last executing test programs: 7.944549976s ago: executing program 0 (id=197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000580)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@setlink={0x30, 0x13, 0x9, 0x70bd2a, 0x25dfdbbe, {0x0, 0x0, 0x0, 0x0, 0x6624, 0x278aa}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc00088d}, 0x24048000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x402}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 6.879423148s ago: executing program 0 (id=200): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0xfffffffd, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x8, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0xb7, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xd, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x6, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0xfd, 0x9, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xe, 0x4, 0x100002, 0x8, 0x80000752, 0x0, 0x3, 0x0, 0x10001, 0x1, 0xffffffff, 0x6, 0x6, 0x9, 0x8, 0x2, 0x2, 0x40, 0x1084, 0x100, 0x5, 0x252, 0x81, 0xf, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2e2, 0xffffdffc, 0x3, 0x2, 0x5, 0xb, 0x0, 0x4, 0x2, 0x40, 0x8, 0x9, 0x4, 0x401, 0x66d1, 0x8, 0x8, 0x1, 0x7, 0xc5c, 0x5]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000080000004200000040"], 0x50) statx(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x400, 0x800, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r3, 0x25, 0x2, @val=@tracing={0x0, 0x100}}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000380), &(0x7f0000000580)=r5}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000001940)=ANY=[], 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000840, &(0x7f0000000400)={[{@fat=@time_offset={'time_offset', 0x3d, 0x4f7}}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@quiet}, {@fat=@tz_utc}, {@fat=@dmask={'dmask', 0x3d, 0x800}}, {@dots}, {@fat=@uid={'uid', 0x3d, r1}}, {@fat=@sys_immutable}, {@fat=@usefree}, {@fat=@check_normal}]}, 0x1, 0x23d, &(0x7f0000000a40)="$eJzs3cFqE0EcBvB/27Td9mLP4mHBi6eivkGQCOKCENmDnlyoXloR0svqKY/hM/hIPkZPva3YXZq6UQ+yySbu7wdhP/IxMHPJ5DCTvHvw8fzs0+WH6vvXSJI0RhHzuI44id3Yi9pO89y9yQdx1zwAgG0znRbjvudAh3aW3jmKiGI/Ig6XqvzbmmYFAAAAAAAAAABAx5z/B4Dhcf7//zebjYvj5vvbr5z/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpzXVX3qr+8+p4fANA9+z8ADI/9HwCGx/4PAMPz+s3bl+Msm0zTNIm4mpd5mdfPun/+Ips8Tm+cLEZdlWW+3+Rs8qTu03Z/3Ix/+tv+IB49rPuf3bNXWas/jLNVLx4AAAAAAAAAAAAAAAAAAAA2xGl6q3W/f6/uT//U1+nO7wO07u+P4v5obcsAAAAAAAAAAAAAAAAAAACArXb5+ct5cXHxfiYIt+Eo/mFUEpsxeaGT0PcnEwAAAAAAAAAAAAAAAAAADM/i0m/fMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/iz+/391oe81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPwIwAA//++jJCI") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), 0x0}, 0x20) 5.801792801s ago: executing program 0 (id=203): fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000200)={[{@jqfmt_vfsv1}, {@noload}, {@init_itable}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'euid'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r0}}, {@obj_type={'obj_type', 0x3d, '+*)!%'}}, {@flag='posixacl'}]}, 0x1, 0x3f7, &(0x7f0000000440)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000340)=@v2={0x2, @aes128, 0x7, '\x00', @b}) 5.699358227s ago: executing program 0 (id=208): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000000007ea45aee0000001000000000000c0400000000005f"], 0x0, 0x34}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001d80)="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", 0x281}], 0x1}}], 0x2, 0x8008800) 5.698619537s ago: executing program 2 (id=209): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000340)=@v1={0x0, @adiantum, 0x4, @desc4}) (fail_nth: 6) 4.926915862s ago: executing program 2 (id=212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e000100000000000001a0b1000000fffc000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000210000000033000000fe80000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002be0000000000000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) 4.926365883s ago: executing program 1 (id=214): r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x24, 0x0) 4.855888716s ago: executing program 1 (id=216): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x4414, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES16, @ANYRES8], 0x1, 0x2aa, &(0x7f0000000ac0)="$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") r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) utimes(&(0x7f0000000080)='./file0/file0\x00', 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xac, &(0x7f0000000180)=""/172}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x71) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x240, &(0x7f0000000740)="$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") writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000002c0)=@attr_pmu_init) read$eventfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) 4.731475683s ago: executing program 2 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESHEX], 0x21, 0x25e, &(0x7f0000000300)="$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") 4.731199714s ago: executing program 2 (id=218): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) chdir(&(0x7f0000000480)='./cgroup\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.544838915s ago: executing program 0 (id=219): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e0001000000000000000000000000fffc000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000210000000033000000fe80000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) 4.544026985s ago: executing program 2 (id=220): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TCFLSH(r1, 0x40087101, 0x8000000000000001) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x12061, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 3.334891435s ago: executing program 1 (id=223): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, {0x0, 0x0, [0xff0f]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) 3.227880292s ago: executing program 2 (id=224): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0x91, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000406b1d010140000102030109027f0003011010060904000000010100000a24010180010201020a240701000000d885700904010000010200000904010101010200000905010940001404cc07250101800400090402000001020000090402010101020000062401010500100f240202966802000221d53c71e3fa0905820908", @ANYRES64, @ANYRES16=r0], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 3.173770345s ago: executing program 0 (id=225): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010700, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.137703397s ago: executing program 32 (id=225): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010700, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.135336737s ago: executing program 33 (id=224): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0x91, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000406b1d010140000102030109027f0003011010060904000000010100000a24010180010201020a240701000000d885700904010000010200000904010101010200000905010940001404cc07250101800400090402000001020000090402010101020000062401010500100f240202966802000221d53c71e3fa0905820908", @ANYRES64, @ANYRES16=r0], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 3.131609567s ago: executing program 1 (id=227): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[], 0xfc}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001d80)="89d678ce056c6ec3a758a18badbd3f1e8e69623f3a521c407ec0d5f1a2755b4249a56d0b131c3bb9f38c99db3a276c94a27e6f85360ab92b31216fad2398a44e7cd39359af752369a27c1852725ddbf74a2b5dec2e27c4dcefd2ddc9b5a41af61293026e8ef680188f6ad68f8f85264053b003a1a119ff6bca14fbb9238a3d699738efaef34f6cf94a487157402c5c4a27dcdf687365710b68b4d89cb38359f3e57aee5d8c4bd49a421acc3eb0f92fc9dd28df931d97a80f4f0dbe59b0778f2cc02fe8d0ce1a96b578b4546abc5122ef4f94f79816abfa2e0555043ccf0b1e4ac1febe6a6a7e0f19ffc02c1d925f9236382928a5ea08be32cb8ca2571b6c94c5dc893541472b70d102c1a36219f4fb9f0690284b7d4cf8f99ab014688db7c7b0d1cfe978b9275a8269870ba255e17282fa697100b6cf1756a521e22b7411836b6a20d6e74b689d31e0f34c061d42fd4730ca843e86a09945d45a55ac0b5f7d003afdc2c6654a59dc8820d86c7dbee17f35142c6c20a1ac6afe27a4b862373e62609908ecb8f752a9359c09af8700a366c5838b03832b184feaee01c8f7fb55eae5ffd05e33b66d8547c48f258da49186f2b8f36ec8d1191f70637c194e2ba5576e98d78bdf617ae2bb8253318b869459d4abc16160fc35d55bfc7520c021aa66f424522215e7a11f36df3433d321b8578ad5e5340d594321f9e40de502539a910c6f7483fdf7194d59765b987c2a938683aa05c29d1c851d1ac03b2c261c1e027cee876d0c192272eb5504714bccf86d8eca4448dc905c3d99e4fc40297f56c90e9e845e40f9573899e308f7bda4137c4088e0ad0bc1583104094f5820dbe4861ea8988aaaf564419d75e602694a7e0b6a9d3dfd19818bd79d5d117be2d9002b24", 0x281}], 0x1}}], 0x3, 0x8008800) 3.099099559s ago: executing program 3 (id=229): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d000000000000000001000005001800000000fd9d"], &(0x7f0000000f40)=""/4087, 0x3e, 0xff7, 0x2}, 0x28) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20001011) 2.997418325s ago: executing program 3 (id=230): r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) (fail_nth: 1) 2.700577762s ago: executing program 3 (id=231): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) chdir(&(0x7f0000000480)='./cgroup\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.618643487s ago: executing program 3 (id=232): r0 = socket$inet(0x2, 0xa, 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100006cf96b10e8096200f280010203010902120001000000000904"], 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:textrel_shlib_t:s0\x00', 0x25, 0x1) socket$inet_udp(0x2, 0x2, 0x0) 2.505468434s ago: executing program 4 (id=234): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TCFLSH(r1, 0x40087101, 0x8000000000000001) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x12061, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 2.377652081s ago: executing program 4 (id=236): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000000007ea45aee0000001000000000000c0400000000005f00"], 0x0, 0x34}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4b906", 0x48, 0x3a, 0x1, @private1, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x4000, 0x33, 0x0, @loopback, @empty, [@srh={0x33, 0x2, 0x4, 0x1, 0x6, 0x70, 0xff, [@local]}]}}}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, 0x32) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001d80)="89d678ce056c6ec3a758a18badbd3f1e8e69623f3a521c407ec0d5f1a2755b4249a56d0b131c3bb9f38c99db3a276c94a27e6f85360ab92b31216fad2398a44e7cd39359af752369a27c1852725ddbf74a2b5dec2e27c4dcefd2ddc9b5a41af61293026e8ef680188f6ad68f8f85264053b003a1a119ff6bca14fbb9238a3d699738efaef34f6cf94a487157402c5c4a27dcdf687365710b68b4d89cb38359f3e57aee5d8c4bd49a421acc3eb0f92fc9dd28df931d97a80f4f0dbe59b0778f2cc02fe8d0ce1a96b578b4546abc5122ef4f94f79816abfa2e0555043ccf0b1e4ac1febe6a6a7e0f19ffc02c1d925f9236382928a5ea08be32cb8ca2571b6c94c5dc893541472b70d102c1a36219f4fb9f0690284b7d4cf8f99ab014688db7c7b0d1cfe978b9275a8269870ba255e17282fa697100b6cf1756a521e22b7411836b6a20d6e74b689d31e0f34c061d42fd4730ca843e86a09945d45a55ac0b5f7d003afdc2c6654a59dc8820d86c7dbee17f35142c6c20a1ac6afe27a4b862373e62609908ecb8f752a9359c09af8700a366c5838b03832b184feaee01c8f7fb55eae5ffd05e33b66d8547c48f258da49186f2b8f36ec8d1191f70637c194e2ba5576e98d78bdf617ae2bb8253318b869459d4abc16160fc35d55bfc7520c021aa66f424522215e7a11f36df3433d321b8578ad5e5340d594321f9e40de502539a910c6f7483fdf7194d59765b987c2a938683aa05c29d1c851d1ac03b2c261c1e027cee876d0c192272eb5504714bccf86d8eca4448dc905c3d99e4fc40297f56c90e9e845e40f9573899e308f7bda4137c4088e0ad0bc1583104094f5820dbe4861ea8988aaaf564419d75e602694a7e0b6a9d3dfd19818bd79d5d117be2d9002b24", 0x281}], 0x1}}], 0x3, 0x8008800) 2.214088881s ago: executing program 1 (id=237): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x4414, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES16, @ANYRES8], 0x1, 0x2aa, &(0x7f0000000ac0)="$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") r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 3) utimes(&(0x7f0000000080)='./file0/file0\x00', 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000002c0)=@attr_pmu_init) read$eventfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) 1.609755496s ago: executing program 1 (id=238): syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c240202030202508000090111240605020507002e130a004ef10200000924030102020505f50904010000010200000904010101010200000905010920009301050725010003480f090402000001020000090402010101ff0000090582"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf2518000000000f0002006e657464657673696d300000080003000100000008000b000e00000006001600090000000500120001000000060011000080000008000b000100000008000728ebdb810011000200303030303a30303a31302e3000000000080003000200000008000b0000000080050016000600000009ff120001010000060011000d00000008"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40440c4) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000016060207000000000000000600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999f9d60bb39d0af449deaa27ea94edb86af3253c0a89449e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e47671d1000000004000b6c17fb01dde179c1f2686ee970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c0130000000000000000000000000000000061c5ff770aa6adfdda3ab265bc9f8daef44568a76bbab79dedb657da6331fba0dc41214edadfe931ee7235857686f11d00703d0730b23cf4f2a4d60fa59e743b606047f58339b1a8fc4742ce3c0b16f2c4ceb096584a88ca0a306ab3b1bc171ae718a1453f10d700ef0000000000000000faecbf694aaa9c769998a797a1fe263ddfccebdee479598ad9a758b48037a66dd606d87c6e1c0765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 1.415771447s ago: executing program 4 (id=239): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x8}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}]}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000004c0)=""/204, 0x52, 0xcc, 0x1}, 0x28) r2 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000071120e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000001000)={0x90000000, &(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00), {0x3a}, &(0x7f0000000e40)=""/112, 0x70, &(0x7f0000000ec0)=""/205, &(0x7f0000000fc0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001080)=0x0) capget(&(0x7f0000001100)={0x20080522, r3}, &(0x7f00000010c0)={0x2000007, 0x6, 0x8, 0xbc, 0x46, 0x6}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000cc0)) sendmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000c40)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000000300)=""/116, 0x74}, {&(0x7f0000000380)=""/119, 0x77}, {&(0x7f0000000400)=""/171, 0xab}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f0000000780)=""/202, 0xca}], 0x8, &(0x7f0000000880)=""/162, 0xa2}, 0x5}, {{&(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/134, 0x86}, {&(0x7f0000000a80)=""/122, 0x7a}, {&(0x7f0000000b00)=""/30, 0x1e}], 0x3, &(0x7f0000000b80)=""/187, 0xbb}}], 0x2, 0x40000100, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000d00)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000d40)=0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000011c0)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c2730e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab68906000000a2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16df94752c1bfc994eb66d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863f66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d0100634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56a52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88282eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc200000000000000000000006ca0e04c63f5a6315614abafd36b310e6ffb6a1502aa7e6e652d202019906a124354ac89f4e567f7a54d2513057acc5effd0c0d12b4ad6b5494d96a137778e3030874935102d2c0feaccdbe04f24ac5dbd02a590706c80494d9842c382b52dbcb5fb3d7d137bb2bb44e2e5fb674e67e7a7042c2f1e66a737833a28e6897ae647cd04bcba6a43bbf0f1b95078ae1863db8f49580bd2643843bdbe749e1a93cb36bf2b3f00af1e49217d61e1ccabc684"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r9, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f0000000ec0)) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x3, 0x32, 0xd, 0x18, 0x4, 0xff5c, 0x1, 0x49, 0xffffffffffffffff}) 1.092206097s ago: executing program 6 (id=226): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000340)=@v1={0x0, @adiantum, 0x4, @desc4}) (fail_nth: 7) 373.569179ms ago: executing program 6 (id=240): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x8}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}]}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000004c0)=""/204, 0x52, 0xcc, 0x1}, 0x28) r2 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000071120e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000001000)={0x90000000, &(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00), {0x3a}, &(0x7f0000000e40)=""/112, 0x70, &(0x7f0000000ec0)=""/205, &(0x7f0000000fc0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001080)=0x0) capget(&(0x7f0000001100)={0x20080522, r3}, &(0x7f00000010c0)={0x2000007, 0x6, 0x8, 0xbc, 0x46, 0x6}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000cc0)) sendmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000c40)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000000300)=""/116, 0x74}, {&(0x7f0000000380)=""/119, 0x77}, {&(0x7f0000000400)=""/171, 0xab}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f0000000780)=""/202, 0xca}], 0x8, &(0x7f0000000880)=""/162, 0xa2}, 0x5}, {{&(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/134, 0x86}, {&(0x7f0000000a80)=""/122, 0x7a}, {&(0x7f0000000b00)=""/30, 0x1e}], 0x3, &(0x7f0000000b80)=""/187, 0xbb}}], 0x2, 0x40000100, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000d00)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000d40)=0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000011c0)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c2730e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab68906000000a2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16df94752c1bfc994eb66d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863f66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d0100634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56a52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88282eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc200000000000000000000006ca0e04c63f5a6315614abafd36b310e6ffb6a1502aa7e6e652d202019906a124354ac89f4e567f7a54d2513057acc5effd0c0d12b4ad6b5494d96a137778e3030874935102d2c0feaccdbe04f24ac5dbd02a590706c80494d9842c382b52dbcb5fb3d7d137bb2bb44e2e5fb674e67e7a7042c2f1e66a737833a28e6897ae647cd04bcba6a43bbf0f1b95078ae1863db8f49580bd2643843bdbe749e1a93cb36bf2b3f00af1e49217d61e1ccabc684"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r9, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f0000000ec0)) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x3, 0x32, 0xd, 0x18, 0x4, 0xff5c, 0x1, 0x49, 0xffffffffffffffff}) 370.709529ms ago: executing program 4 (id=241): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 294.753344ms ago: executing program 5 (id=235): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80c00, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2a5) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f0000000040)="563471bae4d51323a9b2a57e1938d7bad362ff6811e358a149b6f729fb52695cb8bc619591c36711f23c61a10f7bd7d7b995524d54792c124422fc8525910b93b68da725d73fe136b6b083ee570202cee83106f4cd095358062a14ae", &(0x7f00000000c0)=""/163, &(0x7f0000000180)="30f3a20ee834bf1d88e35326e8b1443d26a1f9186bab27c2584e0e0a4593b4d69fc1a9309fc90179007ff0476ee1d5ef1f5f47be312e07ead8b680e332cedb8f93ba8a9a663cca4be6294adf3dfd5a50a0addfae167f4217392752236bb1d747640ad3994f1a6ba250402bd09df31b99698126623b7462086a48a6f10ac9230cca8405e64cc47dc6dd9eb46db92828aa9b0d4867bfe6e3e8a7e7819517d574831eae67983c1070096602d37671190d0c81b5acbabcaca376d89503dd42f43ec7b5ff98e8a6b6addabce6a7114a96fa1dce491453ce414f03a9", &(0x7f0000000280)="f3e2dfc79342ff54261d0f54cccfc85d1ec546a9f6efc989bf9971f014780eff8f2cd0e94c6752fc7b721a735679ae345c53e5902db8f75fdeeea8068593197a137f5507329c1be5aab66367759548abbfa8ab6a0b9bc7f458a3b2d9dd90d2486f4bec1b3945e7e7d40398df93ea143103340b74ed18f6221d45dd09d16bb877312c1b6df682eb891845dd79d7552c01adb1da85ce13cb93b0de7d8de7c11153fda56a4a0c1166c8cee0c5d0e7f280fe8bb31ee2745d7a16e6540f7a15128c7a76751370dace19c188978abeb70caf22da8225cdcf5a6f6e02cf0de930a2e36acced48487dbbcb3a41aadc6ff79daabd", 0x0, r0, 0x4}, 0x38) read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2, &(0x7f00000044c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}, {}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}], [{@fowner_lt={'fowner<', r3}}, {@uid_gt={'uid>', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/null\x00'}}]}}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000004640), 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000004680)=0x5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000046c0), 0x20c101, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000004700)) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, &(0x7f0000004740)) mount$9p_fd(0x0, &(0x7f0000004880)='./file0\x00', &(0x7f00000048c0), 0x2004, &(0x7f0000004900)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@ignoreqv}, {@cache_readahead}, {@ignoreqv}], [{@fsmagic={'fsmagic', 0x3d, 0xff}}]}}) prlimit64(r2, 0x4, &(0x7f00000049c0)={0x80000001, 0x8000000000000000}, &(0x7f0000004a00)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000004c00)={r0, &(0x7f0000004a40)="55134680c00360fd858bb26cba1998a68e4693c7817c6d109581894fde24ac720bf3daf82a44ceea46f1614b9fe5f8446316ae8c32df903b1249a1c0d4d473c88601d33194a8ea54db3c650743a52fb6f9441a851f2c43596b9a439bff68aed6342201e741c85b6203cbad5a4e83263d56870b78483bf45fee05cdffe3e8f906a0a5207e7d9cdd2bd5460c98a77dca10921e1a40cd93150e6b9c0d0f8b340dde2078cb20eececf913ba49a8fb55e899b99d9e7d8db31c99322152530ba71615bd723f6933fbc37094396741d448719120bddccad37979da336a49d06fb591f3aaf6f27c73294c42f6debe7", &(0x7f0000004b40)=""/154}, 0x20) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000004c40)={0x7, 0xffff, 0x66f, 0x4, 0x800}) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f0000004c80)={0x3, 0x3, 0x3}) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$getflags(r7, 0xb) listen(r7, 0x54) getsockname$packet(r0, &(0x7f0000004d00)={0x11, 0x0, 0x0}, &(0x7f0000004d40)=0x14) sendmsg$nl_route(r5, &(0x7f0000004e00)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004d80)=@delneigh={0x2c, 0x1d, 0x2, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, r8, 0x8, 0x28, 0x4}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_VNI={0x8, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40800) getsockname(r5, &(0x7f0000004e40)=@ethernet={0x0, @remote}, &(0x7f0000004ec0)=0x80) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000004f00)={0x2, 0xffffffff, 0x10000, 0x6, 0x4, 0xfffffffd}) r9 = accept4$vsock_stream(r5, &(0x7f0000004f40), 0x10, 0x800) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r9) ioctl$KVM_TDX_FINALIZE_VM(r5, 0xc008aeba, &(0x7f0000004f80)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000005040)={'ip6tnl0\x00', &(0x7f0000004fc0)={'ip6tnl0\x00', r8, 0x77, 0x7, 0x1, 0x3, 0x1a, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x700, 0x8, 0x1, 0x2}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005080)='/sys/kernel/rcu_normal', 0x410200, 0x10) 263.206635ms ago: executing program 5 (id=242): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000002c0)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYRES8=r1], 0x1, 0x14f3, &(0x7f0000001580)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noload}, {@resgid={'resgid', 0x3d, r2}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x923004, 0x0, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88901, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88901, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfffffd0000000000000000850000003600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfffffd0000000000000000850000003600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, 0x0) (async) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (async) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) r8 = getpid() syz_pidfd_open(r8, 0x0) (async) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) (async) setns(r11, 0x24020000) mount(0x0, 0x0, 0x0, 0x2000189, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x215463, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 262.451445ms ago: executing program 4 (id=243): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, {0x0, 0x0, [0x1000000]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) 169.420751ms ago: executing program 3 (id=244): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TCFLSH(r1, 0x40087101, 0x8000000000000001) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x12061, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 169.19767ms ago: executing program 4 (id=245): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") socket(0x26, 0x6, 0x8) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b46ea5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9"], 0x1, 0x5514, &(0x7f0000013680)="$eJzs3M1rI2UcB/Bf2u2+uxbx4G0HFqGFTdh0X9Dbqrv4gl2KLwdPmiZpyG6SKU2a1p48eBQP/iei4Mmjf4MHz97Eg+JNWMk8U9n6gkqzjd1+PjD9zjyZ/Ob3hNLyTEICOLEWs19+qsSlOBcR8xFxMaLYr5Rb4XaK5yLickTMPbJVyvHfB05HxPmIuDQpnmpWyoc+uzq+cvPHN37++tszpy58/tV3s5s1MGvPR0R/M+3v9FPmnZT3y/HGuFtk/8a4zPRA/0F5nKfcaa8XFXYa++c1irzeSefnm9vDSW70Gs1JdrobxfjmIF1wOO7s1ymecL+xVRy32utFdod5kZ291NfuXvrbtjccpTqtst6HRfkYjfYzjbd322k+mw+KbA5G5Xiqm7fau5Mcl1leLpp5r1X0sX6YV/r/7c3uYHs3G7e3ht18kN2s1V+o1W9V61t5qz1q36g2+q1bN7KlTm9yWnXUbvRvd/K802vXmnl/OVvqNJvVej1butNe7zYGWb1eu167Vr25XO5dzV69927Wa2VLk3y5O9gedXvDbCPfytIzlrOV2vUXl7Mr9ezt1bVs7a27d1fX3nn/znv3Xlp9/ZXypD+1lS2tXFtZqdavVVfqy8d3/pP/9f9p/h+XTU9x/nAolVk3AHD8WP8D0/fwH8847uv/sP6fCuv/kz1/OBTrfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAE+v7hS9eK3YW0/GFcvypcuiZ8rgSEXMR8fAvzMfpAzXnyzoLf3P+wh96+KYSRYXJNc6U2/mIuF1uvz79uF8FAAAAeHJ9+dHlT9NqPf1YnHVDHKV002bu4gdTqleJiIXFH6ZQJcqbTfHs4btKJr/fp2J3StWKG1hnp1Qs3XI7Na1q/8r8gTj7SFRSzB1pOwAAwJE4uBI42lUIAAAAR+mTWTfAbBTvtJafxS8/wH8mRfmG4LkDRwAAAMAxVJl1AwAAAMBjV6z/ff8fAAAAPNnS9/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAb+zcTU7qUBQH8NOWvsf7yiPGuVtxBstwCQ4dGhbgJlgCbsENsAacuQQDhrYoNZgY+xXJ75e0t7chf06ZnXtJAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALj3my9n97cVd05zNtpl2ngYAAAA4Zp0vZ8XFpJz/qe7/q26dVfMkItKIONa7Z/GjlplVOfkHn8/f1fAQUSTsvuNndfyOiMvqeP7f9a8AAAAAp2s1X0zLbr08TYYuiO6NX6/KRZv071VLyUlE5JOnrwdss4NJujudt1BWYZc8ipuW0ooFrHFLYeWS26ittE/JasP4YEjKIe21HAAAoBf1TqDfLgQAAIA+XQ9dAMNIYr+Vud8LLv55/7Yh+Ks2AwAAAL6hZOgCAAAAgM4V/b/3/wEAAMBpK9//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJfW+XK2mi+mTXM222baeRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF/bnHQVCIAzCYO/6zmTuf1hp0NTUpAqEj78xGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Lmf3yiqOADg39lfWJRYq+mhxmjiQS9SFgS5etA0HvwTTJqyYHXxB/QghJj04s30ZsLF6NEYE0298T9whoQL3jj0gIknD5qZnWkfK+giMLPtfj7Jm/ed2WHe9w1N0++8aQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMrO23txO9/Mj+JWeezG3StreX9zrM9d27q1lLc8zupMen94Kd3JFptLBAAAgNnRrur7iLjd3V7J+9Z8Uf93q3Pymv+7I6O4qufH6/6qr2r/vP36y50XdgeaH42TX/Ts+nBw7J+pdJ7cLKfbs/95Rqe488Wzl3bxH9J6b/P5nW5xP7Ovr19/p1eEh+rIFgD4P45WfRlUPw/lfb/JxACYGZ2k8K7q//Z8szkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1KG3GU9XcRYRS529OHfz7pW1oh/bv7Z1a6lqp65e3UqvmV+iGxFn14eDY3VNZB+4eOnyx6vD4eDCfYO5iHjAR48evBwRj//K8XD/6oMJzol47HMX1Bi0yq/1aclnfwQNf2MCAODA6ZYtr+tvd7dX8mPZQsRf399b/7+WxJHW/2N9Wv/f+fDUjXSstP7v1zbDKfHNkQd+tLxx/rPli5cuv7F+fvXc4NzgkzeP99/qnzh98uTp5eJZybInJgAAADyaXtnS+r+1ELEztv5/OIljwvr/82/7X6ZjtWe5/v8Xe4t+TWcCAAAw25575Y/fs/scz3q9+GJ1Y+NCf7Td3T8+2jaQ6kM7VLa0/m8vNJ0VAAAAUIedzeye9f8zSRwTrv8/88OLP6XXbEfEXLn+f3Tt0+GZ+qbTkD8nOquOXyd+4lMFAABgqs2VLV3/7xbv/7d2X3loRcTrrxZhVv4ZwInq//a7X/2YjpW+/3+ixjlOo9bi6H4U/WJEZ7HpjAAAADjInipbXuz/1t1e+ejnw+/3vP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULe/AwAA///lFT7r") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x107b42, 0xb6) r0 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) fallocate(r0, 0x0, 0x9, 0x2000406) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000340)=@v2={0x2, @aes128, 0x7, '\x00', @b}) 36.040118ms ago: executing program 5 (id=246): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x327, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 0s ago: executing program 3 (id=247): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000200)={0x80000, {{0xa, 0xffff, 0x3, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x2, @loopback, 0xfffffffd}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) close(r7) process_vm_readv(r2, &(0x7f0000000d00)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f00000009c0)=""/141, 0x8d}, {0x0}, {&(0x7f0000000a80)=""/159, 0x9f}, {&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f00000006c0)=""/85, 0x55}], 0x9, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/237, 0xed}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000003c0)=""/13, 0xd}], 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) kernel console output (not intermixed with test programs): 82][ T284] device veth0_vlan entered promiscuous mode [ 28.424855][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.434291][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.444405][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.453368][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.462107][ T286] device veth0_vlan entered promiscuous mode [ 28.478402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.486409][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.494327][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.503453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.516198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.525511][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.534321][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.543461][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.556103][ T285] device veth0_vlan entered promiscuous mode [ 28.573557][ T286] device veth1_macvtap entered promiscuous mode [ 28.590312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.599495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.599779][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 28.611363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.625858][ T284] device veth1_macvtap entered promiscuous mode [ 28.640102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.649542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.675530][ T285] device veth1_macvtap entered promiscuous mode [ 28.704555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.714939][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.724813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.734245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.743312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.753780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.766127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.775486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.784996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.793961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.803894][ T338] loop4: detected capacity change from 0 to 4096 [ 28.832552][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.851760][ T338] EXT4-fs (loop4): Test dummy encryption mode enabled [ 28.852668][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.870240][ T338] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 28.881045][ T338] System zones: 0-5 [ 28.889592][ T338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.127946][ T348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 29.320959][ T357] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.353718][ T361] loop3: detected capacity change from 0 to 128 [ 29.374864][ T361] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 29.404939][ T363] loop1: detected capacity change from 0 to 128 [ 29.431843][ T363] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.637831][ C0] sched: RT throttling activated [ 31.729707][ T309] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.766445][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 31.766465][ T28] audit: type=1400 audit(1769896957.063:123): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.798473][ T287] EXT4-fs (loop4): unmounting filesystem. [ 31.824522][ T373] loop1: detected capacity change from 0 to 512 [ 31.827531][ T28] audit: type=1400 audit(1769896957.123:124): avc: denied { create } for pid=370 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.852522][ T28] audit: type=1400 audit(1769896957.143:125): avc: denied { write } for pid=370 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.874466][ T373] ======================================================= [ 31.874466][ T373] WARNING: The mand mount option has been deprecated and [ 31.874466][ T373] and is ignored by this kernel. Remove the mand [ 31.874466][ T373] option from the mount to silence this warning. [ 31.874466][ T373] ======================================================= [ 31.898142][ T28] audit: type=1400 audit(1769896957.183:126): avc: denied { write } for pid=368 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.930394][ T309] usb 3-1: device descriptor read/64, error -71 [ 31.936973][ T374] loop0: detected capacity change from 0 to 1024 [ 31.965545][ T374] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.978515][ T374] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.008241][ T374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 32.014824][ T373] EXT4-fs: Ignoring removed i_version option [ 32.024097][ T374] System zones: 0-1, 3-36 [ 32.034864][ T373] EXT4-fs: Ignoring removed oldalloc option [ 32.049310][ T374] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.068342][ T373] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.104234][ T373] EXT4-fs (loop1): 1 truncate cleaned up [ 32.111720][ T373] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 32.188241][ T371] loop3: detected capacity change from 0 to 40427 [ 32.209975][ T371] F2FS-fs (loop3): invalid crc value [ 32.223522][ T28] audit: type=1400 audit(1769896957.443:127): avc: denied { setattr } for pid=368 comm="syz.0.8" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.233650][ T371] F2FS-fs (loop3): Found nat_bits in checkpoint [ 32.248451][ T309] usb 3-1: device descriptor read/64, error -71 [ 32.297686][ T371] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 32.423649][ T28] audit: type=1400 audit(1769896957.703:128): avc: denied { create } for pid=372 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.845590][ T28] audit: type=1400 audit(1769896957.783:129): avc: denied { write } for pid=372 comm="syz.1.11" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.045028][ T283] EXT4-fs (loop0): unmounting filesystem. [ 33.097950][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.118820][ T28] audit: type=1400 audit(1769896957.783:130): avc: denied { add_name } for pid=372 comm="syz.1.11" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.270110][ T286] syz-executor: attempt to access beyond end of device [ 33.270110][ T286] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 33.313791][ T28] audit: type=1400 audit(1769896957.783:131): avc: denied { create } for pid=372 comm="syz.1.11" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.337395][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 33.347617][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.423889][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 33.501333][ T24] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 33.551771][ T28] audit: type=1400 audit(1769896957.793:132): avc: denied { create } for pid=372 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 33.624967][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.723731][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 33.766151][ T24] hub: probe of 2-1:1.0 failed with error -5 [ 33.787669][ T394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 34.242951][ T401] loop3: detected capacity change from 0 to 512 [ 34.261017][ T401] EXT4-fs: Ignoring removed i_version option [ 34.275987][ T401] EXT4-fs: Ignoring removed oldalloc option [ 34.283571][ T401] EXT4-fs (loop3): Test dummy encryption mode enabled [ 34.293185][ T401] EXT4-fs (loop3): 1 truncate cleaned up [ 34.299119][ T401] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 34.477742][ T377] loop4: detected capacity change from 0 to 131072 [ 34.485434][ T377] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 35.664683][ T285] EXT4-fs (loop1): unmounting filesystem. [ 35.907956][ T40] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 35.998481][ T388] usb 2-1: USB disconnect, device number 2 [ 36.128070][ T40] usb 4-1: Using ep0 maxpacket: 8 [ 36.136455][ T40] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.198527][ T40] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.207688][ T40] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 36.247957][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.249812][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.300261][ T40] hub 4-1:1.0: bad descriptor, ignoring hub [ 36.323808][ T40] hub: probe of 4-1:1.0 failed with error -5 [ 36.457910][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 36.464408][ T6] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 36.474073][ T6] usb 3-1: config 0 has no interface number 0 [ 36.557104][ T415] Zero length message leads to an empty skb [ 36.632697][ T415] loop1: detected capacity change from 0 to 256 [ 37.536176][ T6] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 37.584501][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.593633][ T6] usb 3-1: Product: syz [ 37.602752][ T6] usb 3-1: Manufacturer: syz [ 37.611843][ T6] usb 3-1: SerialNumber: syz [ 37.620717][ T6] usb 3-1: config 0 descriptor?? [ 37.632353][ T6] smsc95xx v2.0.0 [ 37.660875][ T417] loop4: detected capacity change from 0 to 256 [ 37.748320][ T417] FAT-fs (loop4): Directory bread(block 64) failed [ 37.755200][ T417] FAT-fs (loop4): Directory bread(block 65) failed [ 37.771683][ T417] FAT-fs (loop4): Directory bread(block 66) failed [ 37.801474][ T419] loop1: detected capacity change from 0 to 512 [ 37.808281][ T417] FAT-fs (loop4): Directory bread(block 67) failed [ 37.815150][ T417] FAT-fs (loop4): Directory bread(block 68) failed [ 37.832891][ T6] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 37.848008][ T417] FAT-fs (loop4): Directory bread(block 69) failed [ 37.850574][ T419] EXT4-fs: Ignoring removed i_version option [ 37.865933][ T6] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 37.868099][ T417] FAT-fs (loop4): Directory bread(block 70) failed [ 37.873540][ T419] EXT4-fs: Ignoring removed oldalloc option [ 37.887067][ T6] usb 3-1: USB disconnect, device number 4 [ 37.905864][ T419] EXT4-fs (loop1): Test dummy encryption mode enabled [ 37.913004][ T417] FAT-fs (loop4): Directory bread(block 71) failed [ 37.920648][ T417] FAT-fs (loop4): Directory bread(block 72) failed [ 37.926961][ T419] EXT4-fs (loop1): 1 truncate cleaned up [ 37.927404][ T417] FAT-fs (loop4): Directory bread(block 73) failed [ 37.941721][ T419] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.030700][ T408] loop0: detected capacity change from 0 to 131072 [ 38.064841][ T417] syz.4.19: attempt to access beyond end of device [ 38.064841][ T417] loop4: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 38.079103][ T417] syz.4.19: attempt to access beyond end of device [ 38.079103][ T417] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 38.092958][ T408] F2FS-fs (loop0): Test dummy encryption mode enabled [ 38.102193][ T408] F2FS-fs (loop0): invalid crc value [ 38.114812][ T408] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.124655][ T417] syz.4.19: attempt to access beyond end of device [ 38.124655][ T417] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 38.318105][ T416] syz.4.19: attempt to access beyond end of device [ 38.318105][ T416] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 38.390226][ T408] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 38.405253][ T417] syz.4.19: attempt to access beyond end of device [ 38.405253][ T417] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 38.517968][ T40] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.901924][ T286] EXT4-fs (loop3): unmounting filesystem. [ 38.960529][ T416] syz.4.19: attempt to access beyond end of device [ 38.960529][ T416] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 38.993398][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 38.993426][ T28] audit: type=1400 audit(1769896964.293:153): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 39.058223][ T392] usb 4-1: USB disconnect, device number 2 [ 39.127942][ T40] usb 2-1: Using ep0 maxpacket: 8 [ 39.135287][ T40] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.208969][ T417] syz.4.19: attempt to access beyond end of device [ 39.208969][ T417] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 39.251376][ T40] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 39.310361][ T28] audit: type=1400 audit(1769896964.583:154): avc: denied { read } for pid=429 comm="syz.2.22" dev="nsfs" ino=4026532294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.349673][ T40] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 39.362486][ T416] syz.4.19: attempt to access beyond end of device [ 39.362486][ T416] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 39.387015][ T28] audit: type=1400 audit(1769896964.583:155): avc: denied { open } for pid=429 comm="syz.2.22" path="net:[4026532294]" dev="nsfs" ino=4026532294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.410621][ T28] audit: type=1400 audit(1769896964.593:156): avc: denied { create } for pid=429 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 39.430633][ T417] syz.4.19: attempt to access beyond end of device [ 39.430633][ T417] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 39.444498][ T417] syz.4.19: attempt to access beyond end of device [ 39.444498][ T417] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 39.458040][ T417] syz.4.19: attempt to access beyond end of device [ 39.458040][ T417] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 39.471548][ T417] syz.4.19: attempt to access beyond end of device [ 39.471548][ T417] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 39.485047][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.490459][ T417] syz.4.19: attempt to access beyond end of device [ 39.490459][ T417] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 39.554747][ T40] hub 2-1:1.0: bad descriptor, ignoring hub [ 39.562804][ T436] loop2: detected capacity change from 0 to 512 [ 39.577873][ T40] hub: probe of 2-1:1.0 failed with error -5 [ 39.606779][ T436] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 39.623523][ T436] EXT4-fs (loop2): invalid journal inode [ 39.631139][ T436] EXT4-fs (loop2): can't get journal size [ 39.653939][ T436] EXT4-fs (loop2): 1 truncate cleaned up [ 39.688294][ T436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.710136][ T436] netlink: 'syz.2.24': attribute type 3 has an invalid length. [ 39.729487][ T28] audit: type=1400 audit(1769896965.033:157): avc: denied { read append open } for pid=435 comm="syz.2.24" path="/3/file0/file0/blkio.bfq.io_queued_recursive" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.896771][ T284] EXT4-fs (loop2): unmounting filesystem. [ 39.920602][ T433] loop3: detected capacity change from 0 to 128 [ 39.933566][ T443] loop2: detected capacity change from 0 to 128 [ 39.940762][ T433] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000006f) [ 39.966143][ T433] FAT-fs (loop3): Filesystem has been set read-only [ 39.981408][ T443] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.014228][ T440] process 'syz.3.21' launched './file2' with NULL argv: empty string added [ 40.028356][ T440] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 40.045935][ T440] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 40.076716][ T440] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 40.090881][ T28] audit: type=1400 audit(1769896965.393:158): avc: denied { name_bind } for pid=445 comm="syz.0.23" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.117905][ T440] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 40.139203][ T28] audit: type=1400 audit(1769896965.393:159): avc: denied { node_bind } for pid=445 comm="syz.0.23" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 40.153159][ T440] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 40.190060][ T440] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 40.199869][ T440] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 40.277588][ T450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 40.687513][ T456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 41.443076][ T392] usb 2-1: USB disconnect, device number 3 [ 42.112543][ T285] EXT4-fs (loop1): unmounting filesystem. [ 42.165343][ T458] loop1: detected capacity change from 0 to 512 [ 42.210122][ T458] EXT4-fs: Ignoring removed oldalloc option [ 42.244953][ T458] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.309894][ T467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30'. [ 42.493269][ T285] EXT4-fs (loop1): unmounting filesystem. [ 42.660425][ T471] loop1: detected capacity change from 0 to 512 [ 42.679149][ T471] EXT4-fs: Ignoring removed i_version option [ 42.691781][ T471] EXT4-fs: Ignoring removed oldalloc option [ 42.740407][ T471] EXT4-fs (loop1): Test dummy encryption mode enabled [ 42.761787][ T471] EXT4-fs (loop1): 1 truncate cleaned up [ 42.768638][ T471] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.478053][ T392] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.688012][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.717954][ T392] usb 1-1: Using ep0 maxpacket: 32 [ 43.726560][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.854444][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.918028][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 43.924999][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.981231][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 44.023136][ T392] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 44.069458][ T479] loop4: detected capacity change from 0 to 512 [ 44.099093][ T24] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 44.123076][ T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.207488][ T479] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 3: comm syz.4.35: lblock 0 mapped to illegal pblock 3 (length 1) [ 44.227882][ T479] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.35: error -117 reading directory block [ 44.239807][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.240829][ T479] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 44.257322][ T479] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.277057][ T392] usb 1-1: config 0 descriptor?? [ 44.283949][ T392] hub 1-1:0.0: USB hub found [ 44.298909][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 44.318079][ T24] hub: probe of 2-1:1.0 failed with error -5 [ 44.493681][ T486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 45.103165][ T392] hub 1-1:0.0: 1 port detected [ 45.308730][ T490] loop2: detected capacity change from 0 to 4096 [ 45.331644][ T490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.341189][ T28] audit: type=1400 audit(1769896970.643:160): avc: denied { write } for pid=478 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.378149][ T491] loop3: detected capacity change from 0 to 128 [ 45.398970][ T28] audit: type=1400 audit(1769896970.643:161): avc: denied { nlmsg_write } for pid=478 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.420876][ T287] EXT4-fs (loop4): unmounting filesystem. [ 45.440088][ T491] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000006f) [ 45.458251][ T491] FAT-fs (loop3): Filesystem has been set read-only [ 45.472727][ T491] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 45.492397][ T491] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 45.504500][ T491] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 45.515340][ T491] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 45.524627][ T491] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 45.533577][ T491] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 45.542542][ T491] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 45.552696][ T491] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 45.708033][ T28] audit: type=1400 audit(1769896970.933:162): avc: denied { connect } for pid=489 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.825862][ T28] audit: type=1400 audit(1769896970.933:163): avc: denied { write } for pid=489 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.102193][ T501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'. [ 46.360715][ T392] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 46.490066][ T284] EXT4-fs (loop2): unmounting filesystem. [ 46.508754][ T285] EXT4-fs (loop1): unmounting filesystem. [ 46.523494][ T392] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 46.538645][ T392] usbhid 1-1:0.0: can't add hid device: -71 [ 46.546462][ T392] usbhid: probe of 1-1:0.0 failed with error -71 [ 46.562143][ T503] loop2: detected capacity change from 0 to 512 [ 46.580621][ T503] EXT4-fs: Ignoring removed i_version option [ 46.608183][ T503] EXT4-fs: Ignoring removed oldalloc option [ 46.616435][ T505] loop1: detected capacity change from 0 to 512 [ 46.623452][ T392] usb 1-1: USB disconnect, device number 2 [ 46.636821][ T503] EXT4-fs (loop2): Test dummy encryption mode enabled [ 46.658004][ T24] usb 2-1: USB disconnect, device number 4 [ 46.665831][ T505] EXT4-fs: Ignoring removed oldalloc option [ 46.677505][ T505] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.692991][ T503] EXT4-fs (loop2): 1 truncate cleaned up [ 46.721769][ T285] EXT4-fs (loop1): unmounting filesystem. [ 46.727762][ T503] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.895671][ T515] loop3: detected capacity change from 0 to 128 [ 47.031964][ T515] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.287999][ T392] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 47.298060][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 47.477936][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 47.477964][ T392] usb 1-1: Using ep0 maxpacket: 32 [ 47.490864][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.550384][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.566968][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.670143][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 47.686590][ T392] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 47.871686][ T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.892921][ T24] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 47.982942][ T392] usb 1-1: config 0 descriptor?? [ 47.998310][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.051455][ T392] hub 1-1:0.0: USB hub found [ 48.153913][ T24] hub 3-1:1.0: bad descriptor, ignoring hub [ 48.201383][ T24] hub: probe of 3-1:1.0 failed with error -5 [ 49.027913][ T392] hub 1-1:0.0: 1 port detected [ 49.055221][ T522] loop3: detected capacity change from 0 to 512 [ 49.070963][ T522] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 49.080669][ T522] EXT4-fs (loop3): invalid journal inode [ 49.086568][ T522] EXT4-fs (loop3): can't get journal size [ 49.119177][ T522] EXT4-fs (loop3): 1 truncate cleaned up [ 49.126787][ T522] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 49.150309][ T526] loop1: detected capacity change from 0 to 512 [ 49.157132][ T522] netlink: 'syz.3.47': attribute type 3 has an invalid length. [ 49.168752][ T526] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 49.189950][ T286] EXT4-fs (loop3): unmounting filesystem. [ 49.196536][ T526] EXT4-fs (loop1): invalid journal inode [ 49.218528][ T526] EXT4-fs (loop1): can't get journal size [ 49.229900][ T392] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 49.238058][ T392] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 49.249414][ T526] EXT4-fs (loop1): 1 truncate cleaned up [ 49.255477][ T526] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 49.281702][ T526] netlink: 'syz.1.48': attribute type 3 has an invalid length. [ 49.281720][ T392] usbhid 1-1:0.0: can't add hid device: -71 [ 49.281908][ T392] usbhid: probe of 1-1:0.0 failed with error -71 [ 49.320136][ T285] EXT4-fs (loop1): unmounting filesystem. [ 49.347151][ T28] audit: type=1400 audit(1769896974.643:164): avc: denied { append } for pid=532 comm="syz.3.52" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.374467][ T534] loop3: detected capacity change from 0 to 1024 [ 49.396958][ T534] EXT4-fs: dax option not supported [ 49.409816][ T392] usb 1-1: USB disconnect, device number 3 [ 49.426539][ T28] audit: type=1400 audit(1769896974.723:165): avc: denied { create } for pid=532 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.499333][ T541] loop3: detected capacity change from 0 to 512 [ 49.514395][ T541] EXT4-fs: Ignoring removed oldalloc option [ 49.569661][ T541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 49.713399][ T284] EXT4-fs (loop2): unmounting filesystem. [ 49.727008][ T544] loop1: detected capacity change from 0 to 128 [ 49.734432][ T24] usb 3-1: USB disconnect, device number 5 [ 49.814970][ T286] EXT4-fs (loop3): unmounting filesystem. [ 49.973837][ T544] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000006f) [ 49.991603][ T550] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 50.006866][ T544] FAT-fs (loop1): Filesystem has been set read-only [ 50.015897][ T550] overlayfs: missing 'lowerdir' [ 50.050244][ T28] audit: type=1400 audit(1769896975.353:166): avc: denied { create } for pid=547 comm="syz.2.56" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 50.051897][ T551] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 50.085091][ T551] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 50.094295][ T551] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 50.104338][ T551] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 50.114075][ T551] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 50.162614][ T551] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 50.173730][ T551] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 50.192291][ T551] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 50.318012][ T28] audit: type=1400 audit(1769896975.613:167): avc: denied { create } for pid=562 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 50.435649][ T568] loop3: detected capacity change from 0 to 4096 [ 50.447559][ T568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.457626][ T28] audit: type=1400 audit(1769896975.753:168): avc: denied { mount } for pid=567 comm="syz.3.62" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.597882][ T388] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 50.678018][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 50.798436][ T388] usb 1-1: Using ep0 maxpacket: 32 [ 50.806700][ T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.818261][ T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.828592][ T388] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.837727][ T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.846789][ T388] usb 1-1: config 0 descriptor?? [ 50.853328][ T388] hub 1-1:0.0: USB hub found [ 50.858361][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 50.864783][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.876177][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.886357][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.895605][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.905077][ T24] usb 3-1: config 0 descriptor?? [ 50.911415][ T24] hub 3-1:0.0: USB hub found [ 50.987914][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.053259][ T388] hub 1-1:0.0: 1 port detected [ 51.111666][ T24] hub 3-1:0.0: 1 port detected [ 51.138002][ T6] usb 5-1: device descriptor read/64, error -71 [ 51.301098][ T28] audit: type=1400 audit(1769896976.603:169): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.305897][ T286] EXT4-fs (loop3): unmounting filesystem. [ 51.351404][ T576] loop1: detected capacity change from 0 to 40427 [ 51.366451][ T576] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 51.383082][ T576] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 51.392576][ T576] F2FS-fs (loop1): invalid crc value [ 51.399413][ T576] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.437981][ T6] usb 5-1: device descriptor read/64, error -71 [ 51.446901][ T576] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 51.454580][ T576] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.494617][ T28] audit: type=1400 audit(1769896976.793:170): avc: denied { write } for pid=575 comm="syz.1.63" path="/12/file0/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.520318][ T28] audit: type=1400 audit(1769896976.823:171): avc: denied { setattr } for pid=575 comm="syz.1.63" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.543748][ T28] audit: type=1400 audit(1769896976.823:172): avc: denied { ioctl } for pid=575 comm="syz.1.63" path="/12/file0/file1" dev="loop1" ino=10 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.651212][ T388] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 52.657901][ T24] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 52.666722][ T24] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 52.675240][ T388] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 53.638218][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.650446][ T388] usbhid 1-1:0.0: can't add hid device: -32 [ 53.656747][ T388] usbhid: probe of 1-1:0.0 failed with error -32 [ 53.663227][ T24] usbhid 3-1:0.0: can't add hid device: -32 [ 53.674546][ T24] usbhid: probe of 3-1:0.0 failed with error -32 [ 54.648204][ T28] audit: type=1400 audit(1769896979.953:173): avc: denied { append } for pid=583 comm="syz.0.66" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 55.632305][ T6] usb 5-1: device descriptor read/64, error -71 [ 55.639288][ T24] usb 3-1: USB disconnect, device number 6 [ 55.645233][ T388] usb 1-1: USB disconnect, device number 4 [ 55.706838][ T587] loop2: detected capacity change from 0 to 512 [ 55.746819][ T587] EXT4-fs: Ignoring removed oldalloc option [ 55.780229][ T587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 55.844784][ T595] loop0: detected capacity change from 0 to 256 [ 55.852013][ T595] FAT-fs (loop0): Unrecognized mount option "check=strikt" or missing value [ 56.369239][ T596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 56.456594][ T598] loop3: detected capacity change from 0 to 512 [ 56.549285][ T598] EXT4-fs: Ignoring removed oldalloc option [ 56.555308][ T598] ext3: Bad value for 'resgid' [ 56.588359][ T342] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.601175][ T28] audit: type=1400 audit(1769896981.903:174): avc: denied { create } for pid=583 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.707354][ T386] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.720413][ T284] EXT4-fs (loop2): unmounting filesystem. [ 56.823864][ T604] loop1: detected capacity change from 0 to 4096 [ 56.849341][ T604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.933903][ T28] audit: type=1400 audit(1769896982.233:175): avc: denied { read } for pid=611 comm="syz.3.73" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.983144][ T28] audit: type=1400 audit(1769896982.233:176): avc: denied { open } for pid=611 comm="syz.3.73" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.027262][ T617] loop4: detected capacity change from 0 to 4096 [ 57.038469][ T606] loop2: detected capacity change from 0 to 128 [ 57.056534][ T621] loop0: detected capacity change from 0 to 128 [ 57.076017][ T621] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.089110][ T617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.195190][ T606] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000006f) [ 57.234247][ T606] FAT-fs (loop2): Filesystem has been set read-only [ 57.258697][ T625] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 57.279669][ T625] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 57.316974][ T625] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 57.376176][ T625] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 57.415027][ T625] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 57.455903][ T625] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 57.495002][ T625] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 57.538880][ T625] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 57.627935][ T367] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 58.708457][ T285] EXT4-fs (loop1): unmounting filesystem. [ 58.731111][ T287] EXT4-fs (loop4): unmounting filesystem. [ 58.737908][ T367] usb 4-1: device descriptor read/64, error -71 [ 58.757607][ T629] loop1: detected capacity change from 0 to 512 [ 58.774785][ T630] loop0: detected capacity change from 0 to 512 [ 58.787952][ T629] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 58.798659][ T629] EXT4-fs (loop1): invalid journal inode [ 58.804891][ T629] EXT4-fs (loop1): can't get journal size [ 58.824854][ T630] EXT4-fs: Ignoring removed i_version option [ 58.831153][ T630] EXT4-fs: Ignoring removed oldalloc option [ 58.839540][ T629] EXT4-fs (loop1): 1 truncate cleaned up [ 58.847605][ T630] EXT4-fs (loop0): Test dummy encryption mode enabled [ 58.855255][ T28] audit: type=1400 audit(1769896984.153:177): avc: denied { write } for pid=631 comm="syz.2.77" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.881305][ T629] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 58.898623][ T629] netlink: 'syz.1.78': attribute type 3 has an invalid length. [ 58.914324][ T28] audit: type=1400 audit(1769896984.153:178): avc: denied { map } for pid=631 comm="syz.2.77" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.923452][ T285] EXT4-fs (loop1): unmounting filesystem. [ 58.949392][ T630] EXT4-fs (loop0): 1 truncate cleaned up [ 58.967985][ T630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 58.982390][ T642] loop1: detected capacity change from 0 to 16 [ 58.991437][ T642] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 10000) [ 59.007887][ T367] usb 4-1: device descriptor read/64, error -71 [ 59.126100][ T28] audit: type=1400 audit(1769896984.423:179): avc: denied { create } for pid=641 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.537955][ T309] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 59.727952][ T309] usb 1-1: Using ep0 maxpacket: 8 [ 59.735394][ T309] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.747588][ T309] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.757885][ T309] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 59.769350][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.841599][ T309] hub 1-1:1.0: bad descriptor, ignoring hub [ 59.847659][ T309] hub: probe of 1-1:1.0 failed with error -5 [ 60.210470][ T648] EXT4-fs: Ignoring removed oldalloc option [ 60.262599][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 60.291452][ T648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 60.322700][ T648] fscrypt (loop1, inode 18): Direct key flag not allowed with different contents and filenames modes [ 60.351197][ T285] EXT4-fs (loop1): unmounting filesystem. [ 60.381706][ T28] audit: type=1400 audit(1769896985.683:180): avc: denied { ioctl } for pid=656 comm="syz.4.86" path="socket:[17412]" dev="sockfs" ino=17412 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.410206][ T659] binder: 658:659 ioctl c0306201 0 returned -14 [ 60.420715][ T28] audit: type=1400 audit(1769896985.713:181): avc: denied { ioctl } for pid=658 comm="syz.1.85" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.446874][ T28] audit: type=1400 audit(1769896985.723:182): avc: denied { mounton } for pid=658 comm="syz.1.85" path="/17/file0" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.448101][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 60.477458][ T6] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 60.486070][ T6] usb 3-1: config 0 has no interface number 0 [ 60.492754][ T6] usb 3-1: config 0 interface 184 has no altsetting 0 [ 60.501626][ T420] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 60.515872][ T6] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 60.526379][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.535948][ T6] usb 3-1: Product: syz [ 60.549990][ T6] usb 3-1: Manufacturer: syz [ 60.555799][ T6] usb 3-1: SerialNumber: syz [ 60.564563][ T659] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 60.581360][ T6] usb 3-1: config 0 descriptor?? [ 60.592718][ T659] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.605715][ T6] smsc75xx v1.0.0 [ 60.622588][ T659] EXT4-fs (loop1): unmounting filesystem. [ 60.666898][ T659] EXT4-fs: Ignoring removed orlov option [ 60.676291][ T659] ext3: Bad value for 'init_itable' [ 60.740167][ T28] audit: type=1400 audit(1769896986.043:183): avc: denied { create } for pid=658 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.857887][ T367] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 61.011979][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 61.024100][ T367] usb 4-1: device descriptor read/64, error -71 [ 61.039124][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 61.049459][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 61.061354][ T6] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 61.074943][ T6] usb 3-1: USB disconnect, device number 7 [ 61.215662][ T659] binder: 658:659 ioctl c0306201 200000000480 returned -14 [ 61.350883][ T367] usb 4-1: device descriptor read/64, error -71 [ 61.405683][ T665] set_capacity_and_notify: 4 callbacks suppressed [ 61.405702][ T665] loop1: detected capacity change from 0 to 128 [ 61.426961][ T665] bio_check_eod: 7929 callbacks suppressed [ 61.426979][ T665] syz.1.87: attempt to access beyond end of device [ 61.426979][ T665] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 61.447582][ T665] syz.1.87: attempt to access beyond end of device [ 61.447582][ T665] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 61.468117][ T367] usb usb4-port1: attempt power cycle [ 61.491761][ T657] loop4: detected capacity change from 0 to 262144 [ 61.504013][ T657] F2FS-fs (loop4): Found nat_bits in checkpoint [ 61.544661][ T657] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 61.810628][ T283] EXT4-fs (loop0): unmounting filesystem. [ 61.878067][ T367] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 61.918229][ T24] usb 1-1: USB disconnect, device number 5 [ 61.929141][ T367] usb 4-1: device descriptor read/8, error -71 [ 61.977986][ T671] syz.2.90 (671) used greatest stack depth: 21216 bytes left [ 62.043097][ T678] loop4: detected capacity change from 0 to 128 [ 62.061391][ T678] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000006f) [ 62.074629][ T678] FAT-fs (loop4): Filesystem has been set read-only [ 62.124813][ T683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 62.368430][ T367] usb 4-1: device descriptor read/8, error -71 [ 62.596046][ T691] netlink: 'syz.4.93': attribute type 29 has an invalid length. [ 62.603981][ T691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 62.613767][ T691] netlink: 'syz.4.93': attribute type 29 has an invalid length. [ 62.621719][ T691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 63.486171][ T703] binder: 702:703 ioctl c0306201 0 returned -14 [ 63.550200][ T28] audit: type=1400 audit(1769896988.853:184): avc: denied { create } for pid=702 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.572639][ T703] binder: 702:703 ioctl c0306201 200000000480 returned -14 [ 63.587893][ T367] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 63.616776][ T28] audit: type=1400 audit(1769896988.913:185): avc: denied { create } for pid=708 comm="syz.2.102" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.667965][ T28] audit: type=1400 audit(1769896988.913:186): avc: denied { ioctl } for pid=708 comm="syz.2.102" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18435 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.628005][ T367] usb 4-1: device not accepting address 6, error -71 [ 65.638129][ T367] usb usb4-port1: unable to enumerate USB device [ 65.645197][ T28] audit: type=1400 audit(1769896988.913:187): avc: denied { write } for pid=708 comm="syz.2.102" name="pfkey" dev="proc" ino=4026532426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 66.729099][ T721] loop3: detected capacity change from 0 to 512 [ 66.758363][ T727] loop4: detected capacity change from 0 to 512 [ 66.778293][ T721] EXT4-fs: Ignoring removed oldalloc option [ 66.784305][ T727] EXT4-fs: Ignoring removed oldalloc option [ 66.839047][ T721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 66.849830][ T727] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 66.942049][ T727] syz.4.109 (pid 727) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 66.954691][ T286] EXT4-fs (loop3): unmounting filesystem. [ 67.016543][ T287] EXT4-fs (loop4): unmounting filesystem. [ 67.026763][ T738] loop3: detected capacity change from 0 to 512 [ 67.048424][ T738] EXT4-fs: Ignoring removed oldalloc option [ 67.087775][ T738] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 67.120172][ T738] FAULT_INJECTION: forcing a failure. [ 67.120172][ T738] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.158876][ T738] CPU: 1 PID: 738 Comm: syz.3.112 Not tainted syzkaller #0 [ 67.166173][ T738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.176282][ T738] Call Trace: [ 67.179594][ T738] [ 67.182592][ T738] __dump_stack+0x21/0x24 [ 67.187227][ T738] dump_stack_lvl+0x110/0x170 [ 67.192188][ T738] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.197496][ T738] dump_stack+0x15/0x24 [ 67.201850][ T738] should_fail_ex+0x3d4/0x520 [ 67.206606][ T738] should_fail+0xb/0x10 [ 67.211005][ T738] should_fail_usercopy+0x1a/0x20 [ 67.216173][ T738] _copy_from_user+0x1e/0xc0 [ 67.221032][ T738] fscrypt_ioctl_set_policy+0x20d/0x4b0 [ 67.226614][ T738] ? __cfi_fscrypt_ioctl_set_policy+0x10/0x10 [ 67.232970][ T738] ? kernel_text_address+0xa0/0xd0 [ 67.238372][ T738] ? __kernel_text_address+0xd/0x30 [ 67.243682][ T738] ? unwind_get_return_address+0x4d/0x90 [ 67.249583][ T738] ? arch_stack_walk+0xfc/0x150 [ 67.254721][ T738] ext4_ioctl+0x1b17/0x3e90 [ 67.259545][ T738] ? memcpy+0x56/0x70 [ 67.263677][ T738] ? __cfi_ext4_ioctl+0x10/0x10 [ 67.268916][ T738] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 67.274911][ T738] ? __asan_set_shadow_00+0xe/0x10 [ 67.280183][ T738] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 67.285318][ T738] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 67.290978][ T738] ? kstrtouint+0x74/0xe0 [ 67.295451][ T738] ? ioctl_has_perm+0x1b8/0x4f0 [ 67.300367][ T738] ? ioctl_has_perm+0x3a6/0x4f0 [ 67.305680][ T738] ? has_cap_mac_admin+0x370/0x370 [ 67.310919][ T738] ? vfs_write+0xa2c/0xce0 [ 67.315534][ T738] ? selinux_file_ioctl+0x3a0/0x4d0 [ 67.320918][ T738] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 67.326510][ T738] ? mutex_unlock+0x8f/0x230 [ 67.331132][ T738] ? __cfi_mutex_unlock+0x10/0x10 [ 67.336272][ T738] ? __fget_files+0x2d5/0x330 [ 67.340996][ T738] ? security_file_ioctl+0x95/0xc0 [ 67.346257][ T738] ? __cfi_ext4_ioctl+0x10/0x10 [ 67.351337][ T738] __se_sys_ioctl+0x12f/0x1b0 [ 67.356067][ T738] __x64_sys_ioctl+0x7b/0x90 [ 67.360775][ T738] x64_sys_call+0x58b/0x9a0 [ 67.365309][ T738] do_syscall_64+0x4c/0xa0 [ 67.369796][ T738] ? clear_bhb_loop+0x30/0x80 [ 67.374597][ T738] ? clear_bhb_loop+0x30/0x80 [ 67.379339][ T738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.385506][ T738] RIP: 0033:0x7fdc1a59aeb9 [ 67.390062][ T738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.410495][ T738] RSP: 002b:00007fdc1b3a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.419213][ T738] RAX: ffffffffffffffda RBX: 00007fdc1a815fa0 RCX: 00007fdc1a59aeb9 [ 67.427652][ T738] RDX: 0000200000000340 RSI: 00000000800c6613 RDI: 0000000000000004 [ 67.435992][ T738] RBP: 00007fdc1b3a5090 R08: 0000000000000000 R09: 0000000000000000 [ 67.443986][ T738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.451984][ T738] R13: 00007fdc1a816038 R14: 00007fdc1a815fa0 R15: 00007ffd34be9e78 [ 67.460080][ T738] [ 67.647904][ T719] loop2: detected capacity change from 0 to 131072 [ 67.663641][ T719] F2FS-fs (loop2): Unrecognized mount option "MP2S)~>0yf7YLZ~!JZJ1!<By`?΅.ǚ_}[lӻk`ڞ!vA/fюy77;eS{iyo5\m㋝88۝r|/8o)O-[VAQf~k0izpxq<~v" or missing value [ 67.714879][ T286] EXT4-fs (loop3): unmounting filesystem. [ 67.965396][ T749] loop1: detected capacity change from 0 to 128 [ 68.000469][ T747] loop3: detected capacity change from 0 to 512 [ 68.004235][ T749] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.041903][ T747] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 68.071174][ T747] EXT4-fs (loop3): invalid journal inode [ 68.077148][ T747] EXT4-fs (loop3): can't get journal size [ 68.120805][ T747] EXT4-fs (loop3): 1 truncate cleaned up [ 68.128089][ T28] audit: type=1404 audit(1769896993.433:188): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 68.147851][ T747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.267074][ T723] loop0: detected capacity change from 0 to 131072 [ 69.275911][ T719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 69.307109][ T723] F2FS-fs (loop0): Unrecognized mount option "MP2S)~>0yf7YLZ~!JZJ1!<By`?΅.ǚ_}[lӻk`ڞ!vA/fюy77;eS{iyo5\m㋝88۝r|/8o)O-[VAQf~k0izpxq<~v" or missing value [ 69.331700][ T28] audit: type=1404 audit(1769896994.543:189): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 69.349804][ T28] audit: type=1400 audit(1769896994.563:190): avc: denied { read write } for pid=722 comm="syz.0.106" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.374448][ T28] audit: type=1400 audit(1769896994.563:191): avc: denied { open } for pid=722 comm="syz.0.106" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.398656][ T28] audit: type=1400 audit(1769896994.563:192): avc: denied { ioctl } for pid=722 comm="syz.0.106" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.429278][ T286] EXT4-fs (loop3): unmounting filesystem. [ 69.448540][ T723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 69.478703][ T28] audit: type=1400 audit(1769896994.583:193): avc: denied { mounton } for pid=722 comm="syz.0.106" path="/16/file0" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.496066][ T756] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 69.537855][ T28] audit: type=1400 audit(1769896994.593:194): avc: denied { mount } for pid=746 comm="syz.3.115" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.607892][ T28] audit: type=1400 audit(1769896994.593:195): avc: denied { write } for pid=746 comm="syz.3.115" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.671554][ T28] audit: type=1400 audit(1769896994.593:196): avc: denied { add_name } for pid=746 comm="syz.3.115" name="blkio.bfq.io_queued_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.708711][ T764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 69.736409][ T764] loop0: detected capacity change from 0 to 512 [ 69.743631][ T28] audit: type=1400 audit(1769896994.593:197): avc: denied { create } for pid=746 comm="syz.3.115" name="blkio.bfq.io_queued_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.767268][ T28] audit: type=1400 audit(1769896994.603:198): avc: denied { read append open } for pid=746 comm="syz.3.115" path="/23/file0/file0/blkio.bfq.io_queued_recursive" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.794626][ T367] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 69.814385][ T743] loop4: detected capacity change from 0 to 131072 [ 69.859733][ T743] F2FS-fs (loop4): invalid crc value [ 69.898517][ T776] loop2: detected capacity change from 0 to 128 [ 69.905273][ T743] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.927136][ T776] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.988986][ T367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.007888][ T367] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 70.034391][ T367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.051903][ T743] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 70.063795][ T367] usb 2-1: config 0 descriptor?? [ 71.298638][ T351] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 71.353189][ T367] usbhid 2-1:0.0: can't add hid device: -71 [ 71.363982][ T367] usbhid: probe of 2-1:0.0 failed with error -71 [ 71.374405][ T367] usb 2-1: USB disconnect, device number 5 [ 71.537971][ T351] usb 4-1: Using ep0 maxpacket: 32 [ 71.544575][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.567906][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.597989][ T351] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 71.617361][ T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.632999][ T351] usb 4-1: config 0 descriptor?? [ 71.648938][ T351] hub 4-1:0.0: USB hub found [ 71.826783][ T794] loop0: detected capacity change from 0 to 512 [ 71.834278][ T794] EXT4-fs: Ignoring removed oldalloc option [ 71.848990][ T351] hub 4-1:0.0: 1 port detected [ 71.866817][ T794] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.900561][ T801] loop1: detected capacity change from 0 to 512 [ 71.927114][ T801] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 71.948991][ T801] EXT4-fs (loop1): invalid journal inode [ 71.954930][ T801] EXT4-fs (loop1): can't get journal size [ 71.964852][ T794] FAULT_INJECTION: forcing a failure. [ 71.964852][ T794] name failslab, interval 1, probability 0, space 0, times 1 [ 71.979166][ T806] binder: 805:806 ioctl c0306201 0 returned -14 [ 71.998971][ T801] EXT4-fs (loop1): 1 truncate cleaned up [ 72.005628][ T801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 72.015743][ T794] CPU: 1 PID: 794 Comm: syz.0.130 Not tainted syzkaller #0 [ 72.023186][ T794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.033471][ T794] Call Trace: [ 72.036887][ T794] [ 72.039958][ T794] __dump_stack+0x21/0x24 [ 72.044439][ T794] dump_stack_lvl+0x110/0x170 [ 72.049174][ T794] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.054262][ T794] ? __getblk_gfp+0x3b/0x7d0 [ 72.058907][ T794] dump_stack+0x15/0x24 [ 72.063122][ T794] should_fail_ex+0x3d4/0x520 [ 72.067951][ T794] __should_failslab+0xac/0xf0 [ 72.073216][ T794] ? ext4_convert_inline_data_nolock+0x11a/0x9e0 [ 72.079691][ T794] should_failslab+0x9/0x20 [ 72.079749][ T806] binder: 805:806 ioctl c0306201 200000000480 returned -14 [ 72.084247][ T794] __kmem_cache_alloc_node+0x3d/0x2c0 [ 72.097063][ T794] ? ext4_convert_inline_data_nolock+0x11a/0x9e0 [ 72.103643][ T794] __kmalloc+0xa1/0x1e0 [ 72.108371][ T794] ext4_convert_inline_data_nolock+0x11a/0x9e0 [ 72.114665][ T794] ? rwsem_write_trylock+0x136/0x300 [ 72.120011][ T794] ? ext4_add_dirent_to_inline+0x440/0x440 [ 72.125875][ T794] ? __kasan_check_read+0x11/0x20 [ 72.130948][ T794] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 72.136637][ T794] ext4_convert_inline_data+0x4b9/0x5f0 [ 72.142254][ T794] ? __cfi_ext4_convert_inline_data+0x10/0x10 [ 72.148468][ T794] ? _get_random_bytes+0x1e4/0x250 [ 72.153940][ T794] ? get_random_bytes+0x30/0x30 [ 72.158836][ T794] ext4_set_context+0x12e/0x4b0 [ 72.163823][ T794] ? __cfi_ext4_set_context+0x10/0x10 [ 72.169363][ T794] ? fscrypt_new_context+0x2db/0x540 [ 72.174811][ T794] set_encryption_policy+0x1cf/0x3b0 [ 72.180328][ T794] ? fscrypt_get_policy+0x590/0x590 [ 72.185584][ T794] ? rwsem_write_trylock+0x136/0x300 [ 72.191052][ T794] ? fscrypt_ioctl_set_policy+0x4b0/0x4b0 [ 72.196906][ T794] ? __cfi_ext4_empty_dir+0x10/0x10 [ 72.202355][ T794] fscrypt_ioctl_set_policy+0x418/0x4b0 [ 72.207970][ T794] ? __cfi_fscrypt_ioctl_set_policy+0x10/0x10 [ 72.214125][ T794] ? kernel_text_address+0xa0/0xd0 [ 72.219309][ T794] ? __kernel_text_address+0xd/0x30 [ 72.224926][ T794] ? unwind_get_return_address+0x4d/0x90 [ 72.230787][ T794] ? arch_stack_walk+0xfc/0x150 [ 72.235842][ T794] ext4_ioctl+0x1b17/0x3e90 [ 72.240498][ T794] ? memcpy+0x56/0x70 [ 72.244582][ T794] ? __cfi_ext4_ioctl+0x10/0x10 [ 72.249605][ T794] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 72.255814][ T794] ? __asan_set_shadow_00+0xe/0x10 [ 72.260984][ T794] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 72.266126][ T794] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 72.272332][ T794] ? kstrtouint+0x74/0xe0 [ 72.276736][ T794] ? ioctl_has_perm+0x1b8/0x4f0 [ 72.281829][ T794] ? ioctl_has_perm+0x3a6/0x4f0 [ 72.286808][ T794] ? has_cap_mac_admin+0x370/0x370 [ 72.292092][ T794] ? vfs_write+0xa2c/0xce0 [ 72.296558][ T794] ? selinux_file_ioctl+0x3a0/0x4d0 [ 72.301912][ T794] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 72.307600][ T794] ? mutex_unlock+0x8f/0x230 [ 72.312344][ T794] ? __cfi_mutex_unlock+0x10/0x10 [ 72.317609][ T794] ? __fget_files+0x2d5/0x330 [ 72.322683][ T794] ? security_file_ioctl+0x95/0xc0 [ 72.327831][ T794] ? __cfi_ext4_ioctl+0x10/0x10 [ 72.332716][ T794] __se_sys_ioctl+0x12f/0x1b0 [ 72.337509][ T794] __x64_sys_ioctl+0x7b/0x90 [ 72.342126][ T794] x64_sys_call+0x58b/0x9a0 [ 72.346650][ T794] do_syscall_64+0x4c/0xa0 [ 72.351137][ T794] ? clear_bhb_loop+0x30/0x80 [ 72.355831][ T794] ? clear_bhb_loop+0x30/0x80 [ 72.360794][ T794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.366716][ T794] RIP: 0033:0x7f8681d9aeb9 [ 72.371153][ T794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.391076][ T794] RSP: 002b:00007f8682cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.399786][ T794] RAX: ffffffffffffffda RBX: 00007f8682015fa0 RCX: 00007f8681d9aeb9 [ 72.407871][ T794] RDX: 0000200000000340 RSI: 00000000800c6613 RDI: 0000000000000004 [ 72.416036][ T794] RBP: 00007f8682cae090 R08: 0000000000000000 R09: 0000000000000000 [ 72.424032][ T794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.432024][ T794] R13: 00007f8682016038 R14: 00007f8682015fa0 R15: 00007fff5cf40c28 [ 72.440031][ T794] [ 72.446397][ T285] EXT4-fs (loop1): unmounting filesystem. [ 72.468364][ T283] EXT4-fs (loop0): unmounting filesystem. [ 72.506945][ T812] loop0: detected capacity change from 0 to 128 [ 72.523393][ T812] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.658054][ T818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 73.105996][ T789] loop2: detected capacity change from 0 to 131072 [ 73.114514][ T789] F2FS-fs (loop2): Unrecognized mount option "MP2S)~>0yf7YLZ~!JZJ1!<By`?΅.ǚ_}[lӻk`ڞ!vA/fюy77;eS{iyo5\m㋝88۝r|/8o)O-[VAQf~k0izpxq<~v" or missing value [ 73.150045][ T789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 73.187206][ T814] syz.4.139 (814) used greatest stack depth: 20912 bytes left [ 73.269086][ T823] netlink: 'syz.4.142': attribute type 4 has an invalid length. [ 73.491254][ T351] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 73.509148][ T351] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 73.531106][ T351] usbhid 4-1:0.0: can't add hid device: -71 [ 74.167118][ T351] usbhid: probe of 4-1:0.0 failed with error -71 [ 74.201419][ T828] loop1: detected capacity change from 0 to 512 [ 74.226207][ T828] EXT4-fs: Ignoring removed oldalloc option [ 74.229071][ T351] usb 4-1: USB disconnect, device number 7 [ 74.247298][ T828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.256634][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.290947][ T828] fscrypt (loop1, inode 18): Direct key flag not allowed with different contents and filenames modes [ 74.327601][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 74.327618][ T28] audit: type=1400 audit(1769896999.623:288): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.348078][ T367] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 74.372060][ T28] audit: type=1400 audit(1769896999.673:289): avc: denied { read } for pid=842 comm="syz.0.151" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.386018][ T841] loop3: detected capacity change from 0 to 512 [ 74.402845][ T841] EXT4-fs: Ignoring removed oldalloc option [ 74.405941][ T28] audit: type=1400 audit(1769896999.703:290): avc: denied { open } for pid=842 comm="syz.0.151" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.420178][ T843] binder: 842:843 ioctl c0306201 200000000480 returned -14 [ 74.434012][ T285] EXT4-fs (loop1): unmounting filesystem. [ 74.446398][ T28] audit: type=1400 audit(1769896999.713:291): avc: denied { setopt } for pid=842 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.475832][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 74.482142][ T28] audit: type=1400 audit(1769896999.723:292): avc: denied { ioctl } for pid=842 comm="syz.0.151" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.513093][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 74.522486][ T841] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.530846][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.541745][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 74.551134][ T24] usb 5-1: config 1 has no interface number 1 [ 74.557429][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 74.558119][ T367] usb 3-1: Using ep0 maxpacket: 32 [ 74.572595][ T24] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.608494][ T367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.619196][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.630007][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.630047][ T286] EXT4-fs (loop3): unmounting filesystem. [ 74.639579][ T24] usb 5-1: Product: syz [ 74.649408][ T24] usb 5-1: Manufacturer: syz [ 74.654231][ T24] usb 5-1: SerialNumber: syz [ 74.667917][ T367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.685704][ T367] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 74.697511][ T367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.707585][ T367] usb 3-1: config 0 descriptor?? [ 74.713749][ T367] hub 3-1:0.0: USB hub found [ 74.924322][ T857] netlink: 'syz.3.154': attribute type 29 has an invalid length. [ 74.932317][ T857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 74.942828][ T857] netlink: 'syz.3.154': attribute type 29 has an invalid length. [ 74.951337][ T857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 75.107013][ T858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.142'. [ 75.184939][ T28] audit: type=1400 audit(1769897000.483:293): avc: denied { read write } for pid=822 comm="syz.4.142" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 75.373860][ T858] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.381361][ T858] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.389794][ T309] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 75.407438][ T28] audit: type=1400 audit(1769897000.513:294): avc: denied { open } for pid=822 comm="syz.4.142" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 75.662873][ T28] audit: type=1400 audit(1769897000.523:295): avc: denied { ioctl } for pid=822 comm="syz.4.142" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 75.737942][ T309] usb 2-1: Using ep0 maxpacket: 32 [ 75.744898][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.780121][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.817568][ T309] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 75.843441][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.868133][ T309] usb 2-1: config 0 descriptor?? [ 75.882461][ T309] hub 2-1:0.0: USB hub found [ 75.946803][ T367] hub 3-1:0.0: 1 port detected [ 75.972384][ T28] audit: type=1400 audit(1769897001.273:296): avc: denied { mount } for pid=862 comm="syz.3.156" name="/" dev="ramfs" ino=18834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 75.999995][ T28] audit: type=1400 audit(1769897001.303:297): avc: denied { create } for pid=862 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.083051][ T309] hub 2-1:0.0: 1 port detected [ 76.130942][ T865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 76.480997][ T848] loop0: detected capacity change from 0 to 131072 [ 76.493609][ T848] F2FS-fs (loop0): Unrecognized mount option "MP2S)~>0yf7YLZ~!JZJ1!<By`?΅.ǚ_}[lӻk`ڞ!vA/fюy77;eS{iyo5\m㋝88۝r|/8o)O-[VAQf~k0izpxq<~v" or missing value [ 76.528787][ T848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 77.038900][ T367] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 77.060496][ T367] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 77.067209][ T24] usb 5-1: USB disconnect, device number 4 [ 77.079835][ T872] loop3: detected capacity change from 0 to 512 [ 77.110983][ T367] usbhid 3-1:0.0: can't add hid device: -71 [ 77.120304][ T872] EXT4-fs: Ignoring removed oldalloc option [ 77.126355][ T367] usbhid: probe of 3-1:0.0 failed with error -71 [ 77.157185][ T872] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.170860][ T877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 77.180735][ T367] usb 3-1: USB disconnect, device number 8 [ 77.187323][ T877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 77.200849][ T877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 77.210246][ T877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 77.219686][ T877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 77.232582][ T877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.243891][ T286] EXT4-fs (loop3): unmounting filesystem. [ 77.255432][ T881] loop2: detected capacity change from 0 to 512 [ 77.297276][ T881] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.312269][ T420] udevd[420]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.326943][ T881] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.352602][ T881] EXT4-fs (loop2): mount failed [ 77.358392][ T309] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 77.366724][ T309] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 77.380163][ T309] usbhid 2-1:0.0: can't add hid device: -32 [ 77.386193][ T309] usbhid: probe of 2-1:0.0 failed with error -32 [ 77.653920][ T900] loop2: detected capacity change from 0 to 512 [ 77.744640][ T900] EXT4-fs: Ignoring removed oldalloc option [ 77.824354][ T900] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.850337][ T900] FAULT_INJECTION: forcing a failure. [ 77.850337][ T900] name failslab, interval 1, probability 0, space 0, times 0 [ 77.865852][ T900] CPU: 0 PID: 900 Comm: syz.2.168 Not tainted syzkaller #0 [ 77.873620][ T900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.883812][ T900] Call Trace: [ 77.887136][ T900] [ 77.890194][ T900] __dump_stack+0x21/0x24 [ 77.894566][ T900] dump_stack_lvl+0x110/0x170 [ 77.899286][ T900] ? __cfi_dump_stack_lvl+0x8/0x8 [ 77.904359][ T900] ? memcpy+0x56/0x70 [ 77.908391][ T900] dump_stack+0x15/0x24 [ 77.912780][ T900] should_fail_ex+0x3d4/0x520 [ 77.917507][ T900] ? ext4_mb_new_blocks+0xbf8/0x4250 [ 77.918515][ T309] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 77.922880][ T900] __should_failslab+0xac/0xf0 [ 77.935500][ T900] should_failslab+0x9/0x20 [ 77.940942][ T900] kmem_cache_alloc+0x3b/0x330 [ 77.945805][ T900] ? __mark_inode_dirty+0x616/0x9d0 [ 77.951170][ T900] ? ext4_mb_new_blocks+0x4d1/0x4250 [ 77.956705][ T900] ext4_mb_new_blocks+0xbf8/0x4250 [ 77.961978][ T900] ? ext4_get_branch+0x63d/0x7c0 [ 77.967402][ T900] ? __cfi_ext4_mb_new_blocks+0x10/0x10 [ 77.969464][ T24] usb 2-1: USB disconnect, device number 6 [ 77.973130][ T900] ext4_ind_map_blocks+0xda7/0x2000 [ 77.984249][ T900] ? __cfi_from_kprojid+0x10/0x10 [ 77.989362][ T900] ? __cfi_ext4_ind_map_blocks+0x10/0x10 [ 77.995434][ T900] ? __kasan_check_write+0x14/0x20 [ 78.000697][ T900] ? downgrade_write+0x370/0x370 [ 78.005715][ T900] ? __cfi_down_read+0x10/0x10 [ 78.010522][ T900] ? ext4_es_lookup_extent+0x54c/0x900 [ 78.011358][ T907] loop0: detected capacity change from 0 to 512 [ 78.016121][ T900] ext4_map_blocks+0x977/0x1b70 [ 78.016155][ T900] ? __cfi_ext4_map_blocks+0x10/0x10 [ 78.033525][ T900] ? ext4_check_all_de+0x61/0x100 [ 78.038696][ T900] ? ext4_check_all_de+0xc8/0x100 [ 78.043862][ T900] ext4_convert_inline_data_nolock+0x415/0x9e0 [ 78.050083][ T900] ? ext4_add_dirent_to_inline+0x440/0x440 [ 78.054266][ T907] EXT4-fs: Ignoring removed oldalloc option [ 78.056034][ T900] ? __kasan_check_read+0x11/0x20 [ 78.067792][ T900] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 78.073661][ T900] ext4_convert_inline_data+0x4b9/0x5f0 [ 78.079276][ T900] ? __cfi_ext4_convert_inline_data+0x10/0x10 [ 78.085391][ T900] ? _get_random_bytes+0x1e4/0x250 [ 78.090543][ T900] ? get_random_bytes+0x30/0x30 [ 78.095565][ T900] ext4_set_context+0x12e/0x4b0 [ 78.100548][ T900] ? __cfi_ext4_set_context+0x10/0x10 [ 78.106066][ T900] ? fscrypt_new_context+0x2db/0x540 [ 78.111907][ T900] set_encryption_policy+0x1cf/0x3b0 [ 78.117441][ T900] ? fscrypt_get_policy+0x590/0x590 [ 78.122682][ T900] ? rwsem_write_trylock+0x136/0x300 [ 78.128112][ T900] ? fscrypt_ioctl_set_policy+0x4b0/0x4b0 [ 78.133983][ T900] ? __cfi_ext4_empty_dir+0x10/0x10 [ 78.139271][ T900] fscrypt_ioctl_set_policy+0x418/0x4b0 [ 78.145488][ T900] ? __cfi_fscrypt_ioctl_set_policy+0x10/0x10 [ 78.151594][ T900] ? kernel_text_address+0xa0/0xd0 [ 78.156856][ T900] ? __kernel_text_address+0xd/0x30 [ 78.162214][ T900] ? unwind_get_return_address+0x4d/0x90 [ 78.167978][ T900] ? arch_stack_walk+0xfc/0x150 [ 78.173184][ T900] ext4_ioctl+0x1b17/0x3e90 [ 78.177724][ T900] ? memcpy+0x56/0x70 [ 78.182086][ T900] ? __cfi_ext4_ioctl+0x10/0x10 [ 78.186971][ T900] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 78.192921][ T900] ? __asan_set_shadow_00+0xe/0x10 [ 78.198075][ T900] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 78.203555][ T900] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 78.209473][ T900] ? kstrtouint+0x74/0xe0 [ 78.214110][ T900] ? ioctl_has_perm+0x1b8/0x4f0 [ 78.219445][ T900] ? ioctl_has_perm+0x3a6/0x4f0 [ 78.225029][ T900] ? has_cap_mac_admin+0x370/0x370 [ 78.230731][ T900] ? vfs_write+0xa2c/0xce0 [ 78.235693][ T900] ? selinux_file_ioctl+0x3a0/0x4d0 [ 78.241038][ T900] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 78.246709][ T900] ? mutex_unlock+0x8f/0x230 [ 78.251456][ T900] ? __cfi_mutex_unlock+0x10/0x10 [ 78.256541][ T900] ? __fget_files+0x2d5/0x330 [ 78.261422][ T900] ? security_file_ioctl+0x95/0xc0 [ 78.266835][ T900] ? __cfi_ext4_ioctl+0x10/0x10 [ 78.271910][ T900] __se_sys_ioctl+0x12f/0x1b0 [ 78.276646][ T900] __x64_sys_ioctl+0x7b/0x90 [ 78.281491][ T900] x64_sys_call+0x58b/0x9a0 [ 78.286050][ T900] do_syscall_64+0x4c/0xa0 [ 78.290594][ T900] ? clear_bhb_loop+0x30/0x80 [ 78.295340][ T900] ? clear_bhb_loop+0x30/0x80 [ 78.300141][ T900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.306217][ T900] RIP: 0033:0x7f266c59aeb9 [ 78.310659][ T900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.331890][ T900] RSP: 002b:00007f266d3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.340506][ T900] RAX: ffffffffffffffda RBX: 00007f266c815fa0 RCX: 00007f266c59aeb9 [ 78.348808][ T900] RDX: 0000200000000340 RSI: 00000000800c6613 RDI: 0000000000000004 [ 78.357178][ T900] RBP: 00007f266d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 78.365401][ T900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.373866][ T900] R13: 00007f266c816038 R14: 00007f266c815fa0 R15: 00007ffdb4d6d6c8 [ 78.381958][ T900] [ 78.407967][ T309] usb 4-1: Using ep0 maxpacket: 32 [ 78.415939][ T309] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 78.434105][ T284] EXT4-fs (loop2): unmounting filesystem. [ 78.453516][ T907] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.461392][ T309] usb 4-1: config 0 has no interface number 0 [ 78.499229][ T309] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 78.518253][ T283] EXT4-fs (loop0): unmounting filesystem. [ 78.528992][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.545424][ T309] usb 4-1: Product: syz [ 78.550381][ T309] usb 4-1: Manufacturer: syz [ 78.555225][ T309] usb 4-1: SerialNumber: syz [ 78.570602][ T309] usb 4-1: config 0 descriptor?? [ 78.580479][ T920] loop0: detected capacity change from 0 to 4096 [ 78.588633][ T309] asix: probe of 4-1:0.188 failed with error -22 [ 78.618583][ T926] loop2: detected capacity change from 0 to 4096 [ 78.625631][ T926] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.632987][ T926] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 78.643833][ T920] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.696465][ T929] binder: 928:929 ioctl c0306201 0 returned -14 [ 78.747896][ T309] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.757932][ T367] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 78.917897][ T309] usb 5-1: device descriptor read/64, error -71 [ 78.937867][ T367] usb 2-1: Using ep0 maxpacket: 16 [ 78.944575][ T367] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.956069][ T367] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.966403][ T367] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 78.981202][ T367] usb 2-1: config 0 interface 0 has no altsetting 0 [ 78.988231][ T367] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 78.997632][ T367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.007053][ T367] usb 2-1: config 0 descriptor?? [ 79.177878][ T351] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 79.197917][ T309] usb 5-1: device descriptor read/64, error -71 [ 79.337245][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 79.337262][ T28] audit: type=1400 audit(1769897004.633:314): avc: denied { load_policy } for pid=893 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.337627][ T938] SELinux: unknown common [ 79.368119][ T351] usb 3-1: Using ep0 maxpacket: 32 [ 79.368973][ T938] SELinux: failed to load policy [ 79.379313][ T351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.395141][ T351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.405793][ T351] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 79.415293][ T351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.441357][ T351] usb 3-1: config 0 descriptor?? [ 79.453024][ T351] hub 3-1:0.0: USB hub found [ 79.459595][ T283] EXT4-fs (loop0): unmounting filesystem. [ 79.467892][ T309] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.512617][ T940] loop0: detected capacity change from 0 to 512 [ 79.528490][ T940] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 79.538033][ T940] EXT4-fs (loop0): invalid journal inode [ 79.543955][ T940] EXT4-fs (loop0): can't get journal size [ 79.551851][ T940] EXT4-fs (loop0): 1 truncate cleaned up [ 79.558029][ T940] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.575202][ T28] audit: type=1400 audit(1769897004.873:315): avc: denied { create } for pid=939 comm="syz.0.185" name="blkio.bfq.io_queued_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.604185][ T28] audit: type=1400 audit(1769897004.903:316): avc: denied { read append open } for pid=939 comm="syz.0.185" path="/34/file0/blkio.bfq.io_queued_recursive" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.616353][ T938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.638847][ T938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.638970][ T309] usb 5-1: device descriptor read/64, error -71 [ 79.653630][ T351] hub 3-1:0.0: 1 port detected [ 79.659391][ T283] EXT4-fs (loop0): unmounting filesystem. [ 80.027989][ T309] usb 5-1: device descriptor read/64, error -71 [ 80.148170][ T309] usb usb5-port1: attempt power cycle [ 80.517967][ T916] loop1: detected capacity change from 0 to 131072 [ 80.537209][ T916] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.557879][ T309] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 80.612836][ T916] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 80.630218][ T309] usb 5-1: device descriptor read/8, error -71 [ 80.654732][ T40] usb 2-1: USB disconnect, device number 7 [ 80.706898][ T24] usb 4-1: USB disconnect, device number 8 [ 80.752032][ T28] audit: type=1400 audit(1769897006.053:317): avc: denied { read } for pid=957 comm="syz.3.191" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.781883][ T28] audit: type=1400 audit(1769897006.053:318): avc: denied { open } for pid=957 comm="syz.3.191" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.796163][ T962] loop0: detected capacity change from 0 to 512 [ 80.805303][ T28] audit: type=1400 audit(1769897006.053:319): avc: denied { ioctl } for pid=957 comm="syz.3.191" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.815078][ T309] usb 5-1: device descriptor read/8, error -71 [ 80.843486][ T962] EXT4-fs: Ignoring removed oldalloc option [ 80.857884][ T962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.876930][ T283] EXT4-fs (loop0): unmounting filesystem. [ 80.896142][ T28] audit: type=1400 audit(1769897006.193:320): avc: denied { create } for pid=966 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.039441][ T979] loop0: detected capacity change from 0 to 512 [ 81.049721][ T979] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 81.059645][ T979] EXT4-fs (loop0): invalid journal inode [ 81.065589][ T979] EXT4-fs (loop0): can't get journal size [ 81.078591][ T979] EXT4-fs (loop0): 1 truncate cleaned up [ 81.091334][ T979] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 81.110999][ T283] EXT4-fs (loop0): unmounting filesystem. [ 81.126104][ T982] binder: 981:982 ioctl c0306201 0 returned -14 [ 81.187981][ T309] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 81.198477][ T984] netlink: 'syz.3.195': attribute type 29 has an invalid length. [ 81.206352][ T984] __nla_validate_parse: 50 callbacks suppressed [ 81.206394][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 81.222515][ T984] netlink: 'syz.3.195': attribute type 29 has an invalid length. [ 81.230551][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 81.279664][ T309] usb 5-1: device descriptor read/8, error -71 [ 81.429697][ T309] usb 5-1: device descriptor read/8, error -71 [ 81.568383][ T309] usb usb5-port1: unable to enumerate USB device [ 81.725021][ T987] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.118052][ T982] binder: 981:982 ioctl c0306201 200000000480 returned -14 [ 82.134970][ T28] audit: type=1400 audit(1769897007.433:321): avc: denied { mount } for pid=986 comm="syz.4.199" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 82.235947][ T989] set_capacity_and_notify: 1 callbacks suppressed [ 82.235971][ T989] loop0: detected capacity change from 0 to 512 [ 82.259816][ T28] audit: type=1400 audit(1769897007.513:322): avc: denied { read write } for pid=988 comm="syz.0.200" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.346868][ T989] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 82.352429][ T351] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 82.362451][ T351] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 82.370910][ T28] audit: type=1400 audit(1769897007.513:323): avc: denied { open } for pid=988 comm="syz.0.200" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.398497][ T351] usbhid 3-1:0.0: can't add hid device: -71 [ 82.404582][ T351] usbhid: probe of 3-1:0.0 failed with error -71 [ 82.418010][ T993] loop3: detected capacity change from 0 to 512 [ 82.436647][ T993] EXT4-fs: Ignoring removed oldalloc option [ 82.448279][ T351] usb 3-1: USB disconnect, device number 9 [ 83.223093][ T993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.262357][ T998] loop0: detected capacity change from 0 to 512 [ 83.299802][ T998] ext3: Unknown parameter 'audit' [ 83.319233][ T286] EXT4-fs (loop3): unmounting filesystem. [ 83.368142][ T1013] loop2: detected capacity change from 0 to 512 [ 83.390308][ T1013] EXT4-fs: Ignoring removed oldalloc option [ 83.399660][ T1010] loop0: detected capacity change from 0 to 4096 [ 83.416296][ T1013] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.429458][ T1018] loop3: detected capacity change from 0 to 512 [ 83.443179][ T1018] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 83.451275][ T1010] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.454986][ T1013] FAULT_INJECTION: forcing a failure. [ 83.454986][ T1013] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 83.474468][ T1013] CPU: 0 PID: 1013 Comm: syz.2.209 Not tainted syzkaller #0 [ 83.482068][ T1013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.492697][ T1013] Call Trace: [ 83.496104][ T1013] [ 83.499167][ T1013] __dump_stack+0x21/0x24 [ 83.503822][ T1013] dump_stack_lvl+0x110/0x170 [ 83.508810][ T1013] ? __cfi_dump_stack_lvl+0x8/0x8 [ 83.513979][ T1013] ? __blk_mq_try_issue_directly+0x6f5/0x820 [ 83.520197][ T1013] dump_stack+0x15/0x24 [ 83.524527][ T1013] should_fail_ex+0x3d4/0x520 [ 83.529320][ T1013] should_fail_alloc_page+0x61/0x90 [ 83.534656][ T1013] prepare_alloc_pages+0x148/0x600 [ 83.540348][ T1013] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 83.545604][ T1013] ? blk_mq_flush_plug_list+0xfc/0xa80 [ 83.551440][ T1013] __alloc_pages+0x13a/0x480 [ 83.556270][ T1013] ? __cfi_blk_mq_flush_plug_list+0x10/0x10 [ 83.562474][ T1013] ? __cfi___alloc_pages+0x10/0x10 [ 83.567894][ T1013] __folio_alloc+0x12/0x40 [ 83.567924][ T1018] EXT4-fs (loop3): invalid journal inode [ 83.568045][ T1018] EXT4-fs (loop3): can't get journal size [ 83.572526][ T1013] __filemap_get_folio+0x721/0x9b0 [ 83.589391][ T1013] ? __cfi___filemap_get_folio+0x10/0x10 [ 83.595166][ T1013] ? ext4_mb_prefetch+0x5aa/0x640 [ 83.600248][ T1013] pagecache_get_page+0x2b/0x110 [ 83.605253][ T1013] ext4_mb_init_group+0x111/0x590 [ 83.610424][ T1013] ? ext4_get_group_desc+0x2ad/0x320 [ 83.615799][ T1013] ext4_mb_regular_allocator+0x255f/0x3570 [ 83.622880][ T1013] ? memcpy+0x56/0x70 [ 83.626932][ T1013] ? kasan_save_alloc_info+0x25/0x30 [ 83.632293][ T1013] ext4_mb_new_blocks+0xc89/0x4250 [ 83.637473][ T1013] ? ext4_get_branch+0x63d/0x7c0 [ 83.642490][ T1013] ? __cfi_ext4_mb_new_blocks+0x10/0x10 [ 83.648093][ T1013] ext4_ind_map_blocks+0xda7/0x2000 [ 83.653446][ T1013] ? __cfi_from_kprojid+0x10/0x10 [ 83.659075][ T1013] ? __cfi_ext4_ind_map_blocks+0x10/0x10 [ 83.664851][ T1013] ? __kasan_check_write+0x14/0x20 [ 83.670360][ T1013] ? downgrade_write+0x370/0x370 [ 83.675361][ T1013] ? __cfi_down_read+0x10/0x10 [ 83.680264][ T1013] ? ext4_es_lookup_extent+0x54c/0x900 [ 83.685804][ T1013] ext4_map_blocks+0x977/0x1b70 [ 83.690768][ T1013] ? __cfi_ext4_map_blocks+0x10/0x10 [ 83.696074][ T1013] ? ext4_check_all_de+0x61/0x100 [ 83.701298][ T1013] ? ext4_check_all_de+0xc8/0x100 [ 83.706629][ T1013] ext4_convert_inline_data_nolock+0x415/0x9e0 [ 83.713128][ T1013] ? ext4_add_dirent_to_inline+0x440/0x440 [ 83.719064][ T1013] ? __kasan_check_read+0x11/0x20 [ 83.724109][ T1013] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 83.729948][ T1013] ext4_convert_inline_data+0x4b9/0x5f0 [ 83.736045][ T1013] ? __cfi_ext4_convert_inline_data+0x10/0x10 [ 83.742515][ T1013] ? _get_random_bytes+0x1e4/0x250 [ 83.747657][ T1013] ? get_random_bytes+0x30/0x30 [ 83.752958][ T1013] ext4_set_context+0x12e/0x4b0 [ 83.758099][ T1013] ? __cfi_ext4_set_context+0x10/0x10 [ 83.763599][ T1013] ? fscrypt_new_context+0x2db/0x540 [ 83.769042][ T1013] set_encryption_policy+0x1cf/0x3b0 [ 83.774361][ T1013] ? fscrypt_get_policy+0x590/0x590 [ 83.779588][ T1013] ? rwsem_write_trylock+0x136/0x300 [ 83.784903][ T1013] ? fscrypt_ioctl_set_policy+0x4b0/0x4b0 [ 83.790651][ T1013] ? __cfi_ext4_empty_dir+0x10/0x10 [ 83.795877][ T1013] fscrypt_ioctl_set_policy+0x418/0x4b0 [ 83.801453][ T1013] ? __cfi_fscrypt_ioctl_set_policy+0x10/0x10 [ 83.807652][ T1013] ? kernel_text_address+0xa0/0xd0 [ 83.812822][ T1013] ? __kernel_text_address+0xd/0x30 [ 83.818066][ T1013] ? unwind_get_return_address+0x4d/0x90 [ 83.823726][ T1013] ? arch_stack_walk+0xfc/0x150 [ 83.828625][ T1013] ext4_ioctl+0x1b17/0x3e90 [ 83.833149][ T1013] ? memcpy+0x56/0x70 [ 83.837158][ T1013] ? __cfi_ext4_ioctl+0x10/0x10 [ 83.842037][ T1013] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 83.848154][ T1013] ? __asan_set_shadow_00+0xe/0x10 [ 83.853475][ T1013] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 83.858344][ T1013] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 83.864276][ T1013] ? kstrtouint+0x74/0xe0 [ 83.868640][ T1013] ? ioctl_has_perm+0x1b8/0x4f0 [ 83.873532][ T1013] ? ioctl_has_perm+0x3a6/0x4f0 [ 83.878848][ T1013] ? has_cap_mac_admin+0x370/0x370 [ 83.884166][ T1013] ? vfs_write+0xa2c/0xce0 [ 83.888610][ T1013] ? selinux_file_ioctl+0x3a0/0x4d0 [ 83.894192][ T1013] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 83.899959][ T1013] ? mutex_unlock+0x8f/0x230 [ 83.904953][ T1013] ? __cfi_mutex_unlock+0x10/0x10 [ 83.910062][ T1013] ? __fget_files+0x2d5/0x330 [ 83.914763][ T1013] ? security_file_ioctl+0x95/0xc0 [ 83.920175][ T1013] ? __cfi_ext4_ioctl+0x10/0x10 [ 83.925107][ T1013] __se_sys_ioctl+0x12f/0x1b0 [ 83.929986][ T1013] __x64_sys_ioctl+0x7b/0x90 [ 83.934750][ T1013] x64_sys_call+0x58b/0x9a0 [ 83.939560][ T1013] do_syscall_64+0x4c/0xa0 [ 83.945804][ T1013] ? clear_bhb_loop+0x30/0x80 [ 83.950630][ T1013] ? clear_bhb_loop+0x30/0x80 [ 83.955429][ T1013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.961620][ T1013] RIP: 0033:0x7f266c59aeb9 [ 83.966328][ T1013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.987702][ T1013] RSP: 002b:00007f266d3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.996337][ T1013] RAX: ffffffffffffffda RBX: 00007f266c815fa0 RCX: 00007f266c59aeb9 [ 84.004463][ T1013] RDX: 0000200000000340 RSI: 00000000800c6613 RDI: 0000000000000004 [ 84.013028][ T1013] RBP: 00007f266d3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 84.021552][ T1013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.029741][ T1013] R13: 00007f266c816038 R14: 00007f266c815fa0 R15: 00007ffdb4d6d6c8 [ 84.037839][ T1013] [ 84.049836][ T284] EXT4-fs (loop2): unmounting filesystem. [ 84.068884][ T1018] EXT4-fs (loop3): 1 truncate cleaned up [ 84.074633][ T1018] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.094582][ T1026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.213'. [ 84.229891][ T1034] loop1: detected capacity change from 0 to 128 [ 84.240435][ T1035] loop2: detected capacity change from 0 to 512 [ 84.264295][ T1034] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.325452][ T286] EXT4-fs (loop3): unmounting filesystem. [ 84.381020][ T1037] loop2: detected capacity change from 0 to 512 [ 84.400508][ T1037] EXT4-fs: Ignoring removed oldalloc option [ 84.416799][ T1037] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.457706][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 84.457721][ T28] audit: type=1404 audit(1769897009.753:329): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 84.517774][ T28] audit: type=1400 audit(1769897009.793:330): avc: denied { read write } for pid=1036 comm="syz.2.218" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.574618][ T28] audit: type=1400 audit(1769897009.793:331): avc: denied { write } for pid=1036 comm="syz.2.218" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 85.630483][ T28] audit: type=1400 audit(1769897009.793:332): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 85.651803][ T28] audit: type=1400 audit(1769897009.793:333): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 85.671937][ T28] audit: type=1400 audit(1769897009.803:334): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 85.680348][ T283] EXT4-fs (loop0): unmounting filesystem. [ 85.692241][ T28] audit: type=1400 audit(1769897009.803:335): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 85.731179][ T28] audit: type=1400 audit(1769897009.803:336): avc: denied { write } for pid=284 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 85.753104][ T28] audit: type=1400 audit(1769897009.813:337): avc: denied { read write } for pid=1039 comm="syz.3.215" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.755813][ T284] EXT4-fs (loop2): unmounting filesystem. [ 85.777247][ T28] audit: type=1400 audit(1769897009.843:338): avc: denied { write } for pid=283 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 85.783237][ T203] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 85.816320][ T1049] loop3: detected capacity change from 0 to 512 [ 85.889696][ T420] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.958861][ T203] usb 5-1: Using ep0 maxpacket: 32 [ 85.966292][ T203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.997607][ T203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.028270][ T203] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.039454][ T1059] FAULT_INJECTION: forcing a failure. [ 86.039454][ T1059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.048965][ T203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.060076][ T1053] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.069021][ T1059] CPU: 0 PID: 1059 Comm: syz.3.230 Not tainted syzkaller #0 [ 86.077087][ T1059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.087287][ T1059] Call Trace: [ 86.090615][ T1059] [ 86.093584][ T1059] __dump_stack+0x21/0x24 [ 86.098021][ T1059] dump_stack_lvl+0x110/0x170 [ 86.102949][ T1059] ? __cfi_dump_stack_lvl+0x8/0x8 [ 86.108030][ T1059] dump_stack+0x15/0x24 [ 86.112250][ T1059] should_fail_ex+0x3d4/0x520 [ 86.116996][ T1059] should_fail+0xb/0x10 [ 86.121250][ T1059] should_fail_usercopy+0x1a/0x20 [ 86.126506][ T1059] _copy_from_user+0x1e/0xc0 [ 86.131267][ T1059] __se_sys_rt_tgsigqueueinfo+0xdc/0x510 [ 86.137134][ T1059] ? __x64_sys_rt_tgsigqueueinfo+0xb0/0xb0 [ 86.142990][ T1059] ? __kasan_check_write+0x14/0x20 [ 86.148159][ T1059] ? fput+0x154/0x1a0 [ 86.152278][ T1059] ? ksys_write+0x1f4/0x250 [ 86.156999][ T1059] __x64_sys_rt_tgsigqueueinfo+0x9b/0xb0 [ 86.162674][ T1059] x64_sys_call+0x51b/0x9a0 [ 86.167400][ T1059] do_syscall_64+0x4c/0xa0 [ 86.172034][ T1059] ? clear_bhb_loop+0x30/0x80 [ 86.177098][ T1059] ? clear_bhb_loop+0x30/0x80 [ 86.182353][ T1059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.188397][ T1059] RIP: 0033:0x7fdc1a59aeb9 [ 86.192949][ T1059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.213074][ T1059] RSP: 002b:00007fdc1b3a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 86.221813][ T1059] RAX: ffffffffffffffda RBX: 00007fdc1a815fa0 RCX: 00007fdc1a59aeb9 [ 86.229924][ T1059] RDX: 0000000000000024 RSI: 0000000000000079 RDI: 0000000000000078 [ 86.238117][ T1059] RBP: 00007fdc1b3a5090 R08: 0000000000000000 R09: 0000000000000000 [ 86.246318][ T1059] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 86.254693][ T1059] R13: 00007fdc1a816038 R14: 00007fdc1a815fa0 R15: 00007ffd34be9e78 [ 86.263135][ T1059] [ 86.286242][ T203] usb 5-1: config 0 descriptor?? [ 86.300200][ T203] hub 5-1:0.0: USB hub found [ 86.381389][ T1067] EXT4-fs: Ignoring removed oldalloc option [ 86.409205][ T1067] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 86.437633][ T286] EXT4-fs (loop3): unmounting filesystem. [ 86.448605][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.456142][ T1062] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.479193][ T1062] device bridge_slave_0 entered promiscuous mode [ 86.495727][ T203] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 86.512822][ T203] usbhid 5-1:0.0: can't add hid device: -71 [ 86.522242][ T203] usbhid: probe of 5-1:0.0 failed with error -71 [ 86.536195][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.551209][ T1062] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.558615][ T1075] syz.3.232 uses obsolete (PF_INET,SOCK_PACKET) [ 86.564673][ T1062] device bridge_slave_1 entered promiscuous mode [ 86.578421][ T203] usb 5-1: USB disconnect, device number 9 [ 86.624841][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.633674][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.644056][ T1063] device bridge_slave_0 entered promiscuous mode [ 86.661574][ T8] device bridge_slave_1 left promiscuous mode [ 86.668486][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.682621][ T8] device bridge_slave_0 left promiscuous mode [ 86.688948][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.697590][ T8] device veth1_macvtap left promiscuous mode [ 86.704104][ T8] device veth0_vlan left promiscuous mode [ 86.730877][ T1081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.840430][ T285] EXT4-fs (loop1): unmounting filesystem. [ 86.857856][ T367] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 87.028859][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.037109][ T1085] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.061185][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.126303][ T1085] FAULT_INJECTION: forcing a failure. [ 87.126303][ T1085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.139219][ T1063] device bridge_slave_1 entered promiscuous mode [ 87.152417][ T1085] CPU: 0 PID: 1085 Comm: syz.1.237 Not tainted syzkaller #0 [ 87.159949][ T1085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.170564][ T1085] Call Trace: [ 87.174370][ T1085] [ 87.177491][ T1085] __dump_stack+0x21/0x24 [ 87.181875][ T1085] dump_stack_lvl+0x110/0x170 [ 87.186779][ T1085] ? __cfi_dump_stack_lvl+0x8/0x8 [ 87.191949][ T1085] dump_stack+0x15/0x24 [ 87.196149][ T1085] should_fail_ex+0x3d4/0x520 [ 87.200981][ T1085] should_fail+0xb/0x10 [ 87.205309][ T1085] should_fail_usercopy+0x1a/0x20 [ 87.210499][ T1085] _copy_from_user+0x1e/0xc0 [ 87.215218][ T1085] bpf_prog_test_run_skb+0x286/0x1290 [ 87.220642][ T1085] ? __fget_files+0x2d5/0x330 [ 87.225449][ T1085] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 87.231655][ T1085] bpf_prog_test_run+0x3e3/0x640 [ 87.236887][ T1085] ? check_stack_object+0x8c/0x140 [ 87.242136][ T1085] ? bpf_prog_query+0x270/0x270 [ 87.247032][ T1085] ? selinux_bpf+0xce/0xf0 [ 87.251504][ T1085] ? security_bpf+0x93/0xb0 [ 87.256154][ T1085] __sys_bpf+0x5ee/0x850 [ 87.260442][ T1085] ? __kasan_check_read+0x11/0x20 [ 87.265512][ T1085] ? bpf_link_show_fdinfo+0x330/0x330 [ 87.271020][ T1085] ? sysvec_reschedule_ipi+0x78/0x80 [ 87.276348][ T1085] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 87.282111][ T1085] __x64_sys_bpf+0x7c/0x90 [ 87.286759][ T1085] x64_sys_call+0x488/0x9a0 [ 87.291305][ T1085] do_syscall_64+0x4c/0xa0 [ 87.295769][ T1085] ? clear_bhb_loop+0x30/0x80 [ 87.300485][ T1085] ? clear_bhb_loop+0x30/0x80 [ 87.305206][ T1085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.311243][ T1085] RIP: 0033:0x7f1cdc39aeb9 [ 87.315867][ T1085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.335860][ T1085] RSP: 002b:00007f1cdd23d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.344522][ T1085] RAX: ffffffffffffffda RBX: 00007f1cdc615fa0 RCX: 00007f1cdc39aeb9 [ 87.352619][ T1085] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 87.360802][ T1085] RBP: 00007f1cdd23d090 R08: 0000000000000000 R09: 0000000000000000 [ 87.368925][ T1085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.377021][ T1085] R13: 00007f1cdc616038 R14: 00007f1cdc615fa0 R15: 00007ffe2cc781b8 [ 87.385039][ T1085] [ 87.422307][ T1092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 87.451595][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.459418][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.474942][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.483670][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.487960][ T367] usb 4-1: Using ep0 maxpacket: 16 [ 87.494409][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.504439][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.505656][ T367] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 87.515191][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.524468][ T367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.539806][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.548604][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.552509][ T367] usb 4-1: Product: syz [ 87.556104][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.560574][ T367] usb 4-1: Manufacturer: syz [ 87.570332][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.580917][ T367] usb 4-1: SerialNumber: syz [ 87.587558][ T367] usb 4-1: config 0 descriptor?? [ 87.609258][ T367] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 87.621027][ T1062] device veth0_vlan entered promiscuous mode [ 87.639962][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.648567][ T287] EXT4-fs (loop4): unmounting filesystem. [ 87.654804][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.663901][ T420] udevd[420]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.679851][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.682036][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.702683][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.710849][ T24] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 87.719325][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.727545][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.736892][ T1062] device veth1_macvtap entered promiscuous mode [ 87.755620][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.764619][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.773552][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.781497][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.798026][ T1075] SELinux: Context system_u:object_r:textrel_shlib_t:s0 is not valid (left unmapped). [ 87.809558][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.818428][ T203] usb 4-1: USB disconnect, device number 9 [ 87.818708][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.833842][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.845302][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.853758][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.861004][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.868492][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.877213][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.879432][ T24] usb 2-1: device descriptor read/64, error -71 [ 87.887314][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.899323][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.907258][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.919590][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.931216][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.950400][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.977353][ T1104] set_capacity_and_notify: 4 callbacks suppressed [ 87.977372][ T1104] loop6: detected capacity change from 0 to 512 [ 87.977384][ T1063] device veth0_vlan entered promiscuous mode [ 87.997192][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.998516][ T1104] EXT4-fs: Ignoring removed oldalloc option [ 88.008720][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.023289][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.024332][ T1104] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 88.047382][ T1063] device veth1_macvtap entered promiscuous mode [ 88.054935][ T1104] FAULT_INJECTION: forcing a failure. [ 88.054935][ T1104] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 88.070699][ T1104] CPU: 1 PID: 1104 Comm: syz.6.226 Not tainted syzkaller #0 [ 88.078223][ T1104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.088313][ T1104] Call Trace: [ 88.091702][ T1104] [ 88.094676][ T1104] __dump_stack+0x21/0x24 [ 88.099144][ T1104] dump_stack_lvl+0x110/0x170 [ 88.104034][ T1104] ? __cfi_dump_stack_lvl+0x8/0x8 [ 88.109450][ T1104] ? __this_cpu_preempt_check+0x13/0x20 [ 88.115148][ T1104] ? cgroup_rstat_updated+0xf5/0x360 [ 88.120657][ T1104] dump_stack+0x15/0x24 [ 88.124939][ T1104] should_fail_ex+0x3d4/0x520 [ 88.129862][ T1104] should_fail_alloc_page+0x61/0x90 [ 88.135386][ T1104] prepare_alloc_pages+0x148/0x600 [ 88.140735][ T1104] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 88.145993][ T1104] ? __filemap_add_folio+0x959/0xc50 [ 88.151405][ T1104] __alloc_pages+0x13a/0x480 [ 88.156258][ T1104] ? __cfi___alloc_pages+0x10/0x10 [ 88.161510][ T1104] __folio_alloc+0x12/0x40 [ 88.166101][ T1104] __filemap_get_folio+0x721/0x9b0 [ 88.171243][ T1104] ? __cfi___filemap_get_folio+0x10/0x10 [ 88.176974][ T1104] ? ext4_mb_prefetch+0x5aa/0x640 [ 88.182203][ T1104] pagecache_get_page+0x2b/0x110 [ 88.187267][ T1104] ext4_mb_init_group+0x207/0x590 [ 88.192324][ T1104] ext4_mb_regular_allocator+0x255f/0x3570 [ 88.198562][ T1104] ? memcpy+0x56/0x70 [ 88.202591][ T1104] ? kasan_save_alloc_info+0x25/0x30 [ 88.208132][ T1104] ext4_mb_new_blocks+0xc89/0x4250 [ 88.213295][ T1104] ? ext4_get_branch+0x63d/0x7c0 [ 88.218328][ T1104] ? __cfi_ext4_mb_new_blocks+0x10/0x10 [ 88.224377][ T1104] ext4_ind_map_blocks+0xda7/0x2000 [ 88.229989][ T1104] ? __cfi_from_kprojid+0x10/0x10 [ 88.235303][ T1104] ? __cfi_ext4_ind_map_blocks+0x10/0x10 [ 88.241179][ T1104] ? __kasan_check_write+0x14/0x20 [ 88.246649][ T1104] ? downgrade_write+0x370/0x370 [ 88.251880][ T1104] ? __cfi_down_read+0x10/0x10 [ 88.256667][ T1104] ? ext4_es_lookup_extent+0x54c/0x900 [ 88.262799][ T1104] ext4_map_blocks+0x977/0x1b70 [ 88.268038][ T1104] ? __cfi_ext4_map_blocks+0x10/0x10 [ 88.273393][ T1104] ? ext4_check_all_de+0x61/0x100 [ 88.278477][ T1104] ? ext4_check_all_de+0xc8/0x100 [ 88.283675][ T1104] ext4_convert_inline_data_nolock+0x415/0x9e0 [ 88.289883][ T1104] ? ext4_add_dirent_to_inline+0x440/0x440 [ 88.295825][ T1104] ? __kasan_check_read+0x11/0x20 [ 88.300880][ T1104] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 88.306603][ T1104] ext4_convert_inline_data+0x4b9/0x5f0 [ 88.312381][ T1104] ? __cfi_ext4_convert_inline_data+0x10/0x10 [ 88.318575][ T1104] ? _get_random_bytes+0x1e4/0x250 [ 88.324270][ T1104] ? get_random_bytes+0x30/0x30 [ 88.329169][ T1104] ext4_set_context+0x12e/0x4b0 [ 88.334129][ T1104] ? __cfi_ext4_set_context+0x10/0x10 [ 88.339531][ T1104] ? fscrypt_new_context+0x2db/0x540 [ 88.345116][ T1104] set_encryption_policy+0x1cf/0x3b0 [ 88.350434][ T1104] ? fscrypt_get_policy+0x590/0x590 [ 88.355682][ T1104] ? rwsem_write_trylock+0x136/0x300 [ 88.361049][ T1104] ? fscrypt_ioctl_set_policy+0x4b0/0x4b0 [ 88.366881][ T1104] ? __cfi_ext4_empty_dir+0x10/0x10 [ 88.372476][ T1104] fscrypt_ioctl_set_policy+0x418/0x4b0 [ 88.378246][ T1104] ? __cfi_fscrypt_ioctl_set_policy+0x10/0x10 [ 88.384353][ T1104] ? kernel_text_address+0xa0/0xd0 [ 88.389492][ T1104] ? __kernel_text_address+0xd/0x30 [ 88.395064][ T1104] ? unwind_get_return_address+0x4d/0x90 [ 88.400744][ T1104] ? arch_stack_walk+0xfc/0x150 [ 88.406199][ T1104] ext4_ioctl+0x1b17/0x3e90 [ 88.410924][ T1104] ? memcpy+0x56/0x70 [ 88.415044][ T1104] ? __cfi_ext4_ioctl+0x10/0x10 [ 88.419964][ T1104] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 88.426582][ T1104] ? __asan_set_shadow_00+0xe/0x10 [ 88.431807][ T1104] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 88.436675][ T1104] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 88.442363][ T1104] ? kstrtouint+0x74/0xe0 [ 88.446859][ T1104] ? ioctl_has_perm+0x1b8/0x4f0 [ 88.451751][ T1104] ? ioctl_has_perm+0x3a6/0x4f0 [ 88.456766][ T1104] ? has_cap_mac_admin+0x370/0x370 [ 88.461911][ T1104] ? vfs_write+0xa2c/0xce0 [ 88.466433][ T1104] ? selinux_file_ioctl+0x3a0/0x4d0 [ 88.471663][ T1104] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 88.477424][ T1104] ? mutex_unlock+0x8f/0x230 [ 88.482215][ T1104] ? __cfi_mutex_unlock+0x10/0x10 [ 88.487448][ T1104] ? __fget_files+0x2d5/0x330 [ 88.492585][ T1104] ? security_file_ioctl+0x95/0xc0 [ 88.497908][ T1104] ? __cfi_ext4_ioctl+0x10/0x10 [ 88.502803][ T1104] __se_sys_ioctl+0x12f/0x1b0 [ 88.507779][ T1104] __x64_sys_ioctl+0x7b/0x90 [ 88.512555][ T1104] x64_sys_call+0x58b/0x9a0 [ 88.517217][ T1104] do_syscall_64+0x4c/0xa0 [ 88.521881][ T1104] ? clear_bhb_loop+0x30/0x80 [ 88.526688][ T1104] ? clear_bhb_loop+0x30/0x80 [ 88.531674][ T1104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.537698][ T1104] RIP: 0033:0x7fee2579aeb9 [ 88.542400][ T1104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.562391][ T1104] RSP: 002b:00007fee265be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.570868][ T1104] RAX: ffffffffffffffda RBX: 00007fee25a15fa0 RCX: 00007fee2579aeb9 [ 88.578896][ T1104] RDX: 0000200000000340 RSI: 00000000800c6613 RDI: 0000000000000004 [ 88.586908][ T1104] RBP: 00007fee265be090 R08: 0000000000000000 R09: 0000000000000000 [ 88.595440][ T1104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.603898][ T1104] R13: 00007fee25a16038 R14: 00007fee25a15fa0 R15: 00007ffcd262c6f8 [ 88.612083][ T1104] [ 88.626155][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.637732][ T1062] EXT4-fs (loop6): unmounting filesystem. [ 88.648093][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.657746][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.687909][ T24] usb 2-1: device descriptor read/64, error -71 [ 88.698409][ T1109] loop4: detected capacity change from 0 to 512 [ 88.712474][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.715768][ T1109] EXT4-fs: Ignoring removed oldalloc option [ 88.727397][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.751753][ T1109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.798944][ T287] EXT4-fs (loop4): unmounting filesystem. [ 88.813051][ T1116] loop5: detected capacity change from 0 to 256 [ 88.824382][ T1116] exfat: Bad value for 'uid' [ 88.864267][ T1116] loop5: detected capacity change from 0 to 512 [ 88.876516][ T1123] loop4: detected capacity change from 0 to 512 [ 88.877064][ T1116] EXT4-fs: Invalid gid value -1 [ 88.896511][ T1123] EXT4-fs: Ignoring removed oldalloc option [ 88.935097][ T1123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.967865][ T24] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 89.026977][ T1063] ------------[ cut here ]------------ [ 89.032824][ T1063] WARNING: CPU: 1 PID: 1063 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 89.041363][ T1063] Modules linked in: [ 89.045489][ T1063] CPU: 1 PID: 1063 Comm: syz-executor Not tainted syzkaller #0 [ 89.053627][ T1063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.064625][ T1063] RIP: 0010:drop_nlink+0xc5/0x110 [ 89.070343][ T1063] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 53 b5 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bb 84 ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 89.090276][ T1063] RSP: 0018:ffffc90001287c38 EFLAGS: 00010293 [ 89.096475][ T1063] RAX: ffffffff81c5e755 RBX: ffff888136dab570 RCX: ffff88810eb83cc0 [ 89.104901][ T1063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.113036][ T1063] RBP: ffffc90001287c60 R08: 0000000000000003 R09: 0000000000000004 [ 89.121179][ T1063] R10: dffffc0000000000 R11: fffff52000250f78 R12: dffffc0000000000 [ 89.129300][ T1063] R13: 1ffff11026db56b7 R14: ffff888136dab5b8 R15: 0000000000000000 [ 89.137324][ T1063] FS: 000055556990a500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 89.146376][ T1063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.153198][ T1063] CR2: 00007f473ebe2000 CR3: 0000000126c93000 CR4: 00000000003526a0 [ 89.161290][ T1063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.169434][ T1063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.177732][ T1063] Call Trace: [ 89.181127][ T1063] [ 89.184215][ T1063] shmem_rmdir+0x5b/0x90 [ 89.188756][ T1063] vfs_rmdir+0x393/0x500 [ 89.193081][ T1063] incfs_kill_sb+0x105/0x220 [ 89.197745][ T1063] deactivate_locked_super+0xb5/0x120 [ 89.203534][ T1063] deactivate_super+0xaf/0xe0 [ 89.208361][ T1063] cleanup_mnt+0x474/0x500 [ 89.213172][ T1063] __cleanup_mnt+0x19/0x20 [ 89.218092][ T1063] task_work_run+0x1e1/0x250 [ 89.222936][ T1063] ? __cfi_task_work_run+0x10/0x10 [ 89.228350][ T1063] ? __cfi_do_rmdir+0x10/0x10 [ 89.233180][ T1063] exit_to_user_mode_loop+0x9b/0xb0 [ 89.238752][ T1063] exit_to_user_mode_prepare+0x87/0xd0 [ 89.244668][ T1063] syscall_exit_to_user_mode+0x1a/0x30 [ 89.250498][ T1063] do_syscall_64+0x58/0xa0 [ 89.255060][ T1063] ? clear_bhb_loop+0x30/0x80 [ 89.259915][ T1063] ? clear_bhb_loop+0x30/0x80 [ 89.264640][ T1063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.270827][ T1063] RIP: 0033:0x7f8dea199fd7 [ 89.275287][ T1063] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.295347][ T1063] RSP: 002b:00007ffdc35a1168 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 89.304011][ T1063] RAX: 0000000000000000 RBX: 0000000000000065 RCX: 00007f8dea199fd7 [ 89.312333][ T1063] RDX: 0000000000000200 RSI: 00007ffdc35a2310 RDI: 00000000ffffff9c [ 89.321014][ T1063] RBP: 00007f8dea20471f R08: 00000000000186c0 R09: 0000000000000001 [ 89.329889][ T1063] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffdc35a2310 [ 89.338460][ T1063] R13: 00007f8dea20471f R14: 0000000000015b6f R15: 00007ffdc35a33e0 [ 89.346741][ T1063] [ 89.349874][ T1063] ---[ end trace 0000000000000000 ]--- [ 89.357952][ T1063] ------------[ cut here ]------------ [ 89.364005][ T1063] WARNING: CPU: 1 PID: 1063 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 89.372767][ T1063] Modules linked in: [ 89.376875][ T1063] CPU: 1 PID: 1063 Comm: syz-executor Tainted: G W syzkaller #0 [ 89.386656][ T1063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.397109][ T1063] RIP: 0010:drop_nlink+0xc5/0x110 [ 89.402354][ T1063] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 53 b5 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bb 84 ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 89.422603][ T1063] RSP: 0018:ffffc90001287c38 EFLAGS: 00010293 [ 89.429006][ T1063] RAX: ffffffff81c5e755 RBX: ffff888136dab938 RCX: ffff88810eb83cc0 [ 89.437192][ T1063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.445351][ T1063] RBP: ffffc90001287c60 R08: 0000000000000003 R09: 0000000000000004 [ 89.453806][ T1063] R10: dffffc0000000000 R11: fffff52000250f78 R12: dffffc0000000000 [ 89.461930][ T1063] R13: 1ffff11026db5730 R14: ffff888136dab980 R15: 0000000000000000 [ 89.470052][ T1063] FS: 000055556990a500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 89.479222][ T1063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.486108][ T1063] CR2: 0000001b2eb1eff8 CR3: 0000000126c93000 CR4: 00000000003526a0 [ 89.494718][ T1063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.503387][ T1063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.511779][ T1063] Call Trace: [ 89.515341][ T1063] [ 89.518489][ T1063] shmem_rmdir+0x5b/0x90 [ 89.522979][ T1063] vfs_rmdir+0x393/0x500 [ 89.527663][ T1063] incfs_kill_sb+0x198/0x220 [ 89.532354][ T1063] deactivate_locked_super+0xb5/0x120 [ 89.538419][ T1063] deactivate_super+0xaf/0xe0 [ 89.543155][ T1063] cleanup_mnt+0x474/0x500 [ 89.547926][ T1063] __cleanup_mnt+0x19/0x20 [ 89.552398][ T1063] task_work_run+0x1e1/0x250 [ 89.557248][ T1063] ? __cfi_task_work_run+0x10/0x10 [ 89.562544][ T1063] ? __cfi_do_rmdir+0x10/0x10 [ 89.567319][ T1063] exit_to_user_mode_loop+0x9b/0xb0 [ 89.572677][ T1063] exit_to_user_mode_prepare+0x87/0xd0 [ 89.578267][ T1063] syscall_exit_to_user_mode+0x1a/0x30 [ 89.583843][ T1063] do_syscall_64+0x58/0xa0 [ 89.588778][ T1063] ? clear_bhb_loop+0x30/0x80 [ 89.593592][ T1063] ? clear_bhb_loop+0x30/0x80 [ 89.598466][ T1063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.604505][ T1063] RIP: 0033:0x7f8dea199fd7 [ 89.609187][ T1063] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.629155][ T1063] RSP: 002b:00007ffdc35a1168 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 89.637917][ T1063] RAX: 0000000000000000 RBX: 0000000000000065 RCX: 00007f8dea199fd7 [ 89.645938][ T1063] RDX: 0000000000000200 RSI: 00007ffdc35a2310 RDI: 00000000ffffff9c [ 89.654302][ T1063] RBP: 00007f8dea20471f R08: 00000000000186c0 R09: 0000000000000001 [ 89.661069][ T8] device bridge_slave_1 left promiscuous mode [ 89.662745][ T1063] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffdc35a2310 [ 89.669035][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.676912][ T1063] R13: 00007f8dea20471f R14: 0000000000015b6f R15: 00007ffdc35a33e0 [ 89.692552][ T1063] [ 89.695636][ T1063] ---[ end trace 0000000000000000 ]--- [ 89.703457][ T8] device bridge_slave_0 left promiscuous mode [ 89.710012][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.739513][ T8] device veth1_macvtap left promiscuous mode [ 89.747291][ T24] usb 2-1: device descriptor read/64, error -71 [ 89.754648][ T8] device veth0_vlan left promiscuous mode [ 89.764563][ T1063] list_del corruption. prev->next should be ffff8881184b9a20, but was ffff888118437090. (prev=ffff8881184b9910) [ 89.776913][ T1063] ------------[ cut here ]------------ [ 89.782726][ T1063] kernel BUG at lib/list_debug.c:61! [ 89.788546][ T1063] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 89.794696][ T1063] CPU: 0 PID: 1063 Comm: syz-executor Tainted: G W syzkaller #0 [ 89.804537][ T1063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.814744][ T1063] RIP: 0010:__list_del_entry_valid+0x10f/0x130 [ 89.821068][ T1063] Code: e8 2e 4a 88 02 0f 0b 48 c7 c7 c0 74 ca 85 48 89 de e8 1d 4a 88 02 0f 0b 48 c7 c7 20 75 ca 85 48 89 de 4c 89 f9 e8 09 4a 88 02 <0f> 0b 48 c7 c7 a0 75 ca 85 48 89 de 4c 89 f1 e8 f5 49 88 02 0f 0b [ 89.840832][ T1063] RSP: 0018:ffffc90001287bc8 EFLAGS: 00010246 [ 89.847058][ T1063] RAX: 000000000000006d RBX: ffff8881184b9a20 RCX: 792a0ac5c18fd100 [ 89.855091][ T1063] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 89.863837][ T1063] RBP: ffffc90001287be8 R08: ffffc900012878c7 R09: 1ffff92000250f18 [ 89.871872][ T1063] R10: dffffc0000000000 R11: fffff52000250f19 R12: dffffc0000000000 [ 89.880265][ T1063] R13: dffffc0000000000 R14: ffff888118437090 R15: ffff8881184b9910 [ 89.888388][ T1063] FS: 000055556990a500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 89.897844][ T1063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.904490][ T1063] CR2: 00007f473f321000 CR3: 0000000126c93000 CR4: 00000000003526b0 [ 89.912801][ T1063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.920925][ T1063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.929395][ T1063] Call Trace: [ 89.932738][ T1063] [ 89.935832][ T1063] __dentry_kill+0x25d/0x670 [ 89.940586][ T1063] dentry_kill+0xc0/0x2a0 [ 89.944983][ T1063] dput+0x42/0x80 [ 89.948239][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 89.948290][ T28] audit: type=1400 audit(1769897015.153:462): avc: denied { ioctl } for pid=1128 comm="syz.3.247" path="socket:[20599]" dev="sockfs" ino=20599 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.948766][ T1063] incfs_free_mount_info+0x60/0x200 [ 89.986910][ T1063] incfs_kill_sb+0x1b8/0x220 [ 89.991845][ T1063] deactivate_locked_super+0xb5/0x120 [ 89.997644][ T1063] deactivate_super+0xaf/0xe0 [ 90.002784][ T1063] cleanup_mnt+0x474/0x500 [ 90.007370][ T1063] __cleanup_mnt+0x19/0x20 [ 90.012039][ T1063] task_work_run+0x1e1/0x250 [ 90.016796][ T1063] ? __cfi_task_work_run+0x10/0x10 [ 90.022432][ T1063] ? __cfi_do_rmdir+0x10/0x10 [ 90.027370][ T1063] exit_to_user_mode_loop+0x9b/0xb0 [ 90.032671][ T1063] exit_to_user_mode_prepare+0x87/0xd0 [ 90.038305][ T1063] syscall_exit_to_user_mode+0x1a/0x30 [ 90.043821][ T1063] do_syscall_64+0x58/0xa0 [ 90.048775][ T1063] ? clear_bhb_loop+0x30/0x80 [ 90.053510][ T1063] ? clear_bhb_loop+0x30/0x80 [ 90.058273][ T1063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.064323][ T1063] RIP: 0033:0x7f8dea199fd7 [ 90.068973][ T1063] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.089021][ T1063] RSP: 002b:00007ffdc35a1168 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 90.097505][ T1063] RAX: 0000000000000000 RBX: 0000000000000065 RCX: 00007f8dea199fd7 [ 90.098225][ T24] usb 2-1: device descriptor read/64, error -71 [ 90.105702][ T1063] RDX: 0000000000000200 RSI: 00007ffdc35a2310 RDI: 00000000ffffff9c [ 90.105724][ T1063] RBP: 00007f8dea20471f R08: 00000000000186c0 R09: 0000000000000001 [ 90.105738][ T1063] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffdc35a2310 [ 90.105751][ T1063] R13: 00007f8dea20471f R14: 0000000000015b6f R15: 00007ffdc35a33e0 [ 90.105770][ T1063] [ 90.148166][ T1063] Modules linked in: [ 90.152717][ T1063] ---[ end trace 0000000000000000 ]--- [ 90.158437][ T1063] RIP: 0010:__list_del_entry_valid+0x10f/0x130 [ 90.164837][ T1063] Code: e8 2e 4a 88 02 0f 0b 48 c7 c7 c0 74 ca 85 48 89 de e8 1d 4a 88 02 0f 0b 48 c7 c7 20 75 ca 85 48 89 de 4c 89 f9 e8 09 4a 88 02 <0f> 0b 48 c7 c7 a0 75 ca 85 48 89 de 4c 89 f1 e8 f5 49 88 02 0f 0b [ 90.184946][ T1063] RSP: 0018:ffffc90001287bc8 EFLAGS: 00010246 [ 90.191281][ T1063] RAX: 000000000000006d RBX: ffff8881184b9a20 RCX: 792a0ac5c18fd100 [ 90.199597][ T1063] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 90.207728][ T1063] RBP: ffffc90001287be8 R08: ffffc900012878c7 R09: 1ffff92000250f18 [ 90.215990][ T1063] R10: dffffc0000000000 R11: fffff52000250f19 R12: dffffc0000000000 [ 90.224193][ T1063] R13: dffffc0000000000 R14: ffff888118437090 R15: ffff8881184b9910 [ 90.228176][ T24] usb usb2-port1: attempt power cycle [ 90.232407][ T1063] FS: 000055556990a500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 90.247296][ T1063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.253993][ T1063] CR2: 00007f473f321000 CR3: 0000000126c93000 CR4: 00000000003526b0 [ 90.262143][ T1063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.270317][ T1063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.278744][ T1063] Kernel panic - not syncing: Fatal exception [ 90.283030][ T28] audit: type=1400 audit(1769897015.583:463): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 90.283165][ T28] audit: type=1400 audit(1769897015.583:464): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.283238][ T28] audit: type=1400 audit(1769897015.583:465): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.283303][ T28] audit: type=1400 audit(1769897015.583:466): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.283368][ T28] audit: type=1400 audit(1769897015.583:467): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.283439][ T28] audit: type=1400 audit(1769897015.583:468): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.283503][ T28] audit: type=1400 audit(1769897015.583:469): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.440484][ T1063] Kernel Offset: disabled [ 90.444833][ T1063] Rebooting in 86400 seconds..