last executing test programs: 1m3.956239254s ago: executing program 4 (id=5): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x11, 0xffffffffffffffff, 0xa0f8b000) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400040}, 0xc, &(0x7f0000000980)={&(0x7f0000000380)={0x5d0, r0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x324, 0x11d, 0x0, 0x1, [{0x2cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x16}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x288, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0x1}, {0x1, 0x7}, {0x2, 0x2}, {0x4, 0x2}, {0x4, 0x3}, {0x7, 0x2}, {0x6}, {0x1, 0x6}, {0x7, 0x9}, {0x7}, {0x0, 0x3}, {0x5, 0x6}, {0x7, 0x2}, {0x1, 0x4}, {0x6}, {0x7, 0x7}, {0x7, 0x8}, {0x6, 0x3}, {0x1, 0x8}, {0x6, 0xa}, {0x6, 0x5}, {0x7, 0x5}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x1}, {0x6, 0x7}, {0x2, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x8}, {0x3, 0x7}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x7}, {0x2, 0xa}, {0x2}, {0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x6, 0x7}, {0x2, 0x4}, {0x6, 0x5}, {0x1, 0x7}, {0x5, 0x6}, {}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {0x1, 0x1}, {0x4, 0x1}, {0x7, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc26d, 0x3, 0x6, 0x7, 0xeaa8, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0xa}, {0x6}, {0x2, 0x6}, {0x0, 0x4}, {0x7, 0x3}, {0x4, 0x1}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x3}, {0x7, 0x5}, {0x3, 0xa}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0x8}, {0x3, 0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0x6}, {0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x5}, {0x1, 0x6}, {0x5, 0x8}]}]}, @NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x36, 0x2, 0x30, 0x12, 0x12, 0x9, 0x4, 0x6c, 0x9, 0x48, 0x24, 0x12, 0x1, 0x4, 0xc, 0x9, 0xc, 0x36, 0x1b, 0x5, 0x48, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1000, 0x8, 0x5, 0x0, 0xa7b, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x6c, 0x16, 0x9, 0x16, 0x12, 0x1b, 0xc, 0x16, 0x3, 0x4, 0x12, 0x4ba09e0f9edd8980, 0x18, 0x12, 0x16, 0x4]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x7, 0x7}, {0x0, 0x2}, {0x7, 0x2}, {0x5, 0x4}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x4, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x3, 0xa}, {0x5, 0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x3, 0x5}, {0x1, 0x5}, {0x7, 0x2}, {0x7, 0x1}, {0x6, 0x2}, {0x2, 0xa}, {0x1, 0x9}, {0x1}, {0x3, 0x5}, {0x1, 0xa}, {0x2, 0x6}, {0x5, 0x1}, {0x2, 0x9}, {0x4, 0x9}, {0x6, 0x6}, {0x1}, {0x2}, {0x5}, {0x7, 0x6}, {0x1, 0x1}, {0x6, 0xa}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0x6}, {0x7, 0x2}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x8}, {0x2, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x7, 0x0, 0xc00, 0xb, 0x0, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20ff, 0x62c, 0x8, 0x39d2, 0x30, 0x3ff, 0x1000, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0xa}, {0x3, 0x2}, {0x4, 0x7}, {0x5, 0x5}, {0x3, 0x1}, {0x5, 0x9}, {0x1, 0x2}, {0x5}, {0x1}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0x7}, {0x3, 0x1}, {0x2, 0x4}, {0x6, 0x7}, {0x3, 0x8}, {0x5, 0x1}, {0x0, 0x9}, {0x3, 0x4}, {0x3, 0x9}, {0x5, 0xa}, {0x7, 0x1e}, {}, {0x6, 0x3}, {0x2}, {0x6, 0x3}, {0x2, 0x9}, {0x2}, {0x5}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x1}, {0x4, 0x5}, {0x7, 0x5}, {0x2, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x7, 0x6}, {0x5, 0x5}, {0x7}, {0x6, 0x8}, {0x7, 0x4}, {0x5, 0x5}, {0x4, 0x9}, {0x7, 0x3}, {0x4, 0x4}, {0x6, 0xa}, {0x7, 0x4}, {0x5, 0x7}, {0x0, 0x2}, {0x4, 0x4}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x53, 0x400, 0x2, 0x7, 0x7fcb, 0x0, 0x63]}}]}, @NL80211_BAND_60GHZ={0xec, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xa61d, 0x5, 0x4, 0x2, 0x8, 0x3, 0x7ade]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x7}, {0x5}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0x9}, {0x4, 0x7}, {0x5, 0x2}, {0x1, 0x3}, {0x6, 0x9}, {0x3, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x7, 0x19}, {0x5, 0x1}, {0x6, 0x2}, {0x5, 0x9}, {0x7, 0xa}, {0x6}, {0x3, 0x4}, {0x4, 0x2}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x4}, {0x7}, {0x7, 0xa}, {0x3, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x6, 0x7}, {}, {0x6}, {0x1, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x4, 0xa}, {0x5}, {0x5}, {0x1, 0x5}, {0x1, 0x6}, {0x6}, {0x7, 0xa}, {0x0, 0x4}, {0x5, 0x7}, {0x4, 0x9}, {0x0, 0x4}, {0x5, 0x3}, {0x6, 0x5}, {0x4, 0x3}, {0x3, 0x6}, {0x4, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x5, 0x6}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x2}, {0x5, 0x5}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x8}, {0x7, 0x1}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x3, 0x6}, {0x7, 0x9}, {0x3, 0x7}, {0x3, 0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x6, 0x6}, {0x3, 0x6}, {0x3, 0xa}, {0x4, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x9}, {0x4}, {0x3, 0x9}, {0x3}, {0x2, 0x5}, {0x1, 0x1}, {0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x8}, {0x3, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x6, 0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x3}, {0x7, 0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x6}, {0x3, 0x9}, {0x6, 0x3}, {0x1, 0x6}, {0x5, 0x8}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0xa}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x4}, {0x1, 0x9}, {0x1, 0x5}, {0x7}, {0x3, 0x4}, {0x5}, {0x1, 0x2}, {}, {0x1, 0xa}, {0x3, 0xa}, {0x5, 0x2}, {0x1, 0xa}, {0x0, 0x7}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x7, 0x4}, {0x0, 0x1}, {}, {0x1, 0x8}, {0x2, 0x2}, {0x3, 0x2}, {0x1, 0x8}, {0x7, 0xa}, {0x3, 0x2}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x4, 0x8}, {0x5, 0x5}, {0x3, 0x7}, {0x2, 0x1}, {0x6, 0x5}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x69}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x4}, {0x6}, {0x5, 0x3}, {0x1, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x5}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x5}, {0x2, 0x4}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0x3}, {0x2, 0xa}, {0x0, 0x5}, {0x3}, {0x2, 0x4}, {0x4, 0x9}, {0x0, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x4, 0x2}, {0x6, 0x2}, {0x6, 0x4}, {0x3, 0x8}, {0x2, 0x3}, {0x6, 0x6}, {0x0, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x290, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x23c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x3, 0x2, 0x30, 0x6, 0x24, 0xc, 0x48, 0x18, 0x30, 0x3, 0x9, 0x12, 0x18, 0x5, 0x60, 0x16, 0x3, 0x6, 0x60, 0x9, 0x12, 0xb, 0x6c, 0x36, 0x18, 0x12, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc952, 0x9, 0x3, 0x6, 0xfb1, 0x6, 0x0, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x2, 0x1, 0x3, 0x8000, 0x400, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x129, 0x5, 0x17, 0x8, 0x1, 0x6, 0x4, 0x7]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x2}, {0x2, 0xa}, {0x1, 0x7}, {0x6, 0x9}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x4, 0x5}, {0x1}, {0x3, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x80, 0xb3, 0x3, 0xfff8, 0x5cf, 0x1, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffb, 0x800, 0xe1d3, 0xe, 0x9, 0x101, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x3ff, 0x8000, 0x8000, 0xfff, 0x3, 0x5, 0x2]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x30, 0x6]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x1, 0x0, 0x7, 0x7ff, 0x3f8, 0x1]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0xa}, {0x3, 0x1}, {0x4, 0x8}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0x1}, {0x6}, {0x7, 0x8}, {0x3, 0x5}, {0x7, 0xa}, {0x3, 0x4}, {0x5, 0x1}, {}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x2}, {0x3, 0x8}, {0x0, 0x1}, {0x7}, {0x4, 0x4}, {0x7, 0xa}, {0x1}, {0x4, 0x9}, {0x6}, {0x5, 0x5}, {0x7, 0x7}, {0x7, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x6, 0x5}, {0x5, 0x7}, {0x7, 0xa}, {0x3, 0x5}, {0x2, 0x4}, {0x5, 0x5}, {0x7, 0x4}, {0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x5, 0x5}, {0x4, 0x1}, {0x6, 0x1}, {0x4, 0xa}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x9}, {0x1, 0x7}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x2, 0xa}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x57a0, 0x8, 0x1, 0x8, 0x1, 0x8, 0x9, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xe, 0x7fff, 0x1, 0x7, 0x2, 0x7, 0x80]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x7, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x18}, {0x6, 0x2}, {0x5, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0x6}, {0x5, 0x6}, {0x4, 0x7}, {0x0, 0x6}, {0x1, 0x5}, {}, {0x4, 0x3}, {0x6, 0x4}, {0x0, 0x1}, {0x0, 0x2}, {0x3, 0x7}, {0x3, 0x7}, {0x4, 0x18}, {0x7, 0x9}, {0x4, 0x6}, {0x1, 0x8}, {0x4, 0x8}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x5}, {0x2, 0x5}, {0x5, 0xa}, {0x7, 0x4}, {0x3, 0x3}, {0x7, 0x7}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x9}, {}, {0x0, 0x1}, {0x4, 0x4}, {0x6, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x5, 0x3}, {0x2, 0x6}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0xa}, {0x4}, {0x2, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x7, 0x5}, {0x1, 0x3}, {0x2, 0x8}, {0x6}, {0x6}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcf}]}]}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x40110}, 0x4008080) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@noacl}, {@lazytime}, {@minixdf}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 1m3.75430343s ago: executing program 4 (id=9): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrKpupOkcdvgQ1UQfSqoFZ+ENSaTEDLJLMmk3YTFpvgqCCJa8EWffBH8AwTpi+8iFOq7qChSs/qg0PbKnbnTTWZnkhRncpfk94Oz9557Zu73ncnOybkzN/cGcGE9GRHTETEWEc9ExFSxPS1K7HdK/rh7B3eX8pJElr30dhJJsa27r8vF8lrxtImI+MZXI76bPBh3e3dvfbHRqG8V9ZnWRvJOlu3dWNtYXK2v1jfn5+eeW3h+4ebC7FD6WY2IF77815/88JdfeeG3n33lT7f+Pv29PK3/Ztmr0dOPYep0vdJ+LbrGI2JrFMFKMt7uYcfNknMBAOB4+Xz/wxHxyfb8fyrG2rM5AAAA4DzJvjAZ7yQRGQAAAHBupRExGUlaK873nSzOWL0WER+Nq2mjud36zEpzZ3M5b4uoRiVdWWvUZ2Oife5ANSpJXp8rzrHt1p/tqc9HxKMR8eOpK+16banZWC77ww8AAAC4IK71HP//eypNa7Wicb/k5AAAAIDhqZadAAAAADByjv8BAADg/Ktmfe7Q9aB09JkAAAAAI/C1F1/MS9a9//Xyy7s7682XbyzXt9drGztLtaXm1u3aarO52r5m38ZJ+2s0m7c/F5s7d2Za9e3WzPbu3q2N5s5m69bakVtgAwAAAGfo0U+88cckIvY/f6VdcpeKtkpENnb4weNlZAiMygc6p+cvo8sDOHuHf79fKTEP4OyZ0sPFVSk7AaB0J/0B0MCTd34//FwAAIDRuP6xwd//v71SamrAiBXf/yenugAIcK6MlZ0AUJrO93/vZR1lZwOcpcpxMwAHBXDupcP5/v+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSVbWGvXZiPhQRLw1Vbmc1+faz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3s8HLiX/mWovI+KVn7300zuLrdbWXL79n+9vb71ebH+2jE8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNO9g7tL97Isyw7uLp1l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjh56XRMTYEOLvvxYRj/WLn+RpRbXI4kj8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK0+/uavZwbGfy3i8fH+4083fpLvr0/8p07Zx+98c29vUFv2i4jr/ca/5GismdbG7Znt3b0baxuLq/XV+ub8/NxzC88v3FyYnVlZa9SLf/vG+NHHf/Pe/dq7D/T/6jHjb7v/A17/p0/Z/3ffvHPwkc5qz08mKvHzLJt+qv/P/7F88en+8fP/E58qfg/k7flrmL7+rb7xn/jVH54YlFve/+UB/Z/o6f/lnv5Pn7L/z3z9+38+5UMBgDOwvbu3vtho1LesHF6J6kORxsO7ks87S08jiSTylbeONC2Wn1hn5dXiPbbY6L7bhrTn3xUHR6NMvqTxCAAAGJ37k/7elqSchAAAAAAAAAAAAAAAAAAAAOACOvEyYIOa0oi4v+XbPzjmamS9MffL6SoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLH+FwAA//8tudaU") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x31, 0x0, 0x0) (async) lstat(&(0x7f0000000800)='./file2\x00', &(0x7f0000000840)) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) 1m2.744460212s ago: executing program 4 (id=20): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa00000000000071101000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff1000/0xc000)=nil, 0xc000, &(0x7f0000000040)='\x00\x00\xef\xfaCvu\xb5i\x80\xab=-2\xb1\xc2\xab\\\xd6\x9c\xce\x15OW\xc7\xcb\xb5\"D\xf7\x15o\n\x80/\"6U\x8d\x0fY\x8cT\xdb%*3\xde\xea.\xdex\xd9\x9e{e\x9b\xf7\xf6\x14x~\x95\xe1w\x19\x8f\x0f\xf4h\x82)\x97\xcdA\x1f\xe0\xad\a\x81n\xe0\x84\x14,9\xde9\xcd\xa2\x10\x19|\x00\x00P\xeaJ;*\x91\x91\xb7\xf8\x8b\xabR|\xbc2\x8aG\xae\xf7\xee\xbb\xa7!\xaf\xce\x9e7\x18\xf0\xa4\x80h+\x1a\xa8W\xc6M-\xd2~\xb1\x001\v\xe1\xeb\xec\xd2H\xb8\xc4\x9b\xfe\xd7\n\x10\xc3\x88\x97\xd0*y\xb1\x1c\xed\xd9\x85\x8f`?H%\xe5\xf6Ai`\x9e\x9e\x9c\x1an\x04\xf0\x03\xcc}\x7fG:\xe2\xde\xda2\x14\xech_\xae\xf2\xeb_ij/\xc4\x83\xe1\xb1\x04\xc1\x11,!\xf4F2\xb9\xec\xc3\x03%3\x88&F\xe7;\x94\xb3L\x06\x8c\xac\x8f\xd6!!\xbe\xe7$$)<\xb6\xb1~V\x87\xd1g\xd2:\xd6*;\x0f\xa5\xb28\x7f\x90J\xea\xc5\x99\x89\xaa\xa7\xc8p_d\x01\xcf~\x889\x96\xc9\x98\x1d\x91:1\xe7\xae\xe8J\x19\x9e\xe3bH\x85\xbf\x82\bi\x06\xdd\x1bo\xe1\n\x10\x9bG.\xe7\xf7T\xdc\\1@\xa9\x80g\x19\xbd\xff\xd6\x9f\xed\xcce,\x06\x82h\xdd\t\xb9`\xd0\xf8\x80\x8fe\xd8\xc1\xe7\x1d\xc0\x9b\x9b\xddE\xd3\xef89F\xb8Bn\x18\xcb|\x8c\t{\xee\x106\x93r\x97\xcb\xc3]\xf7\xee\x82\xea1m\\Lu\x9a\xab\xc5\xba\x90\xaa\x84\xedr\n\x93\xdc\xc6~\xbd\xa8K\x8b\xb0\xf4\a7\xe3\xf6l\xd7\xd3\xc7e\x00\x00\xef\xdf\x9f\xa0\xf7?\xe4-\x1c]') socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0x100000, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0xfcff, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0xfcff, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a00020102090401000001020000090401010101ffff00090501"], 0x0) (async) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a00020102090401000001020000090401010101ffff00090501"], 0x0) syz_usb_connect$midi(0x1, 0x10a, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x1, 0x1, 0xc, 0x8, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0xb2, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x1}, @ms_header={0x7, 0x24, 0x1, 0x100, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x2f}, @ms_header={0x7, 0x24, 0x1, 0xd, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x19, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xc, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x8, 0x7f}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x70, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x7f}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x37, 0x9, {0x7, 0x25, 0x1, 0x3, "fd7cd7"}}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x5, 0x2, {0x10, 0x25, 0x1, 0xc, "c181c2f158dc09f83e248ea2"}}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x5, 0x1, {0x14, 0x25, 0x1, 0x10, "9b0b98ce41d541459dd7cfd8f7adb2a5"}}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x3, 0xbb, 0x9, {0x11, 0x25, 0x1, 0xd, "c626267672aec46759775ed578"}}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0xc8, 0x7, 0x6, {0x7, 0x25, 0x1, 0x3, "59c4be"}}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0xc0, 0x1, 0xb, {0xc, 0x25, 0x1, 0x8, "a3b880e8ce07b10b"}}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x6, 0x5, 0x9, {0x7, 0x25, 0x1, 0x3, "61e17a"}}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x8b, 0x95, 0x8, {0x8, 0x25, 0x1, 0x4, "0ce61878"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x201, 0x5, 0x1, 0xff, 0xff, 0x3}, 0x45, &(0x7f0000000780)={0x5, 0xf, 0x45, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6e293dbc2610afb9ff2b5082e57f64ac"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x1, 0xff}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "25f4b5491f246dfc6b2d9a3a57e233f7"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x4f, 0x5, 0x4, 0x5}]}, 0x4, [{0x67, &(0x7f00000004c0)=@string={0x67, 0x3, "d07c63349ad7b5f493b9446c8e71805054d9129c83949e7abf011e0f2f70c924d86dc48a457e30a4aa751212336441bec89d0bacb527573a9b261bfaac4e5832e5c800f600763bec76db35a3c5ba6c00fb893edb1ecd774eaf8ecf1b859a2943db0ecbac35"}}, {0xd8, &(0x7f0000000540)=@string={0xd8, 0x3, "4c9e38662dec43190a3c7c279da68c4fb70fa29cfea02f78686262291fc5160475063cf118705ffb283cb94b999ab782514b51dea386d9f3f2ef834c4d4b7cf29f9503067f53a65ecd49c698c0ddca4ef955d4efefa7f0776df65ead294da02c8f53b5ea8e2a6373cf306b8d3f462781e463241e3aa6dd82709c419411fe8d31ee64a04bc30cc632601928259b3eeb11c983a0ff493a96ce8339bf7c731a6f1e521d7cf39e9a13c82a16d963250e9bf20dee924e8b9ef27e1b111642f08dba3ddd0d9923ef16867cb54a506ba4a61759397a6caac317"}}, {0x66, &(0x7f0000000640)=@string={0x66, 0x3, "ca4a05bc746ff78d9de80fb7f7060f9cc144801be06635e5a990d6abf28abe96f204ebc409528d349e1876a08166c8fe3abb29019fab2b40f904a2f3de3569c7326484c81619dab25b1ce76e3729749013613fdbc52dfa54dc48668609d31442498544ae"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x82c}}]}) (async) syz_usb_connect$midi(0x1, 0x10a, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x1, 0x1, 0xc, 0x8, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0xb2, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x1}, @ms_header={0x7, 0x24, 0x1, 0x100, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x2f}, @ms_header={0x7, 0x24, 0x1, 0xd, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x19, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xc, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x8, 0x7f}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x70, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x7f}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x37, 0x9, {0x7, 0x25, 0x1, 0x3, "fd7cd7"}}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x5, 0x2, {0x10, 0x25, 0x1, 0xc, "c181c2f158dc09f83e248ea2"}}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x5, 0x1, {0x14, 0x25, 0x1, 0x10, "9b0b98ce41d541459dd7cfd8f7adb2a5"}}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x3, 0xbb, 0x9, {0x11, 0x25, 0x1, 0xd, "c626267672aec46759775ed578"}}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0xc8, 0x7, 0x6, {0x7, 0x25, 0x1, 0x3, "59c4be"}}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0xc0, 0x1, 0xb, {0xc, 0x25, 0x1, 0x8, "a3b880e8ce07b10b"}}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x6, 0x5, 0x9, {0x7, 0x25, 0x1, 0x3, "61e17a"}}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x8b, 0x95, 0x8, {0x8, 0x25, 0x1, 0x4, "0ce61878"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x201, 0x5, 0x1, 0xff, 0xff, 0x3}, 0x45, &(0x7f0000000780)={0x5, 0xf, 0x45, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6e293dbc2610afb9ff2b5082e57f64ac"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x1, 0xff}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "25f4b5491f246dfc6b2d9a3a57e233f7"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x4f, 0x5, 0x4, 0x5}]}, 0x4, [{0x67, &(0x7f00000004c0)=@string={0x67, 0x3, "d07c63349ad7b5f493b9446c8e71805054d9129c83949e7abf011e0f2f70c924d86dc48a457e30a4aa751212336441bec89d0bacb527573a9b261bfaac4e5832e5c800f600763bec76db35a3c5ba6c00fb893edb1ecd774eaf8ecf1b859a2943db0ecbac35"}}, {0xd8, &(0x7f0000000540)=@string={0xd8, 0x3, "4c9e38662dec43190a3c7c279da68c4fb70fa29cfea02f78686262291fc5160475063cf118705ffb283cb94b999ab782514b51dea386d9f3f2ef834c4d4b7cf29f9503067f53a65ecd49c698c0ddca4ef955d4efefa7f0776df65ead294da02c8f53b5ea8e2a6373cf306b8d3f462781e463241e3aa6dd82709c419411fe8d31ee64a04bc30cc632601928259b3eeb11c983a0ff493a96ce8339bf7c731a6f1e521d7cf39e9a13c82a16d963250e9bf20dee924e8b9ef27e1b111642f08dba3ddd0d9923ef16867cb54a506ba4a61759397a6caac317"}}, {0x66, &(0x7f0000000640)=@string={0x66, 0x3, "ca4a05bc746ff78d9de80fb7f7060f9cc144801be06635e5a990d6abf28abe96f204ebc409528d349e1876a08166c8fe3abb29019fab2b40f904a2f3de3569c7326484c81619dab25b1ce76e3729749013613fdbc52dfa54dc48668609d31442498544ae"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x82c}}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) 1m2.740931992s ago: executing program 32 (id=20): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa00000000000071101000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff1000/0xc000)=nil, 0xc000, &(0x7f0000000040)='\x00\x00\xef\xfaCvu\xb5i\x80\xab=-2\xb1\xc2\xab\\\xd6\x9c\xce\x15OW\xc7\xcb\xb5\"D\xf7\x15o\n\x80/\"6U\x8d\x0fY\x8cT\xdb%*3\xde\xea.\xdex\xd9\x9e{e\x9b\xf7\xf6\x14x~\x95\xe1w\x19\x8f\x0f\xf4h\x82)\x97\xcdA\x1f\xe0\xad\a\x81n\xe0\x84\x14,9\xde9\xcd\xa2\x10\x19|\x00\x00P\xeaJ;*\x91\x91\xb7\xf8\x8b\xabR|\xbc2\x8aG\xae\xf7\xee\xbb\xa7!\xaf\xce\x9e7\x18\xf0\xa4\x80h+\x1a\xa8W\xc6M-\xd2~\xb1\x001\v\xe1\xeb\xec\xd2H\xb8\xc4\x9b\xfe\xd7\n\x10\xc3\x88\x97\xd0*y\xb1\x1c\xed\xd9\x85\x8f`?H%\xe5\xf6Ai`\x9e\x9e\x9c\x1an\x04\xf0\x03\xcc}\x7fG:\xe2\xde\xda2\x14\xech_\xae\xf2\xeb_ij/\xc4\x83\xe1\xb1\x04\xc1\x11,!\xf4F2\xb9\xec\xc3\x03%3\x88&F\xe7;\x94\xb3L\x06\x8c\xac\x8f\xd6!!\xbe\xe7$$)<\xb6\xb1~V\x87\xd1g\xd2:\xd6*;\x0f\xa5\xb28\x7f\x90J\xea\xc5\x99\x89\xaa\xa7\xc8p_d\x01\xcf~\x889\x96\xc9\x98\x1d\x91:1\xe7\xae\xe8J\x19\x9e\xe3bH\x85\xbf\x82\bi\x06\xdd\x1bo\xe1\n\x10\x9bG.\xe7\xf7T\xdc\\1@\xa9\x80g\x19\xbd\xff\xd6\x9f\xed\xcce,\x06\x82h\xdd\t\xb9`\xd0\xf8\x80\x8fe\xd8\xc1\xe7\x1d\xc0\x9b\x9b\xddE\xd3\xef89F\xb8Bn\x18\xcb|\x8c\t{\xee\x106\x93r\x97\xcb\xc3]\xf7\xee\x82\xea1m\\Lu\x9a\xab\xc5\xba\x90\xaa\x84\xedr\n\x93\xdc\xc6~\xbd\xa8K\x8b\xb0\xf4\a7\xe3\xf6l\xd7\xd3\xc7e\x00\x00\xef\xdf\x9f\xa0\xf7?\xe4-\x1c]') socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0x100000, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0xfcff, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0xfcff, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a00020102090401000001020000090401010101ffff00090501"], 0x0) (async) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a00020102090401000001020000090401010101ffff00090501"], 0x0) syz_usb_connect$midi(0x1, 0x10a, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x1, 0x1, 0xc, 0x8, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0xb2, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x1}, @ms_header={0x7, 0x24, 0x1, 0x100, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x2f}, @ms_header={0x7, 0x24, 0x1, 0xd, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x19, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xc, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x8, 0x7f}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x70, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x7f}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x37, 0x9, {0x7, 0x25, 0x1, 0x3, "fd7cd7"}}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x5, 0x2, {0x10, 0x25, 0x1, 0xc, "c181c2f158dc09f83e248ea2"}}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x5, 0x1, {0x14, 0x25, 0x1, 0x10, "9b0b98ce41d541459dd7cfd8f7adb2a5"}}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x3, 0xbb, 0x9, {0x11, 0x25, 0x1, 0xd, "c626267672aec46759775ed578"}}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0xc8, 0x7, 0x6, {0x7, 0x25, 0x1, 0x3, "59c4be"}}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0xc0, 0x1, 0xb, {0xc, 0x25, 0x1, 0x8, "a3b880e8ce07b10b"}}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x6, 0x5, 0x9, {0x7, 0x25, 0x1, 0x3, "61e17a"}}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x8b, 0x95, 0x8, {0x8, 0x25, 0x1, 0x4, "0ce61878"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x201, 0x5, 0x1, 0xff, 0xff, 0x3}, 0x45, &(0x7f0000000780)={0x5, 0xf, 0x45, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6e293dbc2610afb9ff2b5082e57f64ac"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x1, 0xff}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "25f4b5491f246dfc6b2d9a3a57e233f7"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x4f, 0x5, 0x4, 0x5}]}, 0x4, [{0x67, &(0x7f00000004c0)=@string={0x67, 0x3, "d07c63349ad7b5f493b9446c8e71805054d9129c83949e7abf011e0f2f70c924d86dc48a457e30a4aa751212336441bec89d0bacb527573a9b261bfaac4e5832e5c800f600763bec76db35a3c5ba6c00fb893edb1ecd774eaf8ecf1b859a2943db0ecbac35"}}, {0xd8, &(0x7f0000000540)=@string={0xd8, 0x3, "4c9e38662dec43190a3c7c279da68c4fb70fa29cfea02f78686262291fc5160475063cf118705ffb283cb94b999ab782514b51dea386d9f3f2ef834c4d4b7cf29f9503067f53a65ecd49c698c0ddca4ef955d4efefa7f0776df65ead294da02c8f53b5ea8e2a6373cf306b8d3f462781e463241e3aa6dd82709c419411fe8d31ee64a04bc30cc632601928259b3eeb11c983a0ff493a96ce8339bf7c731a6f1e521d7cf39e9a13c82a16d963250e9bf20dee924e8b9ef27e1b111642f08dba3ddd0d9923ef16867cb54a506ba4a61759397a6caac317"}}, {0x66, &(0x7f0000000640)=@string={0x66, 0x3, "ca4a05bc746ff78d9de80fb7f7060f9cc144801be06635e5a990d6abf28abe96f204ebc409528d349e1876a08166c8fe3abb29019fab2b40f904a2f3de3569c7326484c81619dab25b1ce76e3729749013613fdbc52dfa54dc48668609d31442498544ae"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x82c}}]}) (async) syz_usb_connect$midi(0x1, 0x10a, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x1, 0x1, 0xc, 0x8, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0xb2, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x1}, @ms_header={0x7, 0x24, 0x1, 0x100, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x2f}, @ms_header={0x7, 0x24, 0x1, 0xd, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x19, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xc, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x8, 0x7f}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x70, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x7f}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x37, 0x9, {0x7, 0x25, 0x1, 0x3, "fd7cd7"}}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x5, 0x2, {0x10, 0x25, 0x1, 0xc, "c181c2f158dc09f83e248ea2"}}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x5, 0x1, {0x14, 0x25, 0x1, 0x10, "9b0b98ce41d541459dd7cfd8f7adb2a5"}}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x3, 0xbb, 0x9, {0x11, 0x25, 0x1, 0xd, "c626267672aec46759775ed578"}}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0xc8, 0x7, 0x6, {0x7, 0x25, 0x1, 0x3, "59c4be"}}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0xc0, 0x1, 0xb, {0xc, 0x25, 0x1, 0x8, "a3b880e8ce07b10b"}}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x6, 0x5, 0x9, {0x7, 0x25, 0x1, 0x3, "61e17a"}}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x8b, 0x95, 0x8, {0x8, 0x25, 0x1, 0x4, "0ce61878"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x201, 0x5, 0x1, 0xff, 0xff, 0x3}, 0x45, &(0x7f0000000780)={0x5, 0xf, 0x45, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6e293dbc2610afb9ff2b5082e57f64ac"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x1, 0xff}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "25f4b5491f246dfc6b2d9a3a57e233f7"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x4f, 0x5, 0x4, 0x5}]}, 0x4, [{0x67, &(0x7f00000004c0)=@string={0x67, 0x3, "d07c63349ad7b5f493b9446c8e71805054d9129c83949e7abf011e0f2f70c924d86dc48a457e30a4aa751212336441bec89d0bacb527573a9b261bfaac4e5832e5c800f600763bec76db35a3c5ba6c00fb893edb1ecd774eaf8ecf1b859a2943db0ecbac35"}}, {0xd8, &(0x7f0000000540)=@string={0xd8, 0x3, "4c9e38662dec43190a3c7c279da68c4fb70fa29cfea02f78686262291fc5160475063cf118705ffb283cb94b999ab782514b51dea386d9f3f2ef834c4d4b7cf29f9503067f53a65ecd49c698c0ddca4ef955d4efefa7f0776df65ead294da02c8f53b5ea8e2a6373cf306b8d3f462781e463241e3aa6dd82709c419411fe8d31ee64a04bc30cc632601928259b3eeb11c983a0ff493a96ce8339bf7c731a6f1e521d7cf39e9a13c82a16d963250e9bf20dee924e8b9ef27e1b111642f08dba3ddd0d9923ef16867cb54a506ba4a61759397a6caac317"}}, {0x66, &(0x7f0000000640)=@string={0x66, 0x3, "ca4a05bc746ff78d9de80fb7f7060f9cc144801be06635e5a990d6abf28abe96f204ebc409528d349e1876a08166c8fe3abb29019fab2b40f904a2f3de3569c7326484c81619dab25b1ce76e3729749013613fdbc52dfa54dc48668609d31442498544ae"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x82c}}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) 37.60218329s ago: executing program 1 (id=222): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xffffffffffffefff}) mlock2(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe(&(0x7f0000000200)) 37.60061972s ago: executing program 1 (id=223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x60050, 0xffffffffffffffff, 0x14000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.59327019s ago: executing program 1 (id=224): pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x9, 0x5, 0x10, 0x5}, {0x1, 0x8000000000000000, 0x3, 0x2}, {0x8000000000000001, 0x5, 0xfffffffffffffffb, 0x100000001}, {0x3b, 0x5e, 0xef, 0x3}], 0x4, 0x20, 0x40, 0x7fff}) 37.59273669s ago: executing program 1 (id=225): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x5, 0x2, 0x8, 0x6, 0x6, 0x20000001000, 0xf64, 0xfffffffd}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000080)) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./bus\x00', 0x200) 37.592479201s ago: executing program 1 (id=226): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="2e9b3d0007e03dd651970100c575963f8864", 0x12}, {&(0x7f0000000480)="e9efffff000000da2e7bbf0b5d5e3234380412ebef5cac3863d8fd1c189570835b5fa5f010bdbc3f8c143c30383c67cdda69b868199c65165de6713f9249baae10a5ce5be57c7df547d044597dccfb2777d0a98fd38b33facc7010c5f3c3c54780f306f42553b420ea379c7842d40400df15bb104c68c52cb55cd635d2edfc0cbc9747e512bbf96f9dd6467e75c07e41fdc4dbf8f2f2d8e0491206842379e812e9e5f6984bb8335f4eab37c356d5cdfc854b2463129471253db86b2ec535aa54a841ae42", 0xc4}], 0x2) mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@can_delroute={0x38, 0x19, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x6, 0x1, 0x0, 0x0, "f11da8b017b6c8e1"}}}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) lstat(&(0x7f0000001680)='./file0/file0\x00', &(0x7f00000016c0)) 37.589699481s ago: executing program 1 (id=227): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120120007516b7108c0d0e008f8e0018030109021b00010000000d0904080001030000000905", @ANYBLOB="8fcf"], 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120120007516b7108c0d0e008f8e0018030109021b00010000000d0904080001030000000905", @ANYBLOB="8fcf"], 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x48}, {0x20, 0x1, 0x0, 0x9}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)="c9b2", 0x2}], 0x1}, 0xa094) 37.584946821s ago: executing program 33 (id=227): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120120007516b7108c0d0e008f8e0018030109021b00010000000d0904080001030000000905", @ANYBLOB="8fcf"], 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120120007516b7108c0d0e008f8e0018030109021b00010000000d0904080001030000000905", @ANYBLOB="8fcf"], 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x48}, {0x20, 0x1, 0x0, 0x9}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)="c9b2", 0x2}], 0x1}, 0xa094) 29.348845139s ago: executing program 2 (id=299): syz_usb_connect(0x3, 0x2b, &(0x7f0000001380)={{0x12, 0x1, 0x250, 0xba, 0x9d, 0x35, 0x20, 0x9fb, 0x6025, 0xb004, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x6, 0xd0, 0x4, "", [{{0x9, 0x4, 0x2, 0x0, 0x0, 0x39, 0x32, 0x15, 0x9, [@generic={0x7, 0x5, "71951c0bb7"}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0xfffffffffffffffe, 0x0, 0x0}) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x900, 0x181) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000040)={0x9, 0x4, 0xfff}) 27.070450011s ago: executing program 2 (id=329): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x202, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$sock_proto_private(r2, 0x89e0, 0x0) sendfile(r1, r1, 0x0, 0xef81) 27.001410383s ago: executing program 2 (id=330): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000080)='\x13\\-{://%*\x00', 0x284080, &(0x7f0000000100)={@align=0x8, {0x10, 0xdb1, 0x8001, 0x3}}, 0xfffffff7, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_clone(0xc0126080, 0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) 26.792078419s ago: executing program 2 (id=333): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[], 0x3, 0x246, &(0x7f0000000440)="$eJzs2s9rXFUUB/DzYmpqSjoRf9GCeNGFunkkWbtokBbEgKKNUAXpq3mjwzxnwrwhMCJ2Vrr1T3AtLt0J0qWbbPwLXLjLJssuxCfJtLaj00UxaaJ+Pps5cOc7cy5z53IWb++1rz/ttuu8XQxjLsti7lKM43YWyzEXd43j1Zev/fT8u9fef3N9Y+PyOyldWb+6upZSOv/Cjx98/t2Lt4bn3vv+/A8Lsbv84d7+2q+7z+5e2Pv96iedOnXq1OsPU5Fu9PvD4kZVpq1O3c1Tersqi7pMnV5dDqbW21V/e3uUit7W0uL2oKzrVPRGqVuO0rCfhoNRKj4uOr2U53laWgz+ic1vbzdN7DdnrkfTNE98E+duxdIv0YrsyZQ9dSl75nr23Di7sN80rZNulWPh9/9/u+9SPxtRfbWzubM5eZ2sr7ejE1WUsRKt+C0Ojsn83WzTNM2VNzYur6RDy/FldfNO/ubO5mPT+dVoxfIkM3EvvzrJp+n8QixGnIm4k1+LVjw9O782M382Xnnpvu/PoxU/fxT9qGLrsPd7+S9WU3r9rY2/5C8evg8A4L8mT3+aOb/l+YPWJ/kZ8+Hf5rOVmfPZfFycP9m9E1GPPusWVVUOjrbIsojj+eSHLg52eQraUBxlsRAPlcoixgfn4FQ0//jx/vWOqjjRa4lHZPqeBAAAAAAAAAAA4N/iUT2BCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CB/BAAA//+jZsN9") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') pread64(r0, &(0x7f0000000040)=""/25, 0x19, 0x40000000000000) getpeername$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000240)=0x10) chdir(&(0x7f0000000080)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000000201040000000000000000020000002400028014000180080001000a01010008000200e00000010c0002800500010000000000300003802c00018014000300fc02000000000000000000000000000111000400fe880000000000000000000000000001040001"], 0x6c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x44041) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 26.694638472s ago: executing program 2 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x40000400) setgid(0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x2004c0d0) 26.596518255s ago: executing program 2 (id=335): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b118600000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (rerun: 64) socket$inet_icmp(0x2, 0x2, 0x1) (async) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) (async) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fcntl$getflags(r2, 0x40a) (async) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) r3 = getpgrp(0xffffffffffffffff) process_vm_readv(r3, &(0x7f0000001100)=[{&(0x7f00000007c0)=""/203, 0xcb}, {&(0x7f00000008c0)=""/61, 0x3d}, {&(0x7f0000000900)=""/212, 0xd4}, {&(0x7f0000000a00)=""/156, 0x9c}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000001000)=""/217, 0xd9}], 0x6, &(0x7f00000012c0)=[{&(0x7f0000001180)=""/167, 0xa7}, {&(0x7f0000001240)=""/110, 0x6e}], 0x2, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r3) (async, rerun: 64) recvmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/140, 0x8c}], 0x1}, 0x200}], 0x1, 0x1000400101fe, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000480)={0x40, 0x15, 0x26, "f1b492d4abb320846536aea8ffe7b37e1d5bf336613f07df5bbb5cec4677f1bb75f2dd54bd68"}, 0x0, 0x0, &(0x7f0000000640)={0xc0, 0xa1, 0x4, 0x6}, 0x0, 0x0}) (async, rerun: 32) keyctl$negate(0xd, 0x0, 0x0, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000006c0)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0x803}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xe4}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000102030000000000000000000a000009440001800c000280050021006100000006000340000200002c00018014000300fe800000000000000000000000000036140004"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x14) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, 0x0, 0x28000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 26.595989015s ago: executing program 34 (id=335): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b118600000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (rerun: 64) socket$inet_icmp(0x2, 0x2, 0x1) (async) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) (async) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fcntl$getflags(r2, 0x40a) (async) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) r3 = getpgrp(0xffffffffffffffff) process_vm_readv(r3, &(0x7f0000001100)=[{&(0x7f00000007c0)=""/203, 0xcb}, {&(0x7f00000008c0)=""/61, 0x3d}, {&(0x7f0000000900)=""/212, 0xd4}, {&(0x7f0000000a00)=""/156, 0x9c}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000001000)=""/217, 0xd9}], 0x6, &(0x7f00000012c0)=[{&(0x7f0000001180)=""/167, 0xa7}, {&(0x7f0000001240)=""/110, 0x6e}], 0x2, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r3) (async, rerun: 64) recvmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/140, 0x8c}], 0x1}, 0x200}], 0x1, 0x1000400101fe, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000480)={0x40, 0x15, 0x26, "f1b492d4abb320846536aea8ffe7b37e1d5bf336613f07df5bbb5cec4677f1bb75f2dd54bd68"}, 0x0, 0x0, &(0x7f0000000640)={0xc0, 0xa1, 0x4, 0x6}, 0x0, 0x0}) (async, rerun: 32) keyctl$negate(0xd, 0x0, 0x0, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000006c0)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0x803}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M7O89903b/fNe7sNoG+NZf8kEesj4mJEjEZEpfmEsfzh2pWztX+unK0lUa+/9XeSPS2uXjlbK/6LxpZZl++o14v8mhblnn83ojo7O3OyyE/MHftg4tTpM88eOVY9PHN45vjUgQN792wf2j+1ryNxZnFd3frxiW1bXn3nwuu1gxfe+/X7rL7ri+NlHJ00lr+6LT3R6cK6bMOCdFLpYkVYkazdBovtYozGQIxcPzYar3zW1coBt1ul1edz4Vwd+B/LBupAPyo/6LP733K7Q+OOnnD5xXzCI4v7WrHlRyqRFucMNt3fdtJwRBw89+832Ra3aR4CAGChH7PxzzOtxn9pPLDgvHuKNZSNEXFvRGyKiPsiYnNE3B/ROPfBiHhoheU3r5DcOP5JLy3K1gdWWMLSsvHf88Xa1uLxXzn6i40DRW5DI/7B5NCR2ZndxWuyKwbXZPnJRU9Z7KeX//iqed+XxTT72ILxX7Zl5S+OML3UPEE3XZ2rrj7y3OVPI7ZWWsWfXF8HTCJiS0RsvcUyjjz13bZ2x1rFX46Fb6oD60z1byOezNv/XDTFX0rark9OPrd/at/EcMzO7J4or4ob/fb7+Tfblb+q+Dsga/+1La//PP7sHjEZjjh1+szRxnrtqVso5M/Pa0mbQ5tvGv+N139tZ8RQ8nYjPVSeVTwOJa9lDyPl/o+qc3Mnp+afW+Ybj5N5/Lt2zMdfjfn+vym/PWu8Eg9HRHYRb4+IRyLi0aLtHouIxyNixxLh//LSzvfbHWvf/kvMyndQFv/0Eu2fveVlqfn2X3li4OjPP7Qrv76s9t/bSO0q9izn/W+5FVzNawcAAAB3i7TxHfgkHb+eTtPx8fw7/JtjbVqJiKcPnfjw+HT+XfmNMZiWM12jC+ZDJ4u54TI/1ZTfU8wbfz0w0siP107MTnc7eOhz69r0/8xfnV1qAXqR32tB/9L/oX/p/9C/9H/oXy90uwJAdwy13v3Jna4H0BUrH/8P35Z6AHee+3/oX/o/9C/9H/pS29/Gp6v6yf/dmqj0RjVaJkZ6oxplItKeqEbnEm98kXeJXqlPmags+49Z3GJiTctD3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA///NIdoS") (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xe4}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000102030000000000000000000a000009440001800c000280050021006100000006000340000200002c00018014000300fe800000000000000000000000000036140004"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x14) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, 0x0, 0x28000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 26.028461453s ago: executing program 7 (id=345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)={0x6, 0x40}) (async, rerun: 32) syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="c927529424b49b6b379c7d4bd6e4c7b493c43bede134ffffffffffff8100c6c5c0aaa3174a00000d0200008037010700fa680fbe1c6e6eed85372f148c781f0bb7e103d069fa92e8d82cc817faca31cc37f5d1803683c3e5852ac8b3ac7effe1"], 0x0) (async, rerun: 32) syz_emit_ethernet(0x166, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x130, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x7, [{0x18, 0x18, "00540200a600828dadce42ce3d02d319e0cabb0171499f7642598cf1a1d40ca51300988c260ed2c4af88bdac1fc3925f5acb8e09cece04229969a0aee0537e1cc71b3009ab18767945d27594b37cd8abb99636a90bca4c54c3ce345b74a5344d2cdda99627bb20ea64b77b50c6dd7ac0ce2c39bcfef13daaef4db59a4483f2894602231daf4f31b82654278904b95919abbb34b324bdfc5ea17efe35444c3cc8f5cb729268ea2d5032fee7123364eac506f32a93621cf58e9f47d53114fb"}, {0x4, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x3, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) 25.875208278s ago: executing program 7 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r7 = eventfd(0xf1) io_submit(r6, 0x2, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xf, r5, 0x0, 0x0, 0x3, 0x0, 0x3, r7}]) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x1fb, 0x1, 0xc000, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) syz_mount_image$fuse(0x0, &(0x7f0000012340)='./bus\x00', 0x13c0800, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000300), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r10, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000000)={0x1}) 24.85663871s ago: executing program 7 (id=359): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_usb_disconnect(0xffffffffffffffff) pidfd_send_signal(r1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') readv(r3, &(0x7f0000000700)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) listen(r2, 0x0) (async) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000000)=0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r5, 0x80000003) (async) listen(r5, 0x80000003) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "650400", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x4}}}}}}}, 0x0) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000001540)='./file0\x00', 0x1000000, &(0x7f0000000680)=ANY=[@ANYBLOB='iocharset=cp1251,utf8,allow_utimec=00000000000000000000016,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x14ec, &(0x7f0000003fc0)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000001580)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) chdir(&(0x7f0000001580)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000008c0)={'#! ', './file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x80a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) fcntl$getownex(r6, 0x10, &(0x7f0000000000)) (async) fcntl$getownex(r6, 0x10, &(0x7f0000000000)) 24.001654697s ago: executing program 7 (id=371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000019140)='net/igmp\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c2a) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000040)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000019100)={@loopback, 0x2, 0x0, 0x2, 0x8, 0xff80, 0x7}, 0x7f) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f000001bc80)=[{{&(0x7f0000019180)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000193c0)=[{&(0x7f0000019700)="cc6a78f18a5d0313bae4d305a1abc69cda75d6d5d0b5d542f296936cf5e49737c73903e8cc894a1ee8262f683d9a77da735cf40a0ad5f40e09bc1739ecf8dc06856e42c08bf5896bea3cdb194b47c7987fc71830326c5f3412ce3120c7aa34426615ef69e846a77095696116a13470d19f4dd7723827436a8125c59d22a764f112c31d731029999fd62c", 0x4a}, {&(0x7f0000019280)="38b56e59ac0fb999c79c6c4dd4207f41a2a39fd3c25f0627fb02655cb4634d120ce6ea35b9a657c8fe7d05a93aadac279ab20c970142e72566da56e37f3d236c34ffb54b80362760b5ec2256a1a5757d02d15463f4f984d6d6bd267fa8e669fc4c3707627189e17e3c5a31683aaee199f201cc9633ba835a71a8c8c5d04b0d1f487ae4f8d3f071e91239f5617017e6d8b1bae58d8dfd04c16cd5e9dca2bc6ba46091e5e7dee90137db918abbb63f4aea734880427172a126293f0e2fca6f95e99ef29923b34828e52e6e654d8fc50435a6c85885dbaa329453020222a72af7", 0xdf}, {&(0x7f0000019380)="c7ad77c5d6e80ea223a7f75f0229e324e58787d1408ba56d456908bb91e9ae4b16b4545ff9e21535", 0x4}], 0x3, 0x0, 0x3}}, {{&(0x7f0000019400)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f00000196c0)=[{&(0x7f0000019480)="1e33f28f63fea82790f8a07ba1157aaa68fa864a859a50b5ca8ee97289248e028c13b2ead45b9a659253809164ff7cc370cb032a6cff406feaee55e0d82d30d3811b066fb331f87525e306f718ad9ada0cbb48c4b3a8", 0x56}, {&(0x7f0000019500)='~', 0x1}, {&(0x7f0000019540)="b8ba1832fc8724bd99453f4e4dcb5453d71992297cd49fcbf2dd460b89591ee7c6703f2f724c2eb1e53ad4947239de22fd172f2e61dadff405b93458d2f8a9bb8eb318a92e241d651296017742d8a399a3f101b97f4d88ffed0db619274e0695678bf1347241855262", 0x69}, {&(0x7f00000195c0)="bc1734b173d6376a5ec9132535db065e76b550edda0b4725e3d6a04c333d161ee07ca990f917c4e145ea56e629f0a42fc3f2ff4e7514919693d3aa3620547d7210abc7e2418ce35a07007cd982e6ce56f9363bf27c89d79ff16a3b3b6c49aaf1d599be67972d4b19c600aac6dbe008013132b946d25829d32a65cbc7d84c15906a2ff8847701f33288430171188dadd873f513de03e3548163844641b8515250aea5b564764fbc5a1922eefe137cc57d71b9005408229ac850dc898bed497fec81065cef3c296438b44822ebd864e3bbfe6f86152a5f", 0xd6}], 0x10000016, &(0x7f000001bd00)=ANY=[@ANYRESDEC=r0], 0x2548}}], 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) close(r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000280)={0x2}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r6, 0x1f, 0x0, @void}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000080)={0x0, 0xa3}, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$eJzs3c9vI1cdAPDvOHHi/OgmLT0AgnZpCwtarZN426jqAcoRoUqIHkHahsQbRbHjKHZKE/awPXNFohIneuQP4NwTB25cENy4LAckfkSgDRIHoxlPst6svTGbTRziz0cazXvzZv19L868t/NizwtgZF2PiPsRMRERH0TEXH48ybd4t7Ol5z08uLd6eHBvNYl2+/2/J1l5eiy6/k1qJn/NUkR8/9OIHyVPxm3u7W+u1GrVnTy/0KpvLzT39m9t1FfWq+vVrUpleWl58e3bb1WeW1tfrU/kqS8/+N39b/wkrdZsfqS7Hf+zpNPePkURUTyOkxqPiO8+c7DLZSxvz8SwK8IzKUTESxHxWnb9z8VY9m4CAFdZuz0X7bnuPABw1RWyObCkUM7nAmajUCiXO3N4L8d0odZotm7ebexurXXmyuajWLi7Uasu5nOF81FM0vxSln6Ur5zI346IFyPiZ5NTWb682qitDfM/PgAwwmZOjP//muyM/wDAFVcadgUAgAvXZ/zv95lWAOAKcP8PAKPH+A8Ao6eUPcNhatjVAAAukPt/ABg9xn8AGCnfe++9dGsf5s+/Xvtwb3ez8eGttWpzs1zfXS2vNna2y+uNxnr2zJ76aa9XazS2l96M3Y/mv7ndbC009/bv1Bu7W6072XO971SL2Vm+WQAAw/Tiq5/9MUlH5Hemsi261nIoDrVmwHkrDLsCwNCM9UkDV5/VvmB0neEe3/QAXBE9luh9TCl6fEGo3W63z69KwDm78QXz/zCquub/fQoYRow5fxhd5v9hdLXbyaBr/segJwIAl5s5fqDP3/9fyve/yv848MO1k2d8cp61AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvtaP3fcr4W+GwUCuVyxAsRMR/F5O5GrboYEdci4g+Txck0vzTkOgMAZ1X4S5Kv/3Vj7o3Zx4pemTlOTkTEj3/x/s8/Wmm1dn4fMZH8Y/LoeOuT/Hjl4msPAJzuaJzO9l038g8P7q0ebRdZn79+OyJKnfiHBxNxeBx/PMazfSmKETH9zyTPdyRdcxdncf/jiPh8r/YnMZvNgXRWPj0ZP439woXGLzwWv5CVdfbpz+Jzz6EuMGo+S/ufd3tdf4W4nu17X/+lrIc6u7z/S19q9TDrAx/FP+r/xvr0f9cHjfHmb77TSU09WfZxxBfHI45iH3b1P0fxkz7x3xgw/p++9Mpr/crav4y4Eb3jd8daaNW3F5p7+7c26ivr1fXqVqWyvLS8+PbttyoL2Rz1Qv/R4G/v3LzWryxt/3Sf+KVT2v/VAdv/6X8++MFXnhL/66/3il+Il58SPx0TvzZg/JXpX5f6laXx1/q0/7T3/+aA8R/8ef+JZcMBgOFp7u1vrtRq1Z2nJa4dRpx2zv9lIgY7+bf5D+tS1HmkE+m7cAmq0TPxra4jM3GOsSb6XIw/fb3zazoZ0f2L3W4/U6x+PcbzmHUDLoPjiz4i/j3sygAAAAAAAAAAAAAAAD1dxLejht1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArq7/BgAA//8BoMnq") accept(r1, &(0x7f00000002c0)=@sco={0x1f, @fixed}, &(0x7f0000000340)=0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x9df0b81c6eea8853, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f0000019080)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x2}], 0x2) chdir(&(0x7f0000000140)='./file0\x00') 22.686096808s ago: executing program 7 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x208, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000580)) mmap(&(0x7f000044f000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0xc749e000) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x54f9, &(0x7f000000ab40)="$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") r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write(r3, &(0x7f0000000340)="2d8fdc613a9da50aac40737425a0dc50b87d92df630a08e510699130f4b1c77eb32762c23c3a7aca0564b41a39f71189b0ece10943c2429ebc13b28af284acfece55a044259dcd9c1b107fe4cbba66c8081da9a0d64de9", 0x57) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r1], 0x44}}, 0x4040010) 18.909678196s ago: executing program 7 (id=414): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000400)={[{0x2d, 'hugetlb'}, {0x2b, 'net'}]}, 0xe) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000000000c100000200000000000000000000000000000000000000000000ffffffffffff4e240000000000000a00002029000000e902f8e7380a10315d284bc25afcbcc29466b7e1b7b467993c24e89cfaaf22239d7dc53ea41e7b301d155643428bb01f95faa903185511e9a806f9ba4aaa5e5ffb2bba86abfbf4afcaec30d153d01e0bc5a23d0b4a2c9452c0f0cfba8d0e9ff708f1b79ccba74d66334cd2ab83b02beb4e4c3d5060c8483a8dc4a69d1086", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000200000000"], 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}, {}, 0x213}}, 0xb8}}, 0x0) 18.896078367s ago: executing program 35 (id=414): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000400)={[{0x2d, 'hugetlb'}, {0x2b, 'net'}]}, 0xe) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000000000c100000200000000000000000000000000000000000000000000ffffffffffff4e240000000000000a00002029000000e902f8e7380a10315d284bc25afcbcc29466b7e1b7b467993c24e89cfaaf22239d7dc53ea41e7b301d155643428bb01f95faa903185511e9a806f9ba4aaa5e5ffb2bba86abfbf4afcaec30d153d01e0bc5a23d0b4a2c9452c0f0cfba8d0e9ff708f1b79ccba74d66334cd2ab83b02beb4e4c3d5060c8483a8dc4a69d1086", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000200000000"], 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}, {}, 0x213}}, 0xb8}}, 0x0) 14.602215561s ago: executing program 6 (id=467): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x1c6) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x80, 0xfd}]}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x7, 0x0, 0x1, 0x1}, {0xa17, 0x8, 0x2, 0x8001}]}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 13.483686917s ago: executing program 6 (id=471): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_cancel(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 13.483355077s ago: executing program 6 (id=472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, r0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000080)={0x8, 0x7, 0xec9, 0x2c53, 0x401, 0x4}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xfc}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0xf, 0x75, 0x7fff, 0x3, 0x800}}, {0x4}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x8}, @RTA_EXPIRES={0x8, 0x17, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4000050) 13.472733027s ago: executing program 6 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000001a000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0xfff}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x144) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x40106726, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000001a000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0xfff}}]}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x144) (async) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x40106726, 0x0) (async) 13.470838917s ago: executing program 6 (id=474): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_complete(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setgid(0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r5, 0x8, 0x12}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/timers\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x6, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x9, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @generic={0xc, 0xf, 0x1, 0x8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa, 0x0, 0xb, 0x1, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x3811}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb}], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xa3, &(0x7f0000000340)=""/163, 0x40f00, 0x8, '\x00', r5, @cgroup_skb=0x1, r6, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x5, 0x9, 0x6}, 0x10, r7, r2, 0x5, &(0x7f0000000540)=[r8, r0, r0], &(0x7f0000000580)=[{0x4, 0x1, 0x1, 0x9}, {0x0, 0x2, 0x7, 0x4}, {0x3, 0x3, 0x2, 0x3}, {0x0, 0x2, 0xe, 0x4}, {0x3, 0x4, 0xa, 0x4}]}, 0x94) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x5, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000810}, 0x20040004) 13.469317817s ago: executing program 6 (id=475): unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x6, 0x9, 0x80, 0x10000, 0xffffffff, 0x91b1}, [@TCA_NETEM_REORDER={0x4, 0x3, {0x40, 0x7ff}}, @TCA_NETEM_DELAY_DIST={0x28, 0x2, "841d5523124c63c028f1e1d512a099e85ad6f895f8ad3cb6d80af243bfa38bea18b0c553"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1ff}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.469071837s ago: executing program 36 (id=475): unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x6, 0x9, 0x80, 0x10000, 0xffffffff, 0x91b1}, [@TCA_NETEM_REORDER={0x4, 0x3, {0x40, 0x7ff}}, @TCA_NETEM_DELAY_DIST={0x28, 0x2, "841d5523124c63c028f1e1d512a099e85ad6f895f8ad3cb6d80af243bfa38bea18b0c553"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1ff}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.061338925s ago: executing program 0 (id=511): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0), 0x3, 0x578, &(0x7f0000000380)="$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") r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000095c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}], 0x1}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000340)={0x2b, 0x20001f, 0x0, 0x1f, 0x8, 0xa8, 0x5, 0x2}) r4 = syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x25, 0x55ae, &(0x7f0000006a80)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r9) open(&(0x7f00000002c0)='./file0\x00', 0x4000, 0xd1) (async) bind$packet(r7, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x6, 0x6, @remote}, 0x14) r10 = openat2(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x10000, 0x20, 0x4}, 0x18) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f0000001bc0)=[{&(0x7f00000000c0)="dc", 0x1}], 0x1, 0x3) (async) writev(r12, &(0x7f0000000700)=[{&(0x7f0000000400)="1e", 0x1}], 0x1) (async) listen(r11, 0x0) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r13, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r11}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r13, &(0x7f0000000480)="f64507f6ec", 0x0}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000007000000000000007f00000018170000", @ANYRES32=r5, @ANYBLOB="006a040000000000950000ffeb40000007903c0bdd1f284ca95a2d8c88c01f378a42d442c09a439e5a86afd11607c7c9f1f8db2544863c542ed12bf6b489ed0b470f96ce39f0552f81418708f95bef3fa8c50c89fd4c1d6936a0934083397802c1fcc5b006bddf17b8acc66842a4bfb462633b101f622768d96e721ed767fe944f150845ac91658d69dd5087e4f1144316282da1f44deed4d00a61984678e28d5b26a7e6d64753c0fe00afc0822b28a268849bb55f9fde1adf"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, 0x0, r10, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xb, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r13], &(0x7f0000000280)=[{0x3, 0x3, 0xa, 0xa}], 0x10, 0x4}, 0x94) 8.500717903s ago: executing program 0 (id=516): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00e0ff6800010002000000fcf19441a493b123ceebeb47bc84acc3dabeff7f000000000000ff00000000010000000800000000187e7965ec7f1d742535aa9e0cbf0000000000005c2dfd3302d3ca04000000000000000f146f3d273ba59eab34c2765b182833e39709ea0a6d3d9a5d8814a71142c908c79627d6b3922e37f49494ef9d1feb19caf77b07aab49423621bd13430b21bc94ba247a1f8c9e8f394dc632f69cc7c4aa974662280267890a7"], 0x2c}}, 0x4000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x5, 0x0, 0x2, 0x5}, {0x10, 0x10, 0x4, 0x10}, {0xfff7, 0x0, 0x9, 0x9}]}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x5, 0x0, 0x2, 0x5}, {0x10, 0x10, 0x4, 0x10}, {0xfff7, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@noacl}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") socket$inet6(0xa, 0x3, 0x7) (async) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x2000000000903, 0x3}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x2000000000903, 0x3}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) open(0x0, 0x105000, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r6, 0x0) (async) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r6, 0x0) syz_clone3(&(0x7f0000000780)={0x20000000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) (async) syz_clone3(&(0x7f0000000780)={0x20000000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x6}, &(0x7f0000000140)=0x20) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x1, 0x0, 0x9, 0x7, r4}) (async) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x1, 0x0, 0x9, 0x7, r4}) syz_read_part_table(0x5cf, &(0x7f0000000b80)="$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") (async) syz_read_part_table(0x5cf, &(0x7f0000000b80)="$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") 7.979564899s ago: executing program 0 (id=524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4d0, 0x0, 0x8001}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}}, 0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003", @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_usb_connect$uac1(0x5, 0x98, &(0x7f0000000080)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x8, 0x0, 0x21, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x30}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0x8000, 0x2e}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x40}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x3, 0x3, "bc7a2d"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x9, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x303, 0x2, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x64, 0x3, {0x7, 0x25, 0x1, 0x8, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xde, 0x67, 0x7, {0x7, 0x25, 0x1, 0x0, 0x0, 0xf}}}}}}}}]}}, 0x0) 6.160649286s ago: executing program 0 (id=543): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_012={0x2, 0x1, 0x0, "0ce7"}, @local=@item_4={0x3, 0x2, 0x1, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_4={0x3, 0x1, 0x1, "cc5b63b7"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000500)={0x2, 0x200, 0x1, 0x1, 0x7, 0x80000001}) 4.040691303s ago: executing program 0 (id=563): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a40)={0x24, &(0x7f00000008c0)={0x20, 0xf, 0x8e, {0x8e, 0x22, "cf4d49ae8838505713623d88ca135909a0de9062671238bfc3a1a2cd196bd0b4c0640b53d1320d70e2611005b20b40fa0277e2ac54ad39ac8fe9a25701d481f60265a5335990542cfbdee7af1c3db76d4bf54ffbee72d63ce60a70dfccf6f38f6119c1dad858e474282f51e763b4d203b753c65bb3f052acaea81cfb524ab3f8c84f487e17ca1ada0249b471"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xcce4}}, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0xf8fe7b962e6e1c97, "d1ef3508"}, @main=@item_4={0x3, 0x0, 0xc, "43f787e9"}]}}, &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x6e4}}}}, &(0x7f0000000d00)={0x2c, &(0x7f0000000a80)={0x40, 0xb, 0xe5, "4898f16b15b1b7e2de38aa1ea471ce24ed8de543c14b29e40be0f29b3196bd735604e1c46637748c580dd018305a671d6c77c7fbd1dfb81640b1c243bcd5a3c4bb77dd8b1fff648cc6d370073c849ad26b0233b9c27ebc8eaaa791288226add4eba9ace5aef52073c2591020c8bd3fe285e615897bc64deb8b0a58a01e0677b9de8873826dc89ae41935280e156f4d75bf9d0bb1374463685c117d8d0a9dc898e7ff0f9e0dac3f73c171fe4f1fdf3c5cbc2dacb58b878bad2cfcea9f14b8f655ee16e2d7546f3e787784b21884de435e5175c82ca0b5692ea17933c4fc4525c83878a331af"}, &(0x7f0000000b80)={0x0, 0xa, 0xffffffffffffffe0, 0x2}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000c00)={0x20, 0x1, 0x88, "e5cf30f25b4dbad9f19ad861313cc056d8404e54f00778b3c1cd17d7bea8598a9a4ab16ab033dd233bc29dd98cf9529202ad5e81076e9ba31f326854d4e31b6fff34ed75d240a87739840d786d03cea72981d96dd1de36b59175b65e6915f67ed2ae8b855c98fdea3083d46c834033e360e47157435b872691db77afc1a874b7f366d199dfd29f96"}, &(0x7f0000000cc0)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x20, 0x2, 0x6f, {0x6f, 0x6, "03fdf57910578ace37b45dc7a6ee45e1ac5bfc458e6371df3ed294d0bd9457a95048b48c8747309d5786d2646a0143db1c866b72d2f9106d4888eebf568376f0147656135e2276188f02cdece5493b8e06116c705ed83fd80d89a67ac7dfd4f8b0a0d8ac06dd349322470c92f7"}}, &(0x7f0000000180)={0x0, 0x3, 0x86, @string={0x86, 0x3, "39e23f11f3fa08f06d55454509154ffbf26c770dc6ac0c60e73201e6d1943fa1371eb751909797ab3cf6e6bf429142a46204b611e21e93c54f72dd5158d9c8bb16794217509a6951175bf105da1860bb8d34a687c34c6a8e5ea7a3698b023c7866207752adc0c9d2e2a1a96e722c2fe89a34c53b4231fd63295cf57072a35950ba2ae995"}}, &(0x7f0000000240)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x1, 0xf00f, 0x9, [0xff0000, 0xff0000, 0xcf, 0x30, 0xffffc0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "32f6c3db23ce4f133845b71d57405ff8"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x3, 0x4, "c335535b", "ad68bb2a"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x7, 0xff, 0xda, 0x401, 0xffff}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x0, 0x2f, "61f2a557fda294efafaf44fd80721fbc1b1ebd0992691c6678984d93a216a9bc832ea4edc9812881f85b904a3fad2a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xd5}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x2, 0x20, [0x0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xc}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "6185"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "86f8"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x80}, &(0x7f0000000740)={0x40, 0x1c, 0x1}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x71}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xc8}}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x40, 0xd, 0x6, "d35e4a2ec7d4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0x3f, 0xff, 0x1, 0xffffffffffffffff, 0x8, 0x8}, &(0x7f00000009c0)={0x2, 0xe, 0x0, 0x7fffffffffffffff, 0x2, 0x6, 0x100000001, 0x8}, &(0x7f0000001240)={0x8000000000000001, 0x504f5080, 0x1, 0x8, 0x7ff, 0x500000000000, 0x7, 0x3}, &(0x7f0000001280)={0x0, 0x3938700}, &(0x7f0000001300)={&(0x7f00000012c0)={[0x9]}, 0x8}) syz_usb_control_io$uac1(r2, &(0x7f0000000ec0)={0x14, &(0x7f0000000d40)={0x40, 0x4, 0x7b, {0x7b, 0x10, "b583fa287cc998630a5af8580e55730a56aa63a01e93bc710e17bce7fd428fe2a2b8a7e74059610aa8a06b24721067c6ead6d28d4499d21491eb583ff29ca8fc45dbf9582541b77c6f23c8a804d279b9dac9f112c41647075bf69e94b27c1cc06f1a8d1d32385f3f0a94deeeddc4cf687b6a03997a5dcbbf8a"}}, &(0x7f0000000e00)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "7d29cde529b7f3ab8093a033312f5c8c3a254bd248c3ebff5d0cff572a958096acce673d8243f40c12f25ba26b9b27e0fafeb033d769c0c6085ab98626518103ff6d813e7906c83c9fc387dc4b775307fa2c26c6f2ab711d5ca2e835a46af625f837072033000292497d24dd88b3e524376c31dcfa5e0586956c1d141c47a1e99e977cf331aea65a578d915f93dc31ddaba9ee0ea7f3753a042a1562c7e4dffbb407c3cb4f865d010801ab35d0a8019c73bb8bf7dd"}}}, &(0x7f00000011c0)={0x44, &(0x7f0000000f00)={0x4387bd3175f3a227, 0x1, 0xd4, "c9c45000b421583ee6bf4ef40c8b4ad1aa77d75411585db837ed2c12427295ece0ff22bbbb09048b060f9449bd5440aa78546e8fc48aaef23f6d6e922c17765f634e073f38018a2328e8d289efc5b1a3c4be8de31b86817265922543e9ea94fd72165125a3f3532c34e44cf20b589bbb33734df508836d635327e942ad092e02e8a8a2a40b51fe160345c1bb3d262167c6eab84c8f04917e52375bfeb4552094fb033f7402853db64a3eb4ad2386684f5b88dfda00d2e46ac8683a4433af80ba15bcc3bf056ccd2970c8035cf35a3c987f8785ab"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x84}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001080)={0x20, 0x81, 0x1, 't'}, &(0x7f00000010c0)={0x20, 0x82, 0x3, "329fab"}, &(0x7f0000001100)={0x20, 0x83, 0x3, 'q[i'}, &(0x7f0000001140)={0x20, 0x84, 0x3, "a2cf69"}, &(0x7f0000001180)={0x20, 0x85, 0x3, "012c99"}}) 3.796168361s ago: executing program 5 (id=565): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x61}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xee, &(0x7f0000000340)=""/238}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt_cache\x00') read(r1, &(0x7f0000001180)=""/4083, 0xff3) pread64(r1, &(0x7f0000000080)=""/220, 0xdc, 0x4009) syz_fuse_handle_req(r1, &(0x7f0000002180)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@llc={0x1a, 0x304, 0x8, 0x50, 0x4, 0x5, @broadcast}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)="f2ce923e1b0016a5f4d1793f51ed478fd21cbf0e2788d919805bdabae841d26034b1516f1425d49574a7215e6a1969814d5d3b763ccd87f8de3cd9780b08cd801a748186f8708af3cd6f91cb9b49cb25388dd6e4ae099244dc781ab8b981b14a251b628167330e00e1bd3daad88df0f459d54ec16e98c4fc79394ca5db3437aeadefdc5c7628440c880959fb15dda87aa07b62091b95461479706df5174c", 0x9e}], 0x1}, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x6, 0x0, 0x0, "0eab47bba92e9b2c"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0x5, 0x0, 0x3c, 0x0, 0x0, "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", 0x0, "060091bad9000000001406439d00"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept4$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x0, @none}, &(0x7f0000000500)=0xe, 0x800) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000540)=0x7, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000528000)}, 0xff7d) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) 3.700793263s ago: executing program 5 (id=566): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000440)=""/211, &(0x7f0000000400)=0xd3) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x207, &(0x7f0000000380)="$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") 3.700052053s ago: executing program 8 (id=567): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$KVM_NMI(r0, 0xae9a) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000680)='./file0\x00', 0x2210001, &(0x7f00000001c0)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6a71666d743d7666736f6c642c7573726a71756f74613d6e6f696e6c696e650700000074727bbd0426b776aa2dd559defbabe1bb7c2990cf2327e9af29b6214ca1a0f50decac5eab7e9507cc6949f5ddd3e28e8b57ddee3b3e5d8d0f008c19753fb6357ce5402421cdf43ebd58fe035a2c7265737569643d", @ANYRES16, @ANYRES16], 0xfd, 0x5534, &(0x7f0000005b40)="$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") socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) fcntl$setlease(r0, 0x400, 0x0) (async) ioctl$KVM_NMI(r0, 0xae9a) (async) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000680)='./file0\x00', 0x2210001, &(0x7f00000001c0)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6a71666d743d7666736f6c642c7573726a71756f74613d6e6f696e6c696e650700000074727bbd0426b776aa2dd559defbabe1bb7c2990cf2327e9af29b6214ca1a0f50decac5eab7e9507cc6949f5ddd3e28e8b57ddee3b3e5d8d0f008c19753fb6357ce5402421cdf43ebd58fe035a2c7265737569643d", @ANYRES16, @ANYRES16], 0xfd, 0x5534, &(0x7f0000005b40)="$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") (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) 3.600144646s ago: executing program 5 (id=568): timerfd_gettime(0xffffffffffffffff, &(0x7f0000000180)) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r5, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r5, @ANYBLOB="4b76f3b6"], 0x40c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x1000, &(0x7f0000000300)=ANY=[@ANYBLOB="8a72616e733d66642c7266646e6f3d05839945b52380e48e552dd3d0f126d1862d322824225bb5be954b6e97e0e5993ff891cd5891fde5edd068a619b80b28b9c3a4241ad36f1885c76c576c207c6a0ebb8011e988186ccfc382e970d68a9bf39cdcb29a15c35df528c55662df0bd815e5d53d19cad7e9a3a30800a6f1a4744799b2e4fd7ec5ed25e3ec8fa1499819b87b9b594d9ef99e5ab018f3463dc60200000000000000364146133e6cb5d75bd82baa915f8261e2fc293740cea4b8e42d8ff83a66e78c76c3cbff73ad0cdbbf6924cdf9", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) chdir(&(0x7f0000000040)='./file0\x00') lchown(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 3.210403608s ago: executing program 8 (id=572): ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f00000000c0)={0x0, 0x6}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (async) munlock(&(0x7f0000002000/0x4000)=nil, 0x4000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 3.1854413s ago: executing program 8 (id=573): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) setns(r1, 0x24020000) (async, rerun: 32) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x2000000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) ioctl$int_out(r6, 0x5460, &(0x7f0000000040)) (async) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000100), 0x1891044, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) 3.061613383s ago: executing program 5 (id=575): accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) r0 = epoll_create1(0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f00000000c0)={0x9, 0x5}) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x800) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffff7, 0x8001, 0xfffffffd, 0x3, 0x4, 0x4, 0x7}, 0x1c) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"8029d25aca8da7d41982d3fc4ed5895d", 0x0, 0x0, {0xfffffffffffffff8, 0x2}, {0x1, 0x8}, 0x10, [0x1, 0x8000, 0x200, 0x7, 0x101, 0x6, 0x0, 0x81, 0x8, 0x7, 0x6, 0x8001, 0xcbfd, 0x914, 0x8, 0x800]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000300)=r3) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x6) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000380)={0x0, 0x20, '\x00', 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88}, 0x20000000) (async) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresuid(r5, r6, r7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002700)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000002800)=0xe8) mount$9p_tcp(&(0x7f0000002640), &(0x7f0000002680)='./file0\x00', &(0x7f00000026c0), 0x200000, &(0x7f0000002840)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@version_L}], [{@euid_eq={'euid', 0x3d, r9}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r7}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x4f, 0x5d, 0x37, 0x33, 0x69, 0x61, 0x30, 0x62], 0x2d, [0x34, 0x36, 0x30, 0x6], 0x2d, [0x33, 0x63, 0x30, 0x36], 0x2d, [0xd1e9b45d5732facd, 0x63, 0x38, 0x35], 0x2d, [0x65, 0x65, 0x36, 0x32, 0x37, 0x36, 0x0, 0x35]}}}, {@appraise}]}}) (async) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000002940)={0xd, 0x0, 0x6000000, 0x401, 0x5}) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002980)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000029c0)=r10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003b00)={&(0x7f0000002a00)="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", &(0x7f0000003a00)=""/64, &(0x7f0000003a40)="8f46ab33d5358e2a8d5bfba82078f51be78953aaaeabafb9bb19f0ccce1453d8caf0749b9f6c63f7b63f8f6a1628238bbc9bc6a42f2fbc6d2182fb46cc4bb33d8063f6c2ba1bc0b348cbdb83806fbb679223406097945dee8c5c2d4086f1700d26045abb3b677936d611cc1e0450fc", &(0x7f0000003ac0)="64d0cc9b94fad3fba4", 0xba4}, 0x38) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000003b40)={@local, 0x7ff, 0x3, 0x0, 0x2, 0x6, 0x8001}, 0x20) (async) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000003c00)=@buf={0x58, &(0x7f0000003b80)="1a4e0497f3067eb7c41e92fcfed47823256fa2aae301bcd8afdc41b17dd0fba6bb8f7c7a95d510c2833a07ffe8c11644e19eeb970b50f309f7dfe5ea4ce84c7ba6bd1279c3e7985db81caa29f975fb16a8d4286ba7db72e7"}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000006ac0)={&(0x7f0000003c40), 0xc, &(0x7f0000006a80)={&(0x7f0000003c80)={0x2de8, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2dcc, 0x3, 0x0, 0x1, [{0x2590, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffe63bbced}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x10}]}}}, {0x80, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x121c, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xc03}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3b}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1e}]}}}, {0x10bc, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10ac, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x1004, 0x3, "47d7ce6845a20fe88eb70d4bb442cca38350f1e19fec78d9c31cb9351543536ca76f221372b5f66aa1ceca3466a400f58bf3df1d10410c1fe5b77b98ae88fe5f592e8738086fabc7eb5745845ef8971ee07afe1add89294f36f7664894de1effad1fb1a77d3195e8bada61a243997bb613da200e00319718f07873dc400126547dc94fcf0fbfd8a31acbc7c65d9b9ee1c0719b5eb3e5b36ef7bf06dac74f9367e72632fa6f182fe619b8ea5e08f03878a4bf38ddf56337ab93e38c9743f0f111f20ad54addfd77c1c925235537591c97fd7c7fb1e03bd37b214e036993f4dc47488106c82146340588e57e01e0b5ff9648c799641321b829f3f53d561342bd345b3b2ce0b54177ddd6c60403533aaa4ebababeb3fbd127f7cd3ff726405a0857abfd27e591124c23b35ab34b8b7eed557de002d0788743d090a35460fa2c8e140333be5eec1f342f89f02d1bd229d81eee3208131fce72a73970675720450dc78cc6d41e48040fc5a5754bef8140d24456e50ee62e2d6bd190aee06e0edb36e23904aadc29af09288e2e6cc07227257ecae9b3bb2ad93244df3a59f3c2e68245e4352607efdf6f081d4914330e4e988f5778398b852b080b56c2e15efe954a929fa97311698d14d9e01f0b3df57bbfa00227b6e3df282036aa5e627f029e337600502995c911f1352dc12ed18f29510e8e45169662050428f8ea880ffe8bd4ba05137c3133b4ef785d70eb29b0302f4a52e1fa975b783725dd068fbb75063669f5bcbeb8d5f92279547a436f88f2cd7a9bf0e46619aed81b5cd39c7db21776c1e4ea143e9e5591ed9140f985a36ca032e32bcc55acd080ff1de46e3f5a790820f5bc9a4eb62eb6015f46bb1b99ece891187da7730ac0ded3e25eaa6033d4ac79b379f9819c24980da05ae247130fd1c1d51822bb1e35cfefe009c71a4870877eac5221bc2ad6a11e9c24beb8ec5a0462c0e3500491192fa6008392a9112c4d45ae0820b7bd1b14c2e5b86524f8794c5e6cc0b8744200a5045153fb4c3f1bcf3c6952f7c6a3b7cc3a017124bf1aa180f3e79bafdc7b7d80e8f4339bf62123903834c04086ae92ec1ee1e3489100370379793ef071946b5f825be9082e1aa2412155272bd795d239004b015cc615929e33e6746d9ef4a87443c758e3d763653916fca2b805ad4db46101dbd47c32b2adbf887d4f2860577f84e3ce970cc761a0fc6d0f0b819724ad57c621e8c17905c8c2dab370961fdd268340576dfc75a143938f3f62398557e4912d95aa36df20292a5ab6497109e0f429b0f5badd73a123d4f594760fda536458df0d249a44218f75b1b566408a9d7ddb8f047cdffdf922912994019808a1dfd41b4b7313eae371a42abdef4ee529eda471c62674ff2e5b8562169ce1234b293433bd136e73649a9a251c0d219fd5fcab745b65e7a69ce664290ea39ebbea859d320966a944b9b2e7b16e4cc5b1b69d42e0c24246274bc9a222ed4f59ffa8443fa26727fea9d94244490c0a0b00b608e35fad805e6549089e840f0a36afe5dda104f62a7201b573c75c12381b0ab276ac4c8aead307076cb3d205ae82dc4fcfdcf5cef7473cf6abf3dd67a766face498b5e56dd5ec8af6ebe7e986c458f41567bfd84c7f6ee431bdf8373a67ce75e724164ca135d4d56e20e146ef5e8c79acd8669a97a5e4914d30600c1e923df5b53813d4d4c7f134c4185324c031c6f409fdd214a2015cce58b3a0ed1080c59e774c133c6aca6e7965d251d243f8c737d368eff530d3983d0ef309e85d2bb16f23a0a3efad85cdffae347ec47d938f841f498d033135142aaffa7477a1235b8eb918521c4b378d591ff61f0d12609e0c57883fa45e63ac073a93562da61925aa5ad95929eb3661a7916ac9640d2adc2ccf00955846d9bffe53cf03a33eb85b32fced2d59fec4b9691eda8889c99e6adf6d05790941beb0a0b81e6f1c27742ed3cd22bc6fefc11ea7e18001b093f3d3833cf948cba1cf2f166e35532ec3760ee04851ed3e15c2a5c275a17823b7854ca9bbf741c3946460ffb156a8b63975540461fb05500b542bfe91041160b4381478cb319a3260fc684dc0f1c39a2e223fa95c4e0348f4695b710781a7a710a8e633d78a257ddfd8cc711c1b7db6796486c68a6e783ba3081dba6a5e5c51594ac0e7b4b1a1863941d7e6f7095fd528763d6751c839d4c13104b643c283c49121bd697bfadd194d79d5b46352a1fe01f0b32ce6aea4921bae6691bf90c4cffbc85de84d9e053a60d26cbb4133cc9a3627183be786564ba6c1337e64a66feddd2a77039cd00db3c48300548799e17d4624a9c4a39b019d2db4236d4aea4d4411b76eb317c7592edfca6eb2dc2620c261440f341172f420d18823bfa0567643c23e646cba58914fe545ddfcfefb72abb57830640480cfe070c4e4d7caee7703ae674a50f23157e4d48f2396bddeda9bd723d50911711708085d876f39a8eb4a5e871645110c265fb8635d9d3f0fc8d21eef1ecd67edd6d6a3a4be2a91fd626d14f5de339ee0f91fd197995afaca6a7ae38730861fd896765e3a869bff4a3e1016ff7a375533ecebd61dff6d69f4bfa45566c024b59f3747d3bbf34b96b524e5e6c9389695c693d575a3db6594c98921ebad278188e18db2b02ec21affc0083a2dc5ab377574898780caebe378e92e010138a9201bfeec48fb41ec104aa6a703ede431015ce33f6000d9cb6df09117e35d3751b98c70f134554172002d959a2ded4d60ce44b6cb3afa8186778ea3f9a50c2d716159d7b29004aeaefcd787753c3a2047ad698d8a01af2175acf63a0aae77dd3b0773be9147b5e3371516bf8f7e9fbab712026a4cb8c73773f5948cd7aec05d675e96fe4a3c126e25c34eb72380575b88dac4a9b16b4b04a46f814ab3abd268fa402ea4310473fd963a5f0c3b1ea308000bb7ba0b0772b678479dc2d45c324698c685587ce155319f06ff019bc04d3b9aa7beeb1d1710a03d1f57047bae4a6d8fb2f50df236ed836e35c3e11ad26cbc84dc332a67c6f48805b9244f9520b05b2d0cffbf494ac895712fa60cadbf32ce92152ae90839c2c1065f62fca4a904a10117aff1754b1e677b7b0ec56103bbbb1faf5791ab5206c20cb333ea3fc055057958449b0271fc3e0feb1dee81d6df83210e31579b772305033686c904cb60e3e4fb387b2ab7c5d29eb087337e2c55e68042decced711224a6034b3771e0b29eeec884f68b1e40fae7144c1ad0a9ed24ca21b7383e3f71e06b24ceb152d8f897bf9d6b849a22202fec6f5e085e52031cc9fc81869915939794441939a812428801117cdeb21364fa15a1f0791d22e3489ba9d2aba83544a2cece06b7e3aabf6c09028585b1b0bbdecadf0cb97180a428912ea3fe1dd3ce86ee59002e5c0e69ad42a4a4d9a0b5f18b2404f3525fbc102a927230ec9b1f68c7f2eb1455a0f315f2e357b46230ebf5c60c9d0497d28b723d3796de33d6eafee9dd004487e75cb0d33ca880e5445b80d8ed0c833c245d86003cfeccde22833ce81178c44bff930f78a33d0d2da086c90f254ddd3dcce2af91e541de77eb2b9181308f519f26db63b7a01cc3c00142c28424d3a8d5656f2e235d338f5021859fc77275b845cfdcc75e96140969d842de20dd32bc33fd9cf93035292af5964953a5ccd29968a6c63f3e243dbb22ce4ef8cabcbaf398a837cd09aa037bc997894ad8efba3ec827dd804aa722a82ce7caa37a661d752a384af63846ddbc46e0fcc5503e5c19c05543f9ae78cfc2e50281d154c13d653b4d0f1679a90a5ebfd1136c69d2b1c7d7ae91f2b8f117dabdcde040f7cee1fcb015fe3eb09a9232c179519c22d553a180362cf901f03ca4d07ac47e6d1f90f15f6a541945bf6fd2f8ac48e38682014c286ce4b8b30d3cae0618eb18be17b77571fb3251a19dde2615577357cf5e984a71d6c183b0a9954343b2f9830d0c3f54c2a2d2868356f7ae6f121804df4758bdd8a5ca64a77ba1ce81c22db39fb290544a1c9f5fe86cd77b94e0fb47d157640bb10f5e80ee3b6d9445ad6c1be25644060784fcbcbf80f30a98a3d063aecdf7e275895ac6bbc23f0a06d7e87431ed3bc50f7205024a6c5e6ad65c69ab0e9f34ded80320d2b5d5a2525669111cb1cf9c5468125860b39afa465bfa962965a8da670d4d8f97279b25d900c3361d821bc33ae4fa91ea8e52d3c382f302831fc5c599d06ad56a47c32017e472252066f1d21d2300ea459a20943ab2a4395b5cb62fbf5d6dd3f15bea643983ae9dc4079b8553abd47d0f4b254e19492581b31ba93c0d2675112544f9423057014d39546c63201d0d590ecb5787d92a3eb1d3501d50c73c1f53a5b33be7ecf2ca92e0e1dbca94e2362bcaa1a6387ff104ff15c51886dc53ed2c08032569f51c2bba0a7d2f3491c893bef0663009d58f714efd5c71b7e32ce2f8b45cdc44b31bdb6654987276dd57e4a78e23ef418f3b9c67bfe6a7a57184ec3963985e65c833293a8a88315b68cc750c6107def097f89fbcb6e98458f4fb3e419684f1561d14aaf350d6109c730f350a99312b16ef708a1e0f0d3c5a9b52b28adc81b0faf0ab4d968cf93d4affd22b510da1157f6708d147856eb31b9262770a88ce59f3893d34759e2c9a2b5b0c6c744daa5639141aa71b0796c9636d023dc72600630ffbd729768971fd95ec2324a3d1cfe72c03a9b89d700eb81de3663a065afef7fc5843febd1ef2f11ea0218028a965231ed0893bae2972f327e2f1c6eedec7de544e98ec1dbd2d8c9df8c7864ecda5e14b8f5c9f7389690569b6789a276f9a0b835d9888f45c099bc67a860f697c1b548ab3d523e045abf1305f7322595ef9c5bdd34159400762770bef8e144c21d06fca0ab93e611bd1fc3d0c782af5fa9c7573364564bbaf1d3d9a6089f7fb0117780beec0f51ea22ede0311fc6a0bc65b60351db758fe4ffc38f16a0d67b4c548e01bd15d04f8951c2e0c12f2f2fe06e34377c5d019fdf954fb0783b4cad7be23c8a04f73c36ddb36f6f138a89bf39bd8c03f49e750b4ad2369f4485794285588d43682fee9bc964f37977646f88eeb94f00f1085ded8f461e0c530f4408f908b9322befc8d5a09d512b06c1df5817483c96c928f270fb5b50846d3b77ed63a0405f79d641a9f39565999b46de8bb83b6e811a280a9c8d7e5dc3586b3d1a8e2b721d4bd9c5a5c54795a530289d9b51ca7f3317d7e6804d21166862285aeecfaf53245bed8407f151fe9435fdcba2c5f473a64e6366348ee4b168e05a0271b6c2aa65af2a784521810c520c74372ac47ed6c3b17ca2759a714a5ab6b06a3f82fa5acff60aa2f08e4e791ba864646cb5d23beb85efa978f70d66796d8880f53f5e5d3db60659cd0e78dbdfff2c206516cbf79e5c4fa772433fbd36a007db32534c6efbfafc3f55fc1d97df546fae270aa0683d4e1d08566a5c38a276991a8062001046707f1dd6437a78d8337a7fec95dfa7f2c6ff3722b7694007dbcc892332bdacced77399a3e968f286549118ea4d6ad0401deb6daa40126fc45bcd911ba7b6ae2fbcb5b1e19d78003cf9bc0ca2ca7eab37a28ac49795f55880a8492b2731a3fb6d3caa92c9187c5495987f9747db4d94970ee9af5fd9ca1ade21ae61b77c23082c9c175a9eca1e3b4cd06afc786b567bdf3f37babd05bb3d73fa6d6bcfec7ac6810003baa7cf59854f51e8d5ff2f1f5638030c9fa367b5be381489a92689bbcfdc9619d6bb3616d13740f037df9f06b591a20c5213bee25281e89fab"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x9c, 0x3, "0a4fc0d76f8c2355bfadad7f2bebfa7b99a225521e6c92a82d3dfad2a6c9fbef97378da3721efd6c932bf0147f28fbced16aace9033514d526d95392648cc2e1bfc0a16c4c7fe3752007360cced39d43dbad396f0b86360e348ce629cb5580d4f7b7a0381aa24128bb84544b3ec505aa83b1d6276a5f6535e7205f4187a142706e39c5952f1a8e256800c1d0106cfae81cad0d6e5093a2f5"}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xa4, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x94, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RANGE_TO_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x5c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x194, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x184, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x158, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "ce75effc2ccaabd4001d3c11392ed204f617ee5552e8"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xd4, 0x1, "a21b62d8068851601d64da50c4b04e09501416507d9c73765d1a09b7c7c0396095d9ea88ebb09c841d7a5b660ef3b2f3441a519bd4e7ec5b0f446aa29796a9922329fe369a9c1882da34501c8dbccd441d29ab9d77d8572ed33e2ecc61efb6e916cf5101edd4b094882edcbd75c0d648e92bdc516a1cc7d03107efdfbc0a215b9d931b41ebb7ce7b7246e79bba313b0f0fde77fae611fe0fc8c85acac8065ccc127cf9329c220ba97382b4e202042fe95e0f912a2acff73baeba7f8791b57177e0d06b1ac30b0a1fd041a9a9493f3b4f"}, @NFTA_DATA_VALUE={0x57, 0x1, "5d7ae791a837f6c7fa2b4efe5f7a0b73623da8c98161b88d8c93c0bea95db9124725fe4efb2325863d9513f3ccd680130808414b2d8ad936efd88842547d7b47b10de571b01915ca5ad2ba263c81b0e2d15b96"}]}, @NFTA_RANGE_TO_DATA={0x20, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0xc5e11ab133f324b3}]}}}, @NFTA_SET_ELEM_KEY={0x10f8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "1860abb9e3e2af7bf8ddf29041dac7d41e892297f4283985f59d96576fa688941a70588c9a506464fb112e19253dce0c2a241ebebbd3198e4f56b6fa24d82bfda9d3857b759b914c59a6c94327bf7a943856aa1d0faf2613d725ea34492275892b9722c3a4da0b8b4541c61704cd631f318228fc08e567b227ab1ac67bc4fc4552998824a506deda6ac9a4ed12afdd1c358ec09b15faf0f083c7f69b2323eef898"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x40, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000007}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x7f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8000}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x54, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xba, 0x6, 0x1, 0x0, "3224aaa4af767da3e4cece0352efabec2ec00ca03fbe68cc82e674b59035412e3df0390c93ee78cbd16c8b08699ffaf78bc44bb2a2d879fd8d4ea1ac933aff6865411c283cfc266169537f31be7fe2a1d3e528b3d7f0105c7f92eeceb945b0a426d504b5eaf92d548af082b6ffa3242db0f7745698340b663faa59af8eadfe758ab8f7e7672d3469cf70422c85f255b11af582d92b6599372a2feae7fefa94a97d6191f452eb51c08e31c73627cd4b5265a8ec8ad51f"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x5c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x260, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x11}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x1b4, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1a4, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xb4, 0x3, "9f4b7512492534d3c7e4b26b93d02b985da614d2dbbe9f6c7295c4fdf01104ae14677e7d8d65b5c28f59fcb8cf6c165b4def6e61cabcc59e0ece8fa616f1879318cba0d7becc65d474614487e9fbab1f6d641b141532180dd7982fb8a026916323312c9a77ec6cc8e50cecb365b99952cb8b33fdbc096877dcefb948393e04352b148a2b129e93f085de9a58d2fc745060bd943a34bf2698a7843076e2a25cb9e5f914ffba13e19938f833c0e456ad52"}, @NFTA_MATCH_NAME={0xa, 0x1, 'state\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}, @NFTA_MATCH_INFO={0xae, 0x3, "1882e49c219d9e99a7fe234b7f9a1da781f1e7f03dbd5ce8a5aaa31c8b14c9e92d7039c28602fc73c09a9878ca9c39a7ebd36a09e01b8b45813092b27b1185184efa20943a87a909eb15419ce74cfea8e14781aeadd3c5eeef87b388a68cfaa6ac9d0862392378827ce5031d6165ef949cfc41ad96ec91e836f48c5932b39baaf3d0b30e3570a1fa843fd63d0f43fe2465e5d1e7781f77e732d8a0ba790e508eeac4000189f17602893c"}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x15e}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_DATA={0x368, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc7, 0x1, "bd00b91db3540b918d5854d9cbe1b9bcd7742c79d3dbcb78912bb434aefd90dfcd1897ce244b183a3a9a8ee0092a70aad2b507e390a35d7bfe406d33a49408eac7d3ec2eefc61b9381ef1b161c7991b1405f9813ef5db712b7af4a48847d74c2ebb358f1b7076a2f103272650f9b3210efe36c256dc597a1fbb648c0a1eab19bbe7fe48aa82e2821c75b1666869ac35b80afad4167182a45dd095f35f152071d8994b0ff4674500eebbd53cb75f8c1b3bee18ab6e435d3342146028435d3ee9db854a6"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "c908f621c3809188ddcd1238fef93d750f01f490fdc0d1a8046d3bae05c985d29890332ce64cc8bd1b3ecfc1a157588b1a28a56b4e21938998f17a614008eb0f1b2f94b072a62a6f479096c8d700d97b25d19e42504bdade4262bf169dcf665697f0299dccc0a1ba3132cad820a265dc8c9297cda1ba0f7021f95f525a90e252e1495285b9662d8f2d2f95f6a788d4f68f51ae68525cb20c82b71d23f7e0202982556a424418415c898a1821d58006e7861cefc2ba3f26b3a02e8696c58a90c8ccac995ad88f8471bb0aa1023d1ecf38a84f606550"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x41, 0x1, "4c996cf587d8d9bf193197232526f693db52dbb537c7860ab52dadc1e4b16e9adc8dbe0e630f3e56f941a88be802e13cbc36f261efd9ffc4b1cde0d069"}, @NFTA_DATA_VALUE={0x96, 0x1, "74dff4c1aff5aea1af70b2d656422d32dfc7f55e9d7f2683bf500a22d809ee2fcd8db6960f863f127f7198c2ecb53cfb2ecaeca192fc2313742110306a8d792f773e0a8ba536f8b91fbc4b34d8c58d25698fb1c639039c694372784d257363ffa2f7f656bc62dcc7d278f34bcc06ce48b5f1d9959c5692c02c5513323c6fb3e7301155541fcdf052b46e4c6f0d7546f25574"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x2de8}, 0x1, 0x0, 0x0, 0x40}, 0x1) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000006b00)='/proc/zoneinfo\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r12, &(0x7f0000006c00)={&(0x7f0000006b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000006bc0)={&(0x7f0000006b80)={0x3c, 0x3e9, 0x10, 0x70bd2d, 0x25dfdbfc, {0x2c, 0x1, 0x0, r8, 0x60, 0x0, 0xc, 0x0, 0x0, 0x5e9ba970, 0xfffffffc}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000844}, 0x4004801) (async) write$cgroup_netprio_ifpriomap(r12, &(0x7f0000006c40)={'netdevsim0', 0x32, 0x36}, 0xd) ioctl$KVM_HAS_DEVICE_ATTR(r12, 0x4018aee3, &(0x7f0000006cc0)=@attr_other={0x0, 0x7, 0xd, &(0x7f0000006c80)=0x5}) 2.792343652s ago: executing program 5 (id=577): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x184) fspick(r0, &(0x7f0000000080)='./file0\x00', 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace', 0xc0502, 0x41) rmdir(&(0x7f0000000100)='./file0\x00') (async) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000140)=""/76) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000001c0)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000200)) (async) unlink(&(0x7f0000000240)='./file0\x00') (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000300)={r2, 0x1, r0, 0x24, 0x80000}) r4 = openat2(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x501800, 0x8}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x6e8, 0x4f0, 0x148, 0xffffffff, 0x4f0, 0x0, 0x618, 0x618, 0xffffffff, 0x618, 0x618, 0x5, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x1, 0x1, 0x1}}}, @common=@frag={{0x30}, {[0x2, 0x64], 0x1, 0x3c, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@mcast2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, @gre_key=0x7, @port=0x4e24}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xffffff00, 0x0, 0xffffffff, 0xff000000], [0x0, 0xff, 0xffffff00, 0xffffff00], 'erspan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x1, 0x8, 0x4, 0x5d}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x1, 0x1, [0x0, 0x1, 0x5, 0x3, 0x9, 0x2, 0x9, 0x1, 0x6, 0x5, 0x7, 0x8, 0x800, 0x6, 0xe5f2, 0x2], 0x10}}, @common=@rt={{0x138}, {0xffffff81, [0x9, 0x8], 0x80, 0x10, 0x2, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @loopback, @private1, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xd}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @local, @empty, @loopback], 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x3, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0xca0, @port=0x4e22}}}, {{@ipv6={@mcast1, @remote, [0xff], [0xffffffff, 0xff, 0xff000000, 0xff], 'gre0\x00', 'ipvlan1\x00', {}, {}, 0x0, 0xf, 0x0, 0x2}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x0, 0x1, [0xffb0, 0x3, 0x2, 0x4, 0x3, 0x3, 0x400, 0xf001, 0xfffd, 0xee4, 0x2, 0x1e, 0x4, 0x6, 0x200, 0x5], 0x10}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x67, @port=0x4e22}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x5, 0x0, [0x2, 0x200, 0x9, 0x68, 0x80, 0x4, 0x7, 0x40, 0x5, 0x9, 0x401, 0x8, 0x20, 0x401, 0x7, 0xef], 0x7}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x0, 0x4}, {0x1, 0x0, 0x4}, {0x2, 0x3, 0x4}, 0x9, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x748) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) (async) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000bc0)={0x2, 0x100, 0x9, 0x3, 0x8, 0x5385, 0x1, 0x7, 0xba, 0x9, 0xcf5, 0x0, 0x2, 0xf}) connect$inet6(r1, &(0x7f0000000c00)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x861}, 0x1c) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000c40)={0x1, 'team_slave_1\x00', {}, 0xc28}) (async) umount2(&(0x7f0000000c80)='./file0\x00', 0xd) ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f0000000d00)={0x3, 0x0, &(0x7f0000000cc0)={&(0x7f0000ffb000/0x2000)=nil, 0x40000, 0xfffffffffffffff9}}) (async) syz_open_procfs(r3, &(0x7f0000000d40)='net/fib_trie\x00') pselect6(0x40, &(0x7f0000000d80)={0xed, 0x1, 0xff, 0x49a, 0x7fffffff, 0x8, 0x5, 0x6}, &(0x7f0000000dc0)={0x3, 0x9, 0x1, 0x1, 0x429, 0x8001, 0x3, 0xb}, &(0x7f0000000e00)={0x0, 0x578, 0xb94d, 0xe883, 0xffff, 0x8, 0x0, 0x7}, &(0x7f0000000e40)={0x0, 0x989680}, &(0x7f0000000ec0)={&(0x7f0000000e80)={[0x2]}, 0x8}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001180)={&(0x7f0000000f00)="92e8f08393214586acf20e66ea0bc0613426eb6729192212ef296cec0d873e039a01c211db2520eb0e0cf48cfd119e068509bdaf78acbac99759078b3cf48e20198e731eb33988c44c343d38eb918355eb045c64928a127601b7fc8e98cfdfd9ab74c1b357b0c1a66470fd6d54ad125d893786228d8bdc58e52f9f71f92046ff6b3b05bb5abdd415466284194118595025e378ef11add76e0e2ee39dec389f280fd40f94f3e8cf28606175c4f1c536346469d4c5d1d153d2d421fd6e1bf27a9d5173a9d8d6624fa4e2", &(0x7f0000001000)=""/93, &(0x7f0000001080)="83fef7bc0e094fe458337ea28fe99c98fee0687b2b6e47f5ecc0e43d471e8d53eb8acbc7352a3fffd77aa953403c6063dfe0886c376cb64d19389986bc93aa0b033983b9945858f36ec3ec459bb0077fd3fbde79799593252178fb8db024f23ed437dedebf66b9502ca299f3d41ced1fb8ec5b75745665cf107846cdcc5238aaec76f66b5e686e993567c337d414bb478de352450c", &(0x7f0000001140)="65bcc08f89210872d3408166cf13f3aa80318896b6fac2810814dfd754a8c7b51f637c78342c44bdbff434744069", 0x1, r1, 0x4}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = accept4$unix(r4, &(0x7f00000011c0), &(0x7f0000001240)=0x6e, 0x80000) recvmmsg$unix(r5, &(0x7f0000003400)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000001300)=""/144, 0x90}, {&(0x7f00000013c0)=""/85, 0x55}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/15, 0xf}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/64, 0x40}], 0x6, &(0x7f0000002580)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000002780)=[{&(0x7f0000002640)=""/150, 0x96}, {&(0x7f0000002700)=""/45, 0x2d}, {&(0x7f0000002740)=""/10, 0xa}], 0x3, &(0x7f00000027c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002900)=""/186, 0xba}], 0x1, &(0x7f0000002a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000002a80), 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002b00)=""/136, 0x88}, {&(0x7f0000002bc0)=""/253, 0xfd}], 0x2, &(0x7f0000002d00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002d80)=""/186, 0xba}, {&(0x7f0000002e40)=""/73, 0x49}, {&(0x7f0000002ec0)=""/193, 0xc1}, {&(0x7f0000002fc0)=""/82, 0x52}, {&(0x7f0000003040)=""/131, 0x83}], 0x5, &(0x7f0000003180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000003240), 0x6e, &(0x7f00000033c0)=[{&(0x7f00000032c0)=""/225, 0xe1}], 0x1}}], 0x6, 0x2042, 0x0) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000003580)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003640)={r6, 0x58, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000003780)={'gretap0\x00', &(0x7f0000003680)={'sit0\x00', r10, 0x7, 0x10, 0x7b88, 0x7, {{0x2e, 0x4, 0x3, 0x0, 0xb8, 0x65, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xa1, [@private=0xa010100, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xdb, [@loopback, @broadcast]}, @noop, @ssrr={0x89, 0x1f, 0x9f, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @empty, @broadcast, @local]}, @timestamp_prespec={0x44, 0x3c, 0xb5, 0x3, 0x3, [{@broadcast, 0xa4d8}, {@broadcast, 0x1}, {@private=0xa010102, 0xca}, {@multicast1, 0x400}, {@multicast2, 0xfffffffb}, {@multicast1, 0x3}, {@loopback, 0x7fffffff}]}, @lsrr={0x83, 0x7, 0x31, [@empty]}, @lsrr={0x83, 0x13, 0x72, [@broadcast, @private=0xa010101, @rand_addr=0x64010101, @local]}, @generic={0x89, 0xe, "e5b5d073099246375aedd3a7"}]}}}}}) (async) ppoll(&(0x7f00000037c0)=[{r7, 0x88}], 0x1, &(0x7f0000003800)={0x0, 0x989680}, &(0x7f0000003840)={[0x1]}, 0x8) 2.791851522s ago: executing program 5 (id=578): r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000740)=ANY=[@ANYBLOB="12015002000000205804135040000102030109022d0001010080000904000402030101a209210900040122e601090581032000810507090502031000010400c2905eeabaaa149b68708081e46ad831024b7c41738cea45b4b6d1e360a99ee9bd46b387e9c52cb0c1c1a43644f606643da4d7433214fc1c86b1bea941a717269e80f1e0bbd5262d36ea7b"], &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x48, 0x7f, 0x6, 0xff, 0x4}, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x155555d1, [{0x2d, &(0x7f0000000540)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=0x0]}, {0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0003eabb7c0194a55b64cc48d709d247778542b2ef66bad9449df4740e3e8f96fe7109d935080189e2c48ab5080000000000000072e87a76946ee91f5fd916ba18ad55ecfd4b634c63c13f345f674dec5152d1aedeadce7e1cb234ac1c729f1741dd803e744c00"/117]}]}) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400e80010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000140000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}}, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x89a0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}}, 0x18}}, 0x0) r9 = dup3(r0, r1, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000240)={0x5, 0xfffffffa, 0x1, 0x80000000, 0x11, "19aab4907336bf0f901f4e29d2208a257eb0b6"}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r5], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f00000001c0), 0x401, r10}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r10, &(0x7f0000000000)='|T', &(0x7f0000000080)}, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000100)=0x9, 0x4) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x800, 0x0) r12 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@free_buffer={0x40086303, r12}, @acquire_done={0x40106309, 0x1}], 0x75, 0x0, &(0x7f00000002c0)="9756f4324db44de166439ff7595f07465a1646b88b341525f18979a91e795901d5ebc551f461fe800841dd4b4d50b95980e2bae61c272d452c73c5de322fed4e27ef0db68f185a4c8ba872f04e1131662c7c0cc0736bdb6dee53317252ddad9603fa357697492a48fe0fc36d4b4030bc4c4194aa4c"}) 1.924663569s ago: executing program 8 (id=581): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="0600ffff"], 0x8) sendto$inet6(r2, &(0x7f0000000300), 0xfdef, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000540)=0x5, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r3, 0x58, &(0x7f0000000380)}, 0x10) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 1.310981788s ago: executing program 3 (id=584): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0x1, 0x254, &(0x7f0000000800)="$eJzs3b9qU3EUB/Bv/4cudpYOF1ycgjq5BqkgBoRIBp0MVJdWhHSJTnkMn8FH8jE6dbtib03SGF00vcnN5wMhB74Ezm/JL8M5ue+OP56dfrr4UH7/mlaryG4yLsvkKNvZSZLjrfyynWQr+5k1DgCwbnq9QafuHliu4bAz2Ety8FvS/1ZLQwAAAAAAAAAAAPyzRfP/uZqZ/7+e+a9M5//LyVKA+X8AWD/m/5tvOOwMDm9+v91m/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoz1VZ3iv/8qq7PwDg/3P/A8Dmcf8DwOaZv/9bcf8DQNO9fvP2ZafbPekVRSu5HI/6o371XuXPX3RPHhXXjqafuhyN+juT/HGVF7fzvRze5E8W5vt5+KDKf2bPXnXn8oOcLv/4AAAAAAAAAAAAAAAAAAAAsBLaxcTC/f52+095Vc38P8Dc/v5u7u/e2TEAAAAAAAAAAAAAAAAAAABgrV18/nI2OD9/P1Q0psjTlWjjrotkJdpoSlH3NxMAAAAAAAAAAAAAAAAAAGye6dJv3Z0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH2mz/9fXpFkXFbqPi4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYD8CAAD//z8EmfQ=") 1.116794534s ago: executing program 8 (id=585): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x713a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'netdevsim0\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68814}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68814}, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x1) (async) r3 = creat(&(0x7f0000000200)='./file1\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000000)=0x2) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)="6b8807", 0x3}], 0x1}}], 0x1, 0xc020040) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="110304000100090104006bd648c610112f01fe80000000000000000000000000002eff020000000000000000000000000001042022eb"], 0x1043) (async) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="110304000100090104006bd648c610112f01fe80000000000000000000000000002eff020000000000000000000000000001042022eb"], 0x1043) 1.113372945s ago: executing program 3 (id=586): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x421, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0x5, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 758.690425ms ago: executing program 0 (id=587): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dc52b390", 0xfffffede}, {&(0x7f0000000000)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0xfffffe3a}, {&(0x7f0000000080)="cb25", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000000340)="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", 0x109}], 0x7, 0x3) close(r1) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000090000000000000800040001000000", 0x24) 746.705206ms ago: executing program 3 (id=588): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = open(&(0x7f0000000040)='.\x00', 0x531082, 0x408) r1 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) getsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 452.703645ms ago: executing program 8 (id=589): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2b73, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1a, 0x40, 0x2, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x7, 0x8, 0x2, {0xa, 0x25, 0x25, 0x10000009, 0x3, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb, 0x9, 0x9, {0xa, 0x25, 0x25, 0x4, 0xf6, 0x7ff}}}}}}}}]}}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x12) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r2, 0x0, r3) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x8000000000000001}}, {@blksize}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}], [{@dont_measure}, {@seclabel}]}}, 0x0, 0x0, &(0x7f0000000780)="9693b598603d4e9bf2fe9bda4c465661daca95954ff00d089012d99229676557ebcdd15c1869e091beeb140dc617a2023324d7167e0d4611e491a5c0066dcbf491cbc44bddfc73410ab1f746be386c911a5ea8cecf766976a1c8621c9f09bac259c4aa696f2e087584fdc968cc06fac3879b07adfcb944942683987bd64ad10d03f69d8b444461a63c5d4be5ef115e2718f662900d9831df2b472be5c9c16f982aee75244434d333685b964ee61ac1a29fc09c0d18ee4f0925b2ef6893ce29debbfba4c781a6490a2fb38626639730b52144781dd3b483886f7b3657215df7ab62444a8756b405f3445f49689a464d76aa3833d677f11d1047be7f8d1e1a8bcd93aaeb89ba71914433c81e1354a42c948d5fca616ac7baa832cabd3bfde1f20e0d44843a59f5982499a9684d21afc9e3260baaa0423dd4e876441f772c877d5b226571a9514dc8715307ab0e59fb314ec2f7af2361b0638e27c6c1c49226aa4e56918877d6a80a5eb169f5c8165490741a12e61c066e96faced2a559db63369ae5f29bb99f0b5be28ab660202adfe91dfcc2a6931ade91dcb37223c6921c9f6d986ab50a229581ca2a49d3211ddfa1e767fdc034311954ad0bed4200f09c885123b0982d2c60ebf1764988dc083a5c22aaa61eed0a5a7357dd7a4c3c9d6cb2de66a62e4e2718d9a46bc22947956fd9b4d5e2deef7265a892dc7da5bbcc431aa449f9aa63bc2a8239e22043ad772243f384705f4d4d6869203c3297451c4cd6b33a93465b8718140b6ae3bcf83b17e0a72698d279e252318bef14beaf484e9cfc5ced27d29e8089017e0bda303e7ae5196a03c94e77132c1b858a17392f773dc7e277901060af4b568dc2a10e0be8888419eb26d867e3b19a718afb1f2f7cab7b41ec6eff85e70054e6e3e06c717e6669bebd081ac7e51c40732f77678ef6d37ae8c10d84908d209b8dabb8e1feffadb9cb413884808b0b23928c65722ad8a1fbab126730623a8fd9abd4560f07ea5f10ec2b5e95e770f512740ec45e26d9485f19473263326c01b0b428603c4dfb93cad4c8373be758f704eb97a8f308050804a34b072324469810ee73cb8bd58ee6b964e507c2510b33a8ebd189d67ca000feef2937e0f3967398d3c359fbdd4c02f7f8b2b1190f0ba08487a13add5532c342eb711f282ee74675eb387c59f695c4473490c39fc4bc91d1c0fd99f94ac94878c4558d83c009575fe4a39e6cde5b0bcb27acd9fbd71b587d214afd9ef0fdf695c89d2680cd00084a44d9d71dcef960d287ec8db13c5acf7699065a0cf3eed988cf30665a67905670471f3ed162bf45967298e46f34f41c47624f704a08a84d044b54b90f2d8aeabd8c88557cc7bb4cbb0e922e6e9ef9355eac502e31723d84440287e5fda143527fc9d42fee3d10f74422c0db4c42c348b522d7eef358ed682c3489d359d16823214ebeb8c6d2a9ec7002637f393d78f3a4fe3073bc285ee00a6afd1333233dfca9f173ae9111d8c3aaa50d17423b67ed501320fff6688f2b699e2601d932e9af0b47b1e8d04d2fe79825ca60918ed77a22f390f3499c11390e41dff380c947f573f203ab101b8ebdcde923a2daec292994927be8bab9b50f455e6d086013ec26c360dd4339b5d1a51d2e9b1708d2ff8bf75f03891f6b6bf6bcbfaebf2b31c65c4e8274379987d908438b987ede6d93abdbfb5f596d48a087270d02a9451f804aa90a035e7b32902d66f0712c21f2de255b4788a785f873368ea87d91b4559f4d1c418cbda0afd8a743020ba2ade3be83c6af413bbee4118adf052f456cda625fd560dbb9edf206a6336e6d0e53e4dd8bb6aeb431e39e73a598826994e173cc529f79543f7aa7886ecc36c893fba4184f71b8b5d2d46b5937dcf2d77149ae3d17a179735c4df1fb5aff32d562e8322aee9ba2efa4f0d556338be42ded84d727e86895bf1cc9d883ca9ef448a2448cfdefe1457cda28b01b8cacf6200496705fc1fd57eb77c607bbad07f81087186bb470ae649bbb996b7914918e4dc445f019757730db5c80b430b32a4c834e84e7c3981c4c1b6d8163cf52cc98181c3ee8c4f38f7e99cc38c8546baed4e7fd816077fd6bf408a14e792926f50316f1fa21fa2969351fa5767e5945be7b352ece0f2515e6229c99b18f886076736865093d392fcbe5ed129e7e2aa7fc78ea9f7960f7aac125d025c1963f0bf187277c3bddcf9a183e0431f99eeb2fb32ab0d732daa92afeefa886b2b82bcd71541bc5343ff6981945e8a40fe4629e599dcd24b30cf6f239796866b53a59288f89052f3351554c3c5a5bb5769ac2c636ef63662afdcbcbe799097b4427b88d349b087bc58189a7e155f30eec0073c632ba0d633ffd5eb0d41d56e2df5632254b2dfae9b9011bc0b75f4c6c09c95311395befde521d6a3b68072325f991ee3ef40a3f0317cbdd378b20f82b8810209d3bef3bf308671258850b675485edd79aca1bdc47116d873a5e493841571f1e4654911b1ec4f9adf2886dbe3e11e27415056d3a6060946b74975a5935208a97ccec0ff247d29de8152a2b3f5a5a3e0551b5ff212fbef9aba0b4c5844b5851c3a6fb63b4486f1a022ae1a1e689296dd579d730bc652dd228c56b8aad49358b5f6fcf7cf6c8a8f3c2bd475a81a689216f42a389e239ff166ccc5214325558bbe18d96fc98581410dc0cfaf18c3f54ea3f5a489f8345daf74f6a453bd98423cd9685c3fd2e0320ded1fa5f9727c879453850b80a2b57127c14ff29487aa3d3dbb032572190e31be3efb663a7033d415ffddef6674973b67905d3d12824edfd7c5c8c323dac838f14bbbe7c07fa20dca49ccd935bf4d16368290faf70822e5b419bde92daa3f4b3c5de359ffa04d1add034b0d4a155600ede6f242263c93ff341959f6188bbbf48232c88c0b3c8db99f0dc6465052c312f97907794c4f77723afaab3259cfda28f35f71795bc67d2c58277b9aa1155ae6a6a436c5f00475d0883b294f40c5e8a7453e70fe708235ed8beecd6e338e10005e2228ea3346c2024b3c96cba8d285c9af6c12ef2233af3ec98c6d214be79d336e3aaf54afe2285dd3f19f285f977b61f83224d5aeec28c3c4f9a07d9dfc363421676ea40483c37addbe391ed862edf63086f4e7991af30de2d0340bb5d51c434712f2c11be5c7ad8032533cd59ce74718145ec6ddba46915b60a91283ab9720519bc9c147015e6204f6bcf87a1bf33cfc118fe2d065262858d66e70c8cc35cf5ce859694ec660d9a00e26e0cc480a87d791ad82c4689c2d0e27f8aa9a18cd38b255ab8a8b9de50ebb98d1754a0f8359942f01583fc187c64fb4974cf01e40e1016705660cdfebff2e4c8cc4ac5301aa8175ccbd91e3f583f7d98b8022f6dbe1fe0c77f6a413d44e96f8ad8e6d67fb49eedf74db9e28fc75f2a057e6bdcbde656469775f3766e9345af3fc236c806e8ee390e8c9631884cf2b3b8f023425ea58848488ed80737f8179cbe6983d0a76b5705d4bd44c1efc5581c1e871bcfbf2ef6d0d5c263abe708ecbfba9a3d53b665d4117d2a1e9dfeb164185e6ed3509ea96bc1ec8b28465fc736ab3bcd8e563ed950d7131c343c388f2c59a024d9b3f9d1b0e3c14246a8aa263d35c0be089d70df40e585e93d972aa76d97dfd8d555373721834ceb005133873f2d6eb2c756251ce846e4d7bfa3d9baf58887217348725c9dc2519f86052a74beffdadb4e72f697d4ee4b1050659fab8f26949d6ea0263ff8173c7e2fa25d3399d51cfa40bdeeb6e24c688733321cd634c6d3efde1207af4c2e658b11b159b37609dd2a1b697f4c1c4d5d2d325a493415bd69e9d38b77705331a56e8ddd8f90cfa547adfd81ccd3f870583096fb660fb60372a2a165d1ad4e799377f2b1e214792188d815442c5a25b7fec8e59e9fd3a0b391cf58b627ec497f06c8294023dcf07d0be4674b07be2c8e0f4679ead29c16d0b215ad51ba81f0c7c153647073e56a10ea8daa08935dda1f323ad3f5d8885440767b1c5961a451701196a79a1102ab92cbad32a4caa9b8676fb9c7a4ba483d49be96ed80c82b35a4e3f947d58afa0a61570ec3327c411db6c07fa6d967af0225e6e76812cfeb665a84dffcb6723aac7294a061ee48a4b812ef68c5b9652e15195fc69bcd917adb3d04114111830890c2dd2790d647a0f23c44e8882a2dbdaec07dac2c00778f638da4befb31193c18de89b4af04a51f88affd7f8ccd36cf0d685e49dc6b40ecb3bff0c271d43f4f7f41dc5878211a6f9b46c74d598278413e7ea0f4b5d22a82a0bd2df13e5431e583e075c8985f9f1525570c9dfab28d168fa96e2e26c6f08f06751ce74eb0e2ea38d53936e554bd1186c48506155336cc028998065d6a36892db0e296e6bbfdc4470fdbb3cfd2bf36b5ce9b3034a64b751a0a019efed04d366ba5f29700266cf0f478174ced2c5a180248c017358064b653aa8530c2bc042c25dff807275000a5e5c2e3ef84d8f210d1ec43c277265edfd28b4b6af69925692705fef0b9f840a45b84cc271cc1e979c0c014c3b51acc799117e451700333e46343dccbeeb29eecbd889bcc1e22984c7dae9df4239adca962ac7bf854d5439e37c42e2d22ea00cfa42a629f07cb2122381c4723f58eaa74155231ba6b80d1669e00d2d9feb236ef4a1ba9bc5d341f47d0fdea604c878846a2ecca495310cff247cbc5997b89435cbbd7566cb0f399e9ff5fa6b2e3b5c098edab77db9cb6020b8b1a3b78b8f767afee8b61ae4a89c45b412b78c734868e9e77d9de3369f6bf08b5bc97c47057823cf325ef69e9058e7ac47aec6c81d3c382c1a68dc49ea8ad4ae0c49c2487a866cec73e382f395519de4c581acbfd00d854e55b3d0049e57d4380e383eb5d89290a729d387d0ec043ded196bec59574417dee191bb9a8e4ec1e1da4b95c983f14d7dae826a884ec44519a24c382a55662a011a47004dfed0effa6028e99ab95d4881cf74ddde69c7afcb0272df3e6871816e904f0fe6c9845fc603c2e883579973b37f37ac191b221c3a3e3e95a032c70e4afc8c7d5bcd5c382d474bbe59165c3a0242ca0794df92f58a2454a5266b15851c41a2133d7f0e04da8ef22188622043fdaca04f0fcb7259d52526795fa3139a62e8e7f1780750c65186e1db61b656b127feda17792090ce45fc1599177fd6d11e56254162fd99495efe0613b1d64bdfc58fbdd73195bba330e65cab178bd7568585f4496996fdf468e2eee0087fac51f63c10e0dd2081c32121c13b791a8ff4414743b364e5bf6ae84c32ebfec016435f5056608e602fdee67debbeedcfcf668825f19e86488186a30932bebd2a5fb4863f594f4ddd1fddfebeac506c00975a614676244770c06a101ae17e6ec262c749ab52b0dbf561206bd7400e3a302f228531c45ebc4c49785077faed70da2182e6d4b95e6f7542241317169df7f6d0f264da024f54f9197671cd1726c3c6780fc7b26b929fff8131869f01317a631971a920b857071ce1ec39d242c6648302084c1d84bdd4ba0bcdc6203ce693ea3ac0eff4936f58762fb54af255ad41aba5a29e93cce040ac8c394f4959245f0ddfdaba8d0d67a291b67464e4add83a9e06d63f3b90e8f205ecb207206f6228716993df842f478039111d1efa9e1840e13e4f26a04dd243bdcd5ba28702faf92af8425dc83ca04b1934cddb20303439742cbbda6bb8f523e7e6765c34a5f28ecabf9e1a4a0f5ddda5b157ec36ed6228fe914e8434de57004baebd738c073ad5a2ea31a8db56fd4f1") 284.28146ms ago: executing program 9 (id=593): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105e2, &(0x7f0000020c40)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="0f20e035100000000f22e0b9340300000f3264460fc731c4a1fe5bb4f00c000000f2adc461b7c2110fc744240069000000c74424024b590000c7442406000000000f011c242e0f90f866b82f010f00d8669d420f09a891", 0x57}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x1, @desc4}) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01181800000000000000240000002400000002000000000000000000000400000003000000000100000604000000000000000000000d020021000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) 262.331271ms ago: executing program 9 (id=594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810101400000000000109022400010000000009040000030300000009210000000122070009058103"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe8001, 0x0) syz_usb_connect(0x0, 0x740, &(0x7f0000000300)={{0x12, 0x1, 0x150, 0xa, 0x9d, 0x70, 0xff, 0x1740, 0x9705, 0x7b04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72e, 0x2, 0x7f, 0x0, 0x20, 0x8, "", [{{0x9, 0x4, 0x1c, 0x3, 0xc, 0x6, 0x4b, 0xfd, 0x5, [@generic={0xbb, 0x23, "05508a39ee981c65170e513435ba101a2f025f29e915a7ae82ce95ac02219aee40755f860ae9477e1f92c77347f666aeb26f7c0df6df1c506909cd2e582b2307c2da11e6342c222a64a2f3d8e62a2072cafef50b95dd950b8487239025a8441726771b2163c1ffe529a9809d707f60b94edefadd5950c9fb2c59f6f079a3abd4bd75c752461faa3b35ebba51e23992b21362c931259e616b7d2262a24e1c0e49a2e2451d394a0d9a4880d02531f62593cfd7cd672ead2f26d6"}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "621e97"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x37, 0x8, 0xe}, {0x6, 0x24, 0x1a, 0x1, 0x16}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x9, 0x7f, 0xf8}]}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x1, 0xba, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x8, 0xb8, 0x6}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0x54, 0xa5, 0x8, [@generic={0x18, 0x7, "278405ac1d94d8fd2946198408f31fb8e3310ab3bcc8"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x2}]}}, {{0x9, 0x5, 0x9, 0x14, 0x20, 0x9, 0x54, 0x2}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x1, 0x6, 0x80}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x40, 0x6, 0x3}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0xc9, 0x3, 0xa, [@generic={0x75, 0x59d470f948467932, "fe603dd154ba00aa8101b6f14ec0306b2a1c26ffd0a6e22024e53047913a51d9505f714adb610dea3a1e8b927100c9e86786a41496500dcf90ab43098b31c25c0e7a9015e8f6b7bb8d81efda4eac046fba6a65d72915b7cc0367623dcc9407207a7b7f4ae9cf32877bb341da1ec3345af9677a"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3fe, 0x5, 0x2, 0xc9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x81}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x0, 0x2, 0x51}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0xec, 0x4, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x8}, @generic={0xe9, 0xf, "7cf0b47ecf9e681c51d0285ec0582c0a12a1fc699b2c165542dae476d3f6addba79c1b205d572a9ac73e2087ac38b4de95346a71c96066e3a996eb4f67d83f6f8c3004c7c640979fd3f2be23c95be184307c0f728a59391127b4840f5d304129961837e8e1a3e05d60842f98586ceaec4b7dc07d61b315cf48c3a480dcfb41d6d11f5f6a770d74239a60823f01dc7152b8bd59e0fd685943a79f3b09819ccbfaf09196c7d0c857714d76f22b881a9fcfd7b03346d1ff8ff46ae9aed656e03cd217e4b2c6feb20d483d6339da873c69f71120d53c538d3d8055c15ace8e2b0a1a89a90843d4f0f9"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0xf7, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x9, 0x1}}]}}, {{0x9, 0x4, 0xdc, 0x81, 0xe, 0x55, 0x58, 0x3d, 0xff, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8eab"}, {0x5, 0x24, 0x0, 0x57}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x5, 0x5, 0xf}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @mdlm={0x15}, @mbim={0xc, 0x24, 0x1b, 0x1, 0xfbf1, 0x1, 0x7, 0x6, 0x10}]}], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x1, 0x7, 0xf4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xc}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xd, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x86}, @generic={0x97, 0xb, "0a5f4c92511eb636c8b24ba73bdb7b5789c71cbea1da9d5af0357028e4522afa387409e5e629ef5838ced8efda643f2d08a1e9d35c391d35510ca5f05bf72c9cd5f107633c2ad8f3a6a98e038405898789f191e258d795a9a73f4336bed27131dae9402cb73ebeeced963121c518d630dafc4e63604ebc84ee3182bd33f39269b1e1a975dab8ed7367e864dbca2212fcd049e78fdd"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x80, 0x2, 0x7, [@generic={0x7b, 0xc, "52f3d9520f55c5681447202f0a894600e63a7c32ae9773b391fddc8722421b0f718ac59daba1cc60695cff19f89973f5985bedeeb86172696963cf19fe3f5469b0fca8fea5d326e4292dd3847ba7cfe4bee747ef34301cd13014e9c36c2d28f33a65470bb32b8bcf981c4d95448709c78c5064b6690eadff72"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x40, 0x80, 0x3}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x1a, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4b, 0x10}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x0, 0xf7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xcd, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x4}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x4, 0x67, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x580}, @generic={0xa9, 0x3, "d1009102b34900016e9e7b8cc8bf364b1872691cdb9b8f149afc8b35f2ab1816139bc0c022121a33ab0ec80c01410cf027f36800a7f4485f8a820b916857120fc7f306946e1c51f5621bb7eabd173c5b7bccc4283434ab44796391f83d1f1fc5ae4340e72f124516bcd9455411e7f6ee34bd96bd9271f22c16bda009b5c67523705bb07d4313c33da5e8088fc0f3cbb474403aa01568ce300609b9690c840630df2c1a647d08e7"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x38, 0x80, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa0, 0xa}]}}, {{0x9, 0x5, 0x5, 0x0, 0x248, 0xe, 0x9, 0x3, [@generic={0xde, 0x145ee45fcfd3a0ec, "c6bf414ddbc2e37f49ca195d650694db8240c4b3fb885a25e6d79a97a51d8fa134affc308cf759fec9992f0a03234b40751a8618ea8375236bc21ffddf352819e95b5ce3c3063021c54f09aabe357c84bdbc1babc58741fc5502bec9bf27718f66fff462229ed07aff331c12359a9e10f136f1ddf3d435b1ecedbc4c6fe25162268fcf7ff062b695ed0c40754ca75a56ca1dce29258e3b390d1a59bdc020d956b05839e5c77ff99a65399a028562c1b58c72c8b5027d515b668e140f4568839b24351395a05852dbd9743a8831e94da628974aba8a44ba79e1867e4b"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x0, 0x57, 0xf5, [@generic={0x49, 0x11, "5c328d73b3429fd82cfb073a0133ef1b6da2c2a8ab49aa8f2bbfdd3c8a66860a81e84ec53c7d0ace5187e9b306eef265a4302f00c8319932646b421d41071d3a62ea84e3c1e64e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x7}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x33, 0xf, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xd12}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xe, 0x0, 0x81, [@generic={0x32, 0x22, "03111cf7db5fd629fe6f8958e492dd460c371a2cd343fcc8c2729571529aa888865c8f56d916236ebbb5ef7112c03836"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x80, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x6}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x201, 0x7, 0x40, 0x9, 0xff, 0x2}, 0xfb, &(0x7f0000000a80)={0x5, 0xf, 0xfb, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "4600cda153fa62d2649536aeea02eab2"}, @ssp_cap={0x14, 0x10, 0xa, 0xc, 0x2, 0xbbb, 0xf0f, 0x1, [0xf, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "11f029c6b5b6c9857d68fafad21c2f93"}, @generic={0xa5, 0x10, 0x4, "2735ab44741778ea670b77670219e4e0fd76a7e3ffbb8db754734387aadec68bb5047665250829ee678ee54aa16c2257feaca38cab5768a85fb340af13fcebedb55054abacc3bd9872951aaec7ed21dab9daaa32c9d774430a25b78c6aa2334e7272deee85b478fb81bf9abbb5492b4bea837ff6859617ea80c50c6671bcff8d3401cb318bc00c6d0f54f6c975c379d9d3170b75e0c0adbf296512ed08d65e0378c6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x9, 0x5, 0x37}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xa, 0x4, 0x1}]}, 0x1, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x446}}]}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000000)) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x301) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002207000000b34bfc01f715"], 0x0}, 0x0) 237.805152ms ago: executing program 9 (id=595): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x1000) (async) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x2100014, &(0x7f0000002380)={[{@userxattr, 0x0}], [{@euid_lt={'euid<', r1}}, {@obj_type={'obj_type', 0x3d, 'userxattr'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@dont_hash}, {@uid_lt={'uid<', r1}}], 0x2c}) 160.004424ms ago: executing program 9 (id=596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0xea, 0x8}, [@NDA_DST_MAC={0xa}, @NDA_PROTOCOL={0x5, 0xc, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x4, 0x2}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}, {0x0, [0x30, 0xe, 0x61]}}, 0x0, 0x49}, 0x28) fcntl$setlease(r4, 0x400, 0x0) mknod(&(0x7f0000000180)='./file1\x00', 0xc000, 0x9f6b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000119500000000000000360a000000000000180900002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r7 = getpid() fcntl$setownex(r6, 0xf, &(0x7f00000000c0)={0x2, r7}) setpriority(0x0, r2, 0x8e74) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000001c0)=0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000240)) fcntl$setown(r4, 0x8, r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r10, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000300)="d2ff03076003008cb89e08f086ddeff9be34b6dae4a93a276032b785807d48097d74bddc47527f7f", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r11, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x1d39, 0x5, 0x4, 0x3}, {0xa, 0x1, 0xe, 0x0, 0x8}]}) 156.376955ms ago: executing program 3 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x80000080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa0000000000007100"/24], &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4c20, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4ea0, @multicast2}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x437, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10c8d}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5241}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 94.848206ms ago: executing program 9 (id=598): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newtclass={0xa8, 0x28, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xe, 0xb}, {0x1, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xcd, 0x7}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x54, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x7, 0x7, 0x5a7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0xc0, 0xa}}, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0x2, 0x10001}}, @TCA_HFSC_FSC={0x10, 0x2, {0xffe0000, 0x6, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0xf105, 0x85a, 0x9}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}]}, 0xa8}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x24, 0x64, 0xf31, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff3, 0xffff}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) 69.854607ms ago: executing program 9 (id=599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x2f8], 0x0, 0x41981}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xbe9bac6d2d0f4e0b) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0xbe9bac6d2d0f4e0b) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x60, 0xd, 0x6, "743f7511ce30"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000321, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 516.72µs ago: executing program 3 (id=600): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) timer_create(0x3, &(0x7f0000000640)={0x0, 0xa, 0x4, @thr={&(0x7f0000000140)="8c6575b9b6f8e68cd10cc8e1e5f034dd677c93104c570745f07636c4c47e6ff707cca0e877e329e459b38ae57c4bed4d8b5fb2469ed75ce56189d992eac8cb1ce896595edefe50febf8e6e2d9bab1306b36260db0a006305ea2cf3cc0e8e904fa461dc3e7131683b34dbb0f9ed2f70471f4e7aec0de6b9cce0d6d4063ab2e2517ee2fd96769b7de4374d9e8ee8b5d4ec1e6be5c5d0b9f458836fee25d761c3361b48b3117b83b401f4c8547bd47dcea7deb34f2abc", &(0x7f0000000540)="add5acac18eb0c58a8b646be259f4fef9537b631ad3986c7721058527fac5b6feee862cd6f71b1b68cca34967fb8a0ed1598cb1ebbb87393f302815cf98e5c25e0f3db8dcf1f818b23ad951ff389bc1d2e992a3a5e0fff86842a587468380698ce7ba27d2cc39c4434c91dadfa997eaaa74643b02c58e5808f9cb020e64fa97d95305a7897847b7d43660d664dec44cf122ea0134ea41efa3e8fc914e6334862b5b13c0664450510818644f7d409cb07974ec7e3aec657d529825dacf3360540a46b40a8c41386fb986cdd355fbaa2872b2c112db9db644522d2bd"}}, &(0x7f0000000680)) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0x7}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) getrlimit(0x0, &(0x7f0000000300)) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20001, 0xcb) io_setup(0x4fe, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r6, &(0x7f0000000200)='o', 0x1, 0x8}]) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000800, 0x4}, {0x0, 0x4, 0x0, 0x4}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x4}}, 0xe8) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="005ce81e78b86b785118ce070000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000038004100000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b5090000ff0100007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018260000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000044000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) setpriority(0x1, 0xff, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001c40)=ANY=[@ANYBLOB="200000006800e97800000000000000000a000000000000000800", @ANYRES64=r4], 0x20}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585"], 0x0) kernel console output (not intermixed with test programs): ialNumber=0 [ 33.378486][ T307] usb 2-1: Product: syz [ 33.391880][ T307] usb 2-1: Manufacturer: syz [ 33.400071][ T664] exfat: Deprecated parameter 'namecase' [ 33.409642][ T664] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 33.411962][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.431167][ T667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 33.440149][ T667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 33.450080][ T307] hub 2-1:4.0: USB hub found [ 33.469201][ T672] tipc: Started in network mode [ 33.474191][ T672] tipc: Own node identity 628938971af6, cluster identity 4711 [ 33.481866][ T672] tipc: Enabled bearer , priority 0 [ 33.502537][ T672] device syzkaller0 entered promiscuous mode [ 33.644050][ T677] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 33.653978][ T677] EXT4-fs error (device loop2): ext4_get_journal_inode:5247: inode #32: comm syz.2.98: iget: special inode unallocated [ 33.666670][ T677] EXT4-fs (loop2): no journal found [ 33.672056][ T677] EXT4-fs (loop2): can't get journal size [ 33.678555][ T677] EXT4-fs (loop2): filesystem is read-only [ 33.684564][ T677] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,noblock_validity,noblock_validity,grpjquota=,,errors=continue [ 33.750442][ T307] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 33.800488][ T25] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 33.808861][ T682] EXT4-fs (loop2): Unrecognized mount option "hash" or missing value [ 34.247009][ T25] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 34.247032][ T307] usb 2-1: USB disconnect, device number 4 [ 34.255322][ T25] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 34.255339][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.336689][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 34.619862][ T20] tipc: 32-bit node address hash set to 97387f78 [ 34.720439][ T25] usb 6-1: string descriptor 0 read error: -22 [ 34.726695][ T25] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 34.735997][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.749068][ T25] usb 6-1: config 0 descriptor?? [ 34.790745][ T25] hub 6-1:0.0: bad descriptor, ignoring hub [ 34.796718][ T25] hub: probe of 6-1:0.0 failed with error -5 [ 34.883097][ T699] xt_hashlimit: size too large, truncated to 1048576 [ 34.995436][ T671] tipc: Resetting bearer [ 35.020187][ T671] tipc: Disabling bearer [ 35.110606][ T284] usb 6-1: USB disconnect, device number 4 [ 35.430441][ T284] Bluetooth: hci0: command 0x1003 tx timeout [ 35.436532][ T670] Bluetooth: hci0: sending frame failed (-49) [ 35.508459][ T711] netlink: 456 bytes leftover after parsing attributes in process `syz.2.108'. [ 35.538001][ T711] device syzkaller0 entered promiscuous mode [ 35.572801][ T711] kvm: emulating exchange as write [ 35.684406][ T714] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.701068][ T714] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 35.709850][ T714] EXT4-fs (loop5): 1 truncate cleaned up [ 35.715892][ T714] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=." [ 35.732628][ T714] EXT4-fs error (device loop5): ext4_find_dest_de:2079: inode #2: block 13: comm syz.5.109: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 35.752282][ T714] EXT4-fs (loop5): Remounting filesystem read-only [ 35.765142][ T722] netlink: 'syz.1.112': attribute type 4 has an invalid length. [ 35.776581][ T722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 35.786202][ T722] netlink: 'syz.1.112': attribute type 4 has an invalid length. [ 35.801050][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.808252][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.834453][ T724] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 35.850627][ T307] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.966239][ T732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.116'. [ 35.999316][ T734] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.115'. [ 36.008601][ T728] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.115'. [ 36.018016][ T732] exfat: Deprecated parameter 'namecase' [ 36.024757][ T732] exfat: Bad value for 'namecase' [ 36.110384][ T307] usb 3-1: Using ep0 maxpacket: 8 [ 36.241114][ T737] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 36.248998][ T737] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 36.251867][ T748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 36.258014][ T737] F2FS-fs (loop5): invalid crc value [ 36.270448][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.282649][ T749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.119'. [ 36.301850][ T748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'. [ 36.315801][ T737] F2FS-fs (loop5): Found nat_bits in checkpoint [ 36.350527][ T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.365827][ T307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.375426][ T307] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 76, using maximum allowed: 30 [ 36.386539][ T307] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 76 [ 36.411303][ T737] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 36.418458][ T737] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 37.010450][ T307] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 37.019877][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.028428][ T307] usb 3-1: Product: syz [ 37.033078][ T307] usb 3-1: Manufacturer: syz [ 37.037747][ T307] usb 3-1: SerialNumber: syz [ 37.332251][ T307] usb 3-1: USB disconnect, device number 8 [ 37.400825][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 37.400846][ T24] audit: type=1400 audit(1780836691.920:261): avc: denied { create } for pid=761 comm="syz.3.122" dev="anon_inodefs" ino=17744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.432676][ T24] audit: type=1400 audit(1780836691.950:262): avc: denied { ioctl } for pid=761 comm="syz.3.122" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17744 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.483567][ T763] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 37.525664][ T759] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 37.533461][ T759] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 37.541732][ T759] F2FS-fs (loop1): Unrecognized mount option "prjquota={:$}!^*/&!+vÅ‘îÿëJÚ­~òð [ 37.541732][ T759] 4ÝJFÌ—WÁ³Ñc£$ê[_ÿÕ¹˜" or missing value [ 37.564712][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 37.570857][ T670] Bluetooth: hci0: sending frame failed (-49) [ 37.580952][ T764] overlayfs: './file0' not a directory [ 37.841809][ T782] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 143300) [ 37.970488][ T24] audit: type=1400 audit(1780836692.490:263): avc: denied { unmount } for pid=382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.026072][ T24] audit: type=1400 audit(1780836692.540:264): avc: denied { block_suspend } for pid=794 comm="syz.1.132" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.067368][ T24] audit: type=1400 audit(1780836692.580:265): avc: denied { read } for pid=796 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.101223][ T800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 38.113303][ T24] audit: type=1400 audit(1780836692.630:266): avc: denied { create } for pid=799 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 38.152971][ T802] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,journal_dev=0x0000000000000001,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,errors=remount-ro, [ 38.174055][ T802] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.186333][ T24] audit: type=1400 audit(1780836692.700:267): avc: denied { write } for pid=801 comm="syz.2.135" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.188987][ T802] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: comm syz.2.135: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.221947][ T802] EXT4-fs (loop2): Remounting filesystem read-only [ 38.234071][ T24] audit: type=1400 audit(1780836692.750:268): avc: denied { execute } for pid=801 comm="syz.2.135" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.234159][ T802] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: comm syz.2.135: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.256286][ T24] audit: type=1400 audit(1780836692.750:269): avc: denied { execute_no_trans } for pid=801 comm="syz.2.135" path="/13/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.370380][ T284] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 38.440091][ T812] xt_CONNSECMARK: invalid mode: 66 [ 38.445594][ T24] audit: type=1400 audit(1780836692.960:270): avc: denied { nlmsg_read } for pid=801 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.470366][ T20] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.730420][ T284] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.740863][ T284] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.830476][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.841716][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.851499][ T20] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 38.860652][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.869399][ T20] usb 2-1: config 0 descriptor?? [ 38.900446][ T284] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 38.909626][ T284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.918458][ T284] usb 6-1: Product: syz [ 38.922773][ T284] usb 6-1: Manufacturer: syz [ 38.927364][ T284] usb 6-1: SerialNumber: syz [ 39.590398][ T25] Bluetooth: hci0: command 0x1009 tx timeout [ 39.831720][ T829] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 39.840864][ T829] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.000056][ T282] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 40.008094][ T282] FAT-fs (loop2): Filesystem has been set read-only [ 40.092220][ T840] netlink: 'syz.2.143': attribute type 3 has an invalid length. [ 41.003112][ T848] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda20322b, utbl_chksum : 0xe619d30d) [ 41.015352][ T848] exFAT-fs (loop2): failed to load alloc-bitmap [ 41.021746][ T848] exFAT-fs (loop2): failed to recognize exfat type [ 41.147428][ T848] EXT4-fs (loop2): Unrecognized mount option "hash" or missing value [ 41.156050][ T853] EXT4-fs warning (device loop5): ext4_fill_super:4104: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 41.162794][ T608] udevd[608]: incorrect ext4 checksum on /dev/loop5 [ 41.169383][ T853] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 41.176153][ T284] usb 6-1: unknown interface protocol 0x72, assuming v1 [ 41.192959][ T284] usb 6-1: invalid UAC_HEADER (v1) [ 41.198260][ T284] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 41.206498][ T284] usb 6-1: USB disconnect, device number 5 [ 41.230476][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 41.236861][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 41.246151][ T20] usb 2-1: USB disconnect, device number 5 [ 41.464791][ T859] EXT4-fs (loop5): Test dummy encryption mode enabled [ 41.471879][ T859] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 41.483777][ T859] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.148: bad orphan inode 131083 [ 41.494570][ T859] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue [ 41.533440][ T863] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 41.802693][ T868] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.149: inode #1: comm syz.5.149: iget: illegal inode # [ 41.816048][ T868] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.149: error while reading EA inode 1 err=-117 [ 41.828433][ T868] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2797: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.841858][ T868] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.149: inode #1: comm syz.5.149: iget: illegal inode # [ 41.855058][ T868] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.149: error while reading EA inode 1 err=-117 [ 41.868557][ T868] EXT4-fs (loop5): 1 orphan inode deleted [ 41.874374][ T868] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue [ 42.001122][ T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 42.240436][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 42.245571][ T284] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 42.245579][ T54] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.460488][ T20] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 42.471663][ T20] usb 2-1: config 1 interface 0 has no altsetting 0 [ 42.500393][ T284] usb 6-1: Using ep0 maxpacket: 8 [ 42.601853][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 42.601864][ T24] audit: type=1326 audit(1780836697.120:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=904 comm="syz.3.164" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a772c9e59 code=0x0 [ 42.650496][ T284] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 42.659580][ T284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.667702][ T20] usb 2-1: New USB device found, idVendor=0483, idProduct=3261, bcdDevice= 0.40 [ 42.676812][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.680417][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.684841][ T24] audit: type=1400 audit(1780836697.190:283): avc: denied { map } for pid=904 comm="syz.3.164" path="socket:[18126]" dev="sockfs" ino=18126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.700461][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.718924][ T20] usb 2-1: Product: î§ë›£î£¬æ¨áž ê´ŽèŠ»å”¡ç±šæ«²á‚¿ä­„â½…ë…¤ç‡ä¼ˆå´µâ”®ã¦áª¤é‡¨ë‡“町抺ٚ匶顈⭚陓펟藺ç¡ç¹«âˆ›ê¢½êŒšê­žï‚Žà¡–앒鯚ï¢ä¥„꺃暈ﴡማ⯛痄䜹庡歖꧌㱔䰂痤컄ïºë»½ï¥Šì½¡ß´å¸Œï©‚粌觉㎱걓낄滗î®åª‰â¯¤à½ìµ¶ä£•ฃ툥פֿ譶á¸à¨§ä”®é¾¯ì®•씋ั祥狽৯멌㧠 [ 42.728498][ T54] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.760822][ T284] usb 6-1: config 0 descriptor?? [ 42.770720][ T54] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.784804][ T24] audit: type=1400 audit(1780836697.210:284): avc: denied { read accept } for pid=904 comm="syz.3.164" path="socket:[18126]" dev="sockfs" ino=18126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.808363][ T20] usb 2-1: Manufacturer: é¹³á㡕婻긴ˣ试춨俸죸åŒî°¨ï²¶í‡˜æ»†é§Í¿à¸œé‹šè±­î‚‹É†é­™æ½–鄞⌊葼憡슒â‡ä€¸å”˜ã›êº¢é•«è†¨ëœ…⹶늎椿稬애íˆé«µã ˜íˆ¢ã‰µé…ƒçƒ å‡´ã³·î¾›â˜šæ´§è¦çœ°ç¯™ç…‹á«¿æ³—᜻绛炾ꀦæ³å™‰äž¥ï‚ˆã¯ªåº¾å«‰æ•ë±µå²äŠî‡·ì¿ˆì¢ ï´±â·™ï¯‡ [ 42.808452][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.835444][ T20] usb 2-1: SerialNumber: êœâ®ë„“ႊ픑귊䮓à ê„垟봪藛算ꅜç§îŠ‘á–èœç™‹è¢¶î¥Žà¼¸é£¨áš³à¤Šà·©ç­šê€—⎄湴ïŸäˆ‹ê¿— [ 42.845784][ T54] usb 3-1: config 0 descriptor?? [ 43.070528][ T284] usb 6-1: string descriptor 0 read error: -71 [ 43.076776][ T284] uvcvideo: Found UVC 0.00 device (2833:0201) [ 43.083781][ T284] uvcvideo: No valid video chain found. [ 43.090911][ T284] usb 6-1: USB disconnect, device number 6 [ 43.331490][ T54] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 43.341973][ T54] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 43.446590][ T24] audit: type=1400 audit(1780836697.960:285): avc: denied { nlmsg_read } for pid=910 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 43.481594][ T284] kernel write not supported for file [eventfd] (pid: 284 comm: kworker/1:2) [ 43.774570][ T939] erofs: (device loop5): mounted with root inode @ nid 36. [ 43.793466][ T942] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 43.822052][ T941] udc-core: couldn't find an available UDC or it's busy [ 43.829034][ T941] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.854572][ T937] ------------[ cut here ]------------ [ 43.871029][ T937] WARNING: CPU: 0 PID: 937 at fs/iomap/direct-io.c:451 __iomap_dio_rw+0xdde/0x1120 [ 43.887750][ T893] udc-core: couldn't find an available UDC or it's busy [ 43.895100][ T937] Modules linked in: [ 43.899023][ T937] CPU: 0 PID: 937 Comm: syz.5.172 Not tainted syzkaller #0 [ 43.908442][ T893] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.917675][ T937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 43.928059][ T937] RIP: 0010:__iomap_dio_rw+0xdde/0x1120 [ 43.933814][ T937] Code: 78 19 e8 25 71 a3 ff 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 18 e9 96 f9 ff ff e8 0c 71 a3 ff e9 cc f8 ff ff e8 02 71 a3 ff <0f> 0b 48 c7 c3 fb ff ff ff e9 d6 f8 ff ff e8 6f 72 bc 02 44 89 f9 [ 43.953633][ T937] RSP: 0018:ffffc900011f7700 EFLAGS: 00010293 [ 43.959829][ T937] RAX: ffffffff81c154ce RBX: ffffc900011f7a40 RCX: ffff8881125662c0 [ 43.968193][ T937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900011f7848 [ 43.976600][ T937] RBP: ffffc900011f78d8 R08: ffffc900011f7847 R09: ffffc900011f7820 [ 43.984754][ T937] R10: dffffc0000000000 R11: fffff5200023ef09 R12: 0000000000010000 [ 43.999660][ T937] R13: 1ffff9200023ef00 R14: dffffc0000000000 R15: 0000000000000000 [ 44.011343][ T937] FS: 00007fd1ed1e66c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 44.023626][ T937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.031150][ T937] CR2: 00007f8a78075060 CR3: 000000010f408000 CR4: 00000000003526b0 [ 44.039438][ T937] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.047729][ T937] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.056311][ T937] Call Trace: [ 44.059690][ T937] ? stack_trace_save+0xa6/0xf0 [ 44.064895][ T937] ? __kasan_slab_alloc+0x69/0xf0 [ 44.070175][ T24] audit: type=1400 audit(1780836698.580:286): avc: denied { write } for pid=952 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 44.089321][ T937] ? _raw_spin_unlock_irq+0x4e/0x70 [ 44.103714][ T937] ? alloc_pipe_info+0x1fc/0x4b0 [ 44.108837][ T937] ? iomap_dio_complete+0x6a0/0x6a0 [ 44.114437][ T937] ? __kmalloc+0x1a4/0x330 [ 44.118990][ T937] ? do_syscall_64+0x31/0x40 [ 44.124137][ T937] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.130851][ T937] ? iov_iter_alignment+0x4e4/0x660 [ 44.136151][ T937] iomap_dio_rw+0x35/0x80 [ 44.140790][ T937] erofs_file_read_iter+0x27c/0x2f0 [ 44.146070][ T937] generic_file_splice_read+0x3ec/0x5f0 [ 44.152367][ T937] ? splice_shrink_spd+0xb0/0xb0 [ 44.157479][ T937] ? fsnotify_perm+0x2fa/0x4b0 [ 44.162872][ T937] ? security_file_permission+0x83/0xa0 [ 44.168487][ T937] ? rw_verify_area+0x1c0/0x360 [ 44.174047][ T937] splice_direct_to_actor+0x40a/0xb30 [ 44.179809][ T24] audit: type=1400 audit(1780836698.690:287): avc: denied { create } for pid=954 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.180693][ T937] ? do_splice_direct+0x2d0/0x2d0 [ 44.204599][ T937] ? pipe_to_sendpage+0x320/0x320 [ 44.210837][ T937] ? rw_verify_area+0x1c0/0x360 [ 44.216391][ T937] do_splice_direct+0x1c2/0x2d0 [ 44.228944][ T937] ? do_splice_to+0x180/0x180 [ 44.233885][ T937] ? fsnotify_perm+0x66/0x4b0 [ 44.238811][ T937] ? security_file_permission+0x83/0xa0 [ 44.245173][ T937] do_sendfile+0x8df/0x1040 [ 44.250670][ T937] ? do_preadv+0x390/0x390 [ 44.255909][ T937] ? __kasan_check_write+0x14/0x20 [ 44.261755][ T937] ? switch_fpu_return+0x19c/0x330 [ 44.268323][ T937] __x64_sys_sendfile64+0x199/0x1f0 [ 44.275140][ T937] ? __ia32_sys_sendfile+0x190/0x190 [ 44.281433][ T937] ? __kasan_check_read+0x11/0x20 [ 44.286608][ T937] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 44.292458][ T937] do_syscall_64+0x31/0x40 [ 44.300868][ T937] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.306914][ T937] RIP: 0033:0x7fd1ee78be59 [ 44.311699][ T937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.333856][ T937] RSP: 002b:00007fd1ed1e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 44.347844][ T937] RAX: ffffffffffffffda RBX: 00007fd1eea04fa0 RCX: 00007fd1ee78be59 [ 44.357248][ T937] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 44.365717][ T937] RBP: 00007fd1ee821d6f R08: 0000000000000000 R09: 0000000000000000 [ 44.374380][ T937] R10: 00000010578410eb R11: 0000000000000246 R12: 0000000000000000 [ 44.382956][ T937] R13: 00007fd1eea05038 R14: 00007fd1eea04fa0 R15: 00007fff390b7668 [ 44.391127][ T937] ---[ end trace eef4fd94d135f857 ]--- [ 44.400729][ T960] exfat: Deprecated parameter 'namecase' [ 44.481766][ T24] audit: type=1400 audit(1780836699.000:288): avc: denied { create } for pid=962 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.515057][ T960] exFAT-fs (loop1): error, invalid access to FAT bad cluster (entry 0x00000005) [ 44.530419][ T20] usbhid 2-1:1.0: can't add hid device: -71 [ 44.534183][ T960] exFAT-fs (loop1): Filesystem has been set read-only [ 44.537642][ T20] usbhid: probe of 2-1:1.0 failed with error -71 [ 44.543968][ T960] exFAT-fs (loop1): failed to load upcase table [ 44.574221][ T960] exFAT-fs (loop1): failed to recognize exfat type [ 44.574241][ T20] usb 2-1: USB disconnect, device number 6 [ 44.622874][ T971] xt_hashlimit: size too large, truncated to 1048576 [ 44.740384][ C0] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 44.789363][ T976] netlink: 32 bytes leftover after parsing attributes in process `syz.5.180'. [ 44.812909][ T976] tc_dump_action: action bad kind [ 44.829088][ T976] netlink: 40 bytes leftover after parsing attributes in process `syz.5.180'. [ 44.949549][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 44.990437][ T284] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 45.023870][ T982] 9pnet: p9_fd_create_tcp (982): problem binding to privport [ 45.240350][ T284] usb 1-1: Using ep0 maxpacket: 16 [ 45.370463][ T284] usb 1-1: config 9 has an invalid descriptor of length 19, skipping remainder of the config [ 45.381404][ T284] usb 1-1: config 9 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 45.395179][ T284] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 45.413663][ T998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.188'. [ 45.422972][ T284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.443531][ T24] audit: type=1400 audit(1780836699.960:289): avc: denied { map } for pid=1003 comm="syz.2.190" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.467123][ T306] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.481117][ T284] usbhid 1-1:9.0: couldn't find an input interrupt endpoint [ 45.580608][ T25] usb 3-1: USB disconnect, device number 9 [ 45.680435][ T564] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 45.730398][ T306] usb 2-1: Using ep0 maxpacket: 16 [ 45.860559][ T306] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 45.868926][ T306] usb 2-1: config 0 has no interface number 0 [ 45.875068][ T306] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 45.885121][ T306] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 45.890878][ T1017] IPv6: NLM_F_REPLACE set, but no existing node found! [ 45.961450][ T1019] usb usb8: usbfs: process 1019 (syz.2.195) did not claim interface 0 before use [ 46.050498][ T306] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 46.059757][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.068001][ T306] usb 2-1: Product: syz [ 46.070409][ T564] usb 6-1: No LPM exit latency info found, disabling LPM. [ 46.072235][ T306] usb 2-1: Manufacturer: syz [ 46.083932][ T306] usb 2-1: SerialNumber: syz [ 46.093036][ T306] usb 2-1: config 0 descriptor?? [ 46.110429][ T996] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 46.117437][ T996] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 46.170463][ T564] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 46.240419][ T25] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 46.330782][ T996] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 46.350696][ T24] audit: type=1400 audit(1780836700.870:290): avc: denied { read write } for pid=1023 comm="syz.1.196" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 46.374419][ T24] audit: type=1400 audit(1780836700.870:291): avc: denied { open } for pid=1023 comm="syz.1.196" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 46.380562][ T306] asix: probe of 2-1:0.34 failed with error -71 [ 46.409338][ T306] usb 2-1: USB disconnect, device number 7 [ 46.470439][ T564] usb 6-1: string descriptor 0 read error: -22 [ 46.476862][ T564] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 46.486190][ T564] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.531321][ T564] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 46.541405][ T1028] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.690417][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 46.730444][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 46.730781][ T1001] udc-core: couldn't find an available UDC or it's busy [ 46.747544][ T1001] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 46.765783][ T564] usb 6-1: USB disconnect, device number 7 [ 46.810423][ T25] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 46.818900][ T25] usb 3-1: config 0 has no interface number 0 [ 46.825398][ T25] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 46.836719][ T25] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 46.846730][ T25] usb 3-1: config 0 interface 88 has no altsetting 0 [ 46.855955][ T1052] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,sysvgroups,,errors=continue [ 46.875539][ T1048] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 46.883900][ T1052] EXT4-fs error (device loop5): ext4_get_first_dir_block:3730: inode #12: comm syz.5.204: directory missing '..' [ 46.892693][ T1048] EXT4-fs error (device loop1): ext4_empty_dir:3092: inode #12: block 80: comm syz.1.201: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 46.916107][ T1048] EXT4-fs warning (device loop1): ext4_empty_dir:3094: inode #12: comm syz.1.201: directory missing '..' [ 48.023392][ T284] usb 1-1: USB disconnect, device number 5 [ 48.035028][ T1064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 48.044039][ T25] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 48.057893][ T25] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 48.067206][ T25] usb 3-1: Product: syz [ 48.073430][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 48.073441][ T24] audit: type=1400 audit(1780836702.590:302): avc: denied { read } for pid=1063 comm="syz.3.206" path="socket:[17131]" dev="sockfs" ino=17131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.104423][ T25] usb 3-1: SerialNumber: syz [ 48.113840][ T25] usb 3-1: config 0 descriptor?? [ 48.161640][ T24] audit: type=1326 audit(1780836702.680:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1069 comm="syz.0.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d372e59 code=0x7ffc0000 [ 48.190415][ T24] audit: type=1326 audit(1780836702.700:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1069 comm="syz.0.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f276d372e59 code=0x7ffc0000 [ 48.215440][ T24] audit: type=1326 audit(1780836702.700:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1069 comm="syz.0.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d372e59 code=0x7ffc0000 [ 48.243819][ T24] audit: type=1326 audit(1780836702.700:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1069 comm="syz.0.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f276d33368e code=0x7ffc0000 [ 48.269132][ T24] audit: type=1326 audit(1780836702.700:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1069 comm="syz.0.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f276d33368e code=0x7ffc0000 [ 48.294608][ T24] audit: type=1326 audit(1780836702.700:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1069 comm="syz.0.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d372e59 code=0x7ffc0000 [ 48.320116][ T24] audit: type=1326 audit(1780836702.700:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1069 comm="syz.0.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276d372e59 code=0x7ffc0000 [ 48.345614][ T24] audit: type=1326 audit(1780836702.700:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1069 comm="syz.0.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d372e59 code=0x7ffc0000 [ 48.350404][ T564] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 48.373721][ T1077] EXT4-fs (loop0): invalid first ino: 0 [ 48.421041][ T1082] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 48.432008][ T1082] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 48.451068][ T25] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input5 [ 48.460567][ T24] audit: type=1400 audit(1780836702.980:311): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=637 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.465167][ T25] usb 3-1: USB disconnect, device number 10 [ 48.491042][ T1082] EXT4-fs (loop5): shut down requested (0) [ 48.500899][ T1077] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.516880][ T908] udevd[908]: Error opening device "/dev/input/event3": Input/output error [ 48.517322][ T1077] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (80000) [ 48.525763][ T908] udevd[908]: Unable to EVIOCGABS device "/dev/input/event3" [ 48.543728][ T908] udevd[908]: Unable to EVIOCGABS device "/dev/input/event3" [ 48.767166][ T1095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.215'. [ 48.776266][ T1095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.215'. [ 48.790486][ T564] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 48.798840][ T564] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 48.807993][ T564] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 48.818790][ T564] usb 2-1: config 8 has no interface number 0 [ 48.825424][ T564] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 48.940478][ T306] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 48.990440][ T564] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 48.999576][ T564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.007618][ T564] usb 2-1: Product: syz [ 49.011833][ T564] usb 2-1: Manufacturer: syz [ 49.016430][ T564] usb 2-1: SerialNumber: syz [ 49.170406][ T357] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 49.191056][ T306] usb 1-1: Using ep0 maxpacket: 32 [ 49.294707][ T564] usb 2-1: USB disconnect, device number 8 [ 49.310468][ T306] usb 1-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 49.321218][ T306] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 174, changing to 7 [ 49.333949][ T306] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.500437][ T306] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 49.509652][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.517668][ T306] usb 1-1: Product: syz [ 49.521927][ T306] usb 1-1: Manufacturer: syz [ 49.526516][ T306] usb 1-1: SerialNumber: syz [ 49.580459][ T357] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 49.584035][ T1100] FAT-fs (loop5): Unrecognized mount option "&sczntext=root" or missing value [ 49.591693][ T357] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 49.611589][ T357] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 49.624801][ T357] usb 3-1: config 0 interface 0 has no altsetting 0 [ 49.631619][ T357] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 49.641381][ T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.650768][ T357] usb 3-1: config 0 descriptor?? [ 49.670412][ T1097] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 49.881947][ T1122] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 49.893064][ T1122] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.919721][ T279] EXT4-fs error (device loop1): ext4_lookup:1830: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 49.932989][ T279] EXT4-fs error (device loop1): ext4_lookup:1830: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 50.111309][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.119022][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.126697][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.127537][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.134264][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.141358][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.148716][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.155973][ T1128] device bridge_slave_0 entered promiscuous mode [ 50.163089][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.169870][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.176836][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.183785][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.191343][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.198481][ T1128] device bridge_slave_1 entered promiscuous mode [ 50.205576][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.219378][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.226926][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.234519][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.242030][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.249451][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.257036][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.257120][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.264635][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.271413][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.271482][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.279177][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.286053][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.293377][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.315283][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.319623][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.323704][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.337288][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.344639][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.352015][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.359320][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.366685][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.374048][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.381386][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.388706][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.396228][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.403866][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.411222][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.418546][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.426006][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.433359][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.440693][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.448189][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.455546][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.462883][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.470206][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.477558][ T357] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x0 [ 50.485397][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.485470][ T357] gt683r_led 0003:1770:FF00.0004: hidraw0: USB HID vff.81 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 50.509074][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.513986][ T1133] SELinux: policydb magic number 0x1c does not match expected magic number 0xf97cff8c [ 50.526789][ T1133] SELinux: failed to load policy [ 50.535404][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.543876][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.550964][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.583521][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.593469][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.600649][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.609202][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.620416][ T306] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 50.630751][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.650291][ T1135] ------------[ cut here ]------------ [ 50.656790][ T1135] EA inode 11 i_nlink=65535 [ 50.656881][ T1135] WARNING: CPU: 1 PID: 1135 at fs/ext4/xattr.c:1002 ext4_xattr_inode_update_ref+0x4f1/0x550 [ 50.677267][ T306] usb 1-1: USB disconnect, device number 6 [ 50.684568][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.690411][ T1135] Modules linked in: [ 50.700311][ T1135] CPU: 0 PID: 1135 Comm: syz.5.230 Tainted: G W syzkaller #0 [ 50.702202][ T1128] device veth0_vlan entered promiscuous mode [ 50.714565][ T1135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 50.720726][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.734040][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.741862][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.749361][ T1135] RIP: 0010:ext4_xattr_inode_update_ref+0x4f1/0x550 [ 50.756434][ T1135] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 90 ff bd ff 49 8b 37 48 c7 c7 60 ec 2c 85 89 da e8 3f d4 98 02 <0f> 0b 4c 8b 6c 24 10 4c 8b 7c 24 08 e9 ab fe ff ff e8 99 7a 9c 02 [ 50.777035][ T1135] RSP: 0018:ffffc900011f7020 EFLAGS: 00010246 [ 50.781385][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.783521][ T1135] RAX: 7e512a78adbff800 RBX: 000000000000ffff RCX: ffff888113270000 [ 50.796652][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.799468][ T1135] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 50.816089][ T1135] RBP: ffffc900011f7110 R08: ffff8881f7127453 R09: 1ffff1103ee24e8a [ 50.824828][ T1135] R10: dffffc0000000000 R11: ffffed103ee24e8b R12: dffffc0000000000 [ 50.833038][ T1135] R13: ffff888132889350 R14: 1ffff11026511296 R15: ffff888132889390 [ 50.841193][ T1135] FS: 00007fd1ed1e66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 50.855759][ T831] usb 3-1: USB disconnect, device number 11 [ 50.861781][ T1135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.864040][ T1128] device veth1_macvtap entered promiscuous mode [ 50.868551][ T1135] CR2: 00007f2763f1e000 CR3: 00000001192d2000 CR4: 00000000003506a0 [ 50.868567][ T1135] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.893366][ T284] gt683r_led 0003:1770:FF00.0004: failed to send set report request: -19 [ 50.897678][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.903632][ T1135] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.915122][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.918622][ T1135] Call Trace: [ 50.930090][ T1135] ? ext4_xattr_block_csum+0x560/0x560 [ 50.935891][ T1135] ? __kasan_check_write+0x14/0x20 [ 50.943504][ T1135] ? ext4_xattr_inode_iget+0x264/0x350 [ 50.951094][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.953050][ T1135] ext4_xattr_set_entry+0xef3/0x3860 [ 50.966318][ T1135] ? __kasan_check_read+0x11/0x20 [ 50.972446][ T1135] ? __ext4_handle_dirty_metadata+0x388/0x7f0 [ 50.978618][ T1135] ? __kasan_check_write+0x14/0x20 [ 50.984444][ T1135] ? ext4_xattr_block_set+0xd4d/0x2a80 [ 50.990173][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.998281][ T1135] ? ext4_xattr_ibody_set+0x360/0x360 [ 50.999393][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.007171][ T1135] ext4_xattr_ibody_set+0x122/0x360 [ 51.017418][ T1135] ext4_expand_extra_isize_ea+0xf59/0x1930 [ 51.023405][ T1135] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 51.031589][ T1135] __ext4_mark_inode_dirty+0x3cf/0x610 [ 51.037348][ T1135] ext4_evict_inode+0xea1/0x1770 [ 51.044361][ T1135] ? _raw_spin_unlock+0x4d/0x70 [ 51.050919][ T1135] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 51.057026][ T1135] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 51.069816][ T1135] evict+0x4ae/0x930 [ 51.074163][ T1135] ? mode_strip_sgid+0x160/0x160 [ 51.079183][ T1135] ? __kasan_check_write+0x14/0x20 [ 51.085843][ T1135] iput+0x638/0x7c0 [ 51.089922][ T1135] ext4_orphan_cleanup+0x96c/0xd30 [ 51.095947][ T1135] ext4_fill_super+0x865f/0x8d70 [ 51.101070][ T1135] ? ext4_mount+0x40/0x40 [ 51.105473][ T1135] ? vscnprintf+0x80/0x80 [ 51.109935][ T1135] ? set_blocksize+0x1ed/0x3b0 [ 51.126850][ T1135] ? sb_set_blocksize+0xaa/0xf0 [ 51.144159][ T1154] FAT-fs (loop2): Directory bread(block 64) failed [ 51.150837][ T1135] mount_bdev+0x28b/0x3a0 [ 51.155275][ T1135] ? ext4_mount+0x40/0x40 [ 51.159637][ T1135] ext4_mount+0x34/0x40 [ 51.164206][ T1154] FAT-fs (loop2): Directory bread(block 65) failed [ 51.170977][ T1135] legacy_get_tree+0xed/0x190 [ 51.181885][ T1135] ? ext4_chksum+0x180/0x180 [ 51.188631][ T1154] FAT-fs (loop2): Directory bread(block 66) failed [ 51.198111][ T1135] vfs_get_tree+0x89/0x260 [ 51.203613][ T1140] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.213058][ T1135] do_new_mount+0x25a/0xa20 [ 51.217651][ T1154] FAT-fs (loop2): Directory bread(block 67) failed [ 51.229474][ T1135] path_mount+0x585/0xc90 [ 51.236153][ T1154] FAT-fs (loop2): Directory bread(block 68) failed [ 51.245899][ T1135] __se_sys_mount+0x320/0x390 [ 51.256031][ T1135] ? __x64_sys_mount+0xd0/0xd0 [ 51.268244][ T1135] ? debug_smp_processor_id+0x17/0x20 [ 51.279944][ T1135] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 51.289394][ T1140] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 51.297051][ T1154] FAT-fs (loop2): Directory bread(block 69) failed [ 51.299920][ T1135] __x64_sys_mount+0xbf/0xd0 [ 51.303795][ T1154] FAT-fs (loop2): Directory bread(block 70) failed [ 51.312382][ T1135] do_syscall_64+0x31/0x40 [ 51.319387][ T1135] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.325509][ T1135] RIP: 0033:0x7fd1ee78d0ca [ 51.329961][ T1135] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.350752][ T1154] FAT-fs (loop2): Directory bread(block 71) failed [ 51.356163][ T1135] RSP: 002b:00007fd1ed1e5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.357496][ T1154] FAT-fs (loop2): Directory bread(block 72) failed [ 51.366140][ T1135] RAX: ffffffffffffffda RBX: 00007fd1ed1e5ee0 RCX: 00007fd1ee78d0ca [ 51.372806][ T1154] FAT-fs (loop2): Directory bread(block 73) failed [ 51.381211][ T1135] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 00007fd1ed1e5ea0 [ 51.394810][ T1135] RBP: 0000200000000180 R08: 00007fd1ed1e5ee0 R09: 0000000000000010 [ 51.403036][ T1135] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000040 [ 51.411063][ T1135] R13: 00007fd1ed1e5ea0 R14: 0000000000000485 R15: 000000000000002c [ 51.419117][ T1135] ---[ end trace eef4fd94d135f858 ]--- [ 51.425376][ T1135] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.230: iget: bad extra_isize 90 (inode size 256) [ 51.447743][ T1135] EXT4-fs (loop5): Remounting filesystem read-only [ 51.461264][ T1135] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.230: error while reading EA inode 18 err=-117 [ 51.471883][ T1161] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,noquota,noquota,nodioread_nolock,auto_da_alloc,grpid,,errors=continue [ 51.474365][ T1135] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.230: iget: bad extra_isize 90 (inode size 256) [ 51.504506][ T1135] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.230: error while reading EA inode 18 err=-117 [ 51.517328][ T1161] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.528775][ T1135] EXT4-fs (loop5): 1 orphan inode deleted [ 51.534696][ T1135] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,nombcache,debug_want_extra_isize=0x000000000000005a,nodelalloc,max_dir_size_kb=0x0000000000000002,nobarrier,errors=remount-ro, [ 51.583868][ T1161] EXT4-fs error (device loop6): ext4_map_blocks:742: inode #15: block 3: comm syz.6.235: lblock 3 mapped to illegal pblock 3 (length 3) [ 51.641120][ T1161] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 51.641246][ T1175] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.235: bg 0: block 112: padding at end of block bitmap is not set [ 51.653545][ T1161] EXT4-fs (loop6): This should not happen!! Data will be lost [ 51.653545][ T1161] [ 51.672239][ T1175] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 8 with error 28 [ 51.689894][ T1175] EXT4-fs (loop6): This should not happen!! Data will be lost [ 51.689894][ T1175] [ 51.716795][ T1175] EXT4-fs (loop6): Total free blocks count 0 [ 51.723038][ T1175] EXT4-fs (loop6): Free/Dirty block details [ 51.729236][ T1175] EXT4-fs (loop6): free_blocks=0 [ 51.734978][ T1175] EXT4-fs (loop6): dirty_blocks=64 [ 51.740249][ T1175] EXT4-fs (loop6): Block reservation details [ 51.754739][ T1184] xt_hashlimit: size too large, truncated to 1048576 [ 51.755988][ T1175] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 51.794366][ T1184] xt_hashlimit: max too large, truncated to 1048576 [ 51.821642][ T1187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 51.859845][ T9] device bridge_slave_1 left promiscuous mode [ 51.874877][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.032189][ T1187] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61410872 (sector = 1) [ 52.041610][ T1187] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 52.051543][ T1187] FAT-fs (loop0): Filesystem has been set read-only [ 52.147501][ T9] device bridge_slave_0 left promiscuous mode [ 52.158933][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.176342][ T1196] netlink: 'syz.2.244': attribute type 2 has an invalid length. [ 52.269722][ T1193] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,lazytime,grpjquota=, [ 52.356030][ T49] EXT4-fs error (device loop6): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 52.424532][ T1203] xt_hashlimit: max too large, truncated to 1048576 [ 52.427369][ T1197] F2FS-fs (loop0): Mismatch start address, segment0(16) cp_blkaddr(0) [ 52.457336][ T1197] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 52.469806][ T1197] F2FS-fs (loop0): invalid crc value [ 52.490476][ T306] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 52.501796][ T1197] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 52.529506][ T1197] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 52.539028][ T1197] F2FS-fs (loop0): sanity_check_inode: inode (ino=3) has corrupted i_xattr_nid: 134217728, run fsck to fix. [ 52.551069][ T1197] F2FS-fs (loop0): Failed to read root inode [ 52.590444][ T284] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 52.760514][ T357] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.840475][ T284] usb 6-1: Using ep0 maxpacket: 32 [ 52.880502][ T306] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 52.970523][ T284] usb 6-1: too many endpoints for config 1 interface 2 altsetting 0: 33, using maximum allowed: 30 [ 52.981755][ T284] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 53.050520][ T20] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 53.060572][ T306] usb 3-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 53.069670][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.077917][ T306] usb 3-1: Product: syz [ 53.082135][ T306] usb 3-1: Manufacturer: syz [ 53.086730][ T306] usb 3-1: SerialNumber: syz [ 53.150453][ T284] usb 6-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 53.150543][ T357] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.159634][ T284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.169573][ T357] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 53.177801][ T284] usb 6-1: Product: syz [ 53.186746][ T357] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.191162][ T284] usb 6-1: Manufacturer: syz [ 53.202466][ T357] usb 7-1: config 0 descriptor?? [ 53.203512][ T284] usb 6-1: SerialNumber: syz [ 53.242482][ T357] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 53.416623][ T1230] overlayfs: failed to clone upperpath [ 53.450757][ T20] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.470445][ T306] usb 3-1: Can't get UAC3 power state for id 10 [ 53.510227][ T1249] udc-core: couldn't find an available UDC or it's busy [ 53.517383][ T306] usb 3-1: BAAD HEADSET c_chmask mismatch [ 53.517460][ T1249] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 53.523182][ T20] usb 1-1: not running at top speed; connect to a high speed hub [ 53.538803][ T1251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 53.550238][ T306] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 53.564479][ T1256] tc_dump_action: action bad kind [ 53.566511][ T306] usb 3-1: USB disconnect, device number 12 [ 53.620621][ T284] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 53.637264][ T307] usb 7-1: USB disconnect, device number 2 [ 53.638318][ T284] usb 6-1: USB disconnect, device number 8 [ 53.650422][ T20] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 53.662394][ T20] usb 1-1: config 1 has an invalid descriptor of length 77, skipping remainder of the config [ 53.675983][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.700374][ T20] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.870527][ T20] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 53.880149][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.888921][ T20] usb 1-1: Product: ⬜㥜㧩ꉓé¹î°ëœºã¸¤â˜„请è«â¬–觊ᷩ螾뛷⿊♰⎜酼쨨ﱉ쉰ꗻ寨沥(စ믾ᑣ惧닿褔䊈紹⯱녪学痢쉧éŸà¶¥æµšã‘”ꔇã‰âª¶å³°á˜¦ï˜„♫莮葺ꆟê°ë˜ƒïœ±î©¼ï°áŸ‡ê©€ë¦³ì¶›å©ƒé‰›ç˜œà²œî¬² [ 53.911703][ T20] usb 1-1: Manufacturer:   [ 53.918790][ T20] usb 1-1: SerialNumber: 鷃䚌궦툯æ•过뗮æ¤ï¡¥ì¹“ï¨ã™¨à¡¹é˜‹è§·á…“䬦ꮲッ鰓賨å±å¹„囘ᅡ枲嶸뺟鮩ã³ä „᷇⼑骑繛꼈륕胕ê‰ã‰„۸苄蚻㈎柳쿙麨뿅㶶âã˜ä‰¼â¬¤ç§˜ì½æ›ï§€ï©’Ꞝ씡訙㺳â©è¶«é›¥Å ë™•ê·ç»¾á•…â² [ 54.086839][ T1261] F2FS-fs (loop6): Wrong SIT boundary, start(1536) end(2560) blocks(512) [ 54.095488][ T1261] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 54.142605][ T1261] F2FS-fs (loop6): Unrecognized mount option "qu¾%Ð ðier" or missing value [ 55.070431][ T355] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 55.250047][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 55.250060][ T24] audit: type=1400 audit(2000000001.980:340): avc: denied { mount } for pid=1305 comm="syz.5.272" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 55.251204][ T1307] SELinux: duplicate or incompatible mount options [ 55.321753][ T355] usb 3-1: Using ep0 maxpacket: 8 [ 55.370664][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.383097][ T1313] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.443935][ T1309] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,nogrpid,usrquota,noauto_da_alloc,,errors=continue [ 55.469024][ T24] audit: type=1400 audit(2000000002.200:341): avc: denied { watch } for pid=1308 comm="syz.6.273" path="/9/file0/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.492028][ T355] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 55.500142][ T355] usb 3-1: config 0 has no interface number 0 [ 55.607683][ T1321] xt_hashlimit: size too large, truncated to 1048576 [ 55.700458][ T355] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 55.709534][ T355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.717573][ T355] usb 3-1: Product: syz [ 55.721896][ T355] usb 3-1: Manufacturer: syz [ 55.726499][ T355] usb 3-1: SerialNumber: syz [ 55.735493][ T355] usb 3-1: config 0 descriptor?? [ 55.781638][ T1328] loop0: p1 < > p3 p4 < > [ 55.787913][ T1328] loop0: p3 start 4284289 is beyond EOD, truncated [ 55.830424][ T25] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 55.843054][ T20] usb 1-1: USB disconnect, device number 7 [ 55.891369][ T300] udevd[300]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 55.903980][ T309] udevd[309]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 56.034488][ T1338] erofs: (device loop0): mounted with root inode @ nid 36. [ 56.051314][ T908] udevd[908]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.053061][ T355] usb 3-1: USB disconnect, device number 13 [ 56.410401][ T25] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 56.421333][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 56.432507][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 56.445581][ T25] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 56.455111][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.491880][ T25] usb 7-1: config 0 descriptor?? [ 56.566477][ T1319] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 56.611844][ T1326] overlayfs: failed to resolve './file0': -2 [ 56.829155][ T1347] EXT4-fs (loop2): dax option not supported [ 57.012751][ T1350] EXT4-fs error (device loop0): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 57.027296][ T1350] EXT4-fs (loop0): Remounting filesystem read-only [ 57.033957][ T1350] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.285: invalid indirect mapped block 4278190080 (level 0) [ 57.048067][ T1350] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.285: invalid indirect mapped block 1 (level 1) [ 57.051773][ T1347] erofs: (device loop2): mounted with root inode @ nid 36. [ 57.068059][ T1350] EXT4-fs (loop0): 1 truncate cleaned up [ 57.072471][ T1347] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 57.079670][ T1350] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000 [ 57.121529][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 57.127683][ T25] usbhid: probe of 7-1:0.0 failed with error -71 [ 57.137097][ T25] usb 7-1: USB disconnect, device number 3 [ 57.262566][ T24] audit: type=1400 audit(2000000004.000:342): avc: denied { append } for pid=1355 comm="syz.0.286" name="001" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.309760][ T24] audit: type=1400 audit(2000000004.040:343): avc: denied { read } for pid=1355 comm="syz.0.286" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.333307][ T24] audit: type=1400 audit(2000000004.070:344): avc: denied { open } for pid=1355 comm="syz.0.286" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.357545][ T24] audit: type=1400 audit(2000000004.070:345): avc: denied { ioctl } for pid=1355 comm="syz.0.286" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.422718][ T1370] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 57.450917][ T1370] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.464445][ T1370] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.286: bg 0: block 10: padding at end of block bitmap is not set [ 57.480838][ T1370] Quota error (device loop0): write_blk: dquota write failed [ 57.488314][ T1370] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list [ 57.498860][ T1370] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 57.509172][ T1370] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.286: Failed to acquire dquot type 0 [ 57.530694][ T1370] Quota error (device loop0): write_blk: dquota write failed [ 57.542952][ T1370] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.286: Failed to acquire dquot type 0 [ 57.560812][ T1370] EXT4-fs error (device loop0): ext4_free_blocks:5690: comm syz.0.286: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.575281][ T1370] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.286: Failed to acquire dquot type 0 [ 57.587178][ T1370] EXT4-fs (loop0): 1 orphan inode deleted [ 57.601025][ T1370] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 58.070613][ T1393] IPv6: addrconf: prefix option has invalid lifetime [ 58.077344][ T1393] IPv6: addrconf: prefix option has invalid lifetime [ 58.170583][ T1395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 58.187174][ T1395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.295'. [ 58.196272][ T1395] tipc: Started in network mode [ 58.201242][ T1395] tipc: Own node identity 7f, cluster identity 4711 [ 58.208106][ T1395] tipc: 32-bit node address hash set to 7f [ 58.231110][ T1402] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1402 comm=syz.2.297 [ 58.309436][ T1411] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 58.807712][ T15] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 59.177820][ T1462] bridge0: port 3(veth1_macvtap) entered blocking state [ 59.184939][ T1462] bridge0: port 3(veth1_macvtap) entered disabled state [ 59.192662][ T1462] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 59.289193][ T1473] cgroup: syz.0.317 (1473) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 59.300473][ T15] usb 3-1: Using ep0 maxpacket: 32 [ 59.310875][ T1473] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 59.323755][ T1473] 9pnet: Insufficient options for proto=fd [ 59.375906][ T1481] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 59.412452][ T1482] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 59.510544][ T15] usb 3-1: unable to get BOS descriptor or descriptor too short [ 59.532532][ T1485] loop5: p1 p3 < p5 p6 p7 > [ 59.538324][ T1485] loop5: p5 size 150996744 extends beyond EOD, truncated [ 59.546159][ T1485] loop5: p6 start 1617764352 is beyond EOD, truncated [ 59.590429][ T15] usb 3-1: config 1 has an invalid interface number: 2 but max is 0 [ 59.598648][ T15] usb 3-1: config 1 has no interface number 0 [ 59.605018][ T15] usb 3-1: config 1 interface 2 altsetting 0 has an invalid endpoint with address 0x71, skipping [ 59.615785][ T15] usb 3-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 59.670447][ T831] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 59.760469][ T25] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 59.780391][ T15] usb 3-1: New USB device found, idVendor=09fb, idProduct=6025, bcdDevice=b0.04 [ 59.789743][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.810438][ T15] usb 3-1: Product: syz [ 59.814627][ T15] usb 3-1: Manufacturer: syz [ 59.819613][ T15] usb 3-1: SerialNumber: syz [ 60.100409][ T831] usb 6-1: unable to get BOS descriptor or descriptor too short [ 60.140541][ T831] usb 6-1: not running at top speed; connect to a high speed hub [ 60.160909][ T15] ftdi_sio 3-1:1.2: FTDI USB Serial Device converter detected [ 60.168686][ T15] usb 3-1: Detected FT-X [ 60.190447][ T15] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 60.220615][ T15] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 60.220831][ T831] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 60.240568][ T15] ftdi_sio 3-1:1.2: GPIO initialisation failed: -71 [ 60.247654][ T15] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 60.259015][ T15] usb 3-1: USB disconnect, device number 14 [ 60.265623][ T15] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 60.274640][ T1503] EXT4-fs (loop0): Ignoring removed orlov option [ 60.275673][ T15] ftdi_sio 3-1:1.2: device disconnected [ 60.288557][ T1503] EXT4-fs (loop0): Ignoring removed orlov option [ 60.295117][ T1503] EXT4-fs (loop0): Ignoring removed bh option [ 60.310512][ T25] usb 7-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 60.311798][ T1503] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,journal_ioprio=0x0000000000000005,inode_readahead_blks=0x0000000000000000,orlov,orlov,barrier=0x0000000000000006,inlinecrypt,bh,,errors=continue [ 60.319836][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.353669][ T25] usb 7-1: Product: syz [ 60.358058][ T25] usb 7-1: Manufacturer: syz [ 60.362928][ T25] usb 7-1: SerialNumber: syz [ 60.480537][ T831] usb 6-1: string descriptor 0 read error: -22 [ 60.486963][ T831] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 60.496066][ T831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.597792][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 60.597804][ T24] audit: type=1326 audit(2000000007.330:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1517 comm="syz.2.329" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a23bbe59 code=0x7ffc0000 [ 60.629750][ T1488] udc-core: couldn't find an available UDC or it's busy [ 60.629832][ T24] audit: type=1326 audit(2000000007.330:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1517 comm="syz.2.329" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a23bbe59 code=0x7ffc0000 [ 60.649673][ T1488] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 60.662239][ T24] audit: type=1326 audit(2000000007.330:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1517 comm="syz.2.329" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a23bbe59 code=0x7ffc0000 [ 60.694064][ T24] audit: type=1326 audit(2000000007.330:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1517 comm="syz.2.329" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9a23bbe59 code=0x7ffc0000 [ 60.719517][ T24] audit: type=1326 audit(2000000007.330:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1517 comm="syz.2.329" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a23bbe59 code=0x7ffc0000 [ 60.745024][ T24] audit: type=1326 audit(2000000007.330:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1517 comm="syz.2.329" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a23bbe59 code=0x7ffc0000 [ 60.750573][ T831] usb 6-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 60.770146][ T24] audit: type=1326 audit(2000000007.330:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1517 comm="syz.2.329" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a23bbe59 code=0x7ffc0000 [ 60.778558][ T831] usb 6-1: 1:1 : sample bitwidth 90 in over sample bytes 2 [ 60.809311][ T24] audit: type=1326 audit(2000000007.330:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1517 comm="syz.2.329" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe9a23bbe59 code=0x7ffc0000 [ 60.811392][ T831] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 60.844001][ T24] audit: type=1326 audit(2000000007.330:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1517 comm="syz.2.329" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a23bbe59 code=0x7ffc0000 [ 60.876586][ T24] audit: type=1326 audit(2000000007.330:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1517 comm="syz.2.329" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a23bbe59 code=0x7ffc0000 [ 60.876941][ T1527] x_tables: unsorted underflow at hook 3 [ 60.907054][ T831] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 60.936999][ T831] usb 6-1: USB disconnect, device number 9 [ 60.957073][ T1528] overlayfs: upper fs does not support tmpfile. [ 61.011257][ T25] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 61.030452][ T25] usb 7-1: unit 4 not found! [ 61.050303][ T25] usb 7-1: USB disconnect, device number 4 [ 61.113911][ T1531] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.121079][ T1531] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.128366][ T1531] device bridge_slave_0 entered promiscuous mode [ 61.136308][ T1531] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.143444][ T1531] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.150869][ T1531] device bridge_slave_1 entered promiscuous mode [ 61.186915][ T1531] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.194012][ T1531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.201406][ T1531] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.208470][ T1531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.231647][ T908] udevd[908]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.247725][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.255448][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.261025][ T1536] fuse: Unknown parameter '˜' [ 61.268491][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.285406][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.294319][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.302836][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.329118][ T1531] device veth0_vlan entered promiscuous mode [ 61.336253][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.355912][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.369063][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.395380][ T1531] device veth1_macvtap entered promiscuous mode [ 61.402628][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.416202][ T1559] netlink: 84 bytes leftover after parsing attributes in process `syz.6.343'. [ 61.433793][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.451781][ T1556] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 61.454565][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.463751][ T1556] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.561540][ T320] tipc: Left network mode [ 61.718069][ T1568] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 61.770076][ T1559] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 61.785489][ T1559] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 61.794619][ T308] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 61.807758][ T1559] F2FS-fs (loop6): invalid crc value [ 61.814804][ T1559] F2FS-fs (loop6): Found nat_bits in checkpoint [ 61.848130][ T1559] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 61.855964][ T1559] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 61.881214][ T1597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 62.160523][ T308] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.222795][ T308] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.269900][ T308] usb 6-1: config 1 has no interface number 0 [ 62.382785][ T320] device bridge_slave_1 left promiscuous mode [ 62.389633][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.436278][ T320] device bridge_slave_0 left promiscuous mode [ 62.442861][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.455202][ T320] device veth1_macvtap left promiscuous mode [ 62.461840][ T320] device veth0_vlan left promiscuous mode [ 62.580783][ T308] usb 6-1: New USB device found, idVendor=04b4, idProduct=9321, bcdDevice= 0.40 [ 62.598347][ T308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.606553][ T308] usb 6-1: Product: syz [ 62.611179][ T308] usb 6-1: Manufacturer: syz [ 62.615816][ T308] usb 6-1: SerialNumber: syz [ 62.730398][ T1299] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 62.861367][ T1556] udc-core: couldn't find an available UDC or it's busy [ 62.868429][ T1556] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.878637][ T1556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.338'. [ 62.888761][ T1556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.338'. [ 62.898056][ T1556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.338'. [ 62.990389][ T1299] usb 7-1: Using ep0 maxpacket: 8 [ 63.020426][ T308] usb 6-1: 1:0 : does not exist [ 63.028306][ T308] usb 6-1: 1:2 : does not exist [ 63.035508][ T1624] exfat: Deprecated parameter 'utf8' [ 63.050392][ T1624] exfat: Unknown parameter 'allow_utimec' [ 63.056171][ T308] usb 6-1: 1:3 : does not exist [ 63.061417][ T308] usb 6-1: BAAD SPEAKERPHONE c_chmask mismatch [ 63.070717][ T308] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 63.094137][ T308] usb 6-1: USB disconnect, device number 10 [ 63.150485][ T1299] usb 7-1: unable to get BOS descriptor or descriptor too short [ 63.180128][ T1640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.364'. [ 63.250474][ T1299] usb 7-1: config 1 has an invalid descriptor of length 76, skipping remainder of the config [ 63.270404][ T1299] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1023 [ 63.450445][ T1299] usb 7-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 63.459631][ T1299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.498658][ T1299] usb 7-1: Product: syz [ 63.517095][ T1299] usb 7-1: Manufacturer: syz [ 63.530643][ T1299] usb 7-1: SerialNumber: syz [ 63.550782][ T1613] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 63.690786][ T1665] binder: 1664:1665 ioctl c018620c 200000000280 returned -1 [ 63.743635][ T1665] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 63.760451][ T1665] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.770732][ T1613] udc-core: couldn't find an available UDC or it's busy [ 63.791283][ T1613] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 63.915638][ T1687] tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 63.972728][ T1692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=1692 comm=syz.5.374 [ 63.986761][ T1692] netlink: 'syz.5.374': attribute type 4 has an invalid length. [ 63.994975][ T1692] netlink: 17 bytes leftover after parsing attributes in process `syz.5.374'. [ 64.035614][ T1642] F2FS-fs (loop0): Invalid log sectorsize (0) [ 64.095106][ T1642] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 64.185341][ T1642] F2FS-fs (loop0): invalid crc value [ 64.322612][ T1642] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.960933][ T1642] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 64.987265][ T1531] EXT4-fs error (device loop7): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /4/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.000312][ C0] sched: RT throttling activated [ 65.013791][ T1642] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 65.082860][ T1642] xt_hashlimit: size too large, truncated to 1048576 [ 65.129743][ T1531] EXT4-fs error (device loop7): ext4_empty_dir:3083: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.159291][ T1531] EXT4-fs warning (device loop7): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 65.183911][ T1531] EXT4-fs error (device loop7): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /4/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.221444][ T1299] usb 7-1: MIDIStreaming interface descriptor not found [ 65.257006][ T1299] usb 7-1: USB disconnect, device number 5 [ 65.308146][ T1531] EXT4-fs error (device loop7): ext4_empty_dir:3083: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.328304][ T1722] EXT4-fs (loop6): 1 truncate cleaned up [ 65.334700][ T1722] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro, [ 65.343046][ T1531] EXT4-fs warning (device loop7): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 65.388351][ T1531] EXT4-fs error (device loop7): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /4/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.428518][ T1741] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 65.446769][ T1740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 65.478272][ T1740] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 65.503334][ T1531] EXT4-fs error (device loop7): ext4_empty_dir:3083: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.558640][ T1531] EXT4-fs warning (device loop7): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 65.575769][ T1531] EXT4-fs error (device loop7): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /4/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.679196][ T1531] EXT4-fs error (device loop7): ext4_empty_dir:3083: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.701369][ T1531] EXT4-fs warning (device loop7): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 65.701609][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 65.701619][ T24] audit: type=1400 audit(2000000012.440:415): avc: denied { bind } for pid=1754 comm="syz.5.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.712966][ T1531] EXT4-fs error (device loop7): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /4/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.810651][ T1760] xt_NFQUEUE: number of total queues is 0 [ 66.044416][ T1531] EXT4-fs error (device loop7): ext4_empty_dir:3083: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.072049][ T1531] EXT4-fs warning (device loop7): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 66.104682][ T1531] EXT4-fs warning (device loop7): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 66.120853][ T1761] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 66.134831][ T1761] EXT4-fs (loop5): Test dummy encryption mode enabled [ 66.157418][ T1761] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inlinecrypt,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 66.182387][ T1531] EXT4-fs warning (device loop7): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 66.232154][ T24] audit: type=1400 audit(2000000012.970:416): avc: denied { bind } for pid=1767 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.267601][ T24] audit: type=1400 audit(2000000013.000:417): avc: denied { remount } for pid=1767 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.269529][ T1531] EXT4-fs warning (device loop7): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 66.299420][ T24] audit: type=1400 audit(2000000013.030:418): avc: denied { create } for pid=1759 comm="syz.5.396" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 66.303757][ T1770] netlink: 592 bytes leftover after parsing attributes in process `syz.0.398'. [ 66.370153][ T1531] EXT4-fs warning (device loop7): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 66.432879][ T24] audit: type=1400 audit(2000000013.030:419): avc: denied { rename } for pid=1759 comm="syz.5.396" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 66.493528][ T1531] EXT4-fs warning (device loop7): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 66.555672][ T24] audit: type=1400 audit(2000000013.120:420): avc: denied { lock } for pid=1771 comm="syz.6.397" path="socket:[21044]" dev="sockfs" ino=21044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.610026][ T24] audit: type=1400 audit(2000000013.170:421): avc: denied { execute } for pid=1769 comm="syz.0.398" path="/file0" dev="ramfs" ino=21802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 66.649280][ T24] audit: type=1326 audit(2000000013.240:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1779 comm="syz.6.399" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe552373e59 code=0x7ffc0000 [ 66.687151][ T24] audit: type=1326 audit(2000000013.240:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1779 comm="syz.6.399" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe552373e59 code=0x7ffc0000 [ 66.712281][ T1299] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 66.719917][ T24] audit: type=1326 audit(2000000013.240:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1779 comm="syz.6.399" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=212 compat=0 ip=0x7fe552373e59 code=0x7ffc0000 [ 66.800381][ T308] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 66.960364][ T1299] usb 1-1: Using ep0 maxpacket: 16 [ 67.080431][ T1299] usb 1-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 67.096243][ T1299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.170399][ T308] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 67.187548][ T308] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 67.206905][ T308] usb 7-1: config 220 interface 0 has no altsetting 0 [ 67.300429][ T1299] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 67.309505][ T1299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.347969][ T1299] usb 1-1: Product: syz [ 67.360342][ T1299] usb 1-1: Manufacturer: syz [ 67.364976][ T1299] usb 1-1: SerialNumber: syz [ 67.380416][ T308] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 67.394727][ T308] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.410397][ T308] usb 7-1: Product: syz [ 67.420354][ T308] usb 7-1: Manufacturer: syz [ 67.430487][ T308] usb 7-1: SerialNumber: syz [ 67.631013][ T1770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 67.690446][ T1299] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 67.706216][ T1299] usb 1-1: USB disconnect, device number 8 [ 68.267093][ T1809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 68.284891][ T1809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=1809 comm=syz.0.407 [ 68.478556][ T1815] overlayfs: unrecognized mount option "verity=on" or missing value [ 68.740487][ T15] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 68.818411][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.825583][ T1831] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.832998][ T1831] device bridge_slave_0 entered promiscuous mode [ 68.839770][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.846916][ T1831] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.854401][ T1831] device bridge_slave_1 entered promiscuous mode [ 68.891855][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.898953][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.906336][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.913405][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.932157][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.939757][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.947178][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.958434][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.966862][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.974116][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.982733][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.990957][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.998013][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.024579][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.032954][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.049689][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.064865][ T1831] device veth0_vlan entered promiscuous mode [ 69.071483][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.079726][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.088036][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.104214][ T1831] device veth1_macvtap entered promiscuous mode [ 69.119901][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.128149][ T15] usb 6-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 69.146716][ T15] usb 6-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 69.162944][ T15] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.169627][ T15] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 69.179157][ T15] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.191857][ T15] usb 6-1: config 0 descriptor?? [ 69.200300][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.209070][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.221148][ T1836] loop0: p1 p3 < p5 p6 p7 > [ 69.232214][ T1836] loop0: p5 size 150996744 extends beyond EOD, truncated [ 69.245708][ T1836] loop0: p6 start 1617764352 is beyond EOD, truncated [ 69.273906][ T313] device bridge_slave_1 left promiscuous mode [ 69.280719][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.288345][ T313] device bridge_slave_0 left promiscuous mode [ 69.294647][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.302510][ T313] device veth1_macvtap left promiscuous mode [ 69.308508][ T313] device veth0_vlan left promiscuous mode [ 69.403225][ T1865] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 69.427763][ T1865] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.423: inode has both inline data and extents flags [ 69.441713][ T1865] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.423: couldn't read orphan inode 15 (err -117) [ 69.454320][ T1865] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue [ 69.478948][ T1872] device batadv_slave_0 entered promiscuous mode [ 69.491979][ T1856] device batadv_slave_0 left promiscuous mode [ 69.510396][ T15] usb 6-1: string descriptor 0 read error: -71 [ 69.527197][ T1879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.427'. [ 69.587701][ T309] udevd[309]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 69.610474][ T15] usb 6-1: Cannot read MAC address [ 69.614432][ T1867] udevd[1867]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 69.615733][ T15] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 69.626988][ T300] udevd[300]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 69.654870][ T608] udevd[608]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 69.657667][ T1890] incfs: Can't find or create .index dir in . [ 69.666488][ T15] usb 6-1: USB disconnect, device number 11 [ 69.687582][ T1871] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota, [ 69.698415][ T1890] incfs: mount failed -22 [ 69.700388][ T308] uvcvideo: Found UVC 0.00 device syz (8086:0b07) [ 69.720345][ T308] uvcvideo: No valid video chain found. [ 69.726651][ T308] usb 7-1: USB disconnect, device number 6 [ 69.735874][ T1871] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.834075][ T1882] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 69.850874][ T1882] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 69.861786][ T1882] F2FS-fs (loop5): invalid crc value [ 69.869354][ T1882] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 69.892103][ T1913] netlink: 32 bytes leftover after parsing attributes in process `syz.6.433'. [ 69.898238][ T1882] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 69.913543][ T1882] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 70.324915][ T1882] attempt to access beyond end of device [ 70.324915][ T1882] loop5: rw=34817, want=77856, limit=40427 [ 70.362018][ T1882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.374488][ T1927] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.382249][ T284] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 70.385293][ T1927] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 70.389771][ T20] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 70.434949][ T1937] xt_TCPMSS: Only works on TCP SYN packets [ 70.441316][ T382] attempt to access beyond end of device [ 70.441316][ T382] loop5: rw=2049, want=45112, limit=40427 [ 70.583991][ T1940] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue [ 70.595458][ T1940] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.775444][ T20] usb 1-1: device descriptor read/64, error -71 [ 70.788835][ T284] usb 7-1: device descriptor read/64, error -71 [ 71.190440][ T284] usb 7-1: device descriptor read/64, error -71 [ 71.196944][ T20] usb 1-1: device descriptor read/64, error -71 [ 71.480572][ T284] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 71.480591][ T20] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 71.860440][ T284] usb 7-1: device descriptor read/64, error -71 [ 71.960426][ T20] usb 1-1: device descriptor read/64, error -71 [ 71.983597][ T1958] EXT4-fs error (device loop8): ext4_free_branches:1026: inode #13: comm syz.8.445: invalid indirect mapped block 10 (level 1) [ 71.997790][ T1958] EXT4-fs error (device loop8): ext4_free_branches:1026: inode #13: comm syz.8.445: invalid indirect mapped block 8 (level 1) [ 72.011780][ T1958] EXT4-fs (loop8): 1 truncate cleaned up [ 72.017622][ T1958] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 72.028714][ T1958] mmap: syz.8.445 (1958): VmData 17584128 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 72.290373][ T284] usb 7-1: device descriptor read/64, error -71 [ 72.370361][ T20] usb 1-1: device descriptor read/64, error -71 [ 72.410446][ T284] usb usb7-port1: attempt power cycle [ 72.490416][ T20] usb usb1-port1: attempt power cycle [ 72.638029][ T1997] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 72.647865][ T1997] EXT4-fs (loop8): Unrecognized mount option "smackfsfloor=^{" or missing value [ 72.783786][ T2012] capability: warning: `syz.3.462' uses 32-bit capabilities (legacy support in use) [ 72.788873][ T24] kauditd_printk_skb: 68 callbacks suppressed [ 72.788885][ T24] audit: type=1400 audit(2000000275.513:493): avc: denied { create } for pid=2018 comm="syz.8.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.820726][ T284] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 72.830114][ T24] audit: type=1400 audit(2000000275.533:494): avc: denied { checkpoint_restore } for pid=2011 comm="syz.3.462" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.970465][ T284] usb 7-1: device descriptor read/8, error -71 [ 72.982123][ T2029] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 72.991170][ T20] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 72.998796][ T2029] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.080468][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 73.180448][ T284] usb 7-1: device descriptor read/8, error -71 [ 73.360485][ T20] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 73.369723][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.377802][ T20] usb 1-1: Product: syz [ 73.382606][ T20] usb 1-1: Manufacturer: syz [ 73.387229][ T20] usb 1-1: SerialNumber: syz [ 73.671147][ T24] audit: type=1400 audit(2000000276.403:495): avc: denied { listen } for pid=1999 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.671335][ T2000] udc-core: couldn't find an available UDC or it's busy [ 73.691219][ T2041] netlink: 1320 bytes leftover after parsing attributes in process `syz.5.468'. [ 73.697891][ T2000] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 73.729451][ T24] audit: type=1400 audit(2000000276.453:496): avc: denied { accept } for pid=1999 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.751180][ T24] audit: type=1400 audit(2000000276.473:497): avc: denied { create } for pid=2042 comm="syz.3.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 73.870664][ T20] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 73.900381][ T1632] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 73.988049][ T20] usb 1-1: USB disconnect, device number 11 [ 74.111449][ T24] audit: type=1400 audit(2000000276.843:498): avc: denied { unlink } for pid=1128 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.229923][ T2058] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.237049][ T1632] usb 9-1: Using ep0 maxpacket: 32 [ 74.237069][ T2058] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.250031][ T2058] device bridge_slave_0 entered promiscuous mode [ 74.258449][ T2058] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.265666][ T2058] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.273067][ T2058] device bridge_slave_1 entered promiscuous mode [ 74.310598][ T2058] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.317715][ T2058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.325011][ T2058] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.332072][ T2058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.351185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.358904][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.368230][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.386295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.394886][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.401965][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.409985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.419388][ T1632] usb 9-1: unable to get BOS descriptor or descriptor too short [ 74.427386][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.434469][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.451693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.459931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.488791][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.506442][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.514812][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.522762][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.533575][ T2058] device veth0_vlan entered promiscuous mode [ 74.546616][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.555904][ T2058] device veth1_macvtap entered promiscuous mode [ 74.566832][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.581727][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.667589][ T2077] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 74.680426][ T1632] usb 9-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 74.695379][ T2077] FAT-fs (loop0): Filesystem has been set read-only [ 74.699772][ T1632] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.730345][ T1632] usb 9-1: Product: syz [ 74.734604][ T1632] usb 9-1: Manufacturer: syz [ 74.739205][ T1632] usb 9-1: SerialNumber: syz [ 74.744699][ T313] device bridge_slave_1 left promiscuous mode [ 74.750395][ T2076] EXT4-fs (loop9): Mount option "nodioread_nolock" incompatible with ext3 [ 74.751042][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.787150][ T313] device bridge_slave_0 left promiscuous mode [ 74.793737][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.811416][ T1632] usb 9-1: Invalid firmware size=110. [ 74.819855][ T1632] usb 9-1: Invalid firmware size=110. [ 74.827173][ T1632] usb 9-1: Invalid firmware size=110. [ 74.846976][ T313] device veth1_macvtap left promiscuous mode [ 74.868405][ T313] device veth0_vlan left promiscuous mode [ 75.016098][ T20] usb 9-1: USB disconnect, device number 2 [ 75.068577][ T2081] xt_hashlimit: size too large, truncated to 1048576 [ 75.130392][ T284] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 75.420417][ T284] usb 10-1: device descriptor read/64, error -71 [ 75.444362][ T2070] F2FS-fs (loop5): Unrecognized mount option "ÿ" or missing value [ 75.513902][ T24] audit: type=1400 audit(2000000278.243:499): avc: denied { create } for pid=2087 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 75.605442][ T2098] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 75.614471][ T2098] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 76.300240][ T24] audit: type=1326 audit(2000000278.703:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2099 comm="syz.8.484" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162f56e59 code=0x7ffc0000 [ 76.372334][ T24] audit: type=1326 audit(2000000278.703:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2099 comm="syz.8.484" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162f56e59 code=0x7ffc0000 [ 76.441588][ T284] usb 10-1: device descriptor read/64, error -71 [ 76.450638][ T24] audit: type=1326 audit(2000000278.703:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2099 comm="syz.8.484" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f2162f56e59 code=0x7ffc0000 [ 76.740368][ T284] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 76.970365][ T1632] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 77.050356][ T284] usb 10-1: device descriptor read/64, error -71 [ 77.240383][ T1632] usb 9-1: device descriptor read/64, error -71 [ 77.374910][ T2139] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 77.382980][ T2139] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 77.382980][ T2139] [ 77.630482][ T1632] usb 9-1: device descriptor read/64, error -71 [ 77.631987][ T284] usb 10-1: device descriptor read/64, error -71 [ 77.675384][ T2145] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 77.683433][ T2145] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 77.692326][ T2145] F2FS-fs (loop5): invalid crc value [ 77.718579][ T2145] F2FS-fs (loop5): Found nat_bits in checkpoint [ 77.752603][ T2145] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 77.759708][ T2145] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 77.770584][ T284] usb usb10-port1: attempt power cycle [ 77.900687][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 77.900748][ T24] audit: type=1400 audit(2000000280.513:510): avc: denied { ioctl } for pid=2163 comm="syz.3.506" path="socket:[22509]" dev="sockfs" ino=22509 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.002429][ T2165] EXT4-fs (loop0): Test dummy encryption mode enabled [ 78.023161][ T2153] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 78.038595][ T2165] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 78.046754][ T2165] System zones: 0-5 [ 78.051452][ T2165] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,errors=continue,data_err=ignore,delalloc,barrier,,errors=continue [ 78.090357][ T1632] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 78.090442][ T2153] EXT4-fs (loop9): can't mount with commit=1855, fs mounted w/o journal [ 78.302283][ T2162] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 78.360411][ T1632] usb 9-1: device descriptor read/64, error -71 [ 78.381689][ T24] audit: type=1400 audit(2000000281.113:511): avc: denied { set_context_mgr } for pid=2170 comm="syz.9.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 78.491794][ T2171] FAT-fs (loop9): bread failed, FSINFO block (sector = 2049) [ 78.527131][ T2178] : Can't open blockdev [ 78.529929][ T2173] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 78.540840][ T2173] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.616921][ T24] audit: type=1400 audit(2000000281.343:512): avc: denied { link } for pid=2172 comm="syz.5.507" name="#22" dev="loop5" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.663637][ T2186] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 78.689793][ T24] audit: type=1400 audit(2000000281.421:513): avc: denied { read } for pid=2185 comm="syz.0.511" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.732200][ T24] audit: type=1400 audit(2000000281.421:514): avc: denied { open } for pid=2185 comm="syz.0.511" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.757562][ T1632] usb 9-1: device descriptor read/64, error -71 [ 78.826475][ T24] audit: type=1400 audit(2000000281.421:515): avc: denied { ioctl } for pid=2185 comm="syz.0.511" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.852178][ T24] audit: type=1400 audit(2000000281.515:516): avc: denied { bind } for pid=2197 comm="syz.5.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.871988][ T24] audit: type=1400 audit(2000000281.515:517): avc: denied { listen } for pid=2197 comm="syz.5.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.892203][ T1632] usb usb9-port1: attempt power cycle [ 78.899855][ T2190] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 78.908618][ T2190] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 78.919589][ T2190] F2FS-fs (loop9): invalid crc value [ 78.929542][ T2190] F2FS-fs (loop9): Found nat_bits in checkpoint [ 78.965099][ T2190] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 78.977385][ T2190] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 78.992233][ T2190] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 78.992713][ T2203] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007, [ 79.002266][ T24] audit: type=1400 audit(2000000281.711:518): avc: denied { relabelto } for pid=2189 comm="syz.9.512" name="/" dev="loop9" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 79.017020][ T2203] ext4 filesystem being mounted at /87/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.289677][ T2203] EXT4-fs error (device loop5): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 79.304233][ T2203] EXT4-fs (loop5): Remounting filesystem read-only [ 79.345279][ T1632] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 79.456107][ T2222] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 79.456107][ T2222] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 79.456107][ T2222] [ 79.482195][ T2222] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 79.490807][ T2222] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.497475][ T2222] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 79.543374][ T1632] usb 9-1: device descriptor read/8, error -71 [ 79.551255][ T2222] EXT4-fs error (device loop0): ext4_clear_blocks:880: inode #13: comm syz.0.516: attempt to clear invalid blocks 2 len 1 [ 79.572683][ T2222] EXT4-fs error (device loop0): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 79.587318][ T2222] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.516: invalid indirect mapped block 1819239214 (level 0) [ 79.602050][ T2222] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.516: invalid indirect mapped block 1819239214 (level 1) [ 79.621719][ T2222] EXT4-fs (loop0): 1 truncate cleaned up [ 79.627470][ T2222] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noacl,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue [ 79.654151][ T24] audit: type=1400 audit(2000000282.319:519): avc: denied { lock } for pid=2220 comm="syz.0.516" path="socket:[23068]" dev="sockfs" ino=23068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 79.815586][ T1632] usb 9-1: device descriptor read/8, error -71 [ 79.834089][ T2253] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.526: iget: bad extra_isize 90 (inode size 256) [ 79.847790][ T2253] EXT4-fs (loop8): Remounting filesystem read-only [ 79.854358][ T2253] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.526: error while reading EA inode 11 err=-117 [ 79.866908][ T2253] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.526: iget: bad extra_isize 90 (inode size 256) [ 79.880775][ T2253] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.526: error while reading EA inode 11 err=-117 [ 79.893295][ T2253] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #18: comm syz.8.526: iget: bad extra_isize 90 (inode size 256) [ 79.906887][ T2253] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.526: error while reading EA inode 18 err=-117 [ 79.919440][ T2253] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #18: comm syz.8.526: iget: bad extra_isize 90 (inode size 256) [ 79.933514][ T2253] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.526: error while reading EA inode 18 err=-117 [ 79.947442][ T2253] EXT4-fs (loop8): 1 orphan inode deleted [ 79.953464][ T2253] EXT4-fs (loop8): mounted filesystem without journal. Opts: data_err=ignore,noload,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,grpid,noquota,min_batch_time=0x0000000000000003,jqfmt=vfsold, [ 80.001996][ T2267] device syz_tun entered promiscuous mode [ 80.009954][ T2263] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.093317][ T355] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 80.339408][ T1632] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 80.349862][ T355] usb 1-1: Using ep0 maxpacket: 32 [ 80.478111][ T355] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 222, changing to 7 [ 80.574261][ T1632] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.584738][ T1632] usb 9-1: too many endpoints for config 0 interface 0 altsetting 4: 33, using maximum allowed: 30 [ 80.596083][ T1632] usb 9-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 80.609520][ T1632] usb 9-1: config 0 interface 0 has no altsetting 0 [ 80.616539][ T1632] usb 9-1: New USB device found, idVendor=1a34, idProduct=d805, bcdDevice= 0.00 [ 80.626279][ T1632] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.634998][ T1632] usb 9-1: config 0 descriptor?? [ 80.659763][ T355] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 80.668909][ T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.676930][ T355] usb 1-1: Product: syz [ 80.681739][ T1632] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 80.689725][ T355] usb 1-1: Manufacturer: syz [ 80.694373][ T355] usb 1-1: SerialNumber: syz [ 80.838217][ T2264] device syz_tun left promiscuous mode [ 80.905481][ T284] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 80.919935][ T2293] xt_ecn: cannot match TCP bits for non-tcp packets [ 81.087163][ T355] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 81.108515][ T355] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 81.145503][ T355] usb 1-1: USB disconnect, device number 12 [ 81.194013][ T284] usb 6-1: device descriptor read/64, error -71 [ 81.377957][ T2309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2309 comm=syz.3.541 [ 81.610736][ T284] usb 6-1: device descriptor read/64, error -71 [ 81.655364][ T2323] xt_hashlimit: size too large, truncated to 1048576 [ 81.792405][ T355] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 81.899249][ T284] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 81.929191][ T2342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2342 comm=syz.9.553 [ 82.177228][ T355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.188195][ T355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.197911][ T355] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.198448][ T284] usb 6-1: device descriptor read/64, error -71 [ 82.211085][ T355] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.226329][ T355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.237511][ T355] usb 1-1: config 0 descriptor?? [ 82.647312][ T284] usb 6-1: device descriptor read/64, error -71 [ 82.744297][ T355] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 82.753443][ T355] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 82.775557][ T284] usb usb6-port1: attempt power cycle [ 83.001594][ T20] usb 9-1: USB disconnect, device number 6 [ 83.032513][ T25] usb 1-1: USB disconnect, device number 13 [ 83.213673][ T284] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 83.243947][ T2381] netlink: 4 bytes leftover after parsing attributes in process `syz.8.557'. [ 83.363476][ T2383] fuse: blksize only supported for fuseblk [ 83.395398][ T284] usb 6-1: device descriptor read/8, error -71 [ 83.683857][ T284] usb 6-1: device descriptor read/8, error -71 [ 83.833537][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 83.833547][ T24] audit: type=1400 audit(2000000286.240:522): avc: denied { bind } for pid=2390 comm="syz.5.564" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.859827][ T24] audit: type=1400 audit(2000000286.240:523): avc: denied { name_bind } for pid=2390 comm="syz.5.564" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 83.880770][ T24] audit: type=1400 audit(2000000286.240:524): avc: denied { node_bind } for pid=2390 comm="syz.5.564" saddr=10.1.1.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 83.886902][ T355] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 83.971242][ T2395] erofs: (device loop5): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 84.070291][ T2398] F2FS-fs (loop8): invalid crc value [ 84.078145][ T2398] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 84.118944][ T2398] F2FS-fs (loop8): recover fsync data on readonly fs [ 84.125943][ T2398] F2FS-fs (loop8): Cannot turn on quotas: -2 on 0 [ 84.132710][ T2398] F2FS-fs (loop8): checkpoint=disable on readonly fs [ 84.303868][ T355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.326571][ T2401] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 84.334084][ T2401] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 84.342719][ T355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.363714][ T2401] F2FS-fs (loop5): invalid crc value [ 84.369302][ T355] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 84.387525][ T355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.404525][ T2401] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 84.422309][ T355] usb 1-1: config 0 descriptor?? [ 84.492361][ T2401] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 84.501931][ T2401] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 84.600968][ T382] attempt to access beyond end of device [ 84.600968][ T382] loop5: rw=2049, want=45112, limit=40427 [ 85.180819][ T355] savu 0003:1E7D:2D5A.0006: item fetching failed at offset 7/8 [ 85.199466][ T355] savu 0003:1E7D:2D5A.0006: parse failed [ 85.205417][ T355] savu: probe of 0003:1E7D:2D5A.0006 failed with error -22 [ 85.222599][ T1632] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 85.489747][ T1632] usb 6-1: Using ep0 maxpacket: 32 [ 85.660797][ T1632] usb 6-1: unable to get BOS descriptor or descriptor too short [ 85.746392][ T1632] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 85.757765][ T1632] usb 6-1: config 1 interface 0 has no altsetting 0 [ 85.788353][ T2477] udc-core: couldn't find an available UDC or it's busy [ 85.799518][ T2477] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.013449][ T1632] usb 6-1: language id specifier not provided by device, defaulting to English [ 86.357246][ T24] audit: type=1400 audit(2000000001.749:525): avc: denied { create } for pid=2482 comm="syz.9.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 86.379566][ T2483] netlink: 'syz.9.583': attribute type 29 has an invalid length. [ 86.388020][ T2483] netlink: 8 bytes leftover after parsing attributes in process `syz.9.583'. [ 86.399238][ T2483] netlink: 'syz.9.583': attribute type 29 has an invalid length. [ 86.407259][ T2483] netlink: 8 bytes leftover after parsing attributes in process `syz.9.583'. [ 86.523056][ T2490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.586'. [ 86.895777][ T1299] usb 1-1: USB disconnect, device number 14 [ 86.948713][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.962043][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.969167][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.992646][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 87.009095][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.031574][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 87.050818][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.071394][ T1632] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 87.081168][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.091373][ T1632] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.102457][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.121976][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.135831][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.480051][ T24] audit: type=1400 audit(2000000002.798:526): avc: denied { watch } for pid=2530 comm="syz.3.597" path="/186/file0" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.509139][ T2531] overlayfs: failed to clone upperpath [ 87.584283][ T15] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 87.699692][ T2546] overlayfs: failed to clone upperpath [ 87.781073][ T2431] ================================================================== [ 87.789204][ T2431] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9e0/0xac0 [ 87.797368][ T2431] Read of size 4 at addr ffff888118636470 by task syz.8.573/2431 [ 87.803313][ T2447] syz.8.573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 87.805164][ T2431] [ 87.805179][ T2431] CPU: 1 PID: 2431 Comm: syz.8.573 Tainted: G W syzkaller #0 [ 87.805185][ T2431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.805196][ T2431] Call Trace: [ 87.839601][ T2431] __dump_stack+0x21/0x24 [ 87.844060][ T2431] dump_stack_lvl+0x1a7/0x208 [ 87.848751][ T2431] ? show_regs_print_info+0x18/0x18 [ 87.853986][ T2431] ? thaw_kernel_threads+0x220/0x220 [ 87.859273][ T2431] ? blk_mq_dispatch_rq_list+0x18a5/0x1ba0 [ 87.865075][ T2431] print_address_description+0x7f/0x2c0 [ 87.870629][ T2431] ? unaccount_page_cache_page+0x9e0/0xac0 [ 87.876436][ T2431] kasan_report+0xe2/0x130 [ 87.880851][ T2431] ? unaccount_page_cache_page+0x9e0/0xac0 [ 87.886833][ T2431] __asan_report_load4_noabort+0x14/0x20 [ 87.892474][ T2431] unaccount_page_cache_page+0x9e0/0xac0 [ 87.898107][ T2431] __delete_from_page_cache+0xc3/0x470 [ 87.903562][ T2431] ? memset+0x35/0x40 [ 87.907540][ T2431] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 87.914552][ T2431] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 87.920004][ T2431] ? _raw_spin_lock+0xf0/0xf0 [ 87.924694][ T2431] ? __kasan_check_read+0x11/0x20 [ 87.929709][ T2431] ? workingset_eviction+0x3dc/0x940 [ 87.934983][ T2431] ? __kasan_check_read+0x11/0x20 [ 87.939997][ T2431] __remove_mapping+0x562/0x690 [ 87.944842][ T2431] shrink_page_list+0x21a9/0x4250 [ 87.949948][ T2431] ? __this_cpu_preempt_check+0x13/0x20 [ 87.955486][ T2431] ? reclaim_clean_pages_from_list+0x750/0x750 [ 87.961630][ T2431] ? shrink_inactive_list+0xef0/0xef0 [ 87.966991][ T2431] ? lru_add_drain_cpu+0x580/0x6e0 [ 87.972100][ T2431] ? _raw_spin_lock_irq+0x95/0xf0 [ 87.977124][ T2431] ? __count_memcg_events+0x89/0x210 [ 87.982402][ T2431] shrink_inactive_list+0x532/0xef0 [ 87.987592][ T2431] ? should_run_aging+0x440/0x440 [ 87.992608][ T2431] ? __switch_to+0x508/0x1020 [ 87.997277][ T2431] ? __kasan_check_read+0x11/0x20 [ 88.002291][ T2431] ? lruvec_lru_size+0x230/0x250 [ 88.007220][ T2431] ? blk_start_plug+0x5a/0x170 [ 88.011980][ T2431] shrink_lruvec+0x1235/0x2860 [ 88.016738][ T2431] ? __schedule+0xb5b/0x1320 [ 88.021320][ T2431] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 88.026862][ T2431] ? __kasan_check_read+0x11/0x20 [ 88.031967][ T2431] ? preempt_schedule_common+0xbe/0xf0 [ 88.037415][ T2431] ? __kasan_check_read+0x11/0x20 [ 88.042430][ T2431] ? inactive_is_low+0x183/0x300 [ 88.047362][ T2431] shrink_node+0xf0c/0x2690 [ 88.051866][ T2431] ? ktime_get+0x10e/0x140 [ 88.056279][ T2431] do_try_to_free_pages+0x603/0x1590 [ 88.061559][ T2431] ? try_to_free_pages+0xc20/0xc20 [ 88.066662][ T2431] ? sched_clock_cpu+0x1b/0x3d0 [ 88.071509][ T2431] try_to_free_mem_cgroup_pages+0x261/0x610 [ 88.077499][ T2431] ? shrink_lruvec+0x2860/0x2860 [ 88.082446][ T2431] ? _raw_spin_unlock_irq+0x4e/0x70 [ 88.087652][ T2431] ? psi_memstall_enter+0xff/0x150 [ 88.092763][ T2431] try_charge+0x43e/0x1500 [ 88.097188][ T2431] ? __memcg_kmem_charge+0x150/0x150 [ 88.102464][ T2431] ? percpu_counter_add_batch+0x13c/0x160 [ 88.108190][ T2431] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 88.113742][ T2431] __mem_cgroup_charge+0x14c/0x6d0 [ 88.118849][ T2431] shmem_add_to_page_cache+0x574/0xe30 [ 88.124323][ T2431] ? shmem_alloc_page+0x380/0x380 [ 88.129490][ T2431] ? _raw_spin_lock_irqsave+0x130/0x130 [ 88.135043][ T2431] ? find_lock_entry+0x4b/0x200 [ 88.139899][ T2431] shmem_getpage_gfp+0x8eb/0x2120 [ 88.144930][ T2431] shmem_write_begin+0xce/0x1b0 [ 88.149782][ T2431] generic_perform_write+0x2ce/0x540 [ 88.155149][ T2431] ? atime_needs_update+0x5b0/0x5b0 [ 88.160341][ T2431] ? grab_cache_page_write_begin+0xb0/0xb0 [ 88.166154][ T2431] ? file_remove_privs+0x5b0/0x5b0 [ 88.171262][ T2431] ? __kasan_check_write+0x14/0x20 [ 88.176470][ T2431] ? down_write+0xb2/0x120 [ 88.180884][ T2431] __generic_file_write_iter+0x24b/0x480 [ 88.186514][ T2431] ? generic_write_checks+0x3d4/0x480 [ 88.191884][ T2431] generic_file_write_iter+0xa9/0x1d0 [ 88.197257][ T2431] __kernel_write+0x535/0x910 [ 88.201925][ T2431] ? vfs_read+0xa60/0xa60 [ 88.206247][ T2431] ? populate_vma_page_range+0xf0/0xf0 [ 88.211697][ T2431] ? __kasan_check_write+0x14/0x20 [ 88.216807][ T2431] dump_emit+0x246/0x370 [ 88.221046][ T2431] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 88.226504][ T2431] ? dump_user_range+0x11b/0x1a0 [ 88.231440][ T2431] dump_user_range+0x6a/0x1a0 [ 88.236111][ T2431] elf_core_dump+0x2866/0x2cc0 [ 88.240868][ T2431] ? load_elf_binary+0x28e0/0x28e0 [ 88.245977][ T2431] ? __fsnotify_parent+0x6db/0x7c0 [ 88.251174][ T2431] ? do_truncate+0x1c6/0x240 [ 88.255756][ T2431] ? putname+0xfe/0x150 [ 88.259996][ T2431] ? __kasan_check_read+0x11/0x20 [ 88.265019][ T2431] ? __ia32_sys_unshare+0x40/0x40 [ 88.270056][ T2431] do_coredump+0x1ba3/0x28e0 [ 88.274639][ T2431] ? simple_acl_create+0x1c0/0x1c0 [ 88.279743][ T2431] ? debug_smp_processor_id+0x17/0x20 [ 88.285109][ T2431] ? kmem_cache_free+0x100/0x2d0 [ 88.290040][ T2431] ? ____kasan_slab_free+0x130/0x160 [ 88.295318][ T2431] ? get_signal+0xb98/0x12e0 [ 88.299912][ T2431] ? kmem_cache_free+0x100/0x2d0 [ 88.304960][ T2431] get_signal+0xf23/0x12e0 [ 88.309382][ T2431] arch_do_signal_or_restart+0xe2/0x11d0 [ 88.315024][ T2431] ? force_sig_fault+0xd7/0x130 [ 88.319876][ T2431] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 88.325506][ T2431] ? __bad_area_nosemaphore+0x420/0x420 [ 88.331049][ T2431] ? do_user_addr_fault+0x779/0xde0 [ 88.336239][ T2431] ? __bad_area_nosemaphore+0x2b0/0x420 [ 88.341779][ T2431] exit_to_user_mode_loop+0xa2/0xe0 [ 88.346973][ T2431] exit_to_user_mode_prepare+0x76/0xa0 [ 88.352425][ T2431] irqentry_exit_to_user_mode+0x9/0x10 [ 88.357875][ T2431] irqentry_exit+0x12/0x60 [ 88.362504][ T2431] exc_page_fault+0x67/0xc0 [ 88.367024][ T2431] ? asm_exc_page_fault+0x8/0x30 [ 88.372131][ T2431] asm_exc_page_fault+0x1e/0x30 [ 88.376978][ T2431] RIP: 0033:0x7f2162e0cb27 [ 88.381389][ T2431] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 88.400987][ T2431] RSP: 002b:00007f2161971120 EFLAGS: 00010202 [ 88.407066][ T2431] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f2162f56e59 [ 88.415031][ T2431] RDX: 00007f2161971140 RSI: 00007f2161971270 RDI: 000000000000000b [ 88.423010][ T2431] RBP: 00007f2162fecd6f R08: 0000000000000000 R09: 0000000000000000 [ 88.430978][ T2431] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 88.438942][ T2431] R13: 00007f21631d0128 R14: 00007f21631d0090 R15: 00007ffcc7535f28 [ 88.446909][ T2431] [ 88.449238][ T2431] Allocated by task 2398: [ 88.453564][ T2431] __kasan_kmalloc+0xda/0x110 [ 88.458233][ T2431] kmem_cache_alloc_trace+0x181/0x2e0 [ 88.463596][ T2431] alloc_super+0x5e/0x7a0 [ 88.467914][ T2431] sget+0x1e4/0x4c0 [ 88.471803][ T2431] mount_bdev+0xf6/0x3a0 [ 88.476047][ T2431] f2fs_mount+0x34/0x40 [ 88.480197][ T2431] legacy_get_tree+0xed/0x190 [ 88.484880][ T2431] vfs_get_tree+0x89/0x260 [ 88.489320][ T2431] do_new_mount+0x25a/0xa20 [ 88.493820][ T2431] path_mount+0x585/0xc90 [ 88.498146][ T2431] __se_sys_mount+0x320/0x390 [ 88.502820][ T2431] __x64_sys_mount+0xbf/0xd0 [ 88.507411][ T2431] do_syscall_64+0x31/0x40 [ 88.511829][ T2431] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.517720][ T2431] [ 88.520045][ T2431] Freed by task 25: [ 88.523846][ T2431] kasan_set_track+0x4a/0x70 [ 88.528430][ T2431] kasan_set_free_info+0x23/0x40 [ 88.533376][ T2431] ____kasan_slab_free+0x125/0x160 [ 88.538478][ T2431] __kasan_slab_free+0x11/0x20 [ 88.543234][ T2431] slab_free_freelist_hook+0xc5/0x190 [ 88.548598][ T2431] kfree+0xc0/0x270 [ 88.552399][ T2431] destroy_super_work+0x40/0x50 [ 88.557241][ T2431] process_one_work+0x6e1/0xba0 [ 88.562079][ T2431] worker_thread+0xa6a/0x13c0 [ 88.566746][ T2431] kthread+0x346/0x3d0 [ 88.570807][ T2431] ret_from_fork+0x1f/0x30 [ 88.575297][ T2431] [ 88.577621][ T2431] Last potentially related work creation: [ 88.583426][ T2431] kasan_save_stack+0x3a/0x60 [ 88.588095][ T2431] __kasan_record_aux_stack+0xd2/0x100 [ 88.593582][ T2431] kasan_record_aux_stack_noalloc+0xb/0x10 [ 88.599381][ T2431] insert_work+0x52/0x310 [ 88.603703][ T2431] __queue_work+0x923/0xca0 [ 88.608203][ T2431] queue_work_on+0xe6/0x140 [ 88.612919][ T2431] destroy_super_rcu+0xd1/0xe0 [ 88.617822][ T2431] rcu_do_batch+0x4ef/0xab0 [ 88.622338][ T2431] rcu_core+0x577/0xd80 [ 88.626489][ T2431] rcu_core_si+0x9/0x10 [ 88.630639][ T2431] __do_softirq+0x255/0x563 [ 88.635131][ T2431] [ 88.637457][ T2431] Second to last potentially related work creation: [ 88.644039][ T2431] kasan_save_stack+0x3a/0x60 [ 88.648712][ T2431] __kasan_record_aux_stack+0xd2/0x100 [ 88.654162][ T2431] kasan_record_aux_stack_noalloc+0xb/0x10 [ 88.659959][ T2431] call_rcu+0x11a/0x10b0 [ 88.664194][ T2431] __put_super+0x254/0x2b0 [ 88.668600][ T2431] deactivate_locked_super+0xd4/0x100 [ 88.673960][ T2431] mount_bdev+0x2a9/0x3a0 [ 88.678284][ T2431] f2fs_mount+0x34/0x40 [ 88.682449][ T2431] legacy_get_tree+0xed/0x190 [ 88.687122][ T2431] vfs_get_tree+0x89/0x260 [ 88.691527][ T2431] do_new_mount+0x25a/0xa20 [ 88.696020][ T2431] path_mount+0x585/0xc90 [ 88.700341][ T2431] __se_sys_mount+0x320/0x390 [ 88.705015][ T2431] __x64_sys_mount+0xbf/0xd0 [ 88.709604][ T2431] do_syscall_64+0x31/0x40 [ 88.714020][ T2431] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.719924][ T2431] [ 88.722245][ T2431] The buggy address belongs to the object at ffff888118636000 [ 88.722245][ T2431] which belongs to the cache kmalloc-2k of size 2048 [ 88.736290][ T2431] The buggy address is located 1136 bytes inside of [ 88.736290][ T2431] 2048-byte region [ffff888118636000, ffff888118636800) [ 88.749724][ T2431] The buggy address belongs to the page: [ 88.755352][ T2431] page:ffffea0004618c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118630 [ 88.765574][ T2431] head:ffffea0004618c00 order:3 compound_mapcount:0 compound_pincount:0 [ 88.773893][ T2431] flags: 0x4000000000010200(slab|head) [ 88.779347][ T2431] raw: 4000000000010200 ffffea00042c4000 0000000300000003 ffff888100042d80 [ 88.787923][ T2431] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 88.796514][ T2431] page dumped because: kasan: bad access detected [ 88.802914][ T2431] page_owner tracks the page as allocated [ 88.808631][ T2431] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 575, ts 30616389810, free_ts 30573939032 [ 88.829272][ T2431] prep_new_page+0x179/0x180 [ 88.833854][ T2431] get_page_from_freelist+0x223b/0x23d0 [ 88.839391][ T2431] __alloc_pages_nodemask+0x290/0x620 [ 88.844760][ T2431] new_slab+0x84/0x3f0 [ 88.848819][ T2431] ___slab_alloc+0x2a6/0x450 [ 88.853399][ T2431] __slab_alloc+0x63/0xa0 [ 88.857715][ T2431] __kmalloc_track_caller+0x1ec/0x320 [ 88.863079][ T2431] kmemdup+0x26/0x60 [ 88.866964][ T2431] ipv6_sysctl_net_init+0x2f/0x410 [ 88.872064][ T2431] ops_init+0x1ba/0x4a0 [ 88.876212][ T2431] setup_net+0x376/0xb60 [ 88.880445][ T2431] copy_net_ns+0x314/0x520 [ 88.884853][ T2431] create_new_namespaces+0x3a2/0x650 [ 88.890128][ T2431] unshare_nsproxy_namespaces+0x120/0x170 [ 88.895833][ T2431] ksys_unshare+0x50f/0x800 [ 88.900326][ T2431] __x64_sys_unshare+0x38/0x40 [ 88.905090][ T2431] page last free stack trace: [ 88.909759][ T2431] __free_pages_ok+0x80b/0x830 [ 88.914513][ T2431] __free_pages+0xd8/0x3b0 [ 88.918918][ T2431] __free_slab+0xcf/0x190 [ 88.923236][ T2431] unfreeze_partials+0x15f/0x190 [ 88.928163][ T2431] put_cpu_partial+0xc1/0x180 [ 88.932837][ T2431] __slab_free+0x2c9/0x3a0 [ 88.937250][ T2431] ___cache_free+0x10e/0x130 [ 88.941832][ T2431] qlink_free+0x50/0x90 [ 88.945978][ T2431] qlist_free_all+0x5f/0xb0 [ 88.950474][ T2431] kasan_quarantine_reduce+0x14a/0x160 [ 88.955923][ T2431] __kasan_slab_alloc+0x2f/0xf0 [ 88.960763][ T2431] slab_post_alloc_hook+0x5d/0x2f0 [ 88.965865][ T2431] kmem_cache_alloc+0x162/0x2d0 [ 88.970706][ T2431] vm_area_dup+0x26/0x250 [ 88.975031][ T2431] __split_vma+0xbd/0x420 [ 88.979360][ T2431] __do_munmap+0x352/0x850 [ 88.983848][ T2431] [ 88.986169][ T2431] Memory state around the buggy address: [ 88.991884][ T2431] ffff888118636300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.000024][ T2431] ffff888118636380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.008080][ T2431] >ffff888118636400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.016233][ T2431] ^ [ 89.024033][ T2431] ffff888118636480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.032277][ T2431] ffff888118636500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.040346][ T2431] ================================================================== [ 89.048397][ T2431] Disabling lock debugging due to kernel taint [ 89.105660][ T2447] CPU: 1 PID: 2447 Comm: syz.8.573 Tainted: G B W syzkaller #0 [ 89.114390][ T2447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.124464][ T2447] Call Trace: [ 89.127757][ T2447] __dump_stack+0x21/0x24 [ 89.132245][ T2447] dump_stack_lvl+0x1a7/0x208 [ 89.137008][ T2447] ? show_regs_print_info+0x18/0x18 [ 89.142193][ T2447] ? ___ratelimit+0x3de/0x560 [ 89.146963][ T2447] ? __kasan_check_write+0x14/0x20 [ 89.152062][ T2447] ? _raw_spin_lock+0x94/0xf0 [ 89.156751][ T2447] dump_stack+0x15/0x1c [ 89.160897][ T2447] dump_header+0xdd/0x650 [ 89.165208][ T2447] oom_kill_process+0x1fa/0x2c0 [ 89.170048][ T2447] out_of_memory+0x93f/0xd20 [ 89.174623][ T2447] ? unregister_oom_notifier+0x20/0x20 [ 89.180070][ T2447] ? mutex_lock_killable+0x92/0xf0 [ 89.185184][ T2447] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 89.191696][ T2447] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 89.197256][ T2447] ? mem_cgroup_oom_trylock+0x350/0x350 [ 89.202825][ T2447] ? _raw_spin_trylock_bh+0x150/0x150 [ 89.208181][ T2447] ? _raw_spin_unlock+0x4d/0x70 [ 89.208583][ T15] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 89.213023][ T2447] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 89.213044][ T2447] try_charge+0xf69/0x1500 [ 89.234017][ T2447] ? __memcg_kmem_charge+0x150/0x150 [ 89.239472][ T2447] ? percpu_counter_add_batch+0x13c/0x160 [ 89.245180][ T2447] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 89.250718][ T2447] __mem_cgroup_charge+0x14c/0x6d0 [ 89.255826][ T2447] shmem_add_to_page_cache+0x574/0xe30 [ 89.261282][ T2447] ? shmem_alloc_page+0x380/0x380 [ 89.266299][ T2447] ? _raw_spin_lock_irqsave+0x130/0x130 [ 89.271836][ T2447] ? find_lock_entry+0x4b/0x200 [ 89.276686][ T2447] shmem_getpage_gfp+0x8eb/0x2120 [ 89.281711][ T2447] shmem_write_begin+0xce/0x1b0 [ 89.283451][ T1632] usbhid 6-1:1.0: can't add hid device: -71 [ 89.286581][ T2447] generic_perform_write+0x2ce/0x540 [ 89.286602][ T2447] ? atime_needs_update+0x5b0/0x5b0 [ 89.292639][ T1632] usbhid: probe of 6-1:1.0 failed with error -71 [ 89.297867][ T2447] ? grab_cache_page_write_begin+0xb0/0xb0 [ 89.297880][ T2447] ? file_remove_privs+0x5b0/0x5b0 [ 89.297891][ T2447] ? __kasan_check_write+0x14/0x20 [ 89.297901][ T2447] ? down_write+0xb2/0x120 [ 89.297912][ T2447] __generic_file_write_iter+0x24b/0x480 [ 89.297931][ T2447] ? generic_write_checks+0x3d4/0x480 [ 89.308254][ T1632] usb 6-1: USB disconnect, device number 16 [ 89.309457][ T2447] generic_file_write_iter+0xa9/0x1d0 [ 89.309476][ T2447] __kernel_write+0x535/0x910 [ 89.356783][ T2447] ? vfs_read+0xa60/0xa60 [ 89.361101][ T2447] ? populate_vma_page_range+0xf0/0xf0 [ 89.366556][ T2447] ? __kasan_check_write+0x14/0x20 [ 89.371658][ T2447] dump_emit+0x246/0x370 [ 89.375884][ T2447] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 89.381329][ T2447] ? dump_user_range+0x125/0x1a0 [ 89.386252][ T2447] dump_user_range+0x6a/0x1a0 [ 89.390196][ T15] usb 9-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 89.391096][ T2447] elf_core_dump+0x2866/0x2cc0 [ 89.391107][ T2447] ? load_elf_binary+0x28e0/0x28e0 [ 89.391127][ T2447] ? __fsnotify_parent+0x6db/0x7c0 [ 89.400207][ T15] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.404892][ T2447] ? do_truncate+0x1c6/0x240 [ 89.404902][ T2447] ? putname+0xfe/0x150 [ 89.404913][ T2447] ? __kasan_check_read+0x11/0x20 [ 89.404924][ T2447] ? __ia32_sys_unshare+0x40/0x40 [ 89.404943][ T2447] do_coredump+0x1ba3/0x28e0 [ 89.410726][ T15] usb 9-1: Product: syz [ 89.415143][ T2447] ? simple_acl_create+0x1c0/0x1c0 [ 89.415154][ T2447] ? debug_smp_processor_id+0x17/0x20 [ 89.415166][ T2447] ? kmem_cache_free+0x100/0x2d0 [ 89.415182][ T2447] ? ____kasan_slab_free+0x130/0x160 [ 89.423510][ T15] usb 9-1: Manufacturer: syz [ 89.427762][ T2447] ? get_signal+0xb98/0x12e0 [ 89.427781][ T2447] ? kmem_cache_free+0x100/0x2d0 [ 89.432049][ T15] usb 9-1: SerialNumber: syz [ 89.437035][ T2447] get_signal+0xf23/0x12e0 [ 89.437050][ T2447] arch_do_signal_or_restart+0xe2/0x11d0 [ 89.437063][ T2447] ? force_sig_fault+0xd7/0x130 [ 89.437073][ T2447] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 89.437089][ T2447] ? __bad_area_nosemaphore+0x420/0x420 [ 89.516439][ T2447] ? do_user_addr_fault+0x779/0xde0 [ 89.521666][ T2447] ? __bad_area_nosemaphore+0x2b0/0x420 [ 89.527218][ T2447] exit_to_user_mode_loop+0xa2/0xe0 [ 89.532425][ T2447] exit_to_user_mode_prepare+0x76/0xa0 [ 89.537888][ T2447] irqentry_exit_to_user_mode+0x9/0x10 [ 89.543520][ T2447] irqentry_exit+0x12/0x60 [ 89.547926][ T2447] exc_page_fault+0x67/0xc0 [ 89.552421][ T2447] ? asm_exc_page_fault+0x8/0x30 [ 89.557350][ T2447] asm_exc_page_fault+0x1e/0x30 [ 89.562188][ T2447] RIP: 0033:0x7f2162e0cb27 [ 89.566603][ T2447] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 89.586198][ T2447] RSP: 002b:00007f2161971120 EFLAGS: 00010202 [ 89.592363][ T2447] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f2162f56e59 [ 89.600319][ T2447] RDX: 00007f2161971140 RSI: 00007f2161971270 RDI: 000000000000000b [ 89.608279][ T2447] RBP: 00007f2162fecd6f R08: 0000000000000000 R09: 0000000000000000 [ 89.616236][ T2447] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 89.624366][ T2447] R13: 00007f21631d0128 R14: 00007f21631d0090 R15: 00007ffcc7535f28 [ 89.632898][ T2447] memory: usage 307200kB, limit 307200kB, failcnt 9433 [ 89.640026][ T2447] memory+swap: usage 422732kB, limit 9007199254740988kB, failcnt 0 [ 89.647999][ T2447] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 89.654868][ T2447] Memory cgroup stats for /syz8: [ 89.654990][ T2447] anon 3379200 [ 89.654990][ T2447] file 301559808 [ 89.654990][ T2447] kernel_stack 0 [ 89.654990][ T2447] percpu 0 [ 89.654990][ T2447] sock 0 [ 89.654990][ T2447] shmem 301559808 [ 89.654990][ T2447] file_mapped 135168 [ 89.654990][ T2447] file_dirty 0 [ 89.654990][ T2447] file_writeback 0 [ 89.654990][ T2447] anon_thp 0 [ 89.654990][ T2447] inactive_anon 311492608 [ 89.654990][ T2447] active_anon 2703360 [ 89.654990][ T2447] inactive_file 0 [ 89.654990][ T2447] active_file 0 [ 89.654990][ T2447] unevictable 0 [ 89.654990][ T2447] slab_reclaimable 0 [ 89.654990][ T2447] slab_unreclaimable 0 [ 89.654990][ T2447] slab 0 [ 89.654990][ T2447] workingset_refault_anon 0 [ 89.654990][ T2447] workingset_refault_file 0 [ 89.654990][ T2447] workingset_activate_anon 0 [ 89.654990][ T2447] workingset_activate_file 0 [ 89.654990][ T2447] workingset_restore_anon 0 [ 89.654990][ T2447] workingset_restore_file 0 [ 89.750454][ T2447] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.573,pid=2429,uid=0 [ 89.765338][ T2447] Memory cgroup out of memory: Killed process 2429 (syz.8.573) total-vm:90448kB, anon-rss:1380kB, file-rss:47980kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 89.783028][ T27] oom_reaper: reaped process 2429 (syz.8.573), now anon-rss:0kB, file-rss:51392kB, shmem-rss:0kB [ 89.783727][ T2433] syz.8.573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 89.803541][ T2433] CPU: 0 PID: 2433 Comm: syz.8.573 Tainted: G B W syzkaller #0 [ 89.812224][ T2433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.822551][ T2433] Call Trace: [ 89.825866][ T2433] __dump_stack+0x21/0x24 [ 89.830205][ T2433] dump_stack_lvl+0x1a7/0x208 [ 89.834870][ T2433] ? show_regs_print_info+0x18/0x18 [ 89.840061][ T2433] ? ___ratelimit+0x3de/0x560 [ 89.844720][ T2433] ? __kasan_check_write+0x14/0x20 [ 89.849814][ T2433] ? _raw_spin_lock+0x94/0xf0 [ 89.854473][ T2433] dump_stack+0x15/0x1c [ 89.858710][ T2433] dump_header+0xdd/0x650 [ 89.863059][ T2433] oom_kill_process+0x1fa/0x2c0 [ 89.867996][ T2433] out_of_memory+0x93f/0xd20 [ 89.872586][ T2433] ? unregister_oom_notifier+0x20/0x20 [ 89.878057][ T2433] ? mutex_lock_killable+0xdf/0xf0 [ 89.883162][ T2433] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 89.889651][ T2433] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 89.895189][ T2433] ? mem_cgroup_oom_trylock+0x350/0x350 [ 89.900823][ T2433] ? _raw_spin_trylock_bh+0x150/0x150 [ 89.906268][ T2433] ? _raw_spin_unlock+0x4d/0x70 [ 89.911115][ T2433] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 89.916651][ T2433] try_charge+0xf69/0x1500 [ 89.921057][ T2433] ? __memcg_kmem_charge+0x150/0x150 [ 89.926340][ T2433] ? percpu_counter_add_batch+0x13c/0x160 [ 89.932119][ T2433] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 89.937666][ T2433] __mem_cgroup_charge+0x14c/0x6d0 [ 89.942966][ T2433] shmem_add_to_page_cache+0x574/0xe30 [ 89.948424][ T2433] ? shmem_alloc_page+0x380/0x380 [ 89.953468][ T2433] ? _raw_spin_lock_irqsave+0x130/0x130 [ 89.959002][ T2433] ? find_lock_entry+0x4b/0x200 [ 89.963839][ T2433] shmem_getpage_gfp+0x8eb/0x2120 [ 89.968858][ T2433] shmem_write_begin+0xce/0x1b0 [ 89.973705][ T2433] generic_perform_write+0x2ce/0x540 [ 89.978975][ T2433] ? grab_cache_page_write_begin+0xb0/0xb0 [ 89.984853][ T2433] ? file_remove_privs+0x5b0/0x5b0 [ 89.989966][ T2433] ? __kasan_check_write+0x14/0x20 [ 89.995057][ T2433] ? down_write+0xb2/0x120 [ 89.999481][ T2433] __generic_file_write_iter+0x24b/0x480 [ 90.005095][ T2433] ? generic_write_checks+0x3d4/0x480 [ 90.010466][ T2433] generic_file_write_iter+0xa9/0x1d0 [ 90.015820][ T2433] __kernel_write+0x535/0x910 [ 90.020483][ T2433] ? vfs_read+0xa60/0xa60 [ 90.024817][ T2433] ? populate_vma_page_range+0xf0/0xf0 [ 90.030259][ T2433] ? __kasan_check_write+0x14/0x20 [ 90.035395][ T2433] dump_emit+0x246/0x370 [ 90.039621][ T2433] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 90.045064][ T2433] ? dump_user_range+0x125/0x1a0 [ 90.049982][ T2433] dump_user_range+0x6a/0x1a0 [ 90.054644][ T2433] elf_core_dump+0x2866/0x2cc0 [ 90.059488][ T2433] ? load_elf_binary+0x28e0/0x28e0 [ 90.064584][ T2433] ? __fsnotify_parent+0x6db/0x7c0 [ 90.069695][ T2433] ? do_truncate+0x1c6/0x240 [ 90.074267][ T2433] ? putname+0xfe/0x150 [ 90.078407][ T2433] ? __kasan_check_read+0x11/0x20 [ 90.083514][ T2433] ? __ia32_sys_unshare+0x40/0x40 [ 90.088541][ T2433] do_coredump+0x1ba3/0x28e0 [ 90.093114][ T2433] ? simple_acl_create+0x1c0/0x1c0 [ 90.098208][ T2433] ? debug_smp_processor_id+0x17/0x20 [ 90.103563][ T2433] ? kmem_cache_free+0x100/0x2d0 [ 90.108483][ T2433] ? ____kasan_slab_free+0x130/0x160 [ 90.113837][ T2433] ? get_signal+0xb98/0x12e0 [ 90.118411][ T2433] ? kmem_cache_free+0x100/0x2d0 [ 90.123330][ T2433] get_signal+0xf23/0x12e0 [ 90.127824][ T2433] arch_do_signal_or_restart+0xe2/0x11d0 [ 90.133465][ T2433] ? force_sig_fault+0xd7/0x130 [ 90.138302][ T2433] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 90.143918][ T2433] ? __bad_area_nosemaphore+0x420/0x420 [ 90.149448][ T2433] ? do_user_addr_fault+0x779/0xde0 [ 90.154720][ T2433] ? __bad_area_nosemaphore+0x2b0/0x420 [ 90.160262][ T2433] exit_to_user_mode_loop+0xa2/0xe0 [ 90.165444][ T2433] exit_to_user_mode_prepare+0x76/0xa0 [ 90.170884][ T2433] irqentry_exit_to_user_mode+0x9/0x10 [ 90.176410][ T2433] irqentry_exit+0x12/0x60 [ 90.180818][ T2433] exc_page_fault+0x67/0xc0 [ 90.185314][ T2433] ? asm_exc_page_fault+0x8/0x30 [ 90.190252][ T2433] asm_exc_page_fault+0x1e/0x30 [ 90.195084][ T2433] RIP: 0033:0x7f2162e0cb27 [ 90.199493][ T2433] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 90.219368][ T2433] RSP: 002b:00007f2161971120 EFLAGS: 00010202 [ 90.225549][ T2433] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f2162f56e59 [ 90.233515][ T2433] RDX: 00007f2161971140 RSI: 00007f2161971270 RDI: 000000000000000b [ 90.241476][ T2433] RBP: 00007f2162fecd6f R08: 0000000000000000 R09: 0000000000000000 [ 90.249439][ T2433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 90.257396][ T2433] R13: 00007f21631d0128 R14: 00007f21631d0090 R15: 00007ffcc7535f28 [ 90.266547][ T2433] memory: usage 307200kB, limit 307200kB, failcnt 9591 [ 90.273466][ T2433] memory+swap: usage 419004kB, limit 9007199254740988kB, failcnt 0 [ 90.281501][ T2433] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 90.288420][ T2433] Memory cgroup stats for /syz8: [ 90.288564][ T2433] anon 3244032 [ 90.288564][ T2433] file 301154304 [ 90.288564][ T2433] kernel_stack 0 [ 90.288564][ T2433] percpu 0 [ 90.288564][ T2433] sock 0 [ 90.288564][ T2433] shmem 301154304 [ 90.288564][ T2433] file_mapped 135168 [ 90.288564][ T2433] file_dirty 0 [ 90.288564][ T2433] file_writeback 0 [ 90.288564][ T2433] anon_thp 0 [ 90.288564][ T2433] inactive_anon 309583872 [ 90.288564][ T2433] active_anon 2703360 [ 90.288564][ T2433] inactive_file 0 [ 90.288564][ T2433] active_file 0 [ 90.288564][ T2433] unevictable 0 [ 90.288564][ T2433] slab_reclaimable 0 [ 90.288564][ T2433] slab_unreclaimable 0 [ 90.288564][ T2433] slab 0 [ 90.288564][ T2433] workingset_refault_anon 0 [ 90.288564][ T2433] workingset_refault_file 0 [ 90.288564][ T2433] workingset_activate_anon 0 [ 90.288564][ T2433] workingset_activate_file 0 [ 90.288564][ T2433] workingset_restore_anon 0 [ 90.288564][ T2433] workingset_restore_file 0 [ 90.382254][ T2433] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.573,pid=2448,uid=0 [ 90.397929][ T2433] Memory cgroup out of memory: Killed process 2448 (syz.8.573) total-vm:90448kB, anon-rss:1380kB, file-rss:39532kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 90.444360][ T2503] fuse: Bad value for 'user_id' [ 90.587029][ T15] usb 9-1: Can't get UAC3 power state for id 10 [ 90.651195][ T15] usb 9-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 90.664371][ T15] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2) [ 90.674087][ T2437] syz.8.573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 90.691363][ T2437] CPU: 0 PID: 2437 Comm: syz.8.573 Tainted: G B W syzkaller #0 [ 90.700070][ T2437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 90.710223][ T2437] Call Trace: [ 90.713529][ T2437] __dump_stack+0x21/0x24 [ 90.717869][ T2437] dump_stack_lvl+0x1a7/0x208 [ 90.722555][ T2437] ? show_regs_print_info+0x18/0x18 [ 90.727772][ T2437] ? ___ratelimit+0x3de/0x560 [ 90.732462][ T2437] ? __kasan_check_write+0x14/0x20 [ 90.737583][ T2437] ? _raw_spin_lock+0x94/0xf0 [ 90.742269][ T2437] dump_stack+0x15/0x1c [ 90.746441][ T2437] dump_header+0xdd/0x650 [ 90.750778][ T2437] oom_kill_process+0x1fa/0x2c0 [ 90.755626][ T2437] out_of_memory+0x93f/0xd20 [ 90.760224][ T2437] ? unregister_oom_notifier+0x20/0x20 [ 90.765691][ T2437] ? mutex_lock_killable+0x92/0xf0 [ 90.770810][ T2437] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 90.777323][ T2437] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 90.782884][ T2437] ? mem_cgroup_oom_trylock+0x350/0x350 [ 90.788453][ T2437] ? _raw_spin_trylock_bh+0x150/0x150 [ 90.793836][ T2437] ? _raw_spin_unlock+0x4d/0x70 [ 90.798701][ T2437] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 90.804259][ T2437] try_charge+0xf69/0x1500 [ 90.808686][ T2437] ? __memcg_kmem_charge+0x150/0x150 [ 90.813992][ T2437] ? percpu_counter_add_batch+0x13c/0x160 [ 90.819731][ T2437] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 90.825289][ T2437] __mem_cgroup_charge+0x14c/0x6d0 [ 90.830420][ T2437] shmem_add_to_page_cache+0x574/0xe30 [ 90.835983][ T2437] ? shmem_alloc_page+0x380/0x380 [ 90.841108][ T2437] ? _raw_spin_lock_irqsave+0x130/0x130 [ 90.846664][ T2437] ? find_lock_entry+0x4b/0x200 [ 90.851526][ T2437] shmem_getpage_gfp+0x8eb/0x2120 [ 90.856560][ T2437] shmem_write_begin+0xce/0x1b0 [ 90.861408][ T2437] generic_perform_write+0x2ce/0x540 [ 90.866696][ T2437] ? atime_needs_update+0x5b0/0x5b0 [ 90.871894][ T2437] ? grab_cache_page_write_begin+0xb0/0xb0 [ 90.877691][ T2437] ? file_remove_privs+0x5b0/0x5b0 [ 90.882879][ T2437] ? __kasan_check_write+0x14/0x20 [ 90.887993][ T2437] ? down_write+0xb2/0x120 [ 90.892398][ T2437] __generic_file_write_iter+0x24b/0x480 [ 90.898026][ T2437] ? generic_write_checks+0x3d4/0x480 [ 90.903391][ T2437] generic_file_write_iter+0xa9/0x1d0 [ 90.908757][ T2437] __kernel_write+0x535/0x910 [ 90.913428][ T2437] ? vfs_read+0xa60/0xa60 [ 90.917774][ T2437] ? populate_vma_page_range+0xf0/0xf0 [ 90.923245][ T2437] ? __kasan_check_write+0x14/0x20 [ 90.928348][ T2437] dump_emit+0x246/0x370 [ 90.932582][ T2437] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 90.938119][ T2437] ? dump_user_range+0x31/0x1a0 [ 90.942960][ T2437] ? dump_user_range+0xbd/0x1a0 [ 90.947800][ T2437] dump_user_range+0x6a/0x1a0 [ 90.952473][ T2437] elf_core_dump+0x2866/0x2cc0 [ 90.957227][ T2437] ? load_elf_binary+0x28e0/0x28e0 [ 90.962328][ T2437] ? __fsnotify_parent+0x6db/0x7c0 [ 90.967442][ T2437] ? do_truncate+0x1c6/0x240 [ 90.972019][ T2437] ? putname+0xfe/0x150 [ 90.976166][ T2437] ? __kasan_check_read+0x11/0x20 [ 90.981181][ T2437] ? __ia32_sys_unshare+0x40/0x40 [ 90.986197][ T2437] do_coredump+0x1ba3/0x28e0 [ 90.990780][ T2437] ? simple_acl_create+0x1c0/0x1c0 [ 90.995880][ T2437] ? debug_smp_processor_id+0x17/0x20 [ 91.001243][ T2437] ? kmem_cache_free+0x100/0x2d0 [ 91.006168][ T2437] ? ____kasan_slab_free+0x130/0x160 [ 91.011441][ T2437] ? get_signal+0xb98/0x12e0 [ 91.016022][ T2437] ? kmem_cache_free+0x100/0x2d0 [ 91.020950][ T2437] get_signal+0xf23/0x12e0 [ 91.025360][ T2437] arch_do_signal_or_restart+0xe2/0x11d0 [ 91.030985][ T2437] ? force_sig_fault+0xd7/0x130 [ 91.035827][ T2437] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 91.041451][ T2437] ? __bad_area_nosemaphore+0x420/0x420 [ 91.046989][ T2437] ? do_user_addr_fault+0x779/0xde0 [ 91.052388][ T2437] ? __bad_area_nosemaphore+0x2b0/0x420 [ 91.057927][ T2437] exit_to_user_mode_loop+0xa2/0xe0 [ 91.063114][ T2437] exit_to_user_mode_prepare+0x76/0xa0 [ 91.068563][ T2437] irqentry_exit_to_user_mode+0x9/0x10 [ 91.074010][ T2437] irqentry_exit+0x12/0x60 [ 91.078419][ T2437] exc_page_fault+0x67/0xc0 [ 91.082914][ T2437] ? asm_exc_page_fault+0x8/0x30 [ 91.087836][ T2437] asm_exc_page_fault+0x1e/0x30 [ 91.092672][ T2437] RIP: 0033:0x7f2162e0cb27 [ 91.097077][ T2437] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 91.116670][ T2437] RSP: 002b:00007f2161971120 EFLAGS: 00010202 [ 91.122728][ T2437] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f2162f56e59 [ 91.130688][ T2437] RDX: 00007f2161971140 RSI: 00007f2161971270 RDI: 000000000000000b [ 91.138655][ T2437] RBP: 00007f2162fecd6f R08: 0000000000000000 R09: 0000000000000000 [ 91.146613][ T2437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 91.154578][ T2437] R13: 00007f21631d0128 R14: 00007f21631d0090 R15: 00007ffcc7535f28 [ 91.163186][ T2437] memory: usage 307200kB, limit 307200kB, failcnt 12097 [ 91.168476][ T15] snd-usb-audio: probe of 9-1:1.0 failed with error -71 [ 91.182468][ T15] usb 9-1: USB disconnect, device number 7 [ 91.186928][ T2437] memory+swap: usage 421776kB, limit 9007199254740988kB, failcnt 0 [ 91.221526][ T2437] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 91.234210][ T2437] Memory cgroup stats for /syz8: [ 91.234334][ T2437] anon 3244032 [ 91.234334][ T2437] file 299532288 [ 91.234334][ T2437] kernel_stack 0 [ 91.234334][ T2437] percpu 0 [ 91.234334][ T2437] sock 0 [ 91.234334][ T2437] shmem 299667456 [ 91.234334][ T2437] file_mapped 135168 [ 91.234334][ T2437] file_dirty 0 [ 91.234334][ T2437] file_writeback 0 [ 91.234334][ T2437] anon_thp 0 [ 91.234334][ T2437] inactive_anon 309239808 [ 91.234334][ T2437] active_anon 3919872 [ 91.234334][ T2437] inactive_file 0 [ 91.234334][ T2437] active_file 0 [ 91.234334][ T2437] unevictable 0 [ 91.234334][ T2437] slab_reclaimable 0 [ 91.234334][ T2437] slab_unreclaimable 0 [ 91.234334][ T2437] slab 0 [ 91.234334][ T2437] workingset_refault_anon 0 [ 91.234334][ T2437] workingset_refault_file 0 [ 91.234334][ T2437] workingset_activate_anon 0 [ 91.234334][ T2437] workingset_activate_file 0 [ 91.234334][ T2437] workingset_restore_anon 0 [ 91.234334][ T2437] workingset_restore_file 0 [ 91.326887][ T2437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.573,pid=2430,uid=0 [ 91.341993][ T2437] Memory cgroup out of memory: Killed process 2430 (syz.8.573) total-vm:90448kB, anon-rss:1380kB, file-rss:43756kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 91.359635][ T27] oom_reaper: reaped process 2430 (syz.8.573), now anon-rss:0kB, file-rss:44416kB, shmem-rss:0kB [ 91.370765][ T2435] syz.8.573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 91.380832][ T2435] CPU: 1 PID: 2435 Comm: syz.8.573 Tainted: G B W syzkaller #0 [ 91.389499][ T2435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.399535][ T2435] Call Trace: [ 91.402895][ T2435] __dump_stack+0x21/0x24 [ 91.407203][ T2435] dump_stack_lvl+0x1a7/0x208 [ 91.411861][ T2435] ? show_regs_print_info+0x18/0x18 [ 91.417045][ T2435] ? ___ratelimit+0x3de/0x560 [ 91.421706][ T2435] ? __kasan_check_write+0x14/0x20 [ 91.426809][ T2435] ? _raw_spin_lock+0x94/0xf0 [ 91.431474][ T2435] dump_stack+0x15/0x1c [ 91.435611][ T2435] dump_header+0xdd/0x650 [ 91.439920][ T2435] oom_kill_process+0x1fa/0x2c0 [ 91.444752][ T2435] out_of_memory+0x93f/0xd20 [ 91.449321][ T2435] ? unregister_oom_notifier+0x20/0x20 [ 91.454758][ T2435] ? mutex_lock_killable+0xdf/0xf0 [ 91.459847][ T2435] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 91.466325][ T2435] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 91.471980][ T2435] ? mem_cgroup_oom_trylock+0x350/0x350 [ 91.477525][ T2435] ? _raw_spin_trylock_bh+0x150/0x150 [ 91.482875][ T2435] ? _raw_spin_unlock+0x4d/0x70 [ 91.487739][ T2435] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 91.493288][ T2435] try_charge+0xf69/0x1500 [ 91.497692][ T2435] ? __memcg_kmem_charge+0x150/0x150 [ 91.502955][ T2435] ? percpu_counter_add_batch+0x13c/0x160 [ 91.508652][ T2435] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 91.514175][ T2435] __mem_cgroup_charge+0x14c/0x6d0 [ 91.519264][ T2435] shmem_add_to_page_cache+0x574/0xe30 [ 91.524705][ T2435] ? shmem_alloc_page+0x380/0x380 [ 91.529711][ T2435] ? _raw_spin_lock_irqsave+0x130/0x130 [ 91.535325][ T2435] ? find_lock_entry+0x4b/0x200 [ 91.540166][ T2435] shmem_getpage_gfp+0x8eb/0x2120 [ 91.545184][ T2435] shmem_write_begin+0xce/0x1b0 [ 91.550213][ T2435] generic_perform_write+0x2ce/0x540 [ 91.555512][ T2435] ? atime_needs_update+0x5b0/0x5b0 [ 91.560701][ T2435] ? grab_cache_page_write_begin+0xb0/0xb0 [ 91.566490][ T2435] ? file_remove_privs+0x5b0/0x5b0 [ 91.571583][ T2435] ? __kasan_check_write+0x14/0x20 [ 91.577525][ T2435] ? down_write+0xb2/0x120 [ 91.581932][ T2435] __generic_file_write_iter+0x24b/0x480 [ 91.587552][ T2435] ? generic_write_checks+0x3d4/0x480 [ 91.592911][ T2435] generic_file_write_iter+0xa9/0x1d0 [ 91.598280][ T2435] __kernel_write+0x535/0x910 [ 91.602949][ T2435] ? vfs_read+0xa60/0xa60 [ 91.607283][ T2435] ? populate_vma_page_range+0xf0/0xf0 [ 91.612740][ T2435] ? __kasan_check_write+0x14/0x20 [ 91.617832][ T2435] dump_emit+0x246/0x370 [ 91.622059][ T2435] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 91.627501][ T2435] dump_user_range+0x6a/0x1a0 [ 91.632158][ T2435] elf_core_dump+0x2866/0x2cc0 [ 91.636912][ T2435] ? load_elf_binary+0x28e0/0x28e0 [ 91.642016][ T2435] ? __fsnotify_parent+0x6db/0x7c0 [ 91.647117][ T2435] ? do_truncate+0x1c6/0x240 [ 91.651698][ T2435] ? putname+0xfe/0x150 [ 91.655835][ T2435] ? __kasan_check_read+0x11/0x20 [ 91.661017][ T2435] ? __ia32_sys_unshare+0x40/0x40 [ 91.666025][ T2435] do_coredump+0x1ba3/0x28e0 [ 91.670597][ T2435] ? simple_acl_create+0x1c0/0x1c0 [ 91.675689][ T2435] ? debug_smp_processor_id+0x17/0x20 [ 91.681066][ T2435] ? kmem_cache_free+0x100/0x2d0 [ 91.685982][ T2435] ? ____kasan_slab_free+0x130/0x160 [ 91.691263][ T2435] ? get_signal+0xb98/0x12e0 [ 91.695836][ T2435] ? kmem_cache_free+0x100/0x2d0 [ 91.700786][ T2435] get_signal+0xf23/0x12e0 [ 91.705186][ T2435] arch_do_signal_or_restart+0xe2/0x11d0 [ 91.710805][ T2435] ? force_sig_fault+0xd7/0x130 [ 91.715643][ T2435] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 91.721267][ T2435] ? __bad_area_nosemaphore+0x420/0x420 [ 91.726794][ T2435] ? do_user_addr_fault+0x779/0xde0 [ 91.731985][ T2435] ? __bad_area_nosemaphore+0x2b0/0x420 [ 91.737612][ T2435] exit_to_user_mode_loop+0xa2/0xe0 [ 91.742801][ T2435] exit_to_user_mode_prepare+0x76/0xa0 [ 91.748253][ T2435] irqentry_exit_to_user_mode+0x9/0x10 [ 91.753690][ T2435] irqentry_exit+0x12/0x60 [ 91.758087][ T2435] exc_page_fault+0x67/0xc0 [ 91.762574][ T2435] ? asm_exc_page_fault+0x8/0x30 [ 91.767510][ T2435] asm_exc_page_fault+0x1e/0x30 [ 91.772350][ T2435] RIP: 0033:0x7f2162e0cb27 [ 91.776760][ T2435] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 91.796468][ T2435] RSP: 002b:00007f2161971120 EFLAGS: 00010202 [ 91.802533][ T2435] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f2162f56e59 [ 91.810506][ T2435] RDX: 00007f2161971140 RSI: 00007f2161971270 RDI: 000000000000000b [ 91.818473][ T2435] RBP: 00007f2162fecd6f R08: 0000000000000000 R09: 0000000000000000 [ 91.826443][ T2435] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 91.835523][ T2435] R13: 00007f21631d0128 R14: 00007f21631d0090 R15: 00007ffcc7535f28 [ 91.847797][ T2435] memory: usage 306880kB, limit 307200kB, failcnt 12949 [ 91.860037][ T2435] memory+swap: usage 410036kB, limit 9007199254740988kB, failcnt 0 [ 91.868046][ T2435] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 91.875186][ T2435] Memory cgroup stats for /syz8: [ 91.875300][ T2435] anon 2973696 [ 91.875300][ T2435] file 299667456 [ 91.875300][ T2435] kernel_stack 0 [ 91.875300][ T2435] percpu 0 [ 91.875300][ T2435] sock 0 [ 91.875300][ T2435] shmem 299802624 [ 91.875300][ T2435] file_mapped 135168 [ 91.875300][ T2435] file_dirty 0 [ 91.875300][ T2435] file_writeback 0 [ 91.875300][ T2435] anon_thp 0 [ 91.875300][ T2435] inactive_anon 300908544 [ 91.875300][ T2435] active_anon 10678272 [ 91.875300][ T2435] inactive_file 0 [ 91.875300][ T2435] active_file 0 [ 91.875300][ T2435] unevictable 0 [ 91.875300][ T2435] slab_reclaimable 0 [ 91.875300][ T2435] slab_unreclaimable 0 [ 91.875300][ T2435] slab 0 [ 91.875300][ T2435] workingset_refault_anon 0 [ 91.875300][ T2435] workingset_refault_file 0 [ 91.875300][ T2435] workingset_activate_anon 0 [ 91.875300][ T2435] workingset_activate_file 0 [ 91.875300][ T2435] workingset_restore_anon 0 [ 91.875300][ T2435] workingset_restore_file 0 [ 91.968125][ T2435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.573,pid=2432,uid=0 [ 91.982879][ T2435] Memory cgroup out of memory: Killed process 2432 (syz.8.573) total-vm:90448kB, anon-rss:1380kB, file-rss:43756kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 92.000350][ T27] oom_reaper: reaped process 2432 (syz.8.573), now anon-rss:0kB, file-rss:47808kB, shmem-rss:0kB [ 92.051495][ T2444] syz.8.573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 92.088151][ T2444] CPU: 1 PID: 2444 Comm: syz.8.573 Tainted: G B W syzkaller #0 [ 92.096861][ T2444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.106924][ T2444] Call Trace: [ 92.110233][ T2444] __dump_stack+0x21/0x24 [ 92.114572][ T2444] dump_stack_lvl+0x1a7/0x208 [ 92.119262][ T2444] ? show_regs_print_info+0x18/0x18 [ 92.124474][ T2444] ? ___ratelimit+0x3de/0x560 [ 92.129178][ T2444] ? __kasan_check_write+0x14/0x20 [ 92.134300][ T2444] ? _raw_spin_lock+0x94/0xf0 [ 92.139168][ T2444] dump_stack+0x15/0x1c [ 92.143347][ T2444] dump_header+0xdd/0x650 [ 92.147699][ T2444] oom_kill_process+0x1fa/0x2c0 [ 92.152556][ T2444] out_of_memory+0x93f/0xd20 [ 92.157189][ T2444] ? unregister_oom_notifier+0x20/0x20 [ 92.162657][ T2444] ? mutex_lock_killable+0xdf/0xf0 [ 92.167787][ T2444] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 92.174301][ T2444] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 92.179869][ T2444] ? mem_cgroup_oom_trylock+0x350/0x350 [ 92.185435][ T2444] ? _raw_spin_trylock_bh+0x150/0x150 [ 92.190825][ T2444] ? _raw_spin_unlock+0x4d/0x70 [ 92.195688][ T2444] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 92.201248][ T2444] try_charge+0xf69/0x1500 [ 92.205683][ T2444] ? __memcg_kmem_charge+0x150/0x150 [ 92.210978][ T2444] ? percpu_counter_add_batch+0x13c/0x160 [ 92.216705][ T2444] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 92.222259][ T2444] __mem_cgroup_charge+0x14c/0x6d0 [ 92.227443][ T2444] shmem_add_to_page_cache+0x574/0xe30 [ 92.232898][ T2444] ? shmem_alloc_page+0x380/0x380 [ 92.237921][ T2444] ? __schedule+0xb5b/0x1320 [ 92.242499][ T2444] ? find_lock_entry+0x4b/0x200 [ 92.247350][ T2444] shmem_getpage_gfp+0x8eb/0x2120 [ 92.252367][ T2444] shmem_write_begin+0xce/0x1b0 [ 92.257308][ T2444] generic_perform_write+0x2ce/0x540 [ 92.262594][ T2444] ? atime_needs_update+0x5b0/0x5b0 [ 92.267787][ T2444] ? grab_cache_page_write_begin+0xb0/0xb0 [ 92.273604][ T2444] ? file_remove_privs+0x5b0/0x5b0 [ 92.278708][ T2444] ? __kasan_check_write+0x14/0x20 [ 92.283892][ T2444] ? down_write+0xb2/0x120 [ 92.288294][ T2444] __generic_file_write_iter+0x24b/0x480 [ 92.293945][ T2444] ? generic_write_checks+0x3d4/0x480 [ 92.299314][ T2444] generic_file_write_iter+0xa9/0x1d0 [ 92.304672][ T2444] __kernel_write+0x535/0x910 [ 92.309336][ T2444] ? vfs_read+0xa60/0xa60 [ 92.313652][ T2444] ? populate_vma_page_range+0xf0/0xf0 [ 92.319096][ T2444] ? __kasan_check_write+0x14/0x20 [ 92.324244][ T2444] dump_emit+0x246/0x370 [ 92.328500][ T2444] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 92.333971][ T2444] ? dump_user_range+0x31/0x1a0 [ 92.338830][ T2444] ? dump_user_range+0xbd/0x1a0 [ 92.343699][ T2444] dump_user_range+0x6a/0x1a0 [ 92.348475][ T2444] elf_core_dump+0x2866/0x2cc0 [ 92.353407][ T2444] ? load_elf_binary+0x28e0/0x28e0 [ 92.358611][ T2444] ? __fsnotify_parent+0x6db/0x7c0 [ 92.363718][ T2444] ? do_truncate+0x1c6/0x240 [ 92.368298][ T2444] ? putname+0xfe/0x150 [ 92.372546][ T2444] ? __kasan_check_read+0x11/0x20 [ 92.377574][ T2444] ? __ia32_sys_unshare+0x40/0x40 [ 92.382606][ T2444] do_coredump+0x1ba3/0x28e0 [ 92.387195][ T2444] ? simple_acl_create+0x1c0/0x1c0 [ 92.392311][ T2444] ? debug_smp_processor_id+0x17/0x20 [ 92.397704][ T2444] ? kmem_cache_free+0x100/0x2d0 [ 92.402637][ T2444] ? ____kasan_slab_free+0x130/0x160 [ 92.407916][ T2444] ? get_signal+0xb98/0x12e0 [ 92.412523][ T2444] ? kmem_cache_free+0x100/0x2d0 [ 92.417465][ T2444] get_signal+0xf23/0x12e0 [ 92.421885][ T2444] arch_do_signal_or_restart+0xe2/0x11d0 [ 92.427525][ T2444] ? force_sig_fault+0xd7/0x130 [ 92.432367][ T2444] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 92.437991][ T2444] ? __bad_area_nosemaphore+0x420/0x420 [ 92.443529][ T2444] ? do_user_addr_fault+0x779/0xde0 [ 92.448809][ T2444] ? __bad_area_nosemaphore+0x2b0/0x420 [ 92.454347][ T2444] exit_to_user_mode_loop+0xa2/0xe0 [ 92.459537][ T2444] exit_to_user_mode_prepare+0x76/0xa0 [ 92.464990][ T2444] irqentry_exit_to_user_mode+0x9/0x10 [ 92.470445][ T2444] irqentry_exit+0x12/0x60 [ 92.474853][ T2444] exc_page_fault+0x67/0xc0 [ 92.479347][ T2444] ? asm_exc_page_fault+0x8/0x30 [ 92.484277][ T2444] asm_exc_page_fault+0x1e/0x30 [ 92.489120][ T2444] RIP: 0033:0x7f2162e0cb27 [ 92.493530][ T2444] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 92.513156][ T2444] RSP: 002b:00007f2161971120 EFLAGS: 00010202 [ 92.519228][ T2444] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f2162f56e59 [ 92.527208][ T2444] RDX: 00007f2161971140 RSI: 00007f2161971270 RDI: 000000000000000b [ 92.535192][ T2444] RBP: 00007f2162fecd6f R08: 0000000000000000 R09: 0000000000000000 [ 92.543250][ T2444] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 92.551219][ T2444] R13: 00007f21631d0128 R14: 00007f21631d0090 R15: 00007ffcc7535f28 [ 92.560194][ T2444] memory: usage 290004kB, limit 307200kB, failcnt 13328 [ 92.617379][ T2444] memory+swap: usage 403208kB, limit 9007199254740988kB, failcnt 0 [ 92.625328][ T2444] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 92.690841][ T2444] Memory cgroup stats for /syz8: [ 92.690966][ T2444] anon 2838528 [ 92.690966][ T2444] file 302641152 [ 92.690966][ T2444] kernel_stack 0 [ 92.690966][ T2444] percpu 0 [ 92.690966][ T2444] sock 0 [ 92.690966][ T2444] shmem 301694976 [ 92.690966][ T2444] file_mapped 811008 [ 92.690966][ T2444] file_dirty 0 [ 92.690966][ T2444] file_writeback 405504 [ 92.690966][ T2444] anon_thp 0 [ 92.690966][ T2444] inactive_anon 303341568 [ 92.690966][ T2444] active_anon 10002432 [ 92.690966][ T2444] inactive_file 946176 [ 92.690966][ T2444] active_file 0 [ 92.690966][ T2444] unevictable 0 [ 92.690966][ T2444] slab_reclaimable 0 [ 92.690966][ T2444] slab_unreclaimable 0 [ 92.690966][ T2444] slab 0 [ 92.690966][ T2444] workingset_refault_anon 0 [ 92.690966][ T2444] workingset_refault_file 0 [ 92.690966][ T2444] workingset_activate_anon 0 [ 92.690966][ T2444] workingset_activate_file 0 [ 92.690966][ T2444] workingset_restore_anon 0 [ 92.690966][ T2444] workingset_restore_file 0 [ 92.786532][ T2444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.573,pid=2435,uid=0 [ 92.801296][ T2444] Memory cgroup out of memory: Killed process 2435 (syz.8.573) total-vm:90448kB, anon-rss:1380kB, file-rss:51436kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 92.818926][ T27] oom_reaper: reaped process 2435 (syz.8.573), now anon-rss:0kB, file-rss:53376kB, shmem-rss:0kB [ 92.824587][ T2444] syz.8.573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 92.839442][ T2444] CPU: 1 PID: 2444 Comm: syz.8.573 Tainted: G B W syzkaller #0 [ 92.848125][ T2444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.858179][ T2444] Call Trace: [ 92.861470][ T2444] __dump_stack+0x21/0x24 [ 92.865785][ T2444] dump_stack_lvl+0x1a7/0x208 [ 92.870460][ T2444] ? show_regs_print_info+0x18/0x18 [ 92.875639][ T2444] ? ___ratelimit+0x3de/0x560 [ 92.880299][ T2444] ? __kasan_check_write+0x14/0x20 [ 92.885392][ T2444] ? _raw_spin_lock+0x94/0xf0 [ 92.890049][ T2444] dump_stack+0x15/0x1c [ 92.894186][ T2444] dump_header+0xdd/0x650 [ 92.898505][ T2444] oom_kill_process+0x1fa/0x2c0 [ 92.903337][ T2444] out_of_memory+0x93f/0xd20 [ 92.907924][ T2444] ? unregister_oom_notifier+0x20/0x20 [ 92.913366][ T2444] ? mutex_lock_killable+0xdf/0xf0 [ 92.918458][ T2444] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 92.924941][ T2444] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 92.930469][ T2444] ? mem_cgroup_oom_trylock+0x350/0x350 [ 92.936013][ T2444] ? _raw_spin_trylock_bh+0x150/0x150 [ 92.941372][ T2444] ? _raw_spin_unlock+0x4d/0x70 [ 92.946220][ T2444] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 92.951756][ T2444] try_charge+0xf69/0x1500 [ 92.956157][ T2444] ? __memcg_kmem_charge+0x150/0x150 [ 92.961449][ T2444] ? percpu_counter_add_batch+0x13c/0x160 [ 92.967150][ T2444] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 92.972695][ T2444] __mem_cgroup_charge+0x14c/0x6d0 [ 92.977788][ T2444] shmem_add_to_page_cache+0x574/0xe30 [ 92.983244][ T2444] ? shmem_alloc_page+0x380/0x380 [ 92.988249][ T2444] ? _raw_spin_lock_irqsave+0x130/0x130 [ 92.993774][ T2444] ? find_lock_entry+0x4b/0x200 [ 92.998626][ T2444] shmem_getpage_gfp+0x8eb/0x2120 [ 93.003634][ T2444] shmem_write_begin+0xce/0x1b0 [ 93.008483][ T2444] generic_perform_write+0x2ce/0x540 [ 93.013767][ T2444] ? atime_needs_update+0x5b0/0x5b0 [ 93.018947][ T2444] ? grab_cache_page_write_begin+0xb0/0xb0 [ 93.024737][ T2444] ? file_remove_privs+0x5b0/0x5b0 [ 93.029844][ T2444] ? __kasan_check_write+0x14/0x20 [ 93.034942][ T2444] ? down_write+0xb2/0x120 [ 93.039342][ T2444] __generic_file_write_iter+0x24b/0x480 [ 93.044957][ T2444] ? generic_write_checks+0x3d4/0x480 [ 93.050313][ T2444] generic_file_write_iter+0xa9/0x1d0 [ 93.055670][ T2444] __kernel_write+0x535/0x910 [ 93.060329][ T2444] ? vfs_read+0xa60/0xa60 [ 93.064641][ T2444] ? populate_vma_page_range+0xf0/0xf0 [ 93.070083][ T2444] ? __kasan_check_write+0x14/0x20 [ 93.075176][ T2444] dump_emit+0x246/0x370 [ 93.079417][ T2444] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 93.084854][ T2444] ? dump_user_range+0x31/0x1a0 [ 93.089698][ T2444] ? dump_user_range+0xbd/0x1a0 [ 93.094527][ T2444] dump_user_range+0x6a/0x1a0 [ 93.099183][ T2444] elf_core_dump+0x2866/0x2cc0 [ 93.103928][ T2444] ? load_elf_binary+0x28e0/0x28e0 [ 93.109023][ T2444] ? __fsnotify_parent+0x6db/0x7c0 [ 93.114131][ T2444] ? do_truncate+0x1c6/0x240 [ 93.118709][ T2444] ? putname+0xfe/0x150 [ 93.122857][ T2444] ? __kasan_check_read+0x11/0x20 [ 93.127866][ T2444] ? __ia32_sys_unshare+0x40/0x40 [ 93.132884][ T2444] do_coredump+0x1ba3/0x28e0 [ 93.137465][ T2444] ? simple_acl_create+0x1c0/0x1c0 [ 93.142558][ T2444] ? debug_smp_processor_id+0x17/0x20 [ 93.147912][ T2444] ? kmem_cache_free+0x100/0x2d0 [ 93.152832][ T2444] ? ____kasan_slab_free+0x130/0x160 [ 93.158108][ T2444] ? get_signal+0xb98/0x12e0 [ 93.162692][ T2444] ? kmem_cache_free+0x100/0x2d0 [ 93.167621][ T2444] get_signal+0xf23/0x12e0 [ 93.172032][ T2444] arch_do_signal_or_restart+0xe2/0x11d0 [ 93.177671][ T2444] ? force_sig_fault+0xd7/0x130 [ 93.182510][ T2444] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 93.188134][ T2444] ? __bad_area_nosemaphore+0x420/0x420 [ 93.193672][ T2444] ? do_user_addr_fault+0x779/0xde0 [ 93.198861][ T2444] ? __bad_area_nosemaphore+0x2b0/0x420 [ 93.204396][ T2444] exit_to_user_mode_loop+0xa2/0xe0 [ 93.209582][ T2444] exit_to_user_mode_prepare+0x76/0xa0 [ 93.215034][ T2444] irqentry_exit_to_user_mode+0x9/0x10 [ 93.220489][ T2444] irqentry_exit+0x12/0x60 [ 93.224903][ T2444] exc_page_fault+0x67/0xc0 [ 93.229398][ T2444] ? asm_exc_page_fault+0x8/0x30 [ 93.234342][ T2444] asm_exc_page_fault+0x1e/0x30 [ 93.239186][ T2444] RIP: 0033:0x7f2162e0cb27 [ 93.243594][ T2444] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 93.263189][ T2444] RSP: 002b:00007f2161971120 EFLAGS: 00010202 [ 93.269259][ T2444] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f2162f56e59 [ 93.277222][ T2444] RDX: 00007f2161971140 RSI: 00007f2161971270 RDI: 000000000000000b [ 93.285356][ T2444] RBP: 00007f2162fecd6f R08: 0000000000000000 R09: 0000000000000000 [ 93.293320][ T2444] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 93.301301][ T2444] R13: 00007f21631d0128 R14: 00007f21631d0090 R15: 00007ffcc7535f28 [ 93.309779][ T2444] memory: usage 307200kB, limit 307200kB, failcnt 14957 [ 93.319848][ T2444] memory+swap: usage 414084kB, limit 9007199254740988kB, failcnt 0 [ 93.327884][ T2444] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 93.334864][ T2444] Memory cgroup stats for /syz8: [ 93.334983][ T2444] anon 2703360 [ 93.334983][ T2444] file 294936576 [ 93.334983][ T2444] kernel_stack 0 [ 93.334983][ T2444] percpu 0 [ 93.334983][ T2444] sock 0 [ 93.334983][ T2444] shmem 295071744 [ 93.334983][ T2444] file_mapped 135168 [ 93.334983][ T2444] file_dirty 0 [ 93.334983][ T2444] file_writeback 0 [ 93.334983][ T2444] anon_thp 0 [ 93.334983][ T2444] inactive_anon 296312832 [ 93.334983][ T2444] active_anon 9461760 [ 93.334983][ T2444] inactive_file 151552 [ 93.334983][ T2444] active_file 0 [ 93.334983][ T2444] unevictable 0 [ 93.334983][ T2444] slab_reclaimable 0 [ 93.334983][ T2444] slab_unreclaimable 0 [ 93.334983][ T2444] slab 0 [ 93.334983][ T2444] workingset_refault_anon 0 [ 93.334983][ T2444] workingset_refault_file 0 [ 93.334983][ T2444] workingset_activate_anon 0 [ 93.334983][ T2444] workingset_activate_file 0 [ 93.334983][ T2444] workingset_restore_anon 0 [ 93.334983][ T2444] workingset_restore_file 0 [ 93.428002][ T2444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.573,pid=2447,uid=0 [ 93.442795][ T2444] Memory cgroup out of memory: Killed process 2447 (syz.8.573) total-vm:90448kB, anon-rss:1380kB, file-rss:43756kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 93.460202][ T27] oom_reaper: reaped process 2447 (syz.8.573), now anon-rss:0kB, file-rss:45760kB, shmem-rss:0kB [ 93.561907][ T2467] syz.8.573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 93.645725][ T2467] CPU: 1 PID: 2467 Comm: syz.8.573 Tainted: G B W syzkaller #0 [ 93.654451][ T2467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.664520][ T2467] Call Trace: [ 93.667829][ T2467] __dump_stack+0x21/0x24 [ 93.672176][ T2467] dump_stack_lvl+0x1a7/0x208 [ 93.676870][ T2467] ? show_regs_print_info+0x18/0x18 [ 93.682225][ T2467] ? ___ratelimit+0x3de/0x560 [ 93.687055][ T2467] ? _raw_spin_lock+0x94/0xf0 [ 93.691753][ T2467] dump_stack+0x15/0x1c [ 93.695930][ T2467] dump_header+0xdd/0x650 [ 93.700277][ T2467] oom_kill_process+0x1fa/0x2c0 [ 93.705226][ T2467] out_of_memory+0x93f/0xd20 [ 93.709920][ T2467] ? unregister_oom_notifier+0x20/0x20 [ 93.715388][ T2467] ? mutex_lock_killable+0xdf/0xf0 [ 93.720512][ T2467] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 93.727367][ T2467] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 93.732926][ T2467] ? mem_cgroup_oom_trylock+0x350/0x350 [ 93.738488][ T2467] ? _raw_spin_trylock_bh+0x150/0x150 [ 93.743956][ T2467] ? _raw_spin_unlock+0x4d/0x70 [ 93.748819][ T2467] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 93.754369][ T2467] try_charge+0xf69/0x1500 [ 93.758794][ T2467] ? __memcg_kmem_charge+0x150/0x150 [ 93.764085][ T2467] ? percpu_counter_add_batch+0x13c/0x160 [ 93.769809][ T2467] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 93.775358][ T2467] __mem_cgroup_charge+0x14c/0x6d0 [ 93.780473][ T2467] shmem_add_to_page_cache+0x574/0xe30 [ 93.785937][ T2467] ? shmem_alloc_page+0x380/0x380 [ 93.790984][ T2467] ? _raw_spin_lock_irqsave+0x130/0x130 [ 93.796540][ T2467] ? find_lock_entry+0x4b/0x200 [ 93.801397][ T2467] shmem_getpage_gfp+0x8eb/0x2120 [ 93.806432][ T2467] shmem_write_begin+0xce/0x1b0 [ 93.811286][ T2467] generic_perform_write+0x2ce/0x540 [ 93.816577][ T2467] ? atime_needs_update+0x5b0/0x5b0 [ 93.821784][ T2467] ? grab_cache_page_write_begin+0xb0/0xb0 [ 93.827627][ T2467] ? file_remove_privs+0x5b0/0x5b0 [ 93.832747][ T2467] ? __kasan_check_write+0x14/0x20 [ 93.837950][ T2467] ? down_write+0xb2/0x120 [ 93.842377][ T2467] __generic_file_write_iter+0x24b/0x480 [ 93.848017][ T2467] ? generic_write_checks+0x3d4/0x480 [ 93.853402][ T2467] generic_file_write_iter+0xa9/0x1d0 [ 93.858778][ T2467] __kernel_write+0x535/0x910 [ 93.863461][ T2467] ? vfs_read+0xa60/0xa60 [ 93.867827][ T2467] ? populate_vma_page_range+0xf0/0xf0 [ 93.873290][ T2467] ? sched_clock_cpu+0x1b/0x3d0 [ 93.878136][ T2467] ? __kasan_check_write+0x14/0x20 [ 93.883246][ T2467] dump_emit+0x246/0x370 [ 93.887511][ T2467] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 93.892962][ T2467] ? dump_user_range+0xe0/0x1a0 [ 93.897815][ T2467] dump_user_range+0x6a/0x1a0 [ 93.902485][ T2467] elf_core_dump+0x2866/0x2cc0 [ 93.907243][ T2467] ? load_elf_binary+0x28e0/0x28e0 [ 93.912345][ T2467] ? __fsnotify_parent+0x6db/0x7c0 [ 93.917460][ T2467] ? do_truncate+0x1c6/0x240 [ 93.922046][ T2467] ? putname+0xfe/0x150 [ 93.926223][ T2467] ? __kasan_check_read+0x11/0x20 [ 93.931240][ T2467] ? __ia32_sys_unshare+0x40/0x40 [ 93.936260][ T2467] do_coredump+0x1ba3/0x28e0 [ 93.940856][ T2467] ? simple_acl_create+0x1c0/0x1c0 [ 93.945963][ T2467] ? debug_smp_processor_id+0x17/0x20 [ 93.951333][ T2467] ? kmem_cache_free+0x100/0x2d0 [ 93.956262][ T2467] ? ____kasan_slab_free+0x130/0x160 [ 93.961541][ T2467] ? get_signal+0xb98/0x12e0 [ 93.966130][ T2467] ? kmem_cache_free+0x100/0x2d0 [ 93.971146][ T2467] get_signal+0xf23/0x12e0 [ 93.975561][ T2467] arch_do_signal_or_restart+0xe2/0x11d0 [ 93.981299][ T2467] ? force_sig_fault+0xd7/0x130 [ 93.986144][ T2467] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 93.991765][ T2467] ? __bad_area_nosemaphore+0x420/0x420 [ 93.997300][ T2467] ? do_user_addr_fault+0x779/0xde0 [ 94.002493][ T2467] ? __bad_area_nosemaphore+0x2b0/0x420 [ 94.008052][ T2467] exit_to_user_mode_loop+0xa2/0xe0 [ 94.013246][ T2467] exit_to_user_mode_prepare+0x76/0xa0 [ 94.018695][ T2467] irqentry_exit_to_user_mode+0x9/0x10 [ 94.024149][ T2467] irqentry_exit+0x12/0x60 [ 94.028644][ T2467] exc_page_fault+0x67/0xc0 [ 94.033140][ T2467] ? asm_exc_page_fault+0x8/0x30 [ 94.038068][ T2467] asm_exc_page_fault+0x1e/0x30 [ 94.043083][ T2467] RIP: 0033:0x7f2162e0cb27 [ 94.047490][ T2467] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 94.067086][ T2467] RSP: 002b:00007f2161971120 EFLAGS: 00010202 [ 94.073155][ T2467] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f2162f56e59 [ 94.081127][ T2467] RDX: 00007f2161971140 RSI: 00007f2161971270 RDI: 000000000000000b [ 94.089091][ T2467] RBP: 00007f2162fecd6f R08: 0000000000000000 R09: 0000000000000000 [ 94.097054][ T2467] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 94.105103][ T2467] R13: 00007f21631d0128 R14: 00007f21631d0090 R15: 00007ffcc7535f28 [ 94.117506][ T2467] memory: usage 307200kB, limit 307200kB, failcnt 15957 [ 94.124543][ T2467] memory+swap: usage 416592kB, limit 9007199254740988kB, failcnt 0 [ 94.132574][ T2467] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 94.140037][ T2467] Memory cgroup stats for /syz8: [ 94.140157][ T2467] anon 2703360 [ 94.140157][ T2467] file 296288256 [ 94.140157][ T2467] kernel_stack 0 [ 94.140157][ T2467] percpu 0 [ 94.140157][ T2467] sock 0 [ 94.140157][ T2467] shmem 296288256 [ 94.140157][ T2467] file_mapped 135168 [ 94.140157][ T2467] file_dirty 0 [ 94.140157][ T2467] file_writeback 0 [ 94.140157][ T2467] anon_thp 0 [ 94.140157][ T2467] inactive_anon 211111936 [ 94.140157][ T2467] active_anon 102998016 [ 94.140157][ T2467] inactive_file 151552 [ 94.140157][ T2467] active_file 0 [ 94.140157][ T2467] unevictable 0 [ 94.140157][ T2467] slab_reclaimable 0 [ 94.140157][ T2467] slab_unreclaimable 0 [ 94.140157][ T2467] slab 0 [ 94.140157][ T2467] workingset_refault_anon 0 [ 94.140157][ T2467] workingset_refault_file 0 [ 94.140157][ T2467] workingset_activate_anon 0 [ 94.140157][ T2467] workingset_activate_file 0 [ 94.140157][ T2467] workingset_restore_anon 0 [ 94.140157][ T2467] workingset_restore_file 0 [ 94.233546][ T2467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.573,pid=2444,uid=0 [ 94.248319][ T2467] Memory cgroup out of memory: Killed process 2444 (syz.8.573) total-vm:90448kB, anon-rss:1380kB, file-rss:47980kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 94.265980][ T27] oom_reaper: reaped process 2444 (syz.8.573), now anon-rss:0kB, file-rss:50240kB, shmem-rss:0kB [ 94.301707][ T2463] syz.8.573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 94.316440][ T2463] CPU: 1 PID: 2463 Comm: syz.8.573 Tainted: G B W syzkaller #0 [ 94.325130][ T2463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.335190][ T2463] Call Trace: [ 94.338492][ T2463] __dump_stack+0x21/0x24 [ 94.342824][ T2463] dump_stack_lvl+0x1a7/0x208 [ 94.347496][ T2463] ? show_regs_print_info+0x18/0x18 [ 94.352677][ T2463] ? ___ratelimit+0x3de/0x560 [ 94.357350][ T2463] ? __kasan_check_write+0x14/0x20 [ 94.362445][ T2463] ? _raw_spin_lock+0x94/0xf0 [ 94.367108][ T2463] dump_stack+0x15/0x1c [ 94.371250][ T2463] dump_header+0xdd/0x650 [ 94.375565][ T2463] oom_kill_process+0x1fa/0x2c0 [ 94.380421][ T2463] out_of_memory+0x93f/0xd20 [ 94.384996][ T2463] ? unregister_oom_notifier+0x20/0x20 [ 94.390443][ T2463] ? mutex_lock_killable+0xdf/0xf0 [ 94.395719][ T2463] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 94.402293][ T2463] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 94.407826][ T2463] ? mem_cgroup_oom_trylock+0x350/0x350 [ 94.413369][ T2463] ? _raw_spin_trylock_bh+0x150/0x150 [ 94.418721][ T2463] ? _raw_spin_unlock+0x4d/0x70 [ 94.423552][ T2463] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 94.429079][ T2463] try_charge+0xf69/0x1500 [ 94.433484][ T2463] ? __memcg_kmem_charge+0x150/0x150 [ 94.438882][ T2463] ? percpu_counter_add_batch+0x13c/0x160 [ 94.444603][ T2463] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 94.450323][ T2463] __mem_cgroup_charge+0x14c/0x6d0 [ 94.455422][ T2463] shmem_add_to_page_cache+0x574/0xe30 [ 94.460866][ T2463] ? shmem_alloc_page+0x380/0x380 [ 94.465877][ T2463] ? find_lock_entry+0x4b/0x200 [ 94.470722][ T2463] shmem_getpage_gfp+0x8eb/0x2120 [ 94.475733][ T2463] shmem_write_begin+0xce/0x1b0 [ 94.480570][ T2463] generic_perform_write+0x2ce/0x540 [ 94.485849][ T2463] ? atime_needs_update+0x5b0/0x5b0 [ 94.491047][ T2463] ? grab_cache_page_write_begin+0xb0/0xb0 [ 94.496849][ T2463] ? file_remove_privs+0x5b0/0x5b0 [ 94.502065][ T2463] ? __kasan_check_write+0x14/0x20 [ 94.507178][ T2463] ? down_write+0xb2/0x120 [ 94.511584][ T2463] __generic_file_write_iter+0x24b/0x480 [ 94.517204][ T2463] ? generic_write_checks+0x3d4/0x480 [ 94.522561][ T2463] generic_file_write_iter+0xa9/0x1d0 [ 94.527932][ T2463] __kernel_write+0x535/0x910 [ 94.532613][ T2463] ? vfs_read+0xa60/0xa60 [ 94.536931][ T2463] ? populate_vma_page_range+0xf0/0xf0 [ 94.542376][ T2463] ? __kasan_check_write+0x14/0x20 [ 94.547485][ T2463] dump_emit+0x246/0x370 [ 94.551712][ T2463] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 94.557152][ T2463] ? dump_user_range+0xe0/0x1a0 [ 94.561993][ T2463] dump_user_range+0x6a/0x1a0 [ 94.566742][ T2463] elf_core_dump+0x2866/0x2cc0 [ 94.571505][ T2463] ? load_elf_binary+0x28e0/0x28e0 [ 94.576612][ T2463] ? __fsnotify_parent+0x6db/0x7c0 [ 94.581747][ T2463] ? do_truncate+0x1c6/0x240 [ 94.586351][ T2463] ? putname+0xfe/0x150 [ 94.590607][ T2463] ? __kasan_check_read+0x11/0x20 [ 94.595645][ T2463] ? __ia32_sys_unshare+0x40/0x40 [ 94.600660][ T2463] do_coredump+0x1ba3/0x28e0 [ 94.605239][ T2463] ? simple_acl_create+0x1c0/0x1c0 [ 94.610341][ T2463] ? debug_smp_processor_id+0x17/0x20 [ 94.615700][ T2463] ? kmem_cache_free+0x100/0x2d0 [ 94.620622][ T2463] ? ____kasan_slab_free+0x130/0x160 [ 94.625897][ T2463] ? get_signal+0xb98/0x12e0 [ 94.630480][ T2463] ? kmem_cache_free+0x100/0x2d0 [ 94.635404][ T2463] get_signal+0xf23/0x12e0 [ 94.639807][ T2463] arch_do_signal_or_restart+0xe2/0x11d0 [ 94.645441][ T2463] ? force_sig_fault+0xd7/0x130 [ 94.650295][ T2463] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 94.655926][ T2463] ? __bad_area_nosemaphore+0x420/0x420 [ 94.661465][ T2463] ? do_user_addr_fault+0x779/0xde0 [ 94.666655][ T2463] ? __bad_area_nosemaphore+0x2b0/0x420 [ 94.672198][ T2463] exit_to_user_mode_loop+0xa2/0xe0 [ 94.677389][ T2463] exit_to_user_mode_prepare+0x76/0xa0 [ 94.682843][ T2463] irqentry_exit_to_user_mode+0x9/0x10 [ 94.688308][ T2463] irqentry_exit+0x12/0x60 [ 94.692717][ T2463] exc_page_fault+0x67/0xc0 [ 94.697215][ T2463] ? asm_exc_page_fault+0x8/0x30 [ 94.702146][ T2463] asm_exc_page_fault+0x1e/0x30 [ 94.707075][ T2463] RIP: 0033:0x7f2162e0cb27 [ 94.711485][ T2463] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 94.731085][ T2463] RSP: 002b:00007f2161971120 EFLAGS: 00010202 [ 94.737149][ T2463] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f2162f56e59 [ 94.745114][ T2463] RDX: 00007f2161971140 RSI: 00007f2161971270 RDI: 000000000000000b [ 94.753081][ T2463] RBP: 00007f2162fecd6f R08: 0000000000000000 R09: 0000000000000000 [ 94.761045][ T2463] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 94.769008][ T2463] R13: 00007f21631d0128 R14: 00007f21631d0090 R15: 00007ffcc7535f28 [ 94.777551][ T2463] memory: usage 307200kB, limit 307200kB, failcnt 17225 [ 94.784581][ T2463] memory+swap: usage 420080kB, limit 9007199254740988kB, failcnt 0 [ 94.792568][ T2463] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 94.799511][ T2463] Memory cgroup stats for /syz8: [ 94.799627][ T2463] anon 2568192 [ 94.799627][ T2463] file 297775104 [ 94.799627][ T2463] kernel_stack 0 [ 94.799627][ T2463] percpu 0 [ 94.799627][ T2463] sock 0 [ 94.799627][ T2463] shmem 297639936 [ 94.799627][ T2463] file_mapped 135168 [ 94.799627][ T2463] file_dirty 0 [ 94.799627][ T2463] file_writeback 0 [ 94.799627][ T2463] anon_thp 0 [ 94.799627][ T2463] inactive_anon 210010112 [ 94.799627][ T2463] active_anon 97456128 [ 94.799627][ T2463] inactive_file 151552 [ 94.799627][ T2463] active_file 0 [ 94.799627][ T2463] unevictable 0 [ 94.799627][ T2463] slab_reclaimable 0 [ 94.799627][ T2463] slab_unreclaimable 0 [ 94.799627][ T2463] slab 0 [ 94.799627][ T2463] workingset_refault_anon 0 [ 94.799627][ T2463] workingset_refault_file 0 [ 94.799627][ T2463] workingset_activate_anon 0 [ 94.799627][ T2463] workingset_activate_file 0 [ 94.799627][ T2463] workingset_restore_anon 0 [ 94.799627][ T2463] workingset_restore_file 0 [ 94.892817][ T2463] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.573,pid=2431,uid=0 [ 94.907701][ T2463] Memory cgroup out of memory: Killed process 2431 (syz.8.573) total-vm:90448kB, anon-rss:1380kB, file-rss:52204kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 94.926093][ T27] oom_reaper: reaped process 2431 (syz.8.573), now anon-rss:0kB, file-rss:52544kB, shmem-rss:0kB [ 95.056425][ T2446] syz.8.573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 95.072697][ T2446] CPU: 1 PID: 2446 Comm: syz.8.573 Tainted: G B W syzkaller #0 [ 95.081499][ T2446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.091646][ T2446] Call Trace: [ 95.095050][ T2446] __dump_stack+0x21/0x24 [ 95.099391][ T2446] dump_stack_lvl+0x1a7/0x208 [ 95.104075][ T2446] ? show_regs_print_info+0x18/0x18 [ 95.109272][ T2446] ? ___ratelimit+0x3de/0x560 [ 95.113945][ T2446] ? __kasan_check_write+0x14/0x20 [ 95.119053][ T2446] ? _raw_spin_lock+0x94/0xf0 [ 95.123727][ T2446] dump_stack+0x15/0x1c [ 95.127876][ T2446] dump_header+0xdd/0x650 [ 95.132205][ T2446] oom_kill_process+0x1fa/0x2c0 [ 95.137060][ T2446] out_of_memory+0x93f/0xd20 [ 95.141656][ T2446] ? unregister_oom_notifier+0x20/0x20 [ 95.147123][ T2446] ? mutex_lock_killable+0x92/0xf0 [ 95.152251][ T2446] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 95.158772][ T2446] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 95.164317][ T2446] ? mem_cgroup_oom_trylock+0x350/0x350 [ 95.169874][ T2446] ? _raw_spin_trylock_bh+0x150/0x150 [ 95.175242][ T2446] ? _raw_spin_unlock+0x4d/0x70 [ 95.180088][ T2446] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 95.185630][ T2446] try_charge+0xf69/0x1500 [ 95.190043][ T2446] ? __memcg_kmem_charge+0x150/0x150 [ 95.195325][ T2446] ? percpu_counter_add_batch+0x13c/0x160 [ 95.201041][ T2446] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 95.206583][ T2446] __mem_cgroup_charge+0x14c/0x6d0 [ 95.211690][ T2446] shmem_add_to_page_cache+0x574/0xe30 [ 95.217145][ T2446] ? shmem_alloc_page+0x380/0x380 [ 95.222173][ T2446] ? _raw_spin_lock_irqsave+0x130/0x130 [ 95.227730][ T2446] ? find_lock_entry+0x4b/0x200 [ 95.232600][ T2446] shmem_getpage_gfp+0x8eb/0x2120 [ 95.237646][ T2446] shmem_write_begin+0xce/0x1b0 [ 95.242496][ T2446] generic_perform_write+0x2ce/0x540 [ 95.247778][ T2446] ? atime_needs_update+0x5b0/0x5b0 [ 95.253061][ T2446] ? grab_cache_page_write_begin+0xb0/0xb0 [ 95.258847][ T2446] ? file_remove_privs+0x5b0/0x5b0 [ 95.263939][ T2446] ? __kasan_check_write+0x14/0x20 [ 95.269134][ T2446] ? down_write+0xb2/0x120 [ 95.273586][ T2446] __generic_file_write_iter+0x24b/0x480 [ 95.279201][ T2446] ? generic_write_checks+0x3d4/0x480 [ 95.284557][ T2446] generic_file_write_iter+0xa9/0x1d0 [ 95.289911][ T2446] __kernel_write+0x535/0x910 [ 95.294630][ T2446] ? vfs_read+0xa60/0xa60 [ 95.298940][ T2446] ? populate_vma_page_range+0xf0/0xf0 [ 95.304387][ T2446] ? __kasan_check_write+0x14/0x20 [ 95.309479][ T2446] dump_emit+0x246/0x370 [ 95.313712][ T2446] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 95.319159][ T2446] dump_user_range+0x6a/0x1a0 [ 95.323823][ T2446] elf_core_dump+0x2866/0x2cc0 [ 95.328578][ T2446] ? load_elf_binary+0x28e0/0x28e0 [ 95.333700][ T2446] ? __fsnotify_parent+0x6db/0x7c0 [ 95.338838][ T2446] ? do_truncate+0x1c6/0x240 [ 95.343419][ T2446] ? putname+0xfe/0x150 [ 95.347576][ T2446] ? __kasan_check_read+0x11/0x20 [ 95.352607][ T2446] ? __ia32_sys_unshare+0x40/0x40 [ 95.357624][ T2446] do_coredump+0x1ba3/0x28e0 [ 95.362227][ T2446] ? simple_acl_create+0x1c0/0x1c0 [ 95.367331][ T2446] ? debug_smp_processor_id+0x17/0x20 [ 95.372694][ T2446] ? kmem_cache_free+0x100/0x2d0 [ 95.377618][ T2446] ? ____kasan_slab_free+0x130/0x160 [ 95.382895][ T2446] ? get_signal+0xb98/0x12e0 [ 95.387476][ T2446] ? kmem_cache_free+0x100/0x2d0 [ 95.392427][ T2446] get_signal+0xf23/0x12e0 [ 95.396862][ T2446] arch_do_signal_or_restart+0xe2/0x11d0 [ 95.402503][ T2446] ? force_sig_fault+0xd7/0x130 [ 95.407369][ T2446] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 95.412999][ T2446] ? __bad_area_nosemaphore+0x420/0x420 [ 95.418538][ T2446] ? __bad_area_nosemaphore+0x2b0/0x420 [ 95.424075][ T2446] exit_to_user_mode_loop+0xa2/0xe0 [ 95.429266][ T2446] exit_to_user_mode_prepare+0x76/0xa0 [ 95.434719][ T2446] irqentry_exit_to_user_mode+0x9/0x10 [ 95.440166][ T2446] irqentry_exit+0x12/0x60 [ 95.444573][ T2446] exc_page_fault+0x67/0xc0 [ 95.449066][ T2446] ? asm_exc_page_fault+0x8/0x30 [ 95.453998][ T2446] asm_exc_page_fault+0x1e/0x30 [ 95.458841][ T2446] RIP: 0033:0x7f2162e0cb27 [ 95.463254][ T2446] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 95.482848][ T2446] RSP: 002b:00007f2161971120 EFLAGS: 00010202 [ 95.488909][ T2446] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f2162f56e59 [ 95.496871][ T2446] RDX: 00007f2161971140 RSI: 00007f2161971270 RDI: 000000000000000b [ 95.504838][ T2446] RBP: 00007f2162fecd6f R08: 0000000000000000 R09: 0000000000000000 [ 95.512801][ T2446] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 95.520786][ T2446] R13: 00007f21631d0128 R14: 00007f21631d0090 R15: 00007ffcc7535f28 [ 95.534427][ T2446] memory: usage 307160kB, limit 307200kB, failcnt 18399 [ 95.541515][ T2446] memory+swap: usage 413008kB, limit 9007199254740988kB, failcnt 0 [ 95.549898][ T2446] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 95.556887][ T2446] Memory cgroup stats for /syz8: [ 95.557025][ T2446] anon 2297856 [ 95.557025][ T2446] file 296558592 [ 95.557025][ T2446] kernel_stack 0 [ 95.557025][ T2446] percpu 0 [ 95.557025][ T2446] sock 0 [ 95.557025][ T2446] shmem 296558592 [ 95.557025][ T2446] file_mapped 135168 [ 95.557025][ T2446] file_dirty 0 [ 95.557025][ T2446] file_writeback 0 [ 95.557025][ T2446] anon_thp 0 [ 95.557025][ T2446] inactive_anon 215572480 [ 95.557025][ T2446] active_anon 90562560 [ 95.557025][ T2446] inactive_file 151552 [ 95.557025][ T2446] active_file 0 [ 95.557025][ T2446] unevictable 0 [ 95.557025][ T2446] slab_reclaimable 0 [ 95.557025][ T2446] slab_unreclaimable 0 [ 95.557025][ T2446] slab 0 [ 95.557025][ T2446] workingset_refault_anon 0 [ 95.557025][ T2446] workingset_refault_file 0 [ 95.557025][ T2446] workingset_activate_anon 0 [ 95.557025][ T2446] workingset_activate_file 0 [ 95.557025][ T2446] workingset_restore_anon 0 [ 95.557025][ T2446] workingset_restore_file 0 [ 95.649883][ T2446] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.573,pid=2463,uid=0 [ 95.664702][ T2446] Memory cgroup out of memory: Killed process 2463 (syz.8.573) total-vm:90448kB, anon-rss:1380kB, file-rss:47980kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 95.682151][ T27] oom_reaper: reaped process 2463 (syz.8.573), now anon-rss:0kB, file-rss:50304kB, shmem-rss:0kB [ 95.876722][ T2460] syz.8.573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 95.898270][ T2460] CPU: 1 PID: 2460 Comm: syz.8.573 Tainted: G B W syzkaller #0 [ 95.906976][ T2460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.917222][ T2460] Call Trace: [ 95.920552][ T2460] __dump_stack+0x21/0x24 [ 95.924901][ T2460] dump_stack_lvl+0x1a7/0x208 [ 95.929589][ T2460] ? show_regs_print_info+0x18/0x18 [ 95.934922][ T2460] ? ___ratelimit+0x3de/0x560 [ 95.939700][ T2460] ? __kasan_check_write+0x14/0x20 [ 95.944825][ T2460] ? _raw_spin_lock+0x94/0xf0 [ 95.949875][ T2460] dump_stack+0x15/0x1c [ 95.954049][ T2460] dump_header+0xdd/0x650 [ 95.958391][ T2460] oom_kill_process+0x1fa/0x2c0 [ 95.963254][ T2460] out_of_memory+0x93f/0xd20 [ 95.967866][ T2460] ? unregister_oom_notifier+0x20/0x20 [ 95.973338][ T2460] ? mutex_lock_killable+0x92/0xf0 [ 95.978466][ T2460] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 95.985070][ T2460] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 95.990647][ T2460] ? mem_cgroup_oom_trylock+0x350/0x350 [ 95.996378][ T2460] ? _raw_spin_trylock_bh+0x150/0x150 [ 96.001875][ T2460] ? _raw_spin_unlock+0x4d/0x70 [ 96.006739][ T2460] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 96.012313][ T2460] try_charge+0xf69/0x1500 [ 96.016751][ T2460] ? __memcg_kmem_charge+0x150/0x150 [ 96.022048][ T2460] ? percpu_counter_add_batch+0x13c/0x160 [ 96.027781][ T2460] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 96.033338][ T2460] __mem_cgroup_charge+0x14c/0x6d0 [ 96.038463][ T2460] shmem_add_to_page_cache+0x574/0xe30 [ 96.043943][ T2460] ? shmem_alloc_page+0x380/0x380 [ 96.048993][ T2460] ? _raw_spin_lock_irqsave+0x130/0x130 [ 96.054552][ T2460] ? find_lock_entry+0x4b/0x200 [ 96.059416][ T2460] shmem_getpage_gfp+0x8eb/0x2120 [ 96.064530][ T2460] shmem_write_begin+0xce/0x1b0 [ 96.069371][ T2460] generic_perform_write+0x2ce/0x540 [ 96.074652][ T2460] ? atime_needs_update+0x5b0/0x5b0 [ 96.079874][ T2460] ? grab_cache_page_write_begin+0xb0/0xb0 [ 96.085684][ T2460] ? file_remove_privs+0x5b0/0x5b0 [ 96.090792][ T2460] ? __kasan_check_write+0x14/0x20 [ 96.095911][ T2460] ? down_write+0xb2/0x120 [ 96.100323][ T2460] __generic_file_write_iter+0x24b/0x480 [ 96.105944][ T2460] ? generic_write_checks+0x3d4/0x480 [ 96.111305][ T2460] generic_file_write_iter+0xa9/0x1d0 [ 96.116667][ T2460] __kernel_write+0x535/0x910 [ 96.121333][ T2460] ? vfs_read+0xa60/0xa60 [ 96.125657][ T2460] ? populate_vma_page_range+0xf0/0xf0 [ 96.131106][ T2460] ? __kasan_check_write+0x14/0x20 [ 96.136209][ T2460] dump_emit+0x246/0x370 [ 96.140444][ T2460] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 96.145903][ T2460] dump_user_range+0x6a/0x1a0 [ 96.150677][ T2460] elf_core_dump+0x2866/0x2cc0 [ 96.155432][ T2460] ? load_elf_binary+0x28e0/0x28e0 [ 96.160534][ T2460] ? __fsnotify_parent+0x6db/0x7c0 [ 96.165640][ T2460] ? do_truncate+0x1c6/0x240 [ 96.170220][ T2460] ? putname+0xfe/0x150 [ 96.174371][ T2460] ? __kasan_check_read+0x11/0x20 [ 96.179473][ T2460] ? __ia32_sys_unshare+0x40/0x40 [ 96.184486][ T2460] do_coredump+0x1ba3/0x28e0 [ 96.189069][ T2460] ? simple_acl_create+0x1c0/0x1c0 [ 96.194170][ T2460] ? debug_smp_processor_id+0x17/0x20 [ 96.199539][ T2460] ? kmem_cache_free+0x100/0x2d0 [ 96.204467][ T2460] ? ____kasan_slab_free+0x130/0x160 [ 96.209743][ T2460] ? get_signal+0xb98/0x12e0 [ 96.214585][ T2460] ? kmem_cache_free+0x100/0x2d0 [ 96.219516][ T2460] get_signal+0xf23/0x12e0 [ 96.223936][ T2460] arch_do_signal_or_restart+0xe2/0x11d0 [ 96.229647][ T2460] ? force_sig_fault+0xd7/0x130 [ 96.234486][ T2460] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 96.240109][ T2460] ? __bad_area_nosemaphore+0x420/0x420 [ 96.245645][ T2460] ? do_user_addr_fault+0x779/0xde0 [ 96.250849][ T2460] ? __bad_area_nosemaphore+0x2b0/0x420 [ 96.256386][ T2460] exit_to_user_mode_loop+0xa2/0xe0 [ 96.261573][ T2460] exit_to_user_mode_prepare+0x76/0xa0 [ 96.267033][ T2460] irqentry_exit_to_user_mode+0x9/0x10 [ 96.272489][ T2460] irqentry_exit+0x12/0x60 [ 96.276896][ T2460] exc_page_fault+0x67/0xc0 [ 96.281407][ T2460] ? asm_exc_page_fault+0x8/0x30 [ 96.286348][ T2460] asm_exc_page_fault+0x1e/0x30 [ 96.291208][ T2460] RIP: 0033:0x7f2162e0cb27 [ 96.295646][ T2460] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 96.315333][ T2460] RSP: 002b:00007f2161971120 EFLAGS: 00010202 [ 96.321398][ T2460] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f2162f56e59 [ 96.329436][ T2460] RDX: 00007f2161971140 RSI: 00007f2161971270 RDI: 000000000000000b [ 96.337496][ T2460] RBP: 00007f2162fecd6f R08: 0000000000000000 R09: 0000000000000000 [ 96.345459][ T2460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 96.353513][ T2460] R13: 00007f21631d0128 R14: 00007f21631d0090 R15: 00007ffcc7535f28 [ 96.389524][ T2460] memory: usage 307116kB, limit 307200kB, failcnt 19833 [ 96.397284][ T2460] memory+swap: usage 420296kB, limit 9007199254740988kB, failcnt 0 [ 96.421558][ T2460] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 96.428896][ T2460] Memory cgroup stats for /syz8: [ 96.429019][ T2460] anon 1757184 [ 96.429019][ T2460] file 306155520 [ 96.429019][ T2460] kernel_stack 0 [ 96.429019][ T2460] percpu 0 [ 96.429019][ T2460] sock 0 [ 96.429019][ T2460] shmem 303181824 [ 96.429019][ T2460] file_mapped 2838528 [ 96.429019][ T2460] file_dirty 0 [ 96.429019][ T2460] file_writeback 0 [ 96.429019][ T2460] anon_thp 0 [ 96.429019][ T2460] inactive_anon 230866944 [ 96.429019][ T2460] active_anon 80461824 [ 96.429019][ T2460] inactive_file 1302528 [ 96.429019][ T2460] active_file 1601536 [ 96.429019][ T2460] unevictable 0 [ 96.429019][ T2460] slab_reclaimable 0 [ 96.429019][ T2460] slab_unreclaimable 0 [ 96.429019][ T2460] slab 0 [ 96.429019][ T2460] workingset_refault_anon 0 [ 96.429019][ T2460] workingset_refault_file 330 [ 96.429019][ T2460] workingset_activate_anon 0 [ 96.429019][ T2460] workingset_activate_file 297 [ 96.429019][ T2460] workingset_restore_anon 0 [ 96.429019][ T2460] workingset_restore_file 0 [ 96.523314][ T2460] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.573,pid=2459,uid=0 [ 96.538239][ T2460] Memory cgroup out of memory: Killed process 2459 (syz.8.573) total-vm:90448kB, anon-rss:1376kB, file-rss:47980kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 96.555752][ T27] oom_reaper: reaped process 2459 (syz.8.573), now anon-rss:0kB, file-rss:49344kB, shmem-rss:0kB [ 96.561274][ T2460] syz.8.573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 96.576047][ T2460] CPU: 1 PID: 2460 Comm: syz.8.573 Tainted: G B W syzkaller #0 [ 96.584738][ T2460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.594796][ T2460] Call Trace: [ 96.598074][ T2460] __dump_stack+0x21/0x24 [ 96.602386][ T2460] dump_stack_lvl+0x1a7/0x208 [ 96.607047][ T2460] ? show_regs_print_info+0x18/0x18 [ 96.612240][ T2460] ? ___ratelimit+0x3de/0x560 [ 96.616939][ T2460] ? __kasan_check_write+0x14/0x20 [ 96.622039][ T2460] ? _raw_spin_lock+0x94/0xf0 [ 96.626808][ T2460] dump_stack+0x15/0x1c [ 96.630954][ T2460] dump_header+0xdd/0x650 [ 96.635291][ T2460] oom_kill_process+0x1fa/0x2c0 [ 96.640227][ T2460] out_of_memory+0x93f/0xd20 [ 96.644956][ T2460] ? unregister_oom_notifier+0x20/0x20 [ 96.650432][ T2460] ? mutex_lock_killable+0xdf/0xf0 [ 96.655538][ T2460] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 96.662030][ T2460] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 96.667694][ T2460] ? mem_cgroup_oom_trylock+0x350/0x350 [ 96.673493][ T2460] ? _raw_spin_trylock_bh+0x150/0x150 [ 96.678953][ T2460] ? _raw_spin_unlock+0x4d/0x70 [ 96.683885][ T2460] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 96.689424][ T2460] try_charge+0xf69/0x1500 [ 96.693838][ T2460] ? __memcg_kmem_charge+0x150/0x150 [ 96.699118][ T2460] ? percpu_counter_add_batch+0x13c/0x160 [ 96.704825][ T2460] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 96.710355][ T2460] __mem_cgroup_charge+0x14c/0x6d0 [ 96.715453][ T2460] shmem_add_to_page_cache+0x574/0xe30 [ 96.720908][ T2460] ? shmem_alloc_page+0x380/0x380 [ 96.726060][ T2460] ? _raw_spin_lock_irqsave+0x130/0x130 [ 96.731595][ T2460] ? find_lock_entry+0x4b/0x200 [ 96.736449][ T2460] shmem_getpage_gfp+0x8eb/0x2120 [ 96.741485][ T2460] shmem_write_begin+0xce/0x1b0 [ 96.746339][ T2460] generic_perform_write+0x2ce/0x540 [ 96.751617][ T2460] ? atime_needs_update+0x5b0/0x5b0 [ 96.756815][ T2460] ? grab_cache_page_write_begin+0xb0/0xb0 [ 96.762627][ T2460] ? file_remove_privs+0x5b0/0x5b0 [ 96.767815][ T2460] ? __kasan_check_write+0x14/0x20 [ 96.772913][ T2460] ? down_write+0xb2/0x120 [ 96.777344][ T2460] __generic_file_write_iter+0x24b/0x480 [ 96.782961][ T2460] ? generic_write_checks+0x3d4/0x480 [ 96.788504][ T2460] generic_file_write_iter+0xa9/0x1d0 [ 96.793862][ T2460] __kernel_write+0x535/0x910 [ 96.798609][ T2460] ? vfs_read+0xa60/0xa60 [ 96.802940][ T2460] ? populate_vma_page_range+0xf0/0xf0 [ 96.808399][ T2460] ? __kasan_check_write+0x14/0x20 [ 96.813494][ T2460] dump_emit+0x246/0x370 [ 96.817724][ T2460] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 96.823170][ T2460] dump_user_range+0x6a/0x1a0 [ 96.827844][ T2460] elf_core_dump+0x2866/0x2cc0 [ 96.832598][ T2460] ? load_elf_binary+0x28e0/0x28e0 [ 96.837703][ T2460] ? __fsnotify_parent+0x6db/0x7c0 [ 96.842818][ T2460] ? do_truncate+0x1c6/0x240 [ 96.847405][ T2460] ? putname+0xfe/0x150 [ 96.851554][ T2460] ? __kasan_check_read+0x11/0x20 [ 96.856741][ T2460] ? __ia32_sys_unshare+0x40/0x40 [ 96.861765][ T2460] do_coredump+0x1ba3/0x28e0 [ 96.866369][ T2460] ? simple_acl_create+0x1c0/0x1c0 [ 96.871576][ T2460] ? debug_smp_processor_id+0x17/0x20 [ 96.877382][ T2460] ? kmem_cache_free+0x100/0x2d0 [ 96.882335][ T2460] ? ____kasan_slab_free+0x130/0x160 [ 96.887630][ T2460] ? get_signal+0xb98/0x12e0 [ 96.892207][ T2460] ? kmem_cache_free+0x100/0x2d0 [ 96.897147][ T2460] get_signal+0xf23/0x12e0 [ 96.901554][ T2460] arch_do_signal_or_restart+0xe2/0x11d0 [ 96.907190][ T2460] ? force_sig_fault+0xd7/0x130 [ 96.912052][ T2460] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 96.917669][ T2460] ? __bad_area_nosemaphore+0x420/0x420 [ 96.923262][ T2460] ? do_user_addr_fault+0x779/0xde0 [ 96.928467][ T2460] ? __bad_area_nosemaphore+0x2b0/0x420 [ 96.934036][ T2460] exit_to_user_mode_loop+0xa2/0xe0 [ 96.939249][ T2460] exit_to_user_mode_prepare+0x76/0xa0 [ 96.944852][ T2460] irqentry_exit_to_user_mode+0x9/0x10 [ 96.950465][ T2460] irqentry_exit+0x12/0x60 [ 96.954889][ T2460] exc_page_fault+0x67/0xc0 [ 96.959381][ T2460] ? asm_exc_page_fault+0x8/0x30 [ 96.964305][ T2460] asm_exc_page_fault+0x1e/0x30 [ 96.969385][ T2460] RIP: 0033:0x7f2162e0cb27 [ 96.973877][ T2460] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 96.993579][ T2460] RSP: 002b:00007f2161971120 EFLAGS: 00010202 [ 96.999646][ T2460] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f2162f56e59 [ 97.007617][ T2460] RDX: 00007f2161971140 RSI: 00007f2161971270 RDI: 000000000000000b [ 97.015661][ T2460] RBP: 00007f2162fecd6f R08: 0000000000000000 R09: 0000000000000000 [ 97.023618][ T2460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 97.031605][ T2460] R13: 00007f21631d0128 R14: 00007f21631d0090 R15: 00007ffcc7535f28 [ 97.041379][ T2460] memory: usage 307200kB, limit 307200kB, failcnt 21110 [ 97.048337][ T2460] memory+swap: usage 420712kB, limit 9007199254740988kB, failcnt 0 [ 97.056280][ T2460] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 97.063239][ T2460] Memory cgroup stats for /syz8: [ 97.063451][ T2460] anon 1622016 [ 97.063451][ T2460] file 299667456 [ 97.063451][ T2460] kernel_stack 0 [ 97.063451][ T2460] percpu 0 [ 97.063451][ T2460] sock 0 [ 97.063451][ T2460] shmem 299802624 [ 97.063451][ T2460] file_mapped 135168 [ 97.063451][ T2460] file_dirty 0 [ 97.063451][ T2460] file_writeback 0 [ 97.063451][ T2460] anon_thp 0 [ 97.063451][ T2460] inactive_anon 232083456 [ 97.063451][ T2460] active_anon 75325440 [ 97.063451][ T2460] inactive_file 151552 [ 97.063451][ T2460] active_file 0 [ 97.063451][ T2460] unevictable 0 [ 97.063451][ T2460] slab_reclaimable 0 [ 97.063451][ T2460] slab_unreclaimable 0 [ 97.063451][ T2460] slab 0 [ 97.063451][ T2460] workingset_refault_anon 0 [ 97.063451][ T2460] workingset_refault_file 429 [ 97.063451][ T2460] workingset_activate_anon 0 [ 97.063451][ T2460] workingset_activate_file 330 [ 97.063451][ T2460] workingset_restore_anon 0 [ 97.063451][ T2460] workingset_restore_file 0 [ 97.157008][ T2460] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.573,pid=2446,uid=0 [ 97.171798][ T2460] Memory cgroup out of memory: Killed process 2446 (syz.8.573) total-vm:90448kB, anon-rss:1256kB, file-rss:52072kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 97.485682][ T2466] syz.8.573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 97.531327][ T2466] CPU: 0 PID: 2466 Comm: syz.8.573 Tainted: G B W syzkaller #0 [ 97.540047][ T2466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.550291][ T2466] Call Trace: [ 97.553607][ T2466] __dump_stack+0x21/0x24 [ 97.557953][ T2466] dump_stack_lvl+0x1a7/0x208 [ 97.562643][ T2466] ? show_regs_print_info+0x18/0x18 [ 97.567856][ T2466] ? ___ratelimit+0x3de/0x560 [ 97.572543][ T2466] ? __kasan_check_write+0x14/0x20 [ 97.577664][ T2466] ? _raw_spin_lock+0x94/0xf0 [ 97.582353][ T2466] dump_stack+0x15/0x1c [ 97.586524][ T2466] dump_header+0xdd/0x650 [ 97.590870][ T2466] oom_kill_process+0x1fa/0x2c0 [ 97.595732][ T2466] out_of_memory+0x93f/0xd20 [ 97.600333][ T2466] ? unregister_oom_notifier+0x20/0x20 [ 97.605808][ T2466] ? mutex_lock_killable+0x92/0xf0 [ 97.610923][ T2466] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 97.617417][ T2466] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 97.622984][ T2466] ? mem_cgroup_oom_trylock+0x350/0x350 [ 97.628550][ T2466] ? _raw_spin_trylock_bh+0x150/0x150 [ 97.633912][ T2466] ? _raw_spin_unlock+0x4d/0x70 [ 97.638759][ T2466] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 97.644297][ T2466] try_charge+0xf69/0x1500 [ 97.648710][ T2466] ? __memcg_kmem_charge+0x150/0x150 [ 97.654002][ T2466] ? percpu_counter_add_batch+0x13c/0x160 [ 97.659719][ T2466] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 97.665374][ T2466] __mem_cgroup_charge+0x14c/0x6d0 [ 97.670492][ T2466] shmem_add_to_page_cache+0x574/0xe30 [ 97.675957][ T2466] ? shmem_alloc_page+0x380/0x380 [ 97.681171][ T2466] ? _raw_spin_lock_irqsave+0x130/0x130 [ 97.686723][ T2466] ? find_lock_entry+0x4b/0x200 [ 97.691567][ T2466] shmem_getpage_gfp+0x8eb/0x2120 [ 97.696588][ T2466] shmem_write_begin+0xce/0x1b0 [ 97.701431][ T2466] generic_perform_write+0x2ce/0x540 [ 97.706707][ T2466] ? atime_needs_update+0x5b0/0x5b0 [ 97.711993][ T2466] ? grab_cache_page_write_begin+0xb0/0xb0 [ 97.717808][ T2466] ? file_remove_privs+0x5b0/0x5b0 [ 97.722933][ T2466] ? __kasan_check_write+0x14/0x20 [ 97.728036][ T2466] ? down_write+0xb2/0x120 [ 97.732456][ T2466] __generic_file_write_iter+0x24b/0x480 [ 97.738084][ T2466] ? generic_write_checks+0x3d4/0x480 [ 97.743449][ T2466] generic_file_write_iter+0xa9/0x1d0 [ 97.748812][ T2466] __kernel_write+0x535/0x910 [ 97.753492][ T2466] ? vfs_read+0xa60/0xa60 [ 97.757821][ T2466] ? populate_vma_page_range+0xf0/0xf0 [ 97.763284][ T2466] ? __kasan_check_write+0x14/0x20 [ 97.768394][ T2466] dump_emit+0x246/0x370 [ 97.772716][ T2466] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 97.778165][ T2466] ? dump_user_range+0x13b/0x1a0 [ 97.783128][ T2466] dump_user_range+0x6a/0x1a0 [ 97.787799][ T2466] elf_core_dump+0x2866/0x2cc0 [ 97.792558][ T2466] ? load_elf_binary+0x28e0/0x28e0 [ 97.797688][ T2466] ? __fsnotify_parent+0x6db/0x7c0 [ 97.802817][ T2466] ? do_truncate+0x1c6/0x240 [ 97.807398][ T2466] ? putname+0xfe/0x150 [ 97.811607][ T2466] ? __kasan_check_read+0x11/0x20 [ 97.816627][ T2466] ? __ia32_sys_unshare+0x40/0x40 [ 97.821646][ T2466] do_coredump+0x1ba3/0x28e0 [ 97.826230][ T2466] ? simple_acl_create+0x1c0/0x1c0