff8eda3068 [ 389.778119][ T9447] [ 389.825452][ T9450] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 389.858681][ T28] audit: type=1400 audit(1793290203.571:4105): avc: denied { mounton } for pid=9452 comm="syz.3.3011" path="/138/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 389.886933][ T28] audit: type=1400 audit(1793290203.581:4106): avc: denied { ioctl } for pid=9452 comm="syz.3.3011" path="/dev/uhid" dev="devtmpfs" ino=267 ioctlcmd=0x6f03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 389.949316][ T9457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 389.969445][ T9461] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3013'. [ 389.979046][ T9457] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.995178][ T403] hid-multitouch 0003:1FD2:6007.000E: No inputs registered, leaving [ 390.015856][ T403] hid-multitouch 0003:1FD2:6007.000E: hiddev96,hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 390.063022][ T9464] overlayfs: failed to set xattr on upper [ 390.102655][ T8246] EXT4-fs (loop2): unmounting filesystem. [ 390.195349][ T9473] FAULT_INJECTION: forcing a failure. [ 390.195349][ T9473] name failslab, interval 1, probability 0, space 0, times 0 [ 390.218162][ T9473] CPU: 1 PID: 9473 Comm: syz.4.3016 Not tainted syzkaller #0 [ 390.225557][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 390.235610][ T9473] Call Trace: [ 390.238885][ T9473] [ 390.241812][ T9473] __dump_stack+0x21/0x24 [ 390.246139][ T9473] dump_stack_lvl+0x110/0x170 [ 390.250821][ T9473] ? __cfi_dump_stack_lvl+0x8/0x8 [ 390.255846][ T9473] ? avc_has_perm+0x163/0x250 [ 390.260534][ T9473] dump_stack+0x15/0x24 [ 390.264690][ T9473] should_fail_ex+0x3bf/0x510 [ 390.269370][ T9473] __should_failslab+0xac/0xf0 [ 390.274146][ T9473] should_failslab+0x9/0x20 [ 390.278641][ T9473] __kmem_cache_alloc_node+0x3d/0x2d0 [ 390.283998][ T9473] ? __get_vm_area_node+0x12c/0x360 [ 390.289185][ T9473] ? __get_vm_area_node+0x12c/0x360 [ 390.294365][ T9473] kmalloc_node_trace+0x26/0xb0 [ 390.299200][ T9473] __get_vm_area_node+0x12c/0x360 [ 390.304208][ T9473] __vmalloc_node_range+0x326/0x1440 [ 390.309476][ T9473] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 390.315009][ T9473] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 390.320710][ T9473] ? __stack_depot_save+0x36/0x490 [ 390.325808][ T9473] ? selinux_capable+0x2b6/0x3b0 [ 390.330730][ T9473] ? _parse_integer_limit+0x18e/0x1d0 [ 390.336084][ T9473] ? __cfi___vmalloc_node_range+0x10/0x10 [ 390.341787][ T9473] ? avc_has_perm_noaudit+0x390/0x490 [ 390.347144][ T9473] ? avc_has_perm_noaudit+0x390/0x490 [ 390.352497][ T9473] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 390.358024][ T9473] __vmalloc+0x79/0x90 [ 390.362077][ T9473] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 390.367602][ T9473] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 390.372962][ T9473] bpf_prog_alloc+0x21/0x1c0 [ 390.377536][ T9473] bpf_prog_load+0x811/0x1670 [ 390.382209][ T9473] ? map_freeze+0x3a0/0x3a0 [ 390.386706][ T9473] ? selinux_bpf+0xc7/0xf0 [ 390.391114][ T9473] ? security_bpf+0x93/0xb0 [ 390.395609][ T9473] __sys_bpf+0x57b/0x850 [ 390.399864][ T9473] ? bpf_link_show_fdinfo+0x330/0x330 [ 390.405232][ T9473] ? __cfi_ksys_write+0x10/0x10 [ 390.410069][ T9473] ? debug_smp_processor_id+0x17/0x20 [ 390.415435][ T9473] __x64_sys_bpf+0x7c/0x90 [ 390.419844][ T9473] x64_sys_call+0x488/0x9a0 [ 390.424332][ T9473] do_syscall_64+0x4c/0xa0 [ 390.428733][ T9473] ? clear_bhb_loop+0x30/0x80 [ 390.433400][ T9473] ? clear_bhb_loop+0x30/0x80 [ 390.438061][ T9473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.443939][ T9473] RIP: 0033:0x7f8f1e19f559 [ 390.448335][ T9473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.467919][ T9473] RSP: 002b:00007f8f1cbf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.476315][ T9473] RAX: ffffffffffffffda RBX: 00007f8f1e425fa0 RCX: 00007f8f1e19f559 [ 390.484265][ T9473] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 390.492215][ T9473] RBP: 00007f8f1cbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 390.500166][ T9473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.508138][ T9473] R13: 00007f8f1e426038 R14: 00007f8f1e425fa0 R15: 00007fff8eda3068 [ 390.516103][ T9473] [ 390.519709][ T9473] syz.4.3016: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 390.531005][ T9456] F2FS-fs (loop3): invalid crc value [ 390.548280][ T309] usb 7-1: USB disconnect, device number 14 [ 390.554919][ T9473] CPU: 0 PID: 9473 Comm: syz.4.3016 Not tainted syzkaller #0 [ 390.562303][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 390.572353][ T9473] Call Trace: [ 390.575625][ T9473] [ 390.578550][ T9473] __dump_stack+0x21/0x24 [ 390.582886][ T9473] dump_stack_lvl+0x110/0x170 [ 390.587563][ T9473] ? __cfi_dump_stack_lvl+0x8/0x8 [ 390.592593][ T9473] ? pr_cont_kernfs_name+0x133/0x160 [ 390.597878][ T9473] dump_stack+0x15/0x24 [ 390.602025][ T9473] warn_alloc+0x1dc/0x200 [ 390.606354][ T9473] ? should_failslab+0x9/0x20 [ 390.611028][ T9473] ? __cfi_warn_alloc+0x10/0x10 [ 390.615884][ T9473] ? kmalloc_node_trace+0x3d/0xb0 [ 390.620909][ T9473] ? __get_vm_area_node+0x353/0x360 [ 390.626197][ T9473] __vmalloc_node_range+0x34b/0x1440 [ 390.631481][ T9473] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 390.637201][ T9473] ? __stack_depot_save+0x36/0x490 [ 390.642317][ T9473] ? selinux_capable+0x2b6/0x3b0 [ 390.647255][ T9473] ? _parse_integer_limit+0x18e/0x1d0 [ 390.652623][ T9473] ? __cfi___vmalloc_node_range+0x10/0x10 [ 390.658338][ T9473] ? avc_has_perm_noaudit+0x390/0x490 [ 390.663712][ T9473] ? avc_has_perm_noaudit+0x390/0x490 [ 390.669078][ T9473] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 390.674623][ T9473] __vmalloc+0x79/0x90 [ 390.678689][ T9473] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 390.684242][ T9473] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 390.689612][ T9473] bpf_prog_alloc+0x21/0x1c0 [ 390.694203][ T9473] bpf_prog_load+0x811/0x1670 [ 390.698879][ T9473] ? map_freeze+0x3a0/0x3a0 [ 390.703385][ T9473] ? selinux_bpf+0xc7/0xf0 [ 390.707810][ T9473] ? security_bpf+0x93/0xb0 [ 390.712319][ T9473] __sys_bpf+0x57b/0x850 [ 390.716561][ T9473] ? bpf_link_show_fdinfo+0x330/0x330 [ 390.721945][ T9473] ? __cfi_ksys_write+0x10/0x10 [ 390.726794][ T9473] ? debug_smp_processor_id+0x17/0x20 [ 390.732170][ T9473] __x64_sys_bpf+0x7c/0x90 [ 390.736586][ T9473] x64_sys_call+0x488/0x9a0 [ 390.741090][ T9473] do_syscall_64+0x4c/0xa0 [ 390.745504][ T9473] ? clear_bhb_loop+0x30/0x80 [ 390.750180][ T9473] ? clear_bhb_loop+0x30/0x80 [ 390.754859][ T9473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.760757][ T9473] RIP: 0033:0x7f8f1e19f559 [ 390.765168][ T9473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.784768][ T9473] RSP: 002b:00007f8f1cbf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.793185][ T9473] RAX: ffffffffffffffda RBX: 00007f8f1e425fa0 RCX: 00007f8f1e19f559 [ 390.801158][ T9473] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 390.809127][ T9473] RBP: 00007f8f1cbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 390.817097][ T9473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.825067][ T9473] R13: 00007f8f1e426038 R14: 00007f8f1e425fa0 R15: 00007fff8eda3068 [ 390.833044][ T9473] [ 390.836805][ T9473] Mem-Info: [ 390.840038][ T9473] active_anon:12260 inactive_anon:3 isolated_anon:0 [ 390.840038][ T9473] active_file:13515 inactive_file:13354 isolated_file:0 [ 390.840038][ T9473] unevictable:20552 dirty:310 writeback:25 [ 390.840038][ T9473] slab_reclaimable:7653 slab_unreclaimable:79099 [ 390.840038][ T9473] mapped:31257 shmem:5218 pagetables:682 [ 390.840038][ T9473] sec_pagetables:0 bounce:0 [ 390.840038][ T9473] kernel_misc_reclaimable:0 [ 390.840038][ T9473] free:1456754 free_pcp:8787 free_cma:0 [ 390.843275][ T9456] F2FS-fs (loop3): Found nat_bits in checkpoint [ 390.885510][ T9473] Node 0 active_anon:49040kB inactive_anon:12kB active_file:54060kB inactive_file:53416kB unevictable:82208kB isolated(anon):0kB isolated(file):0kB mapped:125028kB dirty:1240kB writeback:100kB shmem:20872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5484kB pagetables:2728kB sec_pagetables:0kB all_unreclaimable? no [ 390.930517][ T310] usb 10-1: USB disconnect, device number 3 [ 390.982417][ T9456] F2FS-fs (loop3): Start checkpoint disabled! [ 390.995742][ T9473] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971856kB mlocked:0kB bounce:0kB free_pcp:5372kB local_pcp:56kB free_cma:0kB [ 391.024430][ T9456] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 391.032450][ T9473] lowmem_reserve[]: 0 3932 3932 3932 [ 391.037843][ T9473] Normal free:2860532kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:49740kB inactive_anon:12kB active_file:54060kB inactive_file:53416kB unevictable:82208kB writepending:1240kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:29924kB local_pcp:7204kB free_cma:0kB [ 391.068062][ T9456] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 391.080740][ T9473] lowmem_reserve[]: 0 0 0 0 [ 391.085431][ T9473] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB [ 391.118145][ T9473] Normal: 205*4kB (UE) 238*8kB (UE) 217*16kB (UME) 874*32kB (UME) 516*64kB (UME) 387*128kB (UME) 132*256kB (UME) 83*512kB (UME) 69*1024kB (UME) 20*2048kB (UM) 624*4096kB (UM) = 2860532kB [ 391.174150][ T9473] 55517 total pagecache pages [ 391.183571][ T9473] 4 pages in swap cache [ 391.197857][ T9473] Free swap = 124360kB [ 391.206489][ T9473] Total swap = 124996kB [ 391.496828][ T9473] 2097051 pages RAM [ 391.510299][ T9487] set_capacity_and_notify: 7 callbacks suppressed [ 391.510316][ T9487] loop2: detected capacity change from 0 to 512 [ 391.528128][ T9473] 0 pages HighMem/MovableOnly [ 391.532815][ T9473] 347487 pages reserved [ 391.568446][ T9473] 0 pages cma reserved [ 391.586667][ T9487] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 391.657651][ T9487] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 391.691970][ T9487] EXT4-fs (loop2): 1 truncate cleaned up [ 391.697642][ T9487] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 391.781888][ T9483] loop6: detected capacity change from 0 to 40427 [ 391.789730][ T9487] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5974: inode #12: comm syz.2.3019: bad extra_isize 62 (inode size 256) [ 391.803068][ T28] audit: type=1400 audit(1793290205.491:4107): avc: denied { rename } for pid=9486 comm="syz.2.3019" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 391.821143][ T9483] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 391.832443][ T9483] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 391.855854][ T9497] loop9: detected capacity change from 0 to 512 [ 391.878156][ T9483] F2FS-fs (loop6): fault_injection options not supported [ 391.888156][ T9483] F2FS-fs (loop6): fault_type options not supported [ 391.888622][ T9497] FAT-fs (loop9): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 391.909497][ T9483] F2FS-fs (loop6): invalid crc value [ 391.909944][ T28] audit: type=1400 audit(1793290205.491:4108): avc: denied { reparent } for pid=9486 comm="syz.2.3019" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 391.939200][ T8246] EXT4-fs (loop2): unmounting filesystem. [ 391.946772][ T9483] F2FS-fs (loop6): Found nat_bits in checkpoint [ 391.963090][ T28] audit: type=1400 audit(1793290205.491:4109): avc: denied { unlink } for pid=9486 comm="syz.2.3019" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 391.987006][ T28] audit: type=1400 audit(1793290205.561:4110): avc: denied { setattr } for pid=9498 comm="syz.4.3024" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 392.028745][ T9510] loop2: detected capacity change from 0 to 128 [ 392.029467][ T28] audit: type=1400 audit(1793290205.591:4111): avc: denied { setattr } for pid=9498 comm="syz.4.3024" name="tun" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 392.074240][ T28] audit: type=1400 audit(1793290205.781:4112): avc: denied { read write } for pid=9511 comm="syz.9.3029" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 392.099352][ T9483] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 392.106403][ T9483] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 392.118295][ T7258] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 392.149679][ T9515] loop2: detected capacity change from 0 to 256 [ 392.161797][ T6966] syz-executor: attempt to access beyond end of device [ 392.161797][ T6966] loop6: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 392.164641][ T9515] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 392.199823][ T9515] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 392.208392][ T310] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 392.217109][ T9515] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 392.329135][ T9520] loop9: detected capacity change from 0 to 2048 [ 392.391405][ T9520] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 392.408167][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 392.415030][ T310] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 392.436244][ T9524] loop6: detected capacity change from 0 to 8192 [ 392.447678][ T9520] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.458128][ T310] usb 4-1: config 0 has no interface number 0 [ 392.464216][ T310] usb 4-1: config 0 interface 188 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 392.510680][ T9524] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 392.534029][ T310] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 392.551706][ T9542] loop2: detected capacity change from 0 to 256 [ 392.569382][ T8830] EXT4-fs (loop9): unmounting filesystem. [ 392.580916][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.580980][ T9542] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 392.598940][ T310] usb 4-1: Product: syz [ 392.604610][ T310] usb 4-1: Manufacturer: syz [ 392.625827][ T310] usb 4-1: SerialNumber: syz [ 392.653360][ T310] usb 4-1: config 0 descriptor?? [ 392.669663][ T310] asix: probe of 4-1:0.188 failed with error -22 [ 392.681373][ T9542] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 392.691079][ T9547] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3044'. [ 392.729031][ T9542] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 392.763034][ T9540] loop4: detected capacity change from 0 to 40427 [ 392.777023][ T9547] loop9: detected capacity change from 0 to 8192 [ 392.794048][ T9540] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 392.808251][ T9540] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 392.816547][ T9540] F2FS-fs (loop4): fault_injection options not supported [ 392.836946][ T9547] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 392.848696][ T9540] F2FS-fs (loop4): fault_type options not supported [ 392.856740][ T9540] F2FS-fs (loop4): invalid crc value [ 392.886825][ T9547] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3044'. [ 392.906661][ T9540] F2FS-fs (loop4): Found nat_bits in checkpoint [ 392.925660][ T341] tipc: Disabling bearer [ 392.931446][ T341] tipc: Left network mode [ 392.953900][ T9552] xt_hashlimit: size too large, truncated to 1048576 [ 393.001929][ T9540] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 393.010261][ T9540] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 393.045643][ T9317] syz-executor: attempt to access beyond end of device [ 393.045643][ T9317] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 393.062604][ T9558] netlink: 300 bytes leftover after parsing attributes in process `syz.9.3048'. [ 393.172773][ T9562] fuse: Unknown parameter 'growp_id}' [ 393.241211][ T9563] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 393.377940][ T9569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 393.414397][ T9569] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.529442][ T341] device bridge_slave_1 left promiscuous mode [ 393.535600][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.564714][ T341] device veth1_macvtap left promiscuous mode [ 393.598233][ T341] device veth0_vlan left promiscuous mode [ 393.919643][ T9568] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3047: bg 0: block 345: padding at end of block bitmap is not set [ 393.958297][ T9568] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 394.029882][ T9317] EXT4-fs (loop4): unmounting filesystem. [ 394.064771][ T9584] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3053'. [ 394.226845][ T9591] EXT4-fs: Ignoring removed mblk_io_submit option [ 394.236454][ T9591] __quota_error: 2 callbacks suppressed [ 394.236468][ T9591] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 394.253114][ T9591] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 394.288593][ T9591] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.3055: Failed to acquire dquot type 0 [ 394.336241][ T9596] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 394.348469][ T28] audit: type=1326 audit(1793290208.031:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.2.3056" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 394.499020][ T9591] EXT4-fs (loop4): 1 truncate cleaned up [ 394.504700][ T9591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 394.531867][ T28] audit: type=1326 audit(1793290208.031:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.2.3056" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 394.557150][ T9317] EXT4-fs (loop4): unmounting filesystem. [ 394.587667][ T28] audit: type=1326 audit(1793290208.031:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.2.3056" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 394.612924][ T28] audit: type=1326 audit(1793290208.031:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.2.3056" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 394.637786][ T28] audit: type=1326 audit(1793290208.031:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.2.3056" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 394.685980][ T28] audit: type=1326 audit(1793290208.041:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.2.3056" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 395.135678][ T3622] usb 4-1: USB disconnect, device number 6 [ 395.450327][ T9614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2062 sclass=netlink_route_socket pid=9614 comm=syz.9.3062 [ 395.530121][ T9616] 9pnet_fd: Insufficient options for proto=fd [ 395.645848][ T28] audit: type=1326 audit(1793290208.041:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.2.3056" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 395.679876][ T9623] IPv6: NLM_F_CREATE should be specified when creating new route [ 395.722037][ T9623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.729326][ T9623] IPv6: NLM_F_CREATE should be set when creating new route [ 395.739783][ T9627] overlayfs: overlapping lowerdir path [ 395.759603][ T28] audit: type=1326 audit(1793290208.041:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.2.3056" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44219f559 code=0x7ffc0000 [ 395.814340][ T9623] erofs: Unknown parameter './file2' [ 395.928642][ T9633] erofs: (device loop2): mounted with root inode @ nid 36. [ 396.028444][ T9626] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3068'. [ 396.047444][ T9622] F2FS-fs (loop3): invalid crc value [ 396.071873][ T9622] F2FS-fs (loop3): Found nat_bits in checkpoint [ 396.106960][ T9622] F2FS-fs (loop3): Start checkpoint disabled! [ 396.118383][ T9653] erofs: (device loop9): mounted with root inode @ nid 36. [ 396.125507][ T9622] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 396.138277][ T9622] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 396.208157][ T8193] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 396.537527][ T8193] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 396.578266][ T8193] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 512, setting to 64 [ 396.619383][ T8193] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 396.640137][ T8193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.667036][ T8193] usb 3-1: Product: syz [ 396.671687][ T9665] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3080'. [ 396.680856][ T8193] usb 3-1: Manufacturer: syz [ 396.695624][ T8193] usb 3-1: SerialNumber: syz [ 396.706773][ T9636] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 396.738165][ T9636] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 396.867632][ T9661] set_capacity_and_notify: 10 callbacks suppressed [ 396.867650][ T9661] loop9: detected capacity change from 0 to 40427 [ 396.898733][ T9661] F2FS-fs (loop9): invalid crc value [ 396.932005][ T9661] F2FS-fs (loop9): Found nat_bits in checkpoint [ 396.948146][ T1044] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 396.975001][ T8193] usb 3-1: USB disconnect, device number 17 [ 397.006633][ T9661] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 397.030084][ T9676] xt_hashlimit: size too large, truncated to 1048576 [ 397.158159][ T1044] usb 7-1: Using ep0 maxpacket: 32 [ 397.165032][ T8830] syz-executor: attempt to access beyond end of device [ 397.165032][ T8830] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 397.179794][ T1044] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 397.193340][ T1044] usb 7-1: config 0 has no interface number 0 [ 397.204904][ T1044] usb 7-1: config 0 interface 188 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 397.242100][ T1044] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 397.257628][ T1044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.271127][ T1044] usb 7-1: Product: syz [ 397.278556][ T1044] usb 7-1: Manufacturer: syz [ 397.287475][ T1044] usb 7-1: SerialNumber: syz [ 397.296325][ T1044] usb 7-1: config 0 descriptor?? [ 397.306819][ T1044] asix: probe of 7-1:0.188 failed with error -22 [ 397.375190][ T9680] loop9: detected capacity change from 0 to 128 [ 397.444325][ T9684] loop9: detected capacity change from 0 to 2048 [ 397.479470][ T9684] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 397.488030][ T9684] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.512256][ T8830] EXT4-fs (loop9): unmounting filesystem. [ 397.575195][ T9692] loop2: detected capacity change from 0 to 2048 [ 397.618113][ T9698] netlink: 124 bytes leftover after parsing attributes in process `syz.9.3091'. [ 397.625206][ T9692] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 397.649060][ T9692] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.699457][ T9692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3088'. [ 397.791906][ T8246] EXT4-fs (loop2): unmounting filesystem. [ 397.840734][ T9721] loop2: detected capacity change from 0 to 1024 [ 397.913358][ T9721] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 397.932776][ T9721] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.971589][ T9721] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.3099: lblock 3 mapped to illegal pblock 3 (length 3) [ 397.997104][ T9721] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 398.009615][ T9721] EXT4-fs (loop2): This should not happen!! Data will be lost [ 398.009615][ T9721] [ 398.036057][ T9721] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.3099: lblock 3 mapped to illegal pblock 3 (length 1) [ 398.050436][ T9721] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.3099: lblock 3 mapped to illegal pblock 3 (length 1) [ 398.064906][ T9721] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.3099: lblock 3 mapped to illegal pblock 3 (length 1) [ 398.079318][ T9721] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.3099: lblock 3 mapped to illegal pblock 3 (length 1) [ 398.093736][ T9721] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.3099: lblock 3 mapped to illegal pblock 3 (length 1) [ 398.108423][ T9721] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.3099: lblock 3 mapped to illegal pblock 3 (length 1) [ 398.129653][ T9721] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.3099: lblock 3 mapped to illegal pblock 3 (length 1) [ 398.145562][ T9721] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.3099: lblock 3 mapped to illegal pblock 3 (length 1) [ 398.162538][ T9721] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.3099: lblock 3 mapped to illegal pblock 3 (length 1) [ 398.180656][ T9735] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 398.244685][ T9735] EXT4-fs (loop2): This should not happen!! Data will be lost [ 398.244685][ T9735] [ 398.288176][ T9735] EXT4-fs (loop2): Total free blocks count 0 [ 398.307528][ T9735] EXT4-fs (loop2): Free/Dirty block details [ 398.320055][ T9735] EXT4-fs (loop2): free_blocks=0 [ 398.339014][ T9735] EXT4-fs (loop2): dirty_blocks=64 [ 398.360284][ T9735] EXT4-fs (loop2): Block reservation details [ 398.654875][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3105'. [ 398.683601][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3105'. [ 399.018305][ T9759] loop9: detected capacity change from 0 to 512 [ 399.059959][ T9761] overlayfs: failed to resolve './file0': -2 [ 399.093839][ T3558] usb 7-1: USB disconnect, device number 15 [ 399.103870][ T9768] loop9: detected capacity change from 0 to 256 [ 399.120679][ T9757] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.128640][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.142550][ T9768] exfat: Deprecated parameter 'namecase' [ 399.149147][ T9757] device bridge_slave_0 entered promiscuous mode [ 399.156655][ T9768] exfat: Deprecated parameter 'utf8' [ 399.162534][ T9757] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.171210][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.180621][ T9768] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 399.189583][ T9757] device bridge_slave_1 entered promiscuous mode [ 399.210502][ T8170] device bridge_slave_1 left promiscuous mode [ 399.218704][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.226316][ T8170] device bridge_slave_0 left promiscuous mode [ 399.232799][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.241546][ T8170] device veth1_macvtap left promiscuous mode [ 399.247576][ T8170] device veth0_vlan left promiscuous mode [ 399.259453][ T9786] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3119'. [ 399.393573][ T9792] loop9: detected capacity change from 0 to 512 [ 399.459652][ T7258] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 399.477398][ T9757] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.484477][ T9757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.491768][ T9757] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.498802][ T9757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.571810][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 399.579765][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.587041][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.634710][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 399.788202][ T3622] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 399.861063][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.868163][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.929987][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.938429][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.945467][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.961712][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.969887][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.984929][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 399.988120][ T3622] usb 10-1: Using ep0 maxpacket: 32 [ 399.993929][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 400.006673][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 400.015187][ T3622] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 400.032045][ T3622] usb 10-1: config 0 has no interface number 0 [ 400.052706][ T3622] usb 10-1: config 0 interface 188 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 400.068537][ T9814] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 400.075951][ T9814] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 400.129967][ T3622] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 400.160038][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 400.167872][ T3622] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.196975][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 400.205093][ T3622] usb 10-1: Product: syz [ 400.219629][ T3622] usb 10-1: Manufacturer: syz [ 400.223221][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 400.232767][ T9757] device veth0_vlan entered promiscuous mode [ 400.234700][ T3622] usb 10-1: SerialNumber: syz [ 400.244716][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 400.251614][ T3622] usb 10-1: config 0 descriptor?? [ 400.253972][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.267390][ T9757] device veth1_macvtap entered promiscuous mode [ 400.281605][ T3622] asix: probe of 10-1:0.188 failed with error -22 [ 400.332944][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.343357][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 400.352147][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.829403][ T9825] loop6: detected capacity change from 0 to 512 [ 400.941682][ T9825] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.3133: iget: bad i_size value: 38620345925642 [ 400.978691][ T9825] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.3133: couldn't read orphan inode 15 (err -117) [ 400.999643][ T9825] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 401.009102][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.017391][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.145650][ T6966] EXT4-fs (loop6): unmounting filesystem. [ 401.198306][ T9845] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3137'. [ 401.218385][ T310] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 401.225974][ T310] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 401.233716][ T310] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 401.241250][ T310] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 401.242127][ T9848] loop6: detected capacity change from 0 to 512 [ 401.248799][ T310] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 401.262966][ T9848] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 401.275056][ T310] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 401.282607][ T310] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 401.290203][ T310] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 401.300214][ T310] hid-generic 0000:0000:0001.000F: hidraw0: HID v0.10 Device [syz0] on syz1 [ 401.351332][ T9850] fido_id[9850]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 401.636511][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.647259][ T9862] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.663106][ T9862] device bridge_slave_0 entered promiscuous mode [ 401.674476][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.687089][ T9862] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.700078][ T9862] device bridge_slave_1 entered promiscuous mode [ 401.811551][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.818649][ T9862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.825927][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.832965][ T9862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.865388][ T9873] overlayfs: failed to resolve './file0': -2 [ 401.914964][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 401.922930][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.938523][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.970207][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.996991][ T1690] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.004067][ T1690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.022985][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.032696][ T1690] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.039766][ T1690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.120436][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.583229][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.708669][ T1370] usb 10-1: USB disconnect, device number 4 [ 402.941994][ T9890] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3153'. [ 402.951175][ T9890] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3153'. [ 402.970094][ T9896] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 402.981415][ T9896] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 402.998887][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 403.008252][ T9896] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 403.016847][ T9896] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 403.017681][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 403.027137][ T9896] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 403.036098][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 403.036111][ T28] audit: type=1400 audit(1793290216.761:4154): avc: denied { audit_read } for pid=9902 comm="syz.0.3158" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 403.042998][ T9896] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 403.077272][ T9896] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 403.085687][ T9896] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 403.099627][ T9905] loop3: detected capacity change from 0 to 128 [ 403.117814][ T9862] device veth0_vlan entered promiscuous mode [ 403.124369][ T9907] fuse: blksize only supported for fuseblk [ 403.141111][ T9908] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9908 comm=syz.0.3158 [ 403.153082][ T9862] device veth1_macvtap entered promiscuous mode [ 403.184731][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 403.196791][ T9914] loop9: detected capacity change from 0 to 128 [ 403.202884][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 403.211416][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 403.221252][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 403.234774][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 403.257538][ T9918] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 403.265709][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 403.293727][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 403.334161][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 403.345080][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 403.353694][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 403.362943][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 403.399824][ T9927] netlink: 'syz.1.3151': attribute type 8 has an invalid length. [ 403.409384][ T9931] netlink: 'syz.1.3151': attribute type 8 has an invalid length. [ 403.458251][ T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 403.638330][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 403.699680][ T39] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 403.788061][ T39] usb 4-1: config 0 has no interface number 0 [ 403.853115][ T39] usb 4-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 404.015373][ T39] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 404.133900][ T9946] netlink: 124 bytes leftover after parsing attributes in process `syz.9.3172'. [ 404.360441][ T8170] device bridge_slave_1 left promiscuous mode [ 404.379970][ T39] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 404.396549][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.413195][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.457744][ T39] usb 4-1: Product: syz [ 404.509403][ T39] usb 4-1: Manufacturer: syz [ 404.514201][ T39] usb 4-1: SerialNumber: syz [ 404.575679][ T39] usb 4-1: config 0 descriptor?? [ 404.581018][ T8170] device bridge_slave_0 left promiscuous mode [ 404.587186][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.590323][ T39] asix: probe of 4-1:0.188 failed with error -22 [ 404.601448][ T8170] device veth1_macvtap left promiscuous mode [ 404.607545][ T8170] device veth0_vlan left promiscuous mode [ 404.977918][ T9958] loop1: detected capacity change from 0 to 128 [ 405.014263][ T9951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.036903][ T9951] device batadv_slave_1 entered promiscuous mode [ 405.044658][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 405.062042][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.078641][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 405.096006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.112465][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.128843][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.146329][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.162743][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.188033][ T9960] loop1: detected capacity change from 0 to 40427 [ 405.200609][ T9960] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 405.207869][ T9960] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 405.225710][ T9960] F2FS-fs (loop1): fault_injection options not supported [ 405.233332][ T9960] F2FS-fs (loop1): fault_type options not supported [ 405.242829][ T9960] F2FS-fs (loop1): invalid crc value [ 405.249515][ T9960] F2FS-fs (loop1): Found nat_bits in checkpoint [ 405.286686][ T9960] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 405.293889][ T9960] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 405.316328][ T9862] syz-executor: attempt to access beyond end of device [ 405.316328][ T9862] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 405.413411][ T9969] loop9: detected capacity change from 0 to 512 [ 405.448835][ T9969] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 405.458182][ T9969] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.464570][ T9973] xt_hashlimit: size too large, truncated to 1048576 [ 405.696557][ T9981] loop1: detected capacity change from 0 to 512 [ 405.710066][ T9981] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 405.719686][ T9981] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.748115][ T39] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 405.757666][ T9862] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 405.770655][ T9862] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 405.861040][ T9984] EXT4-fs (loop1): unmounting filesystem. [ 405.938128][ T39] usb 10-1: Using ep0 maxpacket: 32 [ 405.944413][ T39] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.954664][ T39] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.964126][ T39] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 405.973534][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.001325][ T39] usb 10-1: config 0 descriptor?? [ 406.046062][ T9987] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.053364][ T9987] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.060979][ T9987] device bridge_slave_0 entered promiscuous mode [ 406.069275][ T9987] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.076341][ T9987] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.084125][ T9987] device bridge_slave_1 entered promiscuous mode [ 406.161290][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 406.170530][ T310] usb 4-1: USB disconnect, device number 7 [ 406.179156][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.190954][ T9992] loop3: detected capacity change from 0 to 512 [ 406.197974][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 406.208144][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.216330][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.223394][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.232419][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 406.239003][ T9992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 406.240806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.257268][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.264315][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.281632][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 406.301361][ T7389] EXT4-fs (loop3): unmounting filesystem. [ 406.308556][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 406.317310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.339359][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.354341][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.362443][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.371446][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.379929][ T9987] device veth0_vlan entered promiscuous mode [ 406.403396][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.414981][ T9987] device veth1_macvtap entered promiscuous mode [ 406.425528][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.452671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 406.535720][ T9995] loop3: detected capacity change from 0 to 40427 [ 406.552798][ T9995] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 406.565954][ T9995] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 406.587283][ T9995] F2FS-fs (loop3): fault_injection options not supported [ 406.595775][ T9995] F2FS-fs (loop3): fault_type options not supported [ 406.602984][ T9995] F2FS-fs (loop3): invalid crc value [ 406.610285][ T8170] device bridge_slave_1 left promiscuous mode [ 406.616564][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.624520][ T8170] device bridge_slave_0 left promiscuous mode [ 406.631093][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.639142][ T9995] F2FS-fs (loop3): Found nat_bits in checkpoint [ 406.649995][ T8170] device veth1_macvtap left promiscuous mode [ 406.662609][ T8170] device veth0_vlan left promiscuous mode [ 406.708612][ T9995] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 406.720053][ T9995] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 406.766651][ T7389] syz-executor: attempt to access beyond end of device [ 406.766651][ T7389] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 406.780956][ T1044] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 406.968112][ T1044] usb 8-1: Using ep0 maxpacket: 8 [ 406.974358][ T1044] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.994240][ T1044] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 407.017297][ T1044] usb 8-1: config 1 interface 2 has no altsetting 0 [ 407.033175][ T1044] usb 8-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 407.053346][ T1044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.061456][ T1044] usb 8-1: Product: syz [ 407.065753][ T1044] usb 8-1: Manufacturer: syz [ 407.070999][ T1044] usb 8-1: SerialNumber: syz [ 407.105178][T10011] loop3: detected capacity change from 0 to 40427 [ 407.113493][T10011] F2FS-fs (loop3): invalid crc value [ 407.120151][T10011] F2FS-fs (loop3): Found nat_bits in checkpoint [ 407.159185][T10011] F2FS-fs (loop3): Start checkpoint disabled! [ 407.166020][T10011] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 407.173882][T10011] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 407.291179][ T9996] ================================================================== [ 407.291512][ T1044] usb 8-1: unit 4 not found! [ 407.299367][ T9996] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0 [ 407.299398][ T9996] Write of size 8 at addr ffff888125ed2d90 by task syz.7.3185/9996 [ 407.299412][ T9996] [ 407.299417][ T9996] CPU: 1 PID: 9996 Comm: syz.7.3185 Not tainted syzkaller #0 [ 407.299433][ T9996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 407.299442][ T9996] Call Trace: [ 407.299448][ T9996] [ 407.299456][ T9996] __dump_stack+0x21/0x24 [ 407.307074][ T1044] usb 8-1: unit 2 not found! [ 407.311670][ T9996] dump_stack_lvl+0x110/0x170 [ 407.311693][ T9996] ? __cfi_dump_stack_lvl+0x8/0x8 [ 407.311709][ T9996] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 407.327600][ T1044] hub 8-1:1.2: Invalid hub with more than one config or interface [ 407.329275][ T9996] print_address_description+0x71/0x200 [ 407.339830][ T1044] hub: probe of 8-1:1.2 failed with error -22 [ 407.342606][ T9996] print_report+0x4a/0x60 [ 407.342637][ T9996] kasan_report+0x122/0x150 [ 407.342656][ T9996] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 407.342674][ T9996] __asan_report_store8_noabort+0x17/0x20 [ 407.342689][ T9996] rcu_segcblist_enqueue+0x9c/0xb0 [ 407.359894][ T1044] usb 8-1: USB disconnect, device number 2 [ 407.364162][ T9996] call_rcu+0x554/0xf50 [ 407.364192][ T9996] ? __cfi_call_rcu+0x10/0x10 [ 407.428133][ T9996] ? __kasan_check_write+0x14/0x20 [ 407.433229][ T9996] ? selinux_inode_free_security+0x21f/0x230 [ 407.439199][ T9996] security_inode_free+0xc5/0xe0 [ 407.444139][ T9996] __destroy_inode+0x175/0x500 [ 407.448885][ T9996] evict+0x777/0x8c0 [ 407.452793][ T9996] ? proc_nr_inodes+0x2f0/0x2f0 [ 407.457629][ T9996] ? _raw_spin_lock+0x94/0xf0 [ 407.462286][ T9996] ? __cfi__raw_spin_lock+0x10/0x10 [ 407.467488][ T9996] ? __kasan_check_write+0x14/0x20 [ 407.472579][ T9996] iput+0x633/0x690 [ 407.476386][ T9996] dentry_unlink_inode+0x346/0x3f0 [ 407.481484][ T9996] __dentry_kill+0x46c/0x680 [ 407.486056][ T9996] dentry_kill+0xc0/0x2a0 [ 407.490389][ T9996] dput+0x42/0x80 [ 407.494010][ T9996] __fput+0x5c0/0x8f0 [ 407.497974][ T9996] ____fput+0x15/0x20 [ 407.501939][ T9996] task_work_run+0x1e1/0x250 [ 407.506514][ T9996] ? __cfi_task_work_run+0x10/0x10 [ 407.511692][ T9996] ? __cfi___close_range+0x10/0x10 [ 407.516784][ T9996] exit_to_user_mode_loop+0x9b/0xb0 [ 407.521966][ T9996] exit_to_user_mode_prepare+0x87/0xd0 [ 407.527407][ T9996] syscall_exit_to_user_mode+0x1a/0x30 [ 407.532854][ T9996] do_syscall_64+0x58/0xa0 [ 407.537249][ T9996] ? clear_bhb_loop+0x30/0x80 [ 407.541909][ T9996] ? clear_bhb_loop+0x30/0x80 [ 407.546585][ T9996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.552461][ T9996] RIP: 0033:0x7f1a3979f559 [ 407.556856][ T9996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.576465][ T9996] RSP: 002b:00007ffd820d0178 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 407.584864][ T9996] RAX: 0000000000000000 RBX: 00007f1a39a27da0 RCX: 00007f1a3979f559 [ 407.592825][ T9996] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 407.600785][ T9996] RBP: 00007f1a39a27da0 R08: 00007f1a39a26308 R09: 0000000000000000 [ 407.608746][ T9996] R10: 000000000003fd3c R11: 0000000000000246 R12: 0000000000063f96 [ 407.616708][ T9996] R13: 00007f1a39a25fac R14: 0000000000063410 R15: 00007f1a39a25fa0 [ 407.624669][ T9996] [ 407.627683][ T9996] [ 407.629986][ T9996] Allocated by task 9997: [ 407.634295][ T9996] kasan_set_track+0x4b/0x70 [ 407.638877][ T9996] kasan_save_alloc_info+0x1f/0x30 [ 407.643968][ T9996] __kasan_kmalloc+0x95/0xb0 [ 407.648539][ T9996] __kmalloc+0xb4/0x1e0 [ 407.652677][ T9996] l2tp_session_create+0x38/0xbd0 [ 407.657685][ T9996] pppol2tp_connect+0xbf5/0x1640 [ 407.662608][ T9996] __sys_connect+0x3da/0x460 [ 407.667181][ T9996] __x64_sys_connect+0x7a/0x90 [ 407.671926][ T9996] x64_sys_call+0x88d/0x9a0 [ 407.676409][ T9996] do_syscall_64+0x4c/0xa0 [ 407.680802][ T9996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.686680][ T9996] [ 407.688983][ T9996] Freed by task 8170: [ 407.692938][ T9996] kasan_set_track+0x4b/0x70 [ 407.697512][ T9996] kasan_save_free_info+0x2b/0x40 [ 407.702517][ T9996] ____kasan_slab_free+0x132/0x180 [ 407.707619][ T9996] __kasan_slab_free+0x11/0x20 [ 407.712365][ T9996] slab_free_freelist_hook+0xc2/0x190 [ 407.717720][ T9996] __kmem_cache_free+0xb7/0x1b0 [ 407.722555][ T9996] kfree+0x6f/0xf0 [ 407.726255][ T9996] l2tp_session_put+0xaf/0x1a0 [ 407.730999][ T9996] l2tp_session_delete+0x3df/0x4d0 [ 407.736097][ T9996] l2tp_tunnel_del_work+0x199/0x410 [ 407.741283][ T9996] process_one_work+0x717/0xc30 [ 407.746115][ T9996] worker_thread+0xa4d/0x11d0 [ 407.750775][ T9996] kthread+0x281/0x320 [ 407.754832][ T9996] ret_from_fork+0x1f/0x30 [ 407.759232][ T9996] [ 407.761562][ T9996] Last potentially related work creation: [ 407.767254][ T9996] kasan_save_stack+0x3a/0x60 [ 407.771912][ T9996] __kasan_record_aux_stack+0xb6/0xc0 [ 407.777267][ T9996] kasan_record_aux_stack_noalloc+0xb/0x10 [ 407.783052][ T9996] call_rcu+0xcf/0xf50 [ 407.787103][ T9996] pppol2tp_release+0x1e3/0x2b0 [ 407.791943][ T9996] sock_close+0xc9/0x220 [ 407.796177][ T9996] __fput+0x1fd/0x8f0 [ 407.800150][ T9996] ____fput+0x15/0x20 [ 407.804126][ T9996] task_work_run+0x1e1/0x250 [ 407.808703][ T9996] exit_to_user_mode_loop+0x9b/0xb0 [ 407.813888][ T9996] exit_to_user_mode_prepare+0x87/0xd0 [ 407.819332][ T9996] syscall_exit_to_user_mode+0x1a/0x30 [ 407.824781][ T9996] do_syscall_64+0x58/0xa0 [ 407.829176][ T9996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.835057][ T9996] [ 407.837360][ T9996] The buggy address belongs to the object at ffff888125ed2c00 [ 407.837360][ T9996] which belongs to the cache kmalloc-512 of size 512 [ 407.851392][ T9996] The buggy address is located 400 bytes inside of [ 407.851392][ T9996] 512-byte region [ffff888125ed2c00, ffff888125ed2e00) [ 407.864648][ T9996] [ 407.866953][ T9996] The buggy address belongs to the physical page: [ 407.873339][ T9996] page:ffffea000497b400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x125ed0 [ 407.883568][ T9996] head:ffffea000497b400 order:2 compound_mapcount:0 compound_pincount:0 [ 407.891869][ T9996] flags: 0x4000000000010200(slab|head|zone=1) [ 407.897918][ T9996] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 [ 407.906481][ T9996] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 407.915041][ T9996] page dumped because: kasan: bad access detected [ 407.921441][ T9996] page_owner tracks the page as allocated [ 407.927138][ T9996] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8170, tgid 8170 (kworker/u4:12), ts 406499287660, free_ts 401446501973 [ 407.949517][ T9996] post_alloc_hook+0x1f5/0x210 [ 407.954269][ T9996] prep_new_page+0x1c/0x110 [ 407.958764][ T9996] get_page_from_freelist+0x2ca9/0x2d20 [ 407.964293][ T9996] __alloc_pages+0x1fa/0x610 [ 407.968866][ T9996] alloc_slab_page+0x6e/0xf0 [ 407.973445][ T9996] new_slab+0x98/0x3e0 [ 407.977516][ T9996] ___slab_alloc+0x70f/0xb70 [ 407.982112][ T9996] __slab_alloc+0x5e/0xa0 [ 407.986436][ T9996] __kmem_cache_alloc_node+0x204/0x2d0 [ 407.991917][ T9996] __kmalloc_node_track_caller+0xa1/0x1e0 [ 407.997626][ T9996] __alloc_skb+0x226/0x4a0 [ 408.002029][ T9996] __ipv6_ifa_notify+0x200/0xe80 [ 408.006955][ T9996] addrconf_ifdown+0xdfd/0x1950 [ 408.011790][ T9996] addrconf_notify+0x39f/0xe30 [ 408.016539][ T9996] raw_notifier_call_chain+0xa1/0x110 [ 408.021895][ T9996] dev_close_many+0x325/0x4d0 [ 408.026558][ T9996] page last free stack trace: [ 408.031206][ T9996] free_unref_page_prepare+0x81b/0x820 [ 408.036648][ T9996] free_unref_page+0x93/0x530 [ 408.041309][ T9996] __free_pages+0x67/0x100 [ 408.045705][ T9996] __vunmap+0xa3c/0xc00 [ 408.049837][ T9996] vfree+0x61/0x90 [ 408.053544][ T9996] kcov_close+0x2b/0x50 [ 408.057679][ T9996] __fput+0x1fd/0x8f0 [ 408.061643][ T9996] ____fput+0x15/0x20 [ 408.065608][ T9996] task_work_run+0x1e1/0x250 [ 408.070183][ T9996] do_exit+0xb0d/0x29f0 [ 408.074322][ T9996] do_group_exit+0x21b/0x2e0 [ 408.078896][ T9996] __x64_sys_exit_group+0x3f/0x40 [ 408.083905][ T9996] x64_sys_call+0x7b4/0x9a0 [ 408.088392][ T9996] do_syscall_64+0x4c/0xa0 [ 408.092793][ T9996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.098666][ T9996] [ 408.100970][ T9996] Memory state around the buggy address: [ 408.106576][ T9996] ffff888125ed2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 408.114620][ T9996] ffff888125ed2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 408.122658][ T9996] >ffff888125ed2d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 408.130695][ T9996] ^ [ 408.135259][ T9996] ffff888125ed2e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 408.143295][ T9996] ffff888125ed2e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 408.151333][ T9996] ================================================================== [ 408.159372][ T9996] Disabling lock debugging due to kernel taint [ 408.198284][ T28] audit: type=1400 audit(1793290221.911:4155): avc: denied { dac_read_search } for pid=85 comm="syslogd" capability=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:system_r:syslogd_t tclass=capability permissive=1 [ 408.259596][ T28] audit: type=1400 audit(1793290221.941:4156): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 408.310554][ T28] audit: type=1400 audit(1793290221.941:4157): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.339867][ T28] audit: type=1400 audit(1793290221.941:4158): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.361300][ T28] audit: type=1400 audit(1793290221.941:4159): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.382320][ T28] audit: type=1400 audit(1793290221.941:4160): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 408.403065][ T28] audit: type=1400 audit(1793290221.941:4161): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 408.404942][ T59] usb 10-1: USB disconnect, device number 5 [ 408.432593][ T28] audit: type=1400 audit(1793290221.941:4162): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 408.457732][ T8830] EXT4-fs (loop9): unmounting filesystem.