last executing test programs: 11.161632999s ago: executing program 4 (id=987): syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f00000000c0)='./bus\x00', 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08070039576a7d5cb2bdac3fa800000000cb5fee496e6866856b76b5fe00000055856187f7a13acf63a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x400c1}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_usb_connect(0x3, 0x24, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x62003}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xa}, {0xfff3}}}, 0x24}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18b341, 0x84) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r8, 0x1, 0x3, 0x8010004) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 10.155973233s ago: executing program 3 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffb, 0x100) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55af, &(0x7f0000006a80)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) 8.584612971s ago: executing program 3 (id=994): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000004c0)={0x5, 0x2, 0xffff, 0x4, 0x80000001, 0xfffffffffffff001, 0x100000001, 0x7, 0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x8, 0x0, 0x103, 0x9, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000180)=0x2, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, 0x0}, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x80408c5}, 0x20048000) 8.004300815s ago: executing program 3 (id=997): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="240c23bbd5a97f3837efad6cb1e46b9a55159c2484f057e5ecedc81129781775e9434e5b7f70fff65e462d1eb5faa7c6e2e958aad44ffc488cdcf67251f622982fec438627d2bd07887e7671441d45d393839223ac4b2372cb113b0bad8230b1e4fb6e399c678dba86623ad14a61a6"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) io_setup(0x443, &(0x7f0000001100)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x7, 0x0, r2, 0x0, 0x0, 0x4, 0x0, 0x6}]) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000380)="4c00ee289c6d1ddeca74510d000032001f2e323658000000000000000000000000030038c88cc055c5acaa68d0bf46d323452537005ad94a4616dbfee9bdb942352359a351d1a58bdc21b1dfac1aa88d000000", 0x53, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r9, &(0x7f0000005f00)={0x2020}, 0xfffffffffffffe50) r10 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe4}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r11, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 7.661179694s ago: executing program 4 (id=1001): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x1}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x13, @multicast2}}}, 0x108) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x8, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x741dc0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x54000, 0xfd, 0x0, 0x6, 0x0, [{0xf7, 0xff, 0x88, '\x00', 0xb6}, {0x0, 0xdb, 0x1, '\x00', 0x2}, {0x5, 0xe0, 0x9, '\x00', 0x9}, {0x53, 0x9, 0x2, '\x00', 0x9}, {0xd, 0x0, 0x5, '\x00', 0x2b}, {0x80, 0xc, 0xa, '\x00', 0x6}, {0x1, 0x19, 0x3, '\x00', 0x81}, {0xf, 0x4, 0xbf, '\x00', 0x2}, {0x6, 0xe8, 0xd}, {0x80, 0x0, 0x1d, '\x00', 0xa8}, {0x7, 0x1, 0x9, '\x00', 0x8c}, {0x1, 0x11, 0xb, '\x00', 0x21}, {0x45, 0x3, 0x8, '\x00', 0xfc}, {0x10, 0x0, 0x8, '\x00', 0x74}, {0x3, 0x2, 0x8, '\x00', 0x71}, {0xd3, 0x4, 0x5, '\x00', 0x80}, {0x6, 0xd0, 0x7f, '\x00', 0x9}, {0x6, 0x2, 0x2, '\x00', 0x3}, {0x7, 0x5, 0xfd, '\x00', 0x4}, {0x8, 0xa, 0x7, '\x00', 0xff}, {0x0, 0xd, 0x4, '\x00', 0x4}, {0x1, 0x7f, 0x1, '\x00', 0x9}, {0x5, 0x10, 0x1}, {0x0, 0x7, 0x7f, '\x00', 0x81}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x5, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.050056678s ago: executing program 2 (id=1004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 7.049413358s ago: executing program 3 (id=1005): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) mount$overlay(0x0, 0x0, 0x0, 0x2000008, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201ff070a0000000000000800100000050005002b0000000a004e250000b10efc020000000000000000000000000001050000000000000003000600ff20000002004e207f0000010000000000000000"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.886496552s ago: executing program 2 (id=1006): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1, 0x10, 0x3, 0x25d, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffc, 0x400, 0x0, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x7ffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x400, 0x0, 0xa6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587b, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r8 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x2814000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") 6.380325534s ago: executing program 2 (id=1008): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) wait4(r1, &(0x7f00000000c0), 0x8, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x70000, 0x2000, &(0x7f00001d0000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000370429bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8d0c010000000000140012800b000100697036746e6c0000579d8493eda804000280"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 6.287039467s ago: executing program 4 (id=1009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000280)=0x3) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x28}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7752}, 0x80) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r13 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r13, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r13, &(0x7f0000001400)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r13, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000001140)={0x0, 0x0, @pic={0x3, 0x5, 0x8, 0x0, 0x5, 0x1, 0xa1, 0xa, 0x64, 0x10, 0xf9, 0x3, 0x6, 0x9a, 0x9, 0x40}}) 6.14807178s ago: executing program 3 (id=1011): openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x0, @dev}}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d0000130000000000000000000000030006000000000002004e210000000000000000000000000a00000081000000ffffffff000000000800120002000200000000000000000006002b0000f60000000000000000000020010000000000000000000000000001e000000200000000000000000000000004000400"/152], 0x98}}, 0x4004040) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') syz_usb_connect$uac2(0x2, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000081e04003040000102030109027e0003010e4004080b000201062003090400000001012000092401ff03091e00000c2403030304c7020307007f09240502"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 5.881724077s ago: executing program 2 (id=1012): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x604400, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r3 = dup2(r1, r1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x8, 0xffffffff, 0x4, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x67, 0x0, 0x7, 0x29, 0x0, @multicast1, @broadcast, {[@end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0xc0, 0x9, 0x15, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x7fff, 0xc}}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, r4, 0x20a, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000780)={&(0x7f0000001000)={[{&(0x7f0000000400)="359d4e47de81afc6890b4306fede9b2a5eba7e576850931d18a6ed01209e628ce1050dbadb60fb71f6d13d228a37b528c4887d585a01c2ed32ed1dbdec3fb38b832e2ea5948c6c224456cb6299453c03ed48686ac0e98b7fe51af6b4d0460d127baca683772d0c9d6e9adb997ef0a05ff535b485e27b3ac9590030cd032720e338e3960ea55cec8ac42348002ce30c0177985141f143820d1c0a46ed314be8395ce651a55f75e10040a2d57e417ff6d3af3c522d04a7", 0xb6}, {&(0x7f00000004c0)="5a3bdc83b65166a9be28fe45483542d984ea0961ae1fc0dedd7567a3d5dc47e966f6bd5b8ab458ec0aebc71478251d119d5d4bfaabba80d42a6a971555d201a8bc86c3ab0dcfd79c965a8c1d33e8d222be11321e4107bc557a21db8753ab2fede2920ff66ac439de63f08eb4d71b28a190dedf5ec2b51c6bb1f5819122ac65a70cafb5b7ee9de137d34afd44e6e214dc81544eb909d4b796c1475a4fe039643807eb5e115c6b001a21be345e82903944c488c12625c59b768aa12e295185cec6603f5ce6477f913b57b634e5df04ddc251ad5a05db70d0df22375cd00b6e8b59", 0xe0, 0x1}, {&(0x7f00000005c0)="d8905e940ce7492fef812175aa204790d513d0219586e2b3a71ce54936031a3e0b8d771617631a85a71c4f8a5b4fd8abdb21c8e8e1575aba8fbe062160b04c733ee2e42788a638eece3bf1e6891fa710a8eed27c46e66abbe5267313c261245cb4432bf4b14d4bc9d4bba1ce2d0770cb6c1ba1cf249ff0d335088a02ff0483cdeef6c138f93c1a1a60f59d1d9fec335e43448701fa8301e2fc25defa083875bfd3297053ef6bf8c42f1ed3fad82679acbbde9d221a21ca111ea396988b847e1fcc8b614ebfd58e96c169b579adfe1e32c8ac367e", 0xd4, 0x3}, {&(0x7f00000006c0)="c00c6c5cdf51b4893af68ae9bcb54048427e6d45d3f2d11fb7684680db009967ddf2247902bf6950aa8e473c288038ed0d6c97efce442eda1afac4db950598a3b6beb52ab0ac4e1136e5d8e95ba2c7c571cc743f3c5b7b3d374653693e2bf5e647d99cce2321f5cbed58d153e1fff764e3bd697e85cf167371e095d420e1515c6b20e8b27e", 0x85, 0x3}]}, 0x4, 0x1, 0x3}, 0x1) r8 = eventfd(0x82) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000007c0)={r8, 0x9, 0x3, r3}) r9 = io_uring_setup(0x5c08, &(0x7f0000000800)={0x0, 0xd22d, 0x400, 0x2, 0x2eb, 0x0, r3}) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000003080)={&(0x7f0000004000)={[{&(0x7f0000000880)="8015c86b89bad4e6fb39bc953ae5d451fe9e3a7ec9e2f9cd89b179a54d84ec39082f", 0x22, 0x3}, {&(0x7f00000008c0)="8602bacb3419415fe45402311dd7972534cfa3215900c983a9241b5f580088f4ae6e199cc5c66a10f99e2f8f8125e218e7cbe681e515b795f9dc1adcfdbca0cf17f6958b71a3fbf5fb839f039adef16136dc828a7ad57d78ff9240f889c8164fa3f5e2cc420c82a1ba929a452e6bb8b499e3b8175a10511fdb18ba5544b8d1724dc9a2", 0x83, 0x3}, {&(0x7f0000000980), 0x0, 0x1}, {&(0x7f00000009c0)="172282dd2f90a061fc3929a959ab42402aefdba83626e61015e4ce40e4a1d8aded96bc8cd84998c7181643d57366e6e9a553497e7ed5a8a5", 0x38, 0x2}, {&(0x7f0000000a00)="2b5f40f16912f577c5149b84799b2cd1a609acd4f6b00d585f2bd27059cf1e6bc5e017a1ce5c1f73e35bc732eb583bf7d602cc72c72e44a9190204408b40869d3e35088b6c14", 0x46}, {&(0x7f0000000a80)="9bf63a17c04608d0ae088079b7eae312b8077f3a0f6d1e406804d48f51ada7643d0bf4f6f7817c641c8e3942305926a6a7d1b1397fb6dabdd9a447fb474abcb55b0d7d30d01b7f8dceeac9141ba951c5db886632873d", 0x56}, {&(0x7f0000000b00)="a4aa2f2dc7254ea6922e1afe7492064f1d7a0cd0414da3be3fd819c6d16711534104a88ac039270754ab1cdd3171db0adc53b2ba344ac1edac9b7904c282d1e180635b0cbbeca99fd596954b005c0410fd11f69d8af707d3769b7d9d3dcc73072faaa2958991917d52f0b76dfa376f66aab88fa111d68d519644c82751586f19c0a4ec954e867dc52bb7d57abd4d67fc745a5573364ad34ad171342231fe42758b403322bcb3bba3218d3d336c79a0d9971170dc36507ddb42b6835a7e18f269adf5b1d508ec89126cc5553ddcbe7c", 0xcf}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="231f4689fe712da7dbaf7ec3a1159db593e6b495b1ca64b3538d6f401852376c91675f818acbeb4cd2fedd13dda67a7e27e7e5e44b2b7007b7bb79991a17d980e0a74b1a2491af2b8f994aeb44ce3c8fb1261f8579c5269b23ba32d03ce38c98c8a3b009137a40f9e1", 0x69, 0x2}]}, 0x9}, 0x1) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000030c0), 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000003100)={'filter\x00', 0x0, [0xbf8, 0xfffff50b, 0x1]}, &(0x7f0000003180)=0x44) r10 = accept$inet(r3, &(0x7f00000031c0)={0x2, 0x0, @loopback}, &(0x7f0000003200)=0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000003240)={'wg0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000003280)='./file0\x00', &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000003340)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x4e21, 0xdb, 0xa, 0xa0, 0xa0, 0xc, r11, r12}, {0x1, 0x9, 0x1ff, 0x3, 0x0, 0x8001, 0xfffffffffffffffc, 0x1}, {0x100000001, 0xfffffffffffffffb, 0x1a, 0xfe4f}, 0x3, 0x6e6bbe, 0x1, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d4, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3505, 0x3, 0x1, 0x0, 0x5, 0x4, 0x9}}, 0xe8) syz_genetlink_get_family_id$smc(&(0x7f0000003440), r3) r13 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003480), 0x2, 0x0) close_range(r13, r0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) eventfd2(0x43, 0x1) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f00000034c0)=0x8000, 0x4) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003540), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000003600)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x40, r14, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x18}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x4096) 5.484826227s ago: executing program 2 (id=1013): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000202907800000000e000080211009078e0000002"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000840)) (async) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000840)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24028001}, 0x4008800) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0xff, 0x0, 'geneve0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0xff, 0x0, 'geneve0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={r3, &(0x7f0000000280)='CONNSECMARK\x00', 0x20040, &(0x7f00000002c0)={@_ha_fsid={[0x9, 0x80]}, {0x1, 0x7, 0x1, 0x5e}}, 0xd, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x81}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={r3, &(0x7f0000000280)='CONNSECMARK\x00', 0x20040, &(0x7f00000002c0)={@_ha_fsid={[0x9, 0x80]}, {0x1, 0x7, 0x1, 0x5e}}, 0xd, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x81}) faccessat(r4, &(0x7f00000003c0)='./file0\x00', 0x110) syz_usb_connect$midi(0x5, 0x45, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000201e04193f40000102030109023310000000100d094b0100020103000609058e0b00040f2900052501018009058c0200026dcc040a"], 0x0) 5.236517462s ago: executing program 1 (id=1015): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000a80)={[{@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@grpquota}, {@errors_remount}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 4.623955547s ago: executing program 1 (id=1018): creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1c02, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000003c0)={0x0, 0x40767a, 0x0, 0x7ffffffb, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x144, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a4f, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 4.546753009s ago: executing program 1 (id=1019): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1, 0x10, 0x3, 0x25d, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffc, 0x400, 0x0, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x7ffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x400, 0x0, 0xa6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587b, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r8 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x2814000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") 4.545499419s ago: executing program 4 (id=1020): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x1}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x13, @multicast2}}}, 0x108) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x8, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x741dc0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x54000, 0xfd, 0x0, 0x6, 0x0, [{0xf7, 0xff, 0x88, '\x00', 0xb6}, {0x0, 0xdb, 0x1, '\x00', 0x2}, {0x5, 0xe0, 0x9, '\x00', 0x9}, {0x53, 0x9, 0x2, '\x00', 0x9}, {0xd, 0x0, 0x5, '\x00', 0x2b}, {0x80, 0xc, 0xa, '\x00', 0x6}, {0x1, 0x19, 0x3, '\x00', 0x81}, {0xf, 0x4, 0xbf, '\x00', 0x2}, {0x6, 0xe8, 0xd}, {0x80, 0x0, 0x1d, '\x00', 0xa8}, {0x7, 0x1, 0x9, '\x00', 0x8c}, {0x1, 0x11, 0xb, '\x00', 0x21}, {0x45, 0x3, 0x8, '\x00', 0xfc}, {0x10, 0x0, 0x8, '\x00', 0x74}, {0x3, 0x2, 0x8, '\x00', 0x71}, {0xd3, 0x4, 0x5, '\x00', 0x80}, {0x6, 0xd0, 0x7f, '\x00', 0x9}, {0x6, 0x2, 0x2, '\x00', 0x3}, {0x7, 0x5, 0xfd, '\x00', 0x4}, {0x8, 0xa, 0x7, '\x00', 0xff}, {0x0, 0xd, 0x4, '\x00', 0x4}, {0x1, 0x7f, 0x1, '\x00', 0x9}, {0x5, 0x10, 0x1}, {0x0, 0x7, 0x7f, '\x00', 0x81}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x5, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.325062024s ago: executing program 1 (id=1021): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) mount$overlay(0x0, 0x0, 0x0, 0x2000008, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201ff070a0000000000000800100000050005002b0000000a004e250000b10efc020000000000000000000000000001050000000000000003000600ff20000002004e207f0000010000000000000000"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.737720398s ago: executing program 0 (id=1023): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./cgroup/../file0/file0\x00', 0x12, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0/file0\x00') rmdir(&(0x7f0000000180)='./cgroup/../file0\x00') add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) r4 = syz_open_pts(r3, 0x141601) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x180c850, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=win95,shortname=winnt,nonumtail=0,nonumtail=0,utf8=1,iocharset=cp874,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e39352c636865636b3d7374728f314f25319118e2706167653d3934392c696f636861727365743d6d61636761656c69632c757466383d302c6e6f6e756d7461696c3d302c0038379ccf31f5acc5088bcbbf"], 0x1, 0x371, &(0x7f0000002980)="$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") open(&(0x7f0000000180)='./bus\x00', 0x2f77e, 0x67) keyctl$read(0xb, r0, &(0x7f0000001940)=""/4105, 0x1009) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x30000009}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000280)=r5}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) 3.593939082s ago: executing program 0 (id=1024): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}}, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000600)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286", @ANYRES8, @ANYRES16=r0, @ANYRESOCT=r0], 0x1, 0x29b, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) rename(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000100)='./file2\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8401, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x17) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x200000, 0x5c13de25879ad7ac, 0x1}) 3.527179894s ago: executing program 4 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffaf5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x80) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4004108}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x124, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x24}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c, 0x22}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="900000001800010029bd7000fdcbdf251d0104000c000b00010000a0030000801500040001000040000200005f8fd14ca5127c0b0600000008000500fd06020d15000100030000a008000000bc1d118ca1d0d62512ded0950c000b00030000e0000000801500020003000080080000001dff23ea435cf1d60400000008000e00"], 0x90}}, 0x4c0c8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r10, &(0x7f0000004080)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x354d8104, 0x7fff, 0x3, 0x0, 0x1040, 0x0, 0x0, 0x80, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_INODE(r10, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x6, 0x5}}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.419910626s ago: executing program 1 (id=1026): syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x40}]}) syz_clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d1e8eb1535a655d8d6769e0de157f42d4ec8f1a551fabb44ddb840fc6aee467986bb85ec68f15c381cbda1fd552d3efea88b6febc757156fd59c73ccae6d09375789c133a68d0f468ae13f710bb2579c19efeb469c5914baf7ab5d112a284ce6e57f0f2", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRES32, @ANYBLOB="d94b164ec249c44d9d58d2fb2a6aa13f957c67fcee317fff84f3cf6f703317589ea3672ab2252d56b362e0d1c0c61318"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0xe6a}}]}}]}, 0x60}}, 0xc840) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r6, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 3.325829028s ago: executing program 0 (id=1027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000180)=[{0x3e, 0x3, 0xc, 0x7}, {0x401, 0xcf, 0x2, 0x6}, {0x4, 0x6, 0xe, 0x8}, {0x800, 0x7f, 0xa2, 0x7fffffff}, {0xfb3, 0x2, 0x4, 0xae}, {0x6, 0x9d, 0x9, 0x1}, {0x4, 0xe3, 0x3, 0xfffffffc}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 3.189354242s ago: executing program 0 (id=1028): openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x0, @dev}}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d0000130000000000000000000000030006000000000002004e210000000000000000000000000a00000081000000ffffffff000000000800120002000200000000000000000006002b0000f60000000000000000000020010000000000000000000000000001e000000200000000000000000000000004000400"/152], 0x98}}, 0x4004040) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') syz_usb_connect$uac2(0x2, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000081e04003040000102030109027e0003010e4004080b000201062003090400000001012000092401ff03091e00000c2403030304c7020307007f09240502"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, 0x0, 0x0) 2.287677524s ago: executing program 3 (id=1029): openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x0, @dev}}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d0000130000000000000000000000030006000000000002004e210000000000000000000000000a00000081000000ffffffff000000000800120002000200000000000000000006002b0000f60000000000000000000020010000000000000000000000000001e000000200000000000000000000000004000400"/152], 0x98}}, 0x4004040) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') syz_usb_connect$uac2(0x2, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000081e04003040000102030109027e0003010e4004080b000201062003090400000001012000092401ff03091e00000c2403030304c7020307007f09240502"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, 0x0, 0x0) 2.243771875s ago: executing program 1 (id=1030): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x8, 0x28, 0x800, 0xfff9, 0x3ff, 0x1000, 0x8001, 0x70c, 0x1, 0x22, 0x9, 0xd}}, 0x0, 0x0, 0x0, 0x0}) mount$incfs(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0), 0x1, &(0x7f0000000c00)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0xf, 0x4c, {0x4c, 0x2f, "69eda5b947b4877340e663fa11f3fc306f88dd63290cdfce6a5d33e3feb252d56361719e15807cf8d012a8a0050fc45d85b81a77591823bed7a945e31884613938886a1fe1dc76e87657"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x20, 0xc, 0x43, "11923b779fda3df98483d3696531208ae5271e443446a520eed72f33b2949471d613db1b56b1b62beac7028888c470abad4d5b5df1bfe1f2dee92fd13a20dbf0ffe8fa"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xc57, 0x1, 0x9c0d, 0x7, 0x1, 0xbaae, 0xc, 0x2, 0x488, 0x0, 0x6, 0x7}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x800}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) 474.324997ms ago: executing program 4 (id=1031): syz_usb_connect(0x0, 0x24, &(0x7f0000001100)={{0x12, 0x1, 0x310, 0x31, 0x6, 0xab, 0x40, 0xeb1a, 0x8179, 0x1f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x3, 0xb0, 0x6, "", [{{0x9, 0x4, 0x4d, 0x80, 0x0, 0xdb, 0x43, 0xfc, 0x8}}]}}]}}, &(0x7f0000001d40)={0x0, 0x0, 0x93, 0x0, 0x1, [{0x2, &(0x7f0000001c40)=@string={0x2}}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x4000000, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$TIOCSTI(r1, 0x80045440, &(0x7f0000000100)=0x12) 473.582597ms ago: executing program 2 (id=1032): openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x0, @dev}}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d0000130000000000000000000000030006000000000002004e210000000000000000000000000a00000081000000ffffffff000000000800120002000200000000000000000006002b0000f60000000000000000000020010000000000000000000000000001e000000200000000000000000000000004000400"/152], 0x98}}, 0x4004040) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') syz_usb_connect$uac2(0x2, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000081e04003040000102030109027e0003010e4004080b000201062003090400000001012000092401ff03091e00000c2403030304c7020307007f09240502"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, 0x0, 0x0) 122.862846ms ago: executing program 0 (id=1033): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) close(r0) r3 = socket(0x10, 0x3, 0x0) dup3(r2, r3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x20000010) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x300, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) 0s ago: executing program 0 (id=1034): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="55c58f92502fd6b7b08b6b30cdd26b9264e77cdcf59cbdf8186bccfe2256baf10842c76e472a72328a67141881103e73ec5ca00f7b34895cbbd82f01a1edfb2849266e9d3408c1a33522003f94e083b6d3092f571b3e46e34bdb09fdf6b3df5af61cca43732aac1fbcec20d6cf94ff1ca8b9ec5269490b28e2727e3bb47f9c8fa0", 0x81}], 0x1, 0x0, 0x0, 0x84}}], 0x1, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x14) ioctl(r2, 0x400c4d02, &(0x7f0000000900)) kernel console output (not intermixed with test programs): [ 145.647369][ T28] audit: type=1400 audit(1785426196.389:277): avc: denied { remove_name } for pid=2402 comm="syz.4.558" name="#3" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 145.650456][ T2403] overlayfs: conflicting lowerdir path [ 145.669830][ T28] audit: type=1400 audit(1785426196.389:278): avc: denied { rename } for pid=2402 comm="syz.4.558" name="#3" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.696654][ T28] audit: type=1400 audit(1785426196.389:279): avc: denied { unlink } for pid=2402 comm="syz.4.558" name="#3" dev="loop4" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 145.719545][ T28] audit: type=1400 audit(1785426196.389:280): avc: denied { unlink } for pid=2402 comm="syz.4.558" name="#4" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.798605][ T341] usb 1-1: 0:1 : does not exist [ 145.821998][ T288] EXT4-fs (loop4): unmounting filesystem. [ 145.825539][ T2414] loop2: detected capacity change from 0 to 2048 [ 145.845985][ T341] usb 1-1: USB disconnect, device number 6 [ 146.106624][ T28] audit: type=1400 audit(1785426196.829:281): avc: denied { set_context_mgr } for pid=2410 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 146.126748][ T28] audit: type=1400 audit(1785426196.829:282): avc: denied { map } for pid=2410 comm="syz.3.561" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 146.155429][ T2427] hub 8-0:1.0: USB hub found [ 146.160192][ T2427] hub 8-0:1.0: 1 port detected [ 146.185487][ T2414] Alternate GPT is invalid, using primary GPT. [ 146.201413][ T2414] loop2: p2 p3 p7 [ 146.216668][ T2432] tipc: Enabled bearer , priority 0 [ 146.293566][ T2428] tipc: Disabling bearer [ 146.360533][ T2434] loop1: detected capacity change from 0 to 512 [ 146.589728][ T2438] netlink: 'syz.3.568': attribute type 13 has an invalid length. [ 147.067671][ T2451] 9pnet_fd: Insufficient options for proto=fd [ 147.131698][ T2454] device bridge1 entered promiscuous mode [ 147.139701][ T2455] loop1: detected capacity change from 0 to 512 [ 147.146734][ T2455] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.510308][ T2460] netlink: 'syz.2.573': attribute type 13 has an invalid length. [ 147.734565][ T402] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 147.909847][ T2462] loop3: detected capacity change from 0 to 512 [ 147.923026][ T2462] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.995424][ T402] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.016105][ T402] usb 5-1: not running at top speed; connect to a high speed hub [ 148.033899][ T402] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.052862][ T402] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.078534][ T402] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 148.093109][ T402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.107682][ T402] usb 5-1: Product: syz [ 148.115305][ T402] usb 5-1: Manufacturer: syz [ 148.120313][ T402] usb 5-1: SerialNumber: syz [ 148.966808][ T2489] loop3: detected capacity change from 0 to 2048 [ 149.052768][ T2491] loop1: detected capacity change from 0 to 2048 [ 149.066261][ T2489] Alternate GPT is invalid, using primary GPT. [ 149.072577][ T2489] loop3: p2 p3 p7 [ 149.135678][ T2491] Alternate GPT is invalid, using primary GPT. [ 149.144008][ T2491] loop1: p2 p3 p7 [ 149.149734][ T2492] hub 8-0:1.0: USB hub found [ 149.154521][ T2492] hub 8-0:1.0: 1 port detected [ 149.227056][ T2493] hub 8-0:1.0: USB hub found [ 149.232175][ T2493] hub 8-0:1.0: 1 port detected [ 150.580250][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 150.580265][ T28] audit: type=1326 audit(1785426201.319:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2498 comm="syz.4.586" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bce39df99 code=0x0 [ 150.719260][ T2510] 9pnet_fd: Insufficient options for proto=fd [ 150.727677][ T402] usb 5-1: 0:1 : does not exist [ 150.742650][ T402] usb 5-1: USB disconnect, device number 7 [ 150.831716][ T2516] netlink: 'syz.3.584': attribute type 13 has an invalid length. [ 150.839545][ T2516] netlink: 'syz.3.584': attribute type 27 has an invalid length. [ 151.806412][ T2519] fuse: Bad value for 'group_id' [ 151.881717][ T1298] udevd[1298]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.312706][ T2537] loop4: detected capacity change from 0 to 512 [ 152.918221][ T2537] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 153.319649][ T2545] loop0: detected capacity change from 0 to 128 [ 153.359398][ T28] audit: type=1400 audit(1785426204.099:285): avc: denied { remount } for pid=2544 comm="syz.0.596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 153.498604][ T2548] futex_wake_op: syz.3.595 tries to shift op by 144; fix this program [ 153.765796][ T2554] device bridge1 entered promiscuous mode [ 153.810378][ T28] audit: type=1400 audit(1785426204.139:286): avc: denied { append } for pid=2544 comm="syz.0.596" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.002512][ T2553] netlink: 51 bytes leftover after parsing attributes in process `syz.2.597'. [ 154.028675][ T288] EXT4-fs (loop4): unmounting filesystem. [ 154.057738][ T28] audit: type=1326 audit(1785426204.799:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.4.599" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bce39df99 code=0x0 [ 154.121375][ T402] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 154.160085][ T2562] 9pnet_fd: Insufficient options for proto=fd [ 155.436769][ T402] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.458900][ T402] usb 2-1: not running at top speed; connect to a high speed hub [ 155.468596][ T402] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.479015][ T402] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.489991][ T402] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 155.499340][ T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.507796][ T402] usb 2-1: Product: syz [ 155.512331][ T402] usb 2-1: Manufacturer: syz [ 155.516952][ T402] usb 2-1: SerialNumber: syz [ 156.266365][ T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 156.267202][ T2574] futex_wake_op: syz.4.603 tries to shift op by 144; fix this program [ 156.533945][ T2585] device syzkaller0 entered promiscuous mode [ 156.545307][ T2585] tipc: Enabled bearer , priority 0 [ 156.571440][ T2584] tipc: Resetting bearer [ 156.628532][ T2587] futex_wake_op: syz.2.606 tries to shift op by 144; fix this program [ 156.749847][ T2584] tipc: Disabling bearer [ 156.760276][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.917446][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.926491][ T402] usb 2-1: 0:1 : does not exist [ 156.935640][ T310] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.967736][ T402] usb 2-1: USB disconnect, device number 8 [ 156.983310][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.991970][ T310] usb 1-1: SerialNumber: syz [ 157.017163][ T2594] device syzkaller0 entered promiscuous mode [ 157.027522][ T2594] tipc: Enabled bearer , priority 0 [ 157.036947][ T2593] tipc: Resetting bearer [ 157.044444][ T2593] tipc: Disabling bearer [ 157.202352][ T2566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.211414][ T2566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.225316][ T2601] loop3: detected capacity change from 0 to 512 [ 157.266426][ T2601] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.292949][ T310] usb 1-1: 0:2 : does not exist [ 157.297999][ T310] usb 1-1: unit 8 not found! [ 157.324562][ T310] usb 1-1: USB disconnect, device number 7 [ 157.384559][ T28] audit: type=1326 audit(1785426208.129:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2607 comm="syz.2.613" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dc739df99 code=0x0 [ 157.575620][ T2610] 9pnet_fd: Insufficient options for proto=fd [ 158.518648][ T291] EXT4-fs (loop3): unmounting filesystem. [ 158.831255][ T2620] device bridge1 entered promiscuous mode [ 159.048377][ T2624] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 159.238283][ T2630] device bridge2 entered promiscuous mode [ 159.284213][ T2633] device syzkaller0 entered promiscuous mode [ 159.295091][ T2633] tipc: Enabled bearer , priority 0 [ 159.302735][ T2632] tipc: Resetting bearer [ 159.310194][ T2632] tipc: Disabling bearer [ 159.318139][ T2623] netlink: 51 bytes leftover after parsing attributes in process `syz.3.614'. [ 159.354038][ T2636] futex_wake_op: syz.1.619 tries to shift op by 144; fix this program [ 159.505729][ T2643] loop2: detected capacity change from 0 to 2048 [ 159.561680][ T310] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 159.586441][ T2643] Alternate GPT is invalid, using primary GPT. [ 159.597192][ T2643] loop2: p2 p3 p7 [ 159.653075][ T2646] loop4: detected capacity change from 0 to 4096 [ 159.686201][ T2647] hub 8-0:1.0: USB hub found [ 159.690945][ T2647] hub 8-0:1.0: 1 port detected [ 159.711289][ T2646] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.731601][ T2646] EXT4-fs (loop4): Test dummy encryption mode enabled [ 159.748059][ T2646] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 159.772742][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.786148][ T310] usb 1-1: not running at top speed; connect to a high speed hub [ 159.788499][ T2646] System zones: [ 159.801988][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.807214][ T2646] 0-5 [ 159.829883][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.835515][ T2646] [ 159.855040][ T310] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 159.873021][ T2646] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 159.873022][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.873050][ T310] usb 1-1: Product: syz [ 159.919950][ T310] usb 1-1: Manufacturer: syz [ 159.931260][ T310] usb 1-1: SerialNumber: syz [ 160.088939][ T2656] loop3: detected capacity change from 0 to 512 [ 160.108490][ T2656] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.615954][ T288] EXT4-fs (loop4): unmounting filesystem. [ 161.209733][ T28] audit: type=1326 audit(1785426211.949:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.4.628" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bce39df99 code=0x0 [ 161.298568][ T2669] futex_wake_op: syz.1.630 tries to shift op by 144; fix this program [ 161.310873][ T2670] 9pnet_fd: Insufficient options for proto=fd [ 162.105175][ T28] audit: type=1400 audit(1785426212.849:290): avc: denied { ioctl } for pid=2673 comm="syz.4.631" path="pid:[4026532370]" dev="nsfs" ino=4026532370 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 162.160465][ T310] usb 1-1: 0:1 : does not exist [ 162.166877][ T2682] x_tables: duplicate underflow at hook 1 [ 162.191849][ T310] usb 1-1: USB disconnect, device number 8 [ 162.209695][ T28] audit: type=1326 audit(1785426212.949:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2685 comm="syz.2.636" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dc739df99 code=0x0 [ 162.252657][ T2511] udevd[2511]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 162.308656][ T2691] 9pnet_fd: Insufficient options for proto=fd [ 162.422057][ T2697] futex_wake_op: syz.4.638 tries to shift op by 144; fix this program [ 162.571357][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.375865][ T2694] loop1: detected capacity change from 0 to 4096 [ 163.383984][ T2694] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.403388][ T2694] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.530685][ T2694] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 163.570124][ T2694] System zones: 0-5 [ 163.591843][ T2694] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.187044][ T289] EXT4-fs (loop1): unmounting filesystem. [ 165.285200][ T2725] device bridge1 entered promiscuous mode [ 165.363103][ T28] audit: type=1400 audit(1785426216.109:292): avc: denied { map } for pid=2731 comm="syz.4.650" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.387839][ T28] audit: type=1326 audit(1785426216.129:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.1.645" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e14d9df99 code=0x0 [ 165.488766][ T2743] 9pnet_fd: Insufficient options for proto=fd [ 167.230147][ T2744] netlink: 'syz.0.653': attribute type 13 has an invalid length. [ 167.237974][ T2744] netlink: 'syz.0.653': attribute type 27 has an invalid length. [ 167.255768][ T60] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 167.486985][ T2760] device bridge1 entered promiscuous mode [ 167.523626][ T60] usb 4-1: unable to get BOS descriptor or descriptor too short [ 167.646864][ T60] usb 4-1: not running at top speed; connect to a high speed hub [ 167.781783][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.867348][ T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.874817][ T2769] device syzkaller0 entered promiscuous mode [ 167.887692][ T60] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 167.910586][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.921847][ T60] usb 4-1: Product: syz [ 167.926053][ T2769] tipc: Enabled bearer , priority 0 [ 167.931731][ T60] usb 4-1: Manufacturer: syz [ 167.937337][ T60] usb 4-1: SerialNumber: syz [ 167.947339][ T2768] tipc: Resetting bearer [ 167.965286][ T2768] tipc: Disabling bearer [ 168.344497][ T2787] tipc: Enabling of bearer rejected, failed to enable media [ 168.367589][ T2788] futex_wake_op: syz.0.666 tries to shift op by 144; fix this program [ 168.436651][ T2790] loop2: detected capacity change from 0 to 512 [ 168.480594][ T2790] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.761629][ T2808] futex_wake_op: syz.2.673 tries to shift op by 144; fix this program [ 169.072675][ T2813] device syzkaller0 entered promiscuous mode [ 169.100742][ T2813] tipc: Enabled bearer , priority 0 [ 169.113001][ T2812] tipc: Resetting bearer [ 169.120122][ T2812] tipc: Disabling bearer [ 169.164720][ T60] usb 4-1: 0:1 : does not exist [ 169.176930][ T60] usb 4-1: USB disconnect, device number 9 [ 169.245748][ T2823] tipc: Enabling of bearer rejected, failed to enable media [ 169.318743][ T2827] loop3: detected capacity change from 0 to 512 [ 169.345562][ T2827] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.431136][ T2841] futex_wake_op: syz.3.685 tries to shift op by 144; fix this program [ 170.719407][ T2846] device bridge1 entered promiscuous mode [ 170.872739][ T2856] device syzkaller0 entered promiscuous mode [ 170.921048][ T2856] tipc: Enabled bearer , priority 0 [ 170.964321][ T2855] tipc: Resetting bearer [ 170.989493][ T2855] tipc: Disabling bearer [ 171.011333][ T375] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 171.203377][ T375] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.224476][ T375] usb 3-1: not running at top speed; connect to a high speed hub [ 171.246530][ T2866] tipc: Enabling of bearer rejected, failed to enable media [ 171.256154][ T375] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.278441][ T375] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.315731][ T375] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 171.374957][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.401619][ T375] usb 3-1: Product: syz [ 171.562997][ T375] usb 3-1: Manufacturer: syz [ 171.569113][ T375] usb 3-1: SerialNumber: syz [ 171.615100][ T2874] loop1: detected capacity change from 0 to 512 [ 171.632418][ T2874] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.672183][ T2878] loop4: detected capacity change from 0 to 512 [ 171.689156][ T2878] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.715063][ T2880] loop3: detected capacity change from 0 to 4096 [ 171.735342][ T2880] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.753116][ T2880] EXT4-fs (loop3): Test dummy encryption mode enabled [ 171.774530][ T2882] device syzkaller0 entered promiscuous mode [ 171.782909][ T2880] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 171.796295][ T2880] System zones: 0-5 [ 171.802733][ T2885] device syzkaller0 entered promiscuous mode [ 171.812788][ T2880] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 171.824437][ T2882] tipc: Enabled bearer , priority 0 [ 171.837240][ T2885] tipc: Enabled bearer , priority 0 [ 171.846547][ T2881] tipc: Resetting bearer [ 171.862304][ T2881] tipc: Disabling bearer [ 171.881381][ T2883] tipc: Resetting bearer [ 171.889110][ T2883] tipc: Disabling bearer [ 171.977864][ T2891] device syzkaller0 entered promiscuous mode [ 171.987253][ T2891] tipc: Enabled bearer , priority 0 [ 172.001446][ T2890] tipc: Resetting bearer [ 172.011028][ T2890] tipc: Disabling bearer [ 172.161490][ T2894] futex_wake_op: syz.4.700 tries to shift op by 144; fix this program [ 172.557773][ T2898] device bridge1 entered promiscuous mode [ 172.567076][ T291] EXT4-fs (loop3): unmounting filesystem. [ 172.592665][ T2896] tipc: Enabling of bearer rejected, failed to enable media [ 172.630020][ T2904] loop0: detected capacity change from 0 to 2048 [ 172.673787][ T2904] Alternate GPT is invalid, using primary GPT. [ 172.682141][ T2906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'. [ 172.691749][ T2904] loop0: p2 p3 p7 [ 172.782237][ T2912] loop1: detected capacity change from 0 to 512 [ 172.789143][ T2912] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.804164][ T2913] hub 8-0:1.0: USB hub found [ 172.808915][ T2913] hub 8-0:1.0: 1 port detected [ 174.308483][ T2936] tipc: Enabling of bearer rejected, failed to enable media [ 174.322808][ T375] usb 3-1: 0:1 : does not exist [ 174.328795][ T2933] loop1: detected capacity change from 0 to 2048 [ 174.362425][ T375] usb 3-1: USB disconnect, device number 8 [ 174.396012][ T2933] Alternate GPT is invalid, using primary GPT. [ 174.408407][ T2937] loop0: detected capacity change from 0 to 512 [ 174.415570][ T2933] loop1: p2 p3 p7 [ 174.435787][ T2937] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.539043][ T2943] hub 8-0:1.0: USB hub found [ 174.545197][ T2943] hub 8-0:1.0: 1 port detected [ 174.628977][ T2944] netlink: 'syz.4.718': attribute type 13 has an invalid length. [ 174.637436][ T2944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.718'. [ 174.931603][ T2505] udevd[2505]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 175.000453][ T2948] futex_wake_op: syz.2.720 tries to shift op by 144; fix this program [ 175.353277][ T2955] loop1: detected capacity change from 0 to 512 [ 175.362276][ T2955] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.376370][ T28] audit: type=1326 audit(1785426226.119:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.4.725" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bce39df99 code=0x0 [ 175.530107][ T2961] device bridge2 entered promiscuous mode [ 175.552822][ T2962] 9pnet_fd: Insufficient options for proto=fd [ 176.809873][ T2973] tipc: Enabling of bearer rejected, failed to enable media [ 176.886713][ T2975] device bridge1 entered promiscuous mode [ 178.231299][ T2994] device bridge1 entered promiscuous mode [ 178.238876][ T60] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 178.803751][ T3004] device bridge1 entered promiscuous mode [ 178.913172][ T60] usb 2-1: unable to get BOS descriptor or descriptor too short [ 178.934612][ T60] usb 2-1: not running at top speed; connect to a high speed hub [ 178.971333][ T841] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 178.993915][ T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.041017][ T60] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.087200][ T60] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 179.119095][ T3007] loop3: detected capacity change from 0 to 512 [ 179.125863][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.134329][ T60] usb 2-1: Product: syz [ 179.138585][ T60] usb 2-1: Manufacturer: syz [ 179.143733][ T60] usb 2-1: SerialNumber: syz [ 179.151320][ T930] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 179.162674][ T841] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.177553][ T3007] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.180195][ T841] usb 5-1: not running at top speed; connect to a high speed hub [ 179.204924][ T841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.216020][ T841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.232405][ T841] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 179.244569][ T841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.270437][ T3011] loop0: detected capacity change from 0 to 4096 [ 179.271303][ T841] usb 5-1: Product: syz [ 179.282572][ T841] usb 5-1: Manufacturer: syz [ 179.287220][ T841] usb 5-1: SerialNumber: syz [ 179.306727][ T3011] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.315923][ T3011] EXT4-fs (loop0): Test dummy encryption mode enabled [ 179.324648][ T3011] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 179.333039][ T3011] System zones: 0-5 [ 179.337993][ T3011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 179.363590][ T291] EXT4-fs (loop3): unmounting filesystem. [ 179.364225][ T930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.390635][ T930] usb 3-1: not running at top speed; connect to a high speed hub [ 179.411987][ T930] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.428266][ T930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.458588][ T930] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 179.493777][ T3016] futex_wake_op: syz.3.737 tries to shift op by 144; fix this program [ 179.521986][ T930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.645095][ T930] usb 3-1: Product: syz [ 179.668199][ T930] usb 3-1: Manufacturer: syz [ 179.692984][ T930] usb 3-1: SerialNumber: syz [ 180.127269][ T287] EXT4-fs (loop0): unmounting filesystem. [ 180.219565][ T28] audit: type=1326 audit(1785426230.959:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3024 comm="syz.0.740" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f346419df99 code=0x0 [ 180.321267][ T3029] 9pnet_fd: Insufficient options for proto=fd [ 180.384829][ T3031] tipc: Enabling of bearer rejected, failed to enable media [ 180.499232][ T60] usb 2-1: 0:1 : does not exist [ 180.522345][ T60] usb 2-1: USB disconnect, device number 9 [ 181.800487][ T930] usb 3-1: 0:1 : does not exist [ 181.815875][ T841] usb 5-1: 0:1 : does not exist [ 181.846824][ T930] usb 3-1: USB disconnect, device number 9 [ 181.907988][ T841] usb 5-1: USB disconnect, device number 8 [ 182.039227][ T3048] netlink: 'syz.2.745': attribute type 13 has an invalid length. [ 182.047149][ T3048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.745'. [ 182.096021][ T2511] udevd[2511]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 182.348981][ T3050] device bridge2 entered promiscuous mode [ 184.110678][ T3072] futex_wake_op: syz.3.751 tries to shift op by 144; fix this program [ 184.120520][ T1906] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 184.175017][ T1259] udevd[1259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 184.196526][ T2505] udevd[2505]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 184.389845][ T3078] device bridge1 entered promiscuous mode [ 184.402873][ T1906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 184.413693][ T1906] usb 1-1: not running at top speed; connect to a high speed hub [ 184.422749][ T3066] loop2: detected capacity change from 0 to 512 [ 184.440214][ T1906] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.454881][ T1906] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.475407][ T1906] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 184.485471][ T1906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.493622][ T1906] usb 1-1: Product: syz [ 184.498124][ T1906] usb 1-1: Manufacturer: syz [ 184.502827][ T1906] usb 1-1: SerialNumber: syz [ 184.506459][ T3066] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.653947][ T3089] loop3: detected capacity change from 0 to 512 [ 184.674985][ T290] EXT4-fs (loop2): unmounting filesystem. [ 184.692041][ T3089] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 184.823951][ T3094] futex_wake_op: syz.2.758 tries to shift op by 144; fix this program [ 184.859651][ T291] EXT4-fs (loop3): unmounting filesystem. [ 184.925167][ T3097] loop3: detected capacity change from 0 to 2048 [ 184.974205][ T3097] Alternate GPT is invalid, using primary GPT. [ 184.987908][ T3097] loop3: p2 p3 p7 [ 185.098288][ T3104] hub 8-0:1.0: USB hub found [ 185.103886][ T3104] hub 8-0:1.0: 1 port detected [ 185.509158][ T3110] futex_wake_op: syz.4.763 tries to shift op by 144; fix this program [ 185.770734][ T3114] futex_wake_op: syz.2.764 tries to shift op by 144; fix this program [ 186.072701][ T1906] usb 1-1: 0:1 : does not exist [ 186.138853][ T28] audit: type=1326 audit(1785426236.879:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3119 comm="syz.0.766" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f346419df99 code=0x0 [ 186.142728][ T1906] usb 1-1: USB disconnect, device number 9 [ 186.237010][ T3122] fuse: Bad value for 'fd' [ 186.241781][ T3124] 9pnet_fd: Insufficient options for proto=fd [ 186.566762][ T60] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 186.703403][ T28] audit: type=1400 audit(1785426237.449:297): avc: denied { read write } for pid=3132 comm="syz.1.770" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 186.754116][ T28] audit: type=1400 audit(1785426237.479:298): avc: denied { open } for pid=3132 comm="syz.1.770" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 186.780579][ T28] audit: type=1400 audit(1785426237.479:299): avc: denied { ioctl } for pid=3132 comm="syz.1.770" path="/dev/uhid" dev="devtmpfs" ino=267 ioctlcmd=0x5841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 186.797707][ T3127] loop4: detected capacity change from 0 to 40427 [ 186.806950][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 186.818707][ T3127] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 186.828224][ T3127] F2FS-fs (loop4): invalid crc value [ 186.834591][ T3127] F2FS-fs (loop4): invalid crc value [ 186.835661][ T60] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 186.839918][ T3127] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 186.855973][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.864056][ T60] usb 4-1: Product: syz [ 186.868765][ T60] usb 4-1: Manufacturer: syz [ 186.873482][ T60] usb 4-1: SerialNumber: syz [ 186.878936][ T60] usb 4-1: config 0 descriptor?? [ 186.884793][ T28] audit: type=1400 audit(1785426237.629:300): avc: denied { create } for pid=3134 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.904776][ T60] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 186.912460][ T28] audit: type=1400 audit(1785426237.629:301): avc: denied { setopt } for pid=3134 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.936916][ T3131] netlink: 104 bytes leftover after parsing attributes in process `syz.2.769'. [ 186.961382][ T28] audit: type=1400 audit(1785426237.679:302): avc: denied { write } for pid=3130 comm="syz.2.769" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 187.036017][ T3147] loop0: detected capacity change from 0 to 2048 [ 187.101271][ T310] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 187.114243][ T60] usb 4-1: USB disconnect, device number 10 [ 187.121446][ T3147] Alternate GPT is invalid, using primary GPT. [ 187.132268][ T3147] loop0: p2 p3 p7 [ 187.365308][ T3151] hub 8-0:1.0: USB hub found [ 187.370687][ T3151] hub 8-0:1.0: 1 port detected [ 188.121261][ T3155] device bridge2 entered promiscuous mode [ 188.461739][ T3161] device bridge1 entered promiscuous mode [ 188.714254][ T28] audit: type=1326 audit(1785426239.459:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3164 comm="syz.1.777" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e14d9df99 code=0x0 [ 188.750459][ T310] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.758552][ T310] usb 5-1: not running at top speed; connect to a high speed hub [ 188.767089][ T310] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 188.775242][ T310] usb 5-1: config 0 has no interface number 0 [ 188.781399][ T310] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 58603, setting to 64 [ 188.792505][ T310] usb 5-1: config 0 interface 88 has no altsetting 0 [ 188.800610][ T310] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 188.809921][ T310] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 188.815711][ T3166] 9pnet_fd: Insufficient options for proto=fd [ 188.818139][ T19] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 188.831788][ T310] usb 5-1: Product: syz [ 188.835977][ T310] usb 5-1: Manufacturer: syz [ 188.840586][ T310] usb 5-1: SerialNumber: syz [ 188.846670][ T310] usb 5-1: config 0 descriptor?? [ 188.852167][ T3127] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 188.910446][ T371] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 189.193925][ T371] usb 3-1: unable to get BOS descriptor or descriptor too short [ 189.256660][ T371] usb 3-1: not running at top speed; connect to a high speed hub [ 189.343092][ T371] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.353597][ T371] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.365784][ T371] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 189.375221][ T371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.383552][ T371] usb 3-1: Product: syz [ 189.387894][ T371] usb 3-1: Manufacturer: syz [ 189.392789][ T371] usb 3-1: SerialNumber: syz [ 189.416030][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 189.424377][ T19] usb 1-1: not running at top speed; connect to a high speed hub [ 189.433070][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.443566][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.454202][ T19] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 189.463330][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.471480][ T19] usb 1-1: Product: syz [ 189.478888][ T19] usb 1-1: Manufacturer: syz [ 189.483634][ T19] usb 1-1: SerialNumber: syz [ 190.109021][ T3178] futex_wake_op: syz.1.779 tries to shift op by 144; fix this program [ 191.763654][ T371] usb 3-1: 0:1 : does not exist [ 191.800014][ T310] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input4 [ 191.839439][ T28] audit: type=1400 audit(1785426242.579:304): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1618 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.866175][ T310] usb 5-1: USB disconnect, device number 9 [ 191.879181][ T3182] loop2: detected capacity change from 0 to 128 [ 191.897981][ T371] usb 3-1: USB disconnect, device number 10 [ 191.920915][ T28] audit: type=1400 audit(1785426242.579:305): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1618 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.945322][ T28] audit: type=1400 audit(1785426242.579:306): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1618 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.005294][ T3182] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 192.015260][ T3182] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.049630][ T28] audit: type=1326 audit(1785426242.789:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3193 comm="syz.1.784" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e14d9df99 code=0x0 [ 192.087877][ T3182] device vti0 entered promiscuous mode [ 192.118895][ T290] EXT4-fs (loop2): unmounting filesystem. [ 192.142872][ T2505] udevd[2505]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 192.159879][ T3197] 9pnet_fd: Insufficient options for proto=fd [ 192.169257][ T28] audit: type=1326 audit(1785426242.919:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.2.785" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dc739df99 code=0x0 [ 192.202260][ T3184] loop4: detected capacity change from 0 to 40427 [ 192.216600][ T3184] F2FS-fs (loop4): fault_injection options not supported [ 192.234197][ T3184] F2FS-fs (loop4): fault_type options not supported [ 192.249409][ T3184] F2FS-fs (loop4): invalid crc value [ 192.265412][ T3184] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.307921][ T3184] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.314215][ T3202] 9pnet_fd: Insufficient options for proto=fd [ 194.045348][ T19] usb 1-1: 0:1 : does not exist [ 194.060663][ T3214] loop3: detected capacity change from 0 to 512 [ 194.084412][ T3214] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.090694][ T3210] loop1: detected capacity change from 0 to 2048 [ 194.104903][ T19] usb 1-1: USB disconnect, device number 10 [ 194.148630][ T3210] Alternate GPT is invalid, using primary GPT. [ 194.155503][ T3210] loop1: p2 p3 p7 [ 194.161877][ T3184] syz.4.782: attempt to access beyond end of device [ 194.161877][ T3184] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 194.182695][ T3184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=3184 comm=syz.4.782 [ 194.215795][ T3184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=3184 comm=syz.4.782 [ 194.252770][ T3221] hub 8-0:1.0: USB hub found [ 194.258847][ T3184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=3184 comm=syz.4.782 [ 194.292268][ T3184] netlink: 44 bytes leftover after parsing attributes in process `syz.4.782'. [ 194.341816][ T1259] udevd[1259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 194.361258][ T3221] hub 8-0:1.0: 1 port detected [ 194.520654][ T3225] device bridge1 entered promiscuous mode [ 194.659537][ T3212] netlink: 51 bytes leftover after parsing attributes in process `syz.2.787'. [ 194.824484][ T28] audit: type=1326 audit(1785426245.569:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3229 comm="syz.4.792" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bce39df99 code=0x0 [ 194.851406][ T60] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 194.911623][ T3232] futex_wake_op: syz.0.793 tries to shift op by 144; fix this program [ 195.123253][ T60] usb 4-1: unable to get BOS descriptor or descriptor too short [ 195.140797][ T60] usb 4-1: not running at top speed; connect to a high speed hub [ 195.182746][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.193956][ T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.235879][ T60] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 195.245429][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.265606][ T60] usb 4-1: Product: syz [ 195.274157][ T60] usb 4-1: Manufacturer: syz [ 195.283347][ T60] usb 4-1: SerialNumber: syz [ 195.763435][ T3258] device bridge2 entered promiscuous mode [ 195.815632][ T28] audit: type=1326 audit(1785426246.559:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3259 comm="syz.4.798" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bce39df99 code=0x0 [ 195.916757][ T3262] 9pnet_fd: Insufficient options for proto=fd [ 196.186386][ T930] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 196.470644][ T930] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.476316][ T28] audit: type=1400 audit(1785426247.219:311): avc: denied { remount } for pid=3268 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 196.497958][ T930] usb 1-1: not running at top speed; connect to a high speed hub [ 196.506510][ T930] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.516683][ T930] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.546483][ T930] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 196.558860][ T930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.567639][ T930] usb 1-1: Product: syz [ 196.572031][ T930] usb 1-1: Manufacturer: syz [ 196.576775][ T930] usb 1-1: SerialNumber: syz [ 196.786956][ T930] usb 1-1: 0:1 : does not exist [ 196.797530][ T930] usb 1-1: USB disconnect, device number 11 [ 196.861359][ T310] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 196.931252][ T19] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 197.002034][ T2511] udevd[2511]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 197.041252][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 197.047673][ T310] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 197.056221][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.066433][ T310] usb 3-1: config 0 has no interface number 0 [ 197.072601][ T310] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 197.082758][ T310] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.095858][ T310] usb 3-1: config 0 interface 196 has no altsetting 0 [ 197.104451][ T310] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 197.113562][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.121685][ T310] usb 3-1: Product: syz [ 197.125946][ T310] usb 3-1: Manufacturer: syz [ 197.130697][ T310] usb 3-1: SerialNumber: syz [ 197.136555][ T310] usb 3-1: config 0 descriptor?? [ 197.136627][ T19] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 197.151502][ T19] usb 5-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 197.159757][ T19] usb 5-1: Product: syz [ 197.159883][ T3277] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 197.167846][ T19] usb 5-1: config 0 descriptor?? [ 197.177723][ T19] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 197.185881][ T19] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 197.256669][ T3281] loop1: detected capacity change from 0 to 4096 [ 197.266125][ T3281] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.275176][ T3281] EXT4-fs (loop1): Test dummy encryption mode enabled [ 197.283546][ T3281] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 197.292431][ T3281] System zones: 0-5 [ 197.298913][ T3281] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 197.342752][ T3285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.804'. [ 197.414613][ T3279] netlink: 64098 bytes leftover after parsing attributes in process `syz.4.802'. [ 197.431484][ T60] usb 4-1: 0:1 : does not exist [ 197.445262][ T60] usb 4-1: USB disconnect, device number 11 [ 197.459236][ T3287] loop0: detected capacity change from 0 to 2048 [ 197.472511][ T1906] usb 5-1: USB disconnect, device number 10 [ 197.478903][ T1906] ftdi_sio 5-1:0.0: device disconnected [ 197.495906][ T3293] Illegal XDP return value 4294967274 on prog (id 103) dev syz_tun, expect packet loss! [ 197.524539][ T3293] loop2: detected capacity change from 0 to 512 [ 197.622073][ T3287] Alternate GPT is invalid, using primary GPT. [ 197.643641][ T3296] futex_wake_op: syz.3.806 tries to shift op by 144; fix this program [ 197.675648][ T3287] loop0: p2 p3 p7 [ 197.687553][ T3293] netlink: 68 bytes leftover after parsing attributes in process `syz.2.801'. [ 197.697371][ T2505] udevd[2505]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 197.841799][ T3287] hub 8-0:1.0: USB hub found [ 197.867833][ T3287] hub 8-0:1.0: 1 port detected [ 197.981489][ T310] ipheth 3-1:0.196: Unable to find endpoints [ 198.046964][ T310] usb 3-1: USB disconnect, device number 11 [ 198.076299][ T3300] loop4: detected capacity change from 0 to 512 [ 198.083506][ T3300] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.121316][ T289] EXT4-fs (loop1): unmounting filesystem. [ 199.184410][ T3307] loop1: detected capacity change from 0 to 40427 [ 199.194365][ T3308] device bridge1 entered promiscuous mode [ 199.234173][ T3307] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 199.241980][ T3307] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 199.259995][ T3307] F2FS-fs (loop1): invalid crc value [ 199.273339][ T3307] F2FS-fs (loop1): Found nat_bits in checkpoint [ 199.324383][ T3307] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 199.331515][ T3307] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 199.383666][ T28] audit: type=1326 audit(1785426250.129:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3320 comm="syz.0.812" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f346419df99 code=0x0 [ 199.420779][ T28] audit: type=1400 audit(1785426250.159:313): avc: denied { read } for pid=3322 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.452378][ T3325] loop3: detected capacity change from 0 to 256 [ 199.459015][ T3325] exfat: Deprecated parameter 'namecase' [ 199.465236][ T3325] exfat: Deprecated parameter 'utf8' [ 199.473504][ T3325] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 199.491778][ T3326] 9pnet_fd: Insufficient options for proto=fd [ 199.572540][ T60] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 199.774296][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 199.792259][ T60] usb 5-1: not running at top speed; connect to a high speed hub [ 199.859091][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.903629][ T3332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.815'. [ 199.934053][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.955218][ T60] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 199.964738][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.972989][ T60] usb 5-1: Product: syz [ 199.977303][ T60] usb 5-1: Manufacturer: syz [ 199.982116][ T60] usb 5-1: SerialNumber: syz [ 200.033328][ T3334] loop1: detected capacity change from 0 to 512 [ 200.045846][ T28] audit: type=1400 audit(1785426250.789:314): avc: denied { read } for pid=3324 comm="syz.3.814" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 200.069042][ T28] audit: type=1400 audit(1785426250.789:315): avc: denied { open } for pid=3324 comm="syz.3.814" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 200.124953][ T3334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 200.232258][ T310] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 200.292288][ T3342] loop0: detected capacity change from 0 to 512 [ 200.300092][ T3342] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.420461][ T289] EXT4-fs (loop1): unmounting filesystem. [ 200.421318][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 200.450341][ T310] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 200.466581][ T3344] loop0: detected capacity change from 0 to 4096 [ 200.477061][ T310] usb 3-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 200.486875][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.487317][ T3344] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.495768][ T310] usb 3-1: Product: syz [ 200.508297][ T310] usb 3-1: Manufacturer: syz [ 200.516105][ T310] usb 3-1: SerialNumber: syz [ 200.528723][ T3344] EXT4-fs (loop0): Test dummy encryption mode enabled [ 200.536271][ T3336] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 200.545306][ T3344] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 200.553800][ T3344] System zones: 0-5 [ 200.558624][ T3344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.863994][ T3353] futex_wake_op: syz.3.821 tries to shift op by 144; fix this program [ 200.876751][ T3336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.888607][ T3336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.898324][ T3336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.907884][ T3336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.923996][ T310] usb 3-1: USB disconnect, device number 12 [ 200.941282][ T6] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 201.121227][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 201.127703][ T6] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.138912][ T6] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.140911][ T2511] udevd[2511]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 201.151261][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 201.173836][ T6] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 201.182393][ T6] usb 2-1: Product: syz [ 201.186751][ T6] usb 2-1: Manufacturer: syz [ 201.193073][ T6] hub 2-1:4.0: USB hub found [ 201.291263][ T287] EXT4-fs (loop0): unmounting filesystem. [ 201.299998][ T60] usb 5-1: 0:1 : does not exist [ 201.314698][ T60] usb 5-1: USB disconnect, device number 11 [ 201.393642][ T6] hub 2-1:4.0: 2 ports detected [ 201.484014][ T3369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 201.501668][ T3370] input: syz0 as /devices/virtual/input/input5 [ 201.521878][ T1298] udevd[1298]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 201.549748][ T3370] loop3: detected capacity change from 0 to 16 [ 201.581505][ T28] audit: type=1326 audit(1785426252.329:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3375 comm="syz.0.829" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f346419df99 code=0x0 [ 201.606408][ T3370] erofs: (device loop3): mounted with root inode @ nid 36. [ 201.622532][ T3377] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.641468][ T3370] process 'syz.3.826' launched './file1' with NULL argv: empty string added [ 201.650512][ T28] audit: type=1400 audit(1785426252.389:317): avc: denied { execute } for pid=3368 comm="syz.3.826" name="file1" dev="loop3" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.650898][ T3370] syz.3.826: attempt to access beyond end of device [ 201.650898][ T3370] loop3: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 201.681310][ T28] audit: type=1400 audit(1785426252.389:318): avc: denied { execute_no_trans } for pid=3368 comm="syz.3.826" path="/163/file2/file1" dev="loop3" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.711739][ T3381] 9pnet_fd: Insufficient options for proto=fd [ 201.763678][ T3370] syz.3.826: attempt to access beyond end of device [ 201.763678][ T3370] loop3: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 204.184028][ T3400] fuse: Bad value for 'fd' [ 204.188986][ T3382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 204.240305][ T3401] set_capacity_and_notify: 2 callbacks suppressed [ 204.240325][ T3401] loop3: detected capacity change from 0 to 4096 [ 204.287355][ T3401] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 204.503729][ T3405] futex_wake_op: syz.0.836 tries to shift op by 144; fix this program [ 204.673228][ T3401] EXT4-fs (loop3): Test dummy encryption mode enabled [ 204.738423][ T3409] loop1: detected capacity change from 0 to 512 [ 204.752400][ T3401] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 204.806310][ T3409] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.822903][ T3401] System zones: 0-5 [ 204.843612][ T6] usb 2-1: USB disconnect, device number 10 [ 204.852036][ T3401] EXT4-fs: error -4 creating inode table initialization thread [ 204.865715][ T3401] EXT4-fs (loop3): mount failed [ 204.926505][ T3417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.840'. [ 204.942589][ T288] EXT4-fs (loop4): unmounting filesystem. [ 204.996572][ T28] audit: type=1326 audit(1785426255.739:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3421 comm="syz.1.844" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e14d9df99 code=0x0 [ 205.278892][ T3431] device bridge1 entered promiscuous mode [ 205.367506][ T3433] 9pnet_fd: Insufficient options for proto=fd [ 205.641483][ T60] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 205.811390][ T3439] loop3: detected capacity change from 0 to 40427 [ 205.818773][ T3439] F2FS-fs (loop3): fault_injection options not supported [ 205.840502][ T3437] loop0: detected capacity change from 0 to 40427 [ 205.847988][ T3439] F2FS-fs (loop3): fault_type options not supported [ 205.856551][ T3441] netlink: 51 bytes leftover after parsing attributes in process `syz.4.847'. [ 205.865794][ T3439] F2FS-fs (loop3): invalid crc value [ 205.876638][ T3437] F2FS-fs (loop0): fault_injection options not supported [ 205.892183][ T3439] F2FS-fs (loop3): Found nat_bits in checkpoint [ 205.892896][ T3437] F2FS-fs (loop0): fault_type options not supported [ 205.905177][ T60] usb 3-1: unable to get BOS descriptor or descriptor too short [ 205.918932][ T60] usb 3-1: not running at top speed; connect to a high speed hub [ 205.927232][ T3437] F2FS-fs (loop0): invalid crc value [ 205.933127][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.943663][ T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.953672][ T3437] F2FS-fs (loop0): Found nat_bits in checkpoint [ 205.960836][ T60] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 205.981862][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.998722][ T60] usb 3-1: Product: syz [ 206.010103][ T60] usb 3-1: Manufacturer: syz [ 206.020260][ T60] usb 3-1: SerialNumber: syz [ 206.028573][ T3439] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 206.041607][ T3437] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 206.054546][ T3439] syz.3.846: attempt to access beyond end of device [ 206.054546][ T3439] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 206.069811][ T3452] fuse: Bad value for 'fd' [ 206.091704][ T3439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=3439 comm=syz.3.846 [ 206.105891][ T3439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=3439 comm=syz.3.846 [ 206.119329][ T3437] syz.0.845: attempt to access beyond end of device [ 206.119329][ T3437] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 206.121513][ T3439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=3439 comm=syz.3.846 [ 206.137316][ T3437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=3437 comm=syz.0.845 [ 206.146253][ T3439] netlink: 44 bytes leftover after parsing attributes in process `syz.3.846'. [ 206.158893][ T3437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=3437 comm=syz.0.845 [ 206.181302][ T3437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=3437 comm=syz.0.845 [ 206.200674][ T3437] netlink: 44 bytes leftover after parsing attributes in process `syz.0.845'. [ 206.225948][ T3454] loop1: detected capacity change from 0 to 4096 [ 206.273539][ T3454] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.298474][ T3454] EXT4-fs (loop1): Test dummy encryption mode enabled [ 206.306359][ T3454] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 206.314695][ T3454] System zones: 0-5 [ 206.327229][ T3454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 206.409020][ T3458] loop3: detected capacity change from 0 to 512 [ 206.434460][ T3458] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 206.583702][ T291] EXT4-fs (loop3): unmounting filesystem. [ 207.087464][ T289] EXT4-fs (loop1): unmounting filesystem. [ 207.125460][ T28] audit: type=1326 audit(1785426257.869:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.1.858" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e14d9df99 code=0x0 [ 207.226972][ T3491] 9pnet_fd: Insufficient options for proto=fd [ 207.508325][ T3494] loop3: detected capacity change from 0 to 512 [ 207.530588][ T3494] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.607172][ T3496] fuse: Bad value for 'fd' [ 207.694385][ T3500] raw_sendmsg: syz.3.862 forgot to set AF_INET. Fix it! [ 207.927962][ T3498] loop4: detected capacity change from 0 to 40427 [ 207.943584][ T3498] F2FS-fs (loop4): fault_injection options not supported [ 208.002150][ T3498] F2FS-fs (loop4): fault_type options not supported [ 208.023625][ T60] usb 3-1: 0:1 : does not exist [ 208.043635][ T3498] F2FS-fs (loop4): invalid crc value [ 208.049406][ T60] usb 3-1: USB disconnect, device number 13 [ 208.075575][ T3505] loop3: detected capacity change from 0 to 2048 [ 208.089335][ T3498] F2FS-fs (loop4): Found nat_bits in checkpoint [ 208.144955][ T3505] Alternate GPT is invalid, using primary GPT. [ 208.146198][ T3517] loop1: detected capacity change from 0 to 512 [ 208.151701][ T3505] loop3: p2 p3 p7 [ 208.161831][ T3516] device syzkaller0 entered promiscuous mode [ 208.193290][ T3516] tipc: Enabled bearer , priority 0 [ 208.225781][ T3515] tipc: Resetting bearer [ 208.239977][ T3498] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 208.251803][ T3515] tipc: Disabling bearer [ 208.264566][ T3517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 208.275974][ T3524] hub 8-0:1.0: USB hub found [ 208.292008][ T3498] syz.4.861: attempt to access beyond end of device [ 208.292008][ T3498] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 208.309656][ T3524] hub 8-0:1.0: 1 port detected [ 208.370001][ T3498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=3498 comm=syz.4.861 [ 208.385438][ T3498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=3498 comm=syz.4.861 [ 208.399516][ T3498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=3498 comm=syz.4.861 [ 208.413461][ T3498] netlink: 44 bytes leftover after parsing attributes in process `syz.4.861'. [ 208.446648][ T3527] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.456925][ T3527] EXT4-fs (loop0): Test dummy encryption mode enabled [ 208.465236][ T3527] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 208.524187][ T3527] System zones: 0-5 [ 208.545216][ T3527] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 208.668500][ T289] EXT4-fs (loop1): unmounting filesystem. [ 208.722672][ T3533] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.879902][ T3536] futex_wake_op: syz.4.869 tries to shift op by 144; fix this program [ 208.944028][ T3542] fuse: Bad value for 'fd' [ 208.954923][ T3540] device bridge1 entered promiscuous mode [ 209.167078][ T28] audit: type=1326 audit(1785426259.909:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3546 comm="syz.2.874" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dc739df99 code=0x0 [ 209.239643][ T287] EXT4-fs (loop0): unmounting filesystem. [ 209.289713][ T3548] 9pnet_fd: Insufficient options for proto=fd [ 209.295913][ T310] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 209.376739][ T3550] input: syz0 as /devices/virtual/input/input6 [ 209.405426][ T3550] set_capacity_and_notify: 2 callbacks suppressed [ 209.405461][ T3550] loop0: detected capacity change from 0 to 16 [ 209.432745][ T3550] erofs: (device loop0): mounted with root inode @ nid 36. [ 209.468292][ T3550] syz.0.875: attempt to access beyond end of device [ 209.468292][ T3550] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 209.494084][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.508645][ T3550] syz.0.875: attempt to access beyond end of device [ 209.508645][ T3550] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 209.509115][ T310] usb 2-1: not running at top speed; connect to a high speed hub [ 209.548505][ T3545] loop3: detected capacity change from 0 to 40427 [ 209.569684][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.582885][ T3545] F2FS-fs (loop3): fault_injection options not supported [ 209.596647][ T310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.605111][ T3545] F2FS-fs (loop3): fault_type options not supported [ 209.633501][ T310] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 209.655982][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.678491][ T310] usb 2-1: Product: syz [ 209.683744][ T3545] F2FS-fs (loop3): invalid crc value [ 209.692188][ T310] usb 2-1: Manufacturer: syz [ 209.705108][ T310] usb 2-1: SerialNumber: syz [ 209.708814][ T3555] loop0: detected capacity change from 0 to 512 [ 209.721754][ T3545] F2FS-fs (loop3): Found nat_bits in checkpoint [ 209.739265][ T3555] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 209.831295][ T3545] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 209.870494][ T3545] syz.3.873: attempt to access beyond end of device [ 209.870494][ T3545] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 209.895764][ T3545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=3545 comm=syz.3.873 [ 209.916930][ T3545] netlink: 44 bytes leftover after parsing attributes in process `syz.3.873'. [ 210.116533][ T28] audit: type=1400 audit(1785426260.859:322): avc: denied { watch watch_reads } for pid=3567 comm="syz.3.879" path="/file0" dev="ramfs" ino=32437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 210.139760][ T3568] FAULT_INJECTION: forcing a failure. [ 210.139760][ T3568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.185665][ T3568] CPU: 1 PID: 3568 Comm: syz.3.879 Not tainted syzkaller #0 [ 210.193090][ T3568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.199060][ T3570] loop2: detected capacity change from 0 to 512 [ 210.203181][ T3568] Call Trace: [ 210.203188][ T3568] [ 210.203197][ T3568] __dump_stack+0x21/0x24 [ 210.220013][ T3568] dump_stack_lvl+0x110/0x170 [ 210.224728][ T3568] ? __cfi_dump_stack_lvl+0x8/0x8 [ 210.229797][ T3568] dump_stack+0x15/0x24 [ 210.233990][ T3568] should_fail_ex+0x3bf/0x510 [ 210.237314][ T3570] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 210.238694][ T3568] should_fail+0xb/0x10 [ 210.254586][ T3568] should_fail_usercopy+0x1a/0x20 [ 210.259679][ T3568] _copy_to_user+0x1e/0x90 [ 210.264143][ T3568] simple_read_from_buffer+0xe9/0x160 [ 210.269557][ T3568] proc_fail_nth_read+0x1a6/0x220 [ 210.274623][ T3568] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 210.280210][ T3568] ? security_file_permission+0x94/0xb0 [ 210.285800][ T3568] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 210.291392][ T3568] vfs_read+0x286/0x930 [ 210.295573][ T3568] ? __cfi_vfs_read+0x10/0x10 [ 210.300276][ T3568] ? __kasan_check_write+0x14/0x20 [ 210.305429][ T3568] ? mutex_lock+0x93/0x1b0 [ 210.309905][ T3568] ? __cfi_mutex_lock+0x10/0x10 [ 210.314807][ T3568] ? __fdget_pos+0x2cd/0x380 [ 210.319442][ T3568] ? ksys_read+0x70/0x260 [ 210.323816][ T3568] ksys_read+0x14a/0x260 [ 210.328089][ T3568] ? __cfi_ksys_read+0x10/0x10 [ 210.332891][ T3568] ? debug_smp_processor_id+0x17/0x20 [ 210.338341][ T3568] __x64_sys_read+0x7b/0x90 [ 210.342891][ T3568] x64_sys_call+0x2f/0x9a0 [ 210.347345][ T3568] do_syscall_64+0x4c/0xa0 [ 210.351792][ T3568] ? clear_bhb_loop+0x30/0x80 [ 210.356480][ T3568] ? clear_bhb_loop+0x30/0x80 [ 210.361188][ T3568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.367126][ T3568] RIP: 0033:0x7f9c85d5e7ce [ 210.371563][ T3568] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 210.391187][ T3568] RSP: 002b:00007f9c86c23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.399620][ T3568] RAX: ffffffffffffffda RBX: 00007f9c86c246c0 RCX: 00007f9c85d5e7ce [ 210.407624][ T3568] RDX: 000000000000000f RSI: 00007f9c86c240a0 RDI: 0000000000000007 [ 210.415606][ T3568] RBP: 00007f9c86c24090 R08: 0000000000000000 R09: 0000000000000000 [ 210.423585][ T3568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.431569][ T3568] R13: 00007f9c86026038 R14: 00007f9c86025fa0 R15: 00007ffcb1dac948 [ 210.439553][ T3568] [ 210.734561][ T3578] fuse: Bad value for 'fd' [ 211.055407][ T3590] loop3: detected capacity change from 0 to 512 [ 211.081781][ T3590] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.208290][ T3559] loop0: detected capacity change from 0 to 131072 [ 211.835668][ T28] audit: type=1326 audit(1785426262.579:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.0.890" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f346419df99 code=0x0 [ 211.872311][ T310] usb 2-1: 0:1 : does not exist [ 211.901094][ T310] usb 2-1: USB disconnect, device number 11 [ 211.927277][ T3606] loop1: detected capacity change from 0 to 512 [ 211.937720][ T3607] 9pnet_fd: Insufficient options for proto=fd [ 211.955796][ T3606] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.973984][ T28] audit: type=1400 audit(1785426262.719:324): avc: denied { sys_module } for pid=3608 comm="syz.2.893" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 211.997704][ T3609] Invalid ELF header type: 2 != 1 [ 212.013692][ T28] audit: type=1400 audit(1785426262.749:325): avc: denied { module_load } for pid=3608 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 212.052315][ T3612] fuse: Bad value for 'fd' [ 212.399308][ T3623] loop4: detected capacity change from 0 to 512 [ 212.492893][ T3623] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.314588][ T28] audit: type=1400 audit(1785426264.059:326): avc: denied { write } for pid=3629 comm="syz.0.900" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 213.411757][ T3632] loop2: detected capacity change from 0 to 256 [ 213.479672][ T3632] FAT-fs (loop2): Directory bread(block 64) failed [ 213.505236][ T3642] loop4: detected capacity change from 0 to 512 [ 213.533342][ T3642] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.539581][ T3632] FAT-fs (loop2): Directory bread(block 65) failed [ 213.551788][ T3632] FAT-fs (loop2): Directory bread(block 66) failed [ 213.558318][ T3632] FAT-fs (loop2): Directory bread(block 67) failed [ 213.564954][ T3632] FAT-fs (loop2): Directory bread(block 68) failed [ 213.571544][ T3632] FAT-fs (loop2): Directory bread(block 69) failed [ 213.578117][ T3632] FAT-fs (loop2): Directory bread(block 70) failed [ 213.584852][ T3632] FAT-fs (loop2): Directory bread(block 71) failed [ 213.591474][ T3632] FAT-fs (loop2): Directory bread(block 72) failed [ 213.598007][ T3632] FAT-fs (loop2): Directory bread(block 73) failed [ 213.607105][ T3643] device bridge1 entered promiscuous mode [ 213.630408][ T28] audit: type=1400 audit(1785426264.369:327): avc: denied { mounton } for pid=3631 comm="syz.2.902" path="/168/file0/file0" dev="loop2" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 213.726752][ T3649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.907'. [ 213.759735][ T3651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.908'. [ 213.901208][ T3160] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 213.908861][ T310] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 213.941588][ T1258] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 214.014988][ T28] audit: type=1326 audit(1785426264.759:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.4.911" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bce39df99 code=0x0 [ 214.091343][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 214.097090][ T3160] usb 1-1: Using ep0 maxpacket: 32 [ 214.115715][ T3659] 9pnet_fd: Insufficient options for proto=fd [ 214.132897][ T1258] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.147296][ T1258] usb 4-1: not running at top speed; connect to a high speed hub [ 214.149503][ T3160] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.158870][ T1258] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.166288][ T3160] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.178112][ T1258] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.188944][ T310] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 214.198237][ T1258] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 214.204677][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.214842][ T1258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.229293][ T1258] usb 4-1: Product: syz [ 214.229819][ T3160] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 214.234102][ T1258] usb 4-1: Manufacturer: syz [ 214.248093][ T1258] usb 4-1: SerialNumber: syz [ 214.251264][ T3160] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 214.261245][ T310] usb 3-1: Product: syz [ 214.265430][ T310] usb 3-1: Manufacturer: syz [ 214.267432][ T3664] futex_wake_op: syz.1.912 tries to shift op by 144; fix this program [ 214.270050][ T310] usb 3-1: SerialNumber: syz [ 214.271129][ T3160] usb 1-1: Product: syz [ 214.291424][ T310] r8152-cfgselector 3-1: config 0 descriptor?? [ 214.297678][ T3160] usb 1-1: Manufacturer: syz [ 214.307873][ T3160] hub 1-1:4.0: USB hub found [ 214.505406][ T310] r8152-cfgselector 3-1: Unknown version 0x0000 [ 214.512790][ T3160] hub 1-1:4.0: 2 ports detected [ 214.719709][ T310] r8152-cfgselector 3-1: Unknown version 0x0800 [ 214.922485][ T310] r8152-cfgselector 3-1: USB disconnect, device number 14 [ 215.669250][ T3682] loop2: detected capacity change from 0 to 512 [ 215.676105][ T3682] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.734819][ T3160] hub 1-1:4.0: activate --> -90 [ 215.740086][ T3684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.918'. [ 215.777504][ T3686] FAULT_INJECTION: forcing a failure. [ 215.777504][ T3686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.790900][ T3686] CPU: 0 PID: 3686 Comm: syz.4.919 Not tainted syzkaller #0 [ 215.798222][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.808332][ T3686] Call Trace: [ 215.811628][ T3686] [ 215.814579][ T3686] __dump_stack+0x21/0x24 [ 215.818938][ T3686] dump_stack_lvl+0x110/0x170 [ 215.823641][ T3686] ? __cfi_dump_stack_lvl+0x8/0x8 [ 215.828686][ T3686] ? avc_has_perm_noaudit+0x30a/0x490 [ 215.834082][ T3686] dump_stack+0x15/0x24 [ 215.838264][ T3686] should_fail_ex+0x3bf/0x510 [ 215.843001][ T3686] should_fail+0xb/0x10 [ 215.847175][ T3686] should_fail_usercopy+0x1a/0x20 [ 215.852210][ T3686] _copy_from_user+0x1e/0xc0 [ 215.856836][ T3686] kvm_arch_vm_ioctl+0x5ca/0x1510 [ 215.861891][ T3686] ? __cfi_kvm_arch_vm_ioctl+0x10/0x10 [ 215.867402][ T3686] ? __cfi_avc_has_perm+0x10/0x10 [ 215.872462][ T3686] ? is_bpf_text_address+0x177/0x190 [ 215.877781][ T3686] ? __kernel_text_address+0xd/0x30 [ 215.883021][ T3686] ? unwind_get_return_address+0x4d/0x90 [ 215.888682][ T3686] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 215.894858][ T3686] ? arch_stack_walk+0xfc/0x150 [ 215.899741][ T3686] ? stack_trace_save+0xa6/0xf0 [ 215.904626][ T3686] ? __stack_depot_save+0x36/0x490 [ 215.909763][ T3686] ? _parse_integer_limit+0x18e/0x1d0 [ 215.915141][ T3686] ? __asan_set_shadow_00+0xe/0x10 [ 215.920276][ T3686] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 215.925148][ T3686] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 215.930789][ T3686] kvm_vm_ioctl+0x78a/0xb00 [ 215.935325][ T3686] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 215.938558][ T841] usb 1-1: USB disconnect, device number 12 [ 215.940375][ T3686] ? ioctl_has_perm+0x1b8/0x4f0 [ 215.951135][ T3686] ? memcpy+0x56/0x70 [ 215.955156][ T3686] ? ioctl_has_perm+0x40f/0x4f0 [ 215.960129][ T3686] ? has_cap_mac_admin+0x370/0x370 [ 215.965265][ T3686] ? vfs_write+0xa51/0xd00 [ 215.969696][ T3686] ? selinux_file_ioctl+0x3ad/0x4c0 [ 215.974914][ T3686] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 215.980492][ T3686] ? mutex_unlock+0x8f/0x230 [ 215.985101][ T3686] ? __cfi_mutex_unlock+0x10/0x10 [ 215.990147][ T3686] ? __fget_files+0x2d1/0x330 [ 215.994839][ T3686] ? security_file_ioctl+0x95/0xc0 [ 215.999971][ T3686] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 216.005006][ T3686] __se_sys_ioctl+0x12f/0x1b0 [ 216.009700][ T3686] __x64_sys_ioctl+0x7b/0x90 [ 216.014296][ T3686] x64_sys_call+0x58b/0x9a0 [ 216.018817][ T3686] do_syscall_64+0x4c/0xa0 [ 216.023256][ T3686] ? clear_bhb_loop+0x30/0x80 [ 216.027937][ T3686] ? clear_bhb_loop+0x30/0x80 [ 216.032618][ T3686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.038525][ T3686] RIP: 0033:0x7f7bce39df99 [ 216.042954][ T3686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.062583][ T3686] RSP: 002b:00007f7bcf334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.071001][ T3686] RAX: ffffffffffffffda RBX: 00007f7bce625fa0 RCX: 00007f7bce39df99 [ 216.078981][ T3686] RDX: 0000200000000000 RSI: 000000000000ae71 RDI: 0000000000000004 [ 216.086959][ T3686] RBP: 00007f7bcf334090 R08: 0000000000000000 R09: 0000000000000000 [ 216.094938][ T3686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.102917][ T3686] R13: 00007f7bce626038 R14: 00007f7bce625fa0 R15: 00007ffdb922c638 [ 216.110907][ T3686] [ 216.114701][ T3160] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 216.286330][ T3699] loop4: detected capacity change from 0 to 2048 [ 216.444438][ T3702] device bridge1 entered promiscuous mode [ 216.556117][ T3699] Alternate GPT is invalid, using primary GPT. [ 216.616028][ T3705] hub 8-0:1.0: USB hub found [ 216.621111][ T3705] hub 8-0:1.0: 1 port detected [ 216.659742][ T3699] loop4: p2 p3 p7 [ 216.784733][ T1258] usb 4-1: 0:1 : does not exist [ 216.793669][ T103] Alternate GPT is invalid, using primary GPT. [ 216.798739][ T1258] usb 4-1: USB disconnect, device number 12 [ 216.808730][ T103] loop4: p2 p3 p7 [ 216.961252][ T6] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 217.049878][ T3716] device bridge1 entered promiscuous mode [ 217.098748][ T2511] udevd[2511]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 217.492625][ T6] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.517548][ T6] usb 3-1: not running at top speed; connect to a high speed hub [ 217.525551][ T3727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.930'. [ 217.542141][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.571903][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.601247][ T1258] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 217.610442][ T6] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 217.630703][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.643827][ T6] usb 3-1: Product: syz [ 217.648027][ T6] usb 3-1: Manufacturer: syz [ 217.654403][ T6] usb 3-1: SerialNumber: syz [ 217.802650][ T1258] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.812834][ T1258] usb 4-1: not running at top speed; connect to a high speed hub [ 217.828551][ T1258] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.846663][ T3745] loop0: detected capacity change from 0 to 4096 [ 217.853204][ T1258] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.864197][ T1258] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 217.873321][ T1258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.881473][ T1258] usb 4-1: Product: syz [ 217.885753][ T1258] usb 4-1: Manufacturer: syz [ 217.890398][ T1258] usb 4-1: SerialNumber: syz [ 217.903410][ T3745] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 217.914598][ T3745] EXT4-fs (loop0): Test dummy encryption mode enabled [ 217.954366][ T3745] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 217.965248][ T3745] System zones: 0-5 [ 217.971092][ T3745] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 217.986309][ T3750] device bridge1 entered promiscuous mode [ 218.551201][ T60] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 218.715695][ T287] EXT4-fs (loop0): unmounting filesystem. [ 218.732882][ T60] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.743613][ T60] usb 2-1: not running at top speed; connect to a high speed hub [ 218.752385][ T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.762796][ T60] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.774739][ T60] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 218.784173][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.792269][ T60] usb 2-1: Product: syz [ 218.796565][ T60] usb 2-1: Manufacturer: syz [ 218.801444][ T60] usb 2-1: SerialNumber: syz [ 218.851238][ T841] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 218.959769][ T3764] loop0: detected capacity change from 0 to 4096 [ 218.968414][ T3764] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 218.977507][ T3764] EXT4-fs (loop0): Test dummy encryption mode enabled [ 218.987489][ T3764] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 218.995842][ T3764] System zones: 0-5 [ 219.001253][ T3764] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 219.110036][ T841] usb 5-1: config index 0 descriptor too short (expected 8192, got 82) [ 219.118466][ T841] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.128869][ T841] usb 5-1: config 0 has no interfaces? [ 219.140202][ T841] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 219.149378][ T841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.157460][ T841] usb 5-1: Product: syz [ 219.161715][ T841] usb 5-1: Manufacturer: syz [ 219.166383][ T841] usb 5-1: SerialNumber: syz [ 219.171951][ T841] usb 5-1: config 0 descriptor?? [ 219.286569][ T3770] device syzkaller0 entered promiscuous mode [ 219.296482][ T3770] tipc: Enabled bearer , priority 0 [ 219.304241][ T3769] tipc: Resetting bearer [ 219.312459][ T3769] tipc: Disabling bearer [ 219.352216][ T6] usb 3-1: 0:1 : does not exist [ 219.380178][ T6] usb 3-1: USB disconnect, device number 15 [ 219.397547][ T1298] udevd[1298]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 219.517030][ T3776] loop2: detected capacity change from 0 to 512 [ 219.536964][ T3776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 219.647487][ T290] EXT4-fs (loop2): unmounting filesystem. [ 219.673766][ T3779] fuse: Invalid rootmode [ 219.765182][ T3781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.943'. [ 219.818707][ T287] EXT4-fs (loop0): unmounting filesystem. [ 219.944847][ T1258] usb 4-1: 0:1 : does not exist [ 219.959460][ T1258] usb 4-1: USB disconnect, device number 13 [ 220.030094][ T3785] loop2: detected capacity change from 0 to 40427 [ 220.039157][ T3792] loop0: detected capacity change from 0 to 512 [ 220.063116][ T3785] F2FS-fs (loop2): fault_injection options not supported [ 220.072237][ T3785] F2FS-fs (loop2): fault_type options not supported [ 220.093936][ T3785] F2FS-fs (loop2): invalid crc value [ 220.100812][ T3792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 220.113722][ T3785] F2FS-fs (loop2): Found nat_bits in checkpoint [ 220.157128][ T3785] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 220.174934][ T3785] syz.2.945: attempt to access beyond end of device [ 220.174934][ T3785] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 220.189718][ T3785] selinux_netlink_send: 2 callbacks suppressed [ 220.189735][ T3785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=3785 comm=syz.2.945 [ 220.208611][ T3785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=3785 comm=syz.2.945 [ 220.221204][ T3785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=3785 comm=syz.2.945 [ 220.241014][ T3785] netlink: 44 bytes leftover after parsing attributes in process `syz.2.945'. [ 220.251736][ T287] EXT4-fs (loop0): unmounting filesystem. [ 220.342264][ T28] audit: type=1400 audit(1785426271.089:329): avc: denied { name_bind } for pid=3803 comm="syz.2.950" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 220.387831][ T3806] device syzkaller0 entered promiscuous mode [ 220.396597][ T3806] tipc: Enabled bearer , priority 0 [ 220.404314][ T3805] tipc: Resetting bearer [ 220.411412][ T3805] tipc: Disabling bearer [ 220.471262][ T1258] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 220.480766][ T3808] loop0: detected capacity change from 0 to 512 [ 220.496107][ T3808] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 220.510125][ T28] audit: type=1400 audit(1785426271.259:330): avc: denied { mounton } for pid=3807 comm="syz.0.952" path="/201/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 220.533068][ T28] audit: type=1400 audit(1785426271.259:331): avc: denied { setattr } for pid=3807 comm="syz.0.952" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.555293][ T28] audit: type=1400 audit(1785426271.259:332): avc: denied { write } for pid=3807 comm="syz.0.952" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.577312][ T28] audit: type=1400 audit(1785426271.259:333): avc: denied { remove_name } for pid=3807 comm="syz.0.952" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.600396][ T28] audit: type=1400 audit(1785426271.259:334): avc: denied { unlink } for pid=3807 comm="syz.0.952" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 220.623072][ T28] audit: type=1400 audit(1785426271.259:335): avc: denied { create } for pid=3807 comm="syz.0.952" name="#21" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 220.643481][ T28] audit: type=1400 audit(1785426271.279:336): avc: denied { link } for pid=3807 comm="syz.0.952" name="#21" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 220.647986][ T287] EXT4-fs (loop0): unmounting filesystem. [ 220.665313][ T28] audit: type=1400 audit(1785426271.279:337): avc: denied { rename } for pid=3807 comm="syz.0.952" name="#22" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 220.665343][ T28] audit: type=1400 audit(1785426271.279:338): avc: denied { remove_name } for pid=3807 comm="syz.0.952" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.715827][ T1258] usb 4-1: Using ep0 maxpacket: 32 [ 220.723188][ T1258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.737090][ T1258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.747535][ T1258] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 220.755271][ T3812] fuse: Bad value for 'rootmode' [ 220.757321][ T1258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.770458][ T1258] usb 4-1: config 0 descriptor?? [ 220.776606][ T1258] hub 4-1:0.0: USB hub found [ 220.875246][ T60] usb 2-1: 0:1 : does not exist [ 220.887092][ T60] usb 2-1: USB disconnect, device number 12 [ 220.930326][ T3817] loop1: detected capacity change from 0 to 4096 [ 220.970075][ T3817] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 220.980861][ T3794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.996216][ T3823] loop0: detected capacity change from 0 to 512 [ 221.002331][ T3794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.011446][ T1258] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 221.020109][ T3817] EXT4-fs (loop1): Test dummy encryption mode enabled [ 221.029885][ T1258] usbhid 4-1:0.0: can't add hid device: -71 [ 221.044151][ T3817] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 221.044167][ T1258] usbhid: probe of 4-1:0.0 failed with error -71 [ 221.071348][ T3817] System zones: 0-5 [ 221.072967][ T1258] usb 4-1: USB disconnect, device number 14 [ 221.092881][ T3817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 221.105071][ T3823] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 221.122269][ T1298] udevd[1298]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.306755][ T287] EXT4-fs (loop0): unmounting filesystem. [ 221.444844][ T3831] loop0: detected capacity change from 0 to 2048 [ 221.472713][ T3831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 221.482419][ T3831] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.556952][ T841] usb 5-1: USB disconnect, device number 12 [ 221.587655][ T3834] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.958: bg 0: block 345: padding at end of block bitmap is not set [ 221.602157][ T3834] EXT4-fs (loop0): Remounting filesystem read-only [ 221.632727][ T287] EXT4-fs (loop0): unmounting filesystem. [ 221.654502][ T3842] 9pnet_fd: Insufficient options for proto=fd [ 221.771152][ T289] EXT4-fs (loop1): unmounting filesystem. [ 222.020014][ T3847] device syzkaller0 entered promiscuous mode [ 222.166796][ T3847] tipc: Enabled bearer , priority 0 [ 222.192100][ T3853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.963'. [ 222.208097][ T3844] loop0: detected capacity change from 0 to 40427 [ 222.220521][ T3846] tipc: Resetting bearer [ 222.229997][ T3846] tipc: Disabling bearer [ 222.263700][ T3844] F2FS-fs (loop0): fault_injection options not supported [ 222.280233][ T3844] F2FS-fs (loop0): fault_type options not supported [ 222.346948][ T3844] F2FS-fs (loop0): invalid crc value [ 222.354024][ T3844] F2FS-fs (loop0): Found nat_bits in checkpoint [ 222.443907][ T3863] fuse: Bad value for 'rootmode' [ 222.524152][ T3844] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 222.545766][ T3844] syz.0.960: attempt to access beyond end of device [ 222.545766][ T3844] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 222.560470][ T3844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=3844 comm=syz.0.960 [ 222.573139][ T3844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=3844 comm=syz.0.960 [ 222.586301][ T3844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=3844 comm=syz.0.960 [ 222.622639][ T3844] netlink: 44 bytes leftover after parsing attributes in process `syz.0.960'. [ 224.567820][ T3876] device bridge1 entered promiscuous mode [ 224.816223][ T3886] fuse: Bad value for 'group_id' [ 224.849326][ T3871] device bridge1 entered promiscuous mode [ 225.281698][ T1258] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 225.826318][ T309] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 225.868032][ T1258] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.889250][ T1258] usb 4-1: not running at top speed; connect to a high speed hub [ 225.948144][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 225.948159][ T28] audit: type=1326 audit(1785426276.689:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.1.974" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e14d9df99 code=0x0 [ 225.989890][ T3894] loop4: detected capacity change from 0 to 2048 [ 226.017756][ T309] usb 1-1: unable to get BOS descriptor or descriptor too short [ 226.033835][ T309] usb 1-1: not running at top speed; connect to a high speed hub [ 226.051875][ T3897] 9pnet_fd: Insufficient options for proto=fd [ 226.058273][ T309] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.144946][ T309] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.154815][ T3894] Alternate GPT is invalid, using primary GPT. [ 226.155719][ T309] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 226.170207][ T3894] loop4: p2 p3 p7 [ 226.173467][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.182630][ T309] usb 1-1: Product: syz [ 226.186840][ T309] usb 1-1: Manufacturer: syz [ 226.191678][ T309] usb 1-1: SerialNumber: syz [ 226.204320][ T3890] loop2: detected capacity change from 0 to 40427 [ 226.234440][ T3890] F2FS-fs (loop2): fault_injection options not supported [ 226.242319][ T3890] F2FS-fs (loop2): fault_type options not supported [ 226.249238][ T3894] hub 8-0:1.0: USB hub found [ 226.257261][ T3894] hub 8-0:1.0: 1 port detected [ 226.279548][ T3890] F2FS-fs (loop2): invalid crc value [ 226.331535][ T3890] F2FS-fs (loop2): Found nat_bits in checkpoint [ 226.436786][ T3890] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 226.470993][ T1258] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 226.485794][ T1258] usb 4-1: can't read configurations, error -71 [ 226.521368][ T3905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.975'. [ 226.563957][ T3890] syz.2.972: attempt to access beyond end of device [ 226.563957][ T3890] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 226.603040][ T3890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=3890 comm=syz.2.972 [ 226.628970][ T3890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=3890 comm=syz.2.972 [ 226.659863][ T3890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=3890 comm=syz.2.972 [ 226.686307][ T309] usb 1-1: 0:1 : does not exist [ 226.695682][ T3890] netlink: 44 bytes leftover after parsing attributes in process `syz.2.972'. [ 226.709591][ T309] usb 1-1: USB disconnect, device number 13 [ 226.733875][ T3909] device syzkaller0 entered promiscuous mode [ 226.749252][ T3909] tipc: Enabled bearer , priority 0 [ 226.801128][ T3908] tipc: Resetting bearer [ 226.808433][ T3908] tipc: Disabling bearer [ 226.842765][ T3911] loop4: detected capacity change from 0 to 512 [ 227.051487][ T3911] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 227.122542][ T3920] fuse: Bad value for 'rootmode' [ 227.168408][ T288] EXT4-fs (loop4): unmounting filesystem. [ 227.228049][ T3934] loop1: detected capacity change from 0 to 512 [ 227.262715][ T3930] loop3: detected capacity change from 0 to 512 [ 227.270876][ T3934] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 227.795156][ T3938] device bridge1 entered promiscuous mode [ 227.834982][ T3940] device bridge2 entered promiscuous mode [ 227.853226][ T3930] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 227.951504][ T309] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 228.027780][ T289] EXT4-fs (loop1): unmounting filesystem. [ 228.131275][ T309] usb 3-1: Using ep0 maxpacket: 8 [ 228.138251][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.181293][ T3160] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 228.198863][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.234651][ T309] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 228.277861][ T309] usb 3-1: New USB device found, idVendor=056a, idProduct=0494, bcdDevice= 0.00 [ 228.310223][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.343296][ T309] usb 3-1: config 0 descriptor?? [ 228.372959][ T3160] usb 1-1: unable to get BOS descriptor or descriptor too short [ 228.388068][ T3160] usb 1-1: not running at top speed; connect to a high speed hub [ 228.424022][ T291] EXT4-fs (loop3): unmounting filesystem. [ 228.438139][ T3160] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.480891][ T3160] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.531883][ T3160] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 228.687158][ T3160] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.695607][ T3160] usb 1-1: Product: syz [ 228.699845][ T3160] usb 1-1: Manufacturer: syz [ 228.704581][ T3160] usb 1-1: SerialNumber: syz [ 228.770885][ T28] audit: type=1400 audit(1785426279.509:349): avc: denied { sqpoll } for pid=3950 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 228.914848][ T28] audit: type=1400 audit(1785426279.659:350): avc: denied { mount } for pid=3928 comm="syz.2.984" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 228.946550][ T3954] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 228.982536][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 228.989899][ T3954] audit: out of memory in audit_log_start [ 229.008393][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 229.032561][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 229.054899][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 229.063845][ T3946] loop4: detected capacity change from 0 to 40427 [ 229.070558][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 229.103758][ T3946] F2FS-fs (loop4): invalid crc value [ 229.130271][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 229.141022][ T3946] F2FS-fs (loop4): Found nat_bits in checkpoint [ 229.163328][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 229.199801][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.242618][ T3960] loop3: detected capacity change from 0 to 40427 [ 230.273990][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.282974][ T3960] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 230.291108][ T3960] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 230.300656][ T3960] F2FS-fs (loop3): invalid crc value [ 230.312383][ T3160] usb 1-1: 0:1 : does not exist [ 230.327696][ T3160] usb 1-1: USB disconnect, device number 14 [ 230.344620][ T28] audit: type=1326 audit(1785426281.089:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.0.991" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f346419df99 code=0x0 [ 230.367778][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.385068][ T3960] F2FS-fs (loop3): Found nat_bits in checkpoint [ 230.402418][ T3946] F2FS-fs (loop4): Start checkpoint disabled! [ 230.414581][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.425043][ T3967] device syzkaller0 entered promiscuous mode [ 230.433647][ T3946] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 230.441138][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.450085][ T3946] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 230.450387][ T3967] tipc: Enabled bearer , priority 0 [ 230.464817][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.471762][ T3960] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 230.478845][ T3960] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 230.488190][ T3970] 9pnet_fd: Insufficient options for proto=fd [ 230.526352][ T3966] tipc: Resetting bearer [ 230.540930][ T3966] tipc: Disabling bearer [ 230.567224][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.574198][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.581310][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.588263][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.595271][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.602235][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.609365][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.616311][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.623258][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.632816][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.639774][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.655676][ T3946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 230.665648][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.672774][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.680630][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.687785][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.695287][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.702362][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.710878][ T3973] fuse: Unknown parameter 'roïtmode' [ 230.744535][ T309] wacom 0003:056A:0494.0001: unknown main item tag 0x0 [ 230.753996][ T3971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 230.768426][ T309] wacom 0003:056A:0494.0001: Unknown device_type for 'HID 056a:0494'. Ignoring. [ 230.794524][ T309] usb 3-1: USB disconnect, device number 16 [ 230.808846][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 230.827496][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.840347][ T3976] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 230.846119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 230.870304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.900080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.911484][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.919974][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.928560][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.937128][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 230.975160][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 230.999986][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 231.024826][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 231.035196][ T3986] fuse: Unknown parameter 'use00000000000000000000' [ 231.051773][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 231.067372][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 231.408592][ T3999] loop2: detected capacity change from 0 to 256 [ 231.433333][ T3999] exfat: Bad value for 'uid' [ 231.469680][ T4002] loop0: detected capacity change from 0 to 512 [ 231.510835][ T4002] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 231.530784][ T28] audit: type=1400 audit(1785426282.269:352): avc: denied { write } for pid=3996 comm="syz.2.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 231.590023][ T3994] loop1: detected capacity change from 0 to 40427 [ 231.597298][ T3994] F2FS-fs (loop1): fault_injection options not supported [ 231.604517][ T3994] F2FS-fs (loop1): fault_type options not supported [ 231.612462][ T3994] F2FS-fs (loop1): invalid crc value [ 231.619006][ T3994] F2FS-fs (loop1): Found nat_bits in checkpoint [ 231.659653][ T3994] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 231.674559][ T347] kworker/u4:6: attempt to access beyond end of device [ 231.674559][ T347] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 231.693035][ T287] EXT4-fs (loop0): unmounting filesystem. [ 231.757585][ T3994] syz.1.998: attempt to access beyond end of device [ 231.757585][ T3994] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 231.804568][ T3994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=3994 comm=syz.1.998 [ 231.837382][ T3994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=3994 comm=syz.1.998 [ 231.941302][ T3994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=3994 comm=syz.1.998 [ 231.969981][ T3994] netlink: 44 bytes leftover after parsing attributes in process `syz.1.998'. [ 232.145880][ T28] audit: type=1326 audit(1785426282.879:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.2.999" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc739df99 code=0x7fc00000 [ 232.243909][ T4023] loop3: detected capacity change from 0 to 4096 [ 232.274955][ T4023] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 232.298875][ T4023] EXT4-fs (loop3): Test dummy encryption mode enabled [ 232.320511][ T4023] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 232.335545][ T4023] System zones: 0-5 [ 232.352957][ T4023] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 232.544746][ T4036] loop2: detected capacity change from 0 to 512 [ 232.693979][ T4036] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 232.859319][ T290] EXT4-fs (loop2): unmounting filesystem. [ 233.027020][ T28] audit: type=1326 audit(1785426283.769:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.1010" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f346419df99 code=0x0 [ 233.090988][ T291] EXT4-fs (loop3): unmounting filesystem. [ 233.098227][ T4045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 233.129702][ T4050] 9pnet_fd: Insufficient options for proto=fd [ 233.178365][ T4045] bridge1: port 1(veth9) entered blocking state [ 233.213212][ T4045] bridge1: port 1(veth9) entered disabled state [ 233.227645][ T4045] device veth9 entered promiscuous mode [ 233.246472][ T4054] bridge1: port 2(veth0_to_bond) entered blocking state [ 233.271314][ T4054] bridge1: port 2(veth0_to_bond) entered disabled state [ 233.289076][ T4054] device veth0_to_bond entered promiscuous mode [ 233.522039][ T4057] device bridge1 entered promiscuous mode [ 233.541356][ T28] audit: type=1400 audit(1785426284.249:355): avc: denied { ioctl } for pid=4058 comm="syz.2.1012" path="socket:[35428]" dev="sockfs" ino=35428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.741212][ T309] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 233.932646][ T309] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.951037][ T309] usb 4-1: not running at top speed; connect to a high speed hub [ 233.959839][ T309] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.982500][ T309] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.005117][ T309] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 234.026502][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.035145][ T309] usb 4-1: Product: syz [ 234.041345][ T309] usb 4-1: Manufacturer: syz [ 234.051956][ T309] usb 4-1: SerialNumber: syz [ 234.059305][ T4071] loop1: detected capacity change from 0 to 1024 [ 234.071213][ T292] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 234.122105][ T4071] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #3: block 1: comm syz.1.1015: lblock 1 mapped to illegal pblock 1 (length 1) [ 234.177270][ T4071] EXT4-fs (loop1): Remounting filesystem read-only [ 234.197358][ T4071] Quota error (device loop1): write_blk: dquota write failed [ 234.225081][ T4071] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 234.242056][ T4071] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.1015: Failed to acquire dquot type 0 [ 234.253872][ T292] usb 3-1: device descriptor read/64, error -71 [ 234.319133][ T4071] EXT4-fs (loop1): Remounting filesystem read-only [ 234.331144][ T4071] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.1015: Freeing blocks not in datazone - block = 0, count = 4096 [ 234.345128][ T4071] EXT4-fs (loop1): Remounting filesystem read-only [ 234.351984][ T4071] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1015: Invalid inode bitmap blk 0 in block_group 0 [ 234.371288][ T347] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 234.388724][ T4071] EXT4-fs (loop1): Remounting filesystem read-only [ 234.404783][ T4071] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 234.413703][ T4071] EXT4-fs (loop1): Remounting filesystem read-only [ 234.420287][ T4071] EXT4-fs (loop1): 1 orphan inode deleted [ 234.426695][ T4071] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 234.430668][ T347] EXT4-fs (loop1): Remounting filesystem read-only [ 234.453130][ T347] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 234.482683][ T4071] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.1015: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 234.491507][ T347] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:6: Failed to release dquot type 0 [ 234.520099][ T4071] EXT4-fs (loop1): Remounting filesystem read-only [ 234.539121][ T347] EXT4-fs (loop1): Remounting filesystem read-only [ 234.545809][ T292] usb 3-1: device descriptor read/64, error -71 [ 234.614469][ T289] EXT4-fs (loop1): unmounting filesystem. [ 234.797334][ T4089] loop1: detected capacity change from 0 to 512 [ 234.820462][ T4089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 234.829605][ T292] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 234.915596][ T289] EXT4-fs (loop1): unmounting filesystem. [ 234.965026][ T4092] loop1: detected capacity change from 0 to 4096 [ 234.984352][ T4092] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.993409][ T4092] EXT4-fs (loop1): Test dummy encryption mode enabled [ 235.001390][ T292] usb 3-1: device descriptor read/64, error -71 [ 235.019925][ T4092] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 235.030525][ T4092] System zones: 0-5 [ 235.036574][ T4092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 235.271308][ T292] usb 3-1: device descriptor read/64, error -71 [ 235.427468][ T4097] device syzkaller0 entered promiscuous mode [ 235.437553][ T4097] tipc: Enabled bearer , priority 0 [ 235.445826][ T4096] tipc: Resetting bearer [ 235.454605][ T4096] tipc: Disabling bearer [ 235.501308][ T292] usb usb3-port1: attempt power cycle [ 235.521581][ T28] audit: type=1400 audit(1785426286.259:356): avc: denied { search } for pid=4098 comm="syz.0.1023" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 235.560992][ T28] audit: type=1400 audit(1785426286.269:357): avc: denied { write } for pid=4098 comm="syz.0.1023" name="buffer_size_kb" dev="tracefs" ino=12954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 235.584528][ T28] audit: type=1400 audit(1785426286.269:358): avc: denied { open } for pid=4098 comm="syz.0.1023" path="/218/tracefs_dir/buffer_size_kb" dev="tracefs" ino=12954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 235.613481][ T4099] loop0: detected capacity change from 0 to 256 [ 235.659895][ T4102] loop0: detected capacity change from 0 to 512 [ 235.675677][ T4102] FAT-fs (loop0): error, corrupted file size (i_pos 0, 8960) [ 235.686431][ T4102] FAT-fs (loop0): error, corrupted file size (i_pos 0, 8960) [ 235.724660][ T4105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1025'. [ 235.802085][ T4102] FAT-fs (loop0): error, corrupted file size (i_pos 0, 8960) [ 235.818996][ T289] EXT4-fs (loop1): unmounting filesystem. [ 235.930484][ T4110] device syzkaller0 entered promiscuous mode [ 235.941136][ T4110] tipc: Enabled bearer , priority 0 [ 235.948445][ T4111] 9pnet_fd: Insufficient options for proto=fd [ 235.951541][ T292] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 235.962700][ T4109] tipc: Resetting bearer [ 235.982773][ T4109] tipc: Disabling bearer [ 236.033887][ T292] usb 3-1: device descriptor read/8, error -71 [ 236.253497][ T4117] device bridge2 entered promiscuous mode [ 236.947107][ T309] usb 4-1: 0:1 : does not exist [ 236.972478][ T309] usb 4-1: USB disconnect, device number 17 [ 238.755053][ T292] usb 3-1: device descriptor read/8, error -71 [ 238.767554][ T4125] device bridge1 entered promiscuous mode [ 238.801241][ T3160] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 238.812717][ T2511] udevd[2511]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.897459][ T4132] device bridge1 entered promiscuous mode [ 238.921289][ T371] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 239.052584][ T3160] usb 1-1: unable to get BOS descriptor or descriptor too short [ 239.078174][ T3160] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 239.085846][ T3160] usb 1-1: can't read configurations, error -71 [ 239.092178][ T402] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 239.112302][ T371] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.123335][ T371] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 239.133495][ T309] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 239.143249][ T371] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.152401][ T371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.160409][ T371] usb 2-1: Product: syz [ 239.164667][ T371] usb 2-1: Manufacturer: syz [ 239.169308][ T371] usb 2-1: SerialNumber: syz [ 239.175726][ T371] cdc_mbim 2-1:1.0: skipping garbage [ 239.272824][ T402] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.291579][ T402] usb 5-1: config 0 has an invalid interface number: 77 but max is 0 [ 239.299698][ T402] usb 5-1: config 0 has no interface number 0 [ 239.311216][ T292] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 239.318846][ T402] usb 5-1: config 0 interface 77 has no altsetting 0 [ 239.331591][ T402] usb 5-1: language id specifier not provided by device, defaulting to English [ 239.342794][ T309] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.350992][ T309] usb 4-1: not running at top speed; connect to a high speed hub [ 239.359304][ T402] usb 5-1: New USB device found, idVendor=eb1a, idProduct=8179, bcdDevice= 1.f2 [ 239.360090][ T309] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.375598][ T402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.384912][ T309] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.386863][ T4124] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 239.398966][ T309] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 239.410588][ T402] usb 5-1: Product: syz [ 239.412734][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.421373][ T402] usb 5-1: Manufacturer: syz [ 239.424940][ T309] usb 4-1: Product: syz [ 239.428513][ T292] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.433222][ T309] usb 4-1: Manufacturer: syz [ 239.445278][ T309] usb 4-1: SerialNumber: syz [ 239.446997][ T402] usb 5-1: SerialNumber: syz [ 239.455986][ T292] usb 3-1: not running at top speed; connect to a high speed hub [ 239.472054][ T402] usb 5-1: config 0 descriptor?? [ 239.477549][ T292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.501237][ T292] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.511606][ T292] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 239.520671][ T292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.541216][ T292] usb 3-1: Product: syz [ 239.545499][ T292] usb 3-1: Manufacturer: syz [ 239.550122][ T292] usb 3-1: SerialNumber: syz [ 265.157214][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P4138 } 2534 jiffies s: 18001 root: 0x0/T [ 265.169220][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 270.091252][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 334.918084][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P4138 } 9510 jiffies s: 18001 root: 0x0/T [ 334.929909][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 339.681109][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 339.688094][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4138 [ 339.695428][ C1] (detected by 1, t=10003 jiffies, g=23841, q=360 ncpus=2) [ 339.702732][ C1] task:syz.0.1034 state:R running task stack:26184 pid:4138 ppid:287 flags:0x00004000 [ 339.713535][ C1] Call Trace: [ 339.716825][ C1] [ 339.719807][ C1] ? preempt_count_add+0x52/0x1b0 [ 339.724867][ C1] ? irqentry_exit+0x37/0x40 [ 339.729480][ C1] ? _raw_spin_lock+0x94/0xf0 [ 339.734183][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 339.739425][ C1] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 339.745269][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 339.751451][ C1] ? __cfi___sanitizer_cov_trace_cmp4+0x10/0x10 [ 339.757725][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 339.762606][ C1] ? page_pool_put_defragged_page+0x2c8/0x790 [ 339.768713][ C1] ? page_pool_refill_alloc_cache+0x514/0x610 [ 339.774821][ C1] ? debug_smp_processor_id+0x17/0x20 [ 339.780219][ C1] ? 0xffffffffa0005594 [ 339.784403][ C1] ? xdp_return_buff+0x9e/0x270 [ 339.789269][ C1] ? bpf_warn_invalid_xdp_action+0x28/0xf0 [ 339.795102][ C1] ? __local_bh_enable_ip+0x75/0x80 [ 339.800319][ C1] ? bpf_test_run_xdp_live+0x62b/0x1b00 [ 339.805893][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 339.810949][ C1] ? text_poke_copy+0x7d/0xa0 [ 339.815653][ C1] ? bpf_test_run_xdp_live+0x549/0x1b00 [ 339.821233][ C1] ? xdp_convert_md_to_buff+0x370/0x370 [ 339.826818][ C1] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 339.832735][ C1] ? __kasan_check_write+0x14/0x20 [ 339.837886][ C1] ? _copy_from_user+0x8f/0xc0 [ 339.842679][ C1] ? bpf_prog_test_run_xdp+0x757/0xf80 [ 339.848171][ C1] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 339.854016][ C1] ? __kasan_check_write+0x14/0x20 [ 339.859141][ C1] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 339.864995][ C1] ? bpf_prog_test_run+0x3b4/0x5c0 [ 339.870123][ C1] ? bpf_prog_query+0x270/0x270 [ 339.874994][ C1] ? selinux_bpf+0xce/0xf0 [ 339.879472][ C1] ? security_bpf+0x93/0xb0 [ 339.883999][ C1] ? __sys_bpf+0x5ee/0x850 [ 339.888433][ C1] ? bpf_link_show_fdinfo+0x330/0x330 [ 339.893848][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 339.899502][ C1] ? __x64_sys_bpf+0x7c/0x90 [ 339.904104][ C1] ? x64_sys_call+0x488/0x9a0 [ 339.908805][ C1] ? do_syscall_64+0x4c/0xa0 [ 339.913411][ C1] ? clear_bhb_loop+0x30/0x80 [ 339.918102][ C1] ? clear_bhb_loop+0x30/0x80 [ 339.922795][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.928894][ C1] [ 339.931936][ C1] rcu: rcu_preempt kthread starved for 502 jiffies! g23841 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 339.942972][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 339.952951][ C1] rcu: RCU grace-period kthread stack dump: [ 339.958844][ C1] task:rcu_preempt state:R running task stack:28352 pid:14 ppid:2 flags:0x00004000 [ 339.969638][ C1] Call Trace: [ 339.972956][ C1] [ 339.975897][ C1] __schedule+0xbe2/0x14b0 [ 339.980337][ C1] ? release_firmware_map_entry+0x190/0x190 [ 339.986251][ C1] schedule+0xbd/0x170 [ 339.990340][ C1] schedule_timeout+0x159/0x340 [ 339.995205][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 340.000595][ C1] ? __cfi_process_timeout+0x10/0x10 [ 340.005904][ C1] ? prepare_to_swait_event+0x30f/0x330 [ 340.011497][ C1] rcu_gp_fqs_loop+0x2ed/0x1100 [ 340.016374][ C1] ? __cfi_rcu_implicit_dynticks_qs+0x10/0x10 [ 340.022473][ C1] ? rcu_gp_init+0xf30/0xf30 [ 340.027080][ C1] rcu_gp_kthread+0x99/0x390 [ 340.031678][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 340.036890][ C1] ? try_to_wake_up+0x622/0x1250 [ 340.041855][ C1] ? __kasan_check_read+0x11/0x20 [ 340.046899][ C1] ? __kthread_parkme+0x13a/0x180 [ 340.052037][ C1] kthread+0x281/0x320 [ 340.056141][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 340.061352][ C1] ? __cfi_kthread+0x10/0x10 [ 340.065955][ C1] ret_from_fork+0x1f/0x30 [ 340.070393][ C1] [ 340.073446][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 340.079777][ C1] CPU: 1 PID: 15 Comm: rcub/0 Not tainted syzkaller #0 [ 340.086660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.096743][ C1] RIP: 0010:rt_mutex_slowlock_block+0x364/0x5a0 [ 340.103016][ C1] Code: 00 e8 a0 65 b6 fc 48 8b 45 b8 42 80 3c 28 00 74 08 4c 89 f7 e8 1d 63 b6 fc 49 f7 06 08 00 00 00 48 8d 7b 18 0f 85 94 00 00 00 <48> 8b 45 a8 42 80 3c 28 00 4c 8d 6b 10 74 0c 4c 89 ef e8 f5 62 b6 [ 340.122726][ C1] RSP: 0018:ffffc900000f7c00 EFLAGS: 00000246 [ 340.128804][ C1] RAX: 1ffff11020064a20 RBX: ffffffff871b4730 RCX: ffffffff85008dc0 [ 340.136791][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff871b4748 [ 340.144781][ C1] RBP: ffffc900000f7c90 R08: ffff888100325107 R09: 1ffff11020064a20 [ 340.152774][ C1] R10: dffffc0000000000 R11: ffffed1020064a21 R12: ffffc900000f7ce0 [ 340.160763][ C1] R13: dffffc0000000000 R14: ffff888100325100 R15: ffff88811e343cc0 [ 340.168752][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 340.177696][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.184297][ C1] CR2: 0000001b2ef0bff8 CR3: 0000000131ca1000 CR4: 00000000003506a0 [ 340.192287][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 340.200288][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 340.208278][ C1] Call Trace: [ 340.211573][ C1] [ 340.214520][ C1] rt_mutex_slowlock+0x18e/0x430 [ 340.219500][ C1] ? rt_mutex_adjust_prio_chain+0x1750/0x1750 [ 340.225592][ C1] ? __schedule+0xbea/0x14b0 [ 340.230207][ C1] rt_mutex_lock+0x10e/0x1c0 [ 340.234818][ C1] ? __cfi_rt_mutex_lock+0x10/0x10 [ 340.239953][ C1] ? __kasan_check_write+0x14/0x20 [ 340.245083][ C1] rcu_boost_kthread+0x237/0x7f0 [ 340.250044][ C1] kthread+0x281/0x320 [ 340.254129][ C1] ? __cfi_rcu_boost_kthread+0x10/0x10 [ 340.259607][ C1] ? __cfi_kthread+0x10/0x10 [ 340.264216][ C1] ret_from_fork+0x1f/0x30 [ 340.268676][ C1] [ 419.157168][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P4138 } 17934 jiffies s: 18001 root: 0x0/T [ 419.169015][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 428.811091][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 189s! [ 428.820053][ C0] Showing busy workqueues and worker pools: [ 428.825966][ C0] workqueue events: flags=0x0 [ 428.830658][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 428.830697][ C0] pending: kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker [ 428.830759][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 428.830794][ C0] pending: vmstat_shepherd, psi_avgs_work, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 428.830905][ C0] workqueue events_long: flags=0x0 [ 428.873287][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 428.873329][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work [ 428.873443][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 428.873475][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup [ 428.873557][ C0] workqueue events_unbound: flags=0x2 [ 428.919220][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=6 [ 428.919255][ C0] in-flight: 10:flush_to_ldisc [ 428.919285][ C0] pending: linkwatch_event, toggle_allocation_gate, flush_memcg_stats_dwork [ 428.919350][ C0] workqueue events_power_efficient: flags=0x80 [ 428.946863][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 428.946897][ C0] pending: neigh_periodic_work, neigh_managed_work, gc_worker, reg_check_chans_work, check_lifetime [ 428.946991][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 428.947020][ C0] in-flight: 4120:wg_ratelimiter_gc_entries [ 428.947044][ C0] pending: neigh_managed_work, neigh_periodic_work [ 428.947089][ C0] workqueue mm_percpu_wq: flags=0x8 [ 428.991768][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.991807][ C0] pending: vmstat_update [ 428.991835][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.991866][ C0] pending: vmstat_update [ 428.991894][ C0] workqueue writeback: flags=0x4a [ 429.021395][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.021424][ C0] pending: wb_workfn, wb_workfn [ 429.021456][ C0] workqueue kblockd: flags=0x18 [ 429.038702][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 429.038753][ C0] pending: blk_mq_timeout_work [ 429.038780][ C0] workqueue usb_hub_wq: flags=0x4 [ 429.056742][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 429.056772][ C0] in-flight: 371:hub_event hub_event, 309:hub_event hub_event [ 429.056842][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 429.056872][ C0] in-flight: 402:hub_event hub_event, 292:hub_event hub_event, 3160:hub_event hub_event [ 429.056965][ C0] workqueue dm_bufio_cache: flags=0x8 [ 429.095537][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.095571][ C0] pending: work_fn [ 429.095594][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 429.112952][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=7 [ 429.112981][ C0] pending: addrconf_verify_work [ 429.113000][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 429.113067][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.143956][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.143992][ C0] pending: wg_packet_encrypt_worker [ 429.144021][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.144050][ C0] pending: wg_packet_encrypt_worker [ 429.144077][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.175745][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.175776][ C0] pending: wg_packet_encrypt_worker [ 429.175809][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.175837][ C0] pending: wg_packet_encrypt_worker [ 429.175862][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.207487][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.207519][ C0] pending: wg_packet_encrypt_worker [ 429.207544][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.207571][ C0] pending: wg_packet_encrypt_worker [ 429.207596][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.239241][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.239273][ C0] pending: wg_packet_encrypt_worker [ 429.239302][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.239329][ C0] pending: wg_packet_encrypt_worker [ 429.239353][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.270996][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.271031][ C0] pending: wg_packet_encrypt_worker [ 429.271059][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.271094][ C0] pending: wg_packet_encrypt_worker [ 429.297466][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.302781][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.302813][ C0] pending: wg_packet_encrypt_worker [ 429.302844][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.302873][ C0] pending: wg_packet_encrypt_worker [ 429.302900][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.334552][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.334590][ C0] pending: wg_packet_encrypt_worker [ 429.334619][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.334660][ C0] pending: wg_packet_encrypt_worker [ 429.334687][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.366371][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.366407][ C0] pending: wg_packet_encrypt_worker [ 429.366434][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.366464][ C0] pending: wg_packet_encrypt_worker [ 429.366491][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.398215][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.398248][ C0] pending: wg_packet_encrypt_worker [ 429.398276][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.398306][ C0] pending: wg_packet_encrypt_worker [ 429.398335][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.429743][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.429778][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.429822][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.451110][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.451143][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.451191][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.472435][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.472467][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.472513][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.494024][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.494056][ C0] pending: wg_packet_encrypt_worker [ 429.494085][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.494112][ C0] pending: wg_packet_encrypt_worker [ 429.494138][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.525776][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.525808][ C0] pending: wg_packet_encrypt_worker [ 429.525836][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.525881][ C0] pending: wg_packet_encrypt_worker [ 429.525908][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.557574][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.557607][ C0] pending: wg_packet_encrypt_worker [ 429.557632][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.557659][ C0] pending: wg_packet_encrypt_worker [ 429.557686][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=189s workers=9 idle: 375 1907 310 6 19 [ 429.557740][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=189s workers=9 idle: 1258 841 930 1906 60 24 341 [ 429.557805][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=189s workers=9 idle: 347 484 308 43 314 344 8 886