last executing test programs: 1m6.842230991s ago: executing program 1 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) lseek(r4, 0x1a00000000000, 0x0) 1m5.847910406s ago: executing program 1 (id=276): prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_SET_IO_FLUSHER(0x34, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000300000040050ba017400001020301090269000301811006080b0001010120020904000000010120000900520904010000010220000904010101010220000905010920a77f5ae3082501010a81f9ff09040200000102200009040201010102200009058209203aa045e4444102953763daa9e7909d8a000606070825010256be743fdc2c9a03ee3014db857daff400fe9a29bcbfe823a734f351bdf89f78f8d2b128400974a3580f05c7b2135b6e5fdc86553eaf5b296251037f6edcee4a9e32d09a71123036fd4252dba8"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x8000}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0102, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000500)={0x4009, 0x40000b, 0x3, 0x7f, 0x3, "00a6400d0000cb55145789c5576cff00"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xb2) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000040)=0xd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f00000005c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e20, 0x2, @remote, 0x7}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="e06d9850bbce72ca"], 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmmsg$inet(r5, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0xc0) write$vga_arbiter(r3, 0x0, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) madvise(&(0x7f0000600000/0x3000)=nil, 0x3000, 0x10) 1m3.632071402s ago: executing program 1 (id=287): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002c00)={0x2020}, 0x2020) 1m3.615121593s ago: executing program 1 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x4bfb, &(0x7f0000000000)) capget(&(0x7f0000004b40)={0x19980330}, 0x0) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RREADDIR(r1, &(0x7f0000000240)={0xad, 0x29, 0x2, {0x5, [{{0x10, 0x3}, 0xc58, 0xe4, 0x7, './file0'}, {{0x10, 0x3, 0x2}, 0x8, 0xff, 0x16, './config/usb_gadget/g1'}, {{0x8947b4142aa5f0f0, 0x3, 0x5}, 0xfffffffffffeffff, 0x4, 0x5, './dev'}, {{0x40, 0x1, 0x7}, 0x8000000000000001, 0xf0, 0x20, './config/usb_gadget/g1/UDC/file0'}]}}, 0xad) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='h', 0x1) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x11) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) close(r3) 1m2.583967408s ago: executing program 1 (id=293): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000080)=[{0x40, 0x6, 0x90, 0xa3}, {0x6, 0x7, 0x2, 0x2}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x0, &(0x7f00000001c0)='veth0_virt_wifi\x00') sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x34, 0x12, 0x1, 0x70bd2a, 0x25dfdbde, {0x7, 0x0, 0x0, 0x0, 0x20, 0x5d000}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x34}}, 0x8000) 1m2.515873891s ago: executing program 1 (id=294): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x80800) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000040)=0x6945, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000080)=0x800000, 0x4) syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r3) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x7f7) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') shutdown(0xffffffffffffffff, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) splice(r4, 0x0, r6, 0x0, 0x1000, 0x0) accept4$unix(r1, &(0x7f0000000500), &(0x7f0000000580)=0x6e, 0x80800) write$FUSE_IOCTL(r5, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x0, {0x1000, 0x4, 0x200fff, 0x3}}, 0x20) mkdirat(r5, &(0x7f0000000380)='./file0\x00', 0x4) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xc031, 0xffffffffffffffff, 0xc51dd000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) socket$packet(0x11, 0x3, 0x300) 46.364075018s ago: executing program 32 (id=294): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x80800) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000040)=0x6945, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000080)=0x800000, 0x4) syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r3) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x7f7) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') shutdown(0xffffffffffffffff, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) splice(r4, 0x0, r6, 0x0, 0x1000, 0x0) accept4$unix(r1, &(0x7f0000000500), &(0x7f0000000580)=0x6e, 0x80800) write$FUSE_IOCTL(r5, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x0, {0x1000, 0x4, 0x200fff, 0x3}}, 0x20) mkdirat(r5, &(0x7f0000000380)='./file0\x00', 0x4) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xc031, 0xffffffffffffffff, 0xc51dd000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) socket$packet(0x11, 0x3, 0x300) 6.395969079s ago: executing program 3 (id=530): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000630104000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = io_uring_setup(0x383a, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x3d6}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000100)='net/hci\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4104, 0x9b08}, [@IFLA_MASTER={0x8, 0x3, r5}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x9}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x1, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, 0x0) setsockopt$inet6_int(r8, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x14, 0x0, &(0x7f0000000180)) getsockopt$inet6_buf(r8, 0x29, 0x6, 0x0, &(0x7f0000000100)) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.248181872s ago: executing program 5 (id=533): r0 = socket$unix(0x1, 0x1, 0x0) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0x2, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007"], 0x104}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 6.138934875s ago: executing program 5 (id=534): r0 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 6.120503595s ago: executing program 3 (id=535): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080)={[{@grpjquota}, {@grpjquota}, {@quota}], [{@obj_type={'obj_type', 0x3d, '/dev/loop'}}, {@subj_user={'subj_user', 0x3d, 'usrquota'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '/dev/loop'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\,(->#'}}]}, 0x1, 0x4ec, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r4) r5 = inotify_init1(0x800) fcntl$setstatus(r4, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r4, 0x8, r6) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfbffffffffff7ff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa2000b60) rmdir(&(0x7f00000000c0)='./control\x00') socket$inet6(0xa, 0x3, 0x38) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000240)="f7", 0x1, 0x4008005, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b7000000810003c3bfa300000000000007030000f0ffffff720af1fff8ffffff71a4f0ff0000000065040200000000ff2d400400000000003400000001ede4ff7b1300ff000000001d440100000000007a0a00fe00ffffffdb030000a1000000b500f7ff350900009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4fc2495f74baaa876156de9078d687348ef1e50becb19bc461e94f4061cff1db39271a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cd90eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a950812d7aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031bc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d86047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a97429ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10ef454c7702c98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad801800"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) 6.103900466s ago: executing program 5 (id=536): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000008c0)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@errors_remount}]}, 0xfa, 0x47f, &(0x7f0000000300)="$eJzs3M1vFOUfAPDvTF94/7U/xBcQpIpG4ktLy4scvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4t34XxhOejHqRROvejckxHAB9bJmdmZgWXbbLd12affzSab7PDNP93m+M/PsPjPP7gbQtYayP0nE9oj4PSIG8uzdBYbyh1s3Lk38fePSRBKVytt/JdVyN29cmiiLlv+3Lc9UKkV+U4N6L78XMT4zM3W+yI/Mn/1wZO7CxRenz46fnjo9dW7s+PEjh/f1Hxs72pY4s7hu7vlkdu/uE+9eeXPi5JX3f0rSyOOOujjaZSjfuw090+7KOmxHTTrprd2y/5c76UZnAp3UExHZ4eqr9v+B6Iktt7cNxOufd7RxwKqqVCqVRV6VFyrABpZEp1sAdEb5Rp9d/5bLGg09HgjXX8kvgLK4bxVLvqU30jyxv6/u+nZ7G+sfioiTC/98nS2xSvchAABqfZeNf15oNP5L45E80Z/9+V8xhzIYEf+PiJ0R8VBE7IqIhyOqZR+NiMeWWX/9DMm945/02n0H14Js/PdyMbd19/gvLYsM9hS5HdX4+5JT0zNTh4p9cjD6Np2aTqZGF6nj+9d++7LZttrxX7Zk9ZdjwaId13rrbtBNjs+PryTmWtc/i9jT2yj+JMppnCQidkfEnvusY/q53qbblo5/Ec2ftmWVbyKezY//QtTFX0qazk+OvnRs7OjI5piZOjRSnhX3+vnXy281q39F8bdBdvy3Njz/b8c/mGyOmLtw8Ux1vnZuWU+fdZ24/McXTa9piviz7tXK+X9iR3H+9yfvVFf0Fxs+Hp+fPz8a0Z+8ce/6sTvPVubL8ln8Bw807v87486eeDwi9kbEvoh4IrsoLNr+ZEQ8FREHFtkJP7769AdLxN/g+K/NXGkW/+RSxz9qj//yEz1nfri6dPybI6LZ8T9STR0s1rTy+tdqA1ey7wAAAGC9yD8Dn6TDt9NpOjycf4Z/V2xNZ2bn5p8/NfvRucl83nsw+tLyTtdAzf3Q0eLecJkfq8sfLu4bf9WzpZofnpidmex08NDltjXp/5k/ezrdOmDVtWEeDVin9H/oXvo/dKdE/4eupv9D92rU/z9tWnr421VtDLCmWn//v7rY95yAdaiF/r+QPzQfFQDrk+t/6F76P3Slpt+NT1f0lf81T/xb/J7hg9KejZ+I9IFoxsZP9Lb8YxbLSFQG8v6frdnUsEynX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD///u35Ec=") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x115d038, 0x0, 0x40, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) (fail_nth: 1) 5.375083405s ago: executing program 0 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getegid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x40}}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000280), 0x9, 0x800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000300)=@cgroup={0x1, r5, 0x80000001}, 0x10}}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 5.294200016s ago: executing program 5 (id=538): socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080), &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x708a, &(0x7f0000000ac0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESDEC=0x0], 0x0, 0x356, &(0x7f0000000140)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000240)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$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") truncate(0x0, 0x3000000) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0xee00) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffffd}, 0x1c) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000000300)={[{@block_validity}, {@noinit_itable}, {@data_err_abort}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@dioread_lock}, {@nogrpid}, {@inlinecrypt}, {@norecovery}]}, 0x7, 0x577, &(0x7f0000000640)="$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") open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 5.204920469s ago: executing program 3 (id=540): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000008c0)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@errors_remount}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r1, r3, 0xd, 0x0, @void}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.redirect\x00') syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x115d038, 0x0, 0x40, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) 4.903361186s ago: executing program 3 (id=542): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000340)=ANY=[], 0x200002e6) write$FUSE_LSEEK(r2, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x7f}}, 0x18) fcntl$setpipe(r2, 0x407, 0x7000000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_clone(0x4000400, &(0x7f0000000100)="07d0331ca6a75f2c36409a6c407531caa3d3f9ec0ee6515ad91266e7fb9b8e97f3d47743b34ca9675096f6ab212c2e83474872b9000ef8e3325eda85aceb5eb1d0a8d51a778d869e3af873a57ee7f07c2ba27354f873bac152909f72462b1dee0d4624a9cd69e621a3f38e6d8ecbae3020c45b8d23", 0x75, &(0x7f0000000240), &(0x7f0000000840), &(0x7f0000000880)="6232bd40bc590fac06133f863a44842bf015de0f16eaef934dec2860236ffc5f8c3e639e7df16fe3ac7c19f15670a4d6542cd040da8b39a335996b17a5f701381eea1a8bf28659431ba58ade5bc745943f088d69d4d68a853d18e0686df2ee30c7f496c09e6d0036af") capset(&(0x7f0000000080)={0x20071026, r4}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x130) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0x0) sendmsg$key(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) 4.442167158s ago: executing program 0 (id=543): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x5]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r4) r5 = inotify_init1(0x800) fcntl$setstatus(r4, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r4, 0x8, r6) rt_sigtimedwait(&(0x7f0000000040)={[0xfbffffffffff7ff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa2000b60) rmdir(&(0x7f00000000c0)='./control\x00') setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) 3.921852531s ago: executing program 4 (id=544): socket$packet(0x11, 0x2, 0x300) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) (async) r5 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) (async) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.803837074s ago: executing program 4 (id=545): bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0x2, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007"], 0x104}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 3.753443935s ago: executing program 4 (id=547): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x100083, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5416, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x7ff, &(0x7f0000000580)=""/232) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.532492621s ago: executing program 0 (id=548): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) exit(0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000023c0)=[{{&(0x7f0000000200)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x1, 0xb0) 2.694818732s ago: executing program 0 (id=551): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_open_pts(r1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.675647613s ago: executing program 3 (id=552): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) syz_open_pts(r1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.041556849s ago: executing program 5 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getegid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x40}}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000280), 0x9, 0x800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000300)=@cgroup={0x1, r5, 0x80000001}, 0x10}}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.699760587s ago: executing program 4 (id=554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{@usrjquota}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@i_version}, {@sysvgroups}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@errors_continue}]}, 0xff, 0x523, &(0x7f0000000900)="$eJzs3E1oXNUeAPD/nUyapB+vee/19b3mVU2tYrCY2rTaLgSpKLhQEOtClyEfJTZtpEnBlipTkLqUgntx6daFW3VTiitBcFWXghSKdNNWEEfuzL2TyfTO5Dsh7e8HyZxz750558y55875mLkBPLIG039JPXwzInZHRKn1gMH6w707l8fu37k8FpVq9dTvSe1pd9N4JnuZ2JFFhkoRpU+S+R1NZi9eOjM6PT1xPosfnjv7weHZi5eem+rNtpw4cezokeMvjryw/EIVpJeW6+7AxzP7973+3rU3x8r59jy15nKslcEYLMpKzdNrndgm29UUTspNkW2bkBmWLD3/0+rqrrX/3dEV5Q5HV5ojpfXPHbCeqtVqtaf97kq6v1quzrtSBR4a0bvZOQA2R/5Bn45/87+ijsDDOoy7fbI+AErLfS/7i3iitjEf4HS3jG9za/GeDEbEu5U/vkj/Yp3mIQAAmn13Mu8JtvT/+usrI39euP5y+viPbA2lPyL+GRH/ioh/R8SeiPhPROyNiP9GxP9aXr8rIqod0h9siTfSb8wul26tUVELpf2/l7K1rXs/R9b/W5CB/q5arK/5aRPPZ+/JUHT3TE5NTxzpkMb3r/70Wbt9ef+vN3tM08/7glk+bpVbJujGR+dGV1DUQrevRAyUs/I3+r9JOSJprAQkEbEvIgaan1jp/Lr9TeGpZ7/a34h0Lzyuuf9bXP6aauE6WqeliiWqfhnxTL3+K9EofyxYREwWrE+eHT09cXri3EhjffJwb0z3dUrjhx+vvtVu36Ll/+bXxhpl5rXj357KWtbqpfW/PebrP/L12/ny9ycRSWO9dnb5aVz95dMHxjR51S1e/8Xn/7bknVo4H4N9ODo3d/5IxLbkjQe3j8w/N4+nj+k5nJZ/6GDr+V9Lt3aNy9+J/0dEehI/FhGPR32EmOb9QEQ8GREHO5T/xitPvd9u3xLP/7ruDomsUFr+8VhY/nrNL6j/+fX6doEkuyAU7Oo6c+Dm/YGVlj+t/2O10FC2pfj6lyy4RLTLaf5pl275a9XvHgAAAGwNpYjY2TSXtDNKpeHh+hzQnthemp6ZnTs0OXPh3Hi6L6I/ukuTU9O1+c/6fHB3ks9/9jfFR1riR7N548+7+mrx4bGZ6fFNLTmwo9bmk9JwxI1dTe0/9VvLFHOH7wkDW9UarKMBW1Sn9p924vde28DMABtq6Z//1z9a14wAG66p/bf7Wl9lBd/7ArYA438gs6TLgWsGbH1VbRkeactq/4cW+eUfsKWU4+1GeGl39ez4e1dgC9H/h0fSor/rX1Wg2lO8qzcePDh6O79gV6wsG30FaW1KIO1ZLX5wfi1eTVr5zRuyLX0Fx5zM7pbQ/n4OWT7aphWl5WWspyCtldTp5AreljSr+S1MKudnT+9d85O/mn1Xfq1Pm683pJ0WBTbyKgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+/g4AAP//l8DN3Q==") chdir(&(0x7f0000000140)='./file0\x00') ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000040)={0x1f, 0x75c, 0x400, 0x3, 0xffff, 0x5}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4087, 0xff7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x1000005, 0x7fffffff, 0x0, 0x7, 0x0, 0x3, 0xffffffffffffff70, 0xb, 0x7f, 0x0, 0x80, 0x6, 0x3, 0xfffffffffffffffd, 0x25b], 0xfec00000, 0x300}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.687251078s ago: executing program 2 (id=555): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x17) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.59764866s ago: executing program 0 (id=556): io_setup(0x80000000, &(0x7f0000000000)=0x0) io_destroy(r0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x2000000db002) syz_usb_connect$midi(0x1, 0x32, &(0x7f0000000d00)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x8, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x5, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x9, [], [{{0x9, 0x5, 0x6, 0x3, 0x50, 0x6f, 0x0, 0x3, {0x5, 0x25, 0x1, 0x1, '_'}}}]}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz0\x00', {0x4, 0x7, 0x800, 0xfffa}, 0xf, [0x9, 0x4, 0x0, 0x3, 0x7, 0x40007, 0x3, 0xe, 0x3ff, 0x53a8, 0x6a5b, 0xbb, 0x8, 0xfffffffa, 0x2, 0x9, 0x5, 0x0, 0xfffff000, 0x7, 0x5, 0x7, 0x44979c10, 0x2, 0x6, 0x5, 0x10000, 0x6cb, 0x8, 0x81, 0x1, 0x8, 0x6, 0xfffffffe, 0x4, 0x3, 0x1, 0xa, 0xc, 0x0, 0x2e, 0x7, 0x2005, 0x7, 0x4, 0xffffffff, 0x235, 0x699, 0x9, 0x7, 0x3, 0x3, 0x1, 0x5d, 0x4f, 0x4, 0x6, 0xb0712d1, 0xda2f, 0x1, 0x2, 0x0, 0x4, 0x200a], [0x327, 0x7, 0x8, 0x9, 0x6, 0x34, 0x2, 0x3, 0x9, 0xd, 0x1e33, 0x3, 0x7, 0x6, 0x8, 0xffff, 0x7f, 0x3, 0x0, 0x10, 0xfffff000, 0x20005, 0x9ef3, 0x8, 0x2bb7, 0x954, 0x5, 0x1, 0x4, 0xb5, 0x8, 0x8f3, 0x1, 0x8001, 0x2, 0x3, 0x80000001, 0x0, 0x40, 0x9, 0x6, 0x7f, 0x4, 0x5, 0x1, 0x71, 0x9, 0x5, 0x80, 0xfffff9db, 0x1, 0x5, 0x6, 0x6, 0x80, 0xa5, 0x6, 0x5, 0x2, 0x0, 0xf7c1, 0x400, 0x0, 0x4], [0x3, 0x5, 0x6, 0xffff8001, 0x3, 0x8, 0x3, 0x40, 0xc4, 0x10, 0x2, 0x1d, 0xa, 0xac6550c2, 0xffffffff, 0x0, 0xf21, 0x40, 0x6, 0x400, 0x3, 0x9, 0x9, 0x2, 0x6, 0xfe, 0x5, 0xc1, 0x8, 0x4, 0x1, 0x3, 0x101, 0x1, 0x8, 0x0, 0x3, 0x5, 0x6, 0xfff, 0x3, 0x6, 0x8, 0x9, 0x5, 0x0, 0xfffffff7, 0x8000, 0x4, 0x2, 0x800084, 0x6, 0xff, 0xfffdffff, 0x3118000, 0x8, 0xcbd, 0x47, 0x40, 0xe, 0x80000000, 0xc, 0x1, 0x9], [0x3, 0x5, 0x8, 0x8, 0x99f, 0x7fb, 0x5, 0x0, 0x9, 0x7, 0x4, 0x3, 0x4e, 0x4, 0x1, 0x4, 0x3, 0x98, 0xdfff, 0x0, 0x6, 0x9, 0x7, 0x67c, 0xf154, 0x7, 0x7f, 0x8, 0x8001, 0x9e, 0x9, 0x6, 0x4, 0x5, 0x9, 0x5, 0x6, 0x8, 0x2, 0x7, 0x0, 0x2, 0x2, 0xf56, 0xffffff83, 0x400, 0x1, 0x9, 0x3, 0xd37, 0x3, 0x0, 0x80000000, 0x1, 0xff, 0x4, 0x4, 0x6, 0x101, 0x3, 0xc, 0x9, 0x600, 0x6]}, 0x45c) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, &(0x7f0000000140)={0x3ff, 0x0, 0xb, 0x8, 0x6, 0x6, 0x7fffffff}, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.59702829s ago: executing program 3 (id=557): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, &(0x7f00000000c0)=0x24) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={[{@resgid}]}, 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") ptrace$getenv(0x4201, r1, 0x8, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000001140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noauto_da_alloc}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$eJzs3M9rHOUbAPBnJptt2ub73VRErBcjIi2I26SSYotgKxUvHgS9Cg3ppoRsf5BEatIcNvoPiHoWvAhqUTzYcy+KXr1oe1U8CEVioyCikdkfSdpk09TudmL7+cC7877z7u7zPDvszrywuwHctwazmzRib0ScSCJKzf1pRBTrvb6IWuN+S4vzY78vzo8lsbz8yi9JJBFxfXF+rPVcSXO7uznoi4hvn0/igbfWx52enZscrVYrU83xgZnT5w5Mz849NXF69FTlVOXM8KFnRg6OHBo6PNKxWv/44eil3x578afanx//dfHXdz9M4mj0N+fW1tEpgzG48pqsVYiI0U4Hy0lPs561dSaFWzwo7XJSAAC0la65hnsoStETqxdvpfjyu1yTAwAAADpiuSdiGQAAALjHJdb/AAAAcI9rfQ/g+uL8WKvl+42Eu+vasYgYaNS/1GyNmULU6tu+6I2IXdeTWPuz1qTxsDs2GBE/Xj38WdaiS79D3kxtISIe3uj4J/X6B+q/4l5ffxoRQx2IP3jT+L9U/9EOxM+7fgDuT5ePNU5k689/6cr1T2xw/itscO76N/I+/7Wu/5bWXf+t1t/T5vrv5S3GuPDR++fbzWX1P3vphU9bLYufbe+oqNtwbSHikcJG9Scr9Sdt6j+xxRilv89X2s3lXf/yBxH7YuP6W5LN/5/owPhEtTLUuN0wxsI3I5+0i593/dnx39Wm/tb/P7U7/ue2GOO148c/X7fz6mp38/rTn4vJq/VesbnnjdGZmanhiGLy0vr9BzfPpXWf1nNk9e9/fPP3/0b1Z58JtebrkK0FFprbbPzmTTGfu3jhi3b5tNZ/eR7/k22O/9r6vy6sP/5vbzHGE1+9s7/d3Nr1b9ay+K21MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0pBHRH0laXumnabkcsTsiHoxdafXs9MyT42dfP3Mym4sYiN50fKJaGYqIUmOcZOPhen91fPCm8dMRsSci3ivtrI/LY2erJ/MuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBW7I6I/krQcEWlELJXStFzOOysAAACg4wZuHBbzygMAAADonoG8EwAAAAC6zvofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALtvz6OUrSUTUjuyst0yxOdeba2ZAt6V5JwDkpifvBIDcFPJOAMjNba7xXS7APSi5xXxf25kdHc8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO1r397LV5KIqB3ZWW+ZYnOuN9fMgG5L804AyE3PZpOFu5cHcPd5i8P9yxofSG4x37d6n9qNMzu6lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA209/vSVpOSKKzX3lcsT/ImIgepPxiWplKCL+HxHfl3p3ZOPhlUf35ZY3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnTU9Ozc5Wq1WprJOGs3Oyh6d1U7SeMVq2yUfnTvsFGNbpLFNO3l/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIfp2bnJ0Wq1MjWddyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3qZn5yZHq9XKVBc7edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+/gkAAP//FUoKgg==") r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x3c0, 0x188, 0x188, 0xffffffff, 0xe0, 0x188, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @port, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'nr0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000140)={0x2, 0x100, 0x45, 0xaf4b, 0xc2, 0x80000000}) 1.368996006s ago: executing program 2 (id=558): bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0x2, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007"], 0x104}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 1.278308368s ago: executing program 2 (id=559): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x5]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r4) r5 = inotify_init1(0x800) fcntl$setstatus(r4, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r4, 0x8, r6) rt_sigtimedwait(&(0x7f0000000040)={[0xfbffffffffff7ff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa2000b60) rmdir(&(0x7f00000000c0)='./control\x00') setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) 1.084117103s ago: executing program 4 (id=560): syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x4008804) 796.96465ms ago: executing program 5 (id=561): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000940)=ANY=[@ANYRES64], 0x0) unshare(0x400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x1}}, 0x2e) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x0, 0x6affffff, 0x3403000b, 0x138, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0xffffffff}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x1000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000, 0xff000000, 'ip6gretap0\x00', 'caif0\x00', {0xff}, {}, 0x89, 0x0, 0x10}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) openat$rtc(0xffffffffffffff9c, 0x0, 0x80382, 0x0) 762.804371ms ago: executing program 4 (id=562): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000340)=ANY=[], 0x200002e6) write$FUSE_LSEEK(r2, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x7f}}, 0x18) fcntl$setpipe(r2, 0x407, 0x7000000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_clone(0x4000400, &(0x7f0000000100)="07d0331ca6a75f2c36409a6c407531caa3d3f9ec0ee6515ad91266e7fb9b8e97f3d47743b34ca9675096f6ab212c2e83474872b9000ef8e3325eda85aceb5eb1d0a8d51a778d869e3af873a57ee7f07c2ba27354f873bac152909f72462b1dee0d4624a9cd69e621a3f38e6d8ecbae3020c45b8d23", 0x75, &(0x7f0000000240), &(0x7f0000000840), &(0x7f0000000880)="6232bd40bc590fac06133f863a44842bf015de0f16eaef934dec2860236ffc5f8c3e639e7df16fe3ac7c19f15670a4d6542cd040da8b39a335996b17a5f701381eea1a8bf28659431ba58ade5bc745943f088d69d4d68a853d18e0686df2ee30c7f496c09e6d0036af") capset(&(0x7f0000000080)={0x20071026, r4}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x130) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0x0) sendmsg$key(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 315.780092ms ago: executing program 2 (id=563): sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) tgkill(0xffffffffffffffff, 0x0, 0x33) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0xfffff800, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}}, 0x88) r2 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006780)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000006880)=0xe8) r4 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081c, &(0x7f00000068c0)={[{@i_version}, {@nogrpid}, {@bh}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@fowner_lt={'fowner<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffa}}, {@pcr={'pcr', 0x3d, 0x16}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") syz_emit_ethernet(0x1de, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002f80)={0x2020}, 0x2020) r5 = geteuid() r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c2c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0xfffffffffffffffd, 0x0, 0xec4, 0xfff7fffd, 0x2, {0x0, 0x4, 0xfffffffffffffffe, 0x1, 0xd1, 0x2, 0x6, 0x2, 0x4, 0x2000, 0x5, r7, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r4, &(0x7f00000065c0)='./bus\x00', 0x0, 0x94, &(0x7f0000006600)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r11, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) sendmmsg$unix(r10, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="ce", 0x1}], 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x8000}}], 0x1, 0x0) recvmmsg(r11, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000040, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r13, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r12, r14, r15) sendmsg$netlink(r4, &(0x7f0000006740)={0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000001900)={0x1410, 0x12, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0x4, 0x13a}, @nested={0x233, 0xc4, 0x0, 0x1, [@nested={0x4, 0x39}, @typed={0xc, 0xf4, 0x0, 0x0, @u64=0xfffffffffffffff9}, @generic="782e4948c9d2ab748fae5e02e2e6b20adee1d1e1fb331893c7307c33326ddc82eec01d644d91750701825e77b1ec8f0375d574f66759dd9c93c8100931", @generic="d7c6be53f78390c53750a776544d96934c8d1fbd6ee652b953c6904a38bd5e9a1033613b", @generic="495eba4adb95f1e2e1d04facef28f761ce44a93fcc3a671ffd00e34d8f3787d3fc5a71563c5bd9b1eb1b7d8d533eb926b9c07384eb6edefdf22ec6da90dcc2910943659d54e99261fcb3a24b9fb47e0b4aaf9606df44fc5097d573a8075bfc2a0ba73710c192f1706e8df9cd2a57fc1370badb6103f2441fee5dc46bdb093ac522eb5b5075d390e92515bb66fb110a9d79083f2f28e27709fc60a75ffdcb750df45f2380da7bf46dce3379b47bc893fbedf8bc8c06c1dab43697e68dd52330eb9b999c4cfd164c59e5c6f17a0e2bcf56fd42664fd0d7a78da494e4f91fffc5353f5f", @typed={0x8, 0x117, 0x0, 0x0, @u32=0xbd41}, @generic="99c0bc268e541f843d6831f0ffbcc05b0b6f1a62d00aedb933bb87e7a869fb1b37ba00d15f92134393bc6f4dd2180a845110ab5aa152e7d67509ec5fc971aaba5b022261111e2b4cd3ea4c7d9b8d64f8bd680edf5c8b74e6c8df14c17aee2ddf1b14c7654609c853d0347c48f64f6ddc4918d8b5f29af14963c58b870b61e12d5dc6b32caf2ccb9f95800d422c66a7662031a57b815a5288c2b9baa1eca058c35cf5c395c44b0b70efcb3790889d3f64b0ea24433c6aa0548e7d76553df428abf258f1c6c1df52f7e2ab5763db0f177d6185b7d0"]}, @typed={0x4, 0x130}, @typed={0x8, 0x74, 0x0, 0x0, @u32=0x558a}, @nested={0x1142, 0xbe, 0x0, 0x1, [@generic="79d0c72f208f927edc6569a67abbef3e221b4f00719a9fcd82aa807870bcacd8d80b6f17aa6c7376acdfd0", @generic="5aaffb25db549deef236f6f0d143a5072fea6689377eec5e39f55dbd37d9187008b3", @generic="dd1d2309dc359d9759f9a345c1a6e92e31a37406a45bbf7c8b0b3cbec6154e72929d6fe467f4505029d8506088eff462a0a0206439f67c5ebbb1046d5268ec3e2380efec3f1e946d41b10d670d8b9db72617a24c02e954fa0efcaa41a00efaa177cf0f34e02073b30db745206d4711d8644f0f67c5ab8122791cb0edd932992e58e59e9b83c96ddbe83d8ef29579d75c2a96672ed7548557b6be75705a84cd021dfcd27d2503b5d164420814a352db43fecf377b573f91aaa1fcc4d86118728d5435e26a47b5744bf67b9eebdadabcb79cfd88e6f8b2499bfb879b8c02d61a71bee88214011b40c3caaf2ce78fef5bc519", @generic="abf42ea44cd6250c700437a8e42ab82fc17e3257f8953eff5cd24faf590f0e22c69c91a906735b744fae5f1deab88b1d6f9f77f7378cdd9c51d959e22e02eb41fc7178a160d533f1b26fc56a6b8cffe9d5e3b0d760dd12158b7eb5c0296ffe8a79a31652d64f906af2817166973ad81c3b2fc8700fd562f04b6962cbd6f31706834efcbccce66d37bb5f91759defd71ac9a7d9dfe82d495f1aa4d12fae6627ca012b308d0c8eb9104de8019916e43754cf3017e24d795339bb66f5bcce558d5a1b656865bb8885447e44a66ac07425746f7fea840292c286b7b4105438ab99be7a5e32d5d0ae4bf5d7dcb4dd4c3becb65694020cff6145a750c6c4ee60c50489692a1f840069448a64af6c5081a14d556ddde0afa0913d518640cc66c873bd370b26e7d8d1b3857d2278224f21f4aedca5711d091ac31f344c5a1d76c7572c01c94e6f07245ae78c9777b5ad7f1cf52138ed43bb4668051e583ca74356c9c6f547931b8af0d1e6c5e0fd6f92de4c79dabf173b6f4b79955110dcb0a30a0b417c78faac547c4b94280699dbf46846d77ffad39e26951c46f627afc13116be54111145069490ed9a9bc707e3f5af9d5266e89699713e1af6c69beba028b0b930393e242b25dff7baf448b6086c8cde896e7b8f18751d01a9f38c901c0bbad0dceb1ff0a263a0b2809cb951e2683ad7461d88e73a1b135fa1e16eae39de74b46ac40adcecb8ca74d19f2c1dc9e2eb3343298d1efc83c7087de8dd3ff26b1fb81ca494ff8781ab65699f6af8cd209cabdd04ec8072de54709e6057de30be4da9dba78fef0d1891b54f220a67cbdc5f4a6c2d1d091239b65142767bf23cce10632ba01566918f926b7475228fe48b6d0ff8877379ea13202ed143972facc9a1ed6f3f7750c141e3a7eee4006ff99b5b9528b01bf0f1e3e159e8e5025f7b0af75387d4f17275fffcc90ef866ec1a2cbd15a82af5c21d6672a30225197dc70c65ae27cb0affe86fc1cf84e9480d51386289d66b6907953afb41e8065daa81de60a4e40dbc774ce55c8a3964521d05bafb91eaa592f9cf8a90e9129a408b8091ce61a14848b87547aacc6feeca704750c3ac093af421be39321ead8d0521da9738788d5e8ef583b70c4c4dfb2c84aab3df452d8c237f838a146dec21537a4d06cb356958631e56438d9f65753d0cbc7cfa3a5f313c91fb0c79d65da0e9cf562ca263d4d5583c8e12a2fbdca626e842be6f5db9987df5153120cfbdfab5eff5adff2b4604ae5b51bcc7a5acf4bcba7fcebe4fc915b1945adb0503db3b3f1ee6c1f28897f2ff8bf7163ec8e67f5cb70dfa27ec75bfc1342ebb6701e766350d3071f6830befbe104c0d385969e322890fa559de88e7e3456f34e9562194c5f8b05b43a3064f66155b1186906aeea0389fea243723dee15b9ee201a2806014134f1b7850a3fceb988d60782a85daa12480302e20c88adee129b461a0930bd96b98f809f3e6475f1f479d31ed12f6430e8e6675c2e608eea76ba0b9b53fda8b498f6483bc304c7dc5e3243d9409a57236e287dd1252f13f9e3a69a32e81d42476eb303064fe6a0e284ac6804b7689bdb2b2415fe58c61f354c0561b20e4bae6195362768c014d980577c0968a6e27f3830f9158dc2f3285213aa52d650603d2ec78cd7799f75804beadec915425e6a20bfb460c5fb5b4fc11c5ae68803f627299861d5e528d8a2652c3c127dc760af519999e80ef0a7e68a9246d3c0a9c0112cf53b093c81e0038a48752dbd73b2104bf930cf06c54223f57f93d6b6e756c4e1b42963eac0c1451565a9aab0f9be64d2e400c31207a98be09ff00047a509f576831e6de56ecd28ac750eb83e689db182aa4fb82e05f4f4ef45943df19f36fa1c5ecef0b59cfa2803a8cc72af21991f891038bf66e61c3464d50730e4f2e4a30f2c7b1e97f5a9ba9b4e5e436131d4c446bc7aedc399ff28ccc627ce42ed87caa9849eab9ed441b57770ccca2681c103e90cd33a8a31825cd1b908b2e82abc2a1408adbc7c2349351db64c74592db43108e687307d6cb33ea00ca27c3eef50eb6f9389da9e0350ef08b2368aa4526664ab557f67b17eb0b803b83e490e4d72cfaebc798c9c6f4b9daba65eb13e8fe58bb919d11005cddcf94937f8c55b7127a3feb818694875f53ae376e370551eed2245b166982b36ccd498011c29b9376d0f47d9f368f3c0f39a90a1638596d5e7329660e8ac4673ecf17f9fc3a41a47b4fd3c986e89f892fc564a906dfd3490793a740af11272e37b0fd1e1c8e6aab522da547ac7cdb996a4d5bd3adc89e942ad06eb122f6d2b10a397cd3684784c91ef6b8dd64d0a1c380fe11d46a9369f7241c8a39ffbeac9ff632c3c317c582e243a859cef450efd8f096ebb040cd1f38281df984c868ee1ab374318b4408f6c767ffbafbbf99d80541d95c34c64a723a77b3c1683a978236412862b1e13f888eff0c7f9e18ce837d658310f7fc1a6eff0ccbaf097d1f75f9f879da1460935119ecd145345e15abf7b5e28d428010e17b9eb5863a318de64a3b5b6473e6d7b745b4616cab7975bc103e921f0d41399e129e6cea8d1c1f259aba78e2cd785342f66e70437d17a153e36776749e4cd7117dc57f0f67d57754f3ab6f1d5de7724e49b555afead7eebd3343890658b8c79e0592a05ce553dd9d563128565bd4b243ef3481399f97014dbf839501cdbfec2d0ea437215cd9e6b10112cef36b1749ad5d66c6e177280a177c42776c508a42b89b733b395d59eabf519b36e33c234e1d4e825910c136b1e749b55d29176f7b1b1314ac6b81a99cd377f7cda5beb0ab794bb6224b0a52f385c65299a06f7e83a8a49e3d9d4dd1c0729ca3329fa0832a9d1ac2ae0b39e545e2a98c49543edca5252d5cfc5fada766eb762b9fe2586943fed68a54aebed8db6e1b582ce688db901cdeabfe16c4a1f58ca81bbecda3f1d21e763e9858b125e5e51953953248b98b3b414f2902e18f18fe31b3fc0af32aa18f24f8056b90ee6afeb44759a68c95edc43c1cdab1c6545aa129008d09181a545b15d6871dfb1ce31aad8fda336d932e1fa1625de8472a5c698b8f9a8efd070090a85d7800a844786fe0c67778f94beb92b5f00e0791894f394f2c409588dff4ee0bc91982e6d93584299ff70a9104c2e2471ef10a33b70962f2833231925ef444390acc89cf524b5f537609a210521aa29e68415b4ac8ff937cf9155cb7350065eb4cf80c929dc19963328ee3df6ea362c537bb33d4a1d35f961ebed59947d26d8d2d17f71f47806b2d4f87d3a9a3dc7d75894bbce8565a11b044bbdec7c8631f1beb2b9c2f922472f22c2cb6cabe60d22a41eea2d5d19adede932da992db0ba42812945d61f63a10b413403e8a030c1d2dd97e409d1ed5b43a0faccc8c634c32789d88852a3b106adfbc209a4a51b866f981c014391b417dd52572a8acc0d6258d12a6db00e97d40d0020338dad5197e56286ce0d51f996c1b4fe4d5606b9934480ba0f9de7f46827cd933984e507dfa80ab25fed5c4778bb552f552df4348b116c95890a23405c8e6888400f17e8c03e8702c2962b6034c71226975ba5a0077096449b88355e07bd6f36565e6faed9cd9268656657c5c12349a16ca072e8bf1e51e487c6986891d15f447d6451462e682399998a0bb1af763fbf54684541c283498d5550edcdc216349e42a5c4b7008bd5988786ef005c01625cbcd39f45b7a94d94d27881bb3446b28e76c853801390124724205c7e2b13b53f599a8ce02e2a781883d18788cf10c67f535a81d7f2ade76b44c261fc8b9859e8ac48b1d702ea492d9723a1f005bd16a58bb6237fc1874b714876b18e8aef3cd0df6637c653d765c93fdcf401e4db474f6706a4d2fd65122bc664d382170830ae24cb2a3ac93d008c9211ab9de241b8f8663e60d62ea1474b19fbbff9d915781168207f20f35606071d56edb26e312e99b63c0a5edb567176bdb41d38e30a81689ee44dbe8f965f2a86c2f9a0086b12ca5a7cfc910d310d6297b3473e97ca04726da3539589cf14fc369ebec1a6e6e6c9d06999ef7ba9075f31f1e0e70581a79a59c605cb15b55b6651a162f8968f3a408ab3bdc5721b2500c21c95b7a4a632afd81b358a68e66181b918985320f00c3279e3c854b786cf33e7193738a3c35c845bdfd0c3c9b150a13e4df4b92bae5b2545482ecef9a709334af44d5fddfeeff13ea966edc242a0914757da6299cc2340c97fa6f9a9317f59c311ca4f4595d604183d3b680a774d9a7e6a15ea3012da4a42d9e6b09a514911c033c5c37b3498e383223bd33f0fcba50b18938406e945ab9f1582170655dcd4147f407484133f7befccf5ada35c007114a5b88560b09dcaed83fc2d669a48bf17e30a726b6d9a77f84eb187b279c6867ccaf393bcf0424471758c13d410c1e78261fee388c91d8e257609915001fda2e7775fe89464c80df8c964df88a81dc0ccb977342be03096f0fd9c7ce3c40facd76a75379903eaa004395163f28c800b1bc4ca37d950af609abf358ad801041494d4d6f94ee861af2a1096d15faf59e8281d4e40ca8dfb17f8d48de668374bdbabccaf7196907d66b992398a7de489c4c1a3c5f5764f0b7cdb565fc5241149f32b4a9a89501c05296eaa053e15e1e2826ce066917299fb7682f4a0e9aae37ee0457223db8081da1499a6a1fd5a8a71142bbca72e7333ba1511d6ebe5ee6c1f1cb10871355fcb629672849fe302b577c6e5e837cf9d915eb28617beb55a6716eac0c370fcb42455f0a65924e03909c4e0822cc4dcb92501ba74f0968f69ea27df3e70145d24b752d3ba2fc4d4e7d188ab5704b032e315cd56e23687f475e7d2a483c6698f9f4eaa8b03fd8ea9adf136a7501e991cf19d76484357deeb231778b699ca86712eb02a7fca24aea133df60461675bbec7af672bb753febac96ab15bb899b15e4dff4de75dba6aa0ff18d481de841845427c9305571ff1c9270ef7642dd59f6f6f58271756093ab174be355310c52833e5cbc9061093f6dceef768310d05199924fddbf30bea1c39a90a416c9d482c201ca708318ce008474400b1bc86bf61f30fa96748384b8d085176db5e22e7b47b6cb25df8ac3adec9a6a405ff630fbd267e277db919c7cc85906a388e71e8686ec214d07e922e23c53eff4becff925b0cbb5fed0a0d007079cd546be3c4e8ef4a87064233290afcd7820f8529d510f9a10e370d0badade63ee9ebe96ea879e38d4ed29b692c9c58541237487a37253b2560d43d1f7bddf7ba2fbf4ff0b2888be1f4a3c4e4fe5c3c5fea3217247bd666e404132f46b84ea1f6444a46bd26500cf31c5008bdf6368238dd4013a1f886d791d580279448ed3531f2ef0ea8217a791d05794e31c34962e73185ff7ea05e35bd216be6bca719010cd7e495ebb3e1ea254104ae5a8154c982bd1dc7fc296840458a247d73cab078b0258c9cfdd7c31fb958ff6135fd9e47df4a66150e13cc904a7d2d05f3e34d8ec028c5cd2bcd6a79d4501ddee5e963d66633c8583ce594252177e0b61a18fd4ef96de6118da8ca054240f7003e287bbecf608f4637f34cfb44463e30a95c72092d03da8bf388588df37b2423366c28993ce55a5a967adf88aecf9432a6cfbfea5be4af85509d037206b8b1efe56e8445ed58d23d43d7b4ce5e2c6ad0ff87fba98bdd03bdcd95c6d9951661e99e6a21cde855c2748ffa8de805e807f9b9fdcf211c17f0aa88a2e117a7aaade5accac5dce762697b7745cae28b0907214ad4"]}, @nested={0x77, 0x88, 0x0, 0x1, [@nested={0x4, 0x40}, @nested={0x4, 0x12c}, @generic="4786fadc0bc8d07eeb2e0a6e19472e778cddb311ff53a429d3f39deb26977152b651f2cc3c7a64ac59833c3a390fc4e4443fccc5748e24241fdcc48d9b147b3aded70c222c1e86897be6c7b14f1b34452916a7044375ed2de52cda0bc77507d736b58ac5c36b1dc1dd9e97"]}]}, 0x1410}, {&(0x7f0000002d40)=ANY=[@ANYBLOB="400200003b007014fddbdf2508004c00", @ANYRES32=0xee00, @ANYBLOB="260285800400b080aa004f00b25a2e00d0abd72fcdec20a7106d1fa83c4d05374de121109cd04febb19c1815bd45669e91595c882d4de2429724d109ae32972d59d38303eab273c3c9ed6b8ecdc512454c9437095fb1da02a11e81419dfe5a8508f822e0fc04db2f88e501614c7caabc1b0d45a28086923d99885a9d38725e5ec5573f6645f3dcf372d1691e951d7a5b6cc315144ddd3dd6d194ce765b4a0135aef24595fc96192a72fb64759f34a8597d190000d49fe1f2ff5ace60a404c62b7abb2bc122ecf20f6cbc444fe83b502665e4e478a5ae5ea388fba84e270b44949418fa6c13b1d6072655b4eb6b82e30cf15bd8bfe58e45112ed5abfc918ceacb0a2a40e53fb108e3d9b008e520e4bf296bce3be5d0afd8dee4f531e2cf2fd841ffcc741c519b4a226609e2cb10e2f782fa3b3b71b999f2da894d40f38697416382e64ab264b43cc2b436d57945017e30e89656a1d50a450adc28d89d3f2aaa85e7361743a9cbfee556a2f616707f99148103535c89a19a01f2e30d6c22a918207e326223ec3cdff3a00c481a5d911b87986d1191850f60f0f18efbd4952b061c75268e321e3d3524078dc8121ef354efb2f56c7a668f5c1bebfb3ae2afcc3e53105727f6e0e015e7cc453dbdb54c05b4e512b304094f0dfd27f8669e6e99fbb5f49b92f11a50168e02e8cb71fd35a8c383dfe11558f96b779cdcea2e59106d0f3563fafa548e4bdd508addcfff346a680c38805f9401f64e4a65e568b41ae4e3f29c93e620f80000"], 0x240}, {&(0x7f0000004fc0)={0x14a8, 0x3f, 0x100, 0x70bd26, 0x25dfdbfb, "", [@generic="c5d5a83ba0d698089c2d96e4b380bd7d67fd49213fb8ac5802303846db87ff076a2c4b51955555c07ff6d0353237c316017cc785c51e1c681acf0738936959dd5e2170cf33a2036bd11fd30c4c74904b041004de5086d9a05f4b21a53d85c50434470508be94a8d0d04c8a07263657", @generic="a27317a86e9e740bb0308b1356ce548ff67b8a51b898f0f836", @generic="9b037c9ea62546f936dff19a732633d6ce764bf81e4b52ab77852d27bc2661ed51b1df2dc0b21e3aaff5e3db", @generic="72e6b83c7cf1199cce61175bd203d15ced4ae9ec129dd9ef5fe202a49d7a19ccf1ff36db776a7d0c81c0a62a2b9da96fe05f574688fb5597d7056f2b7dff13bc7a653fdb4fb863dc0ebdde196bb28b4ad6050e85995d0e0dad2da666715bfd50cb90f4efcfd1d7bf7c50787c955a45eec5fb836549f049f8e25e17fc41e1377253e2a5cd51ea5313d4e12d1e22185afc3a9ea71fff0d985720674bc720714bd03fc54b34a2c44409aecc410298be2d097c9a709107800cf8ccf17af3b5eda8cd0fca59be7cbcccf62a59d9dfe4ea3186cc1d8d317b2f6242949657486b0463176d439d7f44246c43626251aef9", @nested={0x123d, 0x131, 0x0, 0x1, [@generic="551749a50134099af23856c1e30b1039f7da0e4005815da5b3771a004284afad449f3164e5da2a07b3f24e7b905444b345afe273bbd5fcb56dae6bb9a997b3d2a6720870b08043e1c32f72906039237406ab809f58dd7526df8bda147fc4f891a63a0ec4ad927bcda6fb058d6b35cd3f19e650baf0e131108b6c26afa09eff870e7f853645f054d900cec6c96edb136a555ad70cc1f05e74b9c993ef9632441c565c5bc55956605d21f5c608f964f8421ea5c34eca05c43fe84566c3fbf3315f1f306847b93ba6d802041460a795fa5ed748d3c72931f2410df6b38ff7abadbb87b496d140ff003be60d24c4d2e2", @generic="0cbde122084b7846b254da377d63cb535953b8bef592313a4a127204defb3acd1b3752994e85578db36bf14f21891210a686b396034e73c8b9a6f9cc30c38585963b0095c68457a3b76eec21b59b3ee924a17ce7e209d284e4f964d7f5e95f4a2ba0302dd7e23033750e9f5012575d24fb8e5bbf78cbe70d98c857069961c7f3be95e0c87eee68178fe7172b44252c211b8bee3509ad220fc2489d1a1eab8047b5a9b0d4ef60353957154ec4c472ea6fc586540bd5add8d9f8a4e2a7fa0e53da3475c777e5a03763307a5f650871a66fc50c35a9c75590d0dc353695d2b3aeaf98ac", @typed={0x8, 0xea, 0x0, 0x0, @u32=0x4}, @generic="b3c3057a4abe829cb4d2b8ea9bfb3bda8e2c24d26b3af2fa2ed3dd526dd88b3d92e7f79e7b871297955bec76ecff0ecbaadc19f211d6c72b480fed3f421c9421e672e8ad1b17b46bea856a9ec7891b9155eb21282e73571cdddea605f9ddf19b4037b3108df8fda03ad39b4fee719685b17cb52b2ae33f7793d0a2653672d4698937f2ab614b4f38333c93dc1c1d7e5e27980bdbb646a56625227bbaf286a25a660a776c6ff76adc038f46c331bf1bd17b7bf134cef051f350265a3018d12364abe87588e8397996f065df3181fb8c64b40d24a6a08cb58de8f8235af2b3473268bde69433478b8cc080fc16dad8e0fcf68cd6d4955ac12d34cff2eef6d82b3a994fd93a645ce33893fb060606d55d0fb7a25a37be6714def8792c0e4bf81d30a0962689caad5997be7c9ee217adc0d1a456e2ebd0dba642ffdc15271dc40112e00a83aeed70ae0fff0f381f3283298bd5766a935bd79e6801bbc66a9f037028b61abd04fbc25563dabe00af507124a4f01b6e3173584c56f4f39190e11fabe0982381932664b15baee66af1eb8dff87d57a861435735cf5bfe6d2972b90e5380520653c9e3ccb3ba126b8413f4a2959c9532c2c07aee18f7e7f7728cc0443ffcadf53e61e2d3a7d9381533112490499734b3887df455d74244c2457fc6808252d0b14bd08677f7323c9c0a1495bcbd61a80e92ab95f69a617aeb506c4fde8a34494a6f58015a177d6e5a4e24e2c128350e8139dac4fcba8bee807dbb4dfaf56b4994a544611424954bff012af825c4dabfffb2efa701d1fa3f3256638a77d9d06dbecb49e7e8a3feffd7f15528898877c3f5b753cca2c9d5415b899c378a7dc4edbf0b551dd73533bbaa66165daddfe55dbec283fedbd8437b7116e87dcafb78be7b9eab885f0e1b2e06a7d90efeb56bcb116926aee90f96a9b26ad0d80afe6fabd28a22be9df467a2985992147223b23274993b0f659a91a482bb11f30e56a917d63ba25054e1c6219ce659a6289f47c800b7dca5da4ce4e36e689a3e6b28ed066f699d32e7e90b1b82841747bc730be38e7ca03adcea4969f84b328ebb631e191ec5922243c6c365d71e7c5dfce631f36c974e5d109f29d3016bcb47290bd6bc570fcd625e5bc0d9d1988d741436364d840eae0fc9f2a41771ae3c6f7b5c40b91932f7585fddda0a00a003e19a47329ddb0810f60abbf0ee2ec76ee7dc332d65579bfd11f03c0985b1cbe6f21885e7fa813ae1c66bc6ccc68c9f159830b7d947c64b7d699857b00d59a281b48ad540d6dd289c55fc8efbec80887429102cb604060030218fe9008a2ba5830360b855c64508379ca51e1024094249d9170d855e02c4456065933671bf77c2344d4d685ffaed712715b420ff3aab08546422118fd1432e27cb953b4b827d117a36e8809577a2b0c2f243d77835054d25ab3cd5123758507cfe970ca4ee0c3fe51457f840ebef40704b3bbecad863deb08df9943721de7a2204f9d73f0622805b90c0308a34d5042349a0a0832f516f1df66706f789548526070c2f30219633e92cecf44f4bc4d8fde2c148c56a6cefd27bce808d0d33097b0d782a5b2c53aa20000131beaf3260f9dc8c1a89f37d09d1e773cf8c9fd59c05eaf112cbd7b7874b6d0b67c90aa5e27f3b9296f263bd2d099e6b42ff9227108509eb8ed3ddd5a10db197f0bbcb59ccd2fb553a6c13c7ed1d81259604d19a261ed1d8d9ba8a2faff7a8fc6b341096b32138a90eb78897f58d2fb5fbd3fe9665d03520e237a713a9f709cfed32e907e20737523eedb663451c789684532f9a514eb769f67fd1d719cf495d7f49bb7257b607803b8f60000f3e4bcd6fde8c8e3f9552015d4bb1320a075fd5b194ef0e74547ee9dd35a7a050fb847dc6afe3d217fc0c54bc231736a92b81024a9564399f52004066278b6414ef4c4af61314dde71cb4b6372fd3d6badcc8bdb1fd145b902a0a375b2bb6f79ad33be6bd98be6ca4bf459d65fc2280e11e182db1438b3dd555f89f18946a1416f297adb4710bf20e424d159c9792679eb740d0f92df7b31d1b310ad9ad9b4cbd7d40defd4857c87bbd1ef4eaec27fab9f5937920273fc36081e59e9f66499fc7d0af8244218f9df05b88e8a6585a1a5c7062709cd90c9afc525f310d62b01b3cca13cfd3e343193961e037ec6a934966a5d4ce6cc96b6727066cd78dffb22ba030ccdeab720e00d2bd594e01eb0722344c7ba41d6abc0db55549830097f6b9867e29715582d80d363fe9ba356fa2c92a87e405134e42a4a51a3fe3dcf138545c4468661481edc4a69df90cf55423bb493947448bd1f2555e324863811f83b29748c65ce4e3cb8e8d9513d176614e37532b937c60f27dc28fee6fe610854d819ed7851f154aa81063dc6227df3a2a9dfd43df8bfd0035e4fff11395daf6f4824a1a85d15e0650f12e2a935b5605f1457ccd8e729dac8ab8b25839298eee5931dca17962f5bffcdbc94b73085a771dd0db24dc075b4ed7721d3bee1feb0a158713eadba5603ef02d1ff64dde04eb485118ee52047baf4d0ffc24c71aa3f0327056f7db6ad33e63817608df3682182f5213593d2812cc08c1220b6667f59a82fcbf640277880bf121ddea863bbaa7aba0b0803e16b43e9aba046d9228a7ebc2f7e5932e686832d8a3e36c742653aed84213a5a1d7afcff4458abe2e249c555432f984f6b713185031eaa033a5bf42419db9f71e87e1c3f23fe2fc8ee1071e01af32d7a96a1c54c485ce9c432c1927cbf6bd2fe9dfb489744772742cc84f5a9e4f8d498ed5af11ee2cf1a4a75ab5becdbf5f02c847ce6251e12b2851fe870cfd8c18a8a44c1b5c092f7807f59f25a16f3a5ff4cf3aa680fdd231c1ea8b9cb48b34d372c290886740d5c45a517ab77d71b43e54bbd4c367e21d384101178ba03805de59cd5f5cc367c8cd0b29b1f6cbfaec75fa70fb9212f1c4036b977eaccba7e732b2db7159925a091caaf40cc04fa4df7d11d49f508496fd843d1b93ae6ac2e86ad45001f9f757c42bf4957e833b25399dba618b31c39a0faa5033f22615ca7872e0744d59bdc0c702e3fc200fa387988f75390411df2615973433443db60bc80be368641ac9d1287fcca6b440b9e73c2716ecbca86f0979900e80101d418c183b1585fe51925e2ad56b81122c7315e778c48e1ab7a1673c5f4a18386a497164f8255fad3b89e0df763f09d85fd54440b7ac25053e991e991dd7ee062473330e11e503e4754e9151be93f9b9c5c7528878b30ecfa0ce4c30c6d7f02c61bbffbbcec42609db14690037dbac572d8cf5a4c36cdc6afbe78c2a110634a890500dc79def5d76bb9eeecb1f8673f1e5ca9c830c1eca26c021046734facadf16d5c6b8ba58c744ce40a1b6f3c21b208ee6cbebd6cce8cbb1470753e8f30f396eb5bb8c21792534b9a55510088986b60a5577edd1a0089719627ef2d2695bf1ca82a046fc81ecb110130103f01d6ffdfbd956bc5849fa1ca2a583d58611e55ea013a1cccf558f44ff7112ecd61424d3cee593afcddced35ce55e7e8e8f3801d6780b60f7c6f7ba12317e351ec92efd78aabd72b5c06bd41712dc9c3dbf52010f6517477285116316a031edd3560f3f73de069e03dfbb4b87de98603c5db6c49145416dfc1f788add18eeb4de57e22a5eb3f6b5ebe870be46c2cf5843899ca33541b191e5d67a8f7b6f516f42206a55a5a0f8a5dcc5d1a03f7a961109cfa0200b670ff7005deaf428e00f6c8c18675725c888a050d663d8abcb06dea07f4e9a6d0b6fcaa45a41c359f290fc46f12a5060569a23186a274b747bb69688baff83381b23caa90bd215229736b9badd6761c316f622d58d1213d45b70085411ba11e58beb1c190a85bf4040a69bfda2b807889d54d4f7720d0c1188980bd3d0a065af9996e1680422a36f38f2ceacce5239fc0ff193574a5738d80492d7a861fd71d9d8663e31eb47ac81b4246499082b970dadd8dab9e051dbea0637cbeebb5711148ca08a4f5c3fa165acc146b7f46fd98bc2a4b8f945002404f48cb4a980db68cff5c9463841e34377e5d0c7bc342721a08a86bc0ba727cd780d59e34cc101cc9dd9d1dac32d0419f52990b1fb486b3c7d808f9782304ae5000da41cda0c1b2e72e5c4458c93360189f15c095c5a44c0723c65bb007120f082d1b4310da93cb455613313020d4192046368688eeff91edfe2e4538c96ad3e1833deaa09668b59cf208181c862015ff8de76df4475c3c2ff5249a988e79740d4b1b5e52b2d964ff3e45517ec89c659a666da98946c3c010a071774fc698d933a96281ff4418d6ee22613615c7616693a0815d2d97f61dd2f6f442cc2d18d12d6d9f27dc5b85d159847c9a5cf11d5a0d3fb35042d310994ff6dc69c671e2f9b87c32b4fd6eff6465197239b7ff10013558229ab7ed77e53138d687f07a416fa5553810d870e353687b8d1f9421c0a3e6eaafb2c395c0075aba377d4ba7f798bf88e8acc0fb20dfd82bfed8cb7fabb27feefc18274bd367ae1699bb02dfd527dc4594aa093f9fd7a0223cd4a917a019b60d341f75277ffe2544e060fd9d4ad810c9b7571382f100585eed9e5b1778ad61f28a06ac270bdb02258c1d2582b3aac2afebd175e921031ce6e1ced03caabf13264adfbd6557df7a58e076d8113d53bd55dfc625393ef741d2ed2c17fce7faf2b7050e2fd5ca35185d849e9ee6e8aeac5aa1069e3939047681b8b5d364790ce527d75ef1f7ec0e5b2ed1cc018dd1de6296b0709d5ce96b82d964e2fa08ac29ed47991d71d2929f355432a7ae6d72ad918e85ad10d7c49572b7acb9a6a4e5097af7ab81b15b2a542e360928bda94f8f544a576e9e7906d14014b2ec730f921de38b9d441c17f8b98c02778e7d1b81fc01b8ba36a034f260670abafd4f21140c962942106d4ba1a9e0488dfd9f1b94779a8b9b68eb853449dbb2528ca3cddeda2aa9d4d70baa36c8d8515865b15fb5c8ae3c3447b76de9e3096e69d4e658e2dc49e87081a71a353826d342a1c5f23ba2dc3e796bba5130ad358d9a1097bc2a6d99e3dc58b514db1cf5702825e572c0c97e3091a594988b57272065a114bf0ce82c93c8a55dfa6569099b2c41444ce87647f0862a01db6ceb3ca0804084ade36c34d03049b7511cfa1c0450a4a982d1efc35fc998619aa980c1a69a487f1fc4164e12dba33516e5978c670a68e6bf8602771a1f87dd372c83e8aac05629caf34cbf07aaaa31af1256d82c8e796e65f94a8a26308aa31b8c5dd30e3c3f8d9d2cc75434536214281a33993d82ab678080b961ce4a1a81409f0a256d68222f6fcf7b524a3e6efeab9c8ef4033fae24ab569e53135695c22c7a1ef4c73a13e56d1235a7aa546b938ad5880993197ca4bb70cf11ee8279c136f1e55a63b7ebc9661bf1a0104dee832a5f55f215fe87bdd2943b37413affdbb615237be30e733d5e2032cbf8374ddca0638d7ca33d9b23d859df8818653e9e8efd825ffb6a0c7def0bfbac92d0339f69bad7441d276851c1f1a0b214a65572e6586edd09206891817dd496d85df96e3bcfb1de5635293f57be7070ff2969ec7e1b5c19352cddcd5fcc6b3a4e69118fc94587b2ba66d1e3fba965e37f7837f71b1aa5204d0f78820a9fe6921343b26d45bab1a205a5ea9cf03abe55d9d16439e8bd9cfb35f739505c89fbb11d4ffb75aba4bd402e9615cb6eff13c5b9a8cce8058ceca3a6ffb2adb6b94a19e05762bdbae606116c45b73f675913fe51d0f4a095fb4c82b480589db8c816e86", @nested={0x4, 0xa2}, @nested={0x4, 0x59}, @generic="2a2459cbccee50c1846aa127efd84c448cfc2e316de7ef04feeabb6837cebe68823f416a4a3b7f8aa0c58d3b72455929d2ffeb991e82a15fe8a94c006e064de3dbf248c2f9b849e6d5", @typed={0xc, 0x137, 0x0, 0x0, @u64=0xffb}, @typed={0x4, 0x67}]}, @generic="12ab5d6146bb0687aececa4722832fafb8fd757de3623c92f99041526a970e1a8fb63ea53466babb54d16c67c684c5e24fa611688d1218d067b1f704a03f59edde8d66f0115c0952d32923f8d680084bfe0bebbae2b6053ea7bfa5c550922205e18a70133605a7", @typed={0x8, 0x135, 0x0, 0x0, @fd=r10}, @generic="1b4e41608f65355fb91b8c756dcbf8e39118f718f30dd685c641ba516e44c664a92f576ffaa1fdf1b22420bc8037978330651d437104142045036a172a73bf407d497c3e89f4fab5"]}, 0x14a8}], 0x3, &(0x7f0000006700)=[@cred={{0x1c, 0x1, 0x2, {r0, r5, r8}}}, @cred={{0x1c, 0x1, 0x2, {r0, r9, r15}}}], 0x40, 0x8c0}, 0x4004851) r16 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r16, 0x0, 0x2f, &(0x7f0000000340)={0x5, {{0x2, 0x800, @multicast2}}, {{0x2, 0x3ff, @local}}}, 0x108) getsockopt$inet_buf(r16, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000780)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001880)) 98.176928ms ago: executing program 0 (id=564): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', &(0x7f00000003c0)={0x400, 0x18, 0x2e}, 0x18) mount_setattr(r2, &(0x7f0000000200)='./file0\x00', 0x9800, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x6, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x90, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001300f5d1000000000000800000000000", @ANYRES32=r8, @ANYBLOB="000011000000000008005d68b6f878239d3be543cc710d5aa99cee4d"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40) sendmmsg$inet6(r5, 0x0, 0x0, 0x84) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r10, 0x541c, &(0x7f0000000040)) chdir(&(0x7f0000000040)='./file0\x00') r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYRESDEC=r7], 0x0) ioctl$FS_IOC_RESVSP(r11, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x62, 0x3}) 64.451108ms ago: executing program 2 (id=565): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8401000010000400deffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000103144e230005020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 0s ago: executing program 2 (id=566): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080)={[{@grpjquota}, {@grpjquota}, {@quota}], [{@obj_type={'obj_type', 0x3d, '/dev/loop'}}, {@subj_user={'subj_user', 0x3d, 'usrquota'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '/dev/loop'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\,(->#'}}]}, 0x1, 0x4ec, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r4) r5 = inotify_init1(0x800) fcntl$setstatus(r4, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r4, 0x8, r6) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfbffffffffff7ff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa2000b60) rmdir(&(0x7f00000000c0)='./control\x00') socket$inet6(0xa, 0x3, 0x38) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000240)="f7", 0x1, 0x4008005, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) kernel console output (not intermixed with test programs): ][ T1276] ? rw_verify_area+0xa7/0x1c0 [ 91.659954][ T1276] do_splice_direct+0x1c2/0x2d0 [ 91.664849][ T1276] ? __cfi_do_splice_direct+0x10/0x10 [ 91.670352][ T1276] ? security_file_permission+0x94/0xb0 [ 91.675941][ T1276] do_sendfile+0x515/0xe20 [ 91.680394][ T1276] ? __cfi_mutex_unlock+0x10/0x10 [ 91.685455][ T1276] ? do_preadv+0x390/0x390 [ 91.689903][ T1276] ? __kasan_check_write+0x14/0x20 [ 91.695044][ T1276] ? fput+0x154/0x1a0 [ 91.699061][ T1276] __x64_sys_sendfile64+0x199/0x1f0 [ 91.704296][ T1276] ? __cfi_ksys_write+0x10/0x10 [ 91.709436][ T1276] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 91.715198][ T1276] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 91.721336][ T1276] x64_sys_call+0x62c/0x9a0 [ 91.725875][ T1276] do_syscall_64+0x4c/0xa0 [ 91.730332][ T1276] ? clear_bhb_loop+0x30/0x80 [ 91.735046][ T1276] ? clear_bhb_loop+0x30/0x80 [ 91.739763][ T1276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.745705][ T1276] RIP: 0033:0x7ff62e59e019 [ 91.750601][ T1276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.770240][ T1276] RSP: 002b:00007ff62f4b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 91.778693][ T1276] RAX: ffffffffffffffda RBX: 00007ff62e825fa0 RCX: 00007ff62e59e019 [ 91.786697][ T1276] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 91.794699][ T1276] RBP: 00007ff62f4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 91.802707][ T1276] R10: 000000007ffff082 R11: 0000000000000246 R12: 0000000000000001 [ 91.810712][ T1276] R13: 00007ff62e826038 R14: 00007ff62e825fa0 R15: 00007ffd1df1a4f8 [ 91.818736][ T1276] [ 91.819243][ T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.849464][ T28] audit: type=1400 audit(1785890536.065:321): avc: denied { bind } for pid=1277 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.879049][ T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.903153][ T292] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.908987][ T1280] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 91.916594][ T292] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.935833][ T1282] loop1: detected capacity change from 0 to 256 [ 91.942971][ T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.968129][ T290] EXT4-fs (loop4): unmounting filesystem. [ 91.974698][ T1280] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.986712][ T292] usb 4-1: config 0 descriptor?? [ 91.998701][ T1280] EXT4-fs (loop2): 1 truncate cleaned up [ 92.004536][ T1280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.038952][ T1280] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 92.078278][ T288] EXT4-fs (loop2): unmounting filesystem. [ 92.118204][ T1287] ext2: Unknown parameter 'obj_type' [ 92.176504][ T1285] Disabled LAPIC found during irq injection [ 92.188626][ T1289] EXT4-fs: dax option not supported [ 92.616849][ T1259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.632513][ T1259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.317136][ T1310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 93.587743][ T287] syz-executor: attempt to access beyond end of device [ 93.587743][ T287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.663213][ T292] usbhid 4-1:0.0: can't add hid device: -71 [ 93.671442][ T292] usbhid: probe of 4-1:0.0 failed with error -71 [ 93.692937][ T292] usb 4-1: USB disconnect, device number 8 [ 93.749518][ T1315] set_capacity_and_notify: 4 callbacks suppressed [ 93.749540][ T1315] loop1: detected capacity change from 0 to 4096 [ 93.779405][ T1315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.803561][ T1315] EXT4-fs (loop1): Test dummy encryption mode enabled [ 93.823873][ T1315] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 93.837895][ T1315] System zones: 0-5 [ 93.849459][ T1315] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.019700][ T1318] loop0: detected capacity change from 0 to 512 [ 94.060904][ T1318] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.099360][ T1318] EXT4-fs error (device loop0): ext4_iget_extra_inode:4765: inode #15: comm syz.0.238: corrupted in-inode xattr [ 94.134304][ T1321] loop4: detected capacity change from 0 to 512 [ 94.137941][ T1318] EXT4-fs (loop0): Remounting filesystem read-only [ 94.152407][ T1318] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.238: couldn't read orphan inode 15 (err -117) [ 94.172370][ T327] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 94.183246][ T1321] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.191722][ T1318] EXT4-fs (loop0): Remounting filesystem read-only [ 94.199896][ T1321] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.240: corrupted in-inode xattr [ 94.211875][ T1318] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 94.221325][ T1321] EXT4-fs (loop4): Remounting filesystem read-only [ 94.228121][ T1321] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.240: couldn't read orphan inode 15 (err -117) [ 94.256437][ T1321] EXT4-fs (loop4): Remounting filesystem read-only [ 94.266091][ T1321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.302955][ T1318] FAULT_INJECTION: forcing a failure. [ 94.302955][ T1318] name failslab, interval 1, probability 0, space 0, times 0 [ 94.318270][ T1318] CPU: 1 PID: 1318 Comm: syz.0.238 Not tainted syzkaller #0 [ 94.325618][ T1318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.335700][ T1318] Call Trace: [ 94.338998][ T1318] [ 94.341952][ T1318] __dump_stack+0x21/0x24 [ 94.346316][ T1318] dump_stack_lvl+0x110/0x170 [ 94.351062][ T1318] ? __cfi_dump_stack_lvl+0x8/0x8 [ 94.356209][ T1318] dump_stack+0x15/0x24 [ 94.360392][ T1318] should_fail_ex+0x3bf/0x510 [ 94.365093][ T1318] ? getname_flags+0xba/0x510 [ 94.369793][ T1318] __should_failslab+0xac/0xf0 [ 94.374624][ T1318] should_failslab+0x9/0x20 [ 94.379170][ T1318] kmem_cache_alloc+0x3b/0x320 [ 94.383973][ T1318] getname_flags+0xba/0x510 [ 94.388518][ T1318] getname+0x19/0x20 [ 94.392441][ T1318] do_sys_openat2+0xeb/0x820 [ 94.397079][ T1318] ? __kasan_check_write+0x14/0x20 [ 94.402220][ T1318] ? do_sys_open+0xe0/0xe0 [ 94.406665][ T1318] ? ksys_write+0x1fa/0x260 [ 94.411195][ T1318] ? __cfi_ksys_write+0x10/0x10 [ 94.416075][ T1318] __x64_sys_openat+0x136/0x160 [ 94.420963][ T1318] x64_sys_call+0x783/0x9a0 [ 94.424300][ T327] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 94.425534][ T1318] do_syscall_64+0x4c/0xa0 [ 94.438122][ T1318] ? clear_bhb_loop+0x30/0x80 [ 94.442375][ T327] usb 2-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 94.442823][ T1318] ? clear_bhb_loop+0x30/0x80 [ 94.457775][ T1318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.462387][ T327] usb 2-1: config 1 has no interface number 0 [ 94.463732][ T1318] RIP: 0033:0x7f42d5d9e019 [ 94.469854][ T327] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 94.474235][ T1318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.474255][ T1318] RSP: 002b:00007f42d6ca3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 94.474276][ T1318] RAX: ffffffffffffffda RBX: 00007f42d6025fa0 RCX: 00007f42d5d9e019 [ 94.474290][ T1318] RDX: 0000000000008042 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 94.474304][ T1318] RBP: 00007f42d6ca3090 R08: 0000000000000000 R09: 0000000000000000 [ 94.474316][ T1318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.474327][ T1318] R13: 00007f42d6026038 R14: 00007f42d6025fa0 R15: 00007ffcb741ce78 [ 94.474347][ T1318] [ 94.572370][ T327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.585249][ T327] rndis_host 2-1:1.236: skipping garbage [ 94.602119][ T1327] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.240: Logical block already allocated [ 94.604001][ T327] rndis_host 2-1:1.236: skipping garbage [ 94.626941][ T1327] EXT4-fs (loop4): Remounting filesystem read-only [ 94.639739][ T327] usb 2-1: bad CDC descriptors [ 94.645388][ T327] cdc_acm 2-1:1.236: skipping garbage [ 94.651165][ T327] cdc_acm 2-1:1.236: skipping garbage [ 94.657132][ T287] EXT4-fs (loop0): unmounting filesystem. [ 94.687160][ T1332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.243'. [ 94.698030][ T1332] netlink: 240 bytes leftover after parsing attributes in process `syz.3.243'. [ 94.730865][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 94.730882][ T28] audit: type=1400 audit(1785890538.945:333): avc: denied { ioctl } for pid=1338 comm="syz.2.246" path="socket:[20233]" dev="sockfs" ino=20233 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.731619][ T1341] loop3: detected capacity change from 0 to 512 [ 94.771367][ T1341] ext2: Unknown parameter 'obj_type' [ 94.874106][ T511] usb 2-1: USB disconnect, device number 11 [ 95.022790][ T290] EXT4-fs (loop4): unmounting filesystem. [ 95.111082][ T1354] loop4: detected capacity change from 0 to 256 [ 99.158478][ T511] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 99.225403][ T286] EXT4-fs (loop1): unmounting filesystem. [ 99.226042][ T1364] loop2: detected capacity change from 0 to 128 [ 99.275121][ T1364] tipc: Started in network mode [ 99.288471][ T1364] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 99.298364][ T1364] tipc: Enabled bearer , priority 0 [ 99.315200][ T1368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 99.336793][ T1370] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 99.439041][ T1377] netlink: 76 bytes leftover after parsing attributes in process `syz.1.257'. [ 99.448229][ T1377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.257'. [ 99.457434][ T1377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.257'. [ 99.466481][ T1377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.257'. [ 99.593897][ T1383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.258'. [ 99.605196][ T1380] netlink: 240 bytes leftover after parsing attributes in process `syz.1.258'. [ 100.098218][ T1390] loop3: detected capacity change from 0 to 512 [ 100.223534][ T1390] ext2: Unknown parameter 'obj_type' [ 100.237763][ T1392] loop0: detected capacity change from 0 to 4096 [ 101.103671][ T6] tipc: Node number set to 43690 [ 101.191474][ T1392] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.248175][ T1392] EXT4-fs (loop0): Test dummy encryption mode enabled [ 101.284596][ T28] audit: type=1400 audit(1785890545.505:334): avc: denied { load_policy } for pid=1397 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 101.305512][ T1410] fuse: Bad value for 'fd' [ 101.310315][ T1398] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 101.351177][ T1413] FAULT_INJECTION: forcing a failure. [ 101.351177][ T1413] name failslab, interval 1, probability 0, space 0, times 0 [ 101.365410][ T1398] SELinux: failed to load policy [ 101.371557][ T1413] CPU: 1 PID: 1413 Comm: syz.2.266 Not tainted syzkaller #0 [ 101.378927][ T1413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.389191][ T1413] Call Trace: [ 101.392495][ T1413] [ 101.395531][ T1413] __dump_stack+0x21/0x24 [ 101.399896][ T1413] dump_stack_lvl+0x110/0x170 [ 101.404601][ T1413] ? __cfi_dump_stack_lvl+0x8/0x8 [ 101.409664][ T1413] dump_stack+0x15/0x24 [ 101.413867][ T1413] should_fail_ex+0x3bf/0x510 [ 101.418576][ T1413] __should_failslab+0xac/0xf0 [ 101.423381][ T1413] should_failslab+0x9/0x20 [ 101.427924][ T1413] kmem_cache_alloc_node+0x42/0x330 [ 101.433346][ T1413] ? __alloc_skb+0xe8/0x4a0 [ 101.437887][ T1413] __alloc_skb+0xe8/0x4a0 [ 101.442247][ T1413] netlink_sendmsg+0x635/0xbd0 [ 101.447051][ T1413] ? __cfi_netlink_sendmsg+0x10/0x10 [ 101.452374][ T1413] ? security_socket_sendmsg+0x93/0xb0 [ 101.457878][ T1413] ? __cfi_netlink_sendmsg+0x10/0x10 [ 101.463236][ T1413] ____sys_sendmsg+0x5fb/0x9c0 [ 101.468050][ T1413] ? __sys_sendmsg_sock+0x40/0x40 [ 101.473112][ T1413] ? import_iovec+0x7c/0xb0 [ 101.477677][ T1413] ___sys_sendmsg+0x2a2/0x360 [ 101.482409][ T1413] ? __sys_sendmsg+0x290/0x290 [ 101.487213][ T1413] ? __kasan_check_write+0x14/0x20 [ 101.492366][ T1413] ? proc_fail_nth_write+0x180/0x200 [ 101.497724][ T1413] ? vfs_write+0xa51/0xd00 [ 101.502270][ T1413] ? __fdget+0x19c/0x220 [ 101.506555][ T1413] __x64_sys_sendmsg+0x20d/0x2e0 [ 101.511531][ T1413] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 101.517034][ T1413] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 101.523139][ T1413] x64_sys_call+0x171/0x9a0 [ 101.527690][ T1413] do_syscall_64+0x4c/0xa0 [ 101.532158][ T1413] ? clear_bhb_loop+0x30/0x80 [ 101.532480][ T1392] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 101.537061][ T1413] ? clear_bhb_loop+0x30/0x80 [ 101.549907][ T1413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.555851][ T1413] RIP: 0033:0x7ff62e59e019 [ 101.560308][ T1413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.562505][ T1392] System zones: [ 101.579948][ T1413] RSP: 002b:00007ff62f4b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.579978][ T1413] RAX: ffffffffffffffda RBX: 00007ff62e825fa0 RCX: 00007ff62e59e019 [ 101.579993][ T1413] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 101.580005][ T1413] RBP: 00007ff62f4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 101.602422][ T1392] 0-5 [ 101.608034][ T1413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.626632][ T1413] R13: 00007ff62e826038 R14: 00007ff62e825fa0 R15: 00007ffd1df1a4f8 [ 101.632492][ T1392] [ 101.634640][ T1413] [ 101.668349][ T1392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 101.713478][ T1422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 101.834400][ T1426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.270'. [ 101.868317][ T1426] netlink: 240 bytes leftover after parsing attributes in process `syz.2.270'. [ 102.274145][ T1404] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 102.783053][ T1448] loop4: detected capacity change from 0 to 512 [ 102.820843][ T1448] ext2: Unknown parameter 'obj_type' [ 103.301565][ T291] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 103.451322][ T1404] usb 1-1: device descriptor read/all, error -71 [ 103.540980][ T287] EXT4-fs (loop0): unmounting filesystem. [ 103.554326][ T291] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.565254][ T291] usb 2-1: not running at top speed; connect to a high speed hub [ 103.585006][ T291] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.598388][ T291] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.732526][ T291] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 103.741628][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.762636][ T291] usb 2-1: Product: syz [ 103.766867][ T291] usb 2-1: Manufacturer: syz [ 103.771487][ T291] usb 2-1: SerialNumber: syz [ 103.772089][ T1458] FAULT_INJECTION: forcing a failure. [ 103.772089][ T1458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.789283][ T6] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 103.806081][ T1458] CPU: 0 PID: 1458 Comm: syz.0.280 Not tainted syzkaller #0 [ 103.813437][ T1458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.823515][ T1458] Call Trace: [ 103.826820][ T1458] [ 103.829874][ T1458] __dump_stack+0x21/0x24 [ 103.834233][ T1458] dump_stack_lvl+0x110/0x170 [ 103.838930][ T1458] ? __cfi_dump_stack_lvl+0x8/0x8 [ 103.843980][ T1458] dump_stack+0x15/0x24 [ 103.848158][ T1458] should_fail_ex+0x3bf/0x510 [ 103.852857][ T1458] should_fail+0xb/0x10 [ 103.857043][ T1458] should_fail_usercopy+0x1a/0x20 [ 103.862115][ T1458] _copy_to_user+0x1e/0x90 [ 103.866567][ T1458] simple_read_from_buffer+0xe9/0x160 [ 103.871968][ T1458] proc_fail_nth_read+0x1a6/0x220 [ 103.877015][ T1458] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 103.882873][ T1458] ? security_file_permission+0x94/0xb0 [ 103.888458][ T1458] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 103.894029][ T1458] vfs_read+0x286/0x930 [ 103.898210][ T1458] ? __cfi_vfs_read+0x10/0x10 [ 103.902915][ T1458] ? __kasan_check_write+0x14/0x20 [ 103.908045][ T1458] ? mutex_lock+0x93/0x1b0 [ 103.912486][ T1458] ? __cfi_mutex_lock+0x10/0x10 [ 103.917364][ T1458] ? __fdget_pos+0x2cd/0x380 [ 103.922008][ T1458] ? ksys_read+0x70/0x260 [ 103.926356][ T1458] ksys_read+0x14a/0x260 [ 103.930613][ T1458] ? __cfi_ksys_read+0x10/0x10 [ 103.935395][ T1458] ? debug_smp_processor_id+0x17/0x20 [ 103.940784][ T1458] __x64_sys_read+0x7b/0x90 [ 103.945326][ T1458] x64_sys_call+0x2f/0x9a0 [ 103.949769][ T1458] do_syscall_64+0x4c/0xa0 [ 103.954294][ T1458] ? clear_bhb_loop+0x30/0x80 [ 103.959030][ T1458] ? clear_bhb_loop+0x30/0x80 [ 103.963756][ T1458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.969698][ T1458] RIP: 0033:0x7f42d5d5e84e [ 103.974136][ T1458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.993936][ T1458] RSP: 002b:00007f42d6ca2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.002585][ T1458] RAX: ffffffffffffffda RBX: 00007f42d6ca36c0 RCX: 00007f42d5d5e84e [ 104.010579][ T1458] RDX: 000000000000000f RSI: 00007f42d6ca30a0 RDI: 0000000000000006 [ 104.018565][ T1458] RBP: 00007f42d6ca3090 R08: 0000000000000000 R09: 0000000000000000 [ 104.026576][ T1458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.034568][ T1458] R13: 00007f42d6026038 R14: 00007f42d6025fa0 R15: 00007ffcb741ce78 [ 104.042577][ T1458] [ 104.047207][ T28] audit: type=1400 audit(1785890548.265:335): avc: denied { read write } for pid=1445 comm="syz.1.276" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.047242][ T28] audit: type=1400 audit(1785890548.265:336): avc: denied { open } for pid=1445 comm="syz.1.276" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.153444][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.174609][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.202374][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.217491][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.232634][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.246444][ T6] usb 4-1: config 0 descriptor?? [ 104.343328][ T1472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.285'. [ 104.367830][ T1472] netlink: 240 bytes leftover after parsing attributes in process `syz.4.285'. [ 104.382009][ T291] usb 2-1: USB disconnect, device number 12 [ 104.482927][ T1468] loop0: detected capacity change from 0 to 40427 [ 104.493690][ T1468] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 104.501920][ T1468] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 104.514331][ T1468] F2FS-fs (loop0): invalid crc value [ 104.594224][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.633770][ T1468] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.740701][ T1468] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 104.748341][ T1468] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.846563][ T6] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 104.855846][ T6] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 104.885583][ T1446] syz.1.276 (1446) used greatest stack depth: 19512 bytes left [ 104.942149][ T1455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.950857][ T1455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.960103][ T291] usb 4-1: USB disconnect, device number 9 [ 104.983107][ T1481] fido_id[1481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 105.407521][ T1490] loop2: detected capacity change from 0 to 4096 [ 105.432789][ T1490] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.456863][ T1490] EXT4-fs (loop2): Test dummy encryption mode enabled [ 105.476721][ T1490] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 105.490449][ T1490] System zones: 0-5 [ 105.500940][ T1490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.852501][ T291] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 106.079712][ T291] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 106.113445][ T291] usb 3-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 106.146770][ T291] usb 3-1: config 1 has no interface number 0 [ 106.173078][ T291] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 106.195404][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.202737][ T1507] loop0: detected capacity change from 0 to 512 [ 106.213533][ T1507] ext2: Unknown parameter 'obj_type' [ 106.304354][ T291] rndis_host 3-1:1.236: skipping garbage [ 106.312466][ T291] usb 3-1: bad CDC descriptors [ 106.317466][ T291] cdc_acm 3-1:1.236: skipping garbage [ 106.460500][ T1511] loop3: detected capacity change from 0 to 128 [ 106.473145][ T1511] FAT-fs (loop3): bogus number of reserved sectors [ 106.479742][ T1511] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 106.530023][ T323] usb 3-1: USB disconnect, device number 8 [ 106.542378][ T1511] FAT-fs (loop3): Can't find a valid FAT filesystem [ 106.586613][ T1511] loop3: detected capacity change from 0 to 128 [ 106.948846][ T1519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.298'. [ 106.974288][ T1519] loop3: detected capacity change from 0 to 256 [ 107.022607][ T326] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.057074][ T288] EXT4-fs (loop2): unmounting filesystem. [ 107.067504][ T1519] Disabled LAPIC found during irq injection [ 107.188781][ T1527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.299'. [ 107.198975][ T1527] netlink: 240 bytes leftover after parsing attributes in process `syz.2.299'. [ 107.632358][ T291] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 107.664602][ T28] audit: type=1326 audit(1785890551.885:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.4.302" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e019 code=0x7ffc0000 [ 107.690614][ T28] audit: type=1326 audit(1785890551.885:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.4.302" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e019 code=0x7ffc0000 [ 107.715817][ T28] audit: type=1326 audit(1785890551.885:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.4.302" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e019 code=0x7ffc0000 [ 107.740914][ T28] audit: type=1326 audit(1785890551.885:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.4.302" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5a1559e019 code=0x7ffc0000 [ 107.766310][ T28] audit: type=1326 audit(1785890551.885:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.4.302" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e019 code=0x7ffc0000 [ 107.766344][ T28] audit: type=1326 audit(1785890551.885:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.4.302" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e019 code=0x7ffc0000 [ 107.766372][ T28] audit: type=1326 audit(1785890551.885:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.4.302" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e019 code=0x7ffc0000 [ 107.766401][ T28] audit: type=1326 audit(1785890551.885:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.4.302" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e019 code=0x7ffc0000 [ 107.766430][ T28] audit: type=1326 audit(1785890551.885:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.4.302" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a1559e019 code=0x7ffc0000 [ 107.766460][ T28] audit: type=1326 audit(1785890551.885:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.4.302" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e019 code=0x7ffc0000 [ 107.916361][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.927299][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.937070][ T291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.949991][ T291] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.959108][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.967953][ T291] usb 1-1: config 0 descriptor?? [ 108.126805][ T1539] loop2: detected capacity change from 0 to 40427 [ 108.137474][ T1539] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 108.145462][ T1539] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 108.285653][ T1539] F2FS-fs (loop2): invalid crc value [ 108.373575][ T1539] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.434369][ T1539] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 108.441538][ T1539] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 108.761751][ T1526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.118947][ T1526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.346975][ T1559] FAULT_INJECTION: forcing a failure. [ 109.346975][ T1559] name failslab, interval 1, probability 0, space 0, times 0 [ 109.390392][ T1559] CPU: 1 PID: 1559 Comm: syz.3.307 Not tainted syzkaller #0 [ 109.398193][ T1559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.408277][ T1559] Call Trace: [ 109.411580][ T1559] [ 109.414535][ T1559] __dump_stack+0x21/0x24 [ 109.418937][ T1559] dump_stack_lvl+0x110/0x170 [ 109.423651][ T1559] ? __cfi_dump_stack_lvl+0x8/0x8 [ 109.428710][ T1559] ? kernel_text_address+0xa0/0xd0 [ 109.433885][ T1559] ? unwind_get_return_address+0x4d/0x90 [ 109.439596][ T1559] dump_stack+0x15/0x24 [ 109.443788][ T1559] should_fail_ex+0x3bf/0x510 [ 109.448494][ T1559] ? mas_alloc_nodes+0x2d8/0x850 [ 109.453463][ T1559] __should_failslab+0xac/0xf0 [ 109.458268][ T1559] should_failslab+0x9/0x20 [ 109.462805][ T1559] kmem_cache_alloc+0x3b/0x320 [ 109.467603][ T1559] mas_alloc_nodes+0x2d8/0x850 [ 109.472418][ T1559] mas_preallocate+0xe3d/0x1430 [ 109.477311][ T1559] ? __cfi_mas_preallocate+0x10/0x10 [ 109.482630][ T1559] __vma_adjust+0x622/0x1f10 [ 109.487288][ T1559] ? __cfi___vma_adjust+0x10/0x10 [ 109.492419][ T1559] ? rwsem_write_trylock+0x136/0x300 [ 109.497844][ T1559] __split_vma+0x725/0x980 [ 109.502345][ T1559] ? find_vma_prev+0x111/0x190 [ 109.507157][ T1559] madvise_update_vma+0x338/0xa20 [ 109.512223][ T1559] do_madvise+0xdc1/0x3290 [ 109.516807][ T1559] ? _parse_integer_limit+0x18e/0x1d0 [ 109.522225][ T1559] ? __cfi_do_madvise+0x10/0x10 [ 109.527126][ T1559] ? kstrtouint+0x74/0xe0 [ 109.531524][ T1559] ? kstrtouint_from_user+0x113/0x170 [ 109.536938][ T1559] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 109.542805][ T1559] ? __kasan_check_write+0x14/0x20 [ 109.547955][ T1559] ? proc_fail_nth_write+0x180/0x200 [ 109.553282][ T1559] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 109.558951][ T1559] ? security_file_permission+0x8a/0xb0 [ 109.564585][ T1559] ? vfs_write+0xa51/0xd00 [ 109.569048][ T1559] ? __cfi_vfs_write+0x10/0x10 [ 109.573903][ T1559] ? __kasan_check_write+0x14/0x20 [ 109.579076][ T1559] ? mutex_unlock+0x8f/0x230 [ 109.583862][ T1559] ? __cfi_mutex_unlock+0x10/0x10 [ 109.588964][ T1559] ? __kasan_check_write+0x14/0x20 [ 109.594124][ T1559] ? fput+0x154/0x1a0 [ 109.598165][ T1559] ? ksys_write+0x1fa/0x260 [ 109.602710][ T1559] ? __cfi_ksys_write+0x10/0x10 [ 109.607603][ T1559] __x64_sys_madvise+0xa9/0xc0 [ 109.612422][ T1559] x64_sys_call+0x99e/0x9a0 [ 109.617098][ T1559] do_syscall_64+0x4c/0xa0 [ 109.621676][ T1559] ? clear_bhb_loop+0x30/0x80 [ 109.626415][ T1559] ? clear_bhb_loop+0x30/0x80 [ 109.631137][ T1559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.637090][ T1559] RIP: 0033:0x7f5ba2f9e019 [ 109.641557][ T1559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.661437][ T1559] RSP: 002b:00007f5ba19d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 109.670037][ T1559] RAX: ffffffffffffffda RBX: 00007f5ba3226090 RCX: 00007f5ba2f9e019 [ 109.678052][ T1559] RDX: 0000000000000010 RSI: 0000000000003000 RDI: 0000200000600000 [ 109.686068][ T1559] RBP: 00007f5ba19d6090 R08: 0000000000000000 R09: 0000000000000000 [ 109.694120][ T1559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.702131][ T1559] R13: 00007f5ba3226128 R14: 00007f5ba3226090 R15: 00007ffdae283cc8 [ 109.710155][ T1559] [ 109.789768][ T1561] loop4: detected capacity change from 0 to 4096 [ 109.810318][ T1561] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.826073][ T1561] EXT4-fs (loop4): Test dummy encryption mode enabled [ 109.858494][ T1561] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 109.875363][ T1564] loop3: detected capacity change from 0 to 512 [ 109.883806][ T1561] System zones: 0-5 [ 109.892749][ T1564] ext2: Unknown parameter 'obj_type' [ 109.909219][ T1561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.932578][ T391] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.182120][ T291] usbhid 1-1:0.0: can't add hid device: -71 [ 110.188186][ T291] usbhid: probe of 1-1:0.0 failed with error -71 [ 110.203452][ T291] usb 1-1: USB disconnect, device number 10 [ 110.212473][ T292] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.222358][ T1404] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 110.291046][ T1569] loop0: detected capacity change from 0 to 40427 [ 110.306068][ T1569] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 110.323948][ T1569] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.333047][ T1569] F2FS-fs (loop0): invalid crc value [ 110.353449][ T1569] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.412337][ T292] usb 3-1: Using ep0 maxpacket: 16 [ 110.417911][ T1569] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 110.419178][ T292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.437400][ T1404] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 110.452317][ T1404] usb 5-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 110.454070][ T1569] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 110.463580][ T292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.490193][ T1404] usb 5-1: config 1 has no interface number 0 [ 110.510822][ T1404] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 110.520295][ T292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.542776][ T1404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.551269][ T292] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.565560][ T292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.574356][ T1404] rndis_host 5-1:1.236: skipping garbage [ 110.580994][ T1404] usb 5-1: bad CDC descriptors [ 110.586483][ T1404] cdc_acm 5-1:1.236: skipping garbage [ 110.622835][ T292] usb 3-1: config 0 descriptor?? [ 110.882907][ T1567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.034758][ T291] usb 5-1: USB disconnect, device number 8 [ 111.044871][ T1567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.273140][ T1567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.283355][ T1567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.431776][ T292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 111.439177][ T292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x4 [ 111.446576][ T292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 111.457654][ T292] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input4 [ 111.481097][ T292] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 111.559527][ T290] EXT4-fs (loop4): unmounting filesystem. [ 111.623986][ T292] usb 3-1: USB disconnect, device number 9 [ 111.842327][ T291] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 112.033055][ T291] usb 1-1: no configurations [ 112.037868][ T291] usb 1-1: can't read configurations, error -22 [ 112.202347][ T291] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 112.283465][ T1594] loop2: detected capacity change from 0 to 40427 [ 112.298032][ T1594] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 112.313392][ T1594] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 112.333937][ T1594] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.376696][ T1594] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 112.383842][ T1594] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.392702][ T291] usb 1-1: no configurations [ 112.397411][ T291] usb 1-1: can't read configurations, error -22 [ 112.409511][ T291] usb usb1-port1: attempt power cycle [ 112.785713][ T1601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.318'. [ 112.799093][ T1601] netlink: 240 bytes leftover after parsing attributes in process `syz.4.318'. [ 112.822332][ T291] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 112.863117][ T291] usb 1-1: no configurations [ 112.867797][ T291] usb 1-1: can't read configurations, error -22 [ 113.012123][ T1604] loop3: detected capacity change from 0 to 40427 [ 113.022409][ T291] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 113.029978][ T1604] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 113.046536][ T1604] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 113.056897][ T1604] F2FS-fs (loop3): invalid crc value [ 113.063133][ T291] usb 1-1: no configurations [ 113.067776][ T291] usb 1-1: can't read configurations, error -22 [ 113.079767][ T291] usb usb1-port1: unable to enumerate USB device [ 113.079922][ T1604] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.127194][ T1604] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 113.134395][ T1604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.397652][ T1612] 9pnet_fd: Insufficient options for proto=fd [ 113.404412][ T1612] fuse: Bad value for 'fd' [ 113.631149][ T288] syz-executor: attempt to access beyond end of device [ 113.631149][ T288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.655849][ T1620] loop3: detected capacity change from 0 to 512 [ 113.673633][ T1620] ext2: Unknown parameter 'obj_type' [ 113.982411][ T474] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.163991][ T474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.175153][ T474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.186009][ T474] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.199775][ T474] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.209685][ T474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.221441][ T474] usb 5-1: config 0 descriptor?? [ 114.646614][ T1634] loop0: detected capacity change from 0 to 4096 [ 114.655571][ T1634] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.664356][ T1634] EXT4-fs (loop0): Test dummy encryption mode enabled [ 114.691901][ T1634] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 114.702417][ T1634] System zones: 0-5 [ 114.713274][ T1634] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.727979][ T1632] loop3: detected capacity change from 0 to 40427 [ 114.737928][ T1632] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 114.745942][ T1632] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.769764][ T1632] F2FS-fs (loop3): invalid crc value [ 114.785262][ T1632] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.824614][ T1632] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.831808][ T1632] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.940843][ T1617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.951264][ T1617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.562098][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 115.562134][ T28] audit: type=1400 audit(1785890559.775:381): avc: denied { create } for pid=1648 comm="syz.2.328" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.603804][ T1649] Unsupported ieee802154 address type: 0 [ 115.652533][ T28] audit: type=1400 audit(1785890559.805:382): avc: denied { map } for pid=1648 comm="syz.2.328" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.722347][ T28] audit: type=1400 audit(1785890559.805:383): avc: denied { read write } for pid=1648 comm="syz.2.328" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.776232][ T474] usbhid 5-1:0.0: can't add hid device: -71 [ 115.782705][ T474] usbhid: probe of 5-1:0.0 failed with error -71 [ 115.791422][ T28] audit: type=1400 audit(1785890559.825:384): avc: denied { bind } for pid=1648 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.820168][ T474] usb 5-1: USB disconnect, device number 9 [ 115.840898][ T28] audit: type=1400 audit(1785890559.855:385): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.890275][ T28] audit: type=1400 audit(1785890559.855:386): avc: denied { open } for pid=288 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.947485][ T28] audit: type=1400 audit(1785890559.855:387): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.993811][ T19] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 116.003558][ T28] audit: type=1400 audit(1785890559.915:388): avc: denied { mounton } for pid=1651 comm="syz.2.329" path="/76/dev" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.025753][ T28] audit: type=1400 audit(1785890559.915:389): avc: denied { mount } for pid=1651 comm="syz.2.329" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 116.049489][ T28] audit: type=1400 audit(1785890559.915:390): avc: denied { mount } for pid=1651 comm="syz.2.329" name="/" dev="configfs" ino=6166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.193443][ T19] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 116.203918][ T19] usb 1-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 116.216669][ T19] usb 1-1: config 1 has no interface number 0 [ 116.222932][ T19] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 116.232238][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.251561][ T19] rndis_host 1-1:1.236: skipping garbage [ 116.260621][ T19] usb 1-1: bad CDC descriptors [ 116.270023][ T19] cdc_acm 1-1:1.236: skipping garbage [ 116.323798][ T1655] loop4: detected capacity change from 0 to 40427 [ 116.335483][ T1655] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 116.348837][ T1655] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.365030][ T1655] F2FS-fs (loop4): invalid crc value [ 116.377233][ T1655] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.409449][ T1655] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 116.417087][ T1655] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.461147][ T19] usb 1-1: USB disconnect, device number 15 [ 116.716465][ T1668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.332'. [ 116.726146][ T1668] netlink: 240 bytes leftover after parsing attributes in process `syz.4.332'. [ 116.757631][ T1670] 9pnet_fd: Insufficient options for proto=fd [ 116.764828][ T1670] fuse: Bad value for 'fd' [ 116.789997][ T1672] loop4: detected capacity change from 0 to 256 [ 116.815616][ T1672] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 116.909447][ T1666] loop2: detected capacity change from 0 to 40427 [ 116.922996][ T1666] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 116.934987][ T1666] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 116.972088][ T1666] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.173556][ T1666] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 117.189930][ T1666] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.297971][ T287] EXT4-fs (loop0): unmounting filesystem. [ 117.628089][ T456] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 117.700823][ T1682] loop4: detected capacity change from 0 to 512 [ 117.725725][ T1682] ext2: Unknown parameter 'obj_type' [ 117.892742][ T456] usb 1-1: no configurations [ 117.897443][ T456] usb 1-1: can't read configurations, error -22 [ 118.062358][ T456] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 118.262990][ T456] usb 1-1: no configurations [ 118.267735][ T456] usb 1-1: can't read configurations, error -22 [ 118.274189][ T456] usb usb1-port1: attempt power cycle [ 118.463233][ T288] syz-executor: attempt to access beyond end of device [ 118.463233][ T288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.477320][ T474] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 118.663429][ T474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.674391][ T474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.684390][ T456] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 118.691926][ T474] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.704840][ T474] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.713950][ T474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.722659][ T474] usb 4-1: config 0 descriptor?? [ 118.733120][ T456] usb 1-1: no configurations [ 118.737771][ T456] usb 1-1: can't read configurations, error -22 [ 118.878379][ T1704] loop4: detected capacity change from 0 to 40427 [ 118.888573][ T1704] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 118.896554][ T1704] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.902531][ T456] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 118.907597][ T1704] F2FS-fs (loop4): invalid crc value [ 118.919271][ T1704] F2FS-fs (loop4): Found nat_bits in checkpoint [ 118.943116][ T456] usb 1-1: no configurations [ 118.947797][ T456] usb 1-1: can't read configurations, error -22 [ 118.961967][ T456] usb usb1-port1: unable to enumerate USB device [ 118.971185][ T1704] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 118.978391][ T1704] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.437544][ T1696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.480639][ T1696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.073232][ T474] usbhid 4-1:0.0: can't add hid device: -71 [ 120.082396][ T474] usbhid: probe of 4-1:0.0 failed with error -71 [ 120.100406][ T474] usb 4-1: USB disconnect, device number 10 [ 120.294034][ T1716] loop2: detected capacity change from 0 to 40427 [ 120.300992][ T1719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.345'. [ 120.310253][ T1716] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 120.310494][ T1719] netlink: 240 bytes leftover after parsing attributes in process `syz.3.345'. [ 120.327465][ T1716] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 120.352077][ T1716] F2FS-fs (loop2): invalid crc value [ 120.366844][ T1721] loop3: detected capacity change from 0 to 4096 [ 120.380417][ T1721] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.390197][ T1716] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.401368][ T1726] loop0: detected capacity change from 0 to 256 [ 120.407969][ T1721] EXT4-fs (loop3): Test dummy encryption mode enabled [ 120.424064][ T1721] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 120.432480][ T1721] System zones: 0-5 [ 120.437372][ T1721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 120.501301][ T1716] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.508569][ T1716] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 121.617464][ T1731] loop0: detected capacity change from 0 to 1024 [ 122.038315][ T1731] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 122.287137][ T1736] fuse: Bad value for 'fd' [ 122.442978][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 122.442995][ T28] audit: type=1400 audit(1785890566.665:470): avc: denied { mounton } for pid=1742 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 122.482343][ T1404] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 122.547977][ T1742] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.569944][ T1747] loop2: detected capacity change from 0 to 512 [ 122.571397][ T1742] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.591373][ T1747] ext2: Unknown parameter 'obj_type' [ 122.598815][ T1742] device bridge_slave_0 entered promiscuous mode [ 122.606574][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.614154][ T1742] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.621855][ T1742] device bridge_slave_1 entered promiscuous mode [ 122.673604][ T1404] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 122.695880][ T1404] usb 4-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 122.731219][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.735364][ T1404] usb 4-1: config 1 has no interface number 0 [ 122.738346][ T1742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.751744][ T1742] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.758926][ T1742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.766175][ T1404] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 122.781670][ T1404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.846004][ T1404] rndis_host 4-1:1.236: skipping garbage [ 122.857308][ T1404] rndis_host 4-1:1.236: skipping garbage [ 122.869642][ T1404] rndis_host 4-1:1.236: invalid descriptor buffer length [ 122.879202][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.883925][ T1404] usb 4-1: bad CDC descriptors [ 122.891814][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.898892][ T1404] cdc_acm 4-1:1.236: skipping garbage [ 122.909093][ T1404] cdc_acm 4-1:1.236: skipping garbage [ 122.932943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.934198][ T1404] cdc_acm 4-1:1.236: invalid descriptor buffer length [ 122.947723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.959913][ T1741] loop0: detected capacity change from 0 to 40427 [ 122.974261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.986317][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.993444][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.001830][ T1741] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 123.009341][ T1741] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 123.017885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.026676][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.033811][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.052169][ T1741] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.053006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.067136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.083548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.086904][ T292] usb 4-1: USB disconnect, device number 11 [ 123.095558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.105996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.114814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.123406][ T1742] device veth0_vlan entered promiscuous mode [ 123.142877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.153887][ T1742] device veth1_macvtap entered promiscuous mode [ 123.174952][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.189214][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.217585][ T28] audit: type=1400 audit(1785890567.435:471): avc: denied { mounton } for pid=1742 comm="syz-executor" path="/root/syzkaller.SQ17F8/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 123.242793][ T28] audit: type=1400 audit(1785890567.435:472): avc: denied { mount } for pid=1742 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.268608][ T28] audit: type=1400 audit(1785890567.435:473): avc: denied { mount } for pid=1742 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 123.290761][ T1741] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 123.301576][ T1741] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.323122][ T28] audit: type=1400 audit(1785890567.435:474): avc: denied { mounton } for pid=1742 comm="syz-executor" path="/root/syzkaller.SQ17F8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 123.351722][ T1758] loop5: detected capacity change from 0 to 256 [ 123.388775][ T28] audit: type=1400 audit(1785890567.435:475): avc: denied { mounton } for pid=1742 comm="syz-executor" path="/root/syzkaller.SQ17F8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 123.417710][ T1758] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 123.430343][ T28] audit: type=1400 audit(1785890567.465:476): avc: denied { mounton } for pid=1742 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 123.454544][ T28] audit: type=1400 audit(1785890567.465:477): avc: denied { mounton } for pid=1742 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 123.478685][ T28] audit: type=1400 audit(1785890567.465:478): avc: denied { mount } for pid=1742 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 123.597386][ T1756] loop4: detected capacity change from 0 to 40427 [ 123.604661][ T1756] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 123.682552][ T1756] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 123.777789][ T1756] F2FS-fs (loop4): invalid crc value [ 123.968928][ T1756] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.018789][ T289] EXT4-fs (loop3): unmounting filesystem. [ 124.031809][ T1756] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 124.039089][ T1756] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 124.742375][ T474] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 124.762947][ T323] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 124.953160][ T474] usb 6-1: no configurations [ 124.957818][ T474] usb 6-1: can't read configurations, error -22 [ 124.965482][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.986910][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.007029][ T323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.040362][ T323] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.049745][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.082011][ T323] usb 3-1: config 0 descriptor?? [ 125.132334][ T474] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 125.218431][ T1783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.359'. [ 125.227634][ T1783] netlink: 240 bytes leftover after parsing attributes in process `syz.4.359'. [ 125.265228][ T1785] UDC core: g1: couldn't find an available UDC or it's busy [ 125.342687][ T474] usb 6-1: no configurations [ 125.347621][ T474] usb 6-1: can't read configurations, error -22 [ 125.354031][ T456] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 125.362134][ T474] usb usb6-port1: attempt power cycle [ 125.508071][ T1769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.521158][ T1769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.553434][ T456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.570953][ T456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.591814][ T456] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.608819][ T287] syz-executor: attempt to access beyond end of device [ 125.608819][ T287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.623587][ T456] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.633230][ T456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.654516][ T456] usb 4-1: config 0 descriptor?? [ 125.782363][ T474] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 125.823034][ T474] usb 6-1: no configurations [ 125.827750][ T474] usb 6-1: can't read configurations, error -22 [ 125.925990][ T1789] loop0: detected capacity change from 0 to 40427 [ 125.933199][ T1789] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 125.940973][ T1789] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 125.963914][ T1789] F2FS-fs (loop0): invalid crc value [ 125.982887][ T1789] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.992476][ T474] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 126.035235][ T1789] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 126.042919][ T1789] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.052894][ T474] usb 6-1: no configurations [ 126.057566][ T474] usb 6-1: can't read configurations, error -22 [ 126.064207][ T323] usbhid 3-1:0.0: can't add hid device: -71 [ 126.076016][ T323] usbhid: probe of 3-1:0.0 failed with error -71 [ 126.083014][ T474] usb usb6-port1: unable to enumerate USB device [ 126.090392][ T323] usb 3-1: USB disconnect, device number 10 [ 127.196635][ T1804] loop2: detected capacity change from 0 to 512 [ 127.263765][ T1804] ext2: Unknown parameter 'obj_type' [ 127.474497][ T1808] fuse: Bad value for 'fd' [ 127.493981][ T1811] loop0: detected capacity change from 0 to 256 [ 127.502796][ T1806] loop3: detected capacity change from 0 to 4096 [ 127.663798][ T391] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.673609][ T1806] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.685406][ T1811] loop0: detected capacity change from 0 to 256 [ 127.685681][ T391] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.692892][ T1811] exfat: Unknown parameter '})N#biw [ 127.692892][ T1811] kIb1n#˲ҷ i_DǏRg9i<:Uexfat' [ 127.916910][ T1820] FAULT_INJECTION: forcing a failure. [ 127.916910][ T1820] name failslab, interval 1, probability 0, space 0, times 0 [ 127.932351][ T1820] CPU: 0 PID: 1820 Comm: syz.2.369 Not tainted syzkaller #0 [ 127.939126][ T1806] EXT4-fs (loop3): Test dummy encryption mode enabled [ 127.939700][ T1820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.939716][ T1820] Call Trace: [ 127.939723][ T1820] [ 127.939731][ T1820] __dump_stack+0x21/0x24 [ 127.967161][ T1820] dump_stack_lvl+0x110/0x170 [ 127.971920][ T1820] ? __cfi_dump_stack_lvl+0x8/0x8 [ 127.977012][ T1820] ? release_sock+0x169/0x1c0 [ 127.981726][ T1820] dump_stack+0x15/0x24 [ 127.986016][ T1820] should_fail_ex+0x3bf/0x510 [ 127.990741][ T1820] __should_failslab+0xac/0xf0 [ 127.995574][ T1820] should_failslab+0x9/0x20 [ 128.000109][ T1820] kmem_cache_alloc_node+0x42/0x330 [ 128.005335][ T1820] ? __alloc_skb+0xe8/0x4a0 [ 128.009857][ T1820] __alloc_skb+0xe8/0x4a0 [ 128.014203][ T1820] netlink_sendmsg+0x635/0xbd0 [ 128.018990][ T1820] ? __cfi_netlink_sendmsg+0x10/0x10 [ 128.024293][ T1820] ? security_socket_sendmsg+0x93/0xb0 [ 128.029805][ T1820] ? __cfi_netlink_sendmsg+0x10/0x10 [ 128.035116][ T1820] ____sys_sendmsg+0x5fb/0x9c0 [ 128.039908][ T1820] ? __sys_sendmsg_sock+0x40/0x40 [ 128.044952][ T1820] ? import_iovec+0x7c/0xb0 [ 128.049511][ T1820] ___sys_sendmsg+0x2a2/0x360 [ 128.054299][ T1820] ? __sys_sendmsg+0x290/0x290 [ 128.059083][ T1820] ? __kasan_check_write+0x14/0x20 [ 128.064213][ T1820] ? proc_fail_nth_write+0x180/0x200 [ 128.069519][ T1820] ? vfs_write+0xa51/0xd00 [ 128.073964][ T1820] ? __fdget+0x19c/0x220 [ 128.078227][ T1820] __x64_sys_sendmsg+0x20d/0x2e0 [ 128.083189][ T1820] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 128.088710][ T1820] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 128.094804][ T1820] x64_sys_call+0x171/0x9a0 [ 128.099332][ T1820] do_syscall_64+0x4c/0xa0 [ 128.103779][ T1820] ? clear_bhb_loop+0x30/0x80 [ 128.108589][ T1820] ? clear_bhb_loop+0x30/0x80 [ 128.113471][ T1820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.119407][ T1820] RIP: 0033:0x7ff62e59e019 [ 128.123847][ T1820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.143477][ T1820] RSP: 002b:00007ff62f4b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.151925][ T1820] RAX: ffffffffffffffda RBX: 00007ff62e825fa0 RCX: 00007ff62e59e019 [ 128.159913][ T1820] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 128.167906][ T1820] RBP: 00007ff62f4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 128.175898][ T1820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.183917][ T1820] R13: 00007ff62e826038 R14: 00007ff62e825fa0 R15: 00007ffd1df1a4f8 [ 128.191914][ T1820] [ 128.777875][ T1806] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 128.843849][ T1806] System zones: 0-5 [ 128.912387][ T1806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 128.975376][ T1806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.023301][ T1806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.202965][ T1825] loop5: detected capacity change from 0 to 40427 [ 129.210087][ T1825] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 129.218000][ T1825] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 129.226917][ T1825] F2FS-fs (loop5): invalid crc value [ 129.251847][ T1830] UDC core: g1: couldn't find an available UDC or it's busy [ 129.263288][ T1825] F2FS-fs (loop5): Found nat_bits in checkpoint [ 129.352612][ T1825] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 129.360872][ T1825] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 129.467732][ T456] usbhid 4-1:0.0: can't add hid device: -71 [ 129.477590][ T456] usbhid: probe of 4-1:0.0 failed with error -71 [ 129.493296][ T456] usb 4-1: USB disconnect, device number 12 [ 129.502744][ T326] udevd[326]: setting mode of /dev/bus/usb/004/012 to 020664 failed: No such file or directory [ 129.524116][ T326] udevd[326]: setting owner of /dev/bus/usb/004/012 to uid=0, gid=0 failed: No such file or directory [ 129.583437][ T1833] loop0: detected capacity change from 0 to 40427 [ 129.843373][ T1833] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 129.889109][ T1833] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.974793][ T1833] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.166364][ T1833] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 130.196246][ T1833] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.323460][ T289] EXT4-fs (loop3): unmounting filesystem. [ 130.403679][ T28] audit: type=1400 audit(1785890574.625:479): avc: denied { create } for pid=1847 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.485957][ T1855] fuse: Bad value for 'fd' [ 130.929539][ T1869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.381'. [ 130.961259][ T1869] netlink: 240 bytes leftover after parsing attributes in process `syz.3.381'. [ 131.006429][ T1801] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 131.035644][ T1871] loop3: detected capacity change from 0 to 256 [ 131.268116][ T1875] loop3: detected capacity change from 0 to 1024 [ 131.310128][ T1875] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 131.448887][ T326] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.223632][ T1801] usb 6-1: no configurations [ 132.228341][ T1801] usb 6-1: can't read configurations, error -22 [ 132.708626][ T1801] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 132.892725][ T1801] usb 6-1: no configurations [ 132.897415][ T1801] usb 6-1: can't read configurations, error -22 [ 132.912380][ T1801] usb usb6-port1: attempt power cycle [ 133.164624][ T1885] loop3: detected capacity change from 0 to 4096 [ 133.191989][ T1885] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.211678][ T1885] EXT4-fs (loop3): Test dummy encryption mode enabled [ 133.229605][ T1885] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 133.243257][ T1885] System zones: 0-5 [ 133.263273][ T1885] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 133.332322][ T1801] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 133.373235][ T1801] usb 6-1: no configurations [ 133.377902][ T1801] usb 6-1: can't read configurations, error -22 [ 133.447937][ T1889] UDC core: g1: couldn't find an available UDC or it's busy [ 133.499562][ T28] audit: type=1400 audit(1785890577.715:480): avc: denied { connect } for pid=1890 comm="syz.4.386" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.520092][ T28] audit: type=1400 audit(1785890577.715:481): avc: denied { write } for pid=1890 comm="syz.4.386" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.552330][ T1801] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 133.582348][ T291] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 133.593058][ T1801] usb 6-1: no configurations [ 133.597736][ T1801] usb 6-1: can't read configurations, error -22 [ 133.612379][ T1801] usb usb6-port1: unable to enumerate USB device [ 133.644855][ T287] syz-executor: attempt to access beyond end of device [ 133.644855][ T287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.722926][ T1894] loop4: detected capacity change from 0 to 40427 [ 133.736801][ T1894] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 133.744805][ T1894] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 133.753691][ T1894] F2FS-fs (loop4): invalid crc value [ 133.778851][ T1898] 9pnet_fd: Insufficient options for proto=fd [ 133.790860][ T1894] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.804488][ T291] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 133.823738][ T1898] fuse: Bad value for 'fd' [ 133.829350][ T291] usb 4-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 133.855917][ T291] usb 4-1: config 1 has no interface number 0 [ 133.875583][ T291] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 133.894540][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.920134][ T291] rndis_host 4-1:1.236: skipping garbage [ 133.926282][ T1894] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 133.931603][ T291] rndis_host 4-1:1.236: skipping garbage [ 133.941541][ T1894] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.948126][ T291] rndis_host 4-1:1.236: invalid descriptor buffer length [ 133.964922][ T291] usb 4-1: bad CDC descriptors [ 133.984431][ T291] cdc_acm 4-1:1.236: skipping garbage [ 134.000700][ T291] cdc_acm 4-1:1.236: skipping garbage [ 134.072829][ T291] cdc_acm 4-1:1.236: invalid descriptor buffer length [ 134.195689][ T291] usb 4-1: USB disconnect, device number 13 [ 134.610191][ T1917] loop0: detected capacity change from 0 to 512 [ 134.632177][ T1917] ext2: Unknown parameter 'obj_type' [ 134.982861][ T289] EXT4-fs (loop3): unmounting filesystem. [ 135.091661][ T323] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.277619][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.308840][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.426161][ T323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.499035][ T323] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.519621][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.531592][ T323] usb 3-1: config 0 descriptor?? [ 135.672521][ T28] audit: type=1400 audit(1785890579.895:482): avc: denied { mount } for pid=1937 comm="syz.5.398" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 135.715170][ T327] smpboot: CPU 1 is now offline [ 135.739158][ T1938] x86: Booting SMP configuration: [ 135.766171][ T1938] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 135.795789][ T28] audit: type=1400 audit(1785890580.015:483): avc: denied { setopt } for pid=1937 comm="syz.5.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.092420][ T1404] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 136.182500][ T327] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 136.252349][ T1404] usb 6-1: device descriptor read/64, error -71 [ 136.372746][ T327] usb 4-1: no configurations [ 136.377605][ T327] usb 4-1: can't read configurations, error -22 [ 136.429310][ T323] usbhid 3-1:0.0: can't add hid device: -71 [ 136.436512][ T323] usbhid: probe of 3-1:0.0 failed with error -71 [ 136.450624][ T323] usb 3-1: USB disconnect, device number 11 [ 136.519001][ T1947] UDC core: g1: couldn't find an available UDC or it's busy [ 136.532329][ T1404] usb 6-1: device descriptor read/64, error -71 [ 136.542504][ T327] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 136.732688][ T327] usb 4-1: no configurations [ 136.737585][ T327] usb 4-1: can't read configurations, error -22 [ 136.748291][ T327] usb usb4-port1: attempt power cycle [ 136.802357][ T1404] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 136.836476][ T1950] loop2: detected capacity change from 0 to 40427 [ 136.848248][ T1950] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 136.855172][ T1950] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 136.877902][ T1950] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.930006][ T1950] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 136.937223][ T1950] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.962326][ T1404] usb 6-1: device descriptor read/64, error -71 [ 137.030256][ T1954] 9pnet_fd: Insufficient options for proto=fd [ 137.037204][ T1954] fuse: Bad value for 'fd' [ 137.162324][ T327] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 137.203120][ T327] usb 4-1: no configurations [ 137.208910][ T327] usb 4-1: can't read configurations, error -22 [ 137.232341][ T1404] usb 6-1: device descriptor read/64, error -71 [ 137.352393][ T1404] usb usb6-port1: attempt power cycle [ 137.372394][ T327] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 137.403187][ T327] usb 4-1: no configurations [ 137.407889][ T327] usb 4-1: can't read configurations, error -22 [ 137.422375][ T327] usb usb4-port1: unable to enumerate USB device [ 137.762347][ T1404] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 137.787321][ T28] audit: type=1400 audit(1785890582.005:484): avc: denied { write } for pid=1963 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.794077][ T1404] usb 6-1: device descriptor read/8, error -71 [ 137.815600][ T1965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 137.993410][ T1404] usb 6-1: device descriptor read/8, error -71 [ 138.025070][ T1967] loop4: detected capacity change from 0 to 4096 [ 138.041486][ T1967] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.058307][ T1967] EXT4-fs (loop4): Test dummy encryption mode enabled [ 138.067285][ T1967] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 138.075550][ T1967] System zones: 0-5 [ 138.080548][ T1967] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.157105][ T288] syz-executor: attempt to access beyond end of device [ 138.157105][ T288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.231842][ T1971] loop0: detected capacity change from 0 to 512 [ 138.239156][ T1971] ext2: Unknown parameter 'obj_type' [ 138.272434][ T1404] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 138.324297][ T1404] usb 6-1: device descriptor read/8, error -71 [ 138.354283][ T1975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 138.372496][ T1801] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 138.478273][ T1404] usb 6-1: device descriptor read/8, error -71 [ 138.496641][ T1980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.409'. [ 138.505983][ T1980] netlink: 240 bytes leftover after parsing attributes in process `syz.2.409'. [ 138.563820][ T1801] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 138.572153][ T1801] usb 5-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 138.582565][ T1801] usb 5-1: config 1 has no interface number 0 [ 138.588812][ T1801] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 138.598045][ T1801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.606969][ T1404] usb usb6-port1: unable to enumerate USB device [ 138.615792][ T1801] rndis_host 5-1:1.236: skipping garbage [ 138.621486][ T1801] rndis_host 5-1:1.236: invalid descriptor buffer length [ 138.628680][ T1801] usb 5-1: bad CDC descriptors [ 138.633926][ T1801] cdc_acm 5-1:1.236: skipping garbage [ 138.639360][ T1801] cdc_acm 5-1:1.236: invalid descriptor buffer length [ 138.670812][ T28] audit: type=1400 audit(1785890582.885:485): avc: denied { unmount } for pid=1742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 138.825204][ T1404] usb 5-1: USB disconnect, device number 10 [ 139.092403][ T1801] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 139.485316][ T290] EXT4-fs (loop4): unmounting filesystem. [ 139.503518][ T1801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.514741][ T1801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.524971][ T1801] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.538338][ T1801] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.547693][ T1801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.560136][ T1801] usb 6-1: config 0 descriptor?? [ 139.596300][ T1997] UDC core: g1: couldn't find an available UDC or it's busy [ 140.010934][ T1801] usbhid 6-1:0.0: can't add hid device: -71 [ 140.017979][ T1801] usbhid: probe of 6-1:0.0 failed with error -71 [ 140.037635][ T1801] usb 6-1: USB disconnect, device number 14 [ 140.057757][ T2005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 140.072335][ T327] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 140.263410][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.287704][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.322303][ T327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.354006][ T327] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.372314][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.408239][ T327] usb 4-1: config 0 descriptor?? [ 140.465220][ T2009] loop4: detected capacity change from 0 to 256 [ 140.543109][ T326] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.562531][ T2009] loop4: detected capacity change from 0 to 256 [ 140.569024][ T326] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.579575][ T2009] exfat: Unknown parameter '})N#biw [ 140.579575][ T2009] kIb1n#˲ҷ i_DǏRg9i<:Uexfat' [ 140.602296][ T326] Buffer I/O error on dev loop4, logical block 0, async page read [ 140.755204][ T2007] loop0: detected capacity change from 0 to 40427 [ 140.782693][ T2007] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 140.808933][ T2007] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 140.829224][ T327] usbhid 4-1:0.0: can't add hid device: -71 [ 140.841420][ T327] usbhid: probe of 4-1:0.0 failed with error -71 [ 140.865532][ T327] usb 4-1: USB disconnect, device number 18 [ 140.868095][ T2007] F2FS-fs (loop0): Found nat_bits in checkpoint [ 140.927749][ T2017] loop4: detected capacity change from 0 to 1024 [ 141.025310][ T2017] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 141.101071][ T2007] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 141.126116][ T2007] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 141.529077][ T2026] loop2: detected capacity change from 0 to 128 [ 141.550098][ T2026] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.588003][ T2026] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.605661][ T2029] loop5: detected capacity change from 0 to 512 [ 141.613230][ T28] audit: type=1400 audit(1785890585.835:486): avc: denied { mount } for pid=2025 comm="syz.2.422" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 141.659293][ T2026] netlink: 84 bytes leftover after parsing attributes in process `syz.2.422'. [ 141.685633][ T2029] ext2: Unknown parameter 'obj_type' [ 141.699577][ T28] audit: type=1400 audit(1785890585.915:487): avc: denied { setopt } for pid=2025 comm="syz.2.422" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.721764][ T2026] xt_hashlimit: size too large, truncated to 1048576 [ 141.832628][ T327] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 141.858540][ T2033] loop3: detected capacity change from 0 to 4096 [ 141.903853][ T2033] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 141.928975][ T2033] EXT4-fs (loop3): Test dummy encryption mode enabled [ 141.953046][ T2033] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 141.981549][ T2033] System zones: 0-5 [ 141.992079][ T2033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.032735][ T327] usb 5-1: no configurations [ 142.040625][ T327] usb 5-1: can't read configurations, error -22 [ 142.212333][ T327] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 142.236305][ T28] audit: type=1400 audit(1785890586.455:488): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 142.332363][ T1801] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 142.392743][ T327] usb 5-1: no configurations [ 142.397415][ T327] usb 5-1: can't read configurations, error -22 [ 142.404099][ T327] usb usb5-port1: attempt power cycle [ 142.513490][ T1801] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 142.521996][ T1801] usb 4-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 142.534594][ T2043] netlink: 20 bytes leftover after parsing attributes in process `syz.5.426'. [ 142.543623][ T1801] usb 4-1: config 1 has no interface number 0 [ 142.549752][ T1801] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 142.559346][ T2043] netlink: 240 bytes leftover after parsing attributes in process `syz.5.426'. [ 142.568522][ T1801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.582743][ T1801] rndis_host 4-1:1.236: skipping garbage [ 142.588488][ T1801] rndis_host 4-1:1.236: invalid descriptor buffer length [ 142.595614][ T1801] usb 4-1: bad CDC descriptors [ 142.600685][ T1801] cdc_acm 4-1:1.236: skipping garbage [ 142.606212][ T1801] cdc_acm 4-1:1.236: invalid descriptor buffer length [ 142.698671][ T287] syz-executor: attempt to access beyond end of device [ 142.698671][ T287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.791100][ T1801] usb 4-1: USB disconnect, device number 19 [ 142.832332][ T327] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 142.842571][ T2046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 142.873144][ T327] usb 5-1: no configurations [ 142.877839][ T327] usb 5-1: can't read configurations, error -22 [ 142.941363][ T2048] UDC core: g1: couldn't find an available UDC or it's busy [ 143.032357][ T327] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 143.063339][ T327] usb 5-1: no configurations [ 143.068069][ T327] usb 5-1: can't read configurations, error -22 [ 143.074710][ T327] usb usb5-port1: unable to enumerate USB device [ 143.513606][ T289] EXT4-fs (loop3): unmounting filesystem. [ 143.772352][ T327] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 143.795395][ T2062] loop0: detected capacity change from 0 to 256 [ 143.823338][ T326] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.835091][ T2062] loop0: detected capacity change from 0 to 256 [ 143.835303][ T326] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.842716][ T2062] exfat: Unknown parameter '})N#biw [ 143.842716][ T2062] kIb1n#˲ҷ i_DǏRg9i<:Uexfat' [ 143.912346][ T474] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 143.963583][ T327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.974714][ T327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.039676][ T2066] loop0: detected capacity change from 0 to 1024 [ 144.103412][ T474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.126127][ T474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.167572][ T474] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.185866][ T2066] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 144.218748][ T474] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.246445][ T474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.362787][ T474] usb 4-1: config 0 descriptor?? [ 144.768907][ T327] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.781863][ T327] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.790961][ T327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.801489][ T327] usb 6-1: config 0 descriptor?? [ 144.851327][ T2072] loop2: detected capacity change from 0 to 40427 [ 144.878450][ T2072] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 144.899693][ T2072] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 144.908872][ T2072] F2FS-fs (loop2): invalid crc value [ 144.925152][ T2072] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.036898][ T2072] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 145.045943][ T2072] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.193193][ T2086] fuse: Bad value for 'fd' [ 145.233678][ T327] usbhid 6-1:0.0: can't add hid device: -71 [ 145.245907][ T327] usbhid: probe of 6-1:0.0 failed with error -71 [ 145.272210][ T327] usb 6-1: USB disconnect, device number 15 [ 145.318705][ T2092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 145.441853][ T2084] loop4: detected capacity change from 0 to 40427 [ 145.455781][ T2084] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 145.468125][ T2084] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 145.491385][ T2084] F2FS-fs (loop4): Found nat_bits in checkpoint [ 145.599140][ T2084] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 145.612323][ T2084] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 145.770193][ T2098] loop2: detected capacity change from 0 to 4096 [ 145.793190][ T2100] UDC core: g1: couldn't find an available UDC or it's busy [ 145.823251][ T2098] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.861561][ T2098] EXT4-fs (loop2): Test dummy encryption mode enabled [ 145.890134][ T2098] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 145.922402][ T2098] System zones: 0-5 [ 145.936671][ T474] usbhid 4-1:0.0: can't add hid device: -71 [ 145.943041][ T474] usbhid: probe of 4-1:0.0 failed with error -71 [ 145.962046][ T2098] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 145.988543][ T474] usb 4-1: USB disconnect, device number 20 [ 146.102912][ T2094] loop3: detected capacity change from 0 to 40427 [ 146.111618][ T2094] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 146.128703][ T2094] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 146.146989][ T2094] F2FS-fs (loop3): invalid crc value [ 146.409624][ T2094] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.558662][ T2094] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 146.565931][ T2094] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 146.612366][ T327] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 147.080589][ T327] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 147.351798][ T2118] loop5: detected capacity change from 0 to 40427 [ 147.376968][ T2118] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 147.402597][ T2118] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 147.421645][ T2118] F2FS-fs (loop5): invalid crc value [ 147.474297][ T2118] F2FS-fs (loop5): Found nat_bits in checkpoint [ 147.531357][ T327] usb 3-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 147.541775][ T327] usb 3-1: config 1 has no interface number 0 [ 147.542473][ T516] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 147.548066][ T327] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 147.564681][ T327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.577502][ T327] rndis_host 3-1:1.236: skipping garbage [ 147.583268][ T327] rndis_host 3-1:1.236: invalid descriptor buffer length [ 147.590340][ T327] usb 3-1: bad CDC descriptors [ 147.609165][ T327] cdc_acm 3-1:1.236: skipping garbage [ 147.614760][ T327] cdc_acm 3-1:1.236: invalid descriptor buffer length [ 147.632609][ T2118] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 147.652691][ T2118] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 147.752806][ T516] usb 1-1: no configurations [ 147.757618][ T516] usb 1-1: can't read configurations, error -22 [ 147.790165][ T327] usb 3-1: USB disconnect, device number 12 [ 147.802746][ T28] audit: type=1400 audit(1785890592.015:489): avc: denied { remount } for pid=2128 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 147.942381][ T516] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 148.163195][ T516] usb 1-1: no configurations [ 148.168021][ T516] usb 1-1: can't read configurations, error -22 [ 148.213756][ T516] usb usb1-port1: attempt power cycle [ 148.901941][ T288] EXT4-fs (loop2): unmounting filesystem. [ 148.935517][ T290] syz-executor: attempt to access beyond end of device [ 148.935517][ T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.969041][ T2142] loop2: detected capacity change from 0 to 256 [ 149.012344][ T516] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 149.028266][ T2142] loop2: detected capacity change from 0 to 256 [ 149.037212][ T2142] exfat: Unknown parameter '})N#biw [ 149.037212][ T2142] kIb1n#˲ҷ i_DǏRg9i<:Uexfat' [ 149.093100][ T516] usb 1-1: no configurations [ 149.097757][ T516] usb 1-1: can't read configurations, error -22 [ 149.144091][ T2146] UDC core: g1: couldn't find an available UDC or it's busy [ 149.212345][ T474] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 149.272310][ T516] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 149.284813][ T2151] loop2: detected capacity change from 0 to 1024 [ 149.323053][ T516] usb 1-1: no configurations [ 149.327814][ T516] usb 1-1: can't read configurations, error -22 [ 149.334958][ T516] usb usb1-port1: unable to enumerate USB device [ 149.376285][ T2151] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 149.404057][ T474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.415514][ T474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.426129][ T474] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.439318][ T474] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.448648][ T474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.482705][ T474] usb 4-1: config 0 descriptor?? [ 149.905690][ T474] usbhid 4-1:0.0: can't add hid device: -71 [ 149.912055][ T474] usbhid: probe of 4-1:0.0 failed with error -71 [ 149.940556][ T474] usb 4-1: USB disconnect, device number 21 [ 150.069853][ T2156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 150.152325][ T327] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 150.263704][ T2161] fuse: Bad value for 'fd' [ 150.352941][ T2165] loop4: detected capacity change from 0 to 4096 [ 150.360990][ T327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.379292][ T327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.409713][ T2165] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.437292][ T327] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.459550][ T2165] EXT4-fs (loop4): Test dummy encryption mode enabled [ 150.469771][ T327] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.663023][ T2165] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 150.689621][ T2165] System zones: 0-5 [ 150.739201][ T2165] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.808547][ T327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.842658][ T327] usb 6-1: config 0 descriptor?? [ 151.092385][ T474] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 151.335842][ T327] usbhid 6-1:0.0: can't add hid device: -71 [ 151.344065][ T327] usbhid: probe of 6-1:0.0 failed with error -71 [ 151.381429][ T327] usb 6-1: USB disconnect, device number 16 [ 151.423402][ T474] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 151.432128][ T474] usb 5-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 151.442688][ T474] usb 5-1: config 1 has no interface number 0 [ 151.448812][ T474] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 151.458271][ T474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.480232][ T474] rndis_host 5-1:1.236: skipping garbage [ 151.491184][ T474] rndis_host 5-1:1.236: invalid descriptor buffer length [ 151.505544][ T474] usb 5-1: bad CDC descriptors [ 151.513970][ T474] cdc_acm 5-1:1.236: skipping garbage [ 151.524579][ T474] cdc_acm 5-1:1.236: invalid descriptor buffer length [ 151.645628][ T2187] loop2: detected capacity change from 0 to 40427 [ 151.660900][ T2187] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 151.669354][ T2187] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 151.703267][ T474] usb 5-1: USB disconnect, device number 15 [ 151.722492][ T2187] F2FS-fs (loop2): invalid crc value [ 151.734657][ T2194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 151.745469][ T28] audit: type=1400 audit(1785890595.965:490): avc: denied { create } for pid=2195 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.779104][ T2187] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.783795][ T28] audit: type=1400 audit(1785890595.985:491): avc: denied { create } for pid=2195 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 151.809236][ T28] audit: type=1400 audit(1785890595.985:492): avc: denied { ioctl } for pid=2195 comm="syz.3.467" path="socket:[22254]" dev="sockfs" ino=22254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.834173][ T28] audit: type=1400 audit(1785890595.985:493): avc: denied { bind } for pid=2195 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.947089][ T2187] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 151.954246][ T2187] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.970884][ T2207] fuse: Bad value for 'fd' [ 152.531280][ T290] EXT4-fs (loop4): unmounting filesystem. [ 152.539881][ T1801] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 153.083208][ T1801] usb 4-1: no configurations [ 153.087881][ T1801] usb 4-1: can't read configurations, error -22 [ 153.146340][ T2233] FAULT_INJECTION: forcing a failure. [ 153.146340][ T2233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.160064][ T2233] CPU: 1 PID: 2233 Comm: syz.2.478 Not tainted syzkaller #0 [ 153.167396][ T2233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.177486][ T2233] Call Trace: [ 153.180840][ T2233] [ 153.183812][ T2233] __dump_stack+0x21/0x24 [ 153.188197][ T2233] dump_stack_lvl+0x110/0x170 [ 153.192919][ T2233] ? __cfi_dump_stack_lvl+0x8/0x8 [ 153.197996][ T2233] dump_stack+0x15/0x24 [ 153.202220][ T2233] should_fail_ex+0x3bf/0x510 [ 153.206937][ T2233] should_fail+0xb/0x10 [ 153.211132][ T2233] should_fail_usercopy+0x1a/0x20 [ 153.216197][ T2233] _copy_from_user+0x1e/0xc0 [ 153.220844][ T2233] ___sys_sendmsg+0x1c3/0x360 [ 153.225567][ T2233] ? __sys_sendmsg+0x290/0x290 [ 153.230381][ T2233] ? kstrtouint+0x74/0xe0 [ 153.234754][ T2233] ? __fdget+0x19c/0x220 [ 153.239040][ T2233] __sys_sendmmsg+0x2cc/0x4e0 [ 153.243754][ T2233] ? __cfi___sys_sendmmsg+0x10/0x10 [ 153.249000][ T2233] ? __cfi_ksys_write+0x10/0x10 [ 153.252412][ T1801] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 153.253893][ T2233] __x64_sys_sendmmsg+0xa0/0xb0 [ 153.266266][ T2233] x64_sys_call+0x3f5/0x9a0 [ 153.270829][ T2233] do_syscall_64+0x4c/0xa0 [ 153.275294][ T2233] ? clear_bhb_loop+0x30/0x80 [ 153.280009][ T2233] ? clear_bhb_loop+0x30/0x80 [ 153.284746][ T2233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.290754][ T2233] RIP: 0033:0x7ff62e59e019 [ 153.295221][ T2233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.314900][ T2233] RSP: 002b:00007ff62f4b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 153.323360][ T2233] RAX: ffffffffffffffda RBX: 00007ff62e825fa0 RCX: 00007ff62e59e019 [ 153.331375][ T2233] RDX: 0000000000000002 RSI: 0000200000002580 RDI: 0000000000000003 [ 153.339385][ T2233] RBP: 00007ff62f4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 153.347400][ T2233] R10: 00000000000000d4 R11: 0000000000000246 R12: 0000000000000001 [ 153.355415][ T2233] R13: 00007ff62e826038 R14: 00007ff62e825fa0 R15: 00007ffd1df1a4f8 [ 153.363434][ T2233] [ 153.380629][ T2231] loop5: detected capacity change from 0 to 40427 [ 153.398014][ T2231] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 153.405898][ T2231] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 153.415041][ T2231] F2FS-fs (loop5): invalid crc value [ 153.453604][ T2231] F2FS-fs (loop5): Found nat_bits in checkpoint [ 153.478518][ T1801] usb 4-1: no configurations [ 153.483232][ T1801] usb 4-1: can't read configurations, error -22 [ 153.489644][ T1801] usb usb4-port1: attempt power cycle [ 153.565436][ T2243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 153.586963][ T2231] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 153.594191][ T2231] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 153.692301][ T292] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 154.312210][ T2250] fuse: Bad value for 'fd' [ 154.581351][ T2240] loop0: detected capacity change from 0 to 131072 [ 154.583787][ T2252] loop4: detected capacity change from 0 to 40427 [ 154.594459][ T1801] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 154.612481][ T2252] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 154.620279][ T2252] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 154.621266][ T2240] F2FS-fs (loop0): Test dummy encryption mode enabled [ 154.630221][ T292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.647188][ T1801] usb 4-1: no configurations [ 154.651838][ T1801] usb 4-1: can't read configurations, error -22 [ 154.672510][ T292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.683474][ T2240] F2FS-fs (loop0): invalid crc value [ 154.692856][ T2252] F2FS-fs (loop4): invalid crc value [ 154.698305][ T292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.722565][ T292] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.732076][ T292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.738389][ T2240] F2FS-fs (loop0): Found nat_bits in checkpoint [ 154.741673][ T2252] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.764112][ T292] usb 3-1: config 0 descriptor?? [ 154.802877][ T2260] loop5: detected capacity change from 0 to 4096 [ 154.819847][ T2260] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 154.832380][ T1801] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 154.854515][ T2252] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 154.861825][ T2252] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.869747][ T2240] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 154.876475][ T2260] EXT4-fs (loop5): Test dummy encryption mode enabled [ 154.893165][ T2240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'. [ 154.937364][ T2260] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 154.978157][ T2260] System zones: 0-5 [ 155.029082][ T2260] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 155.282341][ T1801] usb 4-1: device not accepting address 25, error -71 [ 155.300184][ T1801] usb usb4-port1: unable to enumerate USB device [ 155.382397][ T456] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 155.577300][ T2287] FAULT_INJECTION: forcing a failure. [ 155.577300][ T2287] name failslab, interval 1, probability 0, space 0, times 0 [ 155.750574][ T2287] CPU: 0 PID: 2287 Comm: syz.3.492 Not tainted syzkaller #0 [ 155.757926][ T2287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.768006][ T2287] Call Trace: [ 155.771305][ T2287] [ 155.774254][ T2287] __dump_stack+0x21/0x24 [ 155.778614][ T2287] dump_stack_lvl+0x110/0x170 [ 155.783322][ T2287] ? __cfi_dump_stack_lvl+0x8/0x8 [ 155.788373][ T2287] dump_stack+0x15/0x24 [ 155.792568][ T2287] should_fail_ex+0x3bf/0x510 [ 155.797275][ T2287] __should_failslab+0xac/0xf0 [ 155.802072][ T2287] should_failslab+0x9/0x20 [ 155.806604][ T2287] kmem_cache_alloc_node+0x42/0x330 [ 155.811832][ T2287] ? __alloc_skb+0xe8/0x4a0 [ 155.816388][ T2287] __alloc_skb+0xe8/0x4a0 [ 155.820747][ T2287] netlink_sendmsg+0x635/0xbd0 [ 155.825544][ T2287] ? __cfi_netlink_sendmsg+0x10/0x10 [ 155.830853][ T2287] ? security_socket_sendmsg+0x93/0xb0 [ 155.836339][ T2287] ? __cfi_netlink_sendmsg+0x10/0x10 [ 155.841652][ T2287] ____sys_sendmsg+0x5fb/0x9c0 [ 155.846460][ T2287] ? __sys_sendmsg_sock+0x40/0x40 [ 155.851978][ T2287] ? import_iovec+0x7c/0xb0 [ 155.856507][ T2287] ___sys_sendmsg+0x2a2/0x360 [ 155.861214][ T2287] ? __sys_sendmsg+0x290/0x290 [ 155.866115][ T2287] ? __kasan_check_write+0x14/0x20 [ 155.871284][ T2287] ? proc_fail_nth_write+0x180/0x200 [ 155.876605][ T2287] ? vfs_write+0xa51/0xd00 [ 155.881064][ T2287] ? __fdget+0x19c/0x220 [ 155.885335][ T2287] __x64_sys_sendmsg+0x20d/0x2e0 [ 155.890310][ T2287] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 155.895817][ T2287] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 155.901917][ T2287] x64_sys_call+0x171/0x9a0 [ 155.906450][ T2287] do_syscall_64+0x4c/0xa0 [ 155.910895][ T2287] ? clear_bhb_loop+0x30/0x80 [ 155.915629][ T2287] ? clear_bhb_loop+0x30/0x80 [ 155.920334][ T2287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.926277][ T2287] RIP: 0033:0x7f5ba2f9e019 [ 155.930715][ T2287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.950344][ T2287] RSP: 002b:00007f5ba19f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.958790][ T2287] RAX: ffffffffffffffda RBX: 00007f5ba3225fa0 RCX: 00007f5ba2f9e019 [ 155.966782][ T2287] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 155.974773][ T2287] RBP: 00007f5ba19f7090 R08: 0000000000000000 R09: 0000000000000000 [ 155.982771][ T2287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.990777][ T2287] R13: 00007f5ba3226038 R14: 00007f5ba3225fa0 R15: 00007ffdae283cc8 [ 155.998778][ T2287] [ 156.069183][ T2291] loop2: detected capacity change from 0 to 256 [ 156.135759][ T2294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 156.162656][ T2291] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 156.395601][ T2299] Config c/1 of g1 needs at least one function. [ 156.403382][ T456] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 156.411601][ T456] usb 6-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 156.422629][ T456] usb 6-1: config 1 has no interface number 0 [ 156.428767][ T456] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 156.437895][ T456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.443258][ T2299] udc dummy_udc.0: failed to start g1: -22 [ 156.449758][ T456] rndis_host 6-1:1.236: skipping garbage [ 156.457513][ T456] rndis_host 6-1:1.236: invalid descriptor buffer length [ 156.464638][ T456] usb 6-1: bad CDC descriptors [ 156.469607][ T456] cdc_acm 6-1:1.236: skipping garbage [ 156.475086][ T456] cdc_acm 6-1:1.236: invalid descriptor buffer length [ 156.482768][ T2299] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 156.491340][ T2299] UDC core: g1: couldn't find an available UDC or it's busy [ 156.693840][ T456] usb 6-1: USB disconnect, device number 17 [ 157.167730][ T2296] loop4: detected capacity change from 0 to 40427 [ 157.192984][ T2296] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 157.206280][ T2296] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 157.247720][ T1742] EXT4-fs (loop5): unmounting filesystem. [ 157.283673][ T2296] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.354509][ T2304] loop3: detected capacity change from 0 to 40427 [ 157.401728][ T2304] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 157.422887][ T2304] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 157.439553][ T2304] F2FS-fs (loop3): invalid crc value [ 157.447734][ T28] audit: type=1326 audit(1785890601.665:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.2.502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62e59e019 code=0x7ffc0000 [ 157.475897][ T28] audit: type=1326 audit(1785890601.665:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.2.502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62e59e019 code=0x7ffc0000 [ 157.476275][ T2296] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 157.508672][ T28] audit: type=1326 audit(1785890601.665:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.2.502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7ff62e59e019 code=0x7ffc0000 [ 157.513447][ T2304] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.534792][ T28] audit: type=1326 audit(1785890601.665:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.2.502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62e59e019 code=0x7ffc0000 [ 157.567697][ T2296] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.613354][ T28] audit: type=1326 audit(1785890601.665:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.2.502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62e59e019 code=0x7ffc0000 [ 157.641117][ T28] audit: type=1326 audit(1785890601.665:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.2.502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ff62e59e019 code=0x7ffc0000 [ 157.667622][ T28] audit: type=1326 audit(1785890601.665:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.2.502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62e59e019 code=0x7ffc0000 [ 157.697586][ T28] audit: type=1326 audit(1785890601.665:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.2.502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62e59e019 code=0x7ffc0000 [ 157.703066][ T2304] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 157.729420][ T2304] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 157.738498][ T292] usbhid 3-1:0.0: can't add hid device: -71 [ 157.746171][ T292] usbhid: probe of 3-1:0.0 failed with error -71 [ 157.772201][ T292] usb 3-1: USB disconnect, device number 13 [ 157.791541][ T28] audit: type=1326 audit(1785890601.665:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.2.502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff62e59e019 code=0x7ffc0000 [ 157.859070][ T28] audit: type=1326 audit(1785890601.665:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.2.502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62e59e019 code=0x7ffc0000 [ 158.792391][ T456] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 159.009715][ T2344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.507'. [ 159.023585][ T456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.045883][ T456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.074286][ T456] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.107153][ T456] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.126938][ T456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.148552][ T456] usb 1-1: config 0 descriptor?? [ 159.262426][ T2350] UDC core: g1: couldn't find an available UDC or it's busy [ 159.321367][ T2355] loop5: detected capacity change from 0 to 4096 [ 159.350772][ T2355] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.371606][ T2355] EXT4-fs (loop5): Test dummy encryption mode enabled [ 159.394464][ T2355] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 159.412414][ T2355] System zones: 0-5 [ 159.423815][ T2355] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 159.640464][ T2363] loop2: detected capacity change from 0 to 40427 [ 159.666477][ T2363] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 159.692612][ T2363] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 159.711586][ T2363] F2FS-fs (loop2): invalid crc value [ 159.732457][ T474] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 159.744463][ T2363] F2FS-fs (loop2): Found nat_bits in checkpoint [ 159.842506][ T2363] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 159.849669][ T2363] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 159.970306][ T474] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 159.979266][ T474] usb 6-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 159.989778][ T474] usb 6-1: config 1 has no interface number 0 [ 159.996273][ T474] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 160.005424][ T474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.028576][ T474] rndis_host 6-1:1.236: skipping garbage [ 160.041250][ T474] rndis_host 6-1:1.236: invalid descriptor buffer length [ 160.053810][ T474] usb 6-1: bad CDC descriptors [ 160.062624][ T474] cdc_acm 6-1:1.236: skipping garbage [ 160.068816][ T474] cdc_acm 6-1:1.236: invalid descriptor buffer length [ 160.246718][ T516] usb 6-1: USB disconnect, device number 18 [ 160.351925][ T456] usbhid 1-1:0.0: can't add hid device: -71 [ 160.359160][ T456] usbhid: probe of 1-1:0.0 failed with error -71 [ 160.369991][ T290] syz-executor: attempt to access beyond end of device [ 160.369991][ T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.387011][ T456] usb 1-1: USB disconnect, device number 24 [ 160.701488][ T2383] loop4: detected capacity change from 0 to 40427 [ 160.708657][ T2383] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 160.716658][ T2383] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 160.726195][ T2383] F2FS-fs (loop4): invalid crc value [ 160.733102][ T2383] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.769487][ T2383] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 160.778784][ T2383] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 160.796963][ T1742] EXT4-fs (loop5): unmounting filesystem. [ 160.885830][ T2391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.519'. [ 161.225501][ T2406] Config c/1 of g1 needs at least one function. [ 161.260870][ T2406] udc dummy_udc.0: failed to start g1: -22 [ 161.386165][ T2406] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 161.394074][ T2406] UDC core: g1: couldn't find an available UDC or it's busy [ 161.443157][ T2410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'. [ 161.462076][ T2410] netlink: 240 bytes leftover after parsing attributes in process `syz.2.526'. [ 162.091751][ T2414] loop2: detected capacity change from 0 to 40427 [ 162.107403][ T2414] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 162.130448][ T2414] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 162.168259][ T2414] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.245399][ T2427] device hci entered promiscuous mode [ 162.276375][ T2427] tipc: Started in network mode [ 162.289178][ T2427] tipc: Node identity 4, cluster identity 4711 [ 162.301602][ T2427] tipc: Node number set to 4 [ 162.321280][ T2414] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 162.338286][ T2427] using random self ethernet address [ 162.344736][ T2414] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.369092][ T2427] using random host ethernet address [ 162.395252][ T2434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.533'. [ 162.420923][ T2434] netlink: 240 bytes leftover after parsing attributes in process `syz.5.533'. [ 162.506227][ T2439] loop3: detected capacity change from 0 to 512 [ 162.525858][ T2439] ext2: Unknown parameter 'obj_type' [ 162.534604][ T2441] loop5: detected capacity change from 0 to 512 [ 162.541294][ T2441] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.575396][ T2441] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.536: corrupted in-inode xattr [ 162.587585][ T2441] EXT4-fs (loop5): Remounting filesystem read-only [ 162.594247][ T2441] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.536: couldn't read orphan inode 15 (err -117) [ 162.606672][ T2441] EXT4-fs (loop5): Remounting filesystem read-only [ 162.698986][ T2441] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 163.038122][ T2441] FAULT_INJECTION: forcing a failure. [ 163.038122][ T2441] name failslab, interval 1, probability 0, space 0, times 0 [ 163.070398][ T2441] CPU: 0 PID: 2441 Comm: syz.5.536 Not tainted syzkaller #0 [ 163.077762][ T2441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.087851][ T2441] Call Trace: [ 163.091172][ T2441] [ 163.094166][ T2441] __dump_stack+0x21/0x24 [ 163.098538][ T2441] dump_stack_lvl+0x110/0x170 [ 163.103258][ T2441] ? __cfi_dump_stack_lvl+0x8/0x8 [ 163.108325][ T2441] dump_stack+0x15/0x24 [ 163.112561][ T2441] should_fail_ex+0x3bf/0x510 [ 163.117280][ T2441] ? getname_flags+0xba/0x510 [ 163.121994][ T2441] __should_failslab+0xac/0xf0 [ 163.126809][ T2441] should_failslab+0x9/0x20 [ 163.131354][ T2441] kmem_cache_alloc+0x3b/0x320 [ 163.136176][ T2441] getname_flags+0xba/0x510 [ 163.140723][ T2441] getname+0x19/0x20 [ 163.144654][ T2441] do_sys_openat2+0xeb/0x820 [ 163.149294][ T2441] ? __kasan_check_read+0x11/0x20 [ 163.154360][ T2441] ? preempt_schedule_irq+0xca/0x120 [ 163.159700][ T2441] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 163.165490][ T2441] ? do_sys_open+0xe0/0xe0 [ 163.169990][ T2441] ? sysvec_reschedule_ipi+0x78/0x80 [ 163.175332][ T2441] __x64_sys_openat+0x136/0x160 [ 163.180419][ T2441] x64_sys_call+0x783/0x9a0 [ 163.184973][ T2441] do_syscall_64+0x4c/0xa0 [ 163.189439][ T2441] ? clear_bhb_loop+0x30/0x80 [ 163.194191][ T2441] ? clear_bhb_loop+0x30/0x80 [ 163.198912][ T2441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.204865][ T2441] RIP: 0033:0x7f4cfe59e019 [ 163.209312][ T2441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.228958][ T2441] RSP: 002b:00007f4cff3ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 163.237419][ T2441] RAX: ffffffffffffffda RBX: 00007f4cfe825fa0 RCX: 00007f4cfe59e019 [ 163.245608][ T2441] RDX: 0000000000101042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 163.253643][ T2441] RBP: 00007f4cff3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 163.261658][ T2441] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 163.269667][ T2441] R13: 00007f4cfe826038 R14: 00007f4cfe825fa0 R15: 00007ffd1c26e608 [ 163.277688][ T2441] [ 163.326704][ T1742] EXT4-fs (loop5): unmounting filesystem. [ 163.424211][ T2456] loop5: detected capacity change from 0 to 256 [ 163.441866][ T2454] loop3: detected capacity change from 0 to 512 [ 163.462849][ T2454] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.473533][ T2454] EXT4-fs error (device loop3): ext4_iget_extra_inode:4765: inode #15: comm syz.3.540: corrupted in-inode xattr [ 163.495797][ T2454] EXT4-fs (loop3): Remounting filesystem read-only [ 163.509655][ T2454] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.540: couldn't read orphan inode 15 (err -117) [ 163.523665][ T391] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.543158][ T2454] EXT4-fs (loop3): Remounting filesystem read-only [ 163.553037][ T2454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.566179][ T2456] loop5: detected capacity change from 0 to 256 [ 163.575569][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 163.575587][ T28] audit: type=1400 audit(1785890607.795:533): avc: denied { mount } for pid=2453 comm="syz.3.540" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 163.594964][ T391] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.642951][ T2456] exfat: Unknown parameter '})N#biw [ 163.642951][ T2456] kIb1n#˲ҷ i_DǏRg9i<:Uexfat' [ 163.669664][ T391] Buffer I/O error on dev loop5, logical block 0, async page read [ 163.701615][ T289] EXT4-fs (loop3): unmounting filesystem. [ 163.953313][ T2468] loop5: detected capacity change from 0 to 1024 [ 164.002338][ T2468] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 164.167201][ T516] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 164.434475][ T516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.493808][ T516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.624985][ T516] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.689487][ T516] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.699763][ T28] audit: type=1400 audit(1785890608.915:534): avc: denied { setopt } for pid=2475 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.720197][ T516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.732757][ T28] audit: type=1400 audit(1785890608.935:535): avc: denied { map_read map_write } for pid=2475 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 164.761563][ T516] usb 4-1: config 0 descriptor?? [ 164.773143][ T28] audit: type=1400 audit(1785890608.935:536): avc: denied { write } for pid=2475 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.795410][ T2480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.545'. [ 164.821057][ T2480] netlink: 240 bytes leftover after parsing attributes in process `syz.4.545'. [ 164.853021][ T288] syz-executor: attempt to access beyond end of device [ 164.853021][ T288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.165601][ T2482] loop4: detected capacity change from 0 to 40427 [ 165.184511][ T2482] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 165.201027][ T2482] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 165.210829][ T516] usbhid 4-1:0.0: can't add hid device: -71 [ 165.217169][ T516] usbhid: probe of 4-1:0.0 failed with error -71 [ 165.232427][ T516] usb 4-1: USB disconnect, device number 26 [ 165.242679][ T2482] F2FS-fs (loop4): invalid crc value [ 165.259773][ T2482] F2FS-fs (loop4): Found nat_bits in checkpoint [ 165.260066][ T2497] loop2: detected capacity change from 0 to 512 [ 165.305436][ T2497] ext2: Unknown parameter 'obj_type' [ 165.399728][ T2482] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 165.409145][ T2482] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 167.241086][ T2524] loop4: detected capacity change from 0 to 512 [ 167.259359][ T2524] EXT4-fs: Ignoring removed i_version option [ 167.268631][ T2527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 167.283231][ T2524] EXT4-fs: quotafile must be on filesystem root [ 167.290219][ T2527] netlink: 240 bytes leftover after parsing attributes in process `syz.2.558'. [ 167.449944][ T2521] loop3: detected capacity change from 0 to 40427 [ 167.658471][ T2521] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 167.721692][ T2521] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 167.816611][ T28] audit: type=1400 audit(1785890612.035:537): avc: denied { create } for pid=2535 comm="syz.5.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.847735][ T2521] F2FS-fs (loop3): Found nat_bits in checkpoint [ 167.859403][ T2536] loop5: detected capacity change from 0 to 512 [ 167.871749][ T28] audit: type=1400 audit(1785890612.075:538): avc: denied { connect } for pid=2535 comm="syz.5.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.896375][ T28] audit: type=1400 audit(1785890612.075:539): avc: denied { setopt } for pid=2535 comm="syz.5.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.936290][ T2521] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 167.943617][ T2521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 167.951253][ T326] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.156936][ T2536] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 168.170331][ T28] audit: type=1400 audit(1785890612.385:540): avc: denied { ioctl } for pid=2535 comm="syz.5.561" path="socket:[23849]" dev="sockfs" ino=23849 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.230826][ T2545] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 168.272360][ T1801] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 168.395683][ T28] audit: type=1400 audit(1785890612.615:541): avc: denied { setopt } for pid=2547 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 168.417873][ T2548] loop2: detected capacity change from 0 to 512 [ 168.427530][ T2548] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 168.463502][ T1801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.482540][ T1801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.512313][ T1801] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.526576][ T1801] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.551982][ T1801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.579745][ T1801] usb 5-1: config 0 descriptor?? [ 168.586049][ T2553] loop2: detected capacity change from 0 to 512 [ 168.611026][ T2553] ext2: Unknown parameter 'obj_type' [ 168.722532][ T2536] ================================================================== [ 168.730662][ T2536] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 168.738799][ T2536] Read of size 4 at addr ffff8881327c0000 by task syz.5.561/2536 [ 168.746550][ T2536] [ 168.748909][ T2536] CPU: 1 PID: 2536 Comm: syz.5.561 Not tainted syzkaller #0 [ 168.756321][ T2536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.766496][ T2536] Call Trace: [ 168.769833][ T2536] [ 168.772791][ T2536] __dump_stack+0x21/0x24 [ 168.777158][ T2536] dump_stack_lvl+0x110/0x170 [ 168.781870][ T2536] ? __cfi_dump_stack_lvl+0x8/0x8 [ 168.786964][ T2536] ? _raw_spin_lock_bh+0x94/0xf0 [ 168.791943][ T2536] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 168.797704][ T2536] print_address_description+0x71/0x200 [ 168.803356][ T2536] print_report+0x4a/0x60 [ 168.807741][ T2536] kasan_report+0x122/0x150 [ 168.812343][ T2536] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 168.818459][ T2536] __asan_report_load4_noabort+0x14/0x20 [ 168.824162][ T2536] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 168.829756][ T2536] pppol2tp_release+0x150/0x2b0 [ 168.834643][ T2536] sock_close+0xc9/0x220 [ 168.838974][ T2536] ? __cfi_sock_close+0x10/0x10 [ 168.843871][ T2536] __fput+0x1fd/0x8f0 [ 168.847995][ T2536] ____fput+0x15/0x20 [ 168.852025][ T2536] task_work_run+0x1e1/0x250 [ 168.856686][ T2536] ? __cfi_task_work_run+0x10/0x10 [ 168.861837][ T2536] ? __kasan_check_write+0x14/0x20 [ 168.867006][ T2536] do_exit+0xaf2/0x2850 [ 168.871218][ T2536] ? __schedule+0xbea/0x14b0 [ 168.875843][ T2536] ? __cfi_do_exit+0x10/0x10 [ 168.880469][ T2536] ? plist_check_list+0x255/0x270 [ 168.885534][ T2536] ? _raw_spin_lock+0x94/0xf0 [ 168.890247][ T2536] ? __kasan_check_write+0x14/0x20 [ 168.895391][ T2536] ? _raw_spin_lock_irq+0x95/0xf0 [ 168.900481][ T2536] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 168.906074][ T2536] do_group_exit+0x21b/0x2e0 [ 168.910722][ T2536] ? __kasan_check_write+0x14/0x20 [ 168.915869][ T2536] ? recalc_sigpending+0x168/0x1c0 [ 168.921035][ T2536] get_signal+0x167c/0x1700 [ 168.925608][ T2536] ? __cfi_get_signal+0x10/0x10 [ 168.930523][ T2536] arch_do_signal_or_restart+0xd1/0x11c0 [ 168.936203][ T2536] ? do_futex+0x2e2/0x430 [ 168.940562][ T2536] ? __cfi_do_futex+0x10/0x10 [ 168.945316][ T2536] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 168.951508][ T2536] ? __se_sys_futex+0x136/0x310 [ 168.956399][ T2536] exit_to_user_mode_loop+0x7a/0xb0 [ 168.961639][ T2536] exit_to_user_mode_prepare+0x87/0xd0 [ 168.967145][ T2536] syscall_exit_to_user_mode+0x1a/0x30 [ 168.972653][ T2536] do_syscall_64+0x58/0xa0 [ 168.977118][ T2536] ? clear_bhb_loop+0x30/0x80 [ 168.981830][ T2536] ? clear_bhb_loop+0x30/0x80 [ 168.986541][ T2536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.992494][ T2536] RIP: 0033:0x7f4cfe59e019 [ 168.997024][ T2536] Code: Unable to access opcode bytes at 0x7f4cfe59dfef. [ 169.004169][ T2536] RSP: 002b:00007f4cff3ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.012625][ T2536] RAX: fffffffffffffe00 RBX: 00007f4cfe825fa8 RCX: 00007f4cfe59e019 [ 169.020693][ T2536] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4cfe825fa8 [ 169.028707][ T2536] RBP: 00007f4cfe825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 169.036730][ T2536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.044748][ T2536] R13: 00007f4cfe826038 R14: 00007ffd1c26e520 R15: 00007ffd1c26e608 [ 169.052770][ T2536] [ 169.055829][ T2536] [ 169.058178][ T2536] Allocated by task 2536: [ 169.062624][ T2536] kasan_set_track+0x4b/0x70 [ 169.067264][ T2536] kasan_save_alloc_info+0x1f/0x30 [ 169.072414][ T2536] __kasan_kmalloc+0x95/0xb0 [ 169.077059][ T2536] __kmalloc+0xb4/0x1e0 [ 169.081302][ T2536] l2tp_session_create+0x38/0xbd0 [ 169.081333][ T2536] pppol2tp_connect+0xbf5/0x1640 [ 169.081356][ T2536] __sys_connect+0x3da/0x460 [ 169.081378][ T2536] __x64_sys_connect+0x7a/0x90 [ 169.081400][ T2536] x64_sys_call+0x88d/0x9a0 [ 169.081424][ T2536] do_syscall_64+0x4c/0xa0 [ 169.081449][ T2536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.081478][ T2536] [ 169.081483][ T2536] Freed by task 418: [ 169.081492][ T2536] kasan_set_track+0x4b/0x70 [ 169.081515][ T2536] kasan_save_free_info+0x2b/0x40 [ 169.081534][ T2536] ____kasan_slab_free+0x132/0x180 [ 169.081558][ T2536] __kasan_slab_free+0x11/0x20 [ 169.081582][ T2536] slab_free_freelist_hook+0xc2/0x190 [ 169.081601][ T2536] __kmem_cache_free+0xb7/0x1b0 [ 169.081627][ T2536] kfree+0x6f/0xf0 [ 169.081643][ T2536] l2tp_session_put+0xaf/0x1a0 [ 169.081661][ T2536] l2tp_session_delete+0x3df/0x4d0 [ 169.081680][ T2536] l2tp_tunnel_del_work+0x199/0x410 [ 169.081700][ T2536] process_one_work+0x717/0xc30 [ 169.081720][ T2536] worker_thread+0xa4d/0x11d0 [ 169.081737][ T2536] kthread+0x281/0x320 [ 169.081758][ T2536] ret_from_fork+0x1f/0x30 [ 169.081779][ T2536] [ 169.081783][ T2536] The buggy address belongs to the object at ffff8881327c0000 [ 169.081783][ T2536] which belongs to the cache kmalloc-512 of size 512 [ 169.081801][ T2536] The buggy address is located 0 bytes inside of [ 169.081801][ T2536] 512-byte region [ffff8881327c0000, ffff8881327c0200) [ 169.081822][ T2536] [ 169.081826][ T2536] The buggy address belongs to the physical page: [ 169.081853][ T2536] page:ffffea0004c9f000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1327c0 [ 169.081883][ T2536] head:ffffea0004c9f000 order:2 compound_mapcount:0 compound_pincount:0 [ 169.081901][ T2536] flags: 0x4000000000010200(slab|head|zone=1) [ 169.081932][ T2536] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100042f00 [ 169.081951][ T2536] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 169.081961][ T2536] page dumped because: kasan: bad access detected [ 169.081971][ T2536] page_owner tracks the page as allocated [ 169.081981][ T2536] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 286, tgid 286 (syz-executor), ts 25488647584, free_ts 0 [ 169.082021][ T2536] post_alloc_hook+0x1f5/0x210 [ 169.082048][ T2536] prep_new_page+0x1c/0x110 [ 169.082073][ T2536] get_page_from_freelist+0x2ca9/0x2d20 [ 169.082102][ T2536] __alloc_pages+0x1fa/0x610 [ 169.082129][ T2536] alloc_slab_page+0x6e/0xf0 [ 169.082146][ T2536] new_slab+0x98/0x3e0 [ 169.082163][ T2536] ___slab_alloc+0x70f/0xb70 [ 169.082188][ T2536] __slab_alloc+0x5e/0xa0 [ 169.082215][ T2536] __kmem_cache_alloc_node+0x204/0x2d0 [ 169.082241][ T2536] __kmalloc_node+0xa2/0x1e0 [ 169.082258][ T2536] qdisc_alloc+0x82/0x750 [ 169.082284][ T2536] qdisc_create_dflt+0x6b/0x3a0 [ 169.082303][ T2536] dev_activate+0x30e/0x1110 [ 169.082326][ T2536] __dev_open+0x40d/0x520 [ 169.082348][ T2536] __dev_change_flags+0x1f2/0x6b0 [ 169.082371][ T2536] dev_change_flags+0x80/0x1a0 [ 169.082394][ T2536] page_owner free stack trace missing [ 169.082400][ T2536] [ 169.082404][ T2536] Memory state around the buggy address: [ 169.082414][ T2536] ffff8881327bff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 169.082428][ T2536] ffff8881327bff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 169.082442][ T2536] >ffff8881327c0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.082453][ T2536] ^ [ 169.082463][ T2536] ffff8881327c0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.082477][ T2536] ffff8881327c0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.082487][ T2536] ================================================================== [ 169.090842][ T28] audit: type=1400 audit(1785890613.305:542): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 169.090876][ T28] audit: type=1400 audit(1785890613.305:543): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.090920][ T28] audit: type=1400 audit(1785890613.305:544): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.090948][ T28] audit: type=1400 audit(1785890613.305:545): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.090974][ T28] audit: type=1400 audit(1785890613.305:546): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.448203][ T2536] Disabling lock debugging due to kernel taint [ 169.448502][ T2536] ------------[ cut here ]------------ [ 169.448516][ T2536] WARNING: CPU: 0 PID: 2536 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 169.448582][ T2536] Modules linked in: [ 169.448595][ T2536] CPU: 0 PID: 2536 Comm: syz.5.561 Tainted: G B syzkaller #0 [ 169.448618][ T2536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.448629][ T2536] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 169.448658][ T2536] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 169.448677][ T2536] RSP: 0018:ffffc90011be7770 EFLAGS: 00010293 [ 169.448695][ T2536] RAX: ffffffff849bb307 RBX: ffff888131abd000 RCX: ffff888118a00000 [ 169.448728][ T2536] RDX: 0000000000000000 RSI: 0000000017458dd0 RDI: 000000000c04eb7d [ 169.448743][ T2536] RBP: ffffc90011be7790 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc [ 169.448758][ T2536] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: dffffc0000000000 [ 169.448774][ T2536] R13: dffffc0000000000 R14: 0000000017458dd0 R15: ffff8881327c0000 [ 169.448788][ T2536] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 169.448807][ T2536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.448822][ T2536] CR2: 00007f8268942000 CR3: 0000000141792000 CR4: 00000000003506b0 [ 169.448841][ T2536] Call Trace: [ 169.448863][ T2536] [ 169.448871][ T2536] pppol2tp_release+0x150/0x2b0 [ 169.448933][ T2536] sock_close+0xc9/0x220 [ 169.448959][ T2536] ? __cfi_sock_close+0x10/0x10 [ 169.448988][ T2536] __fput+0x1fd/0x8f0 [ 169.449015][ T2536] ____fput+0x15/0x20 [ 169.449055][ T2536] task_work_run+0x1e1/0x250 [ 169.449081][ T2536] ? __cfi_task_work_run+0x10/0x10 [ 169.449106][ T2536] ? __kasan_check_write+0x14/0x20 [ 169.449126][ T2536] do_exit+0xaf2/0x2850 [ 169.449154][ T2536] ? __schedule+0xbea/0x14b0 [ 169.449197][ T2536] ? __cfi_do_exit+0x10/0x10 [ 169.449226][ T2536] ? plist_check_list+0x255/0x270 [ 169.449253][ T2536] ? _raw_spin_lock+0x94/0xf0 [ 169.449285][ T2536] ? __kasan_check_write+0x14/0x20 [ 169.449304][ T2536] ? _raw_spin_lock_irq+0x95/0xf0 [ 169.449344][ T2536] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 169.449370][ T2536] do_group_exit+0x21b/0x2e0 [ 169.449400][ T2536] ? __kasan_check_write+0x14/0x20 [ 169.449421][ T2536] ? recalc_sigpending+0x168/0x1c0 [ 169.449446][ T2536] get_signal+0x167c/0x1700 [ 169.449495][ T2536] ? __cfi_get_signal+0x10/0x10 [ 169.449525][ T2536] arch_do_signal_or_restart+0xd1/0x11c0 [ 169.449552][ T2536] ? do_futex+0x2e2/0x430 [ 169.449572][ T2536] ? __cfi_do_futex+0x10/0x10 [ 169.449592][ T2536] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 169.449653][ T2536] ? __se_sys_futex+0x136/0x310 [ 169.449679][ T2536] exit_to_user_mode_loop+0x7a/0xb0 [ 169.449703][ T2536] exit_to_user_mode_prepare+0x87/0xd0 [ 169.449727][ T2536] syscall_exit_to_user_mode+0x1a/0x30 [ 169.449749][ T2536] do_syscall_64+0x58/0xa0 [ 169.449790][ T2536] ? clear_bhb_loop+0x30/0x80 [ 169.449809][ T2536] ? clear_bhb_loop+0x30/0x80 [ 169.449828][ T2536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.449857][ T2536] RIP: 0033:0x7f4cfe59e019 [ 169.449874][ T2536] Code: Unable to access opcode bytes at 0x7f4cfe59dfef. [ 169.449884][ T2536] RSP: 002b:00007f4cff3ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.449905][ T2536] RAX: fffffffffffffe00 RBX: 00007f4cfe825fa8 RCX: 00007f4cfe59e019 [ 169.449939][ T2536] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4cfe825fa8 [ 169.449953][ T2536] RBP: 00007f4cfe825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 169.449967][ T2536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.449979][ T2536] R13: 00007f4cfe826038 R14: 00007ffd1c26e520 R15: 00007ffd1c26e608 [ 169.449998][ T2536] [ 169.450005][ T2536] ---[ end trace 0000000000000000 ]--- [ 170.305438][ T289] syz-executor: attempt to access beyond end of device [ 170.305438][ T289] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.582848][ T1801] usbhid 5-1:0.0: can't add hid device: -71 [ 170.588871][ T1801] usbhid: probe of 5-1:0.0 failed with error -71 [ 170.596872][ T1801] usb 5-1: USB disconnect, device number 16