last executing test programs: 1m22.847769192s ago: executing program 2 (id=79): geteuid() r0 = socket$netlink(0x10, 0x3, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000200)={[{@i_version}, {@test_dummy_encryption_v1}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x80) rename(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2424, 0x4822}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4040) ioprio_set$uid(0x3, 0x0, 0x64) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0x0, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x11}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) userfaultfd(0x80800) 1m22.533040214s ago: executing program 2 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 1m22.497001568s ago: executing program 2 (id=81): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x5f}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1m22.38266569s ago: executing program 2 (id=82): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x404, &(0x7f0000000080)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x80000, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000700)=ANY=[], 0xb) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000780)={@id={0x2, 0x0, @c}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) 1m22.127890106s ago: executing program 2 (id=83): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000002340)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x5, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x4, 0x4800, 0x4, 0x4, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0xffffffff, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x40, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x5, 0x5, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x804, 0xfdff, 0x0, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x9, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x1, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x4, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x3, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000027c0)=[{&(0x7f0000002800)=""/41, 0x29}], 0x1) 1m22.013144308s ago: executing program 2 (id=85): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x7, r0}, 0x36) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000400)={r0, &(0x7f0000000440), &(0x7f0000000f80)=""/227}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x40}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000050000002c000000b7070000000025102c5a5d75550000180100002020702500000000002020207b1af8bf00000000bfa1000000000000070153ab10c8aedcbcd9000008000000b7030000fe00000085000000060000009500000000"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x8, &(0x7f0000000dc0)=@framed={{0x18, 0x6, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x3, 0x6, &(0x7f0000000f00)=ANY=[@ANYBLOB="18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0xb00c6, 0x4) io_uring_enter(0xffffffffffffffff, 0x20f6, 0xc605, 0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0), 0x1, 0x3d7, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./tracing\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000bc0)='tracefs\x00', 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x2, 0x5004) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000c40)="2d3a8ebd013fb546d01a92e9aad108a71224a1c0c74d0cf51585aa48443746520e85b230ef6433c8a2539560c64f5fe1aca29f3948c965b55c80503c343ace7929b8cd6a43656569329b4d554fe453ccd02fe6b1fc30d12ccd68f8051a7a37fa2ca53882dfbb6069c2d9a4ed7e5e", 0x6e) 1m21.691707031s ago: executing program 32 (id=85): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x7, r0}, 0x36) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000400)={r0, &(0x7f0000000440), &(0x7f0000000f80)=""/227}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x40}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000050000002c000000b7070000000025102c5a5d75550000180100002020702500000000002020207b1af8bf00000000bfa1000000000000070153ab10c8aedcbcd9000008000000b7030000fe00000085000000060000009500000000"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x8, &(0x7f0000000dc0)=@framed={{0x18, 0x6, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x3, 0x6, &(0x7f0000000f00)=ANY=[@ANYBLOB="18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0xb00c6, 0x4) io_uring_enter(0xffffffffffffffff, 0x20f6, 0xc605, 0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0), 0x1, 0x3d7, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./tracing\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000bc0)='tracefs\x00', 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x2, 0x5004) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000c40)="2d3a8ebd013fb546d01a92e9aad108a71224a1c0c74d0cf51585aa48443746520e85b230ef6433c8a2539560c64f5fe1aca29f3948c965b55c80503c343ace7929b8cd6a43656569329b4d554fe453ccd02fe6b1fc30d12ccd68f8051a7a37fa2ca53882dfbb6069c2d9a4ed7e5e", 0x6e) 1m17.324768879s ago: executing program 3 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1e, 0x11, &(0x7f0000000cc0)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000002000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[r0], 0x0, 0x0}, 0x94) 1m17.208039541s ago: executing program 3 (id=123): bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000021c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002200), 0x0, 0x10, &(0x7f0000002240)={0x0, 0x10000000}, 0x71}, 0x48) 1m17.165698855s ago: executing program 3 (id=124): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000004000000000000000711814000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m17.131950249s ago: executing program 3 (id=125): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1e0001c, &(0x7f0000000340)={[{@rodir}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_winnt}, {@numtail}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xf}}, {@fat=@check_strict}, {@fat=@check_strict}, {@utf8}, {@utf8}, {@utf8no}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}]}, 0x3, 0x28e, &(0x7f0000000440)="$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") mmap(&(0x7f0000fa4000/0x4000)=nil, 0x4000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000372000/0x2000)=nil, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f0000000d80)={0x60208200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000280)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@loopback, @in=@multicast2, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x8000000000000000, 0x1, 0x6811221b, 0x1d26, 0x8000000000010003, 0x200000200000003, 0x100000000}, {0x7ae, 0xfffffffffffffffd, 0x6, 0x7}, 0x6, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@private=0xa010102, 0x0, 0x6c}, 0xa, @in6=@remote, 0x0, 0x1, 0x2, 0x0, 0x9, 0x7}}, 0xe8) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x67}, {0x0, 0xfffffffffffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x8, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0xb, &(0x7f00000007c0)=""/225, &(0x7f00000008c0)=0xe1) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) getsockopt(r5, 0x9, 0xd708, &(0x7f0000000900)=""/145, &(0x7f00000009c0)=0x91) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000240)) 1m16.724924131s ago: executing program 3 (id=128): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000000, &(0x7f0000000100)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000500)="$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") quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, &(0x7f0000000a40)) 1m15.788705317s ago: executing program 3 (id=131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000110001002cbd7000ffdbdf25e000000100000000fdffffff00000000000004d5020033"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1m15.473129589s ago: executing program 33 (id=131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000110001002cbd7000ffdbdf25e000000100000000fdffffff00000000000004d5020033"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) 39.971046095s ago: executing program 1 (id=353): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf}, 0x48) 39.958161607s ago: executing program 1 (id=354): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001980), 0x0, 0x10, &(0x7f00000019c0), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 39.860384687s ago: executing program 1 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000540)={0x3, 0x0, [{0x4, 0x6, 0x8, 0x5, 0x1, 0x750, 0x7}, {0x0, 0x0, 0x1, 0x80, 0x9, 0x5d, 0x3}, {0x80000008, 0x4, 0x2, 0x4, 0x80000700, 0x7d, 0xa}]}) 39.818699781s ago: executing program 1 (id=356): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000200)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@sysvgroups}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@auto_da_alloc_val}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@errors_remount}], [], 0x2c}, 0x81, 0x475, &(0x7f0000000600)="$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") r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)={0x2b, 0xf, 0x0, 0x2, 0xb, 0xaa, 0x5, 0x2, 0x1}) mount$incfs(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x80, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 38.592893797s ago: executing program 1 (id=358): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x14552, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfe, 0x11ff, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000001540)='./bus\x00', 0x2f77e, 0x67) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000001580)='./file0\x00', 0x44000142) io_setup(0x80, &(0x7f00000015c0)=0x0) io_submit(r2, 0x1, &(0x7f0000001600)=[&(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4000, 0xfffffdef}]) 38.116427516s ago: executing program 1 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x5f}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (fail_nth: 2) 38.105640987s ago: executing program 34 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x5f}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (fail_nth: 2) 21.528314339s ago: executing program 4 (id=485): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xe, &(0x7f00000263c0)=ANY=[@ANYBLOB="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"], &(0x7f0000026f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000026fc0), 0x0, 0x10, &(0x7f0000027000), 0xfffffffffffffd00}, 0x48) 21.527805809s ago: executing program 4 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000280)={0x0, 0x1, 0x8001, 0x4, r0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1d0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x8000000, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1e1106f2008e", {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0x0, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000b80)=@ethtool_sfeatures={0x3b, 0x3, [{0x1}, {0x4, 0xfffffffa}, {0x1, 0x8000}]}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000002580)={0x73622a85, 0xeed7e89f6334d838}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x306788b2edba9ed4}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000026c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000002700)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x0, 0x2}]}) 20.65089761s ago: executing program 4 (id=496): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001980), 0x0, 0x10, &(0x7f00000019c0), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 20.639202981s ago: executing program 4 (id=497): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) stat(&(0x7f0000004e00)='./file0\x00', &(0x7f0000004e40)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000004f40)=@can_newroute={0x24, 0x18, 0x221, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000004f80)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000004fc0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007940)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000080)=0xe8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000007a80), 0x42, 0x0) read$FUSE(r3, &(0x7f0000007bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000009c00)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000009c80)="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", 0x2000, &(0x7f000000bc80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000bd40)={0x90, 0x0, 0x1ff, {0x0, 0x0, 0x5, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4000, 0x0, r5, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_clone(0x40480, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x8000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a40)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008414, &(0x7f0000000b40)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRES8, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f0000000cc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000f80)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) inotify_init1(0x800) renameat2(0xffffffffffffff9c, &(0x7f0000000fc0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0x0) r8 = getpgrp(r7) kcmp(r7, r8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) fstat(r0, &(0x7f000000be00)) r9 = gettid() timer_create(0x1, &(0x7f000000be80)={0x0, 0x21, 0x4, @tid=r9}, &(0x7f000000bec0)) getresuid(&(0x7f000000bf00), &(0x7f000000bf40), &(0x7f000000bf80)) read$FUSE(0xffffffffffffffff, &(0x7f000000bfc0)={0x2020}, 0x2020) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = getpid() kcmp(r11, r10, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000000e000), &(0x7f000000e040)=0xc) r12 = syz_open_procfs(0x0, &(0x7f000000e080)='mounts\x00') read$FUSE(r12, &(0x7f000000e0c0)={0x2020}, 0xa5a) 20.517167473s ago: executing program 4 (id=498): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000fffa00fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00030000000000022c0211"], 0x27c}}, 0x0) 20.377055058s ago: executing program 4 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffefff, @mcast2, 0x4}, 0x1c) getsockname$inet6(r3, 0x0, &(0x7f0000000040)) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa843, &(0x7f0000000a00)={[{@grpid}, {}, {@nodioread_nolock}, {@noinit_itable}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x0, 0xbaf, &(0x7f00000017c0)="$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") r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000300)) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32=r6, @ANYBLOB="8c08000000000000000000c10000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0x20400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1ff, 0xa4, 0xffb, 0x7, 0xb69, 0x5228, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0xff20, 0x40, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x13, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0x4000b, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x4, 0x11000, 0x10001, 0x5, 0x79b, 0x2, 0xbd, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xa9a3, 0x5, 0x5, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0xb, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x7f, 0x331, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20008, 0x9, 0x2, 0xffffffff, 0x4, 0xd9a, 0xd, 0x2a2, 0x1, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x1000002, 0x40, 0x8, 0x4, 0x8000003, 0x404, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 20.372358108s ago: executing program 35 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffefff, @mcast2, 0x4}, 0x1c) getsockname$inet6(r3, 0x0, &(0x7f0000000040)) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa843, &(0x7f0000000a00)={[{@grpid}, {}, {@nodioread_nolock}, {@noinit_itable}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x0, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000300)) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32=r6, @ANYBLOB="8c08000000000000000000c10000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0x20400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1ff, 0xa4, 0xffb, 0x7, 0xb69, 0x5228, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0xff20, 0x40, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x13, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0x4000b, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x4, 0x11000, 0x10001, 0x5, 0x79b, 0x2, 0xbd, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xa9a3, 0x5, 0x5, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0xb, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x7f, 0x331, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20008, 0x9, 0x2, 0xffffffff, 0x4, 0xd9a, 0xd, 0x2a2, 0x1, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x1000002, 0x40, 0x8, 0x4, 0x8000003, 0x404, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 7.733052036s ago: executing program 0 (id=592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='+p', 0x2) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 6.967062405s ago: executing program 0 (id=599): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./debug\x00', &(0x7f00000006c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./debug/failslab/times\x00', 0x2, 0x0) write(r0, &(0x7f0000000780)='100', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./debug/failslab/probability\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='5\x00', 0x1) r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000840)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r2, &(0x7f0000000880)='1', 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x1d4) getpid() syz_emit_ethernet(0xe, &(0x7f00000008c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@generic={0x88a2}}}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000009c0), 0x4, 0xbaf, &(0x7f0000000a00)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000015c0), 0x100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000001640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x5, 0x4, 0x9, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x1}, 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000001840), 0x19, 0x2) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000001880)=@usbdevfs_connect) openat$vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000001b00)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0xa0000, 0x0, 0x0, @by_dev={r4}, [@striped={0x0, 0x840, 0x0, 0x60, 'striped\x00', {0x2, 0x20, '8', [{0x20, {@ram={'/dev/ram', 0x0}, 0x20, '16'}}, {0x20, {@ram={'/dev/ram', 0x0}, 0x20, '1024'}}]}}]}) 5.486727917s ago: executing program 5 (id=616): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000a00)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a40)={0x24, 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000ac0), 0x1, 0x200) r1 = syz_open_dev$usbfs(&(0x7f0000000b00), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000b40)={0x0, 0x2, "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"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000980)={0x1, &(0x7f00000009c0)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.244251762s ago: executing program 0 (id=621): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x123, 0x234, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}]}, 0x2c}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000440)={&(0x7f0000000480)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8000099}, 0x0) 5.152198211s ago: executing program 0 (id=625): syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdirat(0xffffffffffffff9c, &(0x7f00000059c0)='./lower\x00', 0x1ff) unlink(&(0x7f00000063c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000064c0)='./file1\x00', 0x2040, 0x0) unlink(&(0x7f0000006500)='./file1\x00') r0 = open(&(0x7f000000f280)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./upper\x00', 0x1ff) mount$fuse(0x0, &(0x7f0000006280)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005a40)='./mnt\x00', 0x1ff) mount$overlay(0x0, &(0x7f0000005b00)='./mnt\x00', &(0x7f0000005b40), 0x0, &(0x7f0000005b80)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, './mnt'}}]}) 4.444234274s ago: executing program 0 (id=641): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000006e80)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) 3.987492901s ago: executing program 0 (id=655): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) 3.926002677s ago: executing program 36 (id=655): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) 3.500574841s ago: executing program 7 (id=679): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x4000004) pipe2(&(0x7f0000038680), 0x84080) 3.449889676s ago: executing program 7 (id=681): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000c00)="68000000300005050100000000000000000000005400018050000180090001e46761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080003000000000008000500640000000c000700e803ffe40000eeff", 0x68, 0x0, 0x0, 0x0) 3.442844007s ago: executing program 7 (id=683): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001180), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000011c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000001200)=ANY=[], 0xff2e) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001240)={0x0, 0x3, 0x3, 0x7ffe, 0x1e, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001280)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x11) 3.278230143s ago: executing program 5 (id=684): fsopen(&(0x7f0000000000)='autofs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test\x00', 0x773) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0', 0x1) syz_ublk_setup_io_uring(0x24, &(0x7f0000000ac0)={0x0, 0x2, 0x1, 0xffffffff, 0x1be}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002d00)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002d80)) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000300)="$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") unshare(0x42000000) 2.779939415s ago: executing program 7 (id=686): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2719, 0x0, &(0x7f0000000940)) 2.733026839s ago: executing program 7 (id=687): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xc800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0xa8811, 0x0, 0x0, @by_dev={r1}, [@flakey={0x0, 0x400, 0x0, 0x90, 'flakey\x00', {{@ram_num={'1:', 0x1}, 0x20, '8191'}, 0x20, 0x3, 0x20, 0x0, ' 2 random_read_corrupt 500000000'}}]}) 2.639422469s ago: executing program 7 (id=688): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000083c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008440)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f000000a440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a500)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000a540)='./file0\x00', 0x101001, 0x12) ppoll(&(0x7f000000a580)=[{r2}], 0x1, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000280)={0x18}, 0x18) 1.885742747s ago: executing program 9 (id=658): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r0, &(0x7f00000003c0)='10', 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x200000, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.572323629s ago: executing program 5 (id=698): ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0xc}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000a00)={"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"}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000140)={[{@errors_remount}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0x7ab4}}, {@jqfmt_vfsv0}]}, 0x80, 0x63c, &(0x7f0000000e00)="$eJzs3c9rG9kdAPDvjCwnTtw6KaU0aUsNPSRQothpaNqekvTQHAINNIdSeoiJ7dRE+UHsQOIG4kAPLbRQSq+l5NJ/oPRafF32tizs5rbnheyyZHcPu0u0zGgUK7IUa23L0mY+H5D05s1I7301enpvZjSaAEprOrtLI45ExJUkYqpt3mQ0Z04Xyz376MHV7JZEo/GbD5NIirzW8s+Lx4PZXdJ8zlvnI75V2Vzu8v3V63P1RtPDiJMrN26fXL6/emLpxty1hWsLN2dP/ez0mZmfz76xO3EeLB4vXPz19//2pz/8dPHt+okkzsbl6h/noyOO3TLdfHcjC7E9fywizmSJLu8L7KVK8XmsRsR3Yioq+VTTVCz9daiVAwaqUWn2T43xBlA6SQy7BsBwtMYBrW37QWwHj7Kn57L7e13iHyu23vfn20YHniVtW0ZZbsShXSh/LSK+eHD0X9kteuyHGNuFcnqW/ygivttt/Sd5/IfySLP400jbnpelZ4p9G1n9frmDOiRt6f4+fw93UNrLvkr87eshi/9s8Zjln+/x+lvt4pnumC5b+wNgONbPFR15NhCJjf4vGxm2xj/ROf5p/C8/NtTZd21H7/4v3YVX31o+/hvr1v+3+vv9eR+edozDklj75FL3l6x2Zrz3lwv/6FX+dNv4L7tl5bfGgn3Y8dDw6aOIox3x/zl/65MX6z/pMv7NFrnSZxm/eueDC73m7TD+HWs8jjjWdftnY1SapTqOTybROj55evbk4lJ9YaZ537WM/7/5+//0Kn/Y8Wfr/8BL8a9+rznn1es/y7vdZxn/vfT4RjO1b9O8yS3jT98fTy7nqfH8fqN5jScXi0WaD/fmVlbunHp1XVrL5I+zzfiP/6h7++8Rf77xMdH6yuzD7d9ef9b6Hu20w/X/vNHngr1k8c/3+Pxvtf7/3mcZn/7u7g+6zmi9JS/Fv7FPYmKbMQEAAAAAAEBZpfkx2CStvUinaa048PbtOJDWby2v/Hjx1t2b8xHH899DVtPWke6p5nSSTc8Wv4dtTZ/qmP5JRByOiH9WJvLp2tVqfX7YwQMAAAAAAAAAAAAAAAAAAMCIOFic//+8uB7Yx5U0rdWGXStgzwzyAnPAaNP+obzy9r8311sDRoz+H8qra/v3pQCloKlDeWn/UF7aP5SX9g/lpf1DefVu/5vmPBp0XQAAAACAXXP4h+tPxiJi7RcT+S0zXsyrDrVmwKB1tHFHAqFEKsOuADA0Lzp8p/9D6fS1jf9Z8eeAg68OMARJt8x8cNB4deNf7/pMAAAAAAAAAAAAAGAAjh1Zf5I4/x9KyWl/UF7bO/+/sv2nAiOj2x/++BMgKAfb+FByfewE2N9rhvP/AQAAAAAAAAAAAGDPTOa3JK0VPwOejDSt1SK+ERGHoposLtUXZiLimxHxbqW6L5ueHXalAQAAAAAAAAAAAAAAAAAA4DWzfH/1+ly9vnCnPfH5ppzXO9G64umo1Kc9EcnAi0ijI2ciIkYh9sEkxtpykoi1bM3vxisnO//8xCi8P0ViyF9MAAAAAAAAAAAAAAAAAABQQm3nHnd39N97XCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Hsb1/8fXGLYMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX09fBgAA//925zoW") r0 = syz_open_procfs(0x0, &(0x7f0000001440)='mounts\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x16, 0x1b006d6c, 0x62aec893, 0x7, 0x2410, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0xffffffd6) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x1, 0x0) read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020) 1.572127199s ago: executing program 9 (id=700): mkdirat(0xffffffffffffffff, 0x0, 0x12) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file2\x00', 0x8410, &(0x7f0000000580)=ANY=[], 0xff, 0x2a0, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x103942, 0x174) openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) mkdirat(0xffffffffffffffff, 0x0, 0x78) rename(&(0x7f0000001d80)='./file1\x00', &(0x7f0000001dc0)='./file2\x00') 1.477288999s ago: executing program 6 (id=703): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x5}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x60000008}) 1.372367509s ago: executing program 6 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001580)={0x44, r1, 0x5, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5800, 0x2, 0xd348, 0x5, 0x3, 0x8000, 0xb]}}]}]}]}, 0x44}}, 0x0) 1.372172259s ago: executing program 5 (id=706): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x1, 0x32b, &(0x7f0000000400)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001080)='./file1\x00', 0x190864, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001180)='./file1\x00', 0x109342, 0x0) 1.369669579s ago: executing program 9 (id=708): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) 1.36737368s ago: executing program 6 (id=709): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x8) lsetxattr$security_selinux(&(0x7f0000000580)='./mnt\x00', &(0x7f0000000640), &(0x7f0000000680)='system_u:object_r:usb_device_t:s0\x00', 0x22, 0x0) 1.355347881s ago: executing program 8 (id=710): syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./bus\x00', 0x2000000, &(0x7f0000000540)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f00000056c0)="$eJzs2s9rXFUUB/DzaiUxNZ2Iv2hBvOhC3TyauHXRIC2IAUUboQrSV/OiQ54zIW8IjIidlW79E1yLS3eCdOkmG/8CF+4CkmUF8YmZMc0MI6H4Y0L7+WzmMOd+Z87lzgx3MfuvfPnx1madbxa9OJNlkV2OQdzJYinOxF8G8dIL13945u3r776+urZ25a2Urq5eW15JKZ1/9vv3Pv3mudu9c+98e/67udhben//YOXnvaf2Luz/fu2jdp3adep0e6lIN7vdXnGzKtNGu97KU3qzKou6TO1OXe6M9Ter7vZ2PxWdjcWF7Z2yrlPR6aetsp963dTb6afiw6LdSXmep8WF4J9Y//pO08RB8/CNaJrmka/i3O1Y/ClakT2WsscvZ0/eyJ4eZBcOmqY161H5Tzj/B9uxH/X5iOqL3fXd9eHjsL+6Ge2oooxL0Yrf4s+Pyciwvvra2pVL6dBSfF7dGuVv7a4/NJ5fjlYsTc8vD/NpPD8XC8fzK9GKJyIbjT2WX5man48Xnz+Wz6MVP34Q3ahi4/AF7uY/W07p1TfWJvIXD9cBANxv8nRk6v0tz/+uP8zfw/1w4n51Ni6ene3eiaj7n2wVVVXunFTMx8lrFIqTivmIOAVjHBW/jL4IE625f+MtYhBx9MzLj56WLU8UvzZNM214HgB3D33WkwAAAAAAAAAAAHAv/o8/GM56jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn2RwAAAP//lu3JvA==") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000005b80)='./file1\x00', 0x40, 0x14e) mmap(&(0x7f0000000000/0x2000)=nil, 0x1200, 0x1000001, 0x4003012, r0, 0x7000) 1.280134309s ago: executing program 8 (id=711): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711818000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.280069919s ago: executing program 9 (id=712): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debugfs\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./debugfs\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debugfs/kvm/halt_poll_fail_ns\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 1.279938639s ago: executing program 9 (id=713): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r3, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000080), 0x5005) r5 = socket(0x10, 0x803, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x4bfb, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000800)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000840)="$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") symlink(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x115100, 0x5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001dc0)={0x1, &(0x7f0000001e00)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f00000005c0), 0x1, 0x50a, &(0x7f0000003ec0)="$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") r7 = open(&(0x7f0000004400)='./file1\x00', 0x1ae07e, 0xbe) sendfile(r7, r7, 0x0, 0x10000006) 1.279878869s ago: executing program 8 (id=714): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x842cc0, 0x0) flock(r1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) flock(r2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) 1.249446962s ago: executing program 5 (id=715): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001740)={'ip6_vti0\x00'}) syz_emit_ethernet(0x6e, &(0x7f0000001780)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c00000000"}}}}}}}, 0x0) 510.717298ms ago: executing program 5 (id=716): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='+p', 0x2) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x604, 0x0) 336.419085ms ago: executing program 6 (id=717): r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000880)={0x20002016}) epoll_pwait(r1, &(0x7f00000009c0)=[{}], 0x1, 0xfd, 0x0, 0x0) 336.290565ms ago: executing program 8 (id=718): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'rose0\x00', 0x112}) 282.498261ms ago: executing program 8 (id=719): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='./file0\x00', 0x400017e) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 269.131773ms ago: executing program 8 (id=720): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x1, 0x5505, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000006300)='file1\x00', 0x42, 0x1b6) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x8000, 0x17fd, 0x203}) 107.173929ms ago: executing program 9 (id=721): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000100), 0x1, 0x50a, &(0x7f0000000ec0)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = creat(&(0x7f0000001400)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r0, &(0x7f0000001440)=ANY=[], 0x58) creat(&(0x7f0000001480)='./file0\x00', 0x7a) 104.22µs ago: executing program 6 (id=722): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, 0x1, 0xfffff53a, 0x0) 0s ago: executing program 6 (id=723): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) kernel console output (not intermixed with test programs): criptor read/64, error -71 [ 79.000356][ T1514] attempt to access beyond end of device [ 79.000356][ T1514] loop4: rw=10241, want=45104, limit=40427 [ 79.030606][ T1533] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.357: missing EA_INODE flag [ 79.058547][ T1533] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.357: error while reading EA inode 12 err=-117 [ 79.058832][ T1527] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.356: Invalid block bitmap block 3 in block_group 0 [ 79.081806][ T1533] EXT4-fs (loop5): 1 orphan inode deleted [ 79.100209][ T1533] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 79.114743][ T30] audit: type=1400 audit(1793848215.483:416): avc: denied { ioctl } for pid=1514 comm="syz.4.352" path="/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop4" ino=10 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.161802][ T1527] EXT4-fs (loop1): Remounting filesystem read-only [ 79.183836][ T286] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 79.224653][ T286] EXT4-fs (loop1): Remounting filesystem read-only [ 79.239837][ T286] EXT4-fs error (device loop1): ext4_iget_extra_inode:4604: inode #15: comm syz-executor: corrupted in-inode xattr [ 79.246596][ T30] audit: type=1400 audit(1793848215.493:417): avc: denied { read } for pid=1525 comm="syz.1.356" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.259550][ T1267] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 79.275846][ T30] audit: type=1400 audit(1793848215.493:418): avc: denied { open } for pid=1525 comm="syz.1.356" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.308812][ T286] EXT4-fs (loop1): Remounting filesystem read-only [ 79.315538][ T286] EXT4-fs error (device loop1): ext4_iget_extra_inode:4604: inode #15: comm syz-executor: corrupted in-inode xattr [ 79.329005][ T286] EXT4-fs (loop1): Remounting filesystem read-only [ 79.339975][ T6] usb 6-1: Found UVC 0.00 device syz (0408:4033) [ 79.340010][ T6] usb 6-1: No valid video chain found. [ 79.343825][ T6] usb 6-1: USB disconnect, device number 5 [ 79.431142][ T880] tipc: Left network mode [ 79.459933][ T290] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.609955][ T1267] usb 7-1: device descriptor read/64, error -71 [ 79.709919][ T290] usb 5-1: Using ep0 maxpacket: 8 [ 79.872493][ T1542] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.879724][ T1542] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.887922][ T1542] device bridge_slave_0 entered promiscuous mode [ 79.895380][ T1542] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.902873][ T290] usb 5-1: unable to get BOS descriptor or descriptor too short [ 79.910941][ T1542] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.918491][ T1542] device bridge_slave_1 entered promiscuous mode [ 79.984551][ T1542] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.991707][ T1542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.999032][ T1542] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.006118][ T1542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.013997][ T290] usb 5-1: config 252 has an invalid interface number: 50 but max is 0 [ 80.023316][ T290] usb 5-1: config 252 has no interface number 0 [ 80.050850][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.058835][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.069015][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.081925][ T880] device bridge_slave_1 left promiscuous mode [ 80.088118][ T880] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.095440][ T1267] usb 7-1: device descriptor read/64, error -71 [ 80.103196][ T880] device bridge_slave_0 left promiscuous mode [ 80.109375][ T880] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.118140][ T880] device veth1_macvtap left promiscuous mode [ 80.124468][ T880] device veth0_vlan left promiscuous mode [ 80.190006][ T290] usb 5-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=5d.62 [ 80.211440][ T290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.230138][ T1267] usb usb7-port1: attempt power cycle [ 80.236504][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.245083][ T290] usb 5-1: Product: syz [ 80.249533][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.256641][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.264456][ T290] usb 5-1: Manufacturer: syz [ 80.269274][ T290] usb 5-1: SerialNumber: syz [ 80.275376][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.284134][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.291248][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.304143][ T1489] device batadv_slave_0 left promiscuous mode [ 80.317194][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.326719][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.339209][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.359976][ T430] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 80.369246][ T1549] netlink: 96 bytes leftover after parsing attributes in process `syz.5.362'. [ 80.378656][ T1549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.362'. [ 80.387875][ T1549] netlink: 20 bytes leftover after parsing attributes in process `syz.5.362'. [ 80.393354][ T1542] device veth0_vlan entered promiscuous mode [ 80.402945][ T1549] netlink: 20 bytes leftover after parsing attributes in process `syz.5.362'. [ 80.415721][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.424358][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.432108][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.447671][ T1542] device veth1_macvtap entered promiscuous mode [ 80.456257][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.465076][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.473544][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.483615][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.492100][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.507581][ T1554] netlink: 60 bytes leftover after parsing attributes in process `syz.6.364'. [ 80.757640][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.766300][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.789927][ T430] usb 1-1: Using ep0 maxpacket: 8 [ 80.814418][ T1560] set_capacity_and_notify: 1 callbacks suppressed [ 80.814436][ T1560] loop7: detected capacity change from 0 to 4096 [ 80.834248][ T1558] loop6: detected capacity change from 0 to 8192 [ 80.842332][ T1560] EXT4-fs (loop7): Test dummy encryption mode enabled [ 80.849271][ T1560] EXT4-fs (loop7): Ignoring removed orlov option [ 80.857695][ T1560] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 80.903783][ T1558] attempt to access beyond end of device [ 80.903783][ T1558] loop6: rw=0, want=57848, limit=8192 [ 80.915232][ T1558] Buffer I/O error on dev loop6, logical block 57847, async page read [ 80.924297][ T1558] attempt to access beyond end of device [ 80.924297][ T1558] loop6: rw=0, want=57848, limit=8192 [ 80.936809][ T1558] Buffer I/O error on dev loop6, logical block 57847, async page read [ 80.945378][ T1558] attempt to access beyond end of device [ 80.945378][ T1558] loop6: rw=0, want=57848, limit=8192 [ 80.950273][ T430] usb 1-1: unable to get BOS descriptor or descriptor too short [ 80.957150][ T1558] Buffer I/O error on dev loop6, logical block 57847, async page read [ 80.973132][ T1562] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 80.982219][ T1562] FAT-fs (loop6): Filesystem has been set read-only [ 81.003267][ T1558] binfmt_misc: register: failed to install interpreter file ./cgroup [ 81.060090][ T430] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 81.068319][ T430] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 81.083799][ T430] usb 1-1: config 4 has no interface number 0 [ 81.109216][ T368] attempt to access beyond end of device [ 81.109216][ T368] loop4: rw=1, want=45104, limit=40427 [ 81.139621][ T1571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.371'. [ 81.156296][ T1571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.371'. [ 81.170082][ T290] usb 5-1: Found UVC 0.00 device syz (0408:4033) [ 81.181796][ T290] usb 5-1: No valid video chain found. [ 81.195380][ T290] usb 5-1: USB disconnect, device number 7 [ 81.209301][ T1571] loop6: detected capacity change from 0 to 512 [ 81.225014][ T1571] EXT4-fs (loop6): Test dummy encryption mode enabled [ 81.231968][ T1571] EXT4-fs (loop6): Ignoring removed oldalloc option [ 81.260349][ T430] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 81.277931][ T430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.286698][ T430] usb 1-1: Product: syz [ 81.291003][ T430] usb 1-1: Manufacturer: syz [ 81.296040][ T430] usb 1-1: SerialNumber: syz [ 81.302119][ T1571] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 81.345030][ T1576] loop5: detected capacity change from 0 to 512 [ 81.397954][ T1576] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.372: missing EA_INODE flag [ 81.410264][ T1576] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.372: error while reading EA inode 12 err=-117 [ 81.433241][ T1576] EXT4-fs (loop5): 1 orphan inode deleted [ 81.439094][ T1576] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 81.454639][ T1583] syz.4.375 uses obsolete (PF_INET,SOCK_PACKET) [ 81.469566][ T1585] ip_tables: iptables: counters copy to user failed while replacing table [ 81.481257][ T1587] xt_hashlimit: size too large, truncated to 1048576 [ 81.491164][ T1585] capability: warning: `syz.6.376' uses deprecated v2 capabilities in a way that may be insecure [ 82.110376][ T1600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'. [ 82.149025][ T1602] netlink: 36 bytes leftover after parsing attributes in process `syz.4.382'. [ 82.167614][ T1600] device vlan2 entered promiscuous mode [ 82.202679][ T1600] device dummy0 entered promiscuous mode [ 82.303342][ T1604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 82.409094][ T1605] loop4: detected capacity change from 0 to 512 [ 82.421809][ T1605] EXT4-fs (loop4): Test dummy encryption mode enabled [ 82.428781][ T1605] EXT4-fs (loop4): Ignoring removed oldalloc option [ 82.447833][ T1590] loop6: detected capacity change from 0 to 4096 [ 82.455217][ T1605] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 82.489966][ T430] uvcvideo 1-1:4.147: Found multiple Units with ID 6 [ 82.496954][ T430] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 82.504396][ T430] usb 1-1: No streaming interface found for terminal 65535. [ 82.513392][ T430] usb 1-1: USB disconnect, device number 9 [ 82.586470][ T1590] EXT4-fs (loop6): Ignoring removed orlov option [ 82.595306][ T1590] EXT4-fs (loop6): Ignoring removed orlov option [ 82.641297][ T1590] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,orlov,nodioread_nolock,nodiscard,quota,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 82.729806][ T1626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1626 comm=syz.0.390 [ 82.747527][ T1619] loop4: detected capacity change from 0 to 512 [ 82.780603][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 82.780619][ T30] audit: type=1400 audit(1793848219.223:423): avc: denied { bind } for pid=1624 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.811417][ T30] audit: type=1400 audit(1793848219.223:424): avc: denied { read } for pid=1624 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.859719][ T1619] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 82.870488][ T1619] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 82.880525][ T1619] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.387: Failed to acquire dquot type 1 [ 82.893693][ T1619] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 82.916147][ T1619] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 82.926335][ T1619] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.387: Failed to acquire dquot type 1 [ 82.938327][ T1619] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.387: bg 0: block 248: padding at end of block bitmap is not set [ 82.953287][ T1619] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 82.971683][ T1619] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 82.983802][ T1641] loop6: detected capacity change from 0 to 512 [ 82.990296][ T1619] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 83.005936][ T1619] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.387: Failed to acquire dquot type 1 [ 83.009756][ T1641] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.018099][ T1619] EXT4-fs (loop4): 1 orphan inode deleted [ 83.033803][ T1619] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.045002][ T1619] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.060057][ T1619] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 83.070814][ T1619] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 83.081047][ T1619] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.387: Failed to acquire dquot type 1 [ 83.093946][ T1619] 9pnet: Insufficient options for proto=fd [ 83.104072][ T1619] kvm: pic: non byte write [ 83.401309][ T430] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 83.519604][ T1648] tipc: Started in network mode [ 83.524750][ T1648] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 83.533770][ T1648] tipc: Enabling of bearer rejected, failed to enable media [ 83.553099][ T1650] capability: warning: `syz.4.396' uses 32-bit capabilities (legacy support in use) [ 83.600233][ T1650] loop4: detected capacity change from 0 to 1024 [ 83.639956][ T430] usb 1-1: Using ep0 maxpacket: 8 [ 83.799986][ T430] usb 1-1: unable to get BOS descriptor or descriptor too short [ 84.185147][ T1672] loop4: detected capacity change from 0 to 8192 [ 84.366958][ T1672] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.069979][ T430] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 85.074513][ T1686] EXT4-fs (loop7): Test dummy encryption mode enabled [ 85.101925][ T430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.110840][ T1686] EXT4-fs (loop7): Ignoring removed oldalloc option [ 85.121675][ T430] usb 1-1: Product: syz [ 85.125890][ T430] usb 1-1: Manufacturer: syz [ 85.150037][ T430] usb 1-1: SerialNumber: syz [ 85.160984][ T1686] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 85.281858][ T1697] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.373291][ T1702] input: syz1 as /devices/virtual/input/input28 [ 85.396270][ T1709] __nla_validate_parse: 4 callbacks suppressed [ 85.396292][ T1709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 85.614573][ T1713] F2FS-fs (loop4): invalid crc value [ 85.621575][ T1713] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 85.846756][ T1713] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 85.973739][ T1713] attempt to access beyond end of device [ 85.973739][ T1713] loop4: rw=2049, want=49160, limit=40427 [ 85.995085][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 86.003494][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.012411][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 86.022227][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.031002][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.039300][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.047838][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.056654][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.097661][ T288] attempt to access beyond end of device [ 86.097661][ T288] loop4: rw=2049, want=45104, limit=40427 [ 86.199311][ T1726] set_capacity_and_notify: 5 callbacks suppressed [ 86.199338][ T1726] loop5: detected capacity change from 0 to 128 [ 86.311319][ T1726] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 86.326430][ T1726] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.909962][ T1267] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 87.374436][ T1739] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1808 sclass=netlink_xfrm_socket pid=1739 comm=syz.4.426 [ 87.390359][ T1741] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1808 sclass=netlink_xfrm_socket pid=1741 comm=syz.7.427 [ 87.442839][ T1745] loop0: detected capacity change from 0 to 4096 [ 87.460497][ T1745] EXT4-fs (loop0): Test dummy encryption mode enabled [ 87.468830][ T1745] EXT4-fs (loop0): Ignoring removed orlov option [ 87.502616][ T1745] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 87.526278][ T430] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 87.549913][ T1267] usb 7-1: Using ep0 maxpacket: 8 [ 87.550006][ T430] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 87.628255][ T1758] input: syz1 as /devices/virtual/input/input29 [ 87.636488][ T1756] tipc: Enabling of bearer rejected, failed to enable media [ 87.665542][ T430] usb 1-1: USB disconnect, device number 10 [ 87.677612][ T1763] input: syz1 as /devices/virtual/input/input30 [ 87.680355][ T1267] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 87.700616][ T1267] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.710136][ T1763] FAULT_INJECTION: forcing a failure. [ 87.710136][ T1763] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.726026][ T1267] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 87.738908][ T1267] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.755683][ T1763] CPU: 0 PID: 1763 Comm: syz.4.435 Not tainted syzkaller #0 [ 87.763032][ T1763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.763926][ T1764] loop7: detected capacity change from 0 to 128 [ 87.773116][ T1763] Call Trace: [ 87.773124][ T1763] [ 87.773132][ T1763] __dump_stack+0x21/0x30 [ 87.773156][ T1763] dump_stack_lvl+0x110/0x170 [ 87.773176][ T1763] ? show_regs_print_info+0x20/0x20 [ 87.799890][ T1763] dump_stack+0x15/0x20 [ 87.800770][ T1267] usb 7-1: config 0 descriptor?? [ 87.804075][ T1763] should_fail+0x3ab/0x500 [ 87.813463][ T1763] should_fail_usercopy+0x1a/0x20 [ 87.818561][ T1763] _copy_from_user+0x20/0xd0 [ 87.823179][ T1763] iovec_from_user+0x1bc/0x2f0 [ 87.827986][ T1763] ? __kasan_check_write+0x14/0x20 [ 87.833134][ T1763] __import_iovec+0x71/0x3f0 [ 87.837775][ T1763] ? __fget_files+0x2e1/0x340 [ 87.842467][ T1763] import_iovec+0x7c/0xb0 [ 87.846814][ T1763] do_readv+0x229/0x450 [ 87.850985][ T1763] ? do_iter_readv_writev+0x5f0/0x5f0 [ 87.856377][ T1763] ? __kasan_check_write+0x14/0x20 [ 87.861526][ T1763] ? fput_many+0x15a/0x1a0 [ 87.865964][ T1763] ? debug_smp_processor_id+0x17/0x20 [ 87.871350][ T1763] __x64_sys_readv+0x7d/0x90 [ 87.876040][ T1763] x64_sys_call+0x58b/0x9a0 [ 87.880560][ T1763] do_syscall_64+0x4c/0xa0 [ 87.884987][ T1763] ? clear_bhb_loop+0x50/0xa0 [ 87.889692][ T1763] ? clear_bhb_loop+0x50/0xa0 [ 87.894383][ T1763] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.900313][ T1763] RIP: 0033:0x7f985fdbfb19 [ 87.904738][ T1763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.924360][ T1763] RSP: 002b:00007f985e817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 87.932794][ T1763] RAX: ffffffffffffffda RBX: 00007f9860045fa0 RCX: 00007f985fdbfb19 [ 87.940780][ T1763] RDX: 0000000000000001 RSI: 00002000000027c0 RDI: 0000000000000003 [ 87.948763][ T1763] RBP: 00007f985e817090 R08: 0000000000000000 R09: 0000000000000000 [ 87.956748][ T1763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.964731][ T1763] R13: 00007f9860046038 R14: 00007f9860045fa0 R15: 00007ffcf170c0a8 [ 87.972724][ T1763] [ 87.979279][ T1766] loop0: detected capacity change from 0 to 512 [ 88.008438][ T1766] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.436: missing EA_INODE flag [ 88.024748][ T1766] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.436: error while reading EA inode 12 err=-117 [ 88.038007][ T1766] EXT4-fs (loop0): 1 orphan inode deleted [ 88.044093][ T1766] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 88.050062][ T306] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 88.097320][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 88.097338][ T30] audit: type=1400 audit(1793848224.533:430): avc: denied { create } for pid=1760 comm="syz.7.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.155978][ T1778] loop4: detected capacity change from 0 to 512 [ 88.168181][ T1778] EXT4-fs (loop4): Ignoring removed nobh option [ 88.181822][ T1778] EXT4-fs error (device loop4): ext4_quota_enable:6435: comm syz.4.440: inode #255: comm syz.4.440: iget: illegal inode # [ 88.196044][ T1778] EXT4-fs (loop4): Remounting filesystem read-only [ 88.202870][ T1778] EXT4-fs error (device loop4): ext4_quota_enable:6438: comm syz.4.440: Bad quota inode: 255, type: 2 [ 88.215385][ T1778] EXT4-fs (loop4): Remounting filesystem read-only [ 88.223106][ T1778] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=2, err=-117, ino=255). Please run e2fsck to fix. [ 88.240968][ T1778] EXT4-fs (loop4): mount failed [ 88.339956][ T306] usb 6-1: Using ep0 maxpacket: 32 [ 88.369970][ T1778] loop4: detected capacity change from 0 to 512 [ 88.380599][ T1778] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 88.470091][ T306] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.495958][ T306] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 88.500108][ T1787] loop4: detected capacity change from 0 to 512 [ 88.524209][ T1267] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 88.540155][ T306] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.552896][ T1267] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 88.556374][ T1787] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.587235][ T306] usb 6-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.00 [ 88.603276][ T1267] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 88.619062][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.630878][ T1267] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 88.640408][ T1267] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 88.651912][ T1267] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 89.254699][ T306] usb 6-1: config 0 descriptor?? [ 89.259783][ T1267] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 89.267306][ T1267] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 89.275829][ T1267] lenovo 0003:17EF:6047.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 89.724195][ T1785] loop7: detected capacity change from 0 to 40427 [ 89.736034][ T1785] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 89.744218][ T1785] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 89.802016][ T306] input: HID 04f2:0618 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:04F2:0618.0009/input/input31 [ 89.881806][ T306] topseed 0003:04F2:0618.0009: input,hiddev96,hidraw1: USB HID v0.07 Device [HID 04f2:0618] on usb-dummy_hcd.5-1/input0 [ 89.973605][ T1785] loop7: detected capacity change from 0 to 512 [ 90.004559][ T306] usb 6-1: USB disconnect, device number 6 [ 90.016396][ T1785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a800c018, mo2=0002] [ 90.024519][ T1785] System zones: 2-12, 7-7 [ 90.047498][ T1785] EXT4-fs (loop7): 1 truncate cleaned up [ 90.053340][ T1785] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000400000,max_batch_time=0x0000000000000000,noquota,auto_da_alloc=0x0000000000000002,debug,max_dir_size_kb=0x0000000000000803,,errors=continue. Quota mode: none. [ 90.163563][ T1802] loop0: detected capacity change from 0 to 512 [ 90.192949][ T1804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 90.202919][ T1804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 90.215230][ T1802] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 90.224602][ T1802] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.446: attempt to clear invalid blocks 2 len 1 [ 90.238793][ T1802] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 90.255444][ T1802] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.446: invalid indirect mapped block 1819239214 (level 0) [ 90.269635][ T1802] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.446: invalid indirect mapped block 1819239214 (level 1) [ 90.284275][ T1802] EXT4-fs (loop0): 1 truncate cleaned up [ 90.290043][ T1802] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,i_version,barrier,lazytime,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 90.316176][ T1802] EXT4-fs (loop0): shut down requested (2) [ 90.323173][ T1802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 90.332265][ T1802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 90.397231][ T1804] EXT4-fs (loop4): Test dummy encryption mode enabled [ 90.404700][ T1804] EXT4-fs (loop4): Ignoring removed oldalloc option [ 90.470028][ T1804] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 90.525063][ T1817] input: syz1 as /devices/virtual/input/input32 [ 90.609634][ T1824] FAULT_INJECTION: forcing a failure. [ 90.609634][ T1824] name failslab, interval 1, probability 0, space 0, times 0 [ 90.622367][ T1824] CPU: 1 PID: 1824 Comm: syz.0.451 Not tainted syzkaller #0 [ 90.629686][ T1824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.639750][ T1824] Call Trace: [ 90.643042][ T1824] [ 90.645985][ T1824] __dump_stack+0x21/0x30 [ 90.650330][ T1824] dump_stack_lvl+0x110/0x170 [ 90.655023][ T1824] ? show_regs_print_info+0x20/0x20 [ 90.660235][ T1824] dump_stack+0x15/0x20 [ 90.664400][ T1824] should_fail+0x3ab/0x500 [ 90.668839][ T1824] __should_failslab+0xa4/0xe0 [ 90.673614][ T1824] should_failslab+0x9/0x20 [ 90.678130][ T1824] slab_pre_alloc_hook+0x39/0xd0 [ 90.683080][ T1824] kmem_cache_alloc_trace+0x48/0x270 [ 90.688378][ T1824] ? __get_vm_area_node+0x11d/0x350 [ 90.693592][ T1824] ? release_sock+0x15b/0x1b0 [ 90.698283][ T1824] __get_vm_area_node+0x11d/0x350 [ 90.703323][ T1824] __vmalloc_node_range+0xe8/0xad0 [ 90.708464][ T1824] ? netlink_sendmsg+0x5a0/0xb80 [ 90.713418][ T1824] ? netlink_sendmsg+0x5a0/0xb80 [ 90.718373][ T1824] vmalloc+0x78/0x90 [ 90.722277][ T1824] ? netlink_sendmsg+0x5a0/0xb80 [ 90.727226][ T1824] netlink_sendmsg+0x5a0/0xb80 [ 90.732003][ T1824] ? netlink_getsockopt+0x530/0x530 [ 90.737214][ T1824] ? security_socket_sendmsg+0x82/0xa0 [ 90.742682][ T1824] ? netlink_getsockopt+0x530/0x530 [ 90.747892][ T1824] kernel_sendmsg+0x23e/0x350 [ 90.752582][ T1824] ? sock_sendmsg+0x330/0x330 [ 90.757282][ T1824] sock_no_sendpage+0x117/0x190 [ 90.762147][ T1824] ? __receive_sock+0x140/0x140 [ 90.767016][ T1824] kernel_sendpage+0x245/0x2c0 [ 90.771793][ T1824] sock_sendpage+0x86/0xb0 [ 90.776221][ T1824] pipe_to_sendpage+0x226/0x320 [ 90.781100][ T1824] ? sock_fasync+0x100/0x100 [ 90.785707][ T1824] ? generic_splice_sendpage+0x180/0x180 [ 90.791348][ T1824] ? __kasan_check_read+0x11/0x20 [ 90.796380][ T1824] ? page_cache_pipe_buf_confirm+0x145/0x250 [ 90.802371][ T1824] __splice_from_pipe+0x343/0x8d0 [ 90.807402][ T1824] ? generic_splice_sendpage+0x180/0x180 [ 90.813049][ T1824] generic_splice_sendpage+0x110/0x180 [ 90.818520][ T1824] ? iter_file_splice_write+0xce0/0xce0 [ 90.824074][ T1824] ? __kasan_check_read+0x11/0x20 [ 90.829106][ T1824] ? fsnotify_perm+0x269/0x5b0 [ 90.833877][ T1824] ? iter_file_splice_write+0xce0/0xce0 [ 90.839445][ T1824] direct_splice_actor+0xe9/0x120 [ 90.844476][ T1824] splice_direct_to_actor+0x4d8/0xb40 [ 90.849854][ T1824] ? do_splice_direct+0x2d0/0x2d0 [ 90.854892][ T1824] ? pipe_to_sendpage+0x320/0x320 [ 90.859923][ T1824] ? security_file_permission+0x83/0xa0 [ 90.865496][ T1824] ? rw_verify_area+0xa7/0x1c0 [ 90.870267][ T1824] do_splice_direct+0x1c2/0x2d0 [ 90.875137][ T1824] ? splice_direct_to_actor+0xb40/0xb40 [ 90.880696][ T1824] ? file_start_write+0x151/0x1c0 [ 90.885733][ T1824] do_sendfile+0x515/0xe20 [ 90.890162][ T1824] ? irqentry_exit_cond_resched+0x29/0x30 [ 90.895889][ T1824] ? do_preadv+0x390/0x390 [ 90.900317][ T1824] ? fput_many+0x15a/0x1a0 [ 90.904748][ T1824] ? fput+0x1a/0x20 [ 90.908569][ T1824] __x64_sys_sendfile64+0x199/0x1f0 [ 90.913782][ T1824] ? __ia32_sys_sendfile+0x190/0x190 [ 90.919080][ T1824] ? __kasan_check_write+0x14/0x20 [ 90.924221][ T1824] ? switch_fpu_return+0x15d/0x2c0 [ 90.929363][ T1824] x64_sys_call+0x88d/0x9a0 [ 90.933891][ T1824] do_syscall_64+0x4c/0xa0 [ 90.938343][ T1824] ? clear_bhb_loop+0x50/0xa0 [ 90.943034][ T1824] ? clear_bhb_loop+0x50/0xa0 [ 90.947723][ T1824] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.953640][ T1824] RIP: 0033:0x7f8796c00b19 [ 90.958067][ T1824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.977707][ T1824] RSP: 002b:00007f8795616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 90.986156][ T1824] RAX: ffffffffffffffda RBX: 00007f8796e87180 RCX: 00007f8796c00b19 [ 90.994136][ T1824] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000a [ 91.002258][ T1824] RBP: 00007f8795616090 R08: 0000000000000000 R09: 0000000000000000 [ 91.010238][ T1824] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000002 [ 91.018216][ T1824] R13: 00007f8796e87218 R14: 00007f8796e87180 R15: 00007fff4814e188 [ 91.026208][ T1824] [ 91.029783][ T1824] syz.0.451: vmalloc error: size 4480, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 91.043843][ T1824] CPU: 1 PID: 1824 Comm: syz.0.451 Not tainted syzkaller #0 [ 91.051155][ T1824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.061224][ T1824] Call Trace: [ 91.064515][ T1824] [ 91.067462][ T1824] __dump_stack+0x21/0x30 [ 91.071809][ T1824] dump_stack_lvl+0x110/0x170 [ 91.076596][ T1824] ? show_regs_print_info+0x20/0x20 [ 91.081815][ T1824] dump_stack+0x15/0x20 [ 91.085986][ T1824] warn_alloc+0x1dc/0x200 [ 91.090328][ T1824] ? __should_failslab+0xa4/0xe0 [ 91.095277][ T1824] ? zone_watermark_ok_safe+0x270/0x270 [ 91.100836][ T1824] ? kmem_cache_alloc_trace+0x119/0x270 [ 91.106392][ T1824] ? __get_vm_area_node+0x11d/0x350 [ 91.111607][ T1824] ? __get_vm_area_node+0x33e/0x350 [ 91.116840][ T1824] __vmalloc_node_range+0x15e/0xad0 [ 91.122053][ T1824] ? netlink_sendmsg+0x5a0/0xb80 [ 91.127001][ T1824] vmalloc+0x78/0x90 [ 91.130905][ T1824] ? netlink_sendmsg+0x5a0/0xb80 [ 91.135856][ T1824] netlink_sendmsg+0x5a0/0xb80 [ 91.140641][ T1824] ? netlink_getsockopt+0x530/0x530 [ 91.145857][ T1824] ? security_socket_sendmsg+0x82/0xa0 [ 91.151325][ T1824] ? netlink_getsockopt+0x530/0x530 [ 91.156539][ T1824] kernel_sendmsg+0x23e/0x350 [ 91.161228][ T1824] ? sock_sendmsg+0x330/0x330 [ 91.165921][ T1824] sock_no_sendpage+0x117/0x190 [ 91.170780][ T1824] ? __receive_sock+0x140/0x140 [ 91.175648][ T1824] kernel_sendpage+0x245/0x2c0 [ 91.180420][ T1824] sock_sendpage+0x86/0xb0 [ 91.184843][ T1824] pipe_to_sendpage+0x226/0x320 [ 91.189707][ T1824] ? sock_fasync+0x100/0x100 [ 91.194310][ T1824] ? generic_splice_sendpage+0x180/0x180 [ 91.199956][ T1824] ? __kasan_check_read+0x11/0x20 [ 91.204994][ T1824] ? page_cache_pipe_buf_confirm+0x145/0x250 [ 91.211011][ T1824] __splice_from_pipe+0x343/0x8d0 [ 91.216049][ T1824] ? generic_splice_sendpage+0x180/0x180 [ 91.221695][ T1824] generic_splice_sendpage+0x110/0x180 [ 91.227161][ T1824] ? iter_file_splice_write+0xce0/0xce0 [ 91.232727][ T1824] ? __kasan_check_read+0x11/0x20 [ 91.237777][ T1824] ? fsnotify_perm+0x269/0x5b0 [ 91.242569][ T1824] ? iter_file_splice_write+0xce0/0xce0 [ 91.248129][ T1824] direct_splice_actor+0xe9/0x120 [ 91.253170][ T1824] splice_direct_to_actor+0x4d8/0xb40 [ 91.258663][ T1824] ? do_splice_direct+0x2d0/0x2d0 [ 91.263703][ T1824] ? pipe_to_sendpage+0x320/0x320 [ 91.268741][ T1824] ? security_file_permission+0x83/0xa0 [ 91.274313][ T1824] ? rw_verify_area+0xa7/0x1c0 [ 91.279103][ T1824] do_splice_direct+0x1c2/0x2d0 [ 91.283981][ T1824] ? splice_direct_to_actor+0xb40/0xb40 [ 91.289554][ T1824] ? file_start_write+0x151/0x1c0 [ 91.294600][ T1824] do_sendfile+0x515/0xe20 [ 91.299059][ T1824] ? irqentry_exit_cond_resched+0x29/0x30 [ 91.304796][ T1824] ? do_preadv+0x390/0x390 [ 91.309240][ T1824] ? fput_many+0x15a/0x1a0 [ 91.313673][ T1824] ? fput+0x1a/0x20 [ 91.317496][ T1824] __x64_sys_sendfile64+0x199/0x1f0 [ 91.322883][ T1824] ? __ia32_sys_sendfile+0x190/0x190 [ 91.328178][ T1824] ? __kasan_check_write+0x14/0x20 [ 91.333307][ T1824] ? switch_fpu_return+0x15d/0x2c0 [ 91.338433][ T1824] x64_sys_call+0x88d/0x9a0 [ 91.342944][ T1824] do_syscall_64+0x4c/0xa0 [ 91.347380][ T1824] ? clear_bhb_loop+0x50/0xa0 [ 91.352074][ T1824] ? clear_bhb_loop+0x50/0xa0 [ 91.356763][ T1824] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.362693][ T1824] RIP: 0033:0x7f8796c00b19 [ 91.367127][ T1824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.386745][ T1824] RSP: 002b:00007f8795616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 91.395191][ T1824] RAX: ffffffffffffffda RBX: 00007f8796e87180 RCX: 00007f8796c00b19 [ 91.403176][ T1824] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000a [ 91.411162][ T1824] RBP: 00007f8795616090 R08: 0000000000000000 R09: 0000000000000000 [ 91.419227][ T1824] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000002 [ 91.427229][ T1824] R13: 00007f8796e87218 R14: 00007f8796e87180 R15: 00007fff4814e188 [ 91.435213][ T1824] [ 91.438640][ T1824] Mem-Info: [ 91.442110][ T1824] active_anon:52 inactive_anon:8595 isolated_anon:0 [ 91.442110][ T1824] active_file:5597 inactive_file:12443 isolated_file:0 [ 91.442110][ T1824] unevictable:0 dirty:141 writeback:0 [ 91.442110][ T1824] slab_reclaimable:9011 slab_unreclaimable:74741 [ 91.442110][ T1824] mapped:30080 shmem:229 pagetables:837 bounce:0 [ 91.442110][ T1824] kernel_misc_reclaimable:0 [ 91.442110][ T1824] free:1537754 free_pcp:22679 free_cma:0 [ 91.483729][ T1824] Node 0 active_anon:208kB inactive_anon:34380kB active_file:22388kB inactive_file:49772kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120320kB dirty:564kB writeback:0kB shmem:916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5084kB pagetables:3348kB all_unreclaimable? no [ 91.514329][ T1824] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982724kB mlocked:0kB bounce:0kB free_pcp:3952kB local_pcp:3896kB free_cma:0kB [ 91.541737][ T1824] lowmem_reserve[]: 0 3941 3941 [ 91.546733][ T1824] Normal free:3172244kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:208kB inactive_anon:34380kB active_file:22388kB inactive_file:49772kB unevictable:0kB writepending:612kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:86748kB local_pcp:51604kB free_cma:0kB [ 91.575936][ T1824] lowmem_reserve[]: 0 0 0 [ 91.580517][ T1824] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 91.596501][ T1824] Normal: 2513*4kB (UME) 262*8kB (UME) 54*16kB (UME) 306*32kB (UME) 124*64kB (UM) 57*128kB (UME) 15*256kB (UM) 4*512kB (U) 1*1024kB (U) 1*2048kB (M) 763*4096kB (UM) = 3172244kB [ 91.614514][ T1824] 18269 total pagecache pages [ 91.619236][ T1824] 0 pages in swap cache [ 91.623444][ T1824] Swap cache stats: add 0, delete 0, find 0/0 [ 91.629651][ T1824] Free swap = 124996kB [ 91.633891][ T1824] Total swap = 124996kB [ 91.638221][ T1824] 2097051 pages RAM [ 91.642106][ T1824] 0 pages HighMem/MovableOnly [ 91.646829][ T1824] 342346 pages reserved [ 91.651048][ T1824] 0 pages cma reserved [ 91.792557][ T1821] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.454: missing EA_INODE flag [ 91.804323][ T1267] lenovo 0003:17EF:6047.0008: Fn-lock setting failed: -71 [ 91.829964][ T1267] lenovo 0003:17EF:6047.0008: Sensitivity setting failed: -71 [ 91.840100][ T1821] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.454: error while reading EA inode 12 err=-117 [ 91.852695][ T1830] set_capacity_and_notify: 2 callbacks suppressed [ 91.852715][ T1830] loop5: detected capacity change from 0 to 512 [ 91.884703][ T1267] usb 7-1: USB disconnect, device number 5 [ 91.892125][ T1828] loop6: detected capacity change from 0 to 8192 [ 91.897094][ T1821] EXT4-fs (loop4): 1 orphan inode deleted [ 91.906106][ T1821] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 91.923319][ T1831] fido_id[1831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 91.960844][ T1830] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 92.880499][ T424] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 93.063428][ T880] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 93.174673][ T1847] ip_tables: iptables: counters copy to user failed while replacing table [ 93.270096][ T424] usb 1-1: Using ep0 maxpacket: 16 [ 93.400465][ T424] usb 1-1: config 1 interface 0 has no altsetting 0 [ 93.600760][ T424] usb 1-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.40 [ 93.652416][ T424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.701846][ T1853] 9pnet: Insufficient options for proto=fd [ 93.793716][ T424] usb 1-1: Product: syz [ 93.932036][ T424] usb 1-1: Manufacturer: 蚒ڀꛌ齫髌䑣廑ꏿ朁噔揾騯犑鯰ש⟪҄ꯣ⥬㛍ﵢ摜Ҙ᯽鉾世揌瘜꼿ᦴ鼤ᱸᐟ搽ă瓴歾쑀転蹯댛⠄钊쐎➒ΨᲪ䊒刡佻Χ吋䀱頡䍀漮爌冎ͪ聧別戴炉鐓㞣᳿浿掣╭傝퐇璣簬⁐䐚澓ힵⰑ [ 93.964303][ T1853] loop7: detected capacity change from 0 to 512 [ 93.992284][ T1853] EXT4-fs (loop7): Ignoring removed oldalloc option [ 93.999983][ T30] audit: type=1400 audit(1793848230.363:431): avc: denied { connect } for pid=1852 comm="syz.7.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.040312][ T424] usb 1-1: SerialNumber: syz [ 94.084886][ T1853] EXT4-fs (loop7): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 94.126827][ T1853] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.345261][ T1869] loop6: detected capacity change from 0 to 256 [ 94.381645][ T1869] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.496786][ T307] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 94.521290][ T1833] netlink: 'syz.0.457': attribute type 4 has an invalid length. [ 94.625590][ T1870] netlink: 'syz.0.457': attribute type 4 has an invalid length. [ 94.693100][ T1865] loop5: detected capacity change from 0 to 1024 [ 94.702730][ T1865] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 94.749957][ T307] usb 5-1: Using ep0 maxpacket: 32 [ 94.811429][ T30] audit: type=1400 audit(1793848231.253:432): avc: denied { write } for pid=1871 comm="syz.5.467" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.844028][ T1872] loop5: detected capacity change from 0 to 1024 [ 94.864206][ T1872] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,nodioread_nolock,i_version,nolazytime,noblock_validity,lazytime,errors=remount-ro,stripe=0x0000000000000005,grpquota,errors=continue,. Quota mode: writeback. [ 94.890123][ T424] usbhid 1-1:1.0: can't add hid device: -71 [ 94.896732][ T424] usbhid: probe of 1-1:1.0 failed with error -71 [ 94.907388][ T424] usb 1-1: USB disconnect, device number 11 [ 94.913462][ T307] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.925527][ T307] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 94.941220][ T307] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.947894][ T307] usb 5-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.00 [ 94.957010][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.965964][ T307] usb 5-1: config 0 descriptor?? [ 95.125571][ T1882] tipc: Started in network mode [ 95.130534][ T1882] tipc: Node identity , cluster identity 4711 [ 95.136653][ T1882] tipc: Failed to set node id, please configure manually [ 95.143914][ T1882] tipc: Enabling of bearer rejected, failed to enable media [ 95.174314][ T30] audit: type=1400 audit(1793848231.613:433): avc: denied { read } for pid=1877 comm="syz.6.468" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.252763][ T1899] loop0: detected capacity change from 0 to 4096 [ 95.431924][ T307] input: HID 04f2:0618 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F2:0618.000A/input/input33 [ 95.503903][ T1902] tipc: Enabling of bearer rejected, failed to enable media [ 95.514216][ T307] topseed 0003:04F2:0618.000A: input,hiddev96,hidraw0: USB HID v0.07 Device [HID 04f2:0618] on usb-dummy_hcd.4-1/input0 [ 95.562344][ T1907] loop0: detected capacity change from 0 to 512 [ 95.593591][ T1907] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 95.634029][ T909] usb 5-1: USB disconnect, device number 8 [ 95.843500][ T1911] loop5: detected capacity change from 0 to 128 [ 96.011500][ T1911] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.042142][ T1911] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.074818][ T1916] loop6: detected capacity change from 0 to 512 [ 96.093802][ T1911] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 96.102898][ T1911] syz.5.479 (pid 1911) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 96.144084][ T1916] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.174356][ T1919] xt_hashlimit: size too large, truncated to 1048576 [ 96.374047][ T30] audit: type=1400 audit(1793848232.793:434): avc: denied { set_context_mgr } for pid=1931 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 96.475841][ T880] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 96.620081][ T307] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 96.773272][ T1940] input: syz1 as /devices/virtual/input/input34 [ 96.815422][ T1943] input: syz1 as /devices/virtual/input/input35 [ 96.879934][ T307] usb 7-1: Using ep0 maxpacket: 8 [ 96.920981][ T1950] loop0: detected capacity change from 0 to 256 [ 96.952822][ T1950] exFAT-fs (loop0): failed to load upcase table [ 96.959376][ T1956] loop5: detected capacity change from 0 to 128 [ 96.966123][ T1950] exFAT-fs (loop0): failed to recognize exfat type [ 97.040013][ T307] usb 7-1: unable to get BOS descriptor or descriptor too short [ 97.140105][ T307] usb 7-1: config 252 has an invalid interface number: 50 but max is 0 [ 97.148718][ T307] usb 7-1: config 252 has no interface number 0 [ 97.172744][ T1964] loop4: detected capacity change from 0 to 128 [ 97.182738][ T1964] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.198606][ T1964] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.223247][ T288] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 97.232539][ T288] FAT-fs (loop4): Filesystem has been set read-only [ 97.264155][ T1958] loop0: detected capacity change from 0 to 40427 [ 97.280944][ T1966] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.300145][ T307] usb 7-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=5d.62 [ 97.307687][ T1958] F2FS-fs (loop0): invalid crc value [ 97.315222][ T307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.323684][ T307] usb 7-1: Product: syz [ 97.327974][ T307] usb 7-1: Manufacturer: syz [ 97.333016][ T307] usb 7-1: SerialNumber: syz [ 97.342254][ T1958] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 97.379964][ T60] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 97.390725][ T1958] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.430700][ T1958] attempt to access beyond end of device [ 97.430700][ T1958] loop0: rw=2049, want=49160, limit=40427 [ 97.449182][ T287] attempt to access beyond end of device [ 97.449182][ T287] loop0: rw=2049, want=45104, limit=40427 [ 97.502294][ T1972] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.509364][ T1972] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.517002][ T1972] device bridge_slave_0 entered promiscuous mode [ 97.530195][ T1972] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.537335][ T1972] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.545172][ T1972] device bridge_slave_1 entered promiscuous mode [ 97.608838][ T1972] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.615966][ T1972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.623328][ T1972] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.630399][ T1972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.638222][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 97.676712][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.685585][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.694338][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.703908][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.712879][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.731046][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.740256][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.750353][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.758018][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.075919][ T1972] device veth0_vlan entered promiscuous mode [ 98.089651][ T1972] device veth1_macvtap entered promiscuous mode [ 98.110759][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.120321][ T60] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.135058][ T60] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 98.148032][ T60] usb 6-1: config 0 interface 0 has no altsetting 0 [ 98.154716][ T60] usb 6-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.00 [ 98.158512][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.169446][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.174720][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.195981][ T60] usb 6-1: config 0 descriptor?? [ 98.305886][ T1982] loop0: detected capacity change from 0 to 8192 [ 98.332242][ T1982] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.433120][ T1989] netlink: 36 bytes leftover after parsing attributes in process `syz.7.503'. [ 98.576671][ T1993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.505'. [ 98.605089][ T1993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.505'. [ 98.963622][ T60] input: HID 04f2:0618 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:04F2:0618.000B/input/input36 [ 98.978356][ T1993] loop7: detected capacity change from 0 to 512 [ 99.024027][ T1993] EXT4-fs (loop7): Test dummy encryption mode enabled [ 99.031499][ T1993] EXT4-fs (loop7): Ignoring removed oldalloc option [ 99.043445][ T60] topseed 0003:04F2:0618.000B: input,hiddev96,hidraw0: USB HID v0.07 Device [HID 04f2:0618] on usb-dummy_hcd.5-1/input0 [ 99.057963][ T60] usb 6-1: USB disconnect, device number 7 [ 99.093201][ T1993] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 99.123722][ T1999] fido_id[1999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 99.224601][ T2008] netlink: 8 bytes leftover after parsing attributes in process `syz.7.509'. [ 99.257533][ T2008] netlink: 8 bytes leftover after parsing attributes in process `syz.7.509'. [ 99.350849][ T2016] loop6: detected capacity change from 0 to 512 [ 99.359466][ T2008] loop7: detected capacity change from 0 to 512 [ 99.384353][ T2016] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 99.393064][ T2016] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.513: attempt to clear invalid blocks 2 len 1 [ 99.407147][ T2016] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 99.422122][ T307] usb 7-1: Found UVC 0.00 device syz (0408:4033) [ 99.428720][ T307] usb 7-1: No valid video chain found. [ 99.440298][ T2016] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.513: invalid indirect mapped block 1819239214 (level 0) [ 99.456667][ T307] usb 7-1: USB disconnect, device number 6 [ 99.470357][ T2016] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.513: invalid indirect mapped block 1819239214 (level 1) [ 99.494215][ T30] audit: type=1400 audit(1793848235.933:435): avc: denied { block_suspend } for pid=2018 comm="syz.8.514" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.504160][ T2016] EXT4-fs (loop6): 1 truncate cleaned up [ 99.522280][ T2016] EXT4-fs (loop6): mounted filesystem without journal. Opts: noinit_itable,i_version,barrier,nodelalloc,jqfmt=vfsv0,usrjquota=.obj_user=aioÂðĽ�tÜÈ [ 99.522280][ T2016] �,errors=continue. Quota mode: writeback. [ 99.540043][ T39] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 99.555420][ T2016] EXT4-fs (loop6): shut down requested (2) [ 99.561699][ T2016] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 99.570923][ T2016] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 99.579952][ T2008] EXT4-fs (loop7): Test dummy encryption mode enabled [ 99.586752][ T2008] EXT4-fs (loop7): Ignoring removed oldalloc option [ 99.612457][ T2008] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 99.627649][ T2016] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=16 [ 99.636945][ T2016] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 99.646500][ T30] audit: type=1400 audit(1793848236.083:436): avc: denied { mounton } for pid=2015 comm="syz.6.513" path="/84/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.719469][ T2027] loop5: detected capacity change from 0 to 256 [ 99.781634][ T2027] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.810824][ T2016] overlayfs: './file2' not a directory [ 99.896611][ T2028] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 99.910044][ T39] usb 1-1: config 127 has an invalid interface number: 57 but max is 0 [ 99.954552][ T39] usb 1-1: config 127 has no interface number 0 [ 100.005492][ T39] usb 1-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 100.408172][ T2039] loop7: detected capacity change from 0 to 8192 [ 100.416676][ T39] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 100.614830][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.635894][ T2039] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.842487][ T39] usb 1-1: Product: syz [ 101.013949][ T39] usb 1-1: Manufacturer: syz [ 101.018602][ T39] usb 1-1: SerialNumber: syz [ 101.059987][ T2012] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 101.071952][ T2041] EXT4-fs (loop5): Ignoring removed oldalloc option [ 101.104093][ T2041] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 101.128312][ T2041] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.314119][ T39] asix 1-1:127.57: Interface 57 is not authorized for usage [ 101.349043][ T2052] netlink: 36 bytes leftover after parsing attributes in process `syz.7.523'. [ 103.048421][ T424] usb 1-1: USB disconnect, device number 12 [ 105.299571][ T2066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.527'. [ 105.328403][ T2066] device vlan2 entered promiscuous mode [ 105.334440][ T2066] device dummy0 entered promiscuous mode [ 105.354476][ T2068] tipc: Started in network mode [ 105.368204][ T2068] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 105.377404][ T2068] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 105.385880][ T2068] tipc: Enabled bearer , priority 10 [ 105.590063][ T424] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 105.598182][ T307] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 105.610845][ T2097] tipc: Started in network mode [ 105.615856][ T2097] tipc: Node identity 4, cluster identity 4711 [ 105.622261][ T2097] tipc: Node number set to 4 [ 105.628404][ T2097] tipc: Enabled bearer , priority 0 [ 105.700940][ T2102] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.829937][ T424] usb 1-1: Using ep0 maxpacket: 8 [ 105.840017][ T307] usb 9-1: Using ep0 maxpacket: 32 [ 105.923166][ T2112] ip_tables: iptables: counters copy to user failed while replacing table [ 105.944986][ T30] audit: type=1400 audit(1793848242.383:437): avc: denied { nlmsg_read } for pid=2113 comm="syz.7.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.960279][ T307] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.976368][ T307] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 105.989545][ T307] usb 9-1: config 0 interface 0 has no altsetting 0 [ 105.996340][ T424] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.004700][ T307] usb 9-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.00 [ 106.013884][ T307] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.022940][ T307] usb 9-1: config 0 descriptor?? [ 106.038260][ T2118] set_capacity_and_notify: 1 callbacks suppressed [ 106.038272][ T2118] loop6: detected capacity change from 0 to 512 [ 106.089981][ T424] usb 1-1: config 252 has an invalid interface number: 50 but max is 0 [ 106.098439][ T424] usb 1-1: config 252 has no interface number 0 [ 106.112828][ T2118] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 106.120992][ T2118] System zones: 1-12 [ 106.126314][ T2118] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.547: missing EA_INODE flag [ 106.138515][ T2118] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.547: error while reading EA inode 12 err=-117 [ 106.151119][ T2118] EXT4-fs (loop6): 1 orphan inode deleted [ 106.156863][ T2118] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 106.176127][ T30] audit: type=1400 audit(1793848242.613:438): avc: denied { append } for pid=2117 comm="syz.6.547" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.178593][ T2118] fscrypt (loop6, inode 15): Reserved bits set in encryption policy [ 106.280023][ T424] usb 1-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=5d.62 [ 106.289203][ T30] audit: type=1400 audit(1793848242.723:439): avc: denied { remount } for pid=2126 comm="syz.6.550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 106.309552][ T424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.317653][ T424] usb 1-1: Product: syz [ 106.322068][ T424] usb 1-1: Manufacturer: syz [ 106.326731][ T424] usb 1-1: SerialNumber: syz [ 106.391771][ T2129] FAULT_INJECTION: forcing a failure. [ 106.391771][ T2129] name failslab, interval 1, probability 0, space 0, times 0 [ 106.404500][ T2129] CPU: 1 PID: 2129 Comm: syz.6.551 Not tainted syzkaller #0 [ 106.411805][ T2129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.421859][ T2129] Call Trace: [ 106.425136][ T2129] [ 106.428067][ T2129] __dump_stack+0x21/0x30 [ 106.432408][ T2129] dump_stack_lvl+0x110/0x170 [ 106.437090][ T2129] ? show_regs_print_info+0x20/0x20 [ 106.442306][ T2129] ? 0xffffffffa002a000 [ 106.446485][ T2129] dump_stack+0x15/0x20 [ 106.450683][ T2129] should_fail+0x3ab/0x500 [ 106.455124][ T2129] __should_failslab+0xa4/0xe0 [ 106.459918][ T2129] should_failslab+0x9/0x20 [ 106.464453][ T2129] slab_pre_alloc_hook+0x39/0xd0 [ 106.469410][ T2129] ? fuse_get_req+0x446/0xb20 [ 106.474098][ T2129] kmem_cache_alloc+0x44/0x260 [ 106.478892][ T2129] fuse_get_req+0x446/0xb20 [ 106.483416][ T2129] ? fuse_simple_request+0x1710/0x1710 [ 106.488913][ T2129] ? __kasan_kmalloc+0xe6/0x100 [ 106.493796][ T2129] ? __kasan_kmalloc+0xd4/0x100 [ 106.498681][ T2129] ? kmem_cache_alloc_trace+0x119/0x270 [ 106.504286][ T2129] ? fuse_alloc_forget+0x46/0x50 [ 106.509388][ T2129] ? fuse_lookup_name+0x1aa/0x910 [ 106.514458][ T2129] ? fuse_lookup+0x3d3/0x1890 [ 106.519170][ T2129] ? __lookup_slow+0x2b8/0x410 [ 106.523965][ T2129] ? lookup_slow+0x57/0x70 [ 106.528412][ T2129] ? walk_component+0x326/0x460 [ 106.533321][ T2129] ? link_path_walk+0x688/0xde0 [ 106.538191][ T2129] ? path_openat+0x282/0x2f80 [ 106.542890][ T2129] ? do_filp_open+0x1df/0x400 [ 106.547670][ T2129] ? do_sys_openat2+0x15e/0x7f0 [ 106.552540][ T2129] ? x64_sys_call+0x219/0x9a0 [ 106.557254][ T2129] ? do_syscall_64+0x4c/0xa0 [ 106.561863][ T2129] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.567952][ T2129] fuse_simple_request+0x24a/0x1710 [ 106.573194][ T2129] ? fuse_put_request+0x2c0/0x2c0 [ 106.578244][ T2129] ? kmem_cache_alloc_trace+0x119/0x270 [ 106.583805][ T2129] ? fuse_alloc_forget+0x46/0x50 [ 106.588760][ T2129] fuse_lookup_name+0x2fb/0x910 [ 106.593631][ T2129] ? fuse_invalid_attr+0x110/0x110 [ 106.598769][ T2129] ? __kasan_check_write+0x14/0x20 [ 106.603898][ T2129] ? mutex_lock+0x9b/0x1c0 [ 106.608335][ T2129] ? wait_for_completion_killable_timeout+0x10/0x10 [ 106.614943][ T2129] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 106.620769][ T2129] fuse_lookup+0x3d3/0x1890 [ 106.625286][ T2129] ? __kasan_kmalloc+0xe6/0x100 [ 106.630153][ T2129] ? kmem_cache_alloc_trace+0x119/0x270 [ 106.635720][ T2129] ? __d_alloc+0x45c/0x690 [ 106.640156][ T2129] ? __lookup_slow+0x14c/0x410 [ 106.644933][ T2129] ? lookup_slow+0x57/0x70 [ 106.649362][ T2129] ? path_openat+0x282/0x2f80 [ 106.654053][ T2129] ? do_filp_open+0x1df/0x400 [ 106.658831][ T2129] ? fuse_perm_getattr+0x60/0x60 [ 106.663793][ T2129] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.669889][ T2129] ? d_alloc_parallel+0x121c/0x1380 [ 106.675127][ T2129] ? d_hash_and_lookup+0x1f0/0x1f0 [ 106.680259][ T2129] ? __kasan_check_write+0x14/0x20 [ 106.685397][ T2129] ? rwsem_read_trylock+0x2af/0x640 [ 106.690607][ T2129] ? lockref_get_not_dead+0xe6/0x1c0 [ 106.695903][ T2129] ? downgrade_write+0x440/0x440 [ 106.700856][ T2129] __lookup_slow+0x2b8/0x410 [ 106.705460][ T2129] ? lookup_one_len+0x2d0/0x2d0 [ 106.710321][ T2129] ? down_read+0xab/0x100 [ 106.714771][ T2129] ? handle_dots+0xe10/0xe10 [ 106.719388][ T2129] lookup_slow+0x57/0x70 [ 106.723663][ T2129] walk_component+0x326/0x460 [ 106.728369][ T2129] link_path_walk+0x688/0xde0 [ 106.733090][ T2129] ? handle_lookup_down+0x130/0x130 [ 106.738310][ T2129] path_openat+0x282/0x2f80 [ 106.742830][ T2129] ? __kasan_slab_alloc+0xc9/0xe0 [ 106.747866][ T2129] ? __kasan_slab_alloc+0xb7/0xe0 [ 106.752900][ T2129] ? slab_post_alloc_hook+0x4f/0x2b0 [ 106.758202][ T2129] ? do_sys_openat2+0xeb/0x7f0 [ 106.762974][ T2129] ? __x64_sys_openat+0x136/0x160 [ 106.768017][ T2129] ? x64_sys_call+0x219/0x9a0 [ 106.772719][ T2129] ? do_syscall_64+0x4c/0xa0 [ 106.777348][ T2129] ? do_filp_open+0x400/0x400 [ 106.782050][ T2129] do_filp_open+0x1df/0x400 [ 106.786572][ T2129] ? vfs_tmpfile+0x2d0/0x2d0 [ 106.791186][ T2129] do_sys_openat2+0x15e/0x7f0 [ 106.795882][ T2129] ? __se_sys_futex+0x135/0x330 [ 106.800768][ T2129] ? do_sys_open+0xe0/0xe0 [ 106.805200][ T2129] ? __x64_sys_futex+0x100/0x100 [ 106.810161][ T2129] ? ksys_write+0x1fa/0x260 [ 106.814702][ T2129] __x64_sys_openat+0x136/0x160 [ 106.819565][ T2129] x64_sys_call+0x219/0x9a0 [ 106.824078][ T2129] do_syscall_64+0x4c/0xa0 [ 106.828530][ T2129] ? clear_bhb_loop+0x50/0xa0 [ 106.833341][ T2129] ? clear_bhb_loop+0x50/0xa0 [ 106.838049][ T2129] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.843974][ T2129] RIP: 0033:0x7ffa2c67fb19 [ 106.848414][ T2129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.868041][ T2129] RSP: 002b:00007ffa2b0d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.876487][ T2129] RAX: ffffffffffffffda RBX: 00007ffa2c905fa0 RCX: 00007ffa2c67fb19 [ 106.884564][ T2129] RDX: 0000000000000002 RSI: 000020000000a340 RDI: ffffffffffffff9c [ 106.892553][ T2129] RBP: 00007ffa2c717b70 R08: 0000000000000000 R09: 0000000000000000 [ 106.900543][ T2129] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 106.908536][ T2129] R13: 00007ffa2c906038 R14: 00007ffa2c905fa0 R15: 00007ffdefb59738 [ 106.916529][ T2129] [ 106.920246][ T645] tipc: Node number set to 1 [ 106.988678][ T307] input: HID 04f2:0618 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:04F2:0618.000C/input/input37 [ 107.079830][ T307] topseed 0003:04F2:0618.000C: input,hiddev96,hidraw0: USB HID v0.07 Device [HID 04f2:0618] on usb-dummy_hcd.8-1/input0 [ 107.181289][ T307] usb 9-1: USB disconnect, device number 2 [ 107.309946][ T39] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 107.377277][ T2148] fido_id[2148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 107.569954][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 107.690006][ T39] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 107.698467][ T39] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 107.707669][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 107.716872][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.726681][ T39] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.736506][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.749610][ T39] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 107.758754][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.767814][ T39] usb 7-1: config 0 descriptor?? [ 107.836461][ T2165] loop8: detected capacity change from 0 to 512 [ 107.840694][ T2167] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 107.865566][ T2169] FAULT_INJECTION: forcing a failure. [ 107.865566][ T2169] name failslab, interval 1, probability 5, space 0, times 100 [ 107.880493][ T2169] CPU: 1 PID: 2169 Comm: syz.7.565 Not tainted syzkaller #0 [ 107.887841][ T2169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.898113][ T2169] Call Trace: [ 107.901416][ T2169] [ 107.904366][ T2169] __dump_stack+0x21/0x30 [ 107.908715][ T2169] dump_stack_lvl+0x110/0x170 [ 107.913406][ T2169] ? show_regs_print_info+0x20/0x20 [ 107.918624][ T2169] ? prandom_u32+0x24d/0x290 [ 107.923266][ T2169] dump_stack+0x15/0x20 [ 107.927437][ T2169] should_fail+0x3ab/0x500 [ 107.931995][ T2169] __should_failslab+0xa4/0xe0 [ 107.936864][ T2169] should_failslab+0x9/0x20 [ 107.941380][ T2169] slab_pre_alloc_hook+0x39/0xd0 [ 107.946342][ T2169] ? getname_flags+0xba/0x510 [ 107.951036][ T2169] kmem_cache_alloc+0x44/0x260 [ 107.955820][ T2169] getname_flags+0xba/0x510 [ 107.960432][ T2169] ? __kasan_check_write+0x14/0x20 [ 107.965563][ T2169] ? switch_fpu_return+0x15d/0x2c0 [ 107.970690][ T2169] __x64_sys_mkdirat+0x7c/0xa0 [ 107.975465][ T2169] x64_sys_call+0x37e/0x9a0 [ 107.979980][ T2169] do_syscall_64+0x4c/0xa0 [ 107.984437][ T2169] ? clear_bhb_loop+0x50/0xa0 [ 107.989146][ T2169] ? clear_bhb_loop+0x50/0xa0 [ 107.993841][ T2169] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.999747][ T2169] RIP: 0033:0x7f639945cb19 [ 108.004178][ T2169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.023799][ T2169] RSP: 002b:00007f6397eb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 108.032228][ T2169] RAX: ffffffffffffffda RBX: 00007f63996e2fa0 RCX: 00007f639945cb19 [ 108.040218][ T2169] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 108.048353][ T2169] RBP: 00007f63994f4b70 R08: 0000000000000000 R09: 0000000000000000 [ 108.056367][ T2169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.064446][ T2169] R13: 00007f63996e3038 R14: 00007f63996e2fa0 R15: 00007ffd74348c38 [ 108.072437][ T2169] [ 108.091609][ T39] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 108.101554][ T2170] loop7: detected capacity change from 0 to 4096 [ 108.111145][ T2165] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.127185][ T39] usb 7-1: USB disconnect, device number 7 [ 108.134413][ T2165] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.160415][ T2170] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.174726][ T2165] 9pnet_virtio: no channels available for device syz [ 108.181047][ T39] usblp0: removed [ 108.205339][ T2169] FAULT_INJECTION: forcing a failure. [ 108.205339][ T2169] name failslab, interval 1, probability 5, space 0, times 99 [ 108.218195][ T2169] CPU: 0 PID: 2169 Comm: syz.7.565 Not tainted syzkaller #0 [ 108.225523][ T2169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.235968][ T2169] Call Trace: [ 108.239292][ T2169] [ 108.242285][ T2169] __dump_stack+0x21/0x30 [ 108.246663][ T2169] dump_stack_lvl+0x110/0x170 [ 108.251374][ T2169] ? show_regs_print_info+0x20/0x20 [ 108.256695][ T2169] ? prandom_u32+0x24d/0x290 [ 108.261327][ T2169] dump_stack+0x15/0x20 [ 108.265518][ T2169] should_fail+0x3ab/0x500 [ 108.269972][ T2169] __should_failslab+0xa4/0xe0 [ 108.274806][ T2169] should_failslab+0x9/0x20 [ 108.279360][ T2169] slab_pre_alloc_hook+0x39/0xd0 [ 108.284341][ T2169] kmem_cache_alloc_trace+0x48/0x270 [ 108.289666][ T2169] ? blk_alloc_queue_stats+0x4c/0x100 [ 108.295079][ T2169] blk_alloc_queue_stats+0x4c/0x100 [ 108.300427][ T2169] blk_alloc_queue+0xef/0x550 [ 108.305181][ T2169] ? __blk_alloc_disk+0xf/0x60 [ 108.309986][ T2169] __blk_alloc_disk+0x17/0x60 [ 108.314701][ T2169] dm_create+0x4d6/0xd20 [ 108.318981][ T2169] dev_create+0x12e/0x2c0 [ 108.323376][ T2169] ? list_devices+0x820/0x820 [ 108.328097][ T2169] ? __kasan_check_write+0x14/0x20 [ 108.333249][ T2169] ? _copy_from_user+0x95/0xd0 [ 108.338050][ T2169] dm_ctl_ioctl+0x8ee/0xca0 [ 108.342600][ T2169] ? list_devices+0x820/0x820 [ 108.347326][ T2169] ? dm_poll+0x120/0x120 [ 108.351617][ T2169] ? security_file_ioctl+0x84/0xa0 [ 108.356956][ T2169] ? dm_poll+0x120/0x120 [ 108.361401][ T2169] __se_sys_ioctl+0x121/0x1a0 [ 108.363897][ T30] audit: type=1400 audit(1793848244.753:440): avc: denied { setopt } for pid=2176 comm="syz.5.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.366152][ T2169] __x64_sys_ioctl+0x7b/0x90 [ 108.390869][ T2169] x64_sys_call+0x2f/0x9a0 [ 108.395324][ T2169] do_syscall_64+0x4c/0xa0 [ 108.399783][ T2169] ? clear_bhb_loop+0x50/0xa0 [ 108.404489][ T2169] ? clear_bhb_loop+0x50/0xa0 [ 108.409304][ T2169] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.415266][ T2169] RIP: 0033:0x7f639945cb19 [ 108.419942][ T2169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.439580][ T2169] RSP: 002b:00007f6397eb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.448036][ T2169] RAX: ffffffffffffffda RBX: 00007f63996e2fa0 RCX: 00007f639945cb19 [ 108.456045][ T2169] RDX: 0000200000001640 RSI: 00000000c138fd03 RDI: 0000000000000008 [ 108.464101][ T2169] RBP: 00007f63994f4b70 R08: 0000000000000000 R09: 0000000000000000 [ 108.472107][ T2169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.480110][ T2169] R13: 00007f63996e3038 R14: 00007f63996e2fa0 R15: 00007ffd74348c38 [ 108.488130][ T2169] [ 108.580469][ T424] uvcvideo 1-1:252.50: Interface 50 is not authorized for usage [ 108.598762][ T424] usb 1-1: USB disconnect, device number 13 [ 108.672593][ T30] audit: type=1400 audit(1793848245.113:441): avc: denied { ioctl } for pid=2199 comm="syz.8.576" path="socket:[25673]" dev="sockfs" ino=25673 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.703754][ T2184] loop5: detected capacity change from 0 to 40427 [ 108.769987][ T39] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 108.795091][ T2184] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 108.811302][ T2184] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 108.819625][ T2184] F2FS-fs (loop5): Unrecognized mount option "age_extent_cache" or missing value [ 108.875436][ T30] audit: type=1400 audit(1793848245.313:442): avc: denied { read } for pid=2215 comm="syz.8.582" name="usbmon6" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.912112][ T30] audit: type=1400 audit(1793848245.343:443): avc: denied { open } for pid=2215 comm="syz.8.582" path="/dev/usbmon6" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.936675][ T30] audit: type=1400 audit(1793848245.343:444): avc: denied { ioctl } for pid=2215 comm="syz.8.582" path="/dev/usbmon6" dev="devtmpfs" ino=173 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.009969][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 109.028675][ T2227] FAULT_INJECTION: forcing a failure. [ 109.028675][ T2227] name failslab, interval 1, probability 5, space 0, times 98 [ 109.041816][ T2227] CPU: 1 PID: 2227 Comm: syz.8.587 Not tainted syzkaller #0 [ 109.049139][ T2227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.059223][ T2227] Call Trace: [ 109.062530][ T2227] [ 109.065481][ T2227] __dump_stack+0x21/0x30 [ 109.069846][ T2227] dump_stack_lvl+0x110/0x170 [ 109.074545][ T2227] ? show_regs_print_info+0x20/0x20 [ 109.079792][ T2227] dump_stack+0x15/0x20 [ 109.083973][ T2227] should_fail+0x3ab/0x500 [ 109.088421][ T2227] __should_failslab+0xa4/0xe0 [ 109.093216][ T2227] should_failslab+0x9/0x20 [ 109.097742][ T2227] slab_pre_alloc_hook+0x39/0xd0 [ 109.102710][ T2227] __kmalloc+0x6d/0x2c0 [ 109.106898][ T2227] ? kvmalloc_node+0x211/0x320 [ 109.111686][ T2227] kvmalloc_node+0x211/0x320 [ 109.116298][ T2227] ? security_sid_to_context_force+0x36/0x40 [ 109.122304][ T2227] ? vm_mmap+0xb0/0xb0 [ 109.126393][ T2227] ? selinux_inode_init_security+0x447/0x620 [ 109.132398][ T2227] simple_xattr_alloc+0x43/0xa0 [ 109.137272][ T2227] shmem_initxattrs+0x8d/0x1f0 [ 109.142064][ T2227] security_inode_init_security+0x249/0x380 [ 109.147986][ T2227] ? shmem_tmpfile+0x100/0x100 [ 109.152780][ T2227] ? security_dentry_create_files_as+0xc0/0xc0 [ 109.158999][ T2227] ? shmem_get_inode+0x60c/0x9d0 [ 109.163963][ T2227] shmem_symlink+0xd0/0x4d0 [ 109.168494][ T2227] vfs_symlink+0x29e/0x470 [ 109.172935][ T2227] do_symlinkat+0x24a/0x5d0 [ 109.177476][ T2227] __x64_sys_symlink+0x7e/0x90 [ 109.182285][ T2227] x64_sys_call+0x759/0x9a0 [ 109.186813][ T2227] do_syscall_64+0x4c/0xa0 [ 109.191251][ T2227] ? clear_bhb_loop+0x50/0xa0 [ 109.195956][ T2227] ? clear_bhb_loop+0x50/0xa0 [ 109.200679][ T2227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.206702][ T2227] RIP: 0033:0x7fac4a90db19 [ 109.211149][ T2227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.230811][ T2227] RSP: 002b:00007fac49365028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 109.239270][ T2227] RAX: ffffffffffffffda RBX: 00007fac4ab93fa0 RCX: 00007fac4a90db19 [ 109.247272][ T2227] RDX: 0000000000000000 RSI: 0000200000000e40 RDI: 0000200000000e00 [ 109.255292][ T2227] RBP: 00007fac4a9a5b70 R08: 0000000000000000 R09: 0000000000000000 [ 109.263315][ T2227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.271322][ T2227] R13: 00007fac4ab94038 R14: 00007fac4ab93fa0 R15: 00007ffd707f84f8 [ 109.279332][ T2227] [ 109.359968][ T39] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 109.379922][ T39] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 109.388563][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 109.397816][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.407654][ T39] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.408892][ T2190] loop0: detected capacity change from 0 to 131072 [ 109.418010][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.437184][ T39] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 109.446275][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.455281][ T39] usb 7-1: config 0 descriptor?? [ 109.460135][ T2190] F2FS-fs (loop0): invalid crc value [ 109.467414][ T2190] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.503252][ T2190] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 109.510431][ T2190] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 109.721386][ T39] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 110.069957][ T30] audit: type=1400 audit(1793848246.503:445): avc: denied { read write } for pid=2145 comm="syz.6.557" name="lp0" dev="devtmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 110.119431][ T30] audit: type=1400 audit(1793848246.503:446): avc: denied { open } for pid=2145 comm="syz.6.557" path="/dev/usb/lp0" dev="devtmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 110.166585][ T2244] loop5: detected capacity change from 0 to 40427 [ 110.173234][ T2185] usblp0:failed reading printer status (-32) [ 110.190725][ T909] usb 7-1: USB disconnect, device number 8 [ 110.197586][ T2244] F2FS-fs (loop5): invalid crc value [ 110.208008][ T909] usblp0: removed [ 110.215073][ T2244] F2FS-fs (loop5): Found nat_bits in checkpoint [ 110.271507][ T2244] F2FS-fs (loop5): Start checkpoint disabled! [ 110.289964][ T2244] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 110.370650][ T368] attempt to access beyond end of device [ 110.370650][ T368] loop5: rw=2049, want=45104, limit=40427 [ 110.468646][ T2258] FAULT_INJECTION: forcing a failure. [ 110.468646][ T2258] name fail_futex, interval 1, probability 0, space 0, times 1 [ 110.483806][ T2260] FAULT_INJECTION: forcing a failure. [ 110.483806][ T2260] name failslab, interval 1, probability 5, space 0, times 100 [ 110.496721][ T2260] CPU: 0 PID: 2260 Comm: syz.0.599 Not tainted syzkaller #0 [ 110.504038][ T2260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.514125][ T2260] Call Trace: [ 110.517435][ T2260] [ 110.520389][ T2260] __dump_stack+0x21/0x30 [ 110.524752][ T2260] dump_stack_lvl+0x110/0x170 [ 110.529473][ T2260] ? show_regs_print_info+0x20/0x20 [ 110.534706][ T2260] ? prandom_u32+0x24d/0x290 [ 110.539323][ T2260] dump_stack+0x15/0x20 [ 110.543496][ T2260] should_fail+0x3ab/0x500 [ 110.547961][ T2260] __should_failslab+0xa4/0xe0 [ 110.552756][ T2260] should_failslab+0x9/0x20 [ 110.557284][ T2260] slab_pre_alloc_hook+0x39/0xd0 [ 110.562242][ T2260] ? xas_create+0xed7/0x1560 [ 110.566855][ T2260] kmem_cache_alloc+0x44/0x260 [ 110.571670][ T2260] xas_create+0xed7/0x1560 [ 110.576117][ T2260] xas_create_range+0x1ef/0x710 [ 110.580992][ T2260] ? xas_start+0x31d/0x3e0 [ 110.585449][ T2260] shmem_add_to_page_cache+0x750/0xc50 [ 110.590938][ T2260] ? put_page+0xb0/0xb0 [ 110.595113][ T2260] ? _raw_spin_lock_irqsave+0x130/0x130 [ 110.600685][ T2260] ? release_firmware_map_entry+0x190/0x190 [ 110.606616][ T2260] shmem_getpage_gfp+0x1404/0x2250 [ 110.611762][ T2260] shmem_write_begin+0xce/0x1b0 [ 110.616636][ T2260] generic_perform_write+0x2b7/0x690 [ 110.621948][ T2260] ? grab_cache_page_write_begin+0xb0/0xb0 [ 110.627792][ T2260] ? file_remove_privs+0x5c0/0x5c0 [ 110.632934][ T2260] ? rwsem_write_trylock+0x136/0x300 [ 110.638258][ T2260] ? clear_nonspinnable+0x60/0x60 [ 110.643312][ T2260] ? update_load_avg+0x442/0x1110 [ 110.648360][ T2260] __generic_file_write_iter+0x268/0x490 [ 110.654012][ T2260] ? generic_write_checks+0x3df/0x480 [ 110.659408][ T2260] generic_file_write_iter+0xa9/0x1d0 [ 110.664809][ T2260] vfs_write+0x831/0xfd0 [ 110.669175][ T2260] ? file_end_write+0x1b0/0x1b0 [ 110.674052][ T2260] ? __fget_files+0x2e1/0x340 [ 110.678748][ T2260] ? __fdget_pos+0x1f7/0x380 [ 110.683363][ T2260] ? ksys_write+0x70/0x260 [ 110.687807][ T2260] ksys_write+0x14a/0x260 [ 110.692163][ T2260] ? __ia32_sys_read+0x90/0x90 [ 110.696958][ T2260] ? debug_smp_processor_id+0x17/0x20 [ 110.702358][ T2260] __x64_sys_write+0x7b/0x90 [ 110.706975][ T2260] x64_sys_call+0x8ef/0x9a0 [ 110.711493][ T2260] do_syscall_64+0x4c/0xa0 [ 110.715928][ T2260] ? clear_bhb_loop+0x50/0xa0 [ 110.720622][ T2260] ? clear_bhb_loop+0x50/0xa0 [ 110.725327][ T2260] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.731255][ T2260] RIP: 0033:0x7f8796bc134e [ 110.735722][ T2260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.755357][ T2260] RSP: 002b:00007f8795657da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.763805][ T2260] RAX: ffffffffffffffda RBX: 00007f87956586c0 RCX: 00007f8796bc134e [ 110.771807][ T2260] RDX: 0000000000200000 RSI: 00007f878d238000 RDI: 0000000000000007 [ 110.779794][ T2260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.787782][ T2260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 110.795779][ T2260] R13: 00007f8795657ee0 R14: 00007f8795657ea0 R15: 00007f878d238000 [ 110.803778][ T2260] [ 110.806825][ T2258] CPU: 1 PID: 2258 Comm: syz.8.598 Not tainted syzkaller #0 [ 110.814153][ T2258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.824233][ T2258] Call Trace: [ 110.827542][ T2258] [ 110.827677][ T2260] loop0: detected capacity change from 0 to 4096 [ 110.830490][ T2258] __dump_stack+0x21/0x30 [ 110.830516][ T2258] dump_stack_lvl+0x110/0x170 [ 110.830533][ T2258] ? show_regs_print_info+0x20/0x20 [ 110.851096][ T2258] dump_stack+0x15/0x20 [ 110.855321][ T2258] should_fail+0x3ab/0x500 [ 110.859767][ T2258] get_futex_key+0x143/0xb60 [ 110.864380][ T2258] ? futex_wait_restart+0x250/0x250 [ 110.869592][ T2258] ? update_load_avg+0x442/0x1110 [ 110.874631][ T2258] futex_wake+0x133/0x8f0 [ 110.879006][ T2258] ? __kasan_check_write+0x14/0x20 [ 110.884135][ T2258] ? futex_wait+0x8f0/0x8f0 [ 110.888682][ T2258] do_futex+0xd8d/0x2800 [ 110.892935][ T2258] ? __schedule+0xbd7/0x14a0 [ 110.897535][ T2258] ? release_firmware_map_entry+0x190/0x190 [ 110.903443][ T2258] ? futex_exit_release+0x1e0/0x1e0 [ 110.908659][ T2258] ? plist_add+0x3e6/0x470 [ 110.913113][ T2258] ? __kasan_check_read+0x11/0x20 [ 110.918152][ T2258] ? plist_check_list+0x255/0x270 [ 110.923197][ T2258] ? __kasan_check_write+0x14/0x20 [ 110.928321][ T2258] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 110.933926][ T2258] ? _raw_spin_lock+0xf0/0xf0 [ 110.938614][ T2258] ? perf_lock_task_context+0x3fd/0x4c0 [ 110.944172][ T2258] ? __kasan_check_read+0x11/0x20 [ 110.949216][ T2258] ? perf_event_exit_event+0x4a0/0x4a0 [ 110.954792][ T2258] ? mutex_unlock+0x8f/0x230 [ 110.959412][ T2258] ? __kasan_check_write+0x14/0x20 [ 110.964559][ T2258] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 110.970050][ T2258] ? _raw_spin_lock+0xf0/0xf0 [ 110.974755][ T2258] ? __kasan_check_read+0x11/0x20 [ 110.979811][ T2258] ? perf_event_exit_task+0x867/0x870 [ 110.985206][ T2258] ? uprobe_free_utask+0x83/0x160 [ 110.990253][ T2258] mm_release+0x203/0x360 [ 110.994602][ T2258] ? exit_mm_release+0x30/0x30 [ 110.999379][ T2258] ? futex_exit_release+0x119/0x1e0 [ 111.004611][ T2258] exit_mm_release+0x25/0x30 [ 111.009220][ T2258] do_exit+0x644/0x29a0 [ 111.013391][ T2258] ? put_task_struct+0x90/0x90 [ 111.018161][ T2258] ? kstrtouint_from_user+0x1c4/0x220 [ 111.023550][ T2258] ? kstrtol_from_user+0x2a0/0x2a0 [ 111.028679][ T2258] ? __kasan_check_write+0x14/0x20 [ 111.033815][ T2258] ? _raw_spin_lock_irq+0x95/0xf0 [ 111.038854][ T2258] do_group_exit+0x149/0x310 [ 111.043457][ T2258] ? __kasan_check_write+0x14/0x20 [ 111.048584][ T2258] ? recalc_sigpending+0x1ac/0x230 [ 111.053710][ T2258] get_signal+0x64f/0x1430 [ 111.058146][ T2258] arch_do_signal_or_restart+0xe2/0x1100 [ 111.063787][ T2258] ? file_end_write+0x1b0/0x1b0 [ 111.068649][ T2258] ? __kasan_check_write+0x14/0x20 [ 111.073780][ T2258] ? mutex_unlock+0x8f/0x230 [ 111.078386][ T2258] ? get_sigframe_size+0x10/0x10 [ 111.083359][ T2258] ? __se_sys_futex+0x135/0x330 [ 111.088231][ T2258] ? __kasan_check_write+0x14/0x20 [ 111.093472][ T2258] ? __ia32_sys_read+0x90/0x90 [ 111.098302][ T2258] exit_to_user_mode_loop+0xa7/0xe0 [ 111.103548][ T2258] exit_to_user_mode_prepare+0x87/0xd0 [ 111.109036][ T2258] syscall_exit_to_user_mode+0x1a/0x30 [ 111.114511][ T2258] do_syscall_64+0x58/0xa0 [ 111.118941][ T2258] ? clear_bhb_loop+0x50/0xa0 [ 111.123665][ T2258] ? clear_bhb_loop+0x50/0xa0 [ 111.128359][ T2258] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.134265][ T2258] RIP: 0033:0x7fac4a90db19 [ 111.138700][ T2258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.158321][ T2258] RSP: 002b:00007fac493650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.166754][ T2258] RAX: fffffffffffffe00 RBX: 00007fac4ab93fa8 RCX: 00007fac4a90db19 [ 111.174746][ T2258] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fac4ab93fa8 [ 111.182731][ T2258] RBP: 00007fac4ab93fa0 R08: 0000000000000000 R09: 0000000000000000 [ 111.190717][ T2258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.198701][ T2258] R13: 00007fac4ab94038 R14: 00007ffd707f8410 R15: 00007ffd707f84f8 [ 111.206692][ T2258] [ 111.230812][ T2260] FAULT_INJECTION: forcing a failure. [ 111.230812][ T2260] name failslab, interval 1, probability 5, space 0, times 99 [ 111.248703][ T2260] CPU: 0 PID: 2260 Comm: syz.0.599 Not tainted syzkaller #0 [ 111.256072][ T2260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.266154][ T2260] Call Trace: [ 111.269452][ T2260] [ 111.272397][ T2260] __dump_stack+0x21/0x30 [ 111.276752][ T2260] dump_stack_lvl+0x110/0x170 [ 111.281450][ T2260] ? show_regs_print_info+0x20/0x20 [ 111.286668][ T2260] dump_stack+0x15/0x20 [ 111.290831][ T2260] should_fail+0x3ab/0x500 [ 111.295268][ T2260] __should_failslab+0xa4/0xe0 [ 111.300050][ T2260] should_failslab+0x9/0x20 [ 111.304586][ T2260] slab_pre_alloc_hook+0x39/0xd0 [ 111.309537][ T2260] ? getname_kernel+0x59/0x2e0 [ 111.314316][ T2260] kmem_cache_alloc+0x44/0x260 [ 111.319094][ T2260] getname_kernel+0x59/0x2e0 [ 111.323697][ T2260] kern_path+0x23/0x1b0 [ 111.327977][ T2260] blkdev_get_by_path+0xcd/0x2e0 [ 111.332940][ T2260] ? bd_finish_claiming+0x240/0x240 [ 111.338158][ T2260] ? ext4_mount+0x40/0x40 [ 111.342500][ T2260] mount_bdev+0x55/0x3c0 [ 111.346761][ T2260] ext4_mount+0x34/0x40 [ 111.350960][ T2260] legacy_get_tree+0xed/0x190 [ 111.355652][ T2260] ? ext4_errno_to_code+0x160/0x160 [ 111.360862][ T2260] vfs_get_tree+0x89/0x260 [ 111.365297][ T2260] do_new_mount+0x251/0xb40 [ 111.369823][ T2260] ? security_capable+0x87/0xb0 [ 111.375286][ T2260] path_mount+0x640/0xff0 [ 111.379647][ T2260] __se_sys_mount+0x320/0x390 [ 111.384361][ T2260] ? __x64_sys_mount+0xd0/0xd0 [ 111.389150][ T2260] __x64_sys_mount+0xbf/0xd0 [ 111.393773][ T2260] x64_sys_call+0x6bf/0x9a0 [ 111.398301][ T2260] do_syscall_64+0x4c/0xa0 [ 111.402733][ T2260] ? clear_bhb_loop+0x50/0xa0 [ 111.407606][ T2260] ? clear_bhb_loop+0x50/0xa0 [ 111.412301][ T2260] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.418218][ T2260] RIP: 0033:0x7f8796c01d8a [ 111.422662][ T2260] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.442314][ T2260] RSP: 002b:00007f8795657e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.450763][ T2260] RAX: ffffffffffffffda RBX: 00007f8795657ee0 RCX: 00007f8796c01d8a [ 111.458750][ T2260] RDX: 0000200000000900 RSI: 0000200000000940 RDI: 00007f8795657ea0 [ 111.466737][ T2260] RBP: 0000200000000900 R08: 00007f8795657ee0 R09: 0000000000000000 [ 111.474724][ T2260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000940 [ 111.482711][ T2260] R13: 00007f8795657ea0 R14: 0000000000000baf R15: 00002000000009c0 [ 111.490720][ T2260] [ 111.498551][ T2260] FAULT_INJECTION: forcing a failure. [ 111.498551][ T2260] name failslab, interval 1, probability 5, space 0, times 98 [ 111.525826][ T2260] CPU: 0 PID: 2260 Comm: syz.0.599 Not tainted syzkaller #0 [ 111.533182][ T2260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.543275][ T2260] Call Trace: [ 111.546583][ T2260] [ 111.549544][ T2260] __dump_stack+0x21/0x30 [ 111.553946][ T2260] dump_stack_lvl+0x110/0x170 [ 111.558668][ T2260] ? show_regs_print_info+0x20/0x20 [ 111.563910][ T2260] ? prandom_u32+0x24d/0x290 [ 111.568543][ T2260] dump_stack+0x15/0x20 [ 111.572741][ T2260] should_fail+0x3ab/0x500 [ 111.577191][ T2260] __should_failslab+0xa4/0xe0 [ 111.581998][ T2260] should_failslab+0x9/0x20 [ 111.584115][ T2275] FAULT_INJECTION: forcing a failure. [ 111.584115][ T2275] name failslab, interval 1, probability 5, space 0, times 98 [ 111.586538][ T2260] slab_pre_alloc_hook+0x39/0xd0 [ 111.604169][ T2260] ? security_file_alloc+0x33/0x120 [ 111.609436][ T2260] kmem_cache_alloc+0x44/0x260 [ 111.614231][ T2260] security_file_alloc+0x33/0x120 [ 111.619386][ T2260] __alloc_file+0xb5/0x2a0 [ 111.623827][ T2260] alloc_empty_file+0x97/0x180 [ 111.628608][ T2260] path_openat+0xf4/0x2f80 [ 111.633131][ T2260] ? __stack_depot_save+0x34/0x480 [ 111.638267][ T2260] ? __kasan_slab_alloc+0xc9/0xe0 [ 111.643311][ T2260] ? __kasan_slab_alloc+0xb7/0xe0 [ 111.648350][ T2260] ? slab_post_alloc_hook+0x4f/0x2b0 [ 111.653658][ T2260] ? kmem_cache_alloc+0xf7/0x260 [ 111.658610][ T2260] ? getname_flags+0xba/0x510 [ 111.663303][ T2260] ? getname+0x19/0x20 [ 111.667384][ T2260] ? do_sys_openat2+0xeb/0x7f0 [ 111.672161][ T2260] ? __x64_sys_openat+0x136/0x160 [ 111.677331][ T2260] ? x64_sys_call+0x219/0x9a0 [ 111.682026][ T2260] ? do_syscall_64+0x4c/0xa0 [ 111.686633][ T2260] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.692727][ T2260] ? do_filp_open+0x400/0x400 [ 111.697425][ T2260] do_filp_open+0x1df/0x400 [ 111.701944][ T2260] ? vfs_tmpfile+0x2d0/0x2d0 [ 111.706559][ T2260] do_sys_openat2+0x15e/0x7f0 [ 111.711255][ T2260] ? __se_sys_mount+0x353/0x390 [ 111.716124][ T2260] ? do_sys_open+0xe0/0xe0 [ 111.720580][ T2260] __x64_sys_openat+0x136/0x160 [ 111.725450][ T2260] x64_sys_call+0x219/0x9a0 [ 111.729971][ T2260] do_syscall_64+0x4c/0xa0 [ 111.734604][ T2260] ? clear_bhb_loop+0x50/0xa0 [ 111.739307][ T2260] ? clear_bhb_loop+0x50/0xa0 [ 111.744016][ T2260] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.749943][ T2260] RIP: 0033:0x7f8796bc134e [ 111.754383][ T2260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.774021][ T2260] RSP: 002b:00007f8795657da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.782687][ T2260] RAX: ffffffffffffffda RBX: 00007f87956586c0 RCX: 00007f8796bc134e [ 111.790813][ T2260] RDX: 0000000000000000 RSI: 00007f8795657ea0 RDI: ffffffffffffff9c [ 111.798815][ T2260] RBP: 0000200000000900 R08: 0000000000000000 R09: 0000000000000000 [ 111.806802][ T2260] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 111.814800][ T2260] R13: 00007f8795657ea0 R14: 0000000000000baf R15: 00002000000009c0 [ 111.822810][ T2260] [ 111.826414][ T2275] CPU: 0 PID: 2275 Comm: syz.7.603 Not tainted syzkaller #0 [ 111.833745][ T2275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.843817][ T2275] Call Trace: [ 111.847130][ T2275] [ 111.850081][ T2275] __dump_stack+0x21/0x30 [ 111.854434][ T2275] dump_stack_lvl+0x110/0x170 [ 111.859139][ T2275] ? show_regs_print_info+0x20/0x20 [ 111.864358][ T2275] dump_stack+0x15/0x20 [ 111.868546][ T2275] should_fail+0x3ab/0x500 [ 111.872984][ T2275] __should_failslab+0xa4/0xe0 [ 111.877787][ T2275] should_failslab+0x9/0x20 [ 111.882309][ T2275] slab_pre_alloc_hook+0x39/0xd0 [ 111.887267][ T2275] kmem_cache_alloc_trace+0x48/0x270 [ 111.892574][ T2275] ? assoc_array_insert+0x90/0x3210 [ 111.897847][ T2275] assoc_array_insert+0x90/0x3210 [ 111.902890][ T2275] ? slab_free_freelist_hook+0xc2/0x190 [ 111.908453][ T2275] ? rwsem_write_trylock+0x136/0x300 [ 111.913762][ T2275] ? clear_nonspinnable+0x60/0x60 [ 111.918856][ T2275] ? memcpy+0x56/0x70 [ 111.922858][ T2275] __key_link_begin+0xe1/0x210 [ 111.927652][ T2275] key_create_or_update+0x4d4/0x9c0 [ 111.932876][ T2275] ? key_type_put+0x20/0x20 [ 111.937398][ T2275] ? lookup_user_key_possessed+0x40/0x40 [ 111.943049][ T2275] ? __kasan_check_write+0x14/0x20 [ 111.948181][ T2275] __se_sys_add_key+0x34b/0x410 [ 111.953049][ T2275] ? __x64_sys_add_key+0xd0/0xd0 [ 111.958011][ T2275] ? ksys_write+0x1fa/0x260 [ 111.962532][ T2275] ? __kasan_check_write+0x14/0x20 [ 111.967683][ T2275] __x64_sys_add_key+0xbf/0xd0 [ 111.972482][ T2275] x64_sys_call+0x713/0x9a0 [ 111.977028][ T2275] do_syscall_64+0x4c/0xa0 [ 111.981459][ T2275] ? clear_bhb_loop+0x50/0xa0 [ 111.986153][ T2275] ? clear_bhb_loop+0x50/0xa0 [ 111.990842][ T2275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.996753][ T2275] RIP: 0033:0x7f639945cb19 [ 112.001184][ T2275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.020817][ T2275] RSP: 002b:00007f6397eb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 112.029244][ T2275] RAX: ffffffffffffffda RBX: 00007f63996e2fa0 RCX: 00007f639945cb19 [ 112.037231][ T2275] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000200000000580 [ 112.045223][ T2275] RBP: 00007f63994f4b70 R08: fffffffffffffffd R09: 0000000000000000 [ 112.053207][ T2275] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 112.061219][ T2275] R13: 00007f63996e3038 R14: 00007f63996e2fa0 R15: 00007ffd74348c38 [ 112.069227][ T2275] [ 112.084055][ T2278] netlink: 16 bytes leftover after parsing attributes in process `syz.5.605'. [ 112.148174][ T2286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.609'. [ 112.150703][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 112.150746][ T30] audit: type=1400 audit(1793848248.583:450): avc: denied { setopt } for pid=2284 comm="syz.8.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.210821][ T2260] FAULT_INJECTION: forcing a failure. [ 112.210821][ T2260] name failslab, interval 1, probability 5, space 0, times 96 [ 112.223856][ T30] audit: type=1400 audit(1793848248.623:451): avc: denied { getopt } for pid=2289 comm="syz.7.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.230281][ T2260] CPU: 1 PID: 2260 Comm: syz.0.599 Not tainted syzkaller #0 [ 112.250897][ T2260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.261241][ T2260] Call Trace: [ 112.264584][ T2260] [ 112.267547][ T2260] __dump_stack+0x21/0x30 [ 112.271911][ T2260] dump_stack_lvl+0x110/0x170 [ 112.276630][ T2260] ? show_regs_print_info+0x20/0x20 [ 112.281897][ T2260] ? prandom_u32+0x24d/0x290 [ 112.286530][ T2260] dump_stack+0x15/0x20 [ 112.290721][ T2260] should_fail+0x3ab/0x500 [ 112.295179][ T2260] __should_failslab+0xa4/0xe0 [ 112.299985][ T2260] should_failslab+0x9/0x20 [ 112.304518][ T2260] slab_pre_alloc_hook+0x39/0xd0 [ 112.309527][ T2260] ? dm_hash_insert+0xbf/0x8e0 [ 112.314333][ T2260] __kmalloc_track_caller+0x6c/0x2c0 [ 112.319660][ T2260] ? kstrdup+0x51/0x70 [ 112.323761][ T2260] ? dm_hash_insert+0xbf/0x8e0 [ 112.328563][ T2260] kstrdup+0x36/0x70 [ 112.332501][ T2260] dm_hash_insert+0xbf/0x8e0 [ 112.337130][ T2260] ? dm_create+0xa14/0xd20 [ 112.341581][ T2260] dev_create+0x194/0x2c0 [ 112.346181][ T2260] ? list_devices+0x820/0x820 [ 112.350889][ T2260] ? __kasan_check_write+0x14/0x20 [ 112.356033][ T2260] ? _copy_from_user+0x95/0xd0 [ 112.360828][ T2260] dm_ctl_ioctl+0x8ee/0xca0 [ 112.365359][ T2260] ? list_devices+0x820/0x820 [ 112.370066][ T2260] ? dm_poll+0x120/0x120 [ 112.374342][ T2260] ? security_file_ioctl+0x84/0xa0 [ 112.379489][ T2260] ? dm_poll+0x120/0x120 [ 112.383756][ T2260] __se_sys_ioctl+0x121/0x1a0 [ 112.388466][ T2260] __x64_sys_ioctl+0x7b/0x90 [ 112.393245][ T2260] x64_sys_call+0x2f/0x9a0 [ 112.397696][ T2260] do_syscall_64+0x4c/0xa0 [ 112.402154][ T2260] ? clear_bhb_loop+0x50/0xa0 [ 112.406880][ T2260] ? clear_bhb_loop+0x50/0xa0 [ 112.411594][ T2260] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.417525][ T2260] RIP: 0033:0x7f8796c00b19 [ 112.421992][ T2260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.441639][ T2260] RSP: 002b:00007f8795658028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.450094][ T2260] RAX: ffffffffffffffda RBX: 00007f8796e86fa0 RCX: 00007f8796c00b19 [ 112.458240][ T2260] RDX: 0000200000001640 RSI: 00000000c138fd03 RDI: 0000000000000007 [ 112.466289][ T2260] RBP: 00007f8796c98b70 R08: 0000000000000000 R09: 0000000000000000 [ 112.474307][ T2260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.482319][ T2260] R13: 00007f8796e87038 R14: 00007f8796e86fa0 R15: 00007fff4814e188 [ 112.490335][ T2260] [ 112.589979][ T60] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 112.640408][ T2328] wireguard: wg0: Could not create IPv4 socket [ 112.682675][ T30] audit: type=1400 audit(1793848249.123:452): avc: denied { mounton } for pid=2333 comm="syz.8.629" path="/39/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 112.798454][ T2342] loop6: detected capacity change from 0 to 2048 [ 112.839603][ T30] audit: type=1400 audit(1793848249.273:453): avc: denied { sys_module } for pid=2345 comm="syz.8.635" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 112.890930][ T2323] loop0: detected capacity change from 0 to 40427 [ 112.911191][ T327] Alternate GPT is invalid, using primary GPT. [ 112.917456][ T327] loop6: p1 p2 p3 [ 112.943916][ T2342] Alternate GPT is invalid, using primary GPT. [ 112.950859][ T2342] loop6: p1 p2 p3 [ 112.964772][ T2323] F2FS-fs (loop0): fault_injection options not supported [ 112.989949][ T2323] F2FS-fs (loop0): fault_type options not supported [ 113.010320][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.023240][ T2323] F2FS-fs (loop0): invalid crc value [ 113.032443][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.045134][ T30] audit: type=1400 audit(1793848249.483:454): avc: denied { append } for pid=2352 comm="syz.6.638" name="event1" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.075511][ T1201] udevd[1201]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 113.086860][ T327] udevd[327]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 113.089296][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.111060][ T2323] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.141429][ T1201] udevd[1201]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 113.142311][ T573] udevd[573]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 113.158331][ T327] udevd[327]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 113.171783][ T60] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 113.189722][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.208564][ T60] usb 6-1: config 0 descriptor?? [ 113.249927][ T2323] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.279980][ T30] audit: type=1400 audit(1793848249.723:455): avc: denied { unlink } for pid=2322 comm="syz.0.625" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.318007][ T287] attempt to access beyond end of device [ 113.318007][ T287] loop0: rw=524288, want=45072, limit=40427 [ 113.330697][ T30] audit: type=1400 audit(1793848249.743:456): avc: denied { write } for pid=2322 comm="syz.0.625" name="mnt" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 113.349175][ T287] attempt to access beyond end of device [ 113.349175][ T287] loop0: rw=0, want=45072, limit=40427 [ 113.379913][ T30] audit: type=1400 audit(1793848249.743:457): avc: denied { add_name } for pid=2322 comm="syz.0.625" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 113.438602][ T30] audit: type=1400 audit(1793848249.743:458): avc: denied { setattr } for pid=2322 comm="syz.0.625" name="work" dev="loop0" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 113.466120][ T2351] loop8: detected capacity change from 0 to 40427 [ 113.495102][ T30] audit: type=1400 audit(1793848249.743:459): avc: denied { remove_name } for pid=2322 comm="syz.0.625" name="#b" dev="loop0" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 113.517943][ T368] attempt to access beyond end of device [ 113.517943][ T368] loop0: rw=2049, want=45128, limit=40427 [ 113.543638][ T2351] F2FS-fs (loop8): Mismatch start address, segment0(0) cp_blkaddr(512) [ 113.555007][ T2351] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 113.573611][ T2351] F2FS-fs (loop8): fault_injection options not supported [ 113.609059][ T2351] F2FS-fs (loop8): fault_type options not supported [ 113.618714][ T880] tipc: Left network mode [ 113.629652][ T2351] F2FS-fs (loop8): invalid crc value [ 113.649178][ T2351] F2FS-fs (loop8): Found nat_bits in checkpoint [ 113.685000][ T2383] device erspan1 entered promiscuous mode [ 113.701704][ T60] acrux 0003:1A34:0802.000D: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.5-1/input0 [ 113.732542][ T60] acrux 0003:1A34:0802.000D: no inputs found [ 113.758842][ T60] acrux 0003:1A34:0802.000D: Failed to enable force feedback support, error: -19 [ 113.771100][ T2351] F2FS-fs (loop8): Start checkpoint disabled! [ 113.794685][ T2351] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 113.802013][ T2351] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 113.859783][ T370] attempt to access beyond end of device [ 113.859783][ T370] loop8: rw=2049, want=40984, limit=40427 [ 113.935340][ T60] usb 6-1: USB disconnect, device number 8 [ 114.032397][ T2426] tipc: Started in network mode [ 114.037385][ T2426] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 114.046615][ T2426] tipc: Enabled bearer , priority 0 [ 114.064317][ T880] device bridge_slave_1 left promiscuous mode [ 114.071086][ T880] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.087467][ T880] device bridge_slave_0 left promiscuous mode [ 114.097344][ T880] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.108223][ T880] device veth1_macvtap left promiscuous mode [ 114.116032][ T880] device veth0_vlan left promiscuous mode [ 114.131422][ T2435] tmpfs: Unknown parameter 'casefold' [ 114.262683][ T2418] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.272461][ T2418] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.285701][ T2418] device bridge_slave_0 entered promiscuous mode [ 114.297848][ T2418] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.308847][ T2418] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.317549][ T2418] device bridge_slave_1 entered promiscuous mode [ 114.341908][ T2467] loop8: detected capacity change from 0 to 512 [ 114.412321][ T2467] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.445165][ T2467] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 114.458112][ T2418] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.465246][ T2418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.472599][ T2418] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.479651][ T2418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.487460][ T2467] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 114.524112][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.532570][ T2467] System zones: 0-2, 18-18, 34-34 [ 114.541399][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.548762][ T2467] EXT4-fs error (device loop8): ext4_orphan_get:1436: comm syz.8.682: bad orphan inode 15 [ 114.560130][ T2467] ext4_test_bit(bit=14, block=18) = 1 [ 114.573971][ T2467] is_bad_inode(inode)=0 [ 114.581335][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.597144][ T2467] NEXT_ORPHAN(inode)=2264924160 [ 114.602121][ T2467] max_ino=32 [ 114.605339][ T2467] i_nlink=0 [ 114.611629][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.613013][ T2467] EXT4-fs error (device loop8): ext4_do_update_inode:5260: inode #15: comm syz.8.682: corrupted inode contents [ 114.632199][ T2467] EXT4-fs error (device loop8): ext4_dirty_inode:6118: inode #15: comm syz.8.682: mark_inode_dirty error [ 114.643860][ T2467] EXT4-fs error (device loop8): ext4_do_update_inode:5260: inode #15: comm syz.8.682: corrupted inode contents [ 114.655853][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.662946][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.670811][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.679072][ T2467] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2957: inode #15: comm syz.8.682: mark_inode_dirty error [ 114.692002][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.699087][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.708969][ T2467] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2960: inode #15: comm syz.8.682: mark inode dirty (error -117) [ 114.730346][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.739919][ T2467] EXT4-fs warning (device loop8): ext4_evict_inode:305: xattr delete (err -117) [ 114.749236][ T2467] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.761086][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.771434][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.780914][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.796803][ T2467] FAULT_INJECTION: forcing a failure. [ 114.796803][ T2467] name failslab, interval 1, probability 5, space 0, times 95 [ 114.819486][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.828458][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.837938][ T2467] CPU: 1 PID: 2467 Comm: syz.8.682 Not tainted syzkaller #0 [ 114.845278][ T2467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.855360][ T2467] Call Trace: [ 114.858671][ T2467] [ 114.861624][ T2467] __dump_stack+0x21/0x30 [ 114.866005][ T2467] dump_stack_lvl+0x110/0x170 [ 114.870716][ T2467] ? show_regs_print_info+0x20/0x20 [ 114.875952][ T2467] dump_stack+0x15/0x20 [ 114.880136][ T2467] should_fail+0x3ab/0x500 [ 114.884576][ T2467] ? mgmt_cmd_status+0x38/0x400 [ 114.889452][ T2467] __should_failslab+0xa4/0xe0 [ 114.894243][ T2467] should_failslab+0x9/0x20 [ 114.898778][ T2467] slab_pre_alloc_hook+0x39/0xd0 [ 114.903787][ T2467] ? mgmt_cmd_status+0x38/0x400 [ 114.908675][ T2467] ? mgmt_cmd_status+0x38/0x400 [ 114.913560][ T2467] __kmalloc_track_caller+0x6c/0x2c0 [ 114.918896][ T2467] ? mgmt_cmd_status+0x38/0x400 [ 114.923793][ T2467] ? mgmt_cmd_status+0x38/0x400 [ 114.928681][ T2467] __alloc_skb+0x210/0x730 [ 114.933127][ T2467] mgmt_cmd_status+0x38/0x400 [ 114.937833][ T2467] hci_mgmt_cmd+0x58a/0xc90 [ 114.942373][ T2467] hci_sock_sendmsg+0x36a/0xa60 [ 114.947271][ T2467] ? hci_sock_getsockopt+0x440/0x440 [ 114.952590][ T2467] ? security_socket_sendmsg+0x82/0xa0 [ 114.958090][ T2467] sock_write_iter+0x2a6/0x3a0 [ 114.962893][ T2467] ? sock_read_iter+0x380/0x380 [ 114.967784][ T2467] ? memset+0x35/0x40 [ 114.971808][ T2467] ? iov_iter_init+0xbc/0x180 [ 114.976612][ T2467] vfs_write+0x831/0xfd0 [ 114.980891][ T2467] ? file_end_write+0x1b0/0x1b0 [ 114.985780][ T2467] ? __fget_files+0x2e1/0x340 [ 114.990490][ T2467] ? __fdget_pos+0x1f7/0x380 [ 114.995130][ T2467] ? ksys_write+0x70/0x260 [ 114.999582][ T2467] ksys_write+0x14a/0x260 [ 115.003184][ T2492] input: syz0 as /devices/virtual/input/input39 [ 115.003940][ T2467] ? __ia32_sys_read+0x90/0x90 [ 115.014957][ T2467] ? __kasan_check_write+0x14/0x20 [ 115.020104][ T2467] ? switch_fpu_return+0x15d/0x2c0 [ 115.025256][ T2467] __x64_sys_write+0x7b/0x90 [ 115.029878][ T2467] x64_sys_call+0x8ef/0x9a0 [ 115.034414][ T2467] do_syscall_64+0x4c/0xa0 [ 115.038884][ T2467] ? clear_bhb_loop+0x50/0xa0 [ 115.043591][ T2467] ? clear_bhb_loop+0x50/0xa0 [ 115.048316][ T2467] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.054254][ T2467] RIP: 0033:0x7fac4a90db19 [ 115.058700][ T2467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.064220][ T2496] device-mapper: table: 253:3: flakey: unknown target type [ 115.078333][ T2467] RSP: 002b:00007fac49365028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.078361][ T2467] RAX: ffffffffffffffda RBX: 00007fac4ab93fa0 RCX: 00007fac4a90db19 [ 115.078377][ T2467] RDX: 0000000000000006 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 115.078389][ T2467] RBP: 00007fac4a9a5b70 R08: 0000000000000000 R09: 0000000000000000 [ 115.078410][ T2467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.086166][ T2496] device-mapper: ioctl: error adding target to table [ 115.094023][ T2467] R13: 00007fac4ab94038 R14: 00007fac4ab93fa0 R15: 00007ffd707f84f8 [ 115.094053][ T2467] [ 115.107720][ T2418] device veth0_vlan entered promiscuous mode [ 115.164156][ T2482] loop5: detected capacity change from 0 to 2048 [ 115.190848][ C1] blk_update_request: I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 115.208862][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.219883][ C1] blk_update_request: I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.230991][ C1] Buffer I/O error on dev loop5, logical block 128, async page read [ 115.247212][ C1] blk_update_request: I/O error, dev loop5, sector 258 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.258348][ C1] Buffer I/O error on dev loop5, logical block 129, async page read [ 115.266418][ C1] blk_update_request: I/O error, dev loop5, sector 260 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.277507][ C1] Buffer I/O error on dev loop5, logical block 130, async page read [ 115.285555][ C1] blk_update_request: I/O error, dev loop5, sector 262 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.291329][ T2513] FAULT_INJECTION: forcing a failure. [ 115.291329][ T2513] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 115.296638][ C1] Buffer I/O error on dev loop5, logical block 131, async page read [ 115.320284][ T2513] CPU: 0 PID: 2513 Comm: syz.8.690 Not tainted syzkaller #0 [ 115.327638][ T2513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.337720][ T2513] Call Trace: [ 115.341031][ T2513] [ 115.343983][ T2513] __dump_stack+0x21/0x30 [ 115.348029][ T2482] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 115.348349][ T2513] dump_stack_lvl+0x110/0x170 [ 115.356829][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.360151][ T2513] ? show_regs_print_info+0x20/0x20 [ 115.360183][ T2513] dump_stack+0x15/0x20 [ 115.377168][ T2513] should_fail+0x3ab/0x500 [ 115.381608][ T2513] should_fail_alloc_page+0x55/0x80 [ 115.386826][ T2513] prepare_alloc_pages+0x13f/0x590 [ 115.391954][ T2513] ? __alloc_pages_bulk+0xab0/0xab0 [ 115.397177][ T2513] ? arch_stack_walk+0xee/0x140 [ 115.402045][ T2513] __alloc_pages+0x11d/0x460 [ 115.406654][ T2513] ? zone_watermark_fast+0x250/0x250 [ 115.411953][ T2513] ? __kasan_check_write+0x14/0x20 [ 115.417078][ T2513] ? _raw_spin_lock+0x94/0xf0 [ 115.421778][ T2513] __get_free_pages+0x10/0x30 [ 115.426474][ T2513] selinux_genfs_get_sid+0x59/0x250 [ 115.431688][ T2513] ? lockref_get+0xbc/0x120 [ 115.436213][ T2513] inode_doinit_with_dentry+0x884/0xd90 [ 115.441777][ T2513] ? sb_finish_set_opts+0xa10/0xa10 [ 115.446988][ T2513] ? __kasan_check_write+0x14/0x20 [ 115.452114][ T2513] ? _raw_spin_lock+0x94/0xf0 [ 115.456833][ T2513] sb_finish_set_opts+0x6ef/0xa10 [ 115.461882][ T2513] ? may_context_mount_inode_relabel+0x150/0x150 [ 115.469096][ T2513] ? inode_doinit_with_dentry+0x544/0xd90 [ 115.474843][ T2513] selinux_set_mnt_opts+0x1684/0x1d40 [ 115.480237][ T2513] ? delayed_superblock_init+0x20/0x20 [ 115.485725][ T2513] ? kernfs_get_tree+0x1fa/0x790 [ 115.490702][ T2513] security_sb_set_mnt_opts+0x71/0xd0 [ 115.496095][ T2513] vfs_get_tree+0x14e/0x260 [ 115.500620][ T2513] do_new_mount+0x251/0xb40 [ 115.505160][ T2513] ? security_capable+0x87/0xb0 [ 115.510031][ T2513] path_mount+0x640/0xff0 [ 115.514396][ T2513] __se_sys_mount+0x320/0x390 [ 115.519086][ T2513] ? __x64_sys_mount+0xd0/0xd0 [ 115.523859][ T2513] ? __kasan_check_write+0x14/0x20 [ 115.528983][ T2513] __x64_sys_mount+0xbf/0xd0 [ 115.533608][ T2513] x64_sys_call+0x6bf/0x9a0 [ 115.538147][ T2513] do_syscall_64+0x4c/0xa0 [ 115.542706][ T2513] ? clear_bhb_loop+0x50/0xa0 [ 115.547457][ T2513] ? clear_bhb_loop+0x50/0xa0 [ 115.552161][ T2513] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.558075][ T2513] RIP: 0033:0x7fac4a90db19 [ 115.562503][ T2513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.582126][ T2513] RSP: 002b:00007fac49365028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.590560][ T2513] RAX: ffffffffffffffda RBX: 00007fac4ab93fa0 RCX: 00007fac4a90db19 [ 115.598551][ T2513] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 115.606540][ T2513] RBP: 00007fac4a9a5b70 R08: 0000000000000000 R09: 0000000000000000 [ 115.614539][ T2513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.622532][ T2513] R13: 00007fac4ab94038 R14: 00007fac4ab93fa0 R15: 00007ffd707f84f8 [ 115.630520][ T2513] [ 115.636854][ T645] tipc: Node number set to 43690 [ 115.642189][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.649839][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.671432][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.679707][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.691121][ C1] blk_update_request: I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 115.704154][ T2482] EXT4-fs warning (device loop5): read_mmp_block:115: Error -5 while reading MMP block 64 [ 115.716238][ T2418] device veth1_macvtap entered promiscuous mode [ 115.761251][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.787927][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.803505][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.814748][ T2528] loop8: detected capacity change from 0 to 512 [ 115.828435][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.837185][ T880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.899778][ T2539] FAULT_INJECTION: forcing a failure. [ 115.899778][ T2539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 115.926203][ T2539] CPU: 0 PID: 2539 Comm: syz.9.658 Not tainted syzkaller #0 [ 115.933812][ T2539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.943894][ T2539] Call Trace: [ 115.947195][ T2539] [ 115.950141][ T2539] __dump_stack+0x21/0x30 [ 115.954496][ T2539] dump_stack_lvl+0x110/0x170 [ 115.959190][ T2539] ? show_regs_print_info+0x20/0x20 [ 115.964416][ T2539] dump_stack+0x15/0x20 [ 115.968601][ T2539] should_fail+0x3ab/0x500 [ 115.973046][ T2539] should_fail_alloc_page+0x55/0x80 [ 115.978280][ T2539] prepare_alloc_pages+0x13f/0x590 [ 115.983419][ T2539] ? __alloc_pages_bulk+0xab0/0xab0 [ 115.988640][ T2539] ? __mod_node_page_state+0x9e/0xd0 [ 115.993947][ T2539] __alloc_pages+0x11d/0x460 [ 115.998573][ T2539] ? zone_watermark_fast+0x250/0x250 [ 116.003878][ T2539] ? kmalloc_order_trace+0x18/0xb0 [ 116.009003][ T2539] ? __kmalloc+0x199/0x2c0 [ 116.013442][ T2539] bpf_ringbuf_alloc+0x171/0x470 [ 116.018396][ T2539] ringbuf_map_alloc+0x1e5/0x310 [ 116.023349][ T2539] map_create+0x3f4/0x1fa0 [ 116.027805][ T2539] __sys_bpf+0x2ff/0x7d0 [ 116.032060][ T2539] ? bpf_link_show_fdinfo+0x330/0x330 [ 116.037447][ T2539] ? __kasan_check_write+0x14/0x20 [ 116.042579][ T2539] ? switch_fpu_return+0x15d/0x2c0 [ 116.047715][ T2539] __x64_sys_bpf+0x7c/0x90 [ 116.052151][ T2539] x64_sys_call+0x4b9/0x9a0 [ 116.056695][ T2539] do_syscall_64+0x4c/0xa0 [ 116.061130][ T2539] ? clear_bhb_loop+0x50/0xa0 [ 116.065822][ T2539] ? clear_bhb_loop+0x50/0xa0 [ 116.070514][ T2539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.076422][ T2539] RIP: 0033:0x7fef96133b19 [ 116.080853][ T2539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.100475][ T2539] RSP: 002b:00007fef94b8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.108900][ T2539] RAX: ffffffffffffffda RBX: 00007fef963b9fa0 RCX: 00007fef96133b19 [ 116.116888][ T2539] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 0000000000000000 [ 116.124874][ T2539] RBP: 00007fef961cbb70 R08: 0000000000000000 R09: 0000000000000000 [ 116.132860][ T2539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.140840][ T2539] R13: 00007fef963ba038 R14: 00007fef963b9fa0 R15: 00007ffe08c6d558 [ 116.148826][ T2539] [ 116.171939][ T2544] loop5: detected capacity change from 0 to 1024 [ 116.204643][ T2552] loop9: detected capacity change from 0 to 256 [ 116.214472][ T2555] bridge0: port 3(syz_tun) entered blocking state [ 116.221152][ T2555] bridge0: port 3(syz_tun) entered disabled state [ 116.228210][ T2555] device syz_tun entered promiscuous mode [ 116.235915][ T2544] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 116.246752][ T2555] bridge0: port 3(syz_tun) entered blocking state [ 116.253267][ T2555] bridge0: port 3(syz_tun) entered forwarding state [ 116.268936][ T2544] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 116.292343][ T2544] EXT4-fs (loop5): orphan cleanup on readonly fs [ 116.300156][ T2544] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.698: Freeing blocks not in datazone - block = 0, count = 4096 [ 116.316275][ T2552] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 116.330021][ T2552] FAT-fs (loop9): Filesystem has been set read-only [ 116.357966][ T2544] EXT4-fs (loop5): Remounting filesystem read-only [ 116.364833][ T2544] EXT4-fs (loop5): 1 orphan inode deleted [ 116.371115][ T2544] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,quota,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,. Quota mode: writeback. [ 116.424114][ T2573] loop8: detected capacity change from 0 to 128 [ 116.428708][ T2571] loop6: detected capacity change from 0 to 4096 [ 116.481528][ T2571] EXT4-fs (loop6): Ignoring removed nobh option [ 116.488734][ T2571] EXT4-fs (loop6): Test dummy encryption mode enabled [ 116.495673][ T2571] EXT4-fs (loop6): Ignoring removed bh option [ 116.524774][ T2571] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 116.848244][ T2589] EXT4-fs (loop9): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 116.863209][ T2589] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.938096][ T2571] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 117.569942][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 117.569962][ T30] audit: type=1400 audit(1793848253.933:471): avc: denied { watch_reads } for pid=2603 comm="syz.8.719" path="/66/file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.670608][ T39] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 117.716730][ T2606] F2FS-fs (loop8): invalid crc value [ 117.729843][ T2606] F2FS-fs (loop8): Found nat_bits in checkpoint [ 117.757264][ T2608] EXT4-fs error (device loop9): ext4_orphan_get:1410: inode #15: comm syz.9.721: iget: bad i_size value: 38620345925642 [ 117.771638][ T2618] ------------[ cut here ]------------ [ 117.777140][ T2618] kernel BUG at drivers/android/binder.c:1330! [ 117.783406][ T2618] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 117.789608][ T2618] CPU: 1 PID: 2618 Comm: syz.6.723 Not tainted syzkaller #0 [ 117.796918][ T2618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.807005][ T2618] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 117.813475][ T2618] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 f4 aa 10 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 7d 10 d1 fd <0f> 0b 65 8b 05 bc 4a 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 a8 6a e9 [ 117.823258][ T2608] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.721: couldn't read orphan inode 15 (err -117) [ 117.833145][ T2618] RSP: 0018:ffffc90000ac7370 EFLAGS: 00010287 [ 117.833169][ T2618] RAX: ffffffff8398c683 RBX: 0000000000000000 RCX: 0000000000080000 [ 117.833185][ T2618] RDX: ffffc9000674d000 RSI: 0000000000000039 RDI: 000000000000003a [ 117.833200][ T2618] RBP: ffffc90000ac7410 R08: ffff88810ddaad3f R09: ffff88810ddaad30 [ 117.875209][ T2618] R10: dffffc0000000000 R11: ffffed1021bb55a8 R12: dffffc0000000000 [ 117.883217][ T2618] R13: ffff88811b192c28 R14: ffff88811b192c10 R15: 0000000000000000 [ 117.891746][ T2618] FS: 00007ffa2b0d76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 117.894794][ T2606] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 117.900710][ T2618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.900728][ T2618] CR2: 000000110c2e6ee4 CR3: 000000010b273000 CR4: 00000000003506a0 [ 117.900748][ T2618] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.900763][ T2618] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.916469][ T2608] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.923264][ T2618] Call Trace: [ 117.923274][ T2618] [ 117.923285][ T2618] binder_thread_write+0x1497/0x6fe0 [ 117.923316][ T2618] ? __kasan_check_write+0x14/0x20 [ 117.967070][ T2618] ? binder_ioctl_get_freezer_info+0x470/0x470 [ 117.973265][ T2618] ? finish_task_switch+0x16b/0x790 [ 117.978525][ T2618] ? switch_mm_irqs_off+0x2fb/0x960 [ 117.983755][ T2618] ? __schedule+0xbd7/0x14a0 [ 117.988401][ T2618] ? release_firmware_map_entry+0x190/0x190 [ 117.994344][ T2618] ? check_preempt_wakeup+0x725/0xbb0 [ 117.999967][ T2618] ? __kasan_check_write+0x14/0x20 [ 118.005117][ T2618] ? _copy_from_user+0x95/0xd0 [ 118.009913][ T2618] binder_ioctl_write_read+0x203/0x6700 [ 118.015501][ T2618] ? schedule_preempt_disabled+0x20/0x20 [ 118.021281][ T2618] ? ttwu_do_wakeup+0x447/0x470 [ 118.026171][ T2618] ? preempt_schedule_thunk+0x16/0x18 [ 118.031579][ T2618] ? try_to_wake_up+0x632/0x1150 [ 118.036566][ T2618] ? __kasan_check_write+0x14/0x20 [ 118.041718][ T2618] ? wake_up_q+0x106/0x1b0 [ 118.046199][ T2618] ? futex_wake+0x64b/0x8f0 [ 118.050739][ T2618] ? binder_has_work_ilocked+0x3e0/0x3e0 [ 118.056405][ T2618] ? avc_has_extended_perms+0x869/0xed0 [ 118.061993][ T2618] ? memcpy+0x56/0x70 [ 118.066005][ T2618] ? avc_has_extended_perms+0x9d5/0xed0 [ 118.071671][ T2618] ? __kasan_check_write+0x14/0x20 [ 118.076816][ T2618] ? avc_flush+0x2b0/0x2b0 [ 118.081262][ T2618] ? do_futex+0xdd3/0x2800 [ 118.085715][ T2618] ? __kasan_check_write+0x14/0x20 [ 118.090864][ T2618] ? _raw_spin_lock+0x94/0xf0 [ 118.095585][ T2618] ? _raw_spin_trylock_bh+0x150/0x150 [ 118.100992][ T2618] ? _raw_spin_unlock+0x4d/0x70 [ 118.105885][ T2618] binder_ioctl+0x36c/0x1df0 [ 118.110512][ T2618] ? ioctl_has_perm+0x1b8/0x4f0 [ 118.115646][ T2618] ? binder_poll+0x2d0/0x2d0 [ 118.120255][ T2618] ? has_cap_mac_admin+0x370/0x370 [ 118.125406][ T2618] ? __kasan_slab_free+0x11/0x20 [ 118.130357][ T2618] ? slab_free_freelist_hook+0xc2/0x190 [ 118.135909][ T2618] ? putname+0x111/0x160 [ 118.140253][ T2618] ? selinux_file_ioctl+0x3ad/0x4c0 [ 118.145475][ T2618] ? selinux_file_alloc_security+0x120/0x120 [ 118.151488][ T2618] ? __fget_files+0x2e1/0x340 [ 118.156214][ T2618] ? security_file_ioctl+0x84/0xa0 [ 118.161379][ T2618] ? binder_poll+0x2d0/0x2d0 [ 118.165977][ T2618] __se_sys_ioctl+0x121/0x1a0 [ 118.170690][ T2618] __x64_sys_ioctl+0x7b/0x90 [ 118.175296][ T2618] x64_sys_call+0x2f/0x9a0 [ 118.179752][ T2618] do_syscall_64+0x4c/0xa0 [ 118.184204][ T2618] ? clear_bhb_loop+0x50/0xa0 [ 118.189070][ T2618] ? clear_bhb_loop+0x50/0xa0 [ 118.193762][ T2618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.199675][ T2618] RIP: 0033:0x7ffa2c67fb19 [ 118.204128][ T2618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.223759][ T2618] RSP: 002b:00007ffa2b0d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.232191][ T2618] RAX: ffffffffffffffda RBX: 00007ffa2c905fa0 RCX: 00007ffa2c67fb19 [ 118.240180][ T2618] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 118.248173][ T2618] RBP: 00007ffa2c717b70 R08: 0000000000000000 R09: 0000000000000000 [ 118.256155][ T2618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.264132][ T2618] R13: 00007ffa2c906038 R14: 00007ffa2c905fa0 R15: 00007ffdefb59738 [ 118.272127][ T2618] [ 118.275192][ T2618] Modules linked in: [ 118.279434][ T2618] ---[ end trace b88798ec2690c5c6 ]--- [ 118.284954][ T2618] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 118.291437][ T2618] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 f4 aa 10 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 7d 10 d1 fd <0f> 0b 65 8b 05 bc 4a 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 a8 6a e9 [ 118.311257][ T2618] RSP: 0018:ffffc90000ac7370 EFLAGS: 00010287 [ 118.317374][ T2618] RAX: ffffffff8398c683 RBX: 0000000000000000 RCX: 0000000000080000 [ 118.325424][ T2618] RDX: ffffc9000674d000 RSI: 0000000000000039 RDI: 000000000000003a [ 118.333472][ T2618] RBP: ffffc90000ac7410 R08: ffff88810ddaad3f R09: ffff88810ddaad30 [ 118.341515][ T2618] R10: dffffc0000000000 R11: ffffed1021bb55a8 R12: dffffc0000000000 [ 118.349521][ T2618] R13: ffff88811b192c28 R14: ffff88811b192c10 R15: 0000000000000000 [ 118.357539][ T2618] FS: 00007ffa2b0d76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 118.366522][ T2618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.373165][ T2618] CR2: 000000110c2e6ee4 CR3: 000000010b273000 CR4: 00000000003506a0 [ 118.381273][ T2618] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.389260][ T2618] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.397301][ T2618] Kernel panic - not syncing: Fatal exception [ 118.403705][ T2618] Kernel Offset: disabled [ 118.408040][ T2618] Rebooting in 86400 seconds..