last executing test programs: 5m26.119500436s ago: executing program 32 (id=221): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x11, &(0x7f0000000340)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x4c00}, @generic={0x5a, 0xa, 0x0, 0xfff7}, @map_val={0x18, 0xe1ea48fa90860903, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @generic={0x15, 0x8, 0x0, 0xce8}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES32=r0], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r4, &(0x7f0000000280)="5b1be2bf8a59c27edcd7ed482bbfd1fc5cba136fb24e2d2d7c1b893ff119b8e1edf19fcef682e914b9240feb", &(0x7f0000000400)=""/228}, 0x20) 4m24.750340242s ago: executing program 3 (id=499): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) 4m24.730856152s ago: executing program 3 (id=501): unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xc0000400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000002aa140006"], 0x54}}, 0x0) 4m24.552844271s ago: executing program 3 (id=504): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000001ccb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m24.483104195s ago: executing program 3 (id=505): r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x1, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x1, 0x2, 0x1, 0x7, 0x0, 0x4}}, 0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r5, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x9e, 0xd, 0x109, 0x3, 0x3, 0x4000d9, 0x0, 0x38, 0x25e, 0x40000404, 0xfffe, 0x20, 0x1, 0xfff9, 0x0, 0x200}, [{0x1, 0x14, 0x4, 0x1, 0xa, 0xa, 0x7, 0x1}], "6e576ec034bc52c9b6e29683948f6a02045618e2bb67cfed9ae470001b9ab27581fc723a587767abace29e4e11fc2382b5c0f2a66267dbfc288a00000000"}, 0x96) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0xca}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="ee9afebff3ae3e2e3587bd0a2a8c", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) close(r5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in=@loopback}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, 0x0, 0x2d, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xb}}, 0x30) syz_emit_ethernet(0x46, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001d00e99900000000fcdbdf25fc000000000000006040000000000000ac1e000100000000000000000000000000000000000001000a004000000400006637f6dafb0fd5f866fac802db1f27f4b9b186", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff040000000000000000000000000000000000000000000000000000000000000000000000000000000800"/112], 0xb8}}, 0x0) 4m24.100655663s ago: executing program 3 (id=508): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00') preadv2(r4, &(0x7f0000000400)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1ff, 0x29eb, 0x6) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @remote}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x6000000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810) 4m23.73822743s ago: executing program 3 (id=511): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10001, 0x8c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000070a00", @ANYRESOCT=r0], 0xb8}, 0x1, 0x0, 0x0, 0x480d0}, 0x4000) 4m23.705517032s ago: executing program 33 (id=511): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10001, 0x8c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000070a00", @ANYRESOCT=r0], 0xb8}, 0x1, 0x0, 0x0, 0x480d0}, 0x4000) 4m17.600686028s ago: executing program 5 (id=551): r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000000c0)={{r4, r5+60000000}, {0x0, 0x3938700}}, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x1, 0x6}, [], {0x4, 0x2}, [], {0x10, 0x7}}, 0x24, 0x3) 4m17.407198058s ago: executing program 5 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40e02, 0x36) write$P9_RREADLINK(r6, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 4m16.551955809s ago: executing program 5 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) mknod(0x0, 0x100, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4m14.926251987s ago: executing program 5 (id=575): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x6a382, 0x0) syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f00000000c0)='./bus\x00', 0x4012, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 4m14.490241239s ago: executing program 5 (id=580): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00') preadv2(r4, &(0x7f0000000400)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1ff, 0x29eb, 0x6) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @remote}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0xf000000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810) 4m14.160640935s ago: executing program 5 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r0, 0xfffffffffffffffb, 0x4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) unshare(0x40000000) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)=' -', 0x3fffff}]) 4m10.357490579s ago: executing program 34 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r0, 0xfffffffffffffffb, 0x4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) unshare(0x40000000) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)=' -', 0x3fffff}]) 2m51.915968762s ago: executing program 0 (id=1040): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x0, 0x6000}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 2m51.915862582s ago: executing program 0 (id=1041): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ff000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f0000000880)=""/4121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 2m51.915754442s ago: executing program 0 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0xffffffffffffffb8, 0xfffffdd7, 0x0, 0x8}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0x20000000}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000000c0)}, 0x20) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'virt_wifi0\x00', 0x600}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000001c0)=0x1) 2m51.75532361s ago: executing program 0 (id=1048): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000740)={[{@noquota}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@resgid}, {@noinit_itable}, {@norecovery}, {@nombcache}, {@nodioread_nolock}, {@errors_remount}, {@mblk_io_submit}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) pwrite64(r2, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_GETPDP(r1, 0x0, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000200)) pipe2$9p(0x0, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000b92b188268b9cfab40d65439a8cc52da5392d0b6da7b24d3f05c30e328d3bc1212966ef433c95218467ebfeea1f757eaa5ef42738a7ac627ec8c6ee1f2eb92a2d6ac12f7866e16072a8da517e99c44cd06d3da2500414938ce4b9aac326aad7c7b5bbae91f05de9493c3bc", @ANYRES16=r5, @ANYBLOB="000128bd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0xc0) r6 = syz_ublk_setup_io_uring(0x9, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6004, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) r13 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r13, 0x13) waitid(0x1, r13, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1, 0x15a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0}, 0x94) 2m50.92992874s ago: executing program 0 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r2 = getpgid(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000380)="f8280d7249c02a7cd1305055962ff1eab7a350e77f51e467febf46e1e69da4db005763fe8534c67a798ea1e1e6d4aba1fd167fe305a285a966dbce1b72971607cce7d63a7a48d5524a407995e8faed0c84b32040ea2867a45ee747a5ba4ba40e59193ea17a10d67109ded5611aecd6b08b0cfd4ecd6663f8", 0x78, r1}, 0x68) r3 = syz_open_procfs(r2, &(0x7f0000000240)='statm\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) 2m50.488715532s ago: executing program 0 (id=1062): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000002005000000000000000000000000000000000000000000000000000000000000000400000000000000feffffffffffffff00100000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000100cd00000000000000480002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017000100000025bd7000000000000000000028bd7000aa0e0000080000004c001400636d61632861657329"], 0x1a4}}, 0x0) 2m50.423709644s ago: executing program 35 (id=1062): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}}, 0x0) 2m29.400456554s ago: executing program 7 (id=1214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40e02, 0x36) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 2m28.384103993s ago: executing program 7 (id=1219): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x41, 0x28, 0xe4d, 0x80, 0xe0, 0xfffd, 0x6, 0x93, 0x4, 0xe, 0xfffd, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2m23.694110951s ago: executing program 7 (id=1235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 2m22.777373305s ago: executing program 7 (id=1241): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = io_uring_setup(0x1dd, &(0x7f0000000080)={0x0, 0x1ffffb, 0x0, 0x5, 0xc}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000cc0)={0x40, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x0, 0x1}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write$FUSE_BMAP(r1, &(0x7f0000002c00)={0x6f, 0x0, 0x0, {0xa}}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x3f) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x0) 2m20.170917781s ago: executing program 7 (id=1250): r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a00340b5c5fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d89cb9412c30c45f9d4d63d267d2a43f03a47fa56b300"/318], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") r1 = signalfd4(r0, &(0x7f0000000880)={[0x8]}, 0x8, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat(r0, &(0x7f00000006c0)='./file0\x00', 0x80000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000700)={0x0, 'ip6tnl0\x00', 0x1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_ublk_setup_io_uring(0x387a, &(0x7f00000008c0)={0x0, 0x7a6a, 0x1000, 0x1, 0x282, 0x0, r1}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f00000001c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14"], 0x18, 0x80}, 0x40000) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x20) setitimer(0x1, &(0x7f0000001900)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) getitimer(0x1, &(0x7f0000001980)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) 2m19.618435888s ago: executing program 7 (id=1255): lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408205740040000102030109028e0003017f3311080b0003010130010904000000010130000a03000000007e0700001324030200010405060500000004000a000d000d24070606"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/223, 0xdf}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000280)=""/152, 0x98}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f0000000580)=""/181, 0xb5}], 0x7}, 0x2180) 2m19.57142826s ago: executing program 36 (id=1255): lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408205740040000102030109028e0003017f3311080b0003010130010904000000010130000a03000000007e0700001324030200010405060500000004000a000d000d24070606"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/223, 0xdf}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000280)=""/152, 0x98}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f0000000580)=""/181, 0xb5}], 0x7}, 0x2180) 2m1.404579141s ago: executing program 9 (id=1334): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000"], 0x50) brk(0x3) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) personality(0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x105) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e20, @empty}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000001300)=0x0) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xffed, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) mprotect(&(0x7f00003d9000/0x3000)=nil, 0x3000, 0x2) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@getchain={0x54, 0x66, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff1, 0xc}, {0x6, 0x3}, {0xd, 0x4}}, [{0x8, 0xb, 0x2573}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x6080}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40004) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 1m59.341280261s ago: executing program 9 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, 0x0, 0x0, 0x4404c850, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}}) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) bind$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f0000000380)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f\xa2a\xe8P\xfc\x80\x81X\xbb\a\x00\x00\x00\x10\xa3\xc8n\xa4\'\x1fpuM\xb7\xe6:\xa0\x04\xb2\xeft\xc8\x82t\x96\xf8\xcc\xc5\xa8k\xaa\xad.$\xba\xef\"\x8c\xef\t?\x8by\b\xc0%\xa00xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r0, 0xfffffffffffffffb, 0x4) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000280), 0x0, 0x20008091) recvmmsg(r6, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x3f1, &(0x7f0000000100)=0x0) r10 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000300)={{0x2, 0x0, @remote}, {0x6, @remote}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 'veth1_to_batadv\x00'}) io_submit(r9, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000200)=' -', 0x3fffff}]) 1m57.598288016s ago: executing program 9 (id=1370): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf0600fe00000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb703000014000000bfa400000000000007040000c0ffffffb705000014000000850000006e000000bf610000000000008500000056000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) 1m57.596796686s ago: executing program 9 (id=1371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x50, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4ae, &(0x7f0000000f00)="$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") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x50, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4ae, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143041, 0x2a) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143041, 0x2a) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1, 0xe7b, 0x0, 0x19) (async) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1, 0xe7b, 0x0, 0x19) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) pidfd_send_signal(0xffffffffffffffff, 0x1e, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000000002020107b1af8ff00000000996400000000000007010000f8ffffffb7140000080000000000100000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000000002020107b1af8ff00000000996400000000000007010000f8ffffffb7140000080000000000100000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x62b3a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x4b, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x8000045, 0x8000006, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x8000045, 0x8000006, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 1m57.406134115s ago: executing program 9 (id=1376): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=@setlink={0x4c, 0x13, 0x5, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40601}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x4c}}, 0x48000) 1m57.348514208s ago: executing program 9 (id=1378): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000003000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1m57.294907211s ago: executing program 37 (id=1378): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000003000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 20.046515278s ago: executing program 8 (id=1923): mkdir(&(0x7f0000000000)='./tracefs\x00', 0x196) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x50011, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20000000) getdents64(r1, 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10) fsmount(r5, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r6 = syz_io_uring_setup(0x126b, &(0x7f0000000640)={0x0, 0x200072db, 0x0, 0x8001, 0x27f}, &(0x7f00000006c0), &(0x7f0000000540), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000012b00)={0x1, 0x0, 0x0, &(0x7f0000012a00)=[{&(0x7f0000000180)=""/142, 0x8e}], 0x0}, 0x20) socket(0x10, 0x3, 0xfffffe00) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) write$P9_RREADLINK(r7, 0x0, 0x0) 18.039500375s ago: executing program 8 (id=1928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)=' -', 0x3fffff}]) 15.6784016s ago: executing program 8 (id=1941): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x40010}, {}, 0x9, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@empty, 0x4d8, 0x33}, 0xa, @in=@loopback, 0x0, 0x0, 0x1, 0x3}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 14.604714193s ago: executing program 8 (id=1952): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0xb1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 14.485002938s ago: executing program 8 (id=1954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}}, 0x0) 14.473925199s ago: executing program 8 (id=1956): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@delalloc}]}, 0x1, 0xbaf, &(0x7f0000000bc0)="$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") (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f00000022c0)='selinuxfs\x00', 0x114806, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x80201, 0x88) (async, rerun: 32) r3 = open(&(0x7f0000000440)='./trace\x00', 0x880, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) (async) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r3, 0x0, 0x0, 0xfffffffffffffffe}]) (async) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x20) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x200000b, 0x10, r0, 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) setsockopt$inet_tcp_int(r0, 0x6, 0x2b, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000040), 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0xfffffffffffffff5) (async) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) shutdown(r6, 0x1) (async, rerun: 64) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 5.601203499s ago: executing program 1 (id=2016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) keyctl$clear(0x3, 0xfffffffffffffffd) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.229563476s ago: executing program 1 (id=2026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r0, 0xfffffffffffffffb, 0x4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x40000000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = io_uring_setup(0x497c, &(0x7f00000004c0)={0x0, 0x3a46, 0x400, 0x3, 0x39b}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r4, &(0x7f00000000c0)="02", 0x1, 0x4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000540)='fuse\x00', &(0x7f0000000580)='(\xbf\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x0, 0x8010, r3, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x2000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}], [{@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '&\'^$'}}]}}, 0x1, 0x0, &(0x7f0000000480)="d3") dup(r5) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) unshare(0x22020400) fdatasync(r6) 3.561616638s ago: executing program 4 (id=2035): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000c0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f0000000880)=""/4121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 3.551636288s ago: executing program 4 (id=2036): syz_emit_ethernet(0x46, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0xff, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x9, @dev, @remote}, "a60f94438a30e2ab"}}}}}, 0x0) r0 = creat(&(0x7f0000000540)='./file0\x00', 0xd7) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0004}]}) tkill(0x0, 0x13) r1 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="3df457dfdcea", @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.424979594s ago: executing program 4 (id=2037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 3.194742515s ago: executing program 1 (id=2038): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffc35) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140)="02", 0x1, 0x14, 0x0, 0x0) (async) shutdown(r0, 0x1) (async, rerun: 32) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) splice(r0, 0x0, r1, 0x0, 0x5, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f0000000a00)=[@wr_crn={0x67, 0x20, {0x4, 0xf}}], 0x20}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.862155962s ago: executing program 6 (id=2044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@resgid}]}, 0x0, 0x48f, &(0x7f00000006c0)="$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") r4 = openat(r3, &(0x7f0000000680)='./file0\x00', 0x4c8c2bb75bdfc39a, 0x0) ioctl$NILFS_IOCTL_SYNC(r4, 0x80086e8a, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, 0x0, 0x121880, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000001c0)=@x86={0x16, 0x6, 0x7, 0x0, 0x3ff, 0x2, 0xd, 0xce, 0x5, 0x3c, 0xb, 0x6, 0x0, 0x7, 0xbd7b, 0x7, 0xf7, 0x9, 0x91, '\x00', 0x7, 0x694b}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[], 0x6a) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000900)=@svm={0x1, 0x1, 0x0, {0xffbbfffe, 0x7d94}, {"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"}}) 2.861758731s ago: executing program 6 (id=2045): unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xc0000400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x200000000000000}, 0x0) 2.751458877s ago: executing program 6 (id=2046): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x10, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x82}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01980400419a04002800128008000100736974001c00028008000300ac1414bb060004002f0000000500050001"], 0x48}}, 0x0) sendto$packet(r1, &(0x7f0000000100)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad854ac0200130536ccda093186a3fdd6762646c95c716727eb53bcc", 0x37, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x5, 0x6, @local}, 0x14) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 2.49313083s ago: executing program 4 (id=2047): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2100190870000"], 0x0) 2.174217495s ago: executing program 1 (id=2048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ptrace$pokeuser(0x6, r0, 0xfffffffffffffffb, 0x4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = io_uring_setup(0x497c, &(0x7f00000004c0)={0x0, 0x3a46, 0x400, 0x3, 0x39b}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r3, &(0x7f00000000c0)="02", 0x1, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000540)='fuse\x00', &(0x7f0000000580)='(\xbf\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x0, 0x8010, r2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x2000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}], [{@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '&\'^$'}}]}}, 0x1, 0x0, &(0x7f0000000480)="d3") dup(r4) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) unshare(0x22020400) fdatasync(r5) 2.021209452s ago: executing program 6 (id=2049): mkdir(&(0x7f0000000000)='./tracefs\x00', 0x196) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x50011, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20000000) getdents64(r1, &(0x7f0000000100)=""/36, 0x24) getdents64(r1, 0xfffffffffffffffe, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10) fallocate(r5, 0x0, 0x0, 0x8840000) fsmount(r5, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB="78cd4e86f938b6bc06e6fad108c083e67531db667e030110e889413d713533a483788422c57d5796c063a23edf08b84967c808da7626e8a7fac0374f5148421ab5d8eb33565986215290195d7b55ada270264944ec790f3e7c1cefbb5dc7bed827e24b47d33cbb0c46d7e98a8dfd13708dd5ecacd833ca11f6ab1b06e544ee93719ddf3526"], 0x0, 0x1da, &(0x7f00000008c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.587989993s ago: executing program 2 (id=2051): prctl$PR_SET_SECUREBITS(0x1c, 0x4) setreuid(0x0, 0xee01) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$eJzs3L9vG1UcAPDvOXFCaCGhlF8tPwIFUSFImrZABwZAIDEUgQQDjFYSqtK0oCZItIpEylAmVCGxI0b+BSZYEGJCYgVmVFGhLG2ZjM53l9iu7eaHY5f685GcfN/d2e997+45z/dyDmBgTaY/kojdEfF7RIxnxcYNJrNf11aXZ6+vLs8mUa2+809S2+7q6vJssWnxvF31hUhif4t6F8+dP1VZWJg/m5enl05/PL147vxzJ09XTsyfmD9z+Nixo0dmXnzh8PPbyG4sIva8lcWlfNkb73/15vEvG/JvyqNLJjutfKpa7XJ1/XVXXTzcx3awOUP58SrX+v94DNUdvfF4/fO1wmd9aiCwY6rVanVX+9UrVeA2lkRjWZeHQVH8oS8+/+a/R+sHAS/v6Aikv668kn0ASvO+lj+yNcNrVwzKTZ9vu2kyIt5b+feb9BEdr0MkO9QCAGDQ/JCOf55NRzvLs+nYY338UYr767a7O58bmoiIeyJiT0TcG2dib0TcF1Hb9oGIeHCT9ddNktSGmVdXR5rGP6XLW05uA9Lx30v53Fbj+K8Y/cXEUK10LitEOfng5ML8oXyfHIzyaFqe6VDHj6/9dqnduvrxX/pI6y/Ggnk7Lg+PNj5nrrJU2XrGja5ciNg33Cr/ZG0mIB15PhQR+1q9QOnmdZx85ruH2627ef4ddGGiqfptxNPZ8V+JpvwLSef5yek7YmH+0HRxVtzol18vvt2u/m3l3wXp8b+z5fm/lv9EUj9fu7j5Oi7+8UXbudXJch5s4vxfqSxVRpJ3a/FIvuzTytLS2ZmIkeR41uj65YfXn1uUi+3T/A8eaN3/98T6ntgfEelJ/EhEPBoRj+XH7vGIeCIiDnTI/+dXn/ywedlYkf8tcPznNnX814ORaFxSarFNGgyd+un7hkon1sM8/+ud3/+O1qKD+ZKNvP/d2IrWwXb3HwAAAPwflCJidySlqbW4VJqayv6Hf2829Z365Mxcdo/ARJRLxZWu8brroTP5x/qsfCEisn8tKNYfiVLtuvHXQ2O18tTsRwtzfc0c2NWm/6f+Gup364Ad54YtGFz6Pwyujv2/3Lt2AL13Q//v2OdHd7QtQG+1+Ps/1o92AL3Xavzv+35gMDT1f9N+MEBc/4fBpf/D4NrAPfzA7WdxLG5+k/xaUI6I5lXFK23g6VsJxiM208LtB8U3I273daLcuzb3I4hSd17nz3x/t1g10v7U+vtSxC2wE1oHyc51h94F/XtPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Kb/AgAA//8GT9U6") ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000100)) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 918.323886ms ago: executing program 1 (id=2052): syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 916.844026ms ago: executing program 1 (id=2053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) keyctl$clear(0x3, 0xfffffffffffffffd) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 896.370447ms ago: executing program 6 (id=2054): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x87, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xcc39, 0x0, 0x1, {0x22, 0x24}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x0, 0x2}}}}}]}}]}}, 0x0) r1 = eventfd2(0x0, 0x80001) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0xc, 0x30, 0xa6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "761d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x2, 0x200, 0x3}, {0x6, 0x24, 0x1a, 0xcc}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x6, 0xa8, 0x5, 0x9, 0x7f}, @dmm={0x7, 0x24, 0x14, 0x0, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xff, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xfd, 0x6, 0x5}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x3, 0x9, 0x4, 0xff, 0x8}, 0x57, &(0x7f00000002c0)={0x5, 0xf, 0x57, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xf0, "1cbeef219d50d0c7434c9d6f0e971726"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "a7e0efb481f1080603b1aafa7e8227cc"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x9, 0xf, 0xb, [0x7f800f, 0x0, 0xff00, 0xc0, 0x3fc0, 0xf]}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2009}}, {0xe2, &(0x7f0000000480)=@string={0xe2, 0x3, "64feb05703b9c7ca515604cf0abf6806b885a15705c325435d783dd7c5da5c82659e9e5138ad7610e01b32917e3104260d956a23290ede74945cd0a0f936bd550d6f47fae7f1fefa9522a899970a9cf78e61047b4d938770887691c4e238ac79a6878fdf80cfec28f0ca7bd91553d0351e7cd92d7d3ba6852cf4d0c524d420513440322a93c6bc73aa0785611f963cad22210c14923677b8e4254964a506753a123b53e1ea90be37c6537c2d9b924c6cb8dea6091125e423a3e987a9756fea67db638783c9252c252f5da6815e5a4c77e5b4fb3fc7cf1f8be07a53a7b3bd6f10"}}, {0xf5, &(0x7f0000000580)=@string={0xf5, 0x3, "a44b0ec1b0942aa87eccc48472afc7e8480aa0b593880dc03e25884896036167176a56104a57b8a38410899fd04987f1e2672716092d59ccd626a0ab9e59ba74f676fd1af686ac4ee2206a14710458be2c1f906d06015a8325e67c38330b314987119b5c3dcf9021201470fa21b6c3c5bb19f04405f344be454fc8067f62ac68f6105af68070ea5d4a9c573543693bba1392d58f5dcc33401e62ad80b3543fc6f36412a4865be0031af5721cc0e9f98a1b1ecc6304a4ce53d03b035c58e70cebdd7b001740038afc1830217c804948dc332be4331c64032cd4a839ca534e7cce02632debed1cac97dc86797252ba2741afcd89"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3044}}, {0xc9, &(0x7f00000006c0)=@string={0xc9, 0x3, "bbadde7a2a06d7f1a76419c6c613fc26acb339f3a0cfee4bbb4ab0120a348d2cf53af78051a560caeadded5dd075f10c7da7f7fc446b0d134d847ac572da40434bd1e509a51eff2115f1abccbcd59b63267968a834dbd61b41a2ded36b6dde80d1f3e20d00ef1d2bf2b3219bb3316e21796fab78b97d8d856b4749d4fe03264b074ea8d7676f8e396dd2345735c4bacd02f6d395a2e9302473f0c1ee4a6444446f43ebd67d4ea568f86f75275516c07002e264bbd1eb8816b4ee0b9e3cd9efc7ca6461d3349f73"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x65, &(0x7f0000000800)=@string={0x65, 0x3, "18c85c1caeaef67957fd09c7b6a480ccb775879021bbb34080b72dbbbaa47c4dedfe23789171321efb226b9f6c77c1375c99c5d103c366bdaaecb512f601bf64bac40eb7fbe04662595f69de8b5a4205c6b411eea5d259887a1ef40858c27b4a76d185"}}]}) io_setup(0x2081, &(0x7f0000000400)=0x0) io_submit(r2, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r1, 0x0, 0x0, 0x80, 0x0, 0x1, r1}]) read(r1, &(0x7f0000000040)=""/16, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, 0x0, &(0x7f00000000c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="2021240000002421c263"], 0x0, 0x0, 0x0, 0x0}, 0x0) 882.112858ms ago: executing program 4 (id=2055): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000001ccb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000004007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 881.546058ms ago: executing program 2 (id=2056): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}}, 0x0) 810.268461ms ago: executing program 4 (id=2057): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000086a052a0300000000000109022d000100004000090400020203000000092100000201221800090581030000489cfe09050203ff0308042c"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0}, 0x0) 810.168231ms ago: executing program 2 (id=2058): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000500000000000000000085000000200000001801000020786c25000000000020203a7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 810.030011ms ago: executing program 2 (id=2059): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000003c40)=[{&(0x7f0000000e40)}, {&(0x7f0000000380)="55eb7f35e10bb03c316676de0d1be5b6e352018d71ea6ce226d99cfaa40728e2e564e1bf6ba9cd02448b9593bed1072ce427f76ce88a185ce340e1828e527108ed2175da599a4587bc850f74a78d5013a715ece05cc64a643f7a4ce85ff089de812e2b613c6a9981044da55d276e57bd88716ae556e28844748f980fdf3ea8d5687deda8d825cd37a62cd12fe22af3d19a5fc5ba28c83e217b9f0f959daed3e15e7505e9ed5494305cf86164c45fde3876c7bee92de72786332fd03774b13c16f73c0e9fb94103b09e21607adcd1c6dbeb04fb8b", 0xd4}, {&(0x7f0000000480)="b9da8d9b2e7f04662593d284799a0087d0053f17746ea93adcae5fc88bc33df7eb", 0x21}, {&(0x7f0000004580)="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", 0x1000}, {&(0x7f0000003b40)="f134412d543d50399d8c", 0xa}, {&(0x7f0000003b80)="cbab01161c1a737f97bffeb9ee3493e3b51005ab7fe3979419d604d226b71ace8cc4e0a786b21fcff6de504b02278a853a1901afc768b9c583d9e1783a7cf783580c554ed99b26ce70409eb0107eae4aa64a67f53c423bdf0ff36eb351a917bd8d207176fbd40d8508ddb2ebac5ab8cc5a1520c3f4380f154f8fc73eaf276cf5e0304d7d59f777033d36f24c6e9fe7de7f6c641efef488fe33108117a588124e654fb407b698e544396a4e", 0xab}], 0x6) 440.133609ms ago: executing program 2 (id=2060): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140640fe8000000000000000000000000000bbfe8000000000000000000500000000aa4e224e22", @ANYRES32=0x41424344, @ANYBLOB="50c2100190"], 0x0) 290.106376ms ago: executing program 2 (id=2061): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsu(0x0, 0x0, 0x6ca802) read$FUSE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) r5 = getpgrp(0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000d4}, 0x10) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) 0s ago: executing program 6 (id=2062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r4, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40e02, 0x36) write$P9_RREADLINK(r6, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) kernel console output (not intermixed with test programs): 3][ T4920] __x64_sys_sendmsg+0x20d/0x2e0 [ 323.191911][ T4920] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 323.197443][ T4920] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 323.203496][ T4920] x64_sys_call+0x171/0x9a0 [ 323.207994][ T4920] do_syscall_64+0x4c/0xa0 [ 323.212399][ T4920] ? clear_bhb_loop+0x30/0x80 [ 323.217060][ T4920] ? clear_bhb_loop+0x30/0x80 [ 323.221721][ T4920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.227591][ T4920] RIP: 0033:0x7ff4fb79e159 [ 323.232001][ T4920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.251593][ T4920] RSP: 002b:00007ff4fc5fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.260130][ T4920] RAX: ffffffffffffffda RBX: 00007ff4fba25fa0 RCX: 00007ff4fb79e159 [ 323.268281][ T4920] RDX: 0000000000008804 RSI: 0000200000000000 RDI: 0000000000000003 [ 323.276242][ T4920] RBP: 00007ff4fc5fd090 R08: 0000000000000000 R09: 0000000000000000 [ 323.284198][ T4920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.292347][ T4920] R13: 00007ff4fba26038 R14: 00007ff4fba25fa0 R15: 00007fff92c4f838 [ 323.300319][ T4920] [ 323.342974][ T1105] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 323.365240][ T4925] tipc: Enabling of bearer rejected, media not registered [ 323.415322][ T4931] loop4: detected capacity change from 0 to 256 [ 323.506708][ T4931] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 324.493927][ T1105] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 324.502234][ T1105] hid-generic: probe of 0003:046D:C31C.0003 failed with error -22 [ 324.881963][ T4939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4939 comm=syz.6.1422 [ 324.989196][ T318] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 325.315953][ T318] usb 5-1: Using ep0 maxpacket: 32 [ 325.340034][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.462720][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.544719][ T318] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 325.607718][ T4954] loop2: detected capacity change from 0 to 256 [ 325.614773][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.629292][ T318] usb 5-1: config 0 descriptor?? [ 325.648764][ T4954] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 325.671118][ T318] hub 5-1:0.0: USB hub found [ 325.897524][ T318] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 326.008775][ T4963] loop8: detected capacity change from 0 to 256 [ 326.096434][ T923] usb 9-1: USB disconnect, device number 7 [ 326.124514][ T318] usbhid 5-1:0.0: can't add hid device: -71 [ 326.130747][ T318] usbhid: probe of 5-1:0.0 failed with error -71 [ 326.433213][ T318] usb 5-1: USB disconnect, device number 4 [ 327.238236][ T4976] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 327.254317][ T28] audit: type=1326 audit(1790200992.084:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4970 comm="syz.2.1432" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fa679e159 code=0x0 [ 327.449595][ T28] audit: type=1400 audit(1790200992.260:1667): avc: denied { create } for pid=4978 comm="syz.6.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 327.483771][ T4975] tipc: Enabling of bearer rejected, failed to enable media [ 327.489436][ T4985] ip6t_rpfilter: unknown options [ 327.547389][ T28] audit: type=1400 audit(1790200992.352:1668): avc: denied { mount } for pid=4989 comm="syz.4.1439" name="/" dev="ramfs" ino=35279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 327.586749][ T4991] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 327.639149][ T28] audit: type=1400 audit(1790200992.370:1669): avc: denied { remount } for pid=4989 comm="syz.4.1439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 327.653689][ T4991] overlayfs: failed to set xattr on upper [ 327.676654][ T4991] overlayfs: ...falling back to index=off,metacopy=off. [ 327.686559][ T28] audit: type=1400 audit(1790200992.389:1670): avc: denied { mounton } for pid=4989 comm="syz.4.1439" path="/12/file0/file0" dev="ramfs" ino=36290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 327.713499][ T28] audit: type=1400 audit(1790200992.490:1671): avc: denied { unmount } for pid=4815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 328.663358][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1437'. [ 328.784690][ T318] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 328.818606][ T5009] netlink: 'syz.1.1444': attribute type 1 has an invalid length. [ 328.826494][ T5009] netlink: 'syz.1.1444': attribute type 2 has an invalid length. [ 328.859864][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 329.035671][ T318] usb 9-1: not running at top speed; connect to a high speed hub [ 329.044335][ T318] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.054551][ T318] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 329.063783][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 329.069212][ T318] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 329.081593][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 329.090335][ T24] usb 5-1: config 0 has no interface number 0 [ 329.096844][ T318] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.106515][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 329.117084][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.125390][ T24] usb 5-1: Product: syz [ 329.126042][ T318] usb 9-1: Found UVC 1.00 device (046d:0825) [ 329.139375][ T24] usb 5-1: Manufacturer: syz [ 329.144208][ T24] usb 5-1: SerialNumber: syz [ 329.150352][ T24] usb 5-1: config 0 descriptor?? [ 329.156649][ T24] smsc95xx v2.0.0 [ 329.343110][ T318] usb 9-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 329.353013][ T318] usb 9-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 329.362413][ T318] usb 9-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 329.371464][ T318] usb 9-1: No streaming interface found for terminal 2. [ 329.388713][ T318] usb 9-1: USB disconnect, device number 8 [ 329.801060][ T28] audit: type=1400 audit(1790200994.428:1672): avc: denied { create } for pid=5029 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 329.822695][ T28] audit: type=1400 audit(1790200994.456:1673): avc: denied { write } for pid=5029 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 329.845552][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 329.857068][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 329.876194][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 329.893460][ T24] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 329.907601][ T24] usb 5-1: USB disconnect, device number 5 [ 330.264850][ T5039] loop8: detected capacity change from 0 to 1024 [ 330.289238][ T5039] journal_path: not usable as path [ 330.308877][ T5039] EXT4-fs: error: could not find journal device path [ 330.407912][ T5046] ip6t_rpfilter: unknown options [ 330.413572][ T5045] loop8: detected capacity change from 0 to 2048 [ 330.436520][ T28] audit: type=1400 audit(1790200995.019:1674): avc: denied { mounton } for pid=5047 comm="syz.4.1458" path="/15/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 330.461495][ T5050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.470952][ T2661] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.501083][ T5050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.756527][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 331.059692][ T5056] loop2: detected capacity change from 0 to 2048 [ 331.066844][ T24] usb 5-1: device descriptor read/64, error -71 [ 331.439330][ T24] usb 5-1: device descriptor read/64, error -71 [ 331.484285][ T2661] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 331.608255][ T28] audit: type=1400 audit(1790200996.098:1675): avc: denied { bind } for pid=5057 comm="syz.8.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 331.742380][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 331.916212][ T24] usb 5-1: device descriptor read/64, error -71 [ 332.490027][ T5076] loop2: detected capacity change from 0 to 2048 [ 332.536407][ T2661] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.596691][ T24] usb 5-1: device descriptor read/64, error -71 [ 333.000159][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 333.643587][ T5082] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1467'. [ 333.695210][ T24] usb usb5-port1: attempt power cycle [ 333.896086][ T5088] ip6t_rpfilter: unknown options [ 333.953724][ T28] audit: type=1400 audit(1790200998.272:1676): avc: denied { read write } for pid=5093 comm="syz.8.1473" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 334.005653][ T28] audit: type=1400 audit(1790200998.272:1677): avc: denied { open } for pid=5093 comm="syz.8.1473" path="/78/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 334.062087][ T28] audit: type=1400 audit(1790200998.272:1678): avc: denied { ioctl } for pid=5093 comm="syz.8.1473" path="/78/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 334.455899][ T28] audit: type=1400 audit(1790200998.734:1679): avc: denied { append } for pid=5109 comm="syz.2.1478" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 334.580085][ T5116] loop8: detected capacity change from 0 to 1024 [ 335.771486][ T28] audit: type=1400 audit(1790200999.942:1680): avc: denied { ioctl } for pid=5125 comm="syz.1.1483" path="socket:[36721]" dev="sockfs" ino=36721 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 335.784330][ T5133] FAULT_INJECTION: forcing a failure. [ 335.784330][ T5133] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 335.816724][ T5133] CPU: 0 PID: 5133 Comm: syz.8.1486 Not tainted syzkaller #0 [ 335.824219][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 335.834289][ T5133] Call Trace: [ 335.837736][ T5133] [ 335.840669][ T5133] __dump_stack+0x21/0x24 [ 335.845005][ T5133] dump_stack_lvl+0x110/0x170 [ 335.849689][ T5133] ? __cfi_dump_stack_lvl+0x8/0x8 [ 335.854840][ T5133] ? unwind_get_return_address+0x4d/0x90 [ 335.860590][ T5133] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 335.867008][ T5133] dump_stack+0x15/0x24 [ 335.871272][ T5133] should_fail_ex+0x3bf/0x510 [ 335.875247][ T5140] : renamed from bond_slave_0 [ 335.875961][ T5133] should_fail_alloc_page+0x61/0x90 [ 335.885995][ T5133] prepare_alloc_pages+0x131/0x570 [ 335.891110][ T5133] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 335.896408][ T5133] ? kasan_set_track+0x60/0x70 [ 335.901184][ T5133] ? kasan_set_track+0x4b/0x70 [ 335.905961][ T5133] ? kasan_save_alloc_info+0x1f/0x30 [ 335.911254][ T5133] ? __kasan_slab_alloc+0x72/0x80 [ 335.916470][ T5133] ? slab_post_alloc_hook+0x4f/0x2d0 [ 335.921781][ T5133] __alloc_pages+0x15b/0x610 [ 335.926653][ T5133] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.932874][ T5133] ? __cfi___alloc_pages+0x10/0x10 [ 335.934333][ T28] audit: type=1400 audit(1790201000.090:1681): avc: denied { listen } for pid=5127 comm="syz.4.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 335.938790][ T5133] __get_free_pages+0xe/0x30 [ 335.938824][ T5133] kasan_populate_vmalloc_pte+0x29/0x120 [ 335.938841][ T5133] __apply_to_page_range+0x8db/0xc80 [ 335.938863][ T5133] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 335.938880][ T5133] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 335.938898][ T5133] apply_to_page_range+0x3b/0x50 [ 335.938920][ T5133] kasan_populate_vmalloc+0x60/0x70 [ 335.996944][ T5133] alloc_vmap_area+0x1789/0x18c0 [ 336.001911][ T5133] ? vm_map_ram+0x930/0x930 [ 336.006455][ T5133] ? __kasan_kmalloc+0x95/0xb0 [ 336.011414][ T5133] ? kmalloc_node_trace+0x3d/0xb0 [ 336.016755][ T5133] __get_vm_area_node+0x160/0x360 [ 336.021982][ T5133] __vmalloc_node_range+0x326/0x1440 [ 336.027985][ T5133] ? prealloc_init+0x13e/0x920 [ 336.032767][ T5133] ? pcpu_block_update_hint_alloc+0x8a0/0xc30 [ 336.038936][ T5133] ? pcpu_memcg_post_alloc_hook+0x17e/0x270 [ 336.044861][ T5133] ? __kasan_check_write+0x14/0x20 [ 336.049987][ T5133] ? __cfi___vmalloc_node_range+0x10/0x10 [ 336.055809][ T5133] ? __alloc_percpu_gfp+0x25/0x30 [ 336.060839][ T5133] ? pcpu_alloc+0x10b9/0x16c0 [ 336.065522][ T5133] bpf_map_area_alloc+0xd7/0xe0 [ 336.070400][ T5133] ? prealloc_init+0x13e/0x920 [ 336.075168][ T5133] prealloc_init+0x13e/0x920 [ 336.080349][ T5133] htab_map_alloc+0xb03/0xfb0 [ 336.085133][ T5133] map_create+0x467/0xcf0 [ 336.089490][ T5133] __sys_bpf+0x34e/0x850 [ 336.093744][ T5133] ? bpf_link_show_fdinfo+0x330/0x330 [ 336.099125][ T5133] ? fpregs_restore_userregs+0x128/0x260 [ 336.104778][ T5133] __x64_sys_bpf+0x7c/0x90 [ 336.109204][ T5133] x64_sys_call+0x488/0x9a0 [ 336.113744][ T5133] do_syscall_64+0x4c/0xa0 [ 336.118175][ T5133] ? clear_bhb_loop+0x30/0x80 [ 336.122872][ T5133] ? clear_bhb_loop+0x30/0x80 [ 336.127557][ T5133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.133474][ T5133] RIP: 0033:0x7f731899e159 [ 336.138030][ T5133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.157728][ T5133] RSP: 002b:00007f73197b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.166152][ T5133] RAX: ffffffffffffffda RBX: 00007f7318c25fa0 RCX: 00007f731899e159 [ 336.174131][ T5133] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 0000000000000000 [ 336.182106][ T5133] RBP: 00007f7318a3506b R08: 0000000000000000 R09: 0000000000000000 [ 336.190345][ T5133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.198329][ T5133] R13: 00007f7318c26038 R14: 00007f7318c25fa0 R15: 00007ffc5c8fcd18 [ 336.206492][ T5133] [ 336.247784][ T28] audit: type=1400 audit(1790201000.385:1682): avc: denied { nlmsg_read } for pid=5146 comm="syz.2.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.455530][ T5156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1491'. [ 336.517156][ T5153] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1489'. [ 336.588371][ T5153] loop2: detected capacity change from 0 to 512 [ 336.616093][ T5153] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 336.639803][ T5153] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1489: casefold flag without casefold feature [ 336.655893][ T5153] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1489: couldn't read orphan inode 15 (err -117) [ 336.671610][ T5153] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 336.748128][ T291] EXT4-fs (loop2): unmounting filesystem. [ 336.764489][ T5162] loop2: detected capacity change from 0 to 256 [ 336.790022][ T5162] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 336.790218][ T5168] FAULT_INJECTION: forcing a failure. [ 336.790218][ T5168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.801128][ T5162] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 336.815410][ T5168] CPU: 0 PID: 5168 Comm: syz.4.1496 Not tainted syzkaller #0 [ 336.826881][ T5162] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 336.830069][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.830083][ T5168] Call Trace: [ 336.830089][ T5168] [ 336.830096][ T5168] __dump_stack+0x21/0x24 [ 336.863067][ T5168] dump_stack_lvl+0x110/0x170 [ 336.867766][ T5168] ? __cfi_dump_stack_lvl+0x8/0x8 [ 336.872258][ T5169] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1495'. [ 336.873183][ T5168] dump_stack+0x15/0x24 [ 336.882232][ T28] audit: type=1400 audit(1790201000.967:1683): avc: denied { create } for pid=5165 comm="syz.6.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 336.886245][ T5168] should_fail_ex+0x3bf/0x510 [ 336.906420][ T5169] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1495'. [ 336.911115][ T5168] should_fail+0xb/0x10 [ 336.911141][ T5168] should_fail_usercopy+0x1a/0x20 [ 336.911158][ T5168] _copy_from_user+0x1e/0xc0 [ 336.923595][ T5169] overlayfs: unrecognized mount option "userxattr:/ts" or missing value [ 336.924213][ T5168] strndup_user+0xb6/0x150 [ 336.931499][ T28] audit: type=1400 audit(1790201001.013:1684): avc: denied { mounton } for pid=5161 comm="syz.2.1492" path="/289/file1/file1" dev="loop2" ino=1048651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 336.933813][ T5168] __se_sys_mount+0x9c/0x390 [ 336.975095][ T5168] ? fput+0x154/0x1a0 [ 336.979172][ T5168] ? __x64_sys_mount+0xd0/0xd0 [ 336.983944][ T5168] ? __cfi_ksys_write+0x10/0x10 [ 336.988803][ T5168] __x64_sys_mount+0xbf/0xd0 [ 336.993403][ T5168] x64_sys_call+0x65d/0x9a0 [ 336.997938][ T5168] do_syscall_64+0x4c/0xa0 [ 337.002363][ T5168] ? clear_bhb_loop+0x30/0x80 [ 337.007119][ T5168] ? clear_bhb_loop+0x30/0x80 [ 337.011799][ T5168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.017791][ T5168] RIP: 0033:0x7ff4fb79e159 [ 337.022198][ T5168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.041969][ T5168] RSP: 002b:00007ff4fc5fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 337.050467][ T5168] RAX: ffffffffffffffda RBX: 00007ff4fba25fa0 RCX: 00007ff4fb79e159 [ 337.058428][ T5168] RDX: 0000200000000180 RSI: 0000200000000300 RDI: 0000000000000000 [ 337.066479][ T5168] RBP: 00007ff4fc5fd090 R08: 0000200000000140 R09: 0000000000000000 [ 337.074628][ T5168] R10: 0000000002000090 R11: 0000000000000246 R12: 0000000000000001 [ 337.082602][ T5168] R13: 00007ff4fba26038 R14: 00007ff4fba25fa0 R15: 00007fff92c4f838 [ 337.090570][ T5168] [ 337.104290][ T5173] ip6t_rpfilter: unknown options [ 337.184284][ T5177] loop4: detected capacity change from 0 to 4096 [ 337.191074][ T5177] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 337.222546][ T5183] FAULT_INJECTION: forcing a failure. [ 337.222546][ T5183] name failslab, interval 1, probability 0, space 0, times 0 [ 337.235311][ T5183] CPU: 0 PID: 5183 Comm: syz.8.1501 Not tainted syzkaller #0 [ 337.242694][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.252736][ T5183] Call Trace: [ 337.256088][ T5183] [ 337.259272][ T5183] __dump_stack+0x21/0x24 [ 337.263601][ T5183] dump_stack_lvl+0x110/0x170 [ 337.268269][ T5183] ? __cfi_dump_stack_lvl+0x8/0x8 [ 337.273309][ T5183] ? __futex_queue+0x175/0x300 [ 337.278351][ T5183] ? __cfi___futex_queue+0x10/0x10 [ 337.283579][ T5183] ? futex_wait_setup+0x1c0/0x260 [ 337.288616][ T5183] dump_stack+0x15/0x24 [ 337.292775][ T5183] should_fail_ex+0x3bf/0x510 [ 337.297451][ T5183] ? fcntl_setlk+0xa6/0x1070 [ 337.302076][ T5183] __should_failslab+0xac/0xf0 [ 337.306847][ T5183] should_failslab+0x9/0x20 [ 337.311355][ T5183] kmem_cache_alloc+0x3b/0x320 [ 337.316115][ T5183] fcntl_setlk+0xa6/0x1070 [ 337.320535][ T5183] ? __cfi_futex_wake+0x10/0x10 [ 337.325391][ T5183] ? avc_has_perm+0x163/0x250 [ 337.330066][ T5183] ? __cfi_fcntl_setlk+0x10/0x10 [ 337.335002][ T5183] ? __cfi_avc_has_perm+0x10/0x10 [ 337.340045][ T5183] ? cap_capable+0x1a6/0x230 [ 337.344734][ T5183] ? __kasan_check_write+0x14/0x20 [ 337.349835][ T5183] do_fcntl+0x582/0x1110 [ 337.354087][ T5183] ? match_file+0x130/0x130 [ 337.358602][ T5183] ? kill_fasync+0x210/0x210 [ 337.363179][ T5183] ? __fget_files+0x2d1/0x330 [ 337.367849][ T5183] ? security_file_fcntl+0x95/0xc0 [ 337.372998][ T5183] __se_sys_fcntl+0xdf/0x1b0 [ 337.377605][ T5183] __x64_sys_fcntl+0x7b/0x90 [ 337.382195][ T5183] x64_sys_call+0x1a9/0x9a0 [ 337.386707][ T5183] do_syscall_64+0x4c/0xa0 [ 337.391118][ T5183] ? clear_bhb_loop+0x30/0x80 [ 337.395780][ T5183] ? clear_bhb_loop+0x30/0x80 [ 337.400443][ T5183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.406339][ T5183] RIP: 0033:0x7f731899e159 [ 337.410738][ T5183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.430531][ T5183] RSP: 002b:00007f73197b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 337.438939][ T5183] RAX: ffffffffffffffda RBX: 00007f7318c25fa0 RCX: 00007f731899e159 [ 337.446917][ T5183] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 337.454898][ T5183] RBP: 00007f7318a3506b R08: 0000000000000000 R09: 0000000000000000 [ 337.462864][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.470832][ T5183] R13: 00007f7318c26038 R14: 00007f7318c25fa0 R15: 00007ffc5c8fcd18 [ 337.478814][ T5183] [ 337.510002][ T2661] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 337.753365][ T5189] __vm_enough_memory: pid: 5189, comm: syz.6.1503, no enough memory for the allocation [ 337.826823][ T5187] netlink: 'syz.8.1502': attribute type 1 has an invalid length. [ 337.837741][ T5187] netlink: 'syz.8.1502': attribute type 2 has an invalid length. [ 337.847994][ T28] audit: type=1400 audit(1790201001.862:1685): avc: denied { bind } for pid=5190 comm="syz.6.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 337.862090][ T5199] loop8: detected capacity change from 0 to 512 [ 337.880446][ T5200] loop2: detected capacity change from 0 to 512 [ 337.893118][ T5199] EXT4-fs: Ignoring removed bh option [ 337.912226][ T5200] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1507: inode #1: comm syz.2.1507: iget: illegal inode # [ 337.926801][ T5200] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1507: error while reading EA inode 1 err=-117 [ 337.939608][ T5200] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1507: inode #1: comm syz.2.1507: iget: illegal inode # [ 337.944629][ T5199] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 337.976450][ T5199] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 337.976668][ T5200] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1507: error while reading EA inode 1 err=-117 [ 337.986650][ T5199] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1508: Corrupt directory, running e2fsck is recommended [ 338.016250][ T5199] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 338.025290][ T5199] EXT4-fs error (device loop8): ext4_iget_extra_inode:4765: inode #15: comm syz.8.1508: corrupted in-inode xattr [ 338.037905][ T5199] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.1508: couldn't read orphan inode 15 (err -117) [ 338.038517][ T5200] EXT4-fs (loop2): 1 orphan inode deleted [ 338.055650][ T5200] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 338.056649][ T5199] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 338.482473][ T2689] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 338.733106][ T2689] usb 5-1: Using ep0 maxpacket: 8 [ 338.740437][ T2689] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 338.785383][ T2689] usb 5-1: config 179 has no interface number 0 [ 338.822581][ T2689] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 338.900553][ T2689] usb 5-1: config 179 interface 65 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 338.942248][ T291] EXT4-fs (loop2): unmounting filesystem. [ 338.976499][ T2689] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 339.042188][ T2689] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 339.121579][ T3833] EXT4-fs (loop8): unmounting filesystem. [ 339.140858][ T2689] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 339.153368][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 339.155409][ T2689] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 339.170793][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 339.174241][ T5223] loop8: detected capacity change from 0 to 1024 [ 339.179273][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.195354][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 339.197857][ T5223] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 339.212171][ T2689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.217824][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.228137][ T5207] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 339.229147][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.243993][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.252534][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.260783][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.340600][ T5230] ip6t_rpfilter: unknown options [ 339.418578][ T5234] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 339.429652][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 339.429676][ T28] audit: type=1326 audit(1790201003.320:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.8.1520" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f731899e159 code=0x0 [ 339.473913][ T24] usb 5-1: USB disconnect, device number 9 [ 339.491686][ T19] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 339.688241][ T19] usb 3-1: unable to get BOS descriptor or descriptor too short [ 339.696771][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.707473][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.718403][ T19] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 339.727532][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.735674][ T19] usb 3-1: Product: syz [ 339.739877][ T19] usb 3-1: Manufacturer: syz [ 339.744627][ T19] usb 3-1: SerialNumber: syz [ 339.750993][ T19] usb 3-1: selecting invalid altsetting 1 [ 339.757011][ T19] usb 3-1: unit 6 not found! [ 339.763222][ T19] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 339.776878][ T2661] udevd[2661]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 339.981806][ T24] usb 3-1: USB disconnect, device number 21 [ 340.083706][ T5243] loop4: detected capacity change from 0 to 128 [ 340.106423][ T5243] FAT-fs (loop4): Directory bread(block 32) failed [ 340.116523][ T5243] FAT-fs (loop4): Directory bread(block 33) failed [ 340.123722][ T5243] FAT-fs (loop4): Directory bread(block 34) failed [ 340.130466][ T5243] FAT-fs (loop4): Directory bread(block 35) failed [ 340.137982][ T5243] FAT-fs (loop4): Directory bread(block 36) failed [ 340.144918][ T5243] FAT-fs (loop4): Directory bread(block 37) failed [ 340.151721][ T5243] FAT-fs (loop4): Directory bread(block 38) failed [ 340.159122][ T5243] FAT-fs (loop4): Directory bread(block 39) failed [ 340.165881][ T5243] FAT-fs (loop4): Directory bread(block 40) failed [ 340.172742][ T5243] FAT-fs (loop4): Directory bread(block 41) failed [ 340.217446][ T5243] syz.4.1523: attempt to access beyond end of device [ 340.217446][ T5243] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 340.231042][ T5243] FAT-fs (loop4): Filesystem has been set read-only [ 340.237772][ T5243] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 340.247577][ T5243] syz.4.1523: attempt to access beyond end of device [ 340.247577][ T5243] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 340.269910][ T5243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1523'. [ 340.333027][ T5243] device team_slave_1 entered promiscuous mode [ 340.353806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 340.365369][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 340.472240][ T5254] netlink: 'syz.1.1528': attribute type 1 has an invalid length. [ 340.482276][ T5254] netlink: 'syz.1.1528': attribute type 2 has an invalid length. [ 340.571553][ T5259] loop8: detected capacity change from 0 to 8192 [ 340.683846][ T352] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 340.900648][ T352] usb 5-1: Using ep0 maxpacket: 8 [ 340.906154][ T19] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 340.914933][ T352] usb 5-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.927856][ T352] usb 5-1: config 0 interface 0 has no altsetting 0 [ 340.934514][ T352] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 340.944037][ T352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.953294][ T352] usb 5-1: config 0 descriptor?? [ 341.128201][ T19] usb 9-1: Using ep0 maxpacket: 32 [ 341.134443][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 341.146205][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 341.159095][ T19] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 341.168195][ T19] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.176213][ T19] usb 9-1: Product: syz [ 341.180559][ T19] usb 9-1: Manufacturer: syz [ 341.185243][ T19] usb 9-1: SerialNumber: syz [ 341.190844][ T19] usb 9-1: config 0 descriptor?? [ 341.196369][ T5259] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 341.205059][ T19] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input15 [ 341.664146][ T318] usb 9-1: USB disconnect, device number 9 [ 341.666085][ T5297] serio: Serial port ptm0 [ 341.811678][ T5303] tipc: Enabling of bearer rejected, media not registered [ 342.656739][ T5310] ip6t_rpfilter: unknown options [ 342.702248][ T28] audit: type=1326 audit(1790201006.346:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5306 comm="syz.1.1540" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fade579e159 code=0x0 [ 342.739695][ T5313] SELinux: security_context_str_to_sid () failed with errno=-22 [ 342.744027][ T352] usbhid 5-1:0.0: can't add hid device: -71 [ 342.754972][ T352] usbhid: probe of 5-1:0.0 failed with error -71 [ 342.762370][ T352] usb 5-1: USB disconnect, device number 10 [ 342.791386][ T28] audit: type=1400 audit(1790201006.420:1692): avc: denied { mounton } for pid=5312 comm="syz.8.1542" path="/91/file0" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 342.917784][ T28] audit: type=1326 audit(1790201006.540:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.1.1546" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fade579e159 code=0x0 [ 343.876358][ T5340] loop2: detected capacity change from 0 to 2048 [ 343.926965][ T2661] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 343.982573][ T5347] loop8: detected capacity change from 0 to 512 [ 344.013524][ T5347] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 344.048682][ T5355] futex_wake_op: syz.6.1559 tries to shift op by -1; fix this program [ 345.738790][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1557'. [ 345.747762][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1557'. [ 345.788512][ T352] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 345.819246][ T5368] loop2: detected capacity change from 0 to 1024 [ 345.843261][ T5368] EXT4-fs: Ignoring removed orlov option [ 345.853696][ T5368] EXT4-fs: test_dummy_encryption requires encrypt feature [ 345.872386][ T5371] 9pnet_fd: Insufficient options for proto=fd [ 345.928014][ T5375] fuse: Bad value for 'fd' [ 345.962701][ T5386] xt_hashlimit: size too large, truncated to 1048576 [ 345.976096][ T28] audit: type=1400 audit(1790201009.363:1694): avc: denied { create } for pid=5367 comm="syz.2.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 345.995406][ T352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.014219][ T352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.037006][ T352] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.061196][ T28] audit: type=1400 audit(1790201009.446:1695): avc: denied { watch } for pid=5393 comm="syz.4.1569" path="/30/file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 346.063941][ T352] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.126081][ T352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.145229][ T352] usb 5-1: config 0 descriptor?? [ 346.157002][ T352] usb 5-1: can't set config #0, error -71 [ 346.173888][ T352] usb 5-1: USB disconnect, device number 11 [ 348.805452][ T5402] loop4: detected capacity change from 0 to 512 [ 348.980666][ T5402] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1570: iget: bad i_size value: 38620345925642 [ 348.994355][ T5402] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1570: couldn't read orphan inode 15 (err -117) [ 349.006991][ T5402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 349.368788][ T4815] EXT4-fs (loop4): unmounting filesystem. [ 349.431057][ T5423] loop2: detected capacity change from 0 to 512 [ 349.514880][ T5423] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1575: iget: bad i_size value: 38620345925642 [ 349.529092][ T5423] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1575: couldn't read orphan inode 15 (err -117) [ 349.542646][ T5423] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 350.301769][ T291] EXT4-fs (loop2): unmounting filesystem. [ 350.543811][ T5436] loop4: detected capacity change from 0 to 8192 [ 351.153878][ T318] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 351.235452][ T5456] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 351.297489][ T28] audit: type=1326 audit(1790201014.272:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.2.1584" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fa679e159 code=0x0 [ 351.434066][ T318] usb 9-1: unable to get BOS descriptor or descriptor too short [ 351.450141][ T318] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 351.467408][ T318] usb 9-1: can't read configurations, error -71 [ 352.857397][ T5465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1587'. [ 353.056265][ T5465] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 353.065682][ T5465] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 353.131731][ T5470] loop4: detected capacity change from 0 to 256 [ 353.206360][ T5470] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 353.209610][ T28] audit: type=1400 audit(1790201016.034:1697): avc: denied { setattr } for pid=5474 comm="syz.2.1588" name="" dev="pipefs" ino=37480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 353.830285][ T431] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 353.999035][ T5481] loop2: detected capacity change from 0 to 2048 [ 354.090343][ T431] usb 5-1: Using ep0 maxpacket: 32 [ 354.101975][ T431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.134140][ T5481] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 354.166335][ T431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.204083][ T431] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 354.254101][ T431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.282528][ T431] usb 5-1: config 0 descriptor?? [ 354.300565][ T431] hub 5-1:0.0: USB hub found [ 354.367170][ T5499] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 354.467185][ T28] audit: type=1326 audit(1790201017.188:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.2.1600" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fa679e159 code=0x0 [ 354.492308][ T60] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 354.567016][ T28] audit: type=1326 audit(1790201017.234:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5500 comm="syz.6.1601" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145d99e159 code=0x7ffc0000 [ 354.600487][ T28] audit: type=1326 audit(1790201017.243:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5500 comm="syz.6.1601" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f145d99e159 code=0x7ffc0000 [ 354.626172][ T28] audit: type=1326 audit(1790201017.243:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5500 comm="syz.6.1601" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145d99e159 code=0x7ffc0000 [ 354.665638][ T28] audit: type=1326 audit(1790201017.243:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5500 comm="syz.6.1601" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f145d99e159 code=0x7ffc0000 [ 354.699316][ T28] audit: type=1326 audit(1790201017.252:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5500 comm="syz.6.1601" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145d99e159 code=0x7ffc0000 [ 354.702706][ T5505] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1601'. [ 354.725152][ T28] audit: type=1326 audit(1790201017.252:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5500 comm="syz.6.1601" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f145d99e159 code=0x7ffc0000 [ 354.734260][ T60] usb 9-1: device descriptor read/64, error -71 [ 354.766209][ T431] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 354.787083][ T28] audit: type=1326 audit(1790201017.492:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5500 comm="syz.6.1601" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145d99e159 code=0x7ffc0000 [ 354.996500][ T431] usbhid 5-1:0.0: can't add hid device: -71 [ 355.021964][ T431] usbhid: probe of 5-1:0.0 failed with error -71 [ 355.109217][ T60] usb 9-1: device descriptor read/64, error -71 [ 355.115598][ T431] usb 5-1: USB disconnect, device number 12 [ 355.423223][ T60] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 355.477265][ T5532] overlayfs: failed to clone upperpath [ 355.479700][ T5533] overlayfs: failed to clone upperpath [ 355.516762][ T5539] xt_hashlimit: size too large, truncated to 1048576 [ 355.644654][ T60] usb 9-1: device descriptor read/64, error -71 [ 355.684562][ T5548] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1612'. [ 355.925331][ T5552] loop4: detected capacity change from 0 to 512 [ 356.054637][ T5552] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1609: iget: bad i_size value: 38620345925642 [ 356.069100][ T5552] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1609: couldn't read orphan inode 15 (err -117) [ 356.082454][ T5552] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 356.111594][ T60] usb 9-1: device descriptor read/64, error -71 [ 356.301301][ T60] usb usb9-port1: attempt power cycle [ 356.550457][ T5554] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 356.610460][ T4815] EXT4-fs (loop4): unmounting filesystem. [ 356.666675][ T5566] xt_hashlimit: size too large, truncated to 1048576 [ 356.716368][ T5576] loop4: detected capacity change from 0 to 2048 [ 356.756284][ T60] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 356.793601][ T2661] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 356.804426][ T60] usb 9-1: device descriptor read/8, error -71 [ 356.875042][ T5586] /dev/loop6: Can't open blockdev [ 356.920165][ T5589] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1628'. [ 356.929153][ T5589] tipc: Enabling of bearer rejected, already enabled [ 356.975419][ T60] usb 9-1: device descriptor read/8, error -71 [ 357.072302][ T5601] xt_hashlimit: size too large, truncated to 1048576 [ 357.460784][ T60] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 357.788438][ T60] usb 9-1: device descriptor read/8, error -71 [ 357.992343][ T60] usb 9-1: device descriptor read/8, error -71 [ 358.027740][ T5607] loop8: detected capacity change from 0 to 2048 [ 358.108904][ T5607] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 358.120682][ T5607] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.143566][ T60] usb usb9-port1: unable to enumerate USB device [ 358.175619][ T5607] fs-verity: sha512 using implementation "sha512-avx2" [ 358.271767][ T5635] xt_hashlimit: size too large, truncated to 1048576 [ 358.307102][ T3833] EXT4-fs (loop8): unmounting filesystem. [ 358.544527][ T60] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 358.750448][ T39] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 358.759074][ T60] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 358.767937][ T60] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48 [ 358.781678][ T60] usb 3-1: config 0 has no interface number 1 [ 358.787990][ T60] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 358.801261][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 358.816165][ T60] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 358.825328][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.833687][ T60] usb 3-1: Product: syz [ 358.838225][ T60] usb 3-1: Manufacturer: syz [ 358.842916][ T60] usb 3-1: SerialNumber: syz [ 358.853122][ T60] usb 3-1: config 0 descriptor?? [ 358.860720][ T60] usb-storage 3-1:0.127: USB Mass Storage device detected [ 358.869330][ T60] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 358.946514][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.957551][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.968177][ T39] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 358.981656][ T39] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.991415][ T60] usb-storage 3-1:0.0: USB Mass Storage device detected [ 358.998467][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.007008][ T60] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 359.015253][ T39] usb 9-1: config 0 descriptor?? [ 359.079835][ T5361] usb 3-1: USB disconnect, device number 22 [ 359.474750][ T5661] loop4: detected capacity change from 0 to 2048 [ 360.027047][ T2661] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 360.126146][ T5672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1654'. [ 360.136849][ T39] usbhid 9-1:0.0: can't add hid device: -71 [ 360.144192][ T39] usbhid: probe of 9-1:0.0 failed with error -71 [ 360.151574][ T39] usb 9-1: USB disconnect, device number 16 [ 362.659557][ T28] audit: type=1326 audit(1790201024.754:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.1.1660" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fade579e159 code=0x0 [ 362.746983][ T5686] loop2: detected capacity change from 0 to 8192 [ 362.934978][ T5696] xt_hashlimit: size too large, truncated to 1048576 [ 363.128830][ T39] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 363.334875][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 363.341751][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 363.366303][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 363.391261][ T39] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 363.406085][ T5688] loop4: detected capacity change from 0 to 131072 [ 363.409895][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.436100][ T39] usb 3-1: Product: syz [ 363.444976][ T39] usb 3-1: Manufacturer: syz [ 363.455467][ T39] usb 3-1: SerialNumber: syz [ 363.469493][ T39] usb 3-1: config 0 descriptor?? [ 363.480761][ T5685] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.495927][ T39] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 363.714128][ T39] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 363.908646][ T5683] usb 3-1: USB disconnect, device number 23 [ 363.931277][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 363.945359][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.957131][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.967670][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.980952][ T39] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.990250][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.017663][ T39] usb 5-1: config 0 descriptor?? [ 364.043611][ T28] audit: type=1326 audit(1790201026.036:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.6.1671" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f145d99e159 code=0x0 [ 365.186006][ T5732] loop4: detected capacity change from 0 to 2048 [ 365.244923][ T5732] loop4: p1 < > p4 [ 365.265653][ T5732] loop4: p4 size 722688 extends beyond EOD, truncated [ 365.360283][ T28] audit: type=1400 audit(1790201027.245:1708): avc: denied { accept } for pid=5687 comm="syz.4.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 365.599979][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 365.701057][ T28] audit: type=1326 audit(1790201027.559:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.1678" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fade579e159 code=0x0 [ 365.761604][ T5744] netlink: 'syz.2.1679': attribute type 1 has an invalid length. [ 365.782870][ T5744] netlink: 'syz.2.1679': attribute type 2 has an invalid length. [ 366.256364][ T5762] loop8: detected capacity change from 0 to 2048 [ 366.308373][ T2589] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 366.733548][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 366.742003][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 367.019148][ T5766] tipc: Can't bind to reserved service type 0 [ 367.057254][ T39] usb 5-1: USB disconnect, device number 13 [ 367.138547][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 367.349211][ T5766] tipc: Started in network mode [ 367.354209][ T5766] tipc: Node identity c21c90421055, cluster identity 4711 [ 367.361642][ T5766] tipc: Enabled bearer , priority 10 [ 368.676434][ T5788] xt_hashlimit: size too large, truncated to 1048576 [ 368.683703][ T28] audit: type=1400 audit(1790201030.308:1710): avc: denied { bind } for pid=5791 comm="syz.8.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 368.911046][ T5797] netlink: 'syz.6.1696': attribute type 1 has an invalid length. [ 368.948798][ T5797] netlink: 'syz.6.1696': attribute type 2 has an invalid length. [ 368.976204][ T352] tipc: Node number set to 3528036418 [ 369.014699][ T5801] overlayfs: failed to clone lowerpath [ 369.154063][ T28] audit: type=1326 audit(1790201030.742:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.6.1698" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f145d99e159 code=0x0 [ 369.172705][ T5807] FAULT_INJECTION: forcing a failure. [ 369.172705][ T5807] name failslab, interval 1, probability 0, space 0, times 0 [ 369.250998][ T5807] CPU: 0 PID: 5807 Comm: syz.2.1699 Not tainted syzkaller #0 [ 369.258440][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 369.268774][ T5807] Call Trace: [ 369.272083][ T5807] [ 369.275109][ T5807] __dump_stack+0x21/0x24 [ 369.279912][ T5807] dump_stack_lvl+0x110/0x170 [ 369.284786][ T5807] ? __cfi_dump_stack_lvl+0x8/0x8 [ 369.289861][ T5807] ? fcntl_setlk+0xa6/0x1070 [ 369.294676][ T5807] dump_stack+0x15/0x24 [ 369.298986][ T5807] should_fail_ex+0x3bf/0x510 [ 369.304031][ T5807] ? posix_lock_inode+0x240/0x34e0 [ 369.309184][ T5807] __should_failslab+0xac/0xf0 [ 369.314083][ T5807] should_failslab+0x9/0x20 [ 369.318677][ T5807] kmem_cache_alloc+0x3b/0x320 [ 369.323528][ T5807] ? locks_get_lock_context+0x57/0x2d0 [ 369.329096][ T5807] posix_lock_inode+0x240/0x34e0 [ 369.334242][ T5807] ? file_has_perm+0x52d/0x700 [ 369.339247][ T5807] ? match_file+0x130/0x130 [ 369.343771][ T5807] ? posix_lock_file+0x50/0x50 [ 369.348617][ T5807] ? security_file_lock+0x8a/0xb0 [ 369.353780][ T5807] fcntl_setlk+0xa38/0x1070 [ 369.358382][ T5807] ? __cfi_fcntl_setlk+0x10/0x10 [ 369.363339][ T5807] ? __cfi_avc_has_perm+0x10/0x10 [ 369.368474][ T5807] ? cap_capable+0x1a6/0x230 [ 369.373085][ T5807] ? __kasan_check_write+0x14/0x20 [ 369.378217][ T5807] do_fcntl+0x582/0x1110 [ 369.382561][ T5807] ? match_file+0x130/0x130 [ 369.387090][ T5807] ? kill_fasync+0x210/0x210 [ 369.391705][ T5807] ? __fget_files+0x2d1/0x330 [ 369.396487][ T5807] ? security_file_fcntl+0x95/0xc0 [ 369.401623][ T5807] __se_sys_fcntl+0xdf/0x1b0 [ 369.406246][ T5807] __x64_sys_fcntl+0x7b/0x90 [ 369.410954][ T5807] x64_sys_call+0x1a9/0x9a0 [ 369.415475][ T5807] do_syscall_64+0x4c/0xa0 [ 369.419911][ T5807] ? clear_bhb_loop+0x30/0x80 [ 369.424695][ T5807] ? clear_bhb_loop+0x30/0x80 [ 369.429391][ T5807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.435475][ T5807] RIP: 0033:0x7f5fa679e159 [ 369.439916][ T5807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.459543][ T5807] RSP: 002b:00007f5fa75fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 369.468281][ T5807] RAX: ffffffffffffffda RBX: 00007f5fa6a25fa0 RCX: 00007f5fa679e159 [ 369.476614][ T5807] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 369.485297][ T5807] RBP: 00007f5fa683506b R08: 0000000000000000 R09: 0000000000000000 [ 369.493812][ T5807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.502149][ T5807] R13: 00007f5fa6a26038 R14: 00007f5fa6a25fa0 R15: 00007fff5ccb53c8 [ 369.510582][ T5807] [ 369.522640][ T5814] ip6t_rpfilter: unknown options [ 369.667181][ T5816] bridge0: port 3(vlan2) entered disabled state [ 369.674339][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.683096][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.831587][ T5816] tipc: Resetting bearer [ 369.989947][ T5823] loop4: detected capacity change from 0 to 512 [ 370.043833][ T5823] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 370.107802][ T5823] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 370.123975][ T5823] EXT4-fs (loop4): mount failed [ 370.238456][ T5361] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 370.258462][ T5795] loop8: detected capacity change from 0 to 131072 [ 370.267976][ T5795] F2FS-fs (loop8): invalid crc value [ 370.560609][ T5795] F2FS-fs (loop8): Found nat_bits in checkpoint [ 371.028444][ T5795] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 372.244533][ T5361] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.255774][ T5361] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 372.266821][ T5361] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 372.662889][ T5361] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.677419][ T5858] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 372.689263][ T28] audit: type=1326 audit(1790201034.009:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.4.1716" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4fb79e159 code=0x0 [ 372.695603][ T5361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.721839][ T5361] usb 3-1: Product: syz [ 372.726012][ T5361] usb 3-1: Manufacturer: syz [ 372.730631][ T5361] usb 3-1: SerialNumber: syz [ 372.799227][ T5361] cdc_mbim 3-1:1.0: skipping garbage [ 372.804774][ T5865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.863953][ T5873] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1717'. [ 374.001740][ T5361] cdc_mbim 3-1:1.0: bind() failure [ 374.007803][ T5361] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 374.014721][ T5361] cdc_ncm 3-1:1.1: bind() failure [ 374.021822][ T5361] usb 3-1: USB disconnect, device number 24 [ 374.090907][ T5876] xt_hashlimit: size too large, truncated to 1048576 [ 374.102238][ T5879] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 374.112994][ T28] audit: type=1326 audit(1790201035.319:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.8.1724" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f731899e159 code=0x0 [ 374.160918][ T5877] netlink: 'syz.1.1721': attribute type 1 has an invalid length. [ 374.185642][ T5877] netlink: 'syz.1.1721': attribute type 2 has an invalid length. [ 374.215944][ T5877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1721'. [ 374.385833][ T5885] loop2: detected capacity change from 0 to 8192 [ 374.450822][ T5889] FAULT_INJECTION: forcing a failure. [ 374.450822][ T5889] name fail_futex, interval 1, probability 0, space 0, times 0 [ 374.464672][ T5889] CPU: 0 PID: 5889 Comm: syz.4.1723 Not tainted syzkaller #0 [ 374.472090][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 374.482154][ T5889] Call Trace: [ 374.485448][ T5889] [ 374.488383][ T5889] __dump_stack+0x21/0x24 [ 374.492742][ T5889] dump_stack_lvl+0x110/0x170 [ 374.497415][ T5889] ? __cfi_dump_stack_lvl+0x8/0x8 [ 374.502428][ T5889] ? __cfi_enqueue_task_fair+0x10/0x10 [ 374.507889][ T5889] dump_stack+0x15/0x24 [ 374.512082][ T5889] should_fail_ex+0x3bf/0x510 [ 374.516753][ T5889] should_fail+0xb/0x10 [ 374.520905][ T5889] get_futex_key+0x143/0xb10 [ 374.525613][ T5889] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 374.532370][ T5889] ? __cfi_get_futex_key+0x10/0x10 [ 374.537485][ T5889] ? probe_sched_wakeup+0x71/0x90 [ 374.542586][ T5889] ? ttwu_do_wakeup+0x468/0x490 [ 374.547429][ T5889] futex_wait_setup+0xb8/0x260 [ 374.552188][ T5889] ? __cfi_futex_wait_setup+0x10/0x10 [ 374.557578][ T5889] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 374.563477][ T5889] ? futex_setup_timer+0xb0/0xc0 [ 374.568418][ T5889] futex_wait+0x1ce/0x900 [ 374.572751][ T5889] ? __cfi_futex_wait+0x10/0x10 [ 374.577615][ T5889] ? __cfi_futex_wake+0x10/0x10 [ 374.582464][ T5889] ? cap_capable+0x1a6/0x230 [ 374.587231][ T5889] do_futex+0x2e2/0x430 [ 374.591396][ T5889] ? map_create+0x270/0xcf0 [ 374.595968][ T5889] ? __cfi_do_futex+0x10/0x10 [ 374.601183][ T5889] ? __sys_bpf+0x34e/0x850 [ 374.605596][ T5889] __se_sys_futex+0x136/0x310 [ 374.610291][ T5889] ? __x64_sys_futex+0x100/0x100 [ 374.615218][ T5889] ? __fdget_raw+0x170/0x1c0 [ 374.619811][ T5889] ? __se_sys_fcntl+0x1f/0x1b0 [ 374.624569][ T5889] __x64_sys_futex+0xe5/0x100 [ 374.629477][ T5889] x64_sys_call+0x7ec/0x9a0 [ 374.633990][ T5889] do_syscall_64+0x4c/0xa0 [ 374.638419][ T5889] ? clear_bhb_loop+0x30/0x80 [ 374.643114][ T5889] ? clear_bhb_loop+0x30/0x80 [ 374.647814][ T5889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.653708][ T5889] RIP: 0033:0x7ff4fb79e159 [ 374.658115][ T5889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.677888][ T5889] RSP: 002b:00007ff4fc5fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 374.686319][ T5889] RAX: ffffffffffffffda RBX: 00007ff4fba25fa8 RCX: 00007ff4fb79e159 [ 374.694462][ T5889] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff4fba25fa8 [ 374.702608][ T5889] RBP: 00007ff4fba25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 374.710671][ T5889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.718764][ T5889] R13: 00007ff4fba26038 R14: 00007fff92c4f750 R15: 00007fff92c4f838 [ 374.726798][ T5889] [ 375.511941][ T5906] netlink: 'syz.8.1727': attribute type 5 has an invalid length. [ 375.529092][ T5906] loop8: detected capacity change from 0 to 2048 [ 375.568751][ T5906] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 375.646546][ T3833] EXT4-fs (loop8): unmounting filesystem. [ 375.718234][ T5913] loop8: detected capacity change from 0 to 128 [ 376.692812][ T5361] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 376.843450][ T5923] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 376.905010][ T28] audit: type=1326 audit(1790201037.902:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.8.1733" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f731899e159 code=0x0 [ 377.338779][ T28] audit: type=1326 audit(1790201038.161:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.1.1737" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fade579e159 code=0x0 [ 379.706565][ T5946] loop2: detected capacity change from 0 to 512 [ 379.968493][ T5946] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1741: iget: bad i_size value: 38620345925642 [ 379.981537][ T5946] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1741: couldn't read orphan inode 15 (err -117) [ 379.993779][ T5946] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 380.246344][ T415] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 380.264756][ T28] audit: type=1326 audit(1790201041.003:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.6.1748" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f145d99e159 code=0x0 [ 380.289872][ T291] EXT4-fs (loop2): unmounting filesystem. [ 380.514629][ T415] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.935429][ T5361] usb 3-1: device not accepting address 25, error -71 [ 381.037606][ T415] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.219515][ T415] usb 5-1: string descriptor 0 read error: -71 [ 381.409880][ T415] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.456265][ T415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.575827][ T415] usb 5-1: can't set config #1, error -71 [ 381.589311][ T415] usb 5-1: USB disconnect, device number 14 [ 381.625774][ T5980] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 381.636009][ T28] audit: type=1326 audit(1790201042.257:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.8.1755" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f731899e159 code=0x0 [ 382.119908][ T5989] loop2: detected capacity change from 0 to 4096 [ 382.289075][ T5989] EXT4-fs error (device loop2): ext4_quota_enable:7036: comm syz.2.1753: inode #458752: comm syz.2.1753: iget: illegal inode # [ 382.303228][ T5989] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.1753: Bad quota inode: 458752, type: 2 [ 382.316619][ T5989] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-117, ino=458752). Please run e2fsck to fix. [ 382.334687][ T5989] EXT4-fs (loop2): mount failed [ 383.046674][ T6007] netlink: 'syz.4.1762': attribute type 1 has an invalid length. [ 383.071708][ T6005] loop2: detected capacity change from 0 to 512 [ 383.081323][ T6007] netlink: 'syz.4.1762': attribute type 2 has an invalid length. [ 383.107317][ T6005] EXT4-fs (loop2): can't read group descriptor 0 [ 384.175772][ T6028] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 384.217914][ T28] audit: type=1326 audit(1790201044.638:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.2.1764" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fa679e159 code=0x0 [ 384.314169][ T28] audit: type=1326 audit(1790201044.721:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.6.1768" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f145d99e159 code=0x0 [ 385.542417][ T6045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.550053][ T6045] IPv6: NLM_F_CREATE should be set when creating new route [ 385.577075][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.584353][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.823784][ T28] audit: type=1326 audit(1790201047.056:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.6.1780" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f145d99e159 code=0x0 [ 386.953851][ T6075] loop2: detected capacity change from 0 to 512 [ 387.365372][ T6075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.384956][ T6075] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 387.424700][ T6075] EXT4-fs (loop2): 1 truncate cleaned up [ 387.430563][ T6075] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 387.564631][ T6065] syz.8.1773 (6065) used greatest stack depth: 18728 bytes left [ 387.892898][ T28] audit: type=1326 audit(1790201048.034:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.1.1783" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fade579e159 code=0x0 [ 388.100933][ T6090] xt_hashlimit: size too large, truncated to 1048576 [ 388.260901][ T6097] 9pnet_fd: Insufficient options for proto=fd [ 388.411872][ T6101] loop4: detected capacity change from 0 to 2048 [ 388.438186][ T2661] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 389.856856][ T291] EXT4-fs (loop2): unmounting filesystem. [ 389.952518][ T6113] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 390.018705][ T28] audit: type=1326 audit(1790201049.990:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6108 comm="syz.4.1792" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4fb79e159 code=0x0 [ 390.170696][ T6092] loop8: detected capacity change from 0 to 131072 [ 390.180382][ T6092] F2FS-fs (loop8): invalid crc value [ 390.186833][ T6092] F2FS-fs (loop8): Found nat_bits in checkpoint [ 390.217854][ T6092] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 390.440011][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 390.690846][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.707556][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 390.744219][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.759026][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.776638][ T24] usb 3-1: Product: syz [ 390.787036][ T24] usb 3-1: Manufacturer: syz [ 390.791663][ T24] usb 3-1: SerialNumber: syz [ 390.809819][ T24] cdc_mbim 3-1:1.0: skipping garbage [ 390.841755][ T6149] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 390.852300][ T28] audit: type=1326 audit(1790201050.774:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.8.1799" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f731899e159 code=0x0 [ 391.027303][ T6129] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 391.482960][ T24] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 391.494056][ T24] cdc_mbim 3-1:1.0: bind() failure [ 391.940269][ T24] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 391.952756][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1800'. [ 392.058336][ T24] cdc_ncm 3-1:1.1: bind() failure [ 392.842099][ T6171] xt_hashlimit: size too large, truncated to 1048576 [ 393.063263][ T6177] xt_hashlimit: size too large, truncated to 1048576 [ 393.221793][ T6184] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1810'. [ 393.322895][ T28] audit: type=1326 audit(1790201053.044:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.1.1812" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fade579e159 code=0x0 [ 393.407741][ T415] usb 3-1: USB disconnect, device number 27 [ 393.570115][ T6195] ip_tables: iptables: counters copy to user failed while replacing table [ 393.607645][ T6199] loop2: detected capacity change from 0 to 2048 [ 394.537112][ T2661] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 394.666736][ T415] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 394.701443][ T6208] FAULT_INJECTION: forcing a failure. [ 394.701443][ T6208] name failslab, interval 1, probability 0, space 0, times 0 [ 394.794621][ T6208] CPU: 1 PID: 6208 Comm: syz.4.1818 Not tainted syzkaller #0 [ 394.802742][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 394.812807][ T6208] Call Trace: [ 394.816090][ T6208] [ 394.819018][ T6208] __dump_stack+0x21/0x24 [ 394.823368][ T6208] dump_stack_lvl+0x110/0x170 [ 394.828312][ T6208] ? __cfi_dump_stack_lvl+0x8/0x8 [ 394.833431][ T6208] ? preempt_schedule_irq+0xca/0x120 [ 394.838845][ T6208] dump_stack+0x15/0x24 [ 394.843400][ T6208] should_fail_ex+0x3bf/0x510 [ 394.848095][ T6208] ? posix_lock_inode+0x240/0x34e0 [ 394.853227][ T6208] __should_failslab+0xac/0xf0 [ 394.858872][ T6208] should_failslab+0x9/0x20 [ 394.863610][ T6208] kmem_cache_alloc+0x3b/0x320 [ 394.868582][ T6208] posix_lock_inode+0x240/0x34e0 [ 394.873537][ T6208] ? __kasan_check_read+0x11/0x20 [ 394.878587][ T6208] ? preempt_schedule_irq+0xca/0x120 [ 394.884071][ T6208] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 394.889818][ T6208] ? file_has_perm+0x52d/0x700 [ 394.894646][ T6208] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 394.900838][ T6208] ? irqentry_exit+0x37/0x40 [ 394.905525][ T6208] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 394.911163][ T6208] ? posix_lock_file+0x50/0x50 [ 394.915984][ T6208] fcntl_setlk+0xa38/0x1070 [ 394.920524][ T6208] ? __cfi_fcntl_setlk+0x10/0x10 [ 394.925486][ T6208] ? refcount_dec_and_lock_irqsave+0x91/0x100 [ 394.931668][ T6208] ? copy_user_short_string+0xd/0x40 [ 394.937021][ T6208] do_fcntl+0x582/0x1110 [ 394.941265][ T6208] ? sysvec_reschedule_ipi+0x78/0x80 [ 394.946648][ T6208] ? match_file+0x130/0x130 [ 394.951160][ T6208] ? kill_fasync+0x210/0x210 [ 394.955754][ T6208] ? selinux_file_fcntl+0xc3/0x190 [ 394.961060][ T6208] ? security_file_fcntl+0x95/0xc0 [ 394.966448][ T6208] __se_sys_fcntl+0xdf/0x1b0 [ 394.971130][ T6208] __x64_sys_fcntl+0x7b/0x90 [ 394.975724][ T6208] x64_sys_call+0x1a9/0x9a0 [ 394.980838][ T6208] do_syscall_64+0x4c/0xa0 [ 394.985785][ T6208] ? clear_bhb_loop+0x30/0x80 [ 394.990899][ T6208] ? clear_bhb_loop+0x30/0x80 [ 394.995914][ T6208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.002246][ T6208] RIP: 0033:0x7ff4fb79e159 [ 395.007136][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.026931][ T6208] RSP: 002b:00007ff4fc5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 395.035365][ T6208] RAX: ffffffffffffffda RBX: 00007ff4fba25fa0 RCX: 00007ff4fb79e159 [ 395.043357][ T6208] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 395.051338][ T6208] RBP: 00007ff4fb83506b R08: 0000000000000000 R09: 0000000000000000 [ 395.059319][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.067298][ T6208] R13: 00007ff4fba26038 R14: 00007ff4fba25fa0 R15: 00007fff92c4f838 [ 395.075283][ T6208] [ 395.176119][ T415] usb 9-1: Using ep0 maxpacket: 32 [ 395.182832][ T415] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.205449][ T415] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.227342][ T415] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 395.247662][ T415] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.265946][ T415] usb 9-1: config 0 descriptor?? [ 395.282946][ T415] hub 9-1:0.0: USB hub found [ 395.420255][ T6214] loop4: detected capacity change from 0 to 2048 [ 395.702663][ T6216] loop2: detected capacity change from 0 to 512 [ 395.728013][ T415] hub 9-1:0.0: config failed, can't read hub descriptor (err -90) [ 395.898159][ T6216] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1819: iget: bad i_size value: 38620345925642 [ 395.914441][ T6216] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1819: couldn't read orphan inode 15 (err -117) [ 395.927940][ T6216] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 395.981514][ T415] usbhid 9-1:0.0: can't add hid device: -71 [ 396.055976][ T415] usbhid: probe of 9-1:0.0 failed with error -71 [ 396.186492][ T6220] ip6t_rpfilter: unknown options [ 396.195720][ T415] usb 9-1: USB disconnect, device number 17 [ 396.347869][ T2589] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 396.377969][ T291] EXT4-fs (loop2): unmounting filesystem. [ 396.390637][ T6226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1834'. [ 396.400278][ T6226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=6226 comm=syz.1.1834 [ 396.425657][ T6227] tipc: Enabling of bearer rejected, failed to enable media [ 396.428505][ T6229] loop2: detected capacity change from 0 to 512 [ 396.620753][ T28] audit: type=1400 audit(1790201056.089:1725): avc: denied { create } for pid=6230 comm="syz.6.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 397.131745][ T6240] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 397.143725][ T28] audit: type=1326 audit(1790201056.578:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.8.1828" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f731899e159 code=0x0 [ 398.124992][ T6251] ip_tables: iptables: counters copy to user failed while replacing table [ 398.421985][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1835'. [ 398.741208][ T6271] tipc: Enabling of bearer rejected, failed to enable media [ 398.811887][ T6275] loop4: detected capacity change from 0 to 512 [ 398.839604][ T6275] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1836: iget: bad i_size value: 38620345925642 [ 398.853635][ T6275] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1836: couldn't read orphan inode 15 (err -117) [ 398.868843][ T6275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 398.973392][ T6282] loop2: detected capacity change from 0 to 2048 [ 399.013448][ T2661] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 400.161553][ T28] audit: type=1326 audit(1790201059.337:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.1.1843" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fade579e159 code=0x0 [ 400.194876][ T6277] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 400.232571][ T6290] loop2: detected capacity change from 0 to 1024 [ 400.303638][ T6290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 400.322270][ T6290] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.357415][ T6290] EXT4-fs (loop2): shut down requested (2) [ 400.614338][ T6299] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(7.0.0), cmd(10) [ 400.779235][ T28] audit: type=1326 audit(1790201059.899:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.8.1845" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f731899e159 code=0x0 [ 401.753181][ T291] EXT4-fs (loop2): unmounting filesystem. [ 402.054600][ T6320] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 402.093214][ T6320] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 402.103086][ T4815] EXT4-fs (loop4): unmounting filesystem. [ 402.167929][ T6324] loop8: detected capacity change from 0 to 512 [ 402.175573][ T6324] EXT4-fs: Ignoring removed bh option [ 402.187683][ T6324] EXT4-fs: old and new quota format mixing [ 402.877484][ T28] audit: type=1326 audit(1790201061.865:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.6.1863" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f145d99e159 code=0x0 [ 405.389941][ T6360] loop8: detected capacity change from 0 to 512 [ 405.619214][ T6360] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.1865: iget: bad i_size value: 38620345925642 [ 405.632380][ T6360] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.1865: couldn't read orphan inode 15 (err -117) [ 405.645094][ T6360] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 405.677882][ T39] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 405.812252][ T3833] EXT4-fs (loop8): unmounting filesystem. [ 405.917745][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 405.950632][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.966573][ T39] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 405.981189][ T39] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 405.997224][ T6370] netlink: 'syz.6.1868': attribute type 1 has an invalid length. [ 406.005127][ T6370] netlink: 'syz.6.1868': attribute type 2 has an invalid length. [ 406.080614][ T39] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 406.112358][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.177197][ T39] usb 3-1: Product: syz [ 406.236310][ T39] usb 3-1: Manufacturer: syz [ 406.271517][ T39] usb 3-1: SerialNumber: syz [ 406.428174][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1873'. [ 406.612926][ T6384] 9pnet_fd: Insufficient options for proto=fd [ 406.707482][ T1220] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 406.883010][ T1220] usb 5-1: device descriptor read/64, error -71 [ 406.892220][ T6390] loop8: detected capacity change from 0 to 512 [ 406.899968][ T6390] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 406.911042][ T6390] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 406.919420][ T6390] System zones: 1-12 [ 406.923792][ T6390] EXT4-fs error (device loop8): ext4_orphan_get:1431: comm syz.8.1876: bad orphan inode 131072 [ 406.934674][ T6390] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 406.952117][ T3833] EXT4-fs (loop8): unmounting filesystem. [ 407.053910][ T6395] loop8: detected capacity change from 0 to 1024 [ 407.066751][ T6395] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 407.079394][ T6395] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 407.154000][ T39] usb 3-1: USB disconnect, device number 28 [ 407.173546][ T1220] usb 5-1: device descriptor read/64, error -71 [ 407.777646][ T6405] loop2: detected capacity change from 0 to 512 [ 407.925800][ T6405] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1879: iget: bad i_size value: 38620345925642 [ 407.940620][ T6405] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1879: couldn't read orphan inode 15 (err -117) [ 407.955463][ T6405] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 408.216124][ T28] audit: type=1400 audit(1790201066.792:1730): avc: denied { bind } for pid=6409 comm="syz.1.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 408.291607][ T3833] EXT4-fs (loop8): unmounting filesystem. [ 408.322921][ T291] EXT4-fs (loop2): unmounting filesystem. [ 408.348349][ T6415] FAULT_INJECTION: forcing a failure. [ 408.348349][ T6415] name fail_futex, interval 1, probability 0, space 0, times 0 [ 408.367774][ T6415] CPU: 0 PID: 6415 Comm: syz.8.1885 Not tainted syzkaller #0 [ 408.375363][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 408.385513][ T6415] Call Trace: [ 408.388792][ T6415] [ 408.391719][ T6415] __dump_stack+0x21/0x24 [ 408.396184][ T6415] dump_stack_lvl+0x110/0x170 [ 408.400863][ T6415] ? __cfi_dump_stack_lvl+0x8/0x8 [ 408.405887][ T6415] ? __cfi_fixup_exception+0x10/0x10 [ 408.411172][ T6415] dump_stack+0x15/0x24 [ 408.415330][ T6415] should_fail_ex+0x3bf/0x510 [ 408.419997][ T6415] should_fail+0xb/0x10 [ 408.424142][ T6415] get_futex_key+0x143/0xb10 [ 408.428728][ T6415] ? kernelmode_fixup_or_oops+0x85/0xd0 [ 408.434269][ T6415] ? __cfi_get_futex_key+0x10/0x10 [ 408.439379][ T6415] futex_wake+0x150/0x8e0 [ 408.443701][ T6415] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 408.449415][ T6415] ? __cfi_futex_wake+0x10/0x10 [ 408.454259][ T6415] ? irqentry_exit+0x37/0x40 [ 408.458841][ T6415] ? asm_exc_page_fault+0x27/0x30 [ 408.463857][ T6415] do_futex+0x2bf/0x430 [ 408.468009][ T6415] ? memset+0x35/0x40 [ 408.472075][ T6415] ? _copy_from_user+0xb3/0xc0 [ 408.477185][ T6415] ? __cfi_do_futex+0x10/0x10 [ 408.482644][ T6415] ? do_fcntl+0x553/0x1110 [ 408.487244][ T6415] __se_sys_futex+0x136/0x310 [ 408.492089][ T6415] ? __x64_sys_futex+0x100/0x100 [ 408.497718][ T6415] ? security_file_fcntl+0x95/0xc0 [ 408.503194][ T6415] __x64_sys_futex+0xe5/0x100 [ 408.508367][ T6415] x64_sys_call+0x7ec/0x9a0 [ 408.513413][ T6415] do_syscall_64+0x4c/0xa0 [ 408.518543][ T6415] ? clear_bhb_loop+0x30/0x80 [ 408.524251][ T6415] ? clear_bhb_loop+0x30/0x80 [ 408.529384][ T6415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.535468][ T6415] RIP: 0033:0x7f731899e159 [ 408.540232][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.561059][ T6415] RSP: 002b:00007f73197b30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 408.569565][ T6415] RAX: ffffffffffffffda RBX: 00007f7318c25fa8 RCX: 00007f731899e159 [ 408.577710][ T6415] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7318c25fac [ 408.585677][ T6415] RBP: 00007f7318c25fa0 R08: 00034c3200266af2 R09: 0000000000000000 [ 408.593644][ T6415] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 408.601606][ T6415] R13: 00007f7318c26038 R14: 00007ffc5c8fcc30 R15: 00007ffc5c8fcd18 [ 408.609661][ T6415] [ 408.685526][ T6425] FAULT_INJECTION: forcing a failure. [ 408.685526][ T6425] name failslab, interval 1, probability 0, space 0, times 0 [ 408.699844][ T6425] CPU: 1 PID: 6425 Comm: syz.2.1888 Not tainted syzkaller #0 [ 408.699926][ T1220] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 408.707441][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 408.707459][ T6425] Call Trace: [ 408.707466][ T6425] [ 408.707475][ T6425] __dump_stack+0x21/0x24 [ 408.707505][ T6425] dump_stack_lvl+0x110/0x170 [ 408.707527][ T6425] ? __cfi_dump_stack_lvl+0x8/0x8 [ 408.707549][ T6425] ? __futex_queue+0x175/0x300 [ 408.707566][ T6425] ? __cfi___futex_queue+0x10/0x10 [ 408.756371][ T6425] ? futex_wait_setup+0x1c0/0x260 [ 408.761525][ T6425] dump_stack+0x15/0x24 [ 408.765854][ T6425] should_fail_ex+0x3bf/0x510 [ 408.770644][ T6425] ? fcntl_setlk+0xa6/0x1070 [ 408.775356][ T6425] __should_failslab+0xac/0xf0 [ 408.780295][ T6425] should_failslab+0x9/0x20 [ 408.784812][ T6425] kmem_cache_alloc+0x3b/0x320 [ 408.789571][ T6425] fcntl_setlk+0xa6/0x1070 [ 408.794000][ T6425] ? __cfi_futex_wake+0x10/0x10 [ 408.798844][ T6425] ? avc_has_perm+0x163/0x250 [ 408.803518][ T6425] ? __cfi_fcntl_setlk+0x10/0x10 [ 408.808481][ T6425] ? __cfi_avc_has_perm+0x10/0x10 [ 408.813592][ T6425] ? cap_capable+0x1a6/0x230 [ 408.818541][ T6425] ? __kasan_check_write+0x14/0x20 [ 408.824173][ T6425] do_fcntl+0x582/0x1110 [ 408.828761][ T6425] ? match_file+0x130/0x130 [ 408.833297][ T6425] ? kill_fasync+0x210/0x210 [ 408.838058][ T6425] ? __fget_files+0x2d1/0x330 [ 408.843056][ T6425] ? security_file_fcntl+0x95/0xc0 [ 408.848313][ T6425] __se_sys_fcntl+0xdf/0x1b0 [ 408.852901][ T6425] __x64_sys_fcntl+0x7b/0x90 [ 408.857665][ T6425] x64_sys_call+0x1a9/0x9a0 [ 408.862211][ T6425] do_syscall_64+0x4c/0xa0 [ 408.866637][ T6425] ? clear_bhb_loop+0x30/0x80 [ 408.871508][ T6425] ? clear_bhb_loop+0x30/0x80 [ 408.876293][ T6425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.882435][ T6425] RIP: 0033:0x7f5fa679e159 [ 408.887019][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.906812][ T6425] RSP: 002b:00007f5fa75fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 408.915323][ T6425] RAX: ffffffffffffffda RBX: 00007f5fa6a25fa0 RCX: 00007f5fa679e159 [ 408.923287][ T6425] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 408.931348][ T6425] RBP: 00007f5fa683506b R08: 0000000000000000 R09: 0000000000000000 [ 408.939740][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.947704][ T6425] R13: 00007f5fa6a26038 R14: 00007f5fa6a25fa0 R15: 00007fff5ccb53c8 [ 408.955774][ T6425] [ 409.838602][ T6446] FAULT_INJECTION: forcing a failure. [ 409.838602][ T6446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.851923][ T6446] CPU: 1 PID: 6446 Comm: syz.4.1891 Not tainted syzkaller #0 [ 409.859499][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 409.869646][ T6446] Call Trace: [ 409.873019][ T6446] [ 409.875994][ T6446] __dump_stack+0x21/0x24 [ 409.880688][ T6446] dump_stack_lvl+0x110/0x170 [ 409.885464][ T6446] ? __cfi_dump_stack_lvl+0x8/0x8 [ 409.890495][ T6446] dump_stack+0x15/0x24 [ 409.894662][ T6446] should_fail_ex+0x3bf/0x510 [ 409.899346][ T6446] should_fail+0xb/0x10 [ 409.903505][ T6446] should_fail_usercopy+0x1a/0x20 [ 409.908543][ T6446] _copy_from_user+0x1e/0xc0 [ 409.913151][ T6446] io_submit_one+0xd3/0x1910 [ 409.917843][ T6446] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 409.923665][ T6446] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 409.930521][ T6446] ? irqentry_exit+0x37/0x40 [ 409.935286][ T6446] ? exc_page_fault+0x5e/0xb0 [ 409.940134][ T6446] ? lookup_ioctx+0x2b0/0x2b0 [ 409.944819][ T6446] ? asm_exc_page_fault+0x27/0x30 [ 409.950281][ T6446] ? __get_user_4+0x1c/0x30 [ 409.955050][ T6446] ? lookup_ioctx+0x1ab/0x2b0 [ 409.959739][ T6446] __se_sys_io_submit+0x17b/0x3e0 [ 409.964856][ T6446] ? __x64_sys_io_submit+0x90/0x90 [ 409.969966][ T6446] ? ksys_write+0x1fa/0x260 [ 409.974624][ T6446] ? fpregs_restore_userregs+0x128/0x260 [ 409.980258][ T6446] __x64_sys_io_submit+0x7b/0x90 [ 409.985288][ T6446] x64_sys_call+0x81d/0x9a0 [ 409.989802][ T6446] do_syscall_64+0x4c/0xa0 [ 409.994221][ T6446] ? clear_bhb_loop+0x30/0x80 [ 409.999080][ T6446] ? clear_bhb_loop+0x30/0x80 [ 410.003857][ T6446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.009842][ T6446] RIP: 0033:0x7ff4fb79e159 [ 410.014256][ T6446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.034300][ T6446] RSP: 002b:00007ff4fc5bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 410.042731][ T6446] RAX: ffffffffffffffda RBX: 00007ff4fba26180 RCX: 00007ff4fb79e159 [ 410.050711][ T6446] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 00007ff4fc58b000 [ 410.058677][ T6446] RBP: 00007ff4fc5bb090 R08: 0000000000000000 R09: 0000000000000000 [ 410.066724][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.074769][ T6446] R13: 00007ff4fba26218 R14: 00007ff4fba26180 R15: 00007fff92c4f838 [ 410.082997][ T6446] [ 410.714117][ T6459] FAULT_INJECTION: forcing a failure. [ 410.714117][ T6459] name fail_futex, interval 1, probability 0, space 0, times 0 [ 410.731293][ T6459] CPU: 1 PID: 6459 Comm: syz.2.1897 Not tainted syzkaller #0 [ 410.738987][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 410.749147][ T6459] Call Trace: [ 410.752441][ T6459] [ 410.755374][ T6459] __dump_stack+0x21/0x24 [ 410.759719][ T6459] dump_stack_lvl+0x110/0x170 [ 410.764510][ T6459] ? __cfi_dump_stack_lvl+0x8/0x8 [ 410.769571][ T6459] ? __cfi_fixup_exception+0x10/0x10 [ 410.774891][ T6459] dump_stack+0x15/0x24 [ 410.779209][ T6459] should_fail_ex+0x3bf/0x510 [ 410.783986][ T6459] should_fail+0xb/0x10 [ 410.788221][ T6459] get_futex_key+0x143/0xb10 [ 410.793330][ T6459] ? kernelmode_fixup_or_oops+0x85/0xd0 [ 410.798875][ T6459] ? __cfi_get_futex_key+0x10/0x10 [ 410.803989][ T6459] futex_wake+0x150/0x8e0 [ 410.809177][ T6459] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 410.815244][ T6459] ? __cfi_futex_wake+0x10/0x10 [ 410.820357][ T6459] ? irqentry_exit+0x37/0x40 [ 410.824939][ T6459] ? asm_exc_page_fault+0x27/0x30 [ 410.830386][ T6459] do_futex+0x2bf/0x430 [ 410.834623][ T6459] ? memset+0x35/0x40 [ 410.839407][ T6459] ? _copy_from_user+0xb3/0xc0 [ 410.844174][ T6459] ? __cfi_do_futex+0x10/0x10 [ 410.848848][ T6459] ? do_fcntl+0x553/0x1110 [ 410.853357][ T6459] __se_sys_futex+0x136/0x310 [ 410.858039][ T6459] ? __x64_sys_futex+0x100/0x100 [ 410.862991][ T6459] ? security_file_fcntl+0x95/0xc0 [ 410.868383][ T6459] __x64_sys_futex+0xe5/0x100 [ 410.873580][ T6459] x64_sys_call+0x7ec/0x9a0 [ 410.878090][ T6459] do_syscall_64+0x4c/0xa0 [ 410.882542][ T6459] ? clear_bhb_loop+0x30/0x80 [ 410.887474][ T6459] ? clear_bhb_loop+0x30/0x80 [ 410.892864][ T6459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.898921][ T6459] RIP: 0033:0x7f5fa679e159 [ 410.903504][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.923288][ T6459] RSP: 002b:00007f5fa75fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 410.931882][ T6459] RAX: ffffffffffffffda RBX: 00007f5fa6a25fa8 RCX: 00007f5fa679e159 [ 410.939942][ T6459] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5fa6a25fac [ 410.948338][ T6459] RBP: 00007f5fa6a25fa0 R08: 000de1ba99a92e70 R09: 0000000000000000 [ 410.956561][ T6459] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 410.965010][ T6459] R13: 00007f5fa6a26038 R14: 00007fff5ccb52e0 R15: 00007fff5ccb53c8 [ 410.972986][ T6459] [ 411.881739][ T6492] FAULT_INJECTION: forcing a failure. [ 411.881739][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 411.903174][ T6492] CPU: 1 PID: 6492 Comm: syz.8.1904 Not tainted syzkaller #0 [ 411.910779][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 411.920933][ T6492] Call Trace: [ 411.924225][ T6492] [ 411.927161][ T6492] __dump_stack+0x21/0x24 [ 411.931515][ T6492] dump_stack_lvl+0x110/0x170 [ 411.936313][ T6492] ? __cfi_dump_stack_lvl+0x8/0x8 [ 411.941388][ T6492] ? __futex_queue+0x175/0x300 [ 411.946169][ T6492] ? __cfi___futex_queue+0x10/0x10 [ 411.951404][ T6492] ? futex_wait_setup+0x1c0/0x260 [ 411.956529][ T6492] dump_stack+0x15/0x24 [ 411.960706][ T6492] should_fail_ex+0x3bf/0x510 [ 411.965726][ T6492] ? fcntl_setlk+0xa6/0x1070 [ 411.970352][ T6492] __should_failslab+0xac/0xf0 [ 411.975485][ T6492] should_failslab+0x9/0x20 [ 411.980082][ T6492] kmem_cache_alloc+0x3b/0x320 [ 411.984955][ T6492] fcntl_setlk+0xa6/0x1070 [ 411.989547][ T6492] ? __cfi_futex_wake+0x10/0x10 [ 411.994448][ T6492] ? avc_has_perm+0x163/0x250 [ 411.999138][ T6492] ? __cfi_fcntl_setlk+0x10/0x10 [ 412.004105][ T6492] ? __cfi_avc_has_perm+0x10/0x10 [ 412.009329][ T6492] ? __kasan_check_write+0x14/0x20 [ 412.014643][ T6492] do_fcntl+0x582/0x1110 [ 412.018915][ T6492] ? match_file+0x130/0x130 [ 412.023471][ T6492] ? kill_fasync+0x210/0x210 [ 412.028085][ T6492] ? __fget_files+0x2d1/0x330 [ 412.033005][ T6492] ? security_file_fcntl+0x95/0xc0 [ 412.038257][ T6492] __se_sys_fcntl+0xdf/0x1b0 [ 412.042957][ T6492] __x64_sys_fcntl+0x7b/0x90 [ 412.047823][ T6492] x64_sys_call+0x1a9/0x9a0 [ 412.052521][ T6492] do_syscall_64+0x4c/0xa0 [ 412.056975][ T6492] ? clear_bhb_loop+0x30/0x80 [ 412.061808][ T6492] ? clear_bhb_loop+0x30/0x80 [ 412.066695][ T6492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.067841][ T6502] loop2: detected capacity change from 0 to 8192 [ 412.072712][ T6492] RIP: 0033:0x7f731899e159 [ 412.072737][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.072752][ T6492] RSP: 002b:00007f73197b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 412.072770][ T6492] RAX: ffffffffffffffda RBX: 00007f7318c25fa0 RCX: 00007f731899e159 [ 412.072785][ T6492] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 412.128665][ T6492] RBP: 00007f7318a3506b R08: 0000000000000000 R09: 0000000000000000 [ 412.136998][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.145151][ T6492] R13: 00007f7318c26038 R14: 00007f7318c25fa0 R15: 00007ffc5c8fcd18 [ 412.153484][ T6492] [ 412.217751][ T6505] loop8: detected capacity change from 0 to 2048 [ 412.270019][ T3057] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 412.538287][ T39] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 412.766063][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 412.788653][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 412.996350][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 413.096131][ T39] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 413.185602][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.208539][ T39] usb 3-1: Product: syz [ 413.220933][ T39] usb 3-1: Manufacturer: syz [ 413.225652][ T39] usb 3-1: SerialNumber: syz [ 413.253317][ T39] usb 3-1: config 0 descriptor?? [ 413.275254][ T6518] xt_bpf: check failed: parse error [ 413.281946][ T6500] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 413.294402][ T39] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 413.336466][ T6520] FAULT_INJECTION: forcing a failure. [ 413.336466][ T6520] name failslab, interval 1, probability 0, space 0, times 0 [ 413.372901][ T6520] CPU: 0 PID: 6520 Comm: syz.8.1913 Not tainted syzkaller #0 [ 413.380324][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 413.390495][ T6520] Call Trace: [ 413.393784][ T6520] [ 413.396723][ T6520] __dump_stack+0x21/0x24 [ 413.401157][ T6520] dump_stack_lvl+0x110/0x170 [ 413.406044][ T6520] ? __cfi_dump_stack_lvl+0x8/0x8 [ 413.411095][ T6520] ? fcntl_setlk+0xa6/0x1070 [ 413.415751][ T6520] dump_stack+0x15/0x24 [ 413.419941][ T6520] should_fail_ex+0x3bf/0x510 [ 413.424645][ T6520] ? posix_lock_inode+0x240/0x34e0 [ 413.429776][ T6520] __should_failslab+0xac/0xf0 [ 413.434565][ T6520] should_failslab+0x9/0x20 [ 413.439104][ T6520] kmem_cache_alloc+0x3b/0x320 [ 413.443886][ T6520] ? locks_get_lock_context+0x57/0x2d0 [ 413.449357][ T6520] posix_lock_inode+0x240/0x34e0 [ 413.454313][ T6520] ? file_has_perm+0x52d/0x700 [ 413.459182][ T6520] ? match_file+0x130/0x130 [ 413.463813][ T6520] ? posix_lock_file+0x50/0x50 [ 413.468591][ T6520] ? security_file_lock+0x8a/0xb0 [ 413.474539][ T6520] fcntl_setlk+0xa38/0x1070 [ 413.479345][ T6520] ? __cfi_fcntl_setlk+0x10/0x10 [ 413.484678][ T6520] ? __cfi_avc_has_perm+0x10/0x10 [ 413.490011][ T6520] ? cap_capable+0x1a6/0x230 [ 413.494810][ T6520] ? __kasan_check_write+0x14/0x20 [ 413.499949][ T6520] do_fcntl+0x582/0x1110 [ 413.504215][ T6520] ? match_file+0x130/0x130 [ 413.508822][ T6520] ? kill_fasync+0x210/0x210 [ 413.513424][ T6520] ? __fget_files+0x2d1/0x330 [ 413.518125][ T6520] ? security_file_fcntl+0x95/0xc0 [ 413.523405][ T6520] __se_sys_fcntl+0xdf/0x1b0 [ 413.528006][ T6520] __x64_sys_fcntl+0x7b/0x90 [ 413.532612][ T6520] x64_sys_call+0x1a9/0x9a0 [ 413.537134][ T6520] do_syscall_64+0x4c/0xa0 [ 413.542013][ T6520] ? clear_bhb_loop+0x30/0x80 [ 413.546900][ T6520] ? clear_bhb_loop+0x30/0x80 [ 413.551658][ T6520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.557652][ T6520] RIP: 0033:0x7f731899e159 [ 413.562100][ T6520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.581980][ T6520] RSP: 002b:00007f73197b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 413.590500][ T6520] RAX: ffffffffffffffda RBX: 00007f7318c25fa0 RCX: 00007f731899e159 [ 413.599214][ T6520] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 413.607589][ T6520] RBP: 00007f7318a3506b R08: 0000000000000000 R09: 0000000000000000 [ 413.615652][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.623815][ T6520] R13: 00007f7318c26038 R14: 00007f7318c25fa0 R15: 00007ffc5c8fcd18 [ 413.631971][ T6520] [ 413.636883][ T1220] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 413.754443][ T6524] netlink: 'syz.8.1916': attribute type 5 has an invalid length. [ 413.770828][ T6524] loop8: detected capacity change from 0 to 2048 [ 413.859558][ T6524] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 413.870031][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.633184][ T24] usb 3-1: USB disconnect, device number 29 [ 414.749716][ T3833] EXT4-fs (loop8): unmounting filesystem. [ 414.803703][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.813513][ T1220] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.826796][ T1220] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.836085][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.857879][ T1220] usb 5-1: config 0 descriptor?? [ 414.887752][ T6539] loop8: detected capacity change from 0 to 2048 [ 415.202096][ T6551] loop8: detected capacity change from 0 to 2048 [ 415.227719][ T2661] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 415.300889][ T1220] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 415.312190][ T1220] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 415.318366][ T6555] loop2: detected capacity change from 0 to 2048 [ 415.792562][ T6559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.929641][ T6559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.012855][ T3057] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 417.215593][ T6567] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1929'. [ 417.392330][ T39] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 419.173672][ T6589] loop4: detected capacity change from 0 to 512 [ 419.180683][ T6589] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 419.399842][ T6593] netlink: 'syz.2.1939': attribute type 5 has an invalid length. [ 419.426176][ T6593] loop2: detected capacity change from 0 to 2048 [ 419.452196][ T2589] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 419.468460][ T6589] loop4: detected capacity change from 0 to 256 [ 419.468495][ T2589] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 419.475253][ T6589] exfat: Unknown parameter '' [ 419.568122][ T6593] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 419.621048][ T291] EXT4-fs (loop2): unmounting filesystem. [ 420.401708][ T24] usb 5-1: USB disconnect, device number 17 [ 420.786706][ T6640] xt_hashlimit: size too large, truncated to 1048576 [ 420.806126][ T28] audit: type=1400 audit(1790201078.400:1731): avc: denied { ioctl } for pid=6641 comm="syz.8.1956" path="socket:[42309]" dev="sockfs" ino=42309 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 420.830955][ T6642] loop8: detected capacity change from 0 to 4096 [ 420.861282][ T6642] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 420.945072][ T6653] ip6t_rpfilter: unknown options [ 421.053453][ T6658] loop2: detected capacity change from 0 to 512 [ 421.092819][ T6660] netlink: 'syz.4.1960': attribute type 1 has an invalid length. [ 421.105424][ T6660] netlink: 'syz.4.1960': attribute type 2 has an invalid length. [ 421.115462][ T6658] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 421.136443][ T6658] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.159105][ T6658] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.1959: corrupted xattr block 33 [ 421.179799][ T28] audit: type=1400 audit(1790201078.750:1732): avc: denied { name_bind } for pid=6675 comm="syz.6.1965" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 421.199771][ T6676] netlink: 'syz.6.1965': attribute type 2 has an invalid length. [ 421.211119][ T6658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 421.226599][ T6658] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 421.241845][ T6658] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 1 with max blocks 32 with error 28 [ 421.256963][ T6658] EXT4-fs (loop2): This should not happen!! Data will be lost [ 421.256963][ T6658] [ 421.268940][ T6658] EXT4-fs (loop2): Total free blocks count 0 [ 421.275768][ T6658] EXT4-fs (loop2): Free/Dirty block details [ 421.283876][ T6658] EXT4-fs (loop2): free_blocks=65280 [ 421.290467][ T6658] EXT4-fs (loop2): dirty_blocks=32 [ 421.296829][ T6658] EXT4-fs (loop2): Block reservation details [ 421.302879][ T6658] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 421.314979][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1968'. [ 421.697126][ T291] EXT4-fs (loop2): unmounting filesystem. [ 422.082012][ T6700] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1972'. [ 422.124145][ T6704] xt_bpf: check failed: parse error [ 422.147834][ T6706] loop4: detected capacity change from 0 to 256 [ 422.176279][ T6706] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 422.693250][ T415] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 422.900964][ T415] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.176277][ T415] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.215768][ T6717] loop2: detected capacity change from 0 to 16 [ 423.223106][ T415] usb 5-1: config 0 interface 0 has no altsetting 0 [ 423.243698][ T6717] erofs: (device loop2): mounted with root inode @ nid 36. [ 423.264155][ T415] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 423.299790][ T415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.336129][ T415] usb 5-1: config 0 descriptor?? [ 423.588581][ T415] usbhid 5-1:0.0: can't add hid device: -71 [ 423.603625][ T415] usbhid: probe of 5-1:0.0 failed with error -71 [ 423.614796][ T415] usb 5-1: USB disconnect, device number 18 [ 423.763905][ T28] audit: type=1400 audit(1790201081.131:1733): avc: denied { append } for pid=6730 comm="syz.2.1985" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 423.789420][ T6737] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 423.797256][ T6737] netlink: 'syz.1.1988': attribute type 2 has an invalid length. [ 423.809460][ T28] audit: type=1326 audit(1790201081.131:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.2.1985" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa679e159 code=0x0 [ 424.156310][ T415] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 424.375472][ T415] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 424.385502][ T415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.393619][ T415] usb 3-1: Product: syz [ 424.397835][ T415] usb 3-1: Manufacturer: syz [ 424.402431][ T415] usb 3-1: SerialNumber: syz [ 424.526349][ T6753] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1994'. [ 424.611467][ T415] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 424.762074][ T6760] xt_bpf: check failed: parse error [ 424.806536][ T415] usb 5-1: Using ep0 maxpacket: 32 [ 424.812760][ T415] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.823755][ T415] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 424.835402][ T415] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.848934][ T415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.857541][ T415] usb 5-1: Product: syz [ 424.862059][ T415] usb 5-1: Manufacturer: syz [ 424.866738][ T415] usb 5-1: SerialNumber: syz [ 425.097115][ T415] usb 5-1: found format II with max.bitrate = 5, frame size=9 [ 425.104946][ T415] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 425.116040][ T415] usb 5-1: USB disconnect, device number 19 [ 425.338299][ T2661] udevd[2661]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 425.944499][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 426.140613][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.151779][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 426.163404][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.172882][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.181009][ T24] usb 5-1: Product: syz [ 426.185219][ T24] usb 5-1: Manufacturer: syz [ 426.189917][ T24] usb 5-1: SerialNumber: syz [ 426.196515][ T24] cdc_mbim 5-1:1.0: skipping garbage [ 426.414246][ T6767] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 427.077688][ T39] usb 3-1: USB disconnect, device number 30 [ 427.245168][ T6767] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 427.275448][ T24] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 427.302191][ T24] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 52:87:d4:e1:eb:22 [ 427.323306][ T6781] FAULT_INJECTION: forcing a failure. [ 427.323306][ T6781] name failslab, interval 1, probability 0, space 0, times 0 [ 427.529182][ T6781] CPU: 1 PID: 6781 Comm: syz.2.2004 Not tainted syzkaller #0 [ 427.536614][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 427.546941][ T6781] Call Trace: [ 427.550227][ T6781] [ 427.553252][ T6781] __dump_stack+0x21/0x24 [ 427.557702][ T6781] dump_stack_lvl+0x110/0x170 [ 427.562418][ T6781] ? __cfi_dump_stack_lvl+0x8/0x8 [ 427.567484][ T6781] dump_stack+0x15/0x24 [ 427.570310][ T5361] usb 5-1: USB disconnect, device number 20 [ 427.571664][ T6781] should_fail_ex+0x3bf/0x510 [ 427.577823][ T5361] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 427.582234][ T6781] ? posix_lock_inode+0x240/0x34e0 [ 427.582265][ T6781] __should_failslab+0xac/0xf0 [ 427.582291][ T6781] should_failslab+0x9/0x20 [ 427.605648][ T6781] kmem_cache_alloc+0x3b/0x320 [ 427.611062][ T6781] ? locks_get_lock_context+0x57/0x2d0 [ 427.616554][ T6781] posix_lock_inode+0x240/0x34e0 [ 427.621525][ T6781] ? file_has_perm+0x52d/0x700 [ 427.626323][ T6781] ? match_file+0x130/0x130 [ 427.630874][ T6781] ? sysvec_reschedule_ipi+0x78/0x80 [ 427.636202][ T6781] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 427.641881][ T6781] ? posix_lock_file+0x50/0x50 [ 427.646712][ T6781] ? security_file_lock+0x8a/0xb0 [ 427.651771][ T6781] fcntl_setlk+0xa38/0x1070 [ 427.656299][ T6781] ? __cfi_fcntl_setlk+0x10/0x10 [ 427.661277][ T6781] ? __kasan_check_write+0x14/0x20 [ 427.666503][ T6781] do_fcntl+0x582/0x1110 [ 427.671204][ T6781] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 427.676864][ T6781] ? match_file+0x130/0x130 [ 427.681398][ T6781] ? kill_fasync+0x210/0x210 [ 427.686009][ T6781] ? selinux_file_fcntl+0x5c/0x190 [ 427.691256][ T6781] ? __sanitizer_cov_trace_switch+0x64/0xe0 [ 427.697285][ T6781] ? security_file_fcntl+0x95/0xc0 [ 427.702922][ T6781] __se_sys_fcntl+0xdf/0x1b0 [ 427.707655][ T6781] __x64_sys_fcntl+0x7b/0x90 [ 427.712682][ T6781] x64_sys_call+0x1a9/0x9a0 [ 427.717208][ T6781] do_syscall_64+0x4c/0xa0 [ 427.721633][ T6781] ? clear_bhb_loop+0x30/0x80 [ 427.726296][ T6781] ? clear_bhb_loop+0x30/0x80 [ 427.731071][ T6781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.737059][ T6781] RIP: 0033:0x7f5fa679e159 [ 427.741469][ T6781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.761128][ T6781] RSP: 002b:00007f5fa75fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 427.769669][ T6781] RAX: ffffffffffffffda RBX: 00007f5fa6a25fa0 RCX: 00007f5fa679e159 [ 427.778164][ T6781] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 427.786399][ T6781] RBP: 00007f5fa683506b R08: 0000000000000000 R09: 0000000000000000 [ 427.794468][ T6781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.802437][ T6781] R13: 00007f5fa6a26038 R14: 00007f5fa6a25fa0 R15: 00007fff5ccb53c8 [ 427.810592][ T6781] [ 427.813918][ T6757] 9pnet_fd: p9_fd_create_tcp (6757): problem connecting socket to 127.0.0.1 [ 427.931825][ T28] audit: type=1400 audit(1790201084.978:1735): avc: denied { bind } for pid=6816 comm="syz.1.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 428.170052][ T6831] xt_hashlimit: size too large, truncated to 1048576 [ 428.177152][ T1226] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 428.372027][ T6834] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2011'. [ 428.399033][ T1226] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 428.410468][ T28] audit: type=1400 audit(1790201085.421:1736): avc: denied { read } for pid=6835 comm="syz.4.2012" path="socket:[41657]" dev="sockfs" ino=41657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 428.445370][ T1226] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 428.456882][ T1226] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 428.468087][ T1226] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 428.490282][ T1226] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.500841][ T1226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.509440][ T1226] usb 3-1: Product: syz [ 428.513882][ T1226] usb 3-1: Manufacturer: syz [ 428.518743][ T1226] usb 3-1: SerialNumber: syz [ 428.538216][ T6806] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 428.547269][ T1226] cdc_mbim 3-1:1.0: skipping garbage [ 429.063304][ T6846] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 429.108879][ T6846] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 429.382055][ T6844] loop2: detected capacity change from 0 to 256 [ 429.401691][ C1] hrtimer: interrupt took 14975 ns [ 429.436332][ T6844] exfat: Unknown parameter 'iocharse\' [ 429.761544][ T6867] loop4: detected capacity change from 0 to 2048 [ 429.813929][ T2661] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 430.139657][ T6806] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 430.155286][ T6806] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 430.853093][ T6887] loop4: detected capacity change from 0 to 512 [ 430.866188][ T1226] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 430.872374][ T6887] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 430.886556][ T28] audit: type=1326 audit(1790201087.664:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.6.2024" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f145d99e159 code=0x0 [ 430.925355][ T1226] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 3e:4d:33:1e:98:46 [ 431.004679][ T6887] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 431.018903][ T6887] System zones: 1-12 [ 431.034717][ T6887] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.2025: bad orphan inode 131072 [ 431.045373][ T6887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 431.096048][ T4815] EXT4-fs (loop4): unmounting filesystem. [ 431.141769][ T6907] xt_hashlimit: size too large, truncated to 1048576 [ 431.240562][ T142] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 431.312726][ T6919] devpts: called with bogus options [ 431.333037][ T6922] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2032'. [ 431.351088][ T6925] FAULT_INJECTION: forcing a failure. [ 431.351088][ T6925] name failslab, interval 1, probability 0, space 0, times 0 [ 431.363921][ T6925] CPU: 0 PID: 6925 Comm: syz.4.2034 Not tainted syzkaller #0 [ 431.371297][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 431.381346][ T6925] Call Trace: [ 431.384806][ T6925] [ 431.387748][ T6925] __dump_stack+0x21/0x24 [ 431.392150][ T6925] dump_stack_lvl+0x110/0x170 [ 431.396835][ T6925] ? __cfi_dump_stack_lvl+0x8/0x8 [ 431.401877][ T6925] dump_stack+0x15/0x24 [ 431.406046][ T6925] should_fail_ex+0x3bf/0x510 [ 431.410793][ T6925] __should_failslab+0xac/0xf0 [ 431.415562][ T6925] should_failslab+0x9/0x20 [ 431.420066][ T6925] __kmem_cache_alloc_node+0x3d/0x2d0 [ 431.425521][ T6925] ? sidtab_sid2str_get+0x137/0x2c0 [ 431.430867][ T6925] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.436946][ T6925] ? sidtab_sid2str_get+0x137/0x2c0 [ 431.442176][ T6925] __kmalloc_node_track_caller+0xa1/0x1e0 [ 431.447888][ T6925] kmemdup+0x2b/0x60 [ 431.451846][ T6925] sidtab_sid2str_get+0x137/0x2c0 [ 431.456862][ T6925] security_sid_to_context_core+0x2ac/0x480 [ 431.462747][ T6925] security_sid_to_context_force+0x36/0x40 [ 431.468545][ T6925] selinux_inode_init_security+0x66c/0x970 [ 431.474350][ T6925] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 431.480757][ T6925] ? get_cached_acl+0x2a0/0x2f0 [ 431.486475][ T6925] ? debug_smp_processor_id+0x17/0x20 [ 431.492451][ T6925] ? __cfi_get_cached_acl+0x10/0x10 [ 431.497820][ T6925] security_inode_init_security+0x183/0x3c0 [ 431.504412][ T6925] ? __cfi_shmem_initxattrs+0x10/0x10 [ 431.509945][ T6925] ? __cfi_security_inode_init_security+0x10/0x10 [ 431.516351][ T6925] ? __kasan_check_write+0x14/0x20 [ 431.521456][ T6925] ? set_cached_acl+0xdd/0x180 [ 431.526222][ T6925] ? simple_acl_create+0x191/0x1c0 [ 431.531399][ T6925] shmem_mknod+0xb8/0x1d0 [ 431.535748][ T6925] ? shmem_mkdir+0x17/0x60 [ 431.540166][ T6925] shmem_mkdir+0x2f/0x60 [ 431.544407][ T6925] vfs_mkdir+0x39c/0x580 [ 431.548715][ T6925] do_mkdirat+0x174/0x4d0 [ 431.553123][ T6925] __x64_sys_mkdirat+0x89/0xa0 [ 431.557882][ T6925] x64_sys_call+0x73d/0x9a0 [ 431.562378][ T6925] do_syscall_64+0x4c/0xa0 [ 431.566820][ T6925] ? clear_bhb_loop+0x30/0x80 [ 431.571507][ T6925] ? clear_bhb_loop+0x30/0x80 [ 431.576272][ T6925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.582160][ T6925] RIP: 0033:0x7ff4fb79e159 [ 431.586665][ T6925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.606709][ T6925] RSP: 002b:00007ff4fc5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 431.615213][ T6925] RAX: ffffffffffffffda RBX: 00007ff4fba25fa0 RCX: 00007ff4fb79e159 [ 431.624920][ T6925] RDX: 00000000000001ff RSI: 0000200000004000 RDI: ffffffffffffff9c [ 431.633443][ T6925] RBP: 00007ff4fb83506b R08: 0000000000000000 R09: 0000000000000000 [ 431.641494][ T6925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.649454][ T6925] R13: 00007ff4fba26038 R14: 00007ff4fba25fa0 R15: 00007fff92c4f838 [ 431.657517][ T6925] [ 431.687476][ T6931] 9pnet_fd: Insufficient options for proto=fd [ 431.767262][ T6935] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(10) [ 431.777904][ T28] audit: type=1326 audit(1790201088.531:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.4.2037" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4fb79e159 code=0x0 [ 431.890121][ T415] usb 3-1: USB disconnect, device number 31 [ 431.914456][ T415] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 432.082586][ T6947] loop2: detected capacity change from 0 to 512 [ 432.090771][ T6947] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 432.108106][ T6947] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 432.116355][ T6947] System zones: 1-12 [ 432.120829][ T6947] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.2039: bad orphan inode 131072 [ 432.131817][ T6947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 432.160898][ T291] EXT4-fs (loop2): unmounting filesystem. [ 432.188348][ T6959] loop2: detected capacity change from 0 to 2048 [ 432.244651][ T2661] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 432.352794][ T6983] netlink: 'syz.6.2045': attribute type 1 has an invalid length. [ 432.360927][ T6983] netlink: 'syz.6.2045': attribute type 2 has an invalid length. [ 432.604618][ T6987] netlink: 'syz.6.2046': attribute type 4 has an invalid length. [ 433.306609][ T6994] loop2: detected capacity change from 0 to 512 [ 433.314835][ T6994] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 433.325635][ T6994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 433.334097][ T6994] System zones: 1-12 [ 433.338973][ T6994] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.2050: bad orphan inode 131072 [ 433.349762][ T6994] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 433.356114][ T6997] xt_hashlimit: size too large, truncated to 1048576 [ 433.422865][ T6999] overlayfs: './file1' not a directory [ 433.662052][ T291] EXT4-fs (loop2): unmounting filesystem. [ 434.047973][ T7002] loop2: detected capacity change from 0 to 512 [ 434.062016][ T7002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 434.289910][ T7002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 434.308986][ T7002] System zones: 1-12 [ 434.320304][ T7002] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.2051: bad orphan inode 131072 [ 434.334947][ T7002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 434.355049][ T291] EXT4-fs (loop2): unmounting filesystem. [ 434.668939][ T415] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 434.801429][ T7023] xt_hashlimit: size too large, truncated to 1048576 [ 434.863976][ T415] usb 5-1: Using ep0 maxpacket: 8 [ 434.870724][ T415] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 72, changing to 10 [ 434.882429][ T415] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.892429][ T415] usb 5-1: config 0 interface 0 has no altsetting 0 [ 434.904043][ T415] usb 5-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 434.914535][ T415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.923551][ T415] usb 5-1: config 0 descriptor?? [ 434.949852][ T7026] FAULT_INJECTION: forcing a failure. [ 434.949852][ T7026] name failslab, interval 1, probability 0, space 0, times 0 [ 434.963260][ T7026] CPU: 1 PID: 7026 Comm: syz.2.2061 Not tainted syzkaller #0 [ 434.971127][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 434.981264][ T7026] Call Trace: [ 434.984583][ T7026] [ 434.987517][ T7026] __dump_stack+0x21/0x24 [ 434.992381][ T7026] dump_stack_lvl+0x110/0x170 [ 434.997932][ T7026] ? __cfi_dump_stack_lvl+0x8/0x8 [ 435.003264][ T7026] ? prep_new_page+0x1c/0x110 [ 435.008384][ T7026] ? get_page_from_freelist+0x2ca9/0x2d20 [ 435.014490][ T7026] dump_stack+0x15/0x24 [ 435.018847][ T7026] should_fail_ex+0x3bf/0x510 [ 435.024398][ T7026] ? mas_alloc_nodes+0x2d8/0x850 [ 435.029460][ T7026] __should_failslab+0xac/0xf0 [ 435.034237][ T7026] should_failslab+0x9/0x20 [ 435.038765][ T7026] kmem_cache_alloc+0x3b/0x320 [ 435.043556][ T7026] mas_alloc_nodes+0x2d8/0x850 [ 435.048325][ T7026] mas_preallocate+0xe3d/0x1430 [ 435.053272][ T7026] ? __cfi_mas_preallocate+0x10/0x10 [ 435.058832][ T7026] ? rwsem_write_trylock+0x136/0x300 [ 435.064482][ T7026] vma_expand+0x437/0xad0 [ 435.068901][ T7026] mmap_region+0xf04/0x2130 [ 435.073687][ T7026] ? __cfi_mmap_region+0x10/0x10 [ 435.078982][ T7026] ? cap_mmap_addr+0x165/0x2e0 [ 435.083767][ T7026] ? get_unmapped_area+0x30c/0x370 [ 435.089050][ T7026] do_mmap+0x858/0xdd0 [ 435.094998][ T7026] ? __count_memcg_events+0x8f/0xe0 [ 435.100599][ T7026] ? __cfi_do_mmap+0x10/0x10 [ 435.105202][ T7026] vm_mmap_pgoff+0x206/0x3f0 [ 435.109818][ T7026] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 435.115084][ T7026] ? up_read+0x56/0x1d0 [ 435.119483][ T7026] ksys_mmap_pgoff+0xf6/0x1d0 [ 435.124167][ T7026] __x64_sys_mmap+0xfa/0x110 [ 435.128969][ T7026] x64_sys_call+0x8fd/0x9a0 [ 435.133986][ T7026] do_syscall_64+0x4c/0xa0 [ 435.138548][ T7026] ? clear_bhb_loop+0x30/0x80 [ 435.143424][ T7026] ? clear_bhb_loop+0x30/0x80 [ 435.148547][ T7026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.154781][ T7026] RIP: 0033:0x7f5fa679dec2 [ 435.159187][ T7026] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 435.179158][ T7026] RSP: 002b:00007f5fa75f9d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 435.188347][ T7026] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5fa679dec2 [ 435.196401][ T7026] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 435.204367][ T7026] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 435.212414][ T7026] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 435.220422][ T7026] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f5fa68327a8 [ 435.228395][ T7026] [ 435.237554][ T28] audit: type=1326 audit(1790201091.723:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.6.2062" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f145d99e159 code=0x0 [ 435.264762][ T7026] ------------[ cut here ]------------ [ 435.270318][ T7026] kernel BUG at mm/mmap.c:2854! [ 435.275645][ T7026] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 435.281783][ T7026] CPU: 1 PID: 7026 Comm: syz.2.2061 Not tainted syzkaller #0 [ 435.289183][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 435.299334][ T7026] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 435.304737][ T7026] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 d9 45 09 00 e9 d2 f9 ff ff e8 cf b9 c3 ff 0f 0b e8 c8 b9 c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 435.324467][ T7026] RSP: 0018:ffffc90004037a40 EFLAGS: 00010283 [ 435.330554][ T7026] RAX: ffffffff81adb058 RBX: 00007f5fa51f8000 RCX: 0000000000080000 [ 435.338539][ T7026] RDX: ffffc9000262e000 RSI: 0000000000062724 RDI: 0000000000062725 [ 435.346625][ T7026] RBP: ffffc90004037c30 R08: ffff88810ba79440 R09: 0000000000000003 [ 435.355133][ T7026] R10: 0000000000000003 R11: 0000000000000002 R12: 00007f5fa51f7fff [ 435.363201][ T7026] R13: 00007f5fa51f8000 R14: dffffc0000000000 R15: 00007f5f9d1f8000 [ 435.371196][ T7026] FS: 00007f5fa75fb6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 435.380230][ T7026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.386829][ T7026] CR2: 0000000000000000 CR3: 000000011d28b000 CR4: 00000000003506a0 [ 435.394817][ T7026] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 435.402975][ T7026] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 435.410971][ T7026] Call Trace: [ 435.414272][ T7026] [ 435.417214][ T7026] ? __cfi_mmap_region+0x10/0x10 [ 435.422184][ T7026] ? cap_mmap_addr+0x165/0x2e0 [ 435.427051][ T7026] ? get_unmapped_area+0x30c/0x370 [ 435.432184][ T7026] do_mmap+0x858/0xdd0 [ 435.436275][ T7026] ? __count_memcg_events+0x8f/0xe0 [ 435.441589][ T7026] ? __cfi_do_mmap+0x10/0x10 [ 435.446471][ T7026] vm_mmap_pgoff+0x206/0x3f0 [ 435.451082][ T7026] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 435.456303][ T7026] ? up_read+0x56/0x1d0 [ 435.460631][ T7026] ksys_mmap_pgoff+0xf6/0x1d0 [ 435.465425][ T7026] __x64_sys_mmap+0xfa/0x110 [ 435.470025][ T7026] x64_sys_call+0x8fd/0x9a0 [ 435.474543][ T7026] do_syscall_64+0x4c/0xa0 [ 435.479424][ T7026] ? clear_bhb_loop+0x30/0x80 [ 435.484205][ T7026] ? clear_bhb_loop+0x30/0x80 [ 435.488986][ T7026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.494979][ T7026] RIP: 0033:0x7f5fa679dec2 [ 435.499493][ T7026] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 435.519967][ T7026] RSP: 002b:00007f5fa75f9d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 435.528466][ T7026] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5fa679dec2 [ 435.536688][ T7026] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 435.544746][ T7026] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 435.552710][ T7026] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 435.560923][ T7026] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f5fa68327a8 [ 435.569248][ T7026] [ 435.572272][ T7026] Modules linked in: [ 435.576627][ T7026] ---[ end trace 0000000000000000 ]--- [ 435.582756][ T7026] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 435.584133][ T415] usbhid 5-1:0.0: can't add hid device: -71 [ 435.588557][ T7026] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 d9 45 09 00 e9 d2 f9 ff ff e8 cf b9 c3 ff 0f 0b e8 c8 b9 c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 435.603643][ T415] usbhid: probe of 5-1:0.0 failed with error -71 [ 435.614552][ T7026] RSP: 0018:ffffc90004037a40 EFLAGS: 00010283 [ 435.628468][ T7026] RAX: ffffffff81adb058 RBX: 00007f5fa51f8000 RCX: 0000000000080000 [ 435.631546][ T415] usb 5-1: USB disconnect, device number 21 [ 435.636851][ T7026] RDX: ffffc9000262e000 RSI: 0000000000062724 RDI: 0000000000062725 [ 435.650490][ T7026] RBP: ffffc90004037c30 R08: ffff88810ba79440 R09: 0000000000000003 [ 435.658714][ T7026] R10: 0000000000000003 R11: 0000000000000002 R12: 00007f5fa51f7fff [ 435.666943][ T7026] R13: 00007f5fa51f8000 R14: dffffc0000000000 R15: 00007f5f9d1f8000 [ 435.675001][ T7026] FS: 00007f5fa75fb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 435.684064][ T7026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.690726][ T7026] CR2: 00007ffd387cfff8 CR3: 000000011d28b000 CR4: 00000000003506b0 [ 435.699009][ T7026] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 435.707021][ T7026] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 435.715676][ T7026] Kernel panic - not syncing: Fatal exception [ 435.722916][ T7026] Kernel Offset: disabled [ 435.727338][ T7026] Rebooting in 86400 seconds..