last executing test programs: 2m21.779963804s ago: executing program 3 (id=122): timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)) (async) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x7, 0x0, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x240700, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x240700, 0x0) inotify_init() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x8000, 0x3ff}) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xac500, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000009, 0x12, 0xffffffffffffffff, 0xec776000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x6, 0x3, 0x4, 0x3}, {0x2, 0x1, 0x3, 0x2}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) write$selinux_load(0xffffffffffffffff, 0x0, 0x6000) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x27) (async) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x27) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x100080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) timer_gettime(0x0, &(0x7f0000000000)) (async) timer_gettime(0x0, &(0x7f0000000000)) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) (async) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@nested_create_vm={0x12d, 0x18}], 0x18}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r10, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r10, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x0, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2m21.778359244s ago: executing program 3 (id=123): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0269640320"], 0xb) 2m21.773263414s ago: executing program 3 (id=124): mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1010c10, &(0x7f0000000080)=ANY=[], 0x7, 0x150f, &(0x7f0000002ac0)="$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") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r2, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000240)={r1, &(0x7f0000000000)='batadv_slave_1\x00', 0x101200, &(0x7f0000000100)={@align=0x5, {0x1, 0x9, 0xfffffffc, 0xc}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) 2m20.755937475s ago: executing program 3 (id=130): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r6 = eventfd(0x0) io_submit(r5, 0x2, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r6, 0x0, 0x0, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x7f, 0x0, 0x1, r6}]) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x2800000, &(0x7f00000001c0), 0x1, 0xbe2, &(0x7f0000000ac0)="$eJzs3M9rHNcdAPDvjFa/bLkrl1LqXqxSig2la9lFpjaF2sWllx4K7bVgIa+M0PoHkoorWdBV+x+0OQdyCSQxCT7EZ18SyDWXxLnG5BAwQbESCCFRmP0hydKuZFkrjSx9PvB23ps3M+/73dndmQe7G8ChNZQ9pBEnIuJqElFsrE8joqdW64uo1rdbWpwf+3pxfiyJ5eW/fZFEEhFPF+fHmsdKGsujjUZfRHz4xyR+/N+N407Pzk2OVirlqUb7zMyN22emZ+d+M3Fj9Hr5evnm2fO/Gzk3cn74wkjHcv3m00sPvvrFnz+rfvvmd/e+/P/rSVyKgUbf2jwaWe/YUAytPCdr9Ed0deDo+0OWSWHNuc8khS12Snc5KAAA2krX3MP9NIrRFas3b8V476NcgwMAAAA6YrkrYhkAAAA44BLzfwAAADjgmt8DeLo4P9Ysq98O2OqHnC+/J5cjYrCe/1Kj1HsKUa0t+6I7Io48TZ55NpL6bjs2FBGPP7nwTlaixe+Qd1t1ISJ+1ur8J7X8Bxu/hF6ffxoRwx0Yf2hd+2XK/1IHxs87fwAOp4eX6xeyjde/dOX+J1pc/wotrl0vIu/rX/P+b2nD/d9q/l1t7v/++pxj3H3j1Tvt+rL8f//gT283SzZ+ttxRUtvwZCHi54VW+Scr+Sdt8r+6xbGTqB+i+P2dcrtt8s5/+bWIU9E6/6Zk8/8nOjM+USkP1x9bjrHwwchb7cbPO//s/B9pk/8m578vW3c7ojY3qmv/pz7/uHLlfru+LfPvSj/vSf5eq/Y0Vv1rdGZm6mxET/KXjevPbZ5vc5vmMbL8T/9y8/d/q9d/9plQbbw2sswXGsus/Z91Y/7h3t13N8s/m/vlef6vbf/8Z+ta/LVVa796/3+n2/Wtnf9mJRv/cVKfCwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAUxoRA5GkpYhIavU0LZUijkbET+JIWrk1PfPr8Vv/vHkt64sYjO50fKJSLkREsd5OsvbZWn21fW5d+7cRcTwiXin219qlsVuVa3knDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIqjETEQSVqKiDQiloppWirlHRUAAADQcYN5BwAAAADsOvN/AAAAOPjM/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhlx08+fJRERPVif61kehp93blGBuy2tPbYlXcYQA688+HwKuQdAJCbbc7x3S7AAZRs0d/Xtqe347EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsH+dOvHwURIR1Yv9tZLpafR1t9zj5B5GB+ymNO8AgNx0bdZZ2Ls4gL33wm/xY52NA9h7ref4wGGSbNHft7pN9dme3l2LCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9Z6BWkrQUEWmtnqalUsSxiBiM7mR8olIejogfRcTHxe7erN2bd9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03PTs3ORopVKeepFKsrPdVVTaVf69P8LYi0oUIuprkn0RT6OS9ycTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJ6dmxytVMpT0+t7uvMJCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjN9Ozc5GilUp56jsr97Wy8ppJ3jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5OeHAAAA//85qwr6") write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffdf) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@user_xattr}, {@init_itable}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@discard}]}, 0x1, 0xbe8, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f0000000340)=[{0x8, 0x4a, 0x4}, {0xc7a4, 0x6, 0x3, 0x8001}, {0x2, 0xc0, 0x0, 0x3}]}, 0x10) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r7 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000080)=ANY=[], 0x1, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f0000000080)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 2m20.117224303s ago: executing program 3 (id=135): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/rcu_normal', 0x208403, 0x2f) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tkill(0x0, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x90003, 0x7]) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2010461, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) 2m19.47939538s ago: executing program 3 (id=140): ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000580)=""/155) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="053ca52cf8bfd87bc70ac8fabcb2841ec2f4f06c4014093dfd86fc039929ba3b3fe27f49aa50ff9750edac57932b6202535e796db1d9f462a97d1a3954b6b1d53618e4b433d5ee6f81bf9e513ab234e85918479cad4facd6bec49b967d42910218b1161847567b5d70235ad9", @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf251400000030000780080002000a0000000c000400050000000000000008000100fffeffff0800020004000000080002007a1f0000"], 0x44}}, 0x4040010) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r6, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!G', 0x3}], 0x1, 0x739, 0x1) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) listen(r7, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$netlink(0x10, 0x3, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="86656375726974792e262700"]) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', r10, 0x20, 0x8000, 0x8, 0x9, {{0x1a, 0x4, 0x1, 0x0, 0x68, 0x68, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0x27, 0x3, 0x2, [{@local, 0x89}, {@multicast1, 0x6}, {@multicast1, 0xd}, {@multicast1, 0x3557}, {@broadcast, 0xfff}]}, @ssrr={0x89, 0xf, 0xfc, [@local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0x8a, 0x0, 0x3, [0x3, 0x80, 0x10000, 0x1]}, @ra={0x94, 0x4}, @noop]}}}}}) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000400)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x4}}]}}]}, 0x40}}, 0x240400c4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r3, 0x29, 0x3, 0x8, 0xffffff81, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, @private2, 0x8, 0x8000, 0x6, 0x2}}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a40)=@newtaction={0x173c, 0x30, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{0x1624, 0x1, [@m_csum={0xfc, 0x3, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe28, 0x7fff, 0x1, 0xffff07b4, 0xaa6}, 0x5e}}]}, {0xb4, 0x6, "6b66f5d02ce902ebca76ff107b75bedc13dff79658f5fd3bf3d14a20a2d507998fa7d1a7e3eb3076d2e733d6fc8442bdc8026c55182f8e396d2b93ac715574d8bdf1215ae5ae3dc00a46de8c9fc388cd8bd4fcbb0242e7fa0cd4a09003da5fc5c2e4ddb49e4bd9e1e374d9fa5d3563128a6d3342e589c28e8774f2b195f1b5bf51b76961e7597b9ef86a4e58cc97897c2d8a988a1babbe8d832885e57f5d02b6bdf4f57ee082847dc5015b125ba5f358"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x188, 0xf, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xff, 0x4, 0x2, 0x9, 0x3}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1458, 0x9, 0x0, 0x2, 0x2}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x4, 0x2, 0x1}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7fffffff, 0x6, 0x1, 0x4127d9bb}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0xd9, 0x6, "2cee7642108ef2985a6c73dbd0f03674f5233c1d2863f5f68ba8b53d297525c55351e1543e9319e28a2d122dd2eb837b54e09535dc6cdbc0d2c37b10e9cc0a4a7641966729578c921f4bdbdb87ffb7dc57d10edc8cd38458602944b73958765a8e083247e9efeb6c7021e217c89d1264b60a7210ed71ea9e535eb173b78ee82ce279831a3a2dadd95269980238ecdec3e1b9d0f736a2b0b5b37c5ed68d13ddf57121aa9b20557e8469124147c9344a45f4cb09163d1934565014d0d35a6a426e0f2400dd9a6d07a4bb69da28f8b7b8a20fc5ff1d34"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xf60, 0x1d, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x6, 0x5, 0x4, 0x1ff, 0x9}, 0x0, 0x9, [{0x7, 0x401, 0x4, 0xecc7, 0x3, 0x7}]}, [{0x3, 0x1, 0x884, 0x1, 0x4, 0x6}, {0x80, 0x8, 0xfffffffd, 0x7, 0x397b, 0x3}, {0x7ff, 0x7, 0xa082, 0xfffffff9, 0x7, 0x4}, {0x87, 0x6, 0x27e, 0x7, 0x8, 0xf8}, {0x8753f16, 0x10001, 0x778, 0x2, 0x5, 0x65}, {0xca02, 0x4, 0x400, 0x2, 0x200}, {0x5, 0x400, 0x2, 0x0, 0x1e71, 0x62}, {0x400, 0x100, 0x2e, 0x3, 0xfffffffb, 0x7fff}, {0x9, 0x800, 0x40, 0x9, 0x5, 0xf}, {0x10001, 0x7, 0x1, 0x0, 0xfffffff3, 0x4}, {0x6, 0x28a0, 0x0, 0x800, 0xc, 0x101}, {0x6, 0xd, 0x9, 0x40, 0x2, 0x800}, {0x9, 0x56, 0x6, 0x39, 0x0, 0x8}, {0x2e, 0x6c, 0x9, 0x0, 0x8, 0xb5}, {0x4, 0x7eb7, 0x6, 0x8000, 0x5, 0x9}, {0x1, 0xfee, 0xffff7fff, 0x5, 0xf7, 0x4}, {0x0, 0x2, 0xe, 0x6, 0x2, 0xce6}, {0x4, 0xa, 0x8, 0x5, 0x4, 0x9227}, {0xe, 0x7, 0xd, 0x8ff, 0x9, 0xc4}, {0x0, 0x1, 0x1139, 0x9, 0x5, 0x5}, {0xfffffff7, 0x0, 0x2, 0x100, 0xffff7fff, 0x401}, {0xe, 0x7, 0x3, 0xfe, 0x4c8, 0x9}, {0x1, 0x9, 0xffffd532, 0x0, 0x80000001, 0x3}, {0x0, 0x10, 0xb4, 0xb, 0x10, 0x4a8}, {0xc, 0xff0, 0x2, 0x0, 0x6, 0x7}, {0x4, 0x4, 0xb640, 0x0, 0x4ba4, 0xa}, {0x6, 0x80000000, 0x0, 0x5, 0x8, 0x8aa}, {0x0, 0x5, 0x9, 0xffffffff, 0x0, 0x1cad}, {0x5, 0x8, 0x6, 0xffff, 0x0, 0x4}, {0x8, 0x6, 0x1, 0x3, 0xfffffff6, 0x2}, {0x200, 0xe, 0xd577, 0x0, 0x1, 0x4}, {0x26, 0x6, 0x5, 0x4, 0x2, 0x10000}, {0x4, 0x400, 0x4, 0x78, 0x7, 0x7fff}, {0x5, 0xf, 0x0, 0x8001, 0x80000000, 0x5}, {0xffffffff, 0x3, 0x3, 0x3, 0x10000000, 0x9}, {0x71, 0xc32, 0x2, 0x6, 0x9af, 0xe86}, {0x2, 0xf, 0x5b0, 0x7faa, 0x7, 0xfffffff7}, {0x2, 0x4, 0x9, 0x6, 0x0, 0x4}, {0x0, 0xfdc9, 0x7, 0x1, 0x6, 0x1}, {0x3, 0x1, 0xfff, 0x80000000, 0x8, 0x8}, {0xf07, 0x7, 0x89, 0x9d, 0x2, 0x8000}, {0xd, 0x800, 0x7484, 0xd64, 0x80000001, 0xb}, {0x3, 0x912, 0xfffff800, 0xffff2d9c, 0x1ff, 0x9}, {0x7, 0x7, 0x7fffffff, 0x9441393, 0x2, 0x76dc396}, {0x1000, 0x80, 0x3, 0xce, 0x3, 0x9}, {0xeec8, 0x3d, 0x1, 0x9, 0x8, 0x188}, {0x0, 0x7, 0x3, 0x7, 0x656b, 0x1}, {0xaad, 0x1e72, 0x8, 0x3, 0x4}, {0x7, 0x80, 0x400, 0x5, 0xd5c3, 0x10001}, {0x4, 0x4, 0x1fb, 0xd34, 0x3, 0x22}, {0x7, 0x8, 0x1000, 0xfffffffa, 0x9, 0x9}, {0x5262, 0x5, 0x8, 0x6, 0x10, 0x3}, {0x0, 0x0, 0x2, 0x8, 0x1, 0x7a}, {0xffffffff, 0x4, 0x4, 0x1, 0xd, 0x1}, {0x3ff, 0x3, 0xffff4899, 0xffffffff}, {0x3, 0x6, 0x7f, 0x8000, 0x6, 0x7}, {0x4e, 0x8, 0x4, 0x3, 0x642, 0xa60}, {0x7, 0x8, 0xa83, 0x2, 0x7, 0x2}, {0x1, 0x3, 0x7ff, 0x7, 0x9, 0x7}, {0x9, 0x8, 0x80000000, 0x200, 0x20000, 0x2}, {0x9c5, 0x8, 0x800080, 0x7fffffff, 0x9}, {0x5, 0xfff, 0x200, 0x7, 0x6, 0x1}, {0x5, 0x4, 0xa42, 0xe, 0x7, 0x5}, {0x3, 0x0, 0x9, 0x1, 0xf1a, 0x7}, {0x6, 0xb7c, 0x0, 0x200, 0x4, 0x3}, {0x8, 0x10001, 0x280000, 0x90000, 0x63ab52af, 0x1000}, {0x5, 0x8, 0x10000, 0xff, 0x2, 0x2}, {0x5, 0x2, 0x6, 0x6, 0x1000, 0x5}, {0x7, 0x401, 0x5, 0x7b8ff2c5, 0x1, 0x20000}, {0x3, 0x7f, 0x7, 0x8, 0x4, 0x9a6}, {0x1, 0x3, 0x44c, 0xf, 0x5}, {0x5, 0x8, 0x8000, 0x1, 0x5, 0xb}, {0xffffffff, 0xfffffffc, 0xffff, 0x80000001, 0x8, 0x4}, {0x3, 0xb42, 0x4, 0x1, 0x100, 0x4}, {0x0, 0x7fff, 0x401, 0x6, 0x7fffffff, 0x9}, {0x252, 0x9, 0x7, 0x4, 0x5, 0xeec}, {0x7, 0x14000, 0xe, 0x6, 0x9, 0x80000000}, {0x40, 0x80000001, 0x7fffffff, 0x90000000, 0x8, 0xe3c}, {0x5f0f, 0xb, 0x200, 0x7, 0x80, 0xffffffff}, {0x0, 0xa8fc, 0x401, 0x8, 0x6be97a10, 0x7ff}, {0x7, 0x2, 0x56, 0x1, 0x8, 0x35}, {0x6, 0x5, 0x9, 0x4, 0x584, 0x2}, {0x80000000, 0x5, 0x8, 0x7, 0x3, 0x55}, {0x5, 0xfffffeff, 0x7ff, 0x630, 0xffff, 0x5}, {0x7fffffff, 0x56857cd1, 0x4, 0xdf, 0x9, 0x7f}, {0x1, 0x1200000, 0x0, 0x0, 0x200}, {0xfff, 0x0, 0xb2, 0x5, 0x4, 0x8}, {0x40, 0x6, 0x5, 0xfffffffe, 0x2, 0x4}, {0x8, 0x9, 0x7, 0xf, 0x7, 0x6}, {0xdbc, 0x1a1f, 0x9, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x8, 0x5, 0x1}, {0x5a, 0x1000000, 0x1, 0x2, 0x0, 0x3}, {0xffff1511, 0xac5, 0x8, 0x0, 0x23, 0x5}, {0x100, 0xfffffff8, 0x0, 0x401, 0xfffffff7, 0x8}, {0x48, 0x0, 0xffffff49, 0x4, 0x3, 0xd81}, {0x9, 0x2, 0xc53, 0x3, 0x6, 0x6}, {0x0, 0x8000, 0xf4, 0x953, 0x5, 0xff50}, {0xe, 0x3, 0xe7a, 0x10000, 0x6, 0xe}, {0xfffffc01, 0x3, 0xec, 0x8, 0xfffffffc, 0x4}, {0x6, 0x2, 0x5, 0x1, 0x3, 0xff}, {0x9, 0xffffffff, 0x9, 0xfff, 0x1f41, 0xd}, {0x4, 0x101, 0xe553, 0x1ca00000, 0xfffffffd, 0x7}, {0x80000000, 0x1, 0x2, 0x2, 0x7, 0x579}, {0x5, 0x3, 0x401, 0x6, 0x800, 0x8}, {0x7, 0x1c2, 0x9, 0x4, 0xc, 0xac}, {0x1ff, 0x9, 0xb, 0x18, 0xfffffffc, 0x9}, {0x8, 0x200, 0x0, 0x80000001, 0x7f, 0x1}, {0x4d, 0xfffffff8, 0x7f, 0xb4, 0x3, 0xffff}, {0xff, 0x4, 0xfff, 0x40000000, 0xf, 0x101}, {0x8, 0x1, 0xc, 0x1, 0x40, 0x4}, {0x7, 0x9, 0x10, 0x1, 0x6, 0xc5}, {0x2, 0x1, 0xfffffffc, 0x800, 0x7, 0x9}, {0x1, 0x11c, 0x2, 0x400, 0x2}, {0x3, 0x4, 0x7fff, 0x0, 0x0, 0x1}, {0x2, 0x6, 0xfff, 0x2, 0x7, 0x42f4}, {0xa6a, 0xd1, 0x8, 0x4, 0x2, 0x5}, {0x1, 0x7, 0x1, 0xf1c, 0x3, 0x8000}, {0x1, 0x1, 0xff, 0x101, 0x6, 0x81}, {0xfffffffc, 0xac2, 0xa, 0x81, 0x1, 0x56a}, {0xe, 0xfff, 0x8, 0x3, 0x10001, 0x55}, {0xa78, 0x101, 0x4, 0xb, 0x6, 0xf1aa}, {0x0, 0xa, 0x4, 0x7, 0x13, 0xdd9}, {0x4, 0x3, 0x7, 0xc, 0x1, 0x1}, {0x1000, 0x4, 0x3, 0x4, 0x27, 0x8}, {0x4, 0x1, 0x9, 0x9, 0x5, 0x8}, {0x6, 0x45, 0xc26, 0x10, 0x4, 0xf0000000}, {0x800, 0xd2, 0xd, 0x9, 0x5, 0xd}, {0xd08, 0x8, 0x101, 0x1, 0xfffffff8, 0xffffffff}], [{0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x5}, {0x5}, {}, {0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x5}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x3}, {0x2}, {0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0xfa034d6378e5344a}, {0x5, 0x1}, {0x4}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {}, {0xebb2b1e1bd73305a}, {0x1}, {0x2, 0x1}, {0x34a3577618c151fb}, {0x2, 0x1}]}}]}, {0xfc, 0x6, "325dbc97cd8dcb487f5e411f28221910b6a8d9301bc827cae5aa6dbd76221ba3e9d93afff4386c586aa8d93f1d797fc10acb586aa0fd132f7ba2a36e9c4be43f7e45fc6013f901dcdcf29578e947f90689bfd646f48e2e403bad658f57b236f5a4ed1c59912fa4f0b21475778067d3e7893d7d56657a9271dbcf3d38a1ebbcc6ba8f0d451d05ca6dd43d028529466b7134afdf32a4029272c432170fce869d29daef5bd6270f4724fb64369af6208880486b5068688e65df6ead25bfad46fb8f78647eca837ae6a6ee5f453dc6422f7edd9e43de0e2e4fed1c0e3ffd3ae2553179bc1539bda78c7d67da0d2ad999692cd839ceb07a08bd1d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x1a8, 0x1b, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9f9d, 0x428, 0x0, 0x189, 0xffff}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x5, 0x3a7722ca, 0x7f}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x10000001, 0x5, 0x7}, 0x3, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x2, 0x3, 0x7}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe7d5, 0x4, 0xffffffffffffffff, 0x1, 0x9}, 0x1, r14}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x200, 0x20000000, 0x81, 0x8}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xc716, 0x0, 0xff, 0x7}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff9, 0x8, 0x3, 0xfffffffe, 0xebf}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x1, 0x6, 0x401, 0x7}, 0x3, r10}}]}, {0x5b, 0x6, "84ea44aca58701d6e374cdf985f1daa064e11c04bcdd501508e90bbddf8d563f46cc93477eb96b32b95b8ce2b3af8dc7ceb9e5fbb056e1045da39997b5d8019b8b8f1766cd9285798f81eba3559c42d86f6112d996df5d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x158, 0xc, 0x0, 0x0, {{0xb}, {0xb8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2f, 0x34fd, 0x7, 0x3, 0x400}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x101, 0x7, 0x5, 0x6}}, @TCA_DEF_DATA={0xd, 0x3, 'fq_codel\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9e, 0x8, 0x5, 0x1000, 0x80000000}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff7, 0x4, 0xffffffffffffffff, 0x8000, 0x81}}, @TCA_DEF_DATA={0xc, 0x3, '^&/**:/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0x6, 0x6, 0xfffffff7}}, @TCA_DEF_DATA={0x8, 0x3, '\'@,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x101, 0x20000000, 0x6, 0x6}}]}, {0x76, 0x6, "17a05f8a2741808e0cd273494b8f13653f649a89e5c78b908fe7e4581c72d9f6c320a50c24e635251f3c372f93a0352ff3c693788a2993e419e9a794a3d90278f64f0d01c0b665e3c6acb349bca5ae1f29ebf7a659a41abd8f71868801376021edb61cd9ac61ad7d1e1ccae307487f77b81a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x13c, 0x12, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffa, 0x8f, 0x10000000, 0x2, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0x7, 0x7, 0xf}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x25df, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd35, 0x8}}]}, {0xc7, 0x6, "dd332d1eea19fafc35776520237b976415fff9530f18ef0f39740883ca2b4fedb6ffd719728b81521ba8f5b576de96025be16676414ffd559638f9d2178d610a4ca111e589b4a788a3ded25ee08050d7b03d4c45ee7cfa8c3a0c81c66837bce65c801e61a85b69c73e26e05e1007fb7bb45268f9399e72e535b67fb18176efd3cea9dd964784ee97d739dffbbb8d5ec6a8010841bff83972c8236006be9fafb74bb0ece9eb3946f232bdce7cba9c659eb25305fbf371831306ebbeee98e5b358bf458a"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x104, 0x1, [@m_ct={0x100, 0x13, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xd53}, @TCA_CT_LABELS_MASK={0x14, 0x8, "46eae8f5dce51b705541a511ab01ceb1"}]}, {0xbb, 0x6, "3a8f36f002dd45eb208bd4a45aa7a2f13e22adb0194cc42e2d56c842684166f808cd3ad03166d181897a8bfdd4a03e1d8ca74548e2c38c3ac3ef509dd66c30fd89990d7fca12f84b2225c01aa7466fe6f956260b387b82e1f13fd4f8751e1fd3980571edaf4421ab1ec6953d55207118d3b1c0e1739f9490d7bdf80e0902765e1d3975d7aac2634ecfe136a8924390540482a343567df2fd878c686fdea7541f003123b5a1f5e1642b11d9393ab0ba637955ec9e8ae8d6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x173c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2m19.4349505s ago: executing program 32 (id=140): ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000580)=""/155) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="053ca52cf8bfd87bc70ac8fabcb2841ec2f4f06c4014093dfd86fc039929ba3b3fe27f49aa50ff9750edac57932b6202535e796db1d9f462a97d1a3954b6b1d53618e4b433d5ee6f81bf9e513ab234e85918479cad4facd6bec49b967d42910218b1161847567b5d70235ad9", @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf251400000030000780080002000a0000000c000400050000000000000008000100fffeffff0800020004000000080002007a1f0000"], 0x44}}, 0x4040010) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r6, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!G', 0x3}], 0x1, 0x739, 0x1) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) listen(r7, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$netlink(0x10, 0x3, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="86656375726974792e262700"]) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', r10, 0x20, 0x8000, 0x8, 0x9, {{0x1a, 0x4, 0x1, 0x0, 0x68, 0x68, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0x27, 0x3, 0x2, [{@local, 0x89}, {@multicast1, 0x6}, {@multicast1, 0xd}, {@multicast1, 0x3557}, {@broadcast, 0xfff}]}, @ssrr={0x89, 0xf, 0xfc, [@local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0x8a, 0x0, 0x3, [0x3, 0x80, 0x10000, 0x1]}, @ra={0x94, 0x4}, @noop]}}}}}) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000400)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x4}}]}}]}, 0x40}}, 0x240400c4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r3, 0x29, 0x3, 0x8, 0xffffff81, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, @private2, 0x8, 0x8000, 0x6, 0x2}}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a40)=@newtaction={0x173c, 0x30, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{0x1624, 0x1, [@m_csum={0xfc, 0x3, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe28, 0x7fff, 0x1, 0xffff07b4, 0xaa6}, 0x5e}}]}, {0xb4, 0x6, "6b66f5d02ce902ebca76ff107b75bedc13dff79658f5fd3bf3d14a20a2d507998fa7d1a7e3eb3076d2e733d6fc8442bdc8026c55182f8e396d2b93ac715574d8bdf1215ae5ae3dc00a46de8c9fc388cd8bd4fcbb0242e7fa0cd4a09003da5fc5c2e4ddb49e4bd9e1e374d9fa5d3563128a6d3342e589c28e8774f2b195f1b5bf51b76961e7597b9ef86a4e58cc97897c2d8a988a1babbe8d832885e57f5d02b6bdf4f57ee082847dc5015b125ba5f358"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x188, 0xf, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xff, 0x4, 0x2, 0x9, 0x3}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1458, 0x9, 0x0, 0x2, 0x2}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x4, 0x2, 0x1}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7fffffff, 0x6, 0x1, 0x4127d9bb}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0xd9, 0x6, "2cee7642108ef2985a6c73dbd0f03674f5233c1d2863f5f68ba8b53d297525c55351e1543e9319e28a2d122dd2eb837b54e09535dc6cdbc0d2c37b10e9cc0a4a7641966729578c921f4bdbdb87ffb7dc57d10edc8cd38458602944b73958765a8e083247e9efeb6c7021e217c89d1264b60a7210ed71ea9e535eb173b78ee82ce279831a3a2dadd95269980238ecdec3e1b9d0f736a2b0b5b37c5ed68d13ddf57121aa9b20557e8469124147c9344a45f4cb09163d1934565014d0d35a6a426e0f2400dd9a6d07a4bb69da28f8b7b8a20fc5ff1d34"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xf60, 0x1d, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x6, 0x5, 0x4, 0x1ff, 0x9}, 0x0, 0x9, [{0x7, 0x401, 0x4, 0xecc7, 0x3, 0x7}]}, [{0x3, 0x1, 0x884, 0x1, 0x4, 0x6}, {0x80, 0x8, 0xfffffffd, 0x7, 0x397b, 0x3}, {0x7ff, 0x7, 0xa082, 0xfffffff9, 0x7, 0x4}, {0x87, 0x6, 0x27e, 0x7, 0x8, 0xf8}, {0x8753f16, 0x10001, 0x778, 0x2, 0x5, 0x65}, {0xca02, 0x4, 0x400, 0x2, 0x200}, {0x5, 0x400, 0x2, 0x0, 0x1e71, 0x62}, {0x400, 0x100, 0x2e, 0x3, 0xfffffffb, 0x7fff}, {0x9, 0x800, 0x40, 0x9, 0x5, 0xf}, {0x10001, 0x7, 0x1, 0x0, 0xfffffff3, 0x4}, {0x6, 0x28a0, 0x0, 0x800, 0xc, 0x101}, {0x6, 0xd, 0x9, 0x40, 0x2, 0x800}, {0x9, 0x56, 0x6, 0x39, 0x0, 0x8}, {0x2e, 0x6c, 0x9, 0x0, 0x8, 0xb5}, {0x4, 0x7eb7, 0x6, 0x8000, 0x5, 0x9}, {0x1, 0xfee, 0xffff7fff, 0x5, 0xf7, 0x4}, {0x0, 0x2, 0xe, 0x6, 0x2, 0xce6}, {0x4, 0xa, 0x8, 0x5, 0x4, 0x9227}, {0xe, 0x7, 0xd, 0x8ff, 0x9, 0xc4}, {0x0, 0x1, 0x1139, 0x9, 0x5, 0x5}, {0xfffffff7, 0x0, 0x2, 0x100, 0xffff7fff, 0x401}, {0xe, 0x7, 0x3, 0xfe, 0x4c8, 0x9}, {0x1, 0x9, 0xffffd532, 0x0, 0x80000001, 0x3}, {0x0, 0x10, 0xb4, 0xb, 0x10, 0x4a8}, {0xc, 0xff0, 0x2, 0x0, 0x6, 0x7}, {0x4, 0x4, 0xb640, 0x0, 0x4ba4, 0xa}, {0x6, 0x80000000, 0x0, 0x5, 0x8, 0x8aa}, {0x0, 0x5, 0x9, 0xffffffff, 0x0, 0x1cad}, {0x5, 0x8, 0x6, 0xffff, 0x0, 0x4}, {0x8, 0x6, 0x1, 0x3, 0xfffffff6, 0x2}, {0x200, 0xe, 0xd577, 0x0, 0x1, 0x4}, {0x26, 0x6, 0x5, 0x4, 0x2, 0x10000}, {0x4, 0x400, 0x4, 0x78, 0x7, 0x7fff}, {0x5, 0xf, 0x0, 0x8001, 0x80000000, 0x5}, {0xffffffff, 0x3, 0x3, 0x3, 0x10000000, 0x9}, {0x71, 0xc32, 0x2, 0x6, 0x9af, 0xe86}, {0x2, 0xf, 0x5b0, 0x7faa, 0x7, 0xfffffff7}, {0x2, 0x4, 0x9, 0x6, 0x0, 0x4}, {0x0, 0xfdc9, 0x7, 0x1, 0x6, 0x1}, {0x3, 0x1, 0xfff, 0x80000000, 0x8, 0x8}, {0xf07, 0x7, 0x89, 0x9d, 0x2, 0x8000}, {0xd, 0x800, 0x7484, 0xd64, 0x80000001, 0xb}, {0x3, 0x912, 0xfffff800, 0xffff2d9c, 0x1ff, 0x9}, {0x7, 0x7, 0x7fffffff, 0x9441393, 0x2, 0x76dc396}, {0x1000, 0x80, 0x3, 0xce, 0x3, 0x9}, {0xeec8, 0x3d, 0x1, 0x9, 0x8, 0x188}, {0x0, 0x7, 0x3, 0x7, 0x656b, 0x1}, {0xaad, 0x1e72, 0x8, 0x3, 0x4}, {0x7, 0x80, 0x400, 0x5, 0xd5c3, 0x10001}, {0x4, 0x4, 0x1fb, 0xd34, 0x3, 0x22}, {0x7, 0x8, 0x1000, 0xfffffffa, 0x9, 0x9}, {0x5262, 0x5, 0x8, 0x6, 0x10, 0x3}, {0x0, 0x0, 0x2, 0x8, 0x1, 0x7a}, {0xffffffff, 0x4, 0x4, 0x1, 0xd, 0x1}, {0x3ff, 0x3, 0xffff4899, 0xffffffff}, {0x3, 0x6, 0x7f, 0x8000, 0x6, 0x7}, {0x4e, 0x8, 0x4, 0x3, 0x642, 0xa60}, {0x7, 0x8, 0xa83, 0x2, 0x7, 0x2}, {0x1, 0x3, 0x7ff, 0x7, 0x9, 0x7}, {0x9, 0x8, 0x80000000, 0x200, 0x20000, 0x2}, {0x9c5, 0x8, 0x800080, 0x7fffffff, 0x9}, {0x5, 0xfff, 0x200, 0x7, 0x6, 0x1}, {0x5, 0x4, 0xa42, 0xe, 0x7, 0x5}, {0x3, 0x0, 0x9, 0x1, 0xf1a, 0x7}, {0x6, 0xb7c, 0x0, 0x200, 0x4, 0x3}, {0x8, 0x10001, 0x280000, 0x90000, 0x63ab52af, 0x1000}, {0x5, 0x8, 0x10000, 0xff, 0x2, 0x2}, {0x5, 0x2, 0x6, 0x6, 0x1000, 0x5}, {0x7, 0x401, 0x5, 0x7b8ff2c5, 0x1, 0x20000}, {0x3, 0x7f, 0x7, 0x8, 0x4, 0x9a6}, {0x1, 0x3, 0x44c, 0xf, 0x5}, {0x5, 0x8, 0x8000, 0x1, 0x5, 0xb}, {0xffffffff, 0xfffffffc, 0xffff, 0x80000001, 0x8, 0x4}, {0x3, 0xb42, 0x4, 0x1, 0x100, 0x4}, {0x0, 0x7fff, 0x401, 0x6, 0x7fffffff, 0x9}, {0x252, 0x9, 0x7, 0x4, 0x5, 0xeec}, {0x7, 0x14000, 0xe, 0x6, 0x9, 0x80000000}, {0x40, 0x80000001, 0x7fffffff, 0x90000000, 0x8, 0xe3c}, {0x5f0f, 0xb, 0x200, 0x7, 0x80, 0xffffffff}, {0x0, 0xa8fc, 0x401, 0x8, 0x6be97a10, 0x7ff}, {0x7, 0x2, 0x56, 0x1, 0x8, 0x35}, {0x6, 0x5, 0x9, 0x4, 0x584, 0x2}, {0x80000000, 0x5, 0x8, 0x7, 0x3, 0x55}, {0x5, 0xfffffeff, 0x7ff, 0x630, 0xffff, 0x5}, {0x7fffffff, 0x56857cd1, 0x4, 0xdf, 0x9, 0x7f}, {0x1, 0x1200000, 0x0, 0x0, 0x200}, {0xfff, 0x0, 0xb2, 0x5, 0x4, 0x8}, {0x40, 0x6, 0x5, 0xfffffffe, 0x2, 0x4}, {0x8, 0x9, 0x7, 0xf, 0x7, 0x6}, {0xdbc, 0x1a1f, 0x9, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x8, 0x5, 0x1}, {0x5a, 0x1000000, 0x1, 0x2, 0x0, 0x3}, {0xffff1511, 0xac5, 0x8, 0x0, 0x23, 0x5}, {0x100, 0xfffffff8, 0x0, 0x401, 0xfffffff7, 0x8}, {0x48, 0x0, 0xffffff49, 0x4, 0x3, 0xd81}, {0x9, 0x2, 0xc53, 0x3, 0x6, 0x6}, {0x0, 0x8000, 0xf4, 0x953, 0x5, 0xff50}, {0xe, 0x3, 0xe7a, 0x10000, 0x6, 0xe}, {0xfffffc01, 0x3, 0xec, 0x8, 0xfffffffc, 0x4}, {0x6, 0x2, 0x5, 0x1, 0x3, 0xff}, {0x9, 0xffffffff, 0x9, 0xfff, 0x1f41, 0xd}, {0x4, 0x101, 0xe553, 0x1ca00000, 0xfffffffd, 0x7}, {0x80000000, 0x1, 0x2, 0x2, 0x7, 0x579}, {0x5, 0x3, 0x401, 0x6, 0x800, 0x8}, {0x7, 0x1c2, 0x9, 0x4, 0xc, 0xac}, {0x1ff, 0x9, 0xb, 0x18, 0xfffffffc, 0x9}, {0x8, 0x200, 0x0, 0x80000001, 0x7f, 0x1}, {0x4d, 0xfffffff8, 0x7f, 0xb4, 0x3, 0xffff}, {0xff, 0x4, 0xfff, 0x40000000, 0xf, 0x101}, {0x8, 0x1, 0xc, 0x1, 0x40, 0x4}, {0x7, 0x9, 0x10, 0x1, 0x6, 0xc5}, {0x2, 0x1, 0xfffffffc, 0x800, 0x7, 0x9}, {0x1, 0x11c, 0x2, 0x400, 0x2}, {0x3, 0x4, 0x7fff, 0x0, 0x0, 0x1}, {0x2, 0x6, 0xfff, 0x2, 0x7, 0x42f4}, {0xa6a, 0xd1, 0x8, 0x4, 0x2, 0x5}, {0x1, 0x7, 0x1, 0xf1c, 0x3, 0x8000}, {0x1, 0x1, 0xff, 0x101, 0x6, 0x81}, {0xfffffffc, 0xac2, 0xa, 0x81, 0x1, 0x56a}, {0xe, 0xfff, 0x8, 0x3, 0x10001, 0x55}, {0xa78, 0x101, 0x4, 0xb, 0x6, 0xf1aa}, {0x0, 0xa, 0x4, 0x7, 0x13, 0xdd9}, {0x4, 0x3, 0x7, 0xc, 0x1, 0x1}, {0x1000, 0x4, 0x3, 0x4, 0x27, 0x8}, {0x4, 0x1, 0x9, 0x9, 0x5, 0x8}, {0x6, 0x45, 0xc26, 0x10, 0x4, 0xf0000000}, {0x800, 0xd2, 0xd, 0x9, 0x5, 0xd}, {0xd08, 0x8, 0x101, 0x1, 0xfffffff8, 0xffffffff}], [{0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x5}, {0x5}, {}, {0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x5}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x3}, {0x2}, {0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0xfa034d6378e5344a}, {0x5, 0x1}, {0x4}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {}, {0xebb2b1e1bd73305a}, {0x1}, {0x2, 0x1}, {0x34a3577618c151fb}, {0x2, 0x1}]}}]}, {0xfc, 0x6, "325dbc97cd8dcb487f5e411f28221910b6a8d9301bc827cae5aa6dbd76221ba3e9d93afff4386c586aa8d93f1d797fc10acb586aa0fd132f7ba2a36e9c4be43f7e45fc6013f901dcdcf29578e947f90689bfd646f48e2e403bad658f57b236f5a4ed1c59912fa4f0b21475778067d3e7893d7d56657a9271dbcf3d38a1ebbcc6ba8f0d451d05ca6dd43d028529466b7134afdf32a4029272c432170fce869d29daef5bd6270f4724fb64369af6208880486b5068688e65df6ead25bfad46fb8f78647eca837ae6a6ee5f453dc6422f7edd9e43de0e2e4fed1c0e3ffd3ae2553179bc1539bda78c7d67da0d2ad999692cd839ceb07a08bd1d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x1a8, 0x1b, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9f9d, 0x428, 0x0, 0x189, 0xffff}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x5, 0x3a7722ca, 0x7f}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x10000001, 0x5, 0x7}, 0x3, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x2, 0x3, 0x7}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe7d5, 0x4, 0xffffffffffffffff, 0x1, 0x9}, 0x1, r14}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x200, 0x20000000, 0x81, 0x8}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xc716, 0x0, 0xff, 0x7}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff9, 0x8, 0x3, 0xfffffffe, 0xebf}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x1, 0x6, 0x401, 0x7}, 0x3, r10}}]}, {0x5b, 0x6, "84ea44aca58701d6e374cdf985f1daa064e11c04bcdd501508e90bbddf8d563f46cc93477eb96b32b95b8ce2b3af8dc7ceb9e5fbb056e1045da39997b5d8019b8b8f1766cd9285798f81eba3559c42d86f6112d996df5d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x158, 0xc, 0x0, 0x0, {{0xb}, {0xb8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2f, 0x34fd, 0x7, 0x3, 0x400}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x101, 0x7, 0x5, 0x6}}, @TCA_DEF_DATA={0xd, 0x3, 'fq_codel\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9e, 0x8, 0x5, 0x1000, 0x80000000}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff7, 0x4, 0xffffffffffffffff, 0x8000, 0x81}}, @TCA_DEF_DATA={0xc, 0x3, '^&/**:/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0x6, 0x6, 0xfffffff7}}, @TCA_DEF_DATA={0x8, 0x3, '\'@,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x101, 0x20000000, 0x6, 0x6}}]}, {0x76, 0x6, "17a05f8a2741808e0cd273494b8f13653f649a89e5c78b908fe7e4581c72d9f6c320a50c24e635251f3c372f93a0352ff3c693788a2993e419e9a794a3d90278f64f0d01c0b665e3c6acb349bca5ae1f29ebf7a659a41abd8f71868801376021edb61cd9ac61ad7d1e1ccae307487f77b81a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x13c, 0x12, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffa, 0x8f, 0x10000000, 0x2, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0x7, 0x7, 0xf}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x25df, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd35, 0x8}}]}, {0xc7, 0x6, "dd332d1eea19fafc35776520237b976415fff9530f18ef0f39740883ca2b4fedb6ffd719728b81521ba8f5b576de96025be16676414ffd559638f9d2178d610a4ca111e589b4a788a3ded25ee08050d7b03d4c45ee7cfa8c3a0c81c66837bce65c801e61a85b69c73e26e05e1007fb7bb45268f9399e72e535b67fb18176efd3cea9dd964784ee97d739dffbbb8d5ec6a8010841bff83972c8236006be9fafb74bb0ece9eb3946f232bdce7cba9c659eb25305fbf371831306ebbeee98e5b358bf458a"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x104, 0x1, [@m_ct={0x100, 0x13, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xd53}, @TCA_CT_LABELS_MASK={0x14, 0x8, "46eae8f5dce51b705541a511ab01ceb1"}]}, {0xbb, 0x6, "3a8f36f002dd45eb208bd4a45aa7a2f13e22adb0194cc42e2d56c842684166f808cd3ad03166d181897a8bfdd4a03e1d8ca74548e2c38c3ac3ef509dd66c30fd89990d7fca12f84b2225c01aa7466fe6f956260b387b82e1f13fd4f8751e1fd3980571edaf4421ab1ec6953d55207118d3b1c0e1739f9490d7bdf80e0902765e1d3975d7aac2634ecfe136a8924390540482a343567df2fd878c686fdea7541f003123b5a1f5e1642b11d9393ab0ba637955ec9e8ae8d6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x173c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m52.331180968s ago: executing program 4 (id=361): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) preadv(0xffffffffffffffff, 0x0, 0x0, 0x33, 0x5) r0 = gettid() timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x26, 0x1, @tid=r0}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000140)=r0, 0x12) mount$bpf(0x0, 0x0, 0x0, 0x5885040, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x109801, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x2}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETIFF(r3, 0x800454d2, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 1m51.362730988s ago: executing program 4 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, r2, 0x321, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}}, 0x4004000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000300)='pvfs2\x00', 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000280)={r5}) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5531, &(0x7f0000000b00)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280), 0x6000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@can_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8, 0xa, r10}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x6, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x64040848) r11 = fsmount(r8, 0x0, 0x80) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0xa000000, 0x1, 0x5, 0x8001, 0xa9, 0x0, 0x0, 0x100, 0x6}}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r7, r11, 0x16, 0x0, @void}, 0x10) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r12, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m50.655639606s ago: executing program 4 (id=381): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000001c0)=""/55, 0x37) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x4a}, 0x28) 1m50.606113787s ago: executing program 4 (id=382): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x4) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000300)={0x3, {{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}, {{0xa, 0x4e24, 0x3, @loopback, 0x5}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x2004c000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x4008800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000140)=0x1) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0679f2140090204b23f1ff0000000001"], 0x18}, 0xc800) recvmmsg(r9, &(0x7f0000001140), 0x700, 0x2, 0x0) 1m49.702922987s ago: executing program 4 (id=388): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) statx(r0, &(0x7f0000000140)='./file1\x00', 0x4000, 0x200, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000001200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000003240)={[{@nofavordynmods}], [{@fowner_gt={'fowner>', 0xee01}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '$)\',*X[@/]'}}, {@euid_gt={'euid>', r2}}, {@permit_directio}, {@fowner_gt={'fowner>', r3}}]}) statx(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x10, 0x0}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x20, 0x2000003}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8917, &(0x7f0000002600)={'wlan0\x00', {0x2, 0x4e24, @loopback}}) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) 1m49.599237218s ago: executing program 4 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x31e7d, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0000200}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x20040040) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 1m49.585311328s ago: executing program 33 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x31e7d, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0000200}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x20040040) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 24.010499108s ago: executing program 5 (id=1419): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1400c, &(0x7f0000000580)={[{@nouser_xattr}, {@init_itable}, {@nobarrier}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@uid_gt={'uid>', r0}}, {@obj_user={'obj_user', 0x3d, 'workdir'}}, {@appraise}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_appraise}]}, 0x1, 0x470, &(0x7f0000000dc0)="$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") (async) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) rename(0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x23) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r1, 0x6) (async) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe800000001387a70a93091ecd182a4f00000000000000000000bbfe8000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x11}}}}}}}, 0x0) (async) setreuid(0x0, 0xee00) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}) (async) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) unshare(0x22020600) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x87) (async) r3 = socket$inet(0x2, 0x802, 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) (async) write(r3, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x25, 0x0}}], 0x3f, 0x0, 0x0) (async) readv(r2, 0x0, 0x0) (async) sendmsg(0xffffffffffffffff, 0x0, 0x400c004) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r2) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xb4, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004010}, 0x1000) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x94, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0xf8, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1e0}, 0x1, 0x0, 0x0, 0x40051}, 0x8040) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 23.977706378s ago: executing program 5 (id=1420): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80800) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000140)={0x9, 0x6, 0x5, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xc, 0x93, 0x18, 0x8, 0x3f0, 0x4439, 0x3cff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xac, 0x5, 0x10, 0x9, "", [{{0x9, 0x4, 0x19, 0x3, 0x0, 0x92, 0xf4, 0x7, 0x3}}]}}]}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800000, &(0x7f0000001780)={[{@debug}, {@delalloc}, {@bsdgroups}, {@test_dummy_encryption}, {@errors_continue}, {}, {@noauto_da_alloc}, {@noblock_validity}]}, 0x1, 0xbd5, &(0x7f0000002080)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x1a5) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, 0x0, 0x50) dup(r5) fcntl$setpipe(r4, 0x407, 0x9) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000540)=ANY=[]) read$FUSE(r4, &(0x7f0000003140)={0x2020}, 0x2020) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, 0xe, 0x6) 20.712065055s ago: executing program 5 (id=1462): r0 = syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=0x0, @ANYRESDEC=r0, @ANYBLOB="72bef9d397d5b92e4c8bb93491a4a494b97461c642f1f19ffe3e19c3433ecbc6485bcda7"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x10ff, 0x2, 0x4003c, 0x6, 0x4, 0x7fff, 0xfffd, 0xef, 0x1, 0xfff4, 0x4, 0x2fb}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="d5dfbeef0000dc7e8c4e1652b9d274ff72f7107e6a56e7e8b596d7df5bf92f4ff146068b64512fc345f57390eb54fa2638ad4ef7de701fab5a7dd956c9479d1686090c4c1787689ddc5a02671a373018a6b0b2c7bc09e9ff5cb5b4c32859ccd1ee9948b30f068246a53122eb7a2e50b89ae1277a33db66efc8a80617bc85c2777a42c051b21cff0c976a8992d75b44d42a16c812a1c8cabebfcba13350cfc2c5487392719074bbee06ba84fcbf9226bcb7ad2e60b9e36d3a"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, &(0x7f0000000600)={0x40, 0x7, 0x2, 0xff}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x17, 0x6}, &(0x7f0000000800)={0x40, 0x19, 0x2, "e652"}, 0x0, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x7}, 0x0}) 17.254519544s ago: executing program 5 (id=1489): r0 = socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x2c, 0x400}, {0x20, 0x0, 0x2, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xd24c264199a8ce4f}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="7c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x1, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x2, r6}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000180)={0x3, r4, 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206197bafa7283da60565717c311fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c0a4c8303a0f7fbda34fb8825f80200e3c0aba61ffd"], 0xdd12}], 0x1}, 0x40) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x0, 0xea60}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x450, &(0x7f00000015c0)=ANY=[@ANYBLOB="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", @ANYRES64], 0x2, 0x5587, &(0x7f0000009cc0)="$eJzs3MuLW2UUAPCTyfT9cBAX7nqhiDPQhGb6QHdVW3xgS/GxcFUzSRrSJrnDJE3HrkRdigv/E1FwJbjxb3Dh2p24UNwJI/cx1dqHDkknffx+cHPu/fLl3O9cwoSTOySAp9ZS8sdvlTgaByKiGhGHK5HvV8otd64Iz0fEsYhY+MdWKcdvD+yNiIMRcTRLHvH9qJiTPfXlicnxM7++9ft3P+5bPPTVtz/Nr2pg3l6IiMF6sX9zUMS0W8Rr5Xhz0svj4PSkjMUTg+vlcVrEm521PMPN5va8Zh5PdYv56fqNURav9putLHZ7V/Px9WFxwtGku50nf8G15kZ+3O6s5bE3SvPYvVWsa/NW8ffy1mhc5GmX+T7K08d4vB2L8c5mp6hn/XoeW8NxOV7kTdudzSxOylieLlppv52vY22aK/1oe7s3vLGZTDobo146TM7UGy/VG2drjY203Rl3Tteag/bZ08lyt59Nq714pTk4103Tbr9Tb6WDlWS522rVGo1k+XxnrdccJo1G/VT9ZO3MSrl3Inn90vtJv50sZ/HV3vDG3l5/lFxNN5LiFSvJav3UyyvJ8Uby7sXLyeV3Lly4ePm9K+c/uPTKxTdfKyfdtaxkefXk6mqtcbK22ljZxfrHnXvXn33u/s/6x9PU/1m56B3UX5nu8sCDeYMB7Nhd/X/Mtv+vhv4fuNtj2/9vbW1tlTXMrP/PWqoH9v/7p7nUj7Qd9b8L9+l/d9D/T9X/Pqr9/yzrLz/vY5fqh6no/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnlo/7/n6jXxnqTg+VI4fKYeeLY8rEbEQEVv3UI29d+Sslnn23Gf+nn+t4YdK5Bmyc+wrt4MRca7c/nzmYV8FAAAAeHJ98/GxL4puvXhYmveC2E3F1zALhz+cUb5KlnPplxllW8genptRsvz9vRibM8qWX7n9M0pWfOW2GBGf7JtVyv9S3Q6fHvl7MC+oUoSF3VoJAACwe6p3hMW5rgUAAICH6fN5L4D5qMTtm8Db/8Bf3oAsb20euOM5AAAA4DFUmfcCAAAAgIcu7//9/h8AAAA82Yrf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv9i5nxu1gSgOwM8GA/mnoCj3tJIblJEScswRKCBNUAJpIQ1QA7nlnksEK+wRkndBWi3jtUDfJ9lmbPSbGeDyxsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJf+VJv5r8WXn7G4Lmd/uE6u+QAAAABP7arNvH4xbdrv0vkP6dSn1C4iooyIc7X7IEatzEHKqS68v3o0ht8RdcKxj3Ha3kbE17T9/9j1pwAAAAD3a7taz5pqvdlN+x4Qr6lZtCnff8uUV0RENf2bKa087j5nCqt/38P4kSmtXsCaZAprltyG56+NcnXSNmgd0kwmy/pLrFtlN/0CAAB9alcCF6oQAAAA7sD3vgdAP4rT7nSfcdwc0g3BN60WAAAAcIOKvgcAAAAAdK6u/2/h+X///C0BAAAAXqx5/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd2lWb+Xa1nl26vnxmzv5wnXwzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCB/blHARAGYwD6Kf5u0vvf1EGJ6NjV6T0ohIRSCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0DO+p8QtPc1TVlDZhTt2qasmUsGZK2DIn7LnQOo+c159fAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgZn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+5ne//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYuf+edsowwCAPz773D+ACAFlCKAiMcBCE7e0dIQBFDHwEZCi1CmhLoU2A40iUBaYUOYuCEaEkEBh63fo3EhdytYhQ5CYQXe+S66tS00hdy75/aTX72Pf5d7nvXOiPHnPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKO28Ey8lRdzOHqaGcfnard31pazfvq/P3Ni8PZu1LG49aqCv3/7vk59sL1efnJipPPmy/mQAAAA4HNplfR8Rd9KthaxPpvL6Py33yWr+754ZxmU9f3/dv727frTYNFvW/7/+cveFvYGmhuNkB11eGfTnH0ylc0BTnHjPPnKPTn7m87+9tPMLkry/8fxOmp/P1jc3b77bzcMjdWQLADyOk2WfBUf3fx/K+l7DuQFwOHQqhXdZ/7enms0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoA47G/FUGbciYrazH2e2d9eXRvU3Nm/Plu3s9eub1WNmh0gjYnll0E9rnMuku3pt7eLiYNC/MjKIeOimfx+ciIiDOfJDghix6cMxvjzi7/cp3p5RzyzWLi52xt+5Vd/pndggKa5P8Uo3qft6HWCQvfeOjfW9/E+DBn4YAQDwv5YWLavr76RbC9lrremIP7+/t/5/rRLHmPX/3Y/O3qqOVa3/e7XNcPLNrV76dO7qtbU3Vi4tXuhf6H/y5qneW73T586cOTeXnav5ueVI+vNNpwkAAMATrFu0av2fTD+4/n+8EseY9f9n3/a+qI7VVv+PtL/o13QmAAAAh1F3L3rulT9+b43Yo9XtxueLq6tXesPHveenho+1pvuYjhStWv+3p5vOCgAAAKjDzkbrnvX/85U4xlz/f/qHF3+qHrM9/Jzs5Yjon1y6PDhf33QmWh0fVM4H6jY9UwAAAJpyrGjV9f80v/8/2bvlIYmI118dxuX/WRun/m+/99WP1bGq9/+frm+KEymZGZ6PvJ+J6Mw0nREAAABPonGXeo8WLSv2f0u3Fj7++fgHXff/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTtrwAAAP//GLYzgw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r8 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r8, 0x0, 0x63db, 0x7000000) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, r6}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0001000000000000280012800b000100697036746e6c000018000280140002000000000000000000000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="1c0012800b00010065727370616e0000fafd028006000f0001000000cf1ea6f1aac75bafe84cdd0c8ddc9e3cc44e686a2d39ee1d886f1499138fed1eba4d62cfb8c2c338d5ce62aaabc860865ebced6467b2cc090cc75108ddf11443cd626fe4155d053d2a8145601dda192fd8ffb65d2c1ca5d8d0ca3214af089e344b4044babd220ebbfe7539875139bd00ae91"], 0x6c}, 0x1, 0xba01, 0x0, 0x85}, 0x0) 15.84390313s ago: executing program 5 (id=1501): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f00000002c0)=[{0x64, 0x2, 0x2, 0x7}]}) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r2 = syz_pidfd_open(r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x2700) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15.434544375s ago: executing program 5 (id=1510): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x6, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) timer_delete(r1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0xffffdf004002, 0xffffdf004000, 0x0, &(0x7f0000ffc000/0x1000)=nil) (async) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) socket$inet6(0xa, 0x3, 0xff) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r2, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[], 0x24, 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) utime(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)={0x8, 0x7}) (async) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e21, 0x7fffffff, @private1, 0xe}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp6\x00') read$rfkill(r6, &(0x7f0000000140), 0x8) (async) r7 = userfaultfd(0x801) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89b0, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x3, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0x9b, 0x4, 0x3, 0x0, 0x0, 0x2, 0x6, 0x44, 0x0, [0x0, 0x800001]}}) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1d}) (async) llistxattr(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)=""/33, 0x21) 15.400457565s ago: executing program 34 (id=1510): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x6, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) timer_delete(r1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0xffffdf004002, 0xffffdf004000, 0x0, &(0x7f0000ffc000/0x1000)=nil) (async) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) socket$inet6(0xa, 0x3, 0xff) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r2, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[], 0x24, 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) utime(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)={0x8, 0x7}) (async) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e21, 0x7fffffff, @private1, 0xe}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp6\x00') read$rfkill(r6, &(0x7f0000000140), 0x8) (async) r7 = userfaultfd(0x801) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89b0, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x3, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0x9b, 0x4, 0x3, 0x0, 0x0, 0x2, 0x6, 0x44, 0x0, [0x0, 0x800001]}}) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1d}) (async) llistxattr(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)=""/33, 0x21) 7.176745638s ago: executing program 7 (id=1600): unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x1c0c, 0x6, 0xfffffffe, 0x80000001, 0x2}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) write$selinux_access(0xffffffffffffffff, &(0x7f0000001a80)=ANY=[], 0x56) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0xfffffffb, 0xffff009a, 0x600, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0xd06, 0x6}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000040)={[{@block_validity}]}, 0x30, 0x531, &(0x7f0000000740)="$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") mkdir(&(0x7f0000000340)='./file1\x00', 0x59) truncate(0x0, 0x2fffffd) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) 7.083697369s ago: executing program 1 (id=1605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x80, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x800, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4, 0x0, @remote, 0x5}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x118) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x501) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x4, 0x0, {}, 0x1, 0x1}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) 6.18888894s ago: executing program 7 (id=1615): unshare(0x62020600) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000500)={[{@nobarrier}, {@oldalloc}, {@nodelalloc}]}, 0x0, 0x53b, &(0x7f0000000780)="$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") timer_create(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000010000)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x9, 0x0}}, {{&(0x7f0000001540)={0xa, 0x4e21, 0xd, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000002940)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x2, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0) keyctl$restrict_keyring(0x3, r3, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010330fc58d0ffdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4048024) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000040000000000000000000000000000000104800000200002000a0000000000000000000000000000000000000000000000010000000d0001"], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'pimreg0\x00', 0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x115440) ioctl$USBDEVFS_GET_CAPABILITIES(r8, 0x8004551a, &(0x7f0000000100)) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xa, 0x8}, {0x9, 0x10}, {0xf, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 5.337993589s ago: executing program 1 (id=1619): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0002000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000200000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="01000000040000feffffffffffffff000000200037050000000000002b"], 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="10"], 0x0, 0x0, 0x0, 0x0}) getdents(r4, 0x0, 0x0) 5.31718336s ago: executing program 1 (id=1620): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 5.124015611s ago: executing program 7 (id=1621): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) close(0x3) pread64(0xffffffffffffffff, &(0x7f00000013c0)=""/208, 0x31, 0x401) 5.123414351s ago: executing program 7 (id=1622): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_usb_connect$uac1(0x1, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xbda, 0x4014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x81, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x28}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x405, 0x1, 0x6, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x4, 0x1, [0x9], 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x201, 0x6, 0xfa, 0x8, 0x5, 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x3, 0x2, {0x7, 0x25, 0x1, 0xc, 0xff, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0xf5, 0x5, {0x7, 0x25, 0x1, 0x8, 0x3f, 0xa4}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./mnt\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000', @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f53, 0x10080208, 0xc0f7, 0x48e, 0x7, 0x7fff, 0x0, 0x0, 0x80, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x20, 0x0, 0x7, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f0000002100)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x6008000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) setgroups(0x5, &(0x7f0000000040)=[r6, r6, r6, r6, r6]) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x7}, [{0x2, 0x5}, {0x2, 0x4}], {0x4, 0x2}, [{0x8, 0x6, r6}], {0x10, 0x4}, {0x20, 0x4}}, 0x3c, 0x1) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x885}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40042, 0x1) bind$netlink(r7, &(0x7f00000020c0)={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000000080)="c7", 0x5f) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x8000008) 2.667423059s ago: executing program 7 (id=1652): syz_usb_connect$uac3(0x3, 0xc3, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x40, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x8, 0x10, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x35}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x4d, 0x5}, [@processing_unit={0x1d, 0x24, 0x9, 0x1, 0x4, [0x0, 0x1, 0x3, 0x1, 0x0, 0x1]}, @output_terminal={0x13, 0x24, 0x3, 0x3, 0x405, 0x4, 0x5, 0x2, 0x0, 0xfb, 0x3ff, 0x77}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x403, 0x7, 0x4, 0x10, 0x8, 0x6, 0x7fff, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x9, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xc, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0x0, 0x9}}}}}}}}]}}, 0x0) 2.662303729s ago: executing program 0 (id=1657): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x8010, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0xfffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000003100)=[{{&(0x7f0000000440)=@un=@abs, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f0000001980)=""/254, 0xfe}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000780)=""/119, 0x77}, {&(0x7f0000000800)=""/185, 0xb9}], 0x5, &(0x7f0000000940)=""/151, 0x97}, 0x35}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000a00)=""/95, 0x5f}], 0x1, &(0x7f0000001040)}, 0x2}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001080)=""/67, 0x43}, {&(0x7f0000001100)=""/160, 0xa0}, {&(0x7f00000011c0)=""/236, 0xec}, {&(0x7f00000012c0)}], 0x4, &(0x7f0000001380)=""/217, 0xd9}, 0x2800}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001480)=""/38, 0x26}], 0x1, &(0x7f0000004340)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002c80)=@nfc_llcp, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d00)=""/168, 0xa8}, {&(0x7f0000002dc0)=""/255, 0xff}], 0x2, &(0x7f0000002f00)=""/155, 0x9b}, 0x1}, {{&(0x7f0000002fc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004280)=[{&(0x7f00000001c0)}, {&(0x7f0000000280)=""/11, 0xb}, {&(0x7f0000001500)=""/163, 0xa3}, {&(0x7f0000001600)=""/105, 0x69}, {&(0x7f0000001680)=""/42, 0x2a}, {&(0x7f00000018c0)=""/170, 0xaa}, {&(0x7f0000001780)=""/177, 0xb1}, {&(0x7f0000001840)=""/75, 0x4b}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x9, &(0x7f0000003080)=""/105, 0x69}, 0x4}], 0x6, 0x40, 0x0) socket$netlink(0x10, 0x3, 0x1) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000340)='./file0\x00', 0x3800014, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646f74732c747a3d5554432c646f74732c666c7573682c6e66732c6e66733d6e6f7374616c655f726f2c644673636172642c6e6f646f74732c6e6f646f74732c646f7474f90b9b74732c646f733178666c6f7070792c646f74732c6e6f646f74732c73700b79735f696d6d757461626c652c646f74732c646f74732c6e6f646f74732c6e6f636173652c636f6465706167653d3933362c646f74732c646f733178666c6f7070792c00"], 0x0, 0x218, &(0x7f0000000dc0)="$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") r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000006340)={0x2020}, 0xfffffffffffffc1c) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2.662175889s ago: executing program 0 (id=1658): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x7, r2, 'id0\x00'}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f000041f000/0x1000)=nil, 0x1000, 0x19) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 2.528590931s ago: executing program 6 (id=1664): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x4}}, {@usrjquota}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x1, 0xffffffffffffff33, 0x4}) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) poll(0x0, 0x0, 0x80) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xa401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="20d3a2aafead"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x11, r2, 0x4000) mremap(&(0x7f0000a47000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.337410893s ago: executing program 2 (id=1667): syz_emit_ethernet(0x15, &(0x7f0000000bc0)={@link_local, @random="0000fc00", @val={@void}, {@llc={0x4, {@llc={0x8e, 0x80, '?'}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 2.337226323s ago: executing program 2 (id=1668): r0 = getpid() (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRESOCT], 0x48) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd}, 0x48) (rerun: 64) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@delnexthop={0x0, 0x69, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{0x0, 0x1, 0x2}, {}, {0x0, 0x1, 0x2}, {}, {0x0, 0x1, 0x2}]}, 0x30}}, 0x24000000) 2.336994353s ago: executing program 6 (id=1669): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x3, &(0x7f0000000280)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x8, 0x0, &(0x7f00000000c0)="f3fffeffffffa000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$inet6(0xa, 0x3, 0x7) (async) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r5, 0x29, 0x2f, &(0x7f0000000040)="ff02ed0000ffffffffffffffff1f2be82db1af0000000000fa6f52863dd1e4b8", 0x20) (async) setsockopt$inet6_buf(r5, 0x29, 0x2f, &(0x7f0000000040)="ff02ed0000ffffffffffffffff1f2be82db1af0000000000fa6f52863dd1e4b8", 0x20) connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000080)={0x1e}, 0x8) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000080)={0x1e}, 0x8) setitimer(0x1, 0x0, 0x0) (async) setitimer(0x1, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x50) unshare(0x22020600) 2.082389016s ago: executing program 1 (id=1670): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x2ddfdbfb, {0x0, 0x0, 0x0, r4, {0x8, 0x3229a439ff49bc88}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x40}}, 0x24040084) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3b}}, {@lazytime}, {@dioread_lock}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@jqfmt_vfsv0}, {@lazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@barrier_val}, {@resuid={'resuid', 0x3d, r1}}]}, 0x7, 0x4c1, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x6, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x876a}, 0x50) r9 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r8, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r8, &(0x7f00000000c0)}, 0x20) r10 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) openat$cgroup_type(r10, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_complete(0x0, 0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000400)=""/33, 0x7}], 0x1) open$dir(&(0x7f0000000180)='./file0\x00', 0x80000, 0x0) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @desc1}, &(0x7f0000001080)={0x0, "19492c7642703bcae3787cd1b3e4ded3af5da2af9c8b78faf394bf7455e88ed3d9b650c280f0de0359e38c5cb3386c546a071209c12a4c313c9c95cb9b23cde1", 0x10}, 0x48, 0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', r0, 0x80, 0x80, 0x0, 0x7, {{0xa, 0x4, 0x1, 0x9, 0x28, 0x65, 0x0, 0xf8, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x13, 0x3, [{0x0, 0xd, "ce090dcca0cba0fc2ddc5d"}]}]}}}}}) 2.051314746s ago: executing program 2 (id=1671): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x108}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x108}) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) timer_settime(r2, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, &(0x7f00000000c0)) (async) 1.78396526s ago: executing program 0 (id=1672): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x108}}], 0x1, 0x24004040) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x10, 0x8, 0xa90a}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r5, @ANYRESOCT, @ANYBLOB="9e4ce0200a642c802b6da980808cfcd82ffadd6eba6ff193d50e762ffa25de09178d98c7dfe3a49d82fb9f060cf7e7b7c3266659ef3b25ec7ca034cd104f45c4e0a90b3fb362c11c29fd09c40335f93cd80362ef4d8862e3ab4b9c68a225f2297f61dc291dbc6f6047dee62e6e623f0398c57756ecfaa635ea02139f910eb528bb5abb2b10f4cbe05c11ce0a9d8cbe9bb3bd31c7b34c25d9faeee4ab39409e4ae822fb35d4a52e2adb3f456530b1fb8034", @ANYRES32=r2, @ANYRES32, @ANYRESHEX=r6], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4001) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYRES16, @ANYBLOB="1413060002"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={@local, @dev={0xfe, 0x80, '\x00', 0x27}}) (async) r8 = syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100300000020ba0d00104000010203010902750003e6061002080b0100010c200009040000000101200009240180ff071500040c2403020503050400ff011c"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r8, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io$uac2(r8, &(0x7f0000000700)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) rename(0x0, 0x0) (async) writev(r5, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c757365667265652c726f6469722c73686f72746e616d653d6c6f7765722c7379735f696d6d757461626c652c756e695f786c6174653d312c757466383d302c6572726f72733d72656d6f756e742d726f2c666d61736b3d30303030303030303030303030303030303130303030312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d300f00"], 0x0, 0x2be, &(0x7f0000000840)="$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") 1.783670409s ago: executing program 0 (id=1673): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc29c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xb5, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x38, {0x9, 0x21, 0x5b, 0xad, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x80, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000a40)={0x24, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r8, 0x16, 0x0, @void}, 0x10) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000040), 0x50) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x39b3) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000180)=r11) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000240)=r3, 0x4) accept4(r2, &(0x7f0000000040)=@ax25={{0x3, @rose}, [@netrom, @rose, @default, @rose, @null, @default]}, &(0x7f00000000c0)=0x80, 0x80000) sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f0000000340)={0xa, 0x4e21, 0x1, @remote, 0xffffff1f}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)="80000000007fbc13", 0x8}], 0x1}, 0x40054) poll(&(0x7f0000000280)=[{r0, 0x20}, {r10, 0x8}, {r9, 0x104}, {r1, 0x801f}], 0x4, 0x0) write$UHID_INPUT(r1, &(0x7f00000030c0)={0x18, {"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", 0xfd68}}, 0x1006) 1.74817494s ago: executing program 6 (id=1674): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x18015, &(0x7f0000000140)=ANY=[], 0x1, 0x556e, &(0x7f0000004000)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000004c0)={0x0, 0x7}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xd, 0x19}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7dbacce9a9cf53eacecf90e79a"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_KEY={0x68, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e2633e6021"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "68123287530632210074c2b173"}, @NL80211_KEY_SEQ={0x13, 0x4, "8ef7f79fe1bd049c3e4dd8b6de11e1"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "71f4c20a83d29d022d7d034407"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x2000c004) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/3\x00') sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r1, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x81, 0x6a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0xaf2) 1.636453691s ago: executing program 2 (id=1675): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000980)=ANY=[@ANYBLOB="e0000001ac1414aa0f00000003"], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42040, 0xc0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) r2 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000000000c00bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000100001b6a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3efd9af115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b0600000016cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d394d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d2889ac04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc30000000000000000c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20ba82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818709e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec527c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f128ddfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac45f0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38509582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c6d6e7c9d49db1b2a6082bb0e8b013bd1ee3612cd43cd2a3cb83754bb34081599ce2a33600d4120353e477237c1dcf66b6a353aa1832d60179da56951d2b77e91c3e73fc7285d1ed2722a30c10f9cfd4a20ae6dc32f5d90a9290b393daff597ad7d5d3e5a73b25002ad928c92bd3d1be2444ff00f6b7719f06ddca6b48db95a746032d5ca0d4c460bb30a43ed735504192cb6ce50eed19a552101cb7bbf82c4924e2a862bd51ebaeb8e15e5428a87b56b81eff64a75baf33ae2b67b55a724cbbe788a8d8ece234a81e90186aca593260d559c0cb2f2be882288db291b231b8d"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) close_range(r2, r1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, 0x0, 0x190) openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0xa0, 0x30, 0x9, 0x80000000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x9, 0x0, 0x3}, {0x0, 0x0, 0xfe}, {}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0x5, 0x0, 0x5, 0x8, 0xfffffffffffffffc}], 0x0, 0x2, 0x0, 0x0, 0xb73579413efae7dc, 0x49, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 1.191933436s ago: executing program 0 (id=1676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="13000000300001"], 0x14}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0), 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8a", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f0000000640)) (async) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x1) r11 = openat$incfs(r10, &(0x7f00000004c0)='.pending_reads\x00', 0x28200, 0x8) r12 = socket(0xa, 0x3, 0xff) bind$inet6(r12, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) (async) getsockname$packet(r12, 0x0, &(0x7f0000000100)) (async) r13 = socket(0x1, 0x1, 0x1) getsockopt$SO_COOKIE(r13, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8) (async) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000500)={0x8, 0x3, 0x8, 0x0, 0x0, [{{r11}, 0x7c06}, {{r12}, 0x4bb7}, {{r13}, 0x7ff}, {{r0}, 0x6}, {{r7}, 0x2}, {{r1}, 0xff}, {{}, 0xa4}, {{r2}, 0x8000}]}) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r10, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r14, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x44000) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r14, 0x10, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x8000000) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x400}, 0x80, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000200)=@x86={0x8, 0x8, 0x6, 0x0, 0x3, 0x3, 0xb2, 0x6, 0x7, 0x4, 0x4, 0x2, 0x0, 0x8, 0x4, 0x0, 0x4, 0x4, 0x10, '\x00', 0x0, 0x99}) 1.191652106s ago: executing program 0 (id=1677): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0x3, &(0x7f0000000180)={0xfffffffffffffff3, 0x4}, &(0x7f00000001c0)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x5, 0x2, 0x4) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000100)=ANY=[], 0xc, 0x1537, &(0x7f0000001ec0)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzcNlkmSHBJyTJIkW3JKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyZbkiQhIcn6X9ra6r/3t3f72+181577d13rsm7Pe9/vWs/9XvO+zzPXO191H1G7WZ0aTYgI/i34l3+SASAWAIYAwDUAEABA+bjycReP55aY/O89Cft9PZB2pVfAriTuf87G/c/ZuP85G/c/Z+P+52zc/5yN+5+zcf8Zy8m2zip8LY+cO/j+f07G7///RQ6VmfjZ+jLX9/gXUrj/ORv3P2fj/uds3P+cjfufs3H///tV/wfHuP85G/efsZzsr/eCz3vv/w/cj+bxx44r/fpjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYznPWXKQD4eX6l18UYY4wxxhhjjLHfj891pVfAGGOMMcYYY4yx/zwEARIUBBADuSAWckMeuArywtWQD66BCFwLcXAd5IfroQAUhEJQGOKhCBQFDQYsEIRQDIpDFG6AEnAjJEBJKAWlwUEZSISboCzcDOXgFigPt0IFuA0qQiWoDFXgdqgKd0A1qA414E6oCbWgNtSBulAP7oL6cDc0gHugIdwLjeA+aAz3QxN4AJrCn6AZPAjN4SFoAS2hFbSGNr/On/zb8p+D3vA89IG+kAz9oD+8AANgIAyCwTAEXoSh8BIMg5chBYbDCHgFRsKrMApeg9EwBsbC6zAOxsMEmAiTYDKkwhswBd6EqfAWTIPpMANmQhrMgtnwNsyBuTAP3oH58C4sgIWwCBZDOrwHGbAEMuF9WAofQBYsg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wI22A77ICdsAt2wx74CPbCx7APPoFs+PRfzD/z/+X3QEBAgQIVKozBGIzFWMyDeTAv5sV8mA8jGME4jMP8mB8LYAEshIUwHuOxKBZFgwYJCYthMYxiFEtgCUzAhJifX1iJmIhl8WYsh+WwPJbHClgBK2IlrIRVsApWxapYDathDayBNbEm1sbaWBfr4l1YH+tjA2yADbEhNsJG2BgbYxNsgk2xKTbDZtgcm2MLbIGtsBW2wTbYFttiO2yHHbADdsSO2Ak7YRImYWfsjF2wC3bFrtgNu2F37I49sCf2xOfwOXwen8e+WFP0w/7YHwfgAByEg3EwvohD8SV8CV/GFByOI/AVfAVfxVF4GkfjGByLY7GqGI8TcCKSmIypmIpTcApOxak4DafjdJyJaTgLZ+NsnINzcS6+g/PxXXwXF+JCXIzpmI4ZuAQzMROX4hnMwmW4HFfgSlyFK3ENrsU1uB434HrchJtwC27BD/FD3I7bcSfuxN24Gz/Cj/Bj/BhTMBuzcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOJ7Ak3gCT+EpPI1n8CyexXN4Ds/jM/FfNN1dcl0KiIuUUCJGxIhYESvyiDwir8gr8ol8IiIiIk7EifwivyggCohCopCIF/GiqCgqjDCCRCiKiWIiKqKihCghEkSCKCVKCSecSBSJoqwoK8qJcqK8uFVUELeJiqKSaO+qiCqiqujgqonqooaoIWqKWqK2qCPqiHqinqgv6osGooFoKBqKRuI+0Vj0w0H4gLjYmWZiODYXI7CFaClaidbiVXxYtBWjsJ1oLzqIR8UYHI2dRFuXJJ4QncUE7CKeEhPxadFNTMbu4lnRQ/QUvcRzordo5/qIvmIa9hP9xUwcIAaKQWKwmIO1xMWO1RYvixQxXIwQr4jF+KoYJV4To8UYMVa8LsaJ8WKCmCgmickiVbwhpog3xVTxlpgmposZYqZIE7PEbPG2mCPminniHTFfvCsWiIVikVgs0sV7IkMsEZnifbFUfCCyxDKxXKwQK8UqsVqsEWvFOrFebBAbxSaxWWwRW8WHYpvYLnaInWKX2C32iI/EXvGx2Cc+EdniU7Ff/FkcEJ+Jg+JzcUh8IQ6LL8UR8ZU4Kr4Wx8Q34rg4IU6Kb8Up8Z04Lc6Is+J7cU78IM6LH8UF4QVIlEJKqWQgY2QuGStzyzzyKplXXi3zyWtkRF4r4+R1Mr+8XhaQBWUhWVjGyyKyqNTSSCtJhrKYLC6j8gZZQt4oE2RJWUqWlk6WkYnyJllW3izLyVtkeXmrrCBvkxVlJVlZVpG3y6ryDllNVpc15J2ypqwla8s6sq6sJ++S9eXdsoG8RzaU98pG8j7ZWN4vm8gHZFNEAPmgbC4fki1kS9mqLsg28mHZVj4i28n2soN8VHaUj8lO8nGZJJ+QneWTsot8SnaVT8tu8hnZXT4re8iespf8UV6QXvaRfWWy7Cf7yxfkADlQDpKD5RD5ohwqX5LD5MsyRQ6XI+QrcqR8VY6Sr8nRcowcK1+X4+R4OUFOlJPkZJkq35BT5JtyqnxLTpPT5Qw5U6bJWXLQpUrzfkP+m38nf9hPz75FbpUfym1yu9whd8pdcrfcI/fIvXKv3Cf3yWyZLffL/fKAPCAPyoPykDwkD8vD8og8Io/Ko/KYPCaPyxPye/mtPCW/k6flGXlGfi/PyXPy/KVzAAqVUFIpFagYlUvFqtwqj7pK5VVXq3zqGhVR16o4dZ3Kr65XBVRBVUgVVvGqiCqqtDLKKlKhKqaKq6i6QZVQN6oEVVKVUqWVU2VUorrp387/Z+tro9qotqqtaqfaqQ6qg+qoOqpOqpNKUkmqs+qsuqguqqvqqrqpbqq76q56qB6ql+qleqveqo/qo5JVsuqvXlAD1EA1SA1WQ9SLaqgaqoapYSpFpagRaoQaqUaqUWqUGq1Gq7FqrBqnxqkJaoKapCapVJWqpqgpaqqaqqapaWqGmqHSVJqarWarOWqOmqfmqflqvlqgFqhFapFKV+kqQ2WoTJWplqqlKkstU8vUCrVCrVKr1Bq1Rq1T69QGtUFtUptUltqqtqptapvaoXaoXWqX2qP2qL1qr9qn9qlsla32q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqvj6qQ6qU6pU+q0Oq3OqrPqnDqnzqvz6oK6cPFjXyACEahABTFBTBAbxAZ5gjxB3iBvkC/IF0SCSBAXxAX5g+uDAkHBoFBQOIgPigRFAx2YwAYUhEGxoHgQDW4ISgQ3BglByaBUUDpwQZkgMbgpKBvcHJQLbgnKB7cGFYLbgopBpaByUCW4Paga3BFUC6oHNYI7g5pBraB2UCeoG9QL7grqB3cHDYJ7gobBvUGj4L6gcXB/0CR4IGga/CloFjwYNA8eCloELYNWQeugze9a3/vTBR9xfXRfnaz76f76BT1AD9SD9GA9RL+oh+qX9DD9sk7Rw/UI/YoeqV/Vo/RrerQeo8fq1/U4PV5P0BP1JD1Zp+o39BT9pp6q39LT9HQ9Q8/UaXqWnq3f1nP0XD1Pv6Pn63f1Ar1QL9KLdbp+T2foJTpTv6+X6g90ll6ml+sVeqVepVfrNXqtXqfX6w16o96kN+steqv+MGab3q536J16l96t9+iP9F79sd6nP9HZ+lO9X/9ZH9Cf6YP6c31If6EP6y/1Ef2VPqq/1sf0N/q4PqFP6m/1Kf2dPq3P6LP6e31O/6DP6x/1Be0vfri/+PZulFEmxsSYWBNr8pg8Jq/Ja/KZfCZiIibOxJn8Jr8pYAqYQqaQiTfxpqgpai4iQ6aYKWaiJmpKmBImwSSYUqaUccaZRJNoypqyppwpZ8qb8qaCqWAqmoqmsqlsbje3mzvMHaa6qW7uNHeaWqaWqWPqmHqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlqmppmpplpbpqbFqaFaWVamTamjWlr2pp2pp3pYDqYjqaj6WQ6mSSTZDqbzqaL6WK6mq6mm+lmupvupofpYXqZXqa36W36mD4m2SSb/qa/GWAGmEFmkBlihpihZqgZZoaZFJNiRpgRZqQZaUaZUWa0GWPGmtfNODPeTDATzSQz2aSaVDPFTDFTzVQzzUwzM8wMk2bSzGwz28wxc8w8M8/MN/PNArPALDKLTLpJNxkmw2SaTFBmqckyWWa5WW5WmpVmtVlt1pq1Zr1ZbzaajWaz2Wy2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m22Sb/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOWd+MOfNj+aC8SbWCshjr7J57dU2n73Gxtrc9pdxIVvYxtsitqjVtoAt+KvYWGsTbElbypZWzpaxifamn2P7c1zRVrKVbRV7u61q77DV/iauZ++y9e3dtoG9x9axdX8VN7T32kb2QdvYPmSb2Ja2qW1tm9kHbXP7kG1hW9pWtrXtaB+znezjNsk+YTvbJ/8mzrBL7Fq7zq63G+xe+7E9a7+3R+xX9pz9wfaxfe0Q+6Idal+yw+zLNsUO/5t4rH3djrPj7QQ70U6yk/8mnmFn2jQ7y862CHPs3F/Eb9uLcbp9z863gAvsQrvILv4pvrimTPu+XWo/sFl2mV1uV9iVdpVdbdf8da0r7Ca72W6xe+xHdpvdbnfYnXaX3f1TfHEf++wnNtt+ag/bL+0B+5k9aI/aQ/aLn+KL+ztqv7bH7Df2uD1hT9pv7Sn7nT1tz/y0/4t7/9b+aC9Yb4GQBElSFFAM5aJYyk156CrKS1dTPrqGInQtxdF1lJ+upwJUkApRYYqnIlSUNBmyRBRSMSpOUbqBStCNlEAlqRSVJkdlKJFuorJ0M5WjW6g83UoV6DaqSJWoMlWh26kq3UHVqDrVoDupJtWi2lSH6lI9uovq093UgO6hhnQvNaL7qDHdT03oAWpKf6Jm9CA1p4eoBbWkVtSa2tDD1JYeoXbUnjrQo9SRHqNO9Dgl0RPUmZ6kLvQUdaWnqRs9Q93pWepBPakXPUe96XnqQ30pmfpRf3qBBtBAGkSDaQi9SEPpJRpGL1MKDacR9AqNpFdpFL1Go2kMjaXXaRyNpwk0kSbRZEqlN2gKvUlT6S2aRtNpBs2kNJpFs+ltmkNzaR69Q/PpXVpAC2kRLaZ0eo8yaAll0vu0lD6gLFpGy2kFraRVtJrW0FpaR+tpA22kTbSZttBW+pC20XbaQTtpF+2mPfQR7aWPaR99Qtn0Ke2nP9MB+owO0ud0iL6gw/QlHaGv6Ch9TcfoGzpOJ+Sl63Q6TWfoLH1P5+gHOk8/0gXyBCGGIpShCoMwJswVxoa5wzzhVWHe8OowX3hNGAmvDePC68L84fVhgbBgWCgsHMaHRcKioQ5NaEMKw7BYWDyMhjeEJcIbw4SwZFgqLB26sEyYGN4Ulg1vDsuFt4Tlw1vDCuFtYcWwUvjgPVXC28Oq4R1htbB6WCO8M6wZ1gprh3XCumG98K6wfnh32CC8JywX3hs2Cu8LG4f3h03CB8Km4Z/CZuGDYfPwobBF2DJsFbYO24QPh23DR8J2YfuwQ/ho2DF8LOwUPh4mhR4BnvwHx58IO4dPhslhv7B/+EL4Quj93XJRdHE0PfpeNCO6JJoZfT+6NPpBNCu6LLo8uiK6Mroqujq6Jro2ui43RDdEN0Y3RTdHt0S9r5MLHDrhpFMucDEul4t1uV0ed5XL6652+dw1LuKudXHuOpffXe8KuIKukCvs4l0RV9RpZ5x15EJXzBV3UXeDK+FudAmupCvlSjvnyrhE19q1cW1cW/eIa+fauw7uUfeoe8w95h53j7snXGf3pOvinnJd3dOum3vGPeOedT1cT9fLPed6u+ddH9fXJbtk19/1dwPcADfIDXJD3BA31A11w9wwl+JS3Ag3wo10I90oN8qNdqPdWDfWjXPj3AQ3wU1yk1yqS3VT3BQ31U1109w0N8PNcGkuzc12s90cN8fNc/Pc/IT5boFb4Ba5RS7dpbsMl+EyXaZb6pa6LJfllrvlbqVb6Va71W6tW+vWu/Vuo9voNrvNbqvb6ra5bW6H2+F2uV1uj9vj9rq9bp/b57Jdttvv9rsD7oA76D53h9wX7rD70h1xX7mj7mt3zH3jjrsT7qT71p1y37nT7ow7675359wP7rz70V1w3qVG3ohMibwZmRp5KzItMj0yIzIzkhaZFZkdeTsyJzI3Mi/yTmR+5N3IgsjCyKLI4kh65L1IRmRJJDPyfmRp5INIVmRZZHlkRWRlZFXE+yLbQl/MF/dRf4Mv4W/0Cb6kL+VLe+fL+ER/ky/rb/bl/C2+vL/VV/C3+Yq+kq/sH/ItfEvfyrf2bfzDvq1/xLfz7X0H/6jv6B/znfzjPsk/4Tv7J30X/5Tv6p/23fwzvrt/1vfwPX0v/5zv7Z/3fXxfn+z7+f7+BT/AD/SD/GA/xL/oh/qX/DD/sk/xw/0I/4of6V/1o/xrfrQf48f61/04P95P8BP9JD/Zp/o3/BT/pp/q3/LT/HQ/w8/0aX6Wn+3f9nP8XD/Pv+Pn+3f9Ar/QL/KLfbp/z2f4JT7Tv++X+g98ll/ml/sVfqVf5Vf7NX6tX+fX+w1+o9/kNwcA4D/02/x2v8Pv9Lv8br/Hf+T3+o/9Pv+Jz/af+v3+z/6A/8wf9J/7Q/4Lf9h/6Y/4r/xR/7U/5r/xx/0Jf9J/60/57/xpf8af9d/7c/4Hf97/6C/wd9YYY4wxxn6Tf/Zd/35/5//EpXFRfwC4envhp395XAHAxgJ/mQ8U8R0jAPBE3+4P/Dxq1kxOTr702CwJQfGFABC5nP/TL5AvxcugAzwGSdAeyv7d9Q0UPc/RX+v/fEl7uT4e9z56K0CeX+TEwuX4cv2b/4f6Dz86NqNCeDbu1+s/f+m8XVx/dCFAQvHLObnhcny5frn/oX7BtvSPz0/uz1IB2v0iJy9cji/XT4RH4ElI+tUjGWOMMcYYY4yxvxgoKnet/Buuz+PV5ZxccDn+Z9fnjDHGGGOMMcYYu/Ke7tnr8YeTktp3/d9Pcl8q9e/W+Y2Tn29E/J6VY/6oxf/hk12XztYf9KTi/8CWefK7TK7QDyTGGGOMMcbYf8zlD/3/QlIv/A+uiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy3n+iD8ndqX3yBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjF1p/y8AAP//okkuCw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0x1c0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r6, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000440), 0x1000a) sendfile(r6, r7, &(0x7f0000000080)=0x5, 0xffff) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28, 0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x1000c}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) 1.112387507s ago: executing program 1 (id=1678): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='!,\x00') mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x3000, 0x4, &(0x7f0000fee000/0x3000)=nil) 1.100360587s ago: executing program 6 (id=1679): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000140)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c666c7573682c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703733372c696f636861727365743d6d61636963656c616e642c757466383d312c696f636861727365743d63703836342c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c6e66733d6e6f7374616c655f726f2c726f6469722c696f636861727365743d63703836322c61707072616973652c0089d8f9f6f56bd15e8be0e6fe0e11e27d39444f9d74fdc5bc8118498bf0b216b07aaee2fd9a0b646e162381805c964a11422d7042281469400ee20067e5d16353f43d374dd20f96d884e2680df02cf1cb314ed2d9fad5878dbc2224303ab13d5a418d120913b460d8125adcacc0a594e45436d1bd8dc75e1c62adc51a829f65637090d1832a4f78d62d5815aa7b6e62376b93cc7aaec35b3cf35ea9b97d0a20c257ca8426df173f49a97d4f335bff2fd0f61c15aa94324c42e10df07ed541259189d9bcaccdde4815f1337a9edb5970163cbff2b28535cadf9da758c9dc8b5bb9b7f1766963f8"], 0x6, 0x2b8, &(0x7f0000000640)="$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") (async, rerun: 64) socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000080)={@local, 0x1, 0x0, 0x70, 0x0, [{@dev}, {@dev}, {}, {@empty}, {@dev}, {@multicast2}, {@empty}]}}) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@enum={0xb, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x6}, {0xf, 0xfffffffc}]}]}}, &(0x7f00000003c0)=""/208, 0x36, 0xd0, 0x1, 0x100, 0x10000, @value=r2}, 0x28) 1.063402657s ago: executing program 2 (id=1680): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x4000000, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r0 = socket(0xa, 0x3, 0xff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f00000003c0)={{0x8, @multicast2, 0x4e24, 0x800002, 'nq\x00', 0x8, 0x3, 0x10003}, {@multicast1, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x4, @remote, 0xdb}, 0x1c) 1.062018328s ago: executing program 2 (id=1681): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x4, 0x7fff7fff}]}) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) 836.0233ms ago: executing program 1 (id=1682): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r0, 0x0, 0x53) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x582, 0x2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xb0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x24, 0x30, 0xe5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x4, 0xa, 0x10, {0xa, 0x25, 0x25, 0x5, 0x50, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe3, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0x1}}}}}}}}]}}, 0x0) 698.964872ms ago: executing program 7 (id=1683): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x42844000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="cc6c") r0 = syz_clone(0x2080, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000001c0)='./file2\x00', 0x1200410, &(0x7f0000000100)=ANY=[], 0x4, 0x10611, &(0x7f0000021500)="$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") r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, &(0x7f00000014c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dcfc4ee7fd761fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") r2 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x10) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/122, 0x20001c62}], 0x1, 0x0) 74.588059ms ago: executing program 6 (id=1684): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x4080) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x110, r0, 0x3a4d9000) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000000)) 0s ago: executing program 6 (id=1685): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x5af1a6be6fcd8d29, 0x6c, {0x6c, 0x31, "1ba1389e5ba6783e789d76b6725516cc62a4b5aa14281cece7b449e5eb21df78c00fb163a0fb874919fa2d043b6a0098acb41f99c1c32f0720dff9d8a693de763a9f9add8a7ae8c8e4a9bf97d1e10523434fe24b96f0cba702a0709f52221be0e5a851cf7d66a26da1d9"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000580)={0x44, &(0x7f0000000180)={0x0, 0x15, 0x38, "2fcf3b0ceb479a91942aa91f68d82dcdb397a1545f435491ee6c667a16988524f99dbbc1f2e0a886653fbb20db8983b2acb363031606cb0a"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x36}, &(0x7f0000000440)={0x20, 0x81, 0x3, "06ea29"}, &(0x7f0000000480)={0x20, 0x82, 0x2, "68ee"}, &(0x7f00000004c0)={0x20, 0x83, 0x1, 'Z'}, &(0x7f0000000500)={0x20, 0x84, 0x1, '`'}, &(0x7f0000000540)={0x20, 0x85, 0x3, "93c9bf"}}) kernel console output (not intermixed with test programs): 634][ T358] usb 3-1: Manufacturer: syz [ 100.368275][ T358] usb 3-1: SerialNumber: syz [ 100.396737][ T3066] overlayfs: unrecognized mount option "userxattr" or missing value [ 100.405602][ T3066] SELinux: Context system_u: is not valid (left unmapped). [ 100.413071][ T24] audit: type=1400 audit(7113340297.426:883): avc: denied { relabelto } for pid=3065 comm="syz.5.728" name="file0" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 100.607321][ T287] usbhid 6-1:1.0: can't add hid device: -71 [ 100.607330][ T913] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 100.620961][ T287] usbhid: probe of 6-1:1.0 failed with error -71 [ 100.635904][ T287] usb 6-1: USB disconnect, device number 26 [ 100.661908][ T3089] udc-core: couldn't find an available UDC or it's busy [ 100.668933][ T3089] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 100.671484][ T2894] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 100.714785][ T358] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 100.722869][ T358] snd-usb-audio: probe of 3-1:1.1 failed with error -2 [ 100.730691][ T358] snd-usb-audio: probe of 3-1:1.2 failed with error -2 [ 100.747034][ T358] usb 3-1: USB disconnect, device number 45 [ 100.885246][ T913] usb 7-1: Using ep0 maxpacket: 16 [ 100.938697][ T2894] usb 2-1: Using ep0 maxpacket: 8 [ 100.980342][ T834] attempt to access beyond end of device [ 100.980342][ T834] loop5: rw=2049, want=45104, limit=40427 [ 101.046774][ T913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.066997][ T913] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.067079][ T2894] usb 2-1: config 1 interface 0 altsetting 142 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 101.097182][ T2894] usb 2-1: config 1 interface 0 has no altsetting 0 [ 101.099092][ T913] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.113469][ T913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.125369][ T913] usb 7-1: config 0 descriptor?? [ 101.155942][ T3160] EXT4-fs (loop5): Invalid commit interval 112098566, must be smaller than 21474836 [ 101.184645][ T2894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.193781][ T2894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.201939][ T2894] usb 2-1: SerialNumber: syz [ 101.365470][ T3165] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.401760][ T3165] EXT4-fs error (device loop5): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 210 vs 220 free clusters [ 101.416206][ T3165] EXT4-fs (loop5): Remounting filesystem read-only [ 101.422854][ T3165] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.754: inode #11520: comm syz.5.754: iget: illegal inode # [ 101.436193][ T3165] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.754: error while reading EA inode 11520 err=-117 [ 101.449025][ T3165] EXT4-fs (loop5): 1 orphan inode deleted [ 101.454850][ T3165] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000008,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000000000004,resgid=0x0000000000000000,min_batch_time=0x0000000000000006,data_err=abort,grpid, [ 101.482144][ T3164] EXT4-fs error (device loop5): __ext4_iget:5027: inode #14: block 1886221359: comm syz.5.754: invalid block [ 101.494000][ T3164] EXT4-fs (loop5): Remounting filesystem read-only [ 101.500647][ T3165] EXT4-fs error (device loop5): __ext4_iget:5027: inode #14: block 1886221359: comm syz.5.754: invalid block [ 101.584782][ T24] audit: type=1400 audit(7113340298.530:884): avc: denied { read } for pid=3196 comm="syz.5.761" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 101.609052][ T3197] device veth0 entered promiscuous mode [ 101.613087][ T913] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 101.622040][ T913] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 101.629698][ T913] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 101.637951][ T913] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 101.646034][ T913] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 101.657411][ T913] microsoft 0003:045E:07DA.000A: no inputs found [ 101.663713][ T913] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 101.674176][ T3190] F2FS-fs (loop2): fault_injection options not supported [ 101.681481][ T3190] F2FS-fs (loop2): fault_type options not supported [ 101.696688][ T3190] F2FS-fs (loop2): invalid crc value [ 101.704267][ T3190] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.726264][ T3190] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.834543][ T24] audit: type=1400 audit(7113340298.754:885): avc: denied { mount } for pid=3142 comm="syz.6.748" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 101.955943][ T2894] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 101.982484][ T24] audit: type=1400 audit(7113340298.894:886): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 102.011075][ T24] audit: type=1400 audit(7113340298.913:887): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.050549][ T913] usb 7-1: USB disconnect, device number 13 [ 102.180275][ T3151] xt_ecn: cannot match TCP bits for non-tcp packets [ 102.187031][ T283] attempt to access beyond end of device [ 102.187031][ T283] loop2: rw=2049, want=45104, limit=40427 [ 102.207522][ T54] usb 2-1: USB disconnect, device number 33 [ 102.388530][ T54] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 102.474857][ T3196] device veth0 left promiscuous mode [ 102.599388][ T3240] F2FS-fs (loop2): invalid crc value [ 102.605908][ T3240] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.654684][ T3240] F2FS-fs (loop2): Start checkpoint disabled! [ 102.670002][ T3240] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 103.154682][ T3265] EXT4-fs (loop5): Test dummy encryption mode enabled [ 103.217591][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 103.244543][ T3265] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 103.259059][ T3265] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.675449][ C0] sched: RT throttling activated [ 103.960578][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 104.012995][ T3275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3275 comm=syz.0.772 [ 104.051132][ T49] attempt to access beyond end of device [ 104.051132][ T49] loop2: rw=2049, want=40976, limit=40427 [ 104.217934][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 104.217945][ T24] audit: type=1400 audit(7113340300.990:906): avc: denied { read write } for pid=3287 comm="syz.1.777" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.509776][ T24] audit: type=1400 audit(7113340301.018:907): avc: denied { open } for pid=3287 comm="syz.1.777" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.541446][ T2897] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 104.549999][ T24] audit: type=1400 audit(7113340301.018:908): avc: denied { ioctl } for pid=3287 comm="syz.1.777" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.577714][ T870] udevd[870]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 104.589398][ T3294] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 104.594889][ T24] audit: type=1400 audit(7113340301.065:909): avc: denied { ioctl } for pid=3283 comm="syz.0.773" path="socket:[24272]" dev="sockfs" ino=24272 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.630694][ T3294] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 104.648518][ T3294] EXT4-fs (loop2): orphan cleanup on readonly fs [ 104.655747][ T3294] EXT4-fs warning (device loop2): ext4_enable_quotas:6497: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.670569][ T3294] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 104.677385][ T3294] EXT4-fs (loop2): 1 orphan inode deleted [ 104.683844][ T3299] exfat: Unknown parameter 'lscard' [ 104.690476][ T3294] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000010,,errors=continue [ 104.738607][ T24] audit: type=1400 audit(7113340301.476:910): avc: denied { getopt } for pid=3298 comm="syz.5.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.748821][ T301] udevd[301]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 104.770617][ T3299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.779'. [ 104.782887][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 104.803555][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.902935][ T24] audit: type=1326 audit(7113340301.626:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.6.781" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 104.928691][ T24] audit: type=1326 audit(7113340301.626:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.6.781" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c5e6bb647 code=0x7ffc0000 [ 104.954380][ T24] audit: type=1326 audit(7113340301.626:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.6.781" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1c5e67a60e code=0x7ffc0000 [ 105.013513][ T24] audit: type=1326 audit(7113340301.626:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.6.781" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1c5e67a60e code=0x7ffc0000 [ 105.038686][ T24] audit: type=1326 audit(7113340301.626:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.6.781" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1c5e67a60e code=0x7ffc0000 [ 105.039040][ T3309] netlink: 5096 bytes leftover after parsing attributes in process `syz.0.783'. [ 105.083912][ T2897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.129512][ T2897] usb 2-1: not running at top speed; connect to a high speed hub [ 105.225715][ T2897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.242434][ T2897] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.265656][ T2897] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 105.454017][ T3303] F2FS-fs (loop5): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 105.470500][ T3325] fuse: Unknown parameter 'g{oup_id' [ 105.474573][ T3303] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 105.486697][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/a3bd865d-a4e8-4b25-9caa-c903308887eb.tmp-b7:5' failed: Read-only file system [ 105.503890][ T2897] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 105.510983][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/a3bd865d-a4e8-4b25-9caa-c903308887eb.tmp-b7:5' failed: Read-only file system [ 105.515745][ T2897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.534957][ T2897] usb 2-1: Product: syz [ 105.539926][ T2897] usb 2-1: Manufacturer: syz [ 105.545104][ T2897] usb 2-1: SerialNumber: syz [ 105.550009][ T3335] device batadv_slave_0 entered promiscuous mode [ 105.556464][ T3303] F2FS-fs (loop5): Found nat_bits in checkpoint [ 105.557953][ T3334] device batadv_slave_0 left promiscuous mode [ 105.607097][ T3303] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 105.614220][ T3303] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b [ 105.638448][ T301] udevd[301]: symlink '../../loop5' '/dev/disk/by-uuid/a3bd865d-a4e8-4b25-9caa-c903308887eb.tmp-b7:5' failed: Read-only file system [ 105.660344][ T3303] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev overlay, type overlay) errno=-22 [ 105.815100][ T3288] udc-core: couldn't find an available UDC or it's busy [ 105.822069][ T3288] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.920121][ T3349] netlink: 'syz.6.794': attribute type 7 has an invalid length. [ 105.939527][ T3349] netlink: 'syz.6.794': attribute type 8 has an invalid length. [ 105.958082][ T3349] netlink: 'syz.6.794': attribute type 13 has an invalid length. [ 105.965982][ T2897] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 105.976676][ T2897] usb 2-1: 1:1 : sample bitwidth 169 in over sample bytes 2 [ 105.984077][ T2897] usb 2-1: 1:1 : unsupported format bits 0x2002 [ 105.995365][ T2897] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 106.033447][ T3351] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 106.047829][ T301] udevd[301]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 106.048849][ T2897] usb 2-1: unit 8 not found! [ 106.070575][ T3351] exfat filesystem being mounted at /102/éq‰Y’3aK supports timestamps until 2107-12-31 (0x10391447f) [ 106.094379][ T301] udevd[301]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 106.149813][ T2897] usb 2-1: USB disconnect, device number 34 [ 106.946826][ T2897] Bluetooth: hci0: command 0x1003 tx timeout [ 106.953229][ T1822] Bluetooth: hci0: sending frame failed (-49) [ 107.396382][ T3391] EXT4-fs (loop1): Ignoring removed bh option [ 107.417838][ T3391] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 107.488208][ T3391] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,nolazytime,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,bh,nomblk_io_submit,,errors=continue [ 107.555381][ T3391] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 107.875140][ T3413] netlink: 'syz.0.811': attribute type 15 has an invalid length. [ 108.315966][ T3415] xt_NFQUEUE: number of total queues is 0 [ 109.227161][ T2894] Bluetooth: hci0: command 0x1001 tx timeout [ 109.233545][ T1822] Bluetooth: hci0: sending frame failed (-49) [ 109.833587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.841842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.850143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.858158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.865864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 109.873236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 110.154262][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 110.154273][ T24] audit: type=1400 audit(7113340306.546:941): avc: denied { append } for pid=3461 comm="syz.5.830" name="hwrng" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 110.338910][ T3467] FAT-fs (loop1): IO charset cp8 not found [ 110.485750][ T358] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 110.742030][ T358] usb 6-1: Using ep0 maxpacket: 16 [ 110.913075][ T358] usb 6-1: unable to get BOS descriptor or descriptor too short [ 110.974392][ T24] audit: type=1400 audit(7113340307.304:942): avc: denied { accept } for pid=3477 comm="syz.6.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 111.009318][ T358] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.019508][ T358] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.191059][ T358] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 111.200170][ T358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.208207][ T358] usb 6-1: Product: syz [ 111.212423][ T358] usb 6-1: Manufacturer: syz [ 111.217017][ T358] usb 6-1: SerialNumber: syz [ 111.302666][ T3487] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 111.363210][ T3496] netlink: 2084 bytes leftover after parsing attributes in process `syz.0.842'. [ 111.394136][ T2894] Bluetooth: hci0: command 0x1009 tx timeout [ 111.480215][ T3462] udc-core: couldn't find an available UDC or it's busy [ 111.487309][ T3462] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.550717][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 111.595019][ T3509] fuse: Bad value for 'fd' [ 111.680627][ T3522] bridge0: port 3(vlan2) entered blocking state [ 111.686951][ T3522] bridge0: port 3(vlan2) entered disabled state [ 111.693903][ T3522] device vlan2 entered promiscuous mode [ 111.757744][ T358] usb 6-1: unit 0 not found! [ 111.765704][ T358] usb 6-1: USB disconnect, device number 27 [ 112.236266][ T24] audit: type=1400 audit(7113340564.485:943): avc: denied { setopt } for pid=3532 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.315023][ T3537] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.325881][ T3537] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 112.336617][ T3537] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 112.358272][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 112.378100][ T3537] exfat filesystem being mounted at /106/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 112.393752][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 112.426759][ T24] audit: type=1326 audit(7113340564.663:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.6.856" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 112.455554][ T24] audit: type=1326 audit(7113340564.701:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.6.856" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 112.480603][ T24] audit: type=1326 audit(7113340564.701:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.6.856" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 112.505478][ T24] audit: type=1326 audit(7113340564.701:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.6.856" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 112.538807][ T24] audit: type=1326 audit(7113340564.701:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.6.856" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 112.566564][ T24] audit: type=1326 audit(7113340564.701:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.6.856" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 112.591755][ T24] audit: type=1326 audit(7113340564.775:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.6.856" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 112.963011][ T3556] netlink: 'syz.0.862': attribute type 3 has an invalid length. [ 112.985459][ T3559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.863'. [ 113.023697][ T3545] F2FS-fs (loop1): Invalid log sectors per block(570425347) log sectorsize(9) [ 113.054418][ T3545] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 113.072715][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-uuid/a3bd865d-a4e8-4b25-9caa-c903308887eb.tmp-b7:1' failed: Read-only file system [ 113.087230][ T3545] F2FS-fs (loop1): invalid crc value [ 113.151043][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-uuid/a3bd865d-a4e8-4b25-9caa-c903308887eb.tmp-b7:1' failed: Read-only file system [ 113.165584][ T3545] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 113.232287][ T3545] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 113.263308][ T3545] F2FS-fs (loop1): Bad quota inode 2:50331648 [ 113.276077][ T3545] F2FS-fs (loop1): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 113.298713][ T3545] F2FS-fs (loop1): Cannot turn on quotas: error -22 [ 113.322961][ T3545] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 113.336161][ T3545] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 113.343819][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system [ 113.368947][ T3565] F2FS-fs (loop5): invalid crc value [ 113.376962][ T301] udevd[301]: symlink '../../loop1' '/dev/disk/by-uuid/a3bd865d-a4e8-4b25-9caa-c903308887eb.tmp-b7:1' failed: Read-only file system [ 113.423813][ T3565] F2FS-fs (loop5): Found nat_bits in checkpoint [ 113.445257][ T3590] netlink: 28 bytes leftover after parsing attributes in process `syz.6.871'. [ 113.465323][ T3590] netlink: 28 bytes leftover after parsing attributes in process `syz.6.871'. [ 113.474497][ T3590] netlink: 20 bytes leftover after parsing attributes in process `syz.6.871'. [ 113.474524][ T3565] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 113.508457][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system [ 113.692640][ T3596] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 113.985227][ T3600] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.873: inode has both inline data and extents flags [ 113.985872][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 113.998453][ T3600] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.873: couldn't read orphan inode 15 (err -117) [ 114.017468][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 114.021759][ T3600] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue [ 114.052450][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 114.076399][ T834] attempt to access beyond end of device [ 114.076399][ T834] loop5: rw=2049, want=45104, limit=40427 [ 114.217941][ T3612] tipc: Failed to remove local publication {66,0,0}/3331453529 [ 114.225537][ T3612] tipc: Failed to remove local publication {66,0,0}/3331453528 [ 114.265695][ T3611] tipc: Failed to remove local publication {66,0,0}/3331453529 [ 114.305305][ T3611] tipc: Failed to remove local publication {66,0,0}/3331453528 [ 114.313541][ T3611] tipc: Failed to remove local publication {66,0,0}/3331453529 [ 114.321145][ T3611] tipc: Failed to remove local publication {66,0,0}/3331453528 [ 114.345030][ T3620] netlink: 48 bytes leftover after parsing attributes in process `syz.6.878'. [ 115.269136][ T3634] xt_hashlimit: size too large, truncated to 1048576 [ 115.582952][ T3639] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 115.596316][ T3639] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 115.605301][ T3639] ext2 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.615599][ T3645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3645 comm=syz.6.886 [ 115.628971][ T3645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40685 sclass=netlink_route_socket pid=3645 comm=syz.6.886 [ 115.673813][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 115.673824][ T24] audit: type=1400 audit(7113340567.703:985): avc: denied { mount } for pid=3658 comm="syz.6.890" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 115.703688][ T3659] overlayfs: missing 'lowerdir' [ 115.734861][ T24] audit: type=1400 audit(7113340567.769:986): avc: denied { create } for pid=3660 comm="syz.6.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 116.209983][ T3671] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 116.219205][ T3671] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.253613][ T3671] fscrypt: AES-128-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 116.398228][ T3686] erofs: (device loop5): mounted with root inode @ nid 36. [ 116.440104][ T2892] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 116.921610][ T2892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.975288][ T2892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.068461][ T2892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.209733][ T2892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.448134][ T2892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.459739][ T2892] usb 3-1: config 0 descriptor?? [ 117.815664][ T3713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.842440][ T3717] netlink: 36 bytes leftover after parsing attributes in process `syz.5.908'. [ 118.226419][ T2892] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 118.236138][ T2892] plantronics 0003:047F:FFFF.000B: item fetching failed at offset 14/15 [ 118.266699][ T2892] plantronics 0003:047F:FFFF.000B: parse failed [ 118.287862][ T2892] plantronics: probe of 0003:047F:FFFF.000B failed with error -22 [ 118.345007][ T24] audit: type=1400 audit(7113340570.210:987): avc: denied { map } for pid=3716 comm="syz.5.908" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 118.450674][ T2896] usb 3-1: USB disconnect, device number 46 [ 119.166194][ T2896] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 119.253560][ T3763] fuse: Bad value for 'fd' [ 119.278464][ T24] audit: type=1400 audit(7113340571.080:988): avc: denied { setopt } for pid=3768 comm="syz.6.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.326100][ T3776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.476765][ T3803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'. [ 119.551923][ T2896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.567494][ T2896] usb 2-1: config 0 has no interfaces? [ 119.574135][ T2896] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.583545][ T2896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.594498][ T2896] usb 2-1: config 0 descriptor?? [ 119.666592][ T3835] netlink: 56 bytes leftover after parsing attributes in process `syz.0.958'. [ 119.673677][ T24] audit: type=1400 audit(7113340571.445:989): avc: denied { create } for pid=3836 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 119.714047][ T3842] syz.0.962 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.733561][ T3837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3837 comm=syz.2.959 [ 119.859209][ T2897] usb 2-1: USB disconnect, device number 35 [ 120.766330][ T3878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 120.973373][ T3906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.984'. [ 120.990306][ T3906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.984'. [ 121.222480][ T3917] netlink: 168 bytes leftover after parsing attributes in process `syz.6.993'. [ 121.342901][ T3939] tipc: Started in network mode [ 121.347872][ T3939] tipc: Own node identity 6606007f819, cluster identity 4711 [ 121.355326][ T3939] tipc: Enabled bearer , priority 0 [ 121.362612][ T3939] device syzkaller0 entered promiscuous mode [ 121.371390][ T3939] tipc: Resetting bearer [ 121.377951][ T3938] tipc: Resetting bearer [ 121.384430][ T3938] tipc: Disabling bearer [ 121.763762][ T24] audit: type=1400 audit(7113340573.400:990): avc: denied { relabelfrom } for pid=3954 comm="syz.5.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 121.797707][ T24] audit: type=1400 audit(7113340573.400:991): avc: denied { relabelto } for pid=3954 comm="syz.5.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 122.095445][ T913] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 122.491062][ T913] usb 2-1: config 0 has no interfaces? [ 122.662096][ T913] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 122.671179][ T913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.679294][ T913] usb 2-1: Product: syz [ 122.683559][ T913] usb 2-1: Manufacturer: syz [ 122.688135][ T913] usb 2-1: SerialNumber: syz [ 122.693163][ T913] usb 2-1: config 0 descriptor?? [ 122.781910][ T24] audit: type=1400 audit(7113340574.354:992): avc: denied { ioctl } for pid=3993 comm="syz.5.1028" path="/dev/fuse" dev="devtmpfs" ino=90 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 122.810953][ T3998] 9pnet_virtio: no channels available for device syz [ 122.861741][ T24] audit: type=1400 audit(7113340574.429:993): avc: denied { write } for pid=4007 comm="syz.5.1033" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.898607][ T24] audit: type=1326 audit(7113340574.466:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.6.1032" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x0 [ 122.952426][ T358] usb 2-1: USB disconnect, device number 36 [ 122.976417][ T4014] netlink: 'syz.0.1036': attribute type 4 has an invalid length. [ 122.985881][ T4023] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1039'. [ 123.283234][ T4074] 9pnet_virtio: no channels available for device syz [ 123.443439][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 123.463738][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.507295][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 123.550587][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.591823][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.669165][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.864782][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.085091][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.178388][ T4088] erofs: (device loop5): check_layout_compatibility: unidentified incompatible feature f0, please upgrade kernel version [ 124.192484][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:5' failed: Read-only file system [ 124.375944][ T4103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1072'. [ 124.447396][ T2897] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 124.479462][ T913] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 124.487079][ T358] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 124.725308][ T2897] usb 3-1: Using ep0 maxpacket: 16 [ 124.746780][ T358] usb 6-1: Using ep0 maxpacket: 16 [ 124.875035][ T913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.885226][ T913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.896415][ T2897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.906195][ T2897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.919037][ T2897] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.928052][ T2897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.936566][ T2897] usb 3-1: config 0 descriptor?? [ 124.971378][ T913] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.980462][ T913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 124.988570][ T913] usb 2-1: SerialNumber: syz [ 124.993340][ T2897] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 125.026529][ T4115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.046201][ T358] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 125.055572][ T358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.063633][ T358] usb 6-1: Product: syz [ 125.068227][ T358] usb 6-1: Manufacturer: syz [ 125.072822][ T358] usb 6-1: SerialNumber: syz [ 125.179178][ T4123] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1080'. [ 125.192463][ T4123] netlink: 'syz.0.1080': attribute type 12 has an invalid length. [ 125.200589][ T4123] netlink: 'syz.0.1080': attribute type 29 has an invalid length. [ 125.211511][ T2897] usb 3-1: USB disconnect, device number 47 [ 125.226541][ T4123] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1080'. [ 125.236063][ T4123] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1080'. [ 125.266856][ T4099] udc-core: couldn't find an available UDC or it's busy [ 125.273919][ T4099] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 125.314140][ T913] usb 2-1: 0:2 : does not exist [ 125.330355][ T913] usb 2-1: USB disconnect, device number 37 [ 125.883127][ T4154] FAT-fs (loop1): Directory bread(block 32) failed [ 125.890273][ T4154] FAT-fs (loop1): Directory bread(block 33) failed [ 125.899167][ T4154] FAT-fs (loop1): Directory bread(block 34) failed [ 125.906015][ T4154] FAT-fs (loop1): Directory bread(block 35) failed [ 125.912951][ T4154] FAT-fs (loop1): Directory bread(block 36) failed [ 125.919502][ T4154] FAT-fs (loop1): Directory bread(block 37) failed [ 125.926503][ T4154] FAT-fs (loop1): Directory bread(block 38) failed [ 125.933036][ T4154] FAT-fs (loop1): Directory bread(block 39) failed [ 125.939717][ T4154] FAT-fs (loop1): Directory bread(block 40) failed [ 125.946303][ T4154] FAT-fs (loop1): Directory bread(block 41) failed [ 125.959834][ T4154] vfat filesystem being mounted at /125/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 125.991702][ T24] audit: type=1400 audit(7113340577.357:995): avc: denied { remount } for pid=4153 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 126.139261][ T24] audit: type=1400 audit(7113340577.497:996): avc: denied { write } for pid=4159 comm="syz.2.1091" name="syz2" dev="cgroup2" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 126.165210][ T24] audit: type=1400 audit(7113340577.497:997): avc: denied { add_name } for pid=4159 comm="syz.2.1091" name="syz0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 126.190525][ T24] audit: type=1400 audit(7113340577.497:998): avc: denied { associate } for pid=4159 comm="syz.2.1091" name="syz0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 126.243477][ T358] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 126.263712][ T358] usb 6-1: USB disconnect, device number 28 [ 126.398830][ T4165] netlink: 'syz.0.1093': attribute type 22 has an invalid length. [ 126.421545][ T4164] netlink: 'syz.0.1093': attribute type 22 has an invalid length. [ 126.440758][ T4164] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1093'. [ 126.659471][ T24] audit: type=1400 audit(7113340577.974:999): avc: denied { setopt } for pid=4175 comm="syz.0.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.681326][ T4162] F2FS-fs (loop2): invalid crc value [ 126.687062][ T4162] F2FS-fs (loop2): invalid crc value [ 126.692508][ T4162] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 126.701124][ T870] udevd[870]: symlink '../../loop2' '/dev/disk/by-uuid/a3bd865d-a4e8-4b25-9caa-c903308887eb.tmp-b7:2' failed: Read-only file system [ 126.852817][ T2898] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 126.886136][ T4162] F2FS-fs (loop2): invalid crc value [ 126.895626][ T4162] F2FS-fs (loop2): Ignore s_resuid=5, s_resgid=0 w/o reserve_root [ 126.917935][ T4162] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.954954][ T4162] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 126.961709][ T4162] F2FS-fs (loop2): Start checkpoint disabled! [ 126.968230][ T4162] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 126.982474][ T4162] F2FS-fs (loop2): disabling checkpoint not compatible with read-only [ 127.141397][ T2898] usb 2-1: Using ep0 maxpacket: 32 [ 127.184271][ T2894] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 127.264488][ T4209] 9pnet_virtio: no channels available for device syz [ 127.295560][ T24] audit: type=1400 audit(7113340578.563:1000): avc: denied { module_request } for pid=4206 comm="syz.2.1104" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 127.317731][ T2898] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 127.330615][ T2898] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 127.553187][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 127.583985][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.592265][ T2894] usb 6-1: Using ep0 maxpacket: 16 [ 127.668461][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 127.687369][ T2898] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 127.719031][ T2894] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 127.732662][ T2898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.745426][ T4211] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1105'. [ 127.759902][ T2894] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.782951][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.806584][ T2898] usb 2-1: Product: syz [ 127.837418][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.846632][ T2898] usb 2-1: Manufacturer: syz [ 127.870319][ T2894] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 127.897110][ T2898] usb 2-1: SerialNumber: syz [ 127.928644][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.996173][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.004405][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.087941][ T2894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.098249][ T2894] usb 6-1: config 0 descriptor?? [ 128.136533][ T2894] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 128.199879][ T24] audit: type=1400 audit(7113340579.414:1001): avc: denied { map } for pid=4228 comm="syz.2.1111" path="socket:[27458]" dev="sockfs" ino=27458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 128.342770][ T4154] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 128.361548][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.368760][ T4154] FAT-fs (loop1): Filesystem has been set read-only [ 128.376079][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.383163][ T4202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.391251][ T2898] usb 2-1: USB disconnect, device number 38 [ 128.408047][ T2894] usb 6-1: USB disconnect, device number 29 [ 129.650842][ T4251] erofs: (device loop5): z_erofs_load_lzma_config: lzma algorithm isn't enabled [ 129.720501][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/dc080000-0000-0000-00db-a5c46e0e7dba.tmp-b7:5' failed: Read-only file system [ 129.825766][ T4262] vfat filesystem being mounted at /136/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 129.841623][ T870] udevd[870]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 129.854441][ T870] udevd[870]: symlink '../../loop2' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:2' failed: Read-only file system [ 129.861837][ T24] audit: type=1400 audit(7113340580.977:1002): avc: denied { ioctl } for pid=4269 comm="syz.2.1121" path="socket:[27918]" dev="sockfs" ino=27918 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.976546][ T4272] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1123'. [ 129.989395][ T4272] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1123'. [ 130.034425][ T24] audit: type=1400 audit(7113340581.136:1003): avc: denied { listen } for pid=4277 comm="syz.6.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.303479][ T4283] EXT4-fs (loop5): Test dummy encryption mode enabled [ 130.390579][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 130.430859][ T4283] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 130.445522][ T4283] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.876736][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 130.936599][ T305] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 131.114655][ T4300] FAT-fs (loop1): Directory bread(block 64) failed [ 131.121289][ T4300] FAT-fs (loop1): Directory bread(block 65) failed [ 131.127869][ T4300] FAT-fs (loop1): Directory bread(block 66) failed [ 131.134484][ T4300] FAT-fs (loop1): Directory bread(block 67) failed [ 131.141106][ T4300] FAT-fs (loop1): Directory bread(block 68) failed [ 131.147614][ T4300] FAT-fs (loop1): Directory bread(block 69) failed [ 131.154580][ T4300] FAT-fs (loop1): Directory bread(block 70) failed [ 131.161692][ T4300] FAT-fs (loop1): Directory bread(block 71) failed [ 131.168264][ T4300] FAT-fs (loop1): Directory bread(block 72) failed [ 131.174835][ T4300] FAT-fs (loop1): Directory bread(block 73) failed [ 131.183035][ T4300] vfat filesystem being mounted at /129/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 131.206456][ T4300] attempt to access beyond end of device [ 131.206456][ T4300] loop1: rw=2049, want=1232, limit=256 [ 131.225232][ T305] usb 3-1: device descriptor read/64, error -71 [ 131.324775][ T388] attempt to access beyond end of device [ 131.324775][ T388] loop1: rw=1, want=1384, limit=256 [ 131.335739][ T388] attempt to access beyond end of device [ 131.335739][ T388] loop1: rw=1, want=1768, limit=256 [ 131.346653][ T388] attempt to access beyond end of device [ 131.346653][ T388] loop1: rw=1, want=1928, limit=256 [ 131.357757][ T388] attempt to access beyond end of device [ 131.357757][ T388] loop1: rw=1, want=3372, limit=256 [ 131.413315][ T24] audit: type=1400 audit(7113340582.426:1004): avc: denied { read } for pid=4306 comm="syz.1.1132" path="socket:[28683]" dev="sockfs" ino=28683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.518784][ T4312] netlink: 'syz.6.1133': attribute type 4 has an invalid length. [ 131.823891][ T305] usb 3-1: device descriptor read/64, error -71 [ 131.830213][ T358] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 131.838694][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.091275][ T358] usb 6-1: Using ep0 maxpacket: 16 [ 132.123263][ T305] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 132.159311][ T4335] fuse: Bad value for 'fd' [ 132.233102][ T358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.244083][ T358] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.257251][ T358] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.266499][ T358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.279016][ T358] usb 6-1: config 0 descriptor?? [ 132.412009][ T305] usb 3-1: device descriptor read/64, error -71 [ 132.499713][ T4359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4359 comm=syz.1.1147 [ 132.797775][ T358] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 132.806235][ T358] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 132.818114][ T358] microsoft 0003:045E:07DA.000C: no inputs found [ 132.824522][ T358] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 132.833391][ T305] usb 3-1: device descriptor read/64, error -71 [ 132.863010][ T870] udevd[870]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system [ 132.872764][ T870] udevd[870]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system [ 132.873416][ T24] audit: type=1400 audit(7113340583.801:1005): avc: denied { lock } for pid=4373 comm="syz.6.1153" path="socket:[28107]" dev="sockfs" ino=28107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 132.967872][ T305] usb usb3-port1: attempt power cycle [ 133.022202][ T4376] overlayfs: failed to resolve './file2': -2 [ 133.029455][ T4376] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4376 comm=syz.6.1154 [ 133.050475][ T24] audit: type=1400 audit(7113340583.961:1006): avc: denied { create } for pid=4378 comm="syz.6.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 133.085419][ T24] audit: type=1400 audit(7113340583.989:1007): avc: denied { write } for pid=4383 comm="syz.6.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.488146][ T4407] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 133.491888][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 133.515130][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 133.517645][ T4407] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.535962][ T4417] tipc: Failed to remove local publication {66,0,0}/1100873434 [ 133.546107][ T4417] tipc: Failed to remove local publication {66,0,0}/1100873433 [ 133.565301][ T4407] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 133.574111][ T4407] System zones: 0-1, 3-36 [ 133.580039][ T4407] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,nobarrier,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 133.602560][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 133.691204][ T4438] 9pnet: Insufficient options for proto=fd [ 133.962019][ T2896] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 133.999446][ T24] audit: type=1400 audit(7113340584.849:1008): avc: denied { rename } for pid=4426 comm="syz.6.1167" name="file0" dev="tmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 134.036953][ T24] audit: type=1326 audit(7113340584.877:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.6.1177" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 134.062294][ T24] audit: type=1326 audit(7113340584.877:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.6.1177" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 134.087724][ T24] audit: type=1326 audit(7113340584.877:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.6.1177" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 134.116544][ T4446] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 134.116544][ T4446] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 134.116544][ T4446] [ 134.142507][ T24] audit: type=1326 audit(7113340584.877:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.6.1177" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 134.167663][ T4446] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.176932][ T24] audit: type=1326 audit(7113340584.877:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.6.1177" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 134.202853][ T24] audit: type=1326 audit(7113340584.877:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.6.1177" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 134.209433][ T4446] EXT4-fs (loop2): 1 truncate cleaned up [ 134.233865][ T4446] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,jqfmt=vfsold,nouid32,data=journal,user_xattr,noacl,nogrpid,,errors=continue [ 134.275748][ T4446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1176'. [ 134.496643][ T2896] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 134.505785][ T2896] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 134.514049][ T2896] usb 2-1: Product: syz [ 134.521254][ T2896] usb 2-1: config 0 descriptor?? [ 134.533966][ T2898] usb 6-1: USB disconnect, device number 30 [ 134.561382][ T2896] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 134.572085][ T2896] usb 2-1: Detected FT232H [ 134.636764][ T4484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=538 sclass=netlink_route_socket pid=4484 comm=syz.0.1184 [ 135.000335][ T4431] EXT4-fs error (device loop1): ext4_quota_enable:6449: comm syz.1.1171: Bad quota inum: 5, type: 2 [ 135.011442][ T4431] EXT4-fs warning (device loop1): ext4_enable_quotas:6497: Failed to enable quota tracking (type=2, err=-117, ino=5). Please run e2fsck to fix. [ 135.026501][ T4431] EXT4-fs (loop1): mount failed [ 135.138040][ T2896] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 135.159399][ T2896] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 135.180773][ T2896] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 135.188002][ T2896] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.197653][ T2896] usb 2-1: USB disconnect, device number 39 [ 135.204408][ T2896] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 135.214141][ T2896] ftdi_sio 2-1:0.0: device disconnected [ 135.257891][ T4498] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 135.332387][ T4508] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1192'. [ 135.350651][ T4511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=800 sclass=netlink_route_socket pid=4511 comm=syz.6.1193 [ 135.484331][ T870] udevd[870]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 135.498658][ T870] udevd[870]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 135.511407][ T4514] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 135.520483][ T4514] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.533445][ T4514] cgroup: noprefix used incorrectly [ 135.538029][ T870] udevd[870]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 135.560741][ T870] udevd[870]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 135.677302][ T4521] erofs: (device loop5): check_layout_compatibility: unidentified incompatible feature f0, please upgrade kernel version [ 135.679456][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:5' failed: Read-only file system [ 135.783848][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 135.791886][ T4528] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 135.800619][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 135.804273][ T4528] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.832452][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 135.836929][ T4528] EXT4-fs (loop1): shut down requested (2) [ 135.851362][ T4528] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 135.860390][ T4528] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 135.869486][ T4528] SELinux: Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped). [ 135.974994][ T870] udevd[870]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 135.982547][ T305] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 136.057953][ T4535] cgroup: fork rejected by pids controller in /syz1 [ 136.249821][ T305] usb 6-1: Using ep0 maxpacket: 16 [ 136.282167][ C1] Illegal XDP return value 16128, expect packet loss! [ 136.576687][ T305] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 136.619339][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.627596][ T305] usb 6-1: Product: syz [ 136.631764][ T305] usb 6-1: Manufacturer: syz [ 136.636399][ T305] usb 6-1: SerialNumber: syz [ 136.792211][ T4590] netlink: 'syz.6.1206': attribute type 1 has an invalid length. [ 136.800109][ T4590] netlink: 'syz.6.1206': attribute type 22 has an invalid length. [ 136.817061][ T4592] xt_bpf: check failed: parse error [ 137.269479][ T4611] loop1: p1 < > p3 p4 < > [ 137.280234][ T4611] loop1: p3 start 201326592 is beyond EOD, truncated [ 137.289907][ T4622] netlink: 125 bytes leftover after parsing attributes in process `syz.2.1216'. [ 137.296321][ T320] udevd[320]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 137.409622][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 137.419121][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 137.435346][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 137.445914][ T4624] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 137.446188][ T4631] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 137.470463][ T4635] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1221'. [ 137.479660][ T4611] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 137.584448][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 137.874268][ T305] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 137.917973][ T4645] EXT4-fs (loop2): Ignoring removed nobh option [ 138.041337][ T4645] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1222: inode #1: comm syz.2.1222: iget: illegal inode # [ 138.044176][ T305] usb 6-1: USB disconnect, device number 31 [ 138.067372][ T4645] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1222: error while reading EA inode 1 err=-117 [ 138.079979][ T4645] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1222: inode #1: comm syz.2.1222: iget: illegal inode # [ 138.093464][ T4645] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1222: error while reading EA inode 1 err=-117 [ 138.106116][ T4645] EXT4-fs (loop2): 1 orphan inode deleted [ 138.112035][ T4645] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,stripe=0x0000000000000000,noblock_validity,noinit_itable,max_batch_time=0x0000000000000006,minixdf,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,errors=continue,acl,noblock_validity,noquota, [ 138.207334][ T4663] 9pnet: Insufficient options for proto=fd [ 138.213722][ T4663] xt_bpf: check failed: parse error [ 138.250960][ T4665] xt_bpf: check failed: parse error [ 138.289152][ T4676] tmpfs: Unknown parameter 'æ^žÆÏsB¤zroot…onteet' [ 138.313930][ T4676] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 138.400676][ T4680] EXT4-fs (loop1): Mount option "nodioread_nolock" incompatible with ext3 [ 138.546301][ T24] kauditd_printk_skb: 149 callbacks suppressed [ 138.546312][ T24] audit: type=1326 audit(7113340589.096:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.1.1235" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f938e2b8dd9 code=0x0 [ 138.577198][ T305] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 138.595879][ T4683] F2FS-fs (loop5): invalid crc value [ 138.612986][ T4683] F2FS-fs (loop5): Found nat_bits in checkpoint [ 138.653387][ T4683] F2FS-fs (loop5): Start checkpoint disabled! [ 138.660151][ T4683] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 138.742863][ T388] attempt to access beyond end of device [ 138.742863][ T388] loop5: rw=2049, want=45104, limit=40427 [ 138.836930][ T305] usb 3-1: Using ep0 maxpacket: 16 [ 138.965272][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.976406][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.986210][ T305] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.999397][ T305] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.009452][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.025803][ T305] usb 3-1: config 0 descriptor?? [ 139.183425][ T4698] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1239: inode has both inline data and extents flags [ 139.196906][ T4698] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1239: couldn't read orphan inode 15 (err -117) [ 139.209054][ T4698] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,resgid=0x0000000000000000,nodiscard,,errors=continue [ 139.436127][ T4708] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 139.442747][ T4708] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 139.467183][ T4708] F2FS-fs (loop1): Found nat_bits in checkpoint [ 139.505068][ T4708] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 139.512314][ T4708] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.543436][ T305] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 139.554025][ T305] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 139.565124][ T305] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 139.573307][ T305] microsoft 0003:045E:07DA.000D: unbalanced collection at end of report description [ 139.583258][ T305] microsoft 0003:045E:07DA.000D: parse failed [ 139.589538][ T305] microsoft: probe of 0003:045E:07DA.000D failed with error -22 [ 139.605146][ T279] attempt to access beyond end of device [ 139.605146][ T279] loop1: rw=2049, want=45104, limit=40427 [ 139.759085][ T2894] usb 3-1: USB disconnect, device number 51 [ 139.833579][ T4729] erofs: (device loop1): check_layout_compatibility: unidentified incompatible feature f0, please upgrade kernel version [ 139.994414][ T4713] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 140.002665][ T4713] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 140.011735][ T4713] F2FS-fs (loop5): invalid crc value [ 140.018957][ T4713] F2FS-fs (loop5): Found nat_bits in checkpoint [ 140.046571][ T4713] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 140.053705][ T4713] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 140.226435][ T4744] overlayfs: failed to clone upperpath [ 140.280652][ T2896] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 140.310264][ T4748] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.326690][ T4748] EXT4-fs (loop5): 1 truncate cleaned up [ 140.332446][ T4748] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000012,inode_readahead_blks=0x0000000000000020,max_batch_time=0x0000000000000007,,errors=continue [ 140.365031][ T24] audit: type=1400 audit(7113340590.798:1165): avc: denied { append } for pid=4747 comm="syz.5.1252" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.442689][ T4762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 140.452726][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1257'. [ 140.487816][ T4764] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 140.495769][ T4764] EXT4-fs (loop5): Ignoring removed orlov option [ 140.520275][ T4764] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,nomblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,sb=0x0000000000000005,grpjquota=,,errors=continue [ 140.536736][ T2896] usb 2-1: Using ep0 maxpacket: 16 [ 140.768619][ T4766] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3) [ 140.782698][ T4766] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 140.791202][ T4766] F2FS-fs (loop2): Unrecognized mount option "sm" or missing value [ 140.846877][ T2896] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 140.896429][ T2896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.910406][ T2896] usb 2-1: Product: syz [ 140.915826][ T2896] usb 2-1: Manufacturer: syz [ 140.937422][ T2896] usb 2-1: SerialNumber: syz [ 140.956508][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1270'. [ 140.969312][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1270'. [ 141.050314][ T4790] loop5: p1 < > p3 [ 141.054856][ T4790] loop5: p3 size 50361344 extends beyond EOD, truncated [ 141.107157][ T320] udevd[320]: symlink '../../loop2' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:2' failed: Read-only file system [ 141.169398][ T327] udevd[327]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 141.201041][ T301] udevd[301]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 141.213190][ T4790] futex_wake_op: syz.5.1266 tries to shift op by 32; fix this program [ 141.320452][ T4806] EXT4-fs warning (device loop5): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 141.332050][ T4806] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it [ 141.335110][ T301] udevd[301]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 141.343062][ T4806] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1272: Corrupt directory, running e2fsck is recommended [ 141.356319][ T320] udevd[320]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 141.368078][ T301] udevd[301]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 141.377119][ T4806] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 141.390117][ T301] udevd[301]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 141.394161][ T4806] EXT4-fs error (device loop5): ext4_iget_extra_inode:4685: inode #15: comm syz.5.1272: corrupted in-inode xattr [ 141.410631][ T301] udevd[301]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 141.417928][ T4806] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1272: couldn't read orphan inode 15 (err -117) [ 141.433894][ T301] udevd[301]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 141.441038][ T4806] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.noload,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue [ 141.480219][ T301] udevd[301]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 141.492426][ T4806] EXT4-fs (loop5): re-mounted. Opts: auto_da_alloc=0x00000000000000a3,journal_ioprio=0x0000000000000006,block_validity,minixdf,grpjquota=,noinit_itable, [ 141.541110][ T4815] device bridge_slave_0 left promiscuous mode [ 141.547326][ T4815] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.555445][ T4815] device bridge_slave_1 left promiscuous mode [ 141.561558][ T4815] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.581124][ T4815] erofs: Bad value for 'dax' [ 141.641916][ T4815] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 141.658231][ T4815] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 141.667955][ T4815] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 141.782496][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1273'. [ 141.980107][ T2896] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 141.997568][ T2896] usb 2-1: USB disconnect, device number 40 [ 142.098606][ T4852] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4852 comm=syz.2.1285 [ 142.129725][ T4852] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=4852 comm=syz.2.1285 [ 142.194955][ T24] audit: type=1400 audit(7113340593.514:1166): avc: denied { remount } for pid=4857 comm="syz.2.1287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 142.195198][ T4858] syz.2.1287 uses obsolete (PF_INET,SOCK_PACKET) [ 142.258532][ T24] audit: type=1400 audit(7113340593.580:1167): avc: denied { mounton } for pid=4857 comm="syz.2.1287" path="/162/file0" dev="ramfs" ino=30234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 142.313549][ T4858] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 142.328817][ T4858] exfat filesystem being mounted at /162/file0/éq‰Y’3aK supports timestamps until 2107-12-31 (0x10391447f) [ 142.386346][ T4858] 9pnet: Could not find request transport: xen [ 142.392789][ T4855] F2FS-fs (loop5): invalid crc value [ 142.410095][ T4855] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 142.466244][ T4855] F2FS-fs (loop5): Start checkpoint disabled! [ 142.485798][ T4855] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 142.583986][ T24] audit: type=1400 audit(7113340593.879:1168): avc: denied { create } for pid=4870 comm="syz.6.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 142.617884][ T24] audit: type=1400 audit(7113340593.907:1169): avc: denied { read } for pid=4854 comm="syz.5.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.618768][ T4874] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 142.662963][ T4878] fuse: Unknown parameter 'ÿ' [ 143.695339][ T4883] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 143.788127][ T2896] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 143.807865][ T4894] fuse: Bad value for 'fd' [ 143.934988][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1299'. [ 143.945759][ T4905] 9pnet: Insufficient options for proto=fd [ 143.952785][ T4905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4905 comm=syz.6.1299 [ 144.160528][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1303'. [ 144.203635][ T15] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 144.453177][ T4911] F2FS-fs (loop1): invalid crc value [ 144.461194][ T4911] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.470968][ T15] usb 6-1: Using ep0 maxpacket: 8 [ 144.491956][ T4911] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 144.498874][ T4911] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 144.605727][ T24] audit: type=1326 audit(7113340595.769:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="syz.1.1310" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938e2b8dd9 code=0x7ffc0000 [ 144.630774][ T24] audit: type=1326 audit(7113340595.769:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="syz.1.1310" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938e2b8dd9 code=0x7ffc0000 [ 144.655888][ T15] usb 6-1: config 10 has an invalid interface number: 157 but max is 0 [ 144.664271][ T15] usb 6-1: config 10 has no interface number 0 [ 144.670521][ T15] usb 6-1: config 10 interface 157 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 144.682036][ T15] usb 6-1: config 10 interface 157 altsetting 3 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 144.693465][ T15] usb 6-1: config 10 interface 157 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 144.704441][ T15] usb 6-1: config 10 interface 157 has no altsetting 0 [ 144.754091][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 144.769051][ T4946] bridge0: port 3(vlan2) entered blocking state [ 144.775471][ T4946] bridge0: port 3(vlan2) entered forwarding state [ 144.782256][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 144.800742][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 144.809134][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.817680][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 144.826107][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.835411][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.843612][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.852493][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.861072][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.898610][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 144.906828][ T15] usb 6-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=4a.77 [ 144.919469][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.936370][ T15] usb 6-1: Product: syz [ 144.945191][ T15] usb 6-1: Manufacturer: syz [ 144.962164][ T15] usb 6-1: SerialNumber: syz [ 145.512873][ T913] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 145.521373][ T15] hub 6-1:10.157: bad descriptor, ignoring hub [ 145.528550][ T15] hub: probe of 6-1:10.157 failed with error -5 [ 145.561679][ T15] usb 6-1: USB disconnect, device number 32 [ 145.860714][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 145.871506][ T913] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 146.119686][ T4993] netlink: 'syz.6.1331': attribute type 15 has an invalid length. [ 146.277392][ T5002] netlink: 'syz.6.1334': attribute type 1 has an invalid length. [ 146.309748][ T913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.566518][ T913] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 146.575771][ T913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.584013][ T913] usb 2-1: Product: syz [ 146.588646][ T913] usb 2-1: Manufacturer: syz [ 146.593277][ T913] usb 2-1: SerialNumber: syz [ 146.611729][ T5011] device syz_tun entered promiscuous mode [ 146.617658][ T5011] device macsec1 entered promiscuous mode [ 146.624273][ T5011] device syz_tun left promiscuous mode [ 146.631581][ T15] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 146.639478][ T15] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 146.737839][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 147.005310][ T5023] EXT4-fs (loop1): dax option not supported [ 147.015968][ T301] udevd[301]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 147.293288][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 147.357514][ T2894] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 147.529589][ T5037] fuse: Bad value for 'fd' [ 147.548528][ T24] audit: type=1326 audit(7113340598.519:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.6.1348" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 147.574265][ T24] audit: type=1326 audit(7113340598.519:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.6.1348" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 147.599291][ T24] audit: type=1326 audit(7113340598.528:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.6.1348" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 147.624241][ T24] audit: type=1326 audit(7113340598.528:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.6.1348" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 147.649456][ T24] audit: type=1326 audit(7113340598.528:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.6.1348" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 147.674653][ T24] audit: type=1326 audit(7113340598.528:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.6.1348" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 147.699633][ T2894] usb 6-1: Using ep0 maxpacket: 16 [ 147.699704][ T24] audit: type=1326 audit(7113340598.528:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.6.1348" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 147.729690][ T24] audit: type=1326 audit(7113340598.528:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.6.1348" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 147.806964][ T5063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5063 comm=syz.6.1353 [ 147.827913][ T2894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.839400][ T2894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.846212][ T5067] netlink: 'syz.6.1355': attribute type 10 has an invalid length. [ 147.849618][ T2894] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 147.866699][ T2894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.878456][ T2894] usb 6-1: config 0 descriptor?? [ 148.082872][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 148.821337][ T5113] tc_dump_action: action bad kind [ 148.928938][ T913] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 148.934810][ T320] udevd[320]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 148.944787][ T5118] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 148.944787][ T5118] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 148.944787][ T5118] [ 148.952328][ T320] udevd[320]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 148.965117][ T913] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8204 device_setup=1 to enable and report any issues to g@b4.vu [ 148.982019][ T5118] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.004977][ T913] usb 2-1: USB disconnect, device number 42 [ 149.036755][ T5118] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,barrier=0x0000000000000000,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000002,inlinecrypt,noacl,dioread_nolock,min_batch_time=0x7ff [ 149.069712][ T320] udevd[320]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 149.296089][ T320] udevd[320]: symlink '../../loop1' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:1' failed: Read-only file system [ 149.310594][ T5129] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 149.324510][ T2894] usbhid 6-1:0.0: can't add hid device: -71 [ 149.330918][ T2894] usbhid: probe of 6-1:0.0 failed with error -71 [ 149.339894][ T320] udevd[320]: symlink '../../loop1' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:1' failed: Read-only file system [ 149.355342][ T2894] usb 6-1: USB disconnect, device number 33 [ 149.371882][ T5129] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 69: comm syz.1.1373: lblock 8 mapped to illegal pblock 69 (length 1) [ 149.420107][ T5129] EXT4-fs (loop1): Remounting filesystem read-only [ 149.435764][ T5129] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 68: comm syz.1.1373: lblock 7 mapped to illegal pblock 68 (length 1) [ 149.460706][ T5129] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 67: comm syz.1.1373: lblock 6 mapped to illegal pblock 67 (length 1) [ 149.485158][ T5129] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 48: comm syz.1.1373: lblock 0 mapped to illegal pblock 48 (length 1) [ 149.516716][ T5129] EXT4-fs error (device loop1): ext4_acquire_dquot:6232: comm syz.1.1373: Failed to acquire dquot type 0 [ 149.528240][ T5129] EXT4-fs (loop1): 1 orphan inode deleted [ 149.533996][ T5129] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noblock_validity,data_err=ignore,errors=remount-ro,nodiscard,stripe=0x0000000000000001,jqfmt=vfsv1, [ 149.568561][ T5141] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ0xffffffffffffffff" or missing value [ 149.577443][ T5129] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1373: Invalid inode bitmap blk 4 in block_group 0 [ 149.590732][ T5144] xt_ecn: cannot match TCP bits for non-tcp packets [ 149.598172][ T5129] EXT4-fs (loop1): Remounting filesystem read-only [ 149.613822][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:5' failed: Read-only file system [ 149.636255][ T49] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 149.637322][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:5' failed: Read-only file system [ 149.681046][ T5150] fuse: Bad value for 'fd' [ 149.681051][ T5154] fuse: Bad value for 'fd' [ 149.930775][ T5168] netlink: 'syz.0.1384': attribute type 29 has an invalid length. [ 149.939136][ T5168] dummy0: Caught tx_queue_len zero misconfig [ 150.315482][ T2894] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 150.333898][ T5185] loop5: p1 < > p3 < p5 > p4 [ 150.338641][ T5185] loop5: partition table partially beyond EOD, truncated [ 150.347081][ T5185] loop5: p4 size 589824 extends beyond EOD, truncated [ 150.354616][ T5185] loop5: p5 size 131072 extends beyond EOD, truncated [ 150.427408][ T327] udevd[327]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 150.428141][ T301] udevd[301]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 150.524259][ T5201] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1392'. [ 150.533264][ T5201] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1392'. [ 150.615060][ T2894] usb 2-1: Using ep0 maxpacket: 16 [ 150.740166][ T5209] IPv6: Can't replace route, no match found [ 150.758464][ T5209] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.769794][ T5209] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 150.803251][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.947682][ T5211] tipc: Enabling of bearer rejected, failed to enable media [ 150.958450][ T24] kauditd_printk_skb: 72 callbacks suppressed [ 150.958461][ T24] audit: type=1400 audit(7113340601.708:1246): avc: denied { associate } for pid=5210 comm="syz.2.1397" name="file1" dev="tmpfs" ino=960 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ptchown_exec_t:s0" [ 151.035681][ T24] audit: type=1400 audit(7113340601.746:1247): avc: denied { unlink } for pid=283 comm="syz-executor" name="file1" dev="tmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ptchown_exec_t:s0" [ 151.077715][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 151.184669][ T2894] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 151.193894][ T2894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.202347][ T2894] usb 2-1: Product: ëŒî¹³×žç€¨íš°ì©Žà¸®â™¾ä¤©æ®æº¬Ôžê­ªç™˜â·¶uî·¨é²ï”‚龆᭡ٕ [ 151.212131][ T2894] usb 2-1: Manufacturer: 䨰俙䶌ᕄ能윛䤕ᦔꯡé¾ï–›îµ—㖚첽뭖 [ 151.220992][ T2894] usb 2-1: SerialNumber: ꀲ᧙놵녾녉髺ê¼ê¨£æ´¯Ù²Ê à¾¹î‹¹è•±çŒ°à¿•䤶ﷺꄢⲭ語㧨⶿Ꞔ盅葸ߒᡥâ˜ç…‰ã”¢è¡¦í†¶ä¶¥ä•§ç•‡áœ¾ä†ºâ¾žâŠíˆî¿«äƒ‰ìž¯ì¬¤î§¢êµšì†î›³î²»æ´ å•¯è·£éª¼é¨†éž™Õப䑤ê¦ê§¬à¢—à œë¹ì³·ê·¸Ï¡è£ã½ ë޵æ»í—Šé•­ç¥¦ê¤žéµ‹å£’ [ 151.376842][ T5236] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 151.382632][ T5236] pim6reg0: ignored: set checksum enabled [ 151.508721][ T5160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 151.568318][ T5240] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.1408: iget: bad extra_isize 90 (inode size 256) [ 151.585633][ T5240] EXT4-fs (loop5): Remounting filesystem read-only [ 151.600941][ T5240] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1408: error while reading EA inode 11 err=-117 [ 151.619353][ T5240] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.1408: iget: bad extra_isize 90 (inode size 256) [ 151.644427][ T5240] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1408: error while reading EA inode 11 err=-117 [ 151.665836][ T5240] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.1408: iget: bad extra_isize 90 (inode size 256) [ 151.679975][ T5240] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1408: error while reading EA inode 18 err=-117 [ 151.697794][ T2894] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 151.708720][ T5240] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.1408: iget: bad extra_isize 90 (inode size 256) [ 151.722182][ T2894] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 151.743769][ T5240] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1408: error while reading EA inode 18 err=-117 [ 151.759069][ T2894] usb 2-1: USB disconnect, device number 43 [ 151.779685][ T5240] EXT4-fs (loop5): 1 orphan inode deleted [ 151.785667][ T5240] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,noload,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,grpid,noquota,min_batch_time=0x0000000000000003,jqfmt=vfsold, [ 151.814742][ T5240] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1408'. [ 151.823779][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1408'. [ 151.832830][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1408'. [ 151.919249][ T5265] overlayfs: failed to resolve './file2': -2 [ 151.972184][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1416'. [ 152.096997][ T24] audit: type=1326 audit(7113340602.775:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.6.1407" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 152.108087][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1407'. [ 152.153185][ T24] audit: type=1326 audit(7113340602.775:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.6.1407" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 152.178535][ T24] audit: type=1326 audit(7113340602.775:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.6.1407" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 152.216381][ T24] audit: type=1326 audit(7113340602.775:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.6.1407" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 152.252908][ T5286] FAT-fs (loop1): Directory bread(block 64) failed [ 152.259572][ T5286] FAT-fs (loop1): Directory bread(block 65) failed [ 152.266401][ T5286] FAT-fs (loop1): Directory bread(block 66) failed [ 152.273035][ T5286] FAT-fs (loop1): Directory bread(block 67) failed [ 152.280953][ T5286] FAT-fs (loop1): Directory bread(block 68) failed [ 152.287654][ T5286] FAT-fs (loop1): Directory bread(block 69) failed [ 152.294246][ T5286] FAT-fs (loop1): Directory bread(block 70) failed [ 152.301021][ T5286] FAT-fs (loop1): Directory bread(block 71) failed [ 152.307727][ T5286] FAT-fs (loop1): Directory bread(block 72) failed [ 152.314260][ T5286] FAT-fs (loop1): Directory bread(block 73) failed [ 152.323753][ T5286] vfat filesystem being mounted at /167/. supports timestamps until 2107-12-31 (0x10390659a) [ 152.326460][ T24] audit: type=1326 audit(7113340602.775:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.6.1407" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 152.368501][ T24] audit: type=1326 audit(7113340602.775:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.6.1407" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 152.393534][ T24] audit: type=1326 audit(7113340602.775:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.6.1407" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 152.420448][ T5290] attempt to access beyond end of device [ 152.420448][ T5290] loop1: rw=2051, want=1192, limit=256 [ 152.424705][ T2894] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 152.433717][ T24] audit: type=1326 audit(7113340602.775:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.6.1407" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 152.473603][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 152.500075][ T5282] EXT4-fs (loop5): Test dummy encryption mode enabled [ 152.521648][ T5282] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c01c, mo2=0003] [ 152.555676][ T5282] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,bsdgroups,test_dummy_encryption,errors=continue,bsddf,noauto_da_alloc,noblock_validity,,errors=continue [ 152.589841][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 152.777962][ T5307] netlink: 'syz.2.1427': attribute type 4 has an invalid length. [ 153.171352][ T5317] xt_hashlimit: size too large, truncated to 1048576 [ 153.368409][ T5325] fuse: Bad value for 'group_id' [ 154.137894][ T5352] EXT4-fs (loop1): Ignoring removed bh option [ 154.141422][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 154.180684][ T5352] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,dioread_lock, [ 154.209159][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 154.266121][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 154.284087][ T279] EXT4-fs error (device loop1): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /171/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 154.307571][ T279] EXT4-fs (loop1): Remounting filesystem read-only [ 154.314525][ T279] EXT4-fs error (device loop1): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /171/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 154.377495][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 154.456710][ T870] udevd[870]: symlink '../../loop1' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:1' failed: Read-only file system [ 154.474153][ T5363] EXT4-fs (loop1): Invalid want_extra_isize 5 [ 154.525531][ T5367] xt_hashlimit: size too large, truncated to 1048576 [ 154.714961][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 154.732412][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 154.742786][ T5389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.771802][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 154.793031][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 154.805501][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'. [ 155.182685][ T5409] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 155.376456][ T5412] syz.0.1463 (5412): attempted to duplicate a private mapping with mremap. This is not supported. [ 155.673417][ T5424] fuse: Bad value for 'fd' [ 155.963445][ T2894] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 156.262696][ T2894] usb 6-1: device descriptor read/64, error -71 [ 156.733922][ T413] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 156.797324][ T5441] xt_TCPMSS: Only works on TCP SYN packets [ 156.872415][ T2894] usb 6-1: device descriptor read/64, error -71 [ 157.000624][ T2894] usb usb6-port1: attempt power cycle [ 157.024486][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 157.363852][ T413] usb 2-1: config 0 has no interfaces? [ 157.449351][ T413] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 157.458499][ T413] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 157.466659][ T413] usb 2-1: Manufacturer: syz [ 157.470676][ T2894] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 157.474357][ T413] usb 2-1: config 0 descriptor?? [ 157.663148][ T2894] usb 6-1: device descriptor read/8, error -71 [ 157.755619][ T5422] usb usb7: usbfs: process 5422 (syz.1.1465) did not claim interface 0 before use [ 157.772593][ T5422] xt_hashlimit: size too large, truncated to 1048576 [ 157.824551][ T5476] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 157.839116][ T5476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1483'. [ 157.899607][ T24] kauditd_printk_skb: 56 callbacks suppressed [ 157.899617][ T24] audit: type=1400 audit(7113340608.209:1312): avc: denied { create } for pid=5467 comm="syz.6.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 157.973172][ T2894] usb 6-1: device descriptor read/8, error -71 [ 158.077791][ T413] usb 2-1: USB disconnect, device number 44 [ 158.320567][ T2894] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 158.561363][ T2894] usb 6-1: device descriptor read/8, error -71 [ 158.807114][ T2894] usb 6-1: device descriptor read/8, error -71 [ 158.935616][ T2894] usb usb6-port1: unable to enumerate USB device [ 159.760988][ T5501] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 159.769193][ T413] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 159.790353][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system [ 159.804402][ T5501] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 159.845733][ T5501] F2FS-fs (loop5): invalid crc value [ 159.887862][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system [ 159.902650][ T5501] F2FS-fs (loop5): Found nat_bits in checkpoint [ 159.955681][ T5530] /dev/loop0: Can't open blockdev [ 159.977949][ T5501] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 159.988519][ T5501] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 160.044445][ T870] udevd[870]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system [ 160.127357][ T5500] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 160.137195][ T413] usb 2-1: Using ep0 maxpacket: 32 [ 160.145510][ T5500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1489'. [ 160.185725][ T834] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 160.185736][ T834] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 160.199878][ T834] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 160.219637][ T834] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 160.231594][ T834] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 160.251164][ T834] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 160.261034][ T413] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.272718][ T834] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 160.275853][ T834] attempt to access beyond end of device [ 160.275853][ T834] loop5: rw=2049, want=40968, limit=40427 [ 160.287337][ T413] usb 2-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 160.312026][ T413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.325438][ T413] usb 2-1: config 0 descriptor?? [ 160.397848][ T24] audit: type=1400 audit(2000000001.973:1313): avc: denied { nlmsg_read } for pid=5565 comm="syz.2.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.571579][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 160.757006][ T5568] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.764620][ T5568] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.772036][ T5568] device bridge_slave_0 entered promiscuous mode [ 160.781547][ T5568] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.788632][ T5568] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.796511][ T5568] device bridge_slave_1 entered promiscuous mode [ 160.854873][ T5568] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.861944][ T5568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.869188][ T5568] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.876227][ T5568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.914070][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.930789][ T849] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.948941][ T849] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.982568][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.998266][ T849] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.005341][ T849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.018465][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.027254][ T849] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.034319][ T849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.041901][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.049968][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.062966][ T5596] device veth0 entered promiscuous mode [ 161.072193][ T5596] device veth0 left promiscuous mode [ 161.084631][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.099808][ T5568] device veth0_vlan entered promiscuous mode [ 161.116694][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.124977][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.137918][ T849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.230219][ T49] device veth1_macvtap left promiscuous mode [ 161.236659][ T49] device veth0_vlan left promiscuous mode [ 161.376992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.385033][ T413] usbhid 2-1:0.0: can't add hid device: -71 [ 161.390083][ T5568] device veth1_macvtap entered promiscuous mode [ 161.392563][ T413] usbhid: probe of 2-1:0.0 failed with error -71 [ 161.402373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.413336][ T413] usb 2-1: USB disconnect, device number 45 [ 161.424117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.480833][ T5622] netlink: 'syz.6.1525': attribute type 21 has an invalid length. [ 161.566447][ T5626] FAT-fs (loop7): Unrecognized mount option "check=str)¸;Ooict" or missing value [ 161.581181][ T870] udevd[870]: symlink '../../loop7' '/dev/disk/by-label/SYZKALLER.tmp-b7:7' failed: Read-only file system [ 161.593639][ T870] udevd[870]: symlink '../../loop7' '/dev/disk/by-uuid/8AF3-4683.tmp-b7:7' failed: Read-only file system [ 161.892578][ T5656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1534'. [ 161.917980][ T5] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 162.217339][ T2894] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 162.356320][ T5] usb 8-1: unable to get BOS descriptor or descriptor too short [ 162.399092][ T5] usb 8-1: not running at top speed; connect to a high speed hub [ 162.486008][ T5] usb 8-1: config 172 has an invalid interface number: 25 but max is 0 [ 162.494359][ T5] usb 8-1: config 172 has no interface number 0 [ 162.500765][ T5] usb 8-1: config 172 interface 25 has no altsetting 0 [ 162.561139][ T24] audit: type=1326 audit(2000000004.003:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.1542" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5beadd9 code=0x7ffc0000 [ 162.586258][ T24] audit: type=1326 audit(2000000004.003:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.1542" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5beadd9 code=0x7ffc0000 [ 162.611510][ T24] audit: type=1326 audit(2000000004.012:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.1542" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faab5beadd9 code=0x7ffc0000 [ 162.638094][ T24] audit: type=1326 audit(2000000004.012:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.1542" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5beadd9 code=0x7ffc0000 [ 162.663313][ T24] audit: type=1326 audit(2000000004.012:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.1542" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5beadd9 code=0x7ffc0000 [ 162.687748][ T5] usb 8-1: New USB device found, idVendor=03f0, idProduct=4439, bcdDevice=3c.ff [ 162.688605][ T24] audit: type=1326 audit(2000000004.012:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.1542" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faab5beadd9 code=0x7ffc0000 [ 162.706578][ T5] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.723630][ T24] audit: type=1326 audit(2000000004.012:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.1542" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5beadd9 code=0x7ffc0000 [ 162.731118][ T5] usb 8-1: Product: syz [ 162.756380][ T2894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.759889][ T5] usb 8-1: Manufacturer: syz [ 162.767349][ T24] audit: type=1326 audit(2000000004.012:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.1542" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5beadd9 code=0x7ffc0000 [ 162.772226][ T5] usb 8-1: SerialNumber: syz [ 162.826707][ T2894] usb 2-1: not running at top speed; connect to a high speed hub [ 162.933678][ T2894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.943853][ T2894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.596766][ T5] pl2303 8-1:172.25: required endpoints missing [ 163.607825][ T5] usb 8-1: USB disconnect, device number 2 [ 163.692627][ T2894] usb 2-1: string descriptor 0 read error: -22 [ 163.698953][ T2894] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.708017][ T2894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.768172][ T2894] usb 2-1: 0:2 : does not exist [ 164.269906][ T2893] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 164.537164][ T2893] usb 8-1: Using ep0 maxpacket: 16 [ 164.665507][ T2893] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 164.673746][ T2893] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.684121][ T2893] usb 8-1: config 0 has no interface number 0 [ 164.857939][ T2893] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 164.866968][ T2893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.877260][ T2893] usb 8-1: Product: syz [ 164.881823][ T2893] usb 8-1: Manufacturer: syz [ 164.886612][ T2893] usb 8-1: SerialNumber: syz [ 164.891754][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 164.891763][ T24] audit: type=1326 audit(2000000006.182:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.0.1555" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faab5beadd9 code=0x0 [ 164.929622][ T5723] SELinux: duplicate or incompatible mount options [ 164.931324][ T2893] usb 8-1: config 0 descriptor?? [ 164.976056][ T2893] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 164.983302][ T2893] uvcvideo: No valid video chain found. [ 165.157342][ T2894] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 165.168372][ T24] audit: type=1326 audit(2000000006.435:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.6.1560" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 165.193981][ T24] audit: type=1326 audit(2000000006.444:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.6.1560" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 165.201148][ T2896] usb 8-1: USB disconnect, device number 3 [ 165.218976][ T24] audit: type=1326 audit(2000000006.444:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.6.1560" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 165.249733][ T24] audit: type=1326 audit(2000000006.444:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.6.1560" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 165.277333][ T24] audit: type=1326 audit(2000000006.444:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.6.1560" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 165.302525][ T24] audit: type=1326 audit(2000000006.444:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.6.1560" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 165.327600][ T24] audit: type=1326 audit(2000000006.444:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.6.1560" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c5e67a60e code=0x7ffc0000 [ 165.353766][ T24] audit: type=1326 audit(2000000006.444:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.6.1560" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 165.379214][ T24] audit: type=1326 audit(2000000006.463:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.6.1560" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5e6b9dd9 code=0x7ffc0000 [ 165.404376][ T2894] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 165.426049][ T2894] usb 2-1: USB disconnect, device number 46 [ 165.991096][ T2894] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 166.005524][ T5759] EXT4-fs (loop7): Ignoring removed bh option [ 166.030976][ T5759] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue [ 166.041998][ T5759] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.063056][ T5759] EXT4-fs (loop7): shut down requested (2) [ 166.069532][ T5759] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 166.078887][ T5759] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 166.098747][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1570'. [ 166.247706][ T2894] usb 2-1: Using ep0 maxpacket: 16 [ 166.444424][ T2894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.463488][ T2894] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 166.464516][ T5785] overlayfs: missing 'lowerdir' [ 166.479653][ T5777] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 166.496083][ T5777] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=880ee028, mo2=0002] [ 166.504674][ T5777] EXT4-fs (loop7): orphan cleanup on readonly fs [ 166.511170][ T5777] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #11: comm syz.7.1571: invalid indirect mapped block 2185560079 (level 1) [ 166.525478][ T5777] EXT4-fs (loop7): Remounting filesystem read-only [ 166.532039][ T5777] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1571: bg 0: block 361: padding at end of block bitmap is not set [ 166.576859][ T5777] EXT4-fs error (device loop7) in ext4_mb_clear_bb:5654: Corrupt filesystem [ 166.586349][ T5777] EXT4-fs (loop7): 1 truncate cleaned up [ 166.592018][ T5777] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,nogrpid,errors=remount-ro,errors=remount-ro,noblock_validity [ 166.612739][ T2894] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.621892][ T2894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.630588][ T2894] usb 2-1: config 0 descriptor?? [ 166.636446][ T5793] 9pnet: Insufficient options for proto=fd [ 167.157918][ T5813] erofs: (device loop7): mounted with root inode @ nid 36. [ 168.361537][ T5825] fuse: Bad value for 'fd' [ 168.379809][ T5827] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5827 comm=syz.0.1587 [ 168.414437][ T5834] fuse: Bad value for 'fd' [ 168.536900][ T5803] netlink: 212 bytes leftover after parsing attributes in process `syz.6.1579'. [ 168.560587][ T5842] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 168.604043][ T5834] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 168.611040][ T5834] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 168.613633][ T5855] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1594'. [ 168.620089][ T5834] F2FS-fs (loop7): invalid crc value [ 168.650194][ T5834] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 168.675918][ T5834] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 168.683035][ T5834] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 168.704375][ T5568] attempt to access beyond end of device [ 168.704375][ T5568] loop7: rw=2049, want=45104, limit=40427 [ 168.803636][ T5866] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 168.828740][ T5866] EXT4-fs (loop7): 1 truncate cleaned up [ 168.834490][ T5866] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000007,journal_dev=0x0000000000000001,debug_want_extra_isize=0x000000000000006a,auto_da_alloc=0x0000000000008001,errors=remount-ro,nouid32, [ 168.920431][ T2894] usbhid 2-1:0.0: can't add hid device: -71 [ 168.926422][ T2894] usbhid: probe of 2-1:0.0 failed with error -71 [ 168.934313][ T870] udevd[870]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.956271][ T2894] usb 2-1: USB disconnect, device number 47 [ 168.988212][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1600'. [ 169.177331][ T5894] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.186486][ T5894] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 169.195893][ T5894] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 169.205312][ T5894] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 169.213487][ T5894] System zones: 0-2, 18-18, 34-35 [ 169.220897][ T5894] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,,errors=continue [ 169.422798][ T2894] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 169.551563][ T5908] fuse: Bad value for 'fd' [ 169.850445][ T2894] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.861565][ T2894] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 169.871572][ T2894] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 169.880780][ T2894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.981722][ T5931] EXT4-fs (loop7): Ignoring removed oldalloc option [ 169.991663][ T5931] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1615: bg 0: block 473: padding at end of block bitmap is not set [ 170.006223][ T5931] EXT4-fs error (device loop7) in ext4_mb_clear_bb:5654: Corrupt filesystem [ 170.015127][ T5931] EXT4-fs (loop7): 1 orphan inode deleted [ 170.020890][ T5931] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,oldalloc,nodelalloc,,errors=continue [ 170.032467][ T5931] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.136482][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1615'. [ 170.151778][ T5898] udc-core: couldn't find an available UDC or it's busy [ 170.158788][ T5898] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 170.168185][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 170.203341][ T2894] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 170.210989][ T2894] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input17 [ 170.220642][ T2894] input: failed to attach handler kbd to device input17, error: -5 [ 170.230471][ T2894] usb 2-1: USB disconnect, device number 48 [ 171.047789][ T305] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 171.218818][ T413] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 171.304334][ T305] usb 2-1: Using ep0 maxpacket: 16 [ 171.432715][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.443886][ T305] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.456994][ T305] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.466228][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.474609][ T24] kauditd_printk_skb: 184 callbacks suppressed [ 171.474621][ T24] audit: type=1326 audit(2000000012.337:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.2.1624" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8267a46dd9 code=0x7ffc0000 [ 171.478115][ T305] usb 2-1: config 0 descriptor?? [ 171.486372][ T24] audit: type=1326 audit(2000000012.347:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.2.1624" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8267a46dd9 code=0x7ffc0000 [ 171.535723][ T24] audit: type=1326 audit(2000000012.375:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.2.1624" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f8267a46dd9 code=0x7ffc0000 [ 171.561004][ T24] audit: type=1326 audit(2000000012.375:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.2.1624" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8267a46dd9 code=0x7ffc0000 [ 171.585984][ T24] audit: type=1326 audit(2000000012.375:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.2.1624" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8267a46dd9 code=0x7ffc0000 [ 171.610956][ T24] audit: type=1326 audit(2000000012.375:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.2.1624" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8267a46dd9 code=0x7ffc0000 [ 171.636117][ T24] audit: type=1326 audit(2000000012.375:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.2.1624" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8267a46dd9 code=0x7ffc0000 [ 171.661270][ T24] audit: type=1326 audit(2000000012.375:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.2.1624" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8267a46dd9 code=0x7ffc0000 [ 171.678557][ T413] usb 8-1: unable to get BOS descriptor or descriptor too short [ 171.686609][ T24] audit: type=1326 audit(2000000012.375:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.2.1624" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8267a46dd9 code=0x7ffc0000 [ 171.719640][ T24] audit: type=1326 audit(2000000012.375:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.2.1624" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8267a46dd9 code=0x7ffc0000 [ 171.785338][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1628'. [ 171.795214][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.806892][ T413] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 171.828286][ T413] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 171.852327][ T413] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 171.856961][ T5975] netlink: 'syz.2.1631': attribute type 4 has an invalid length. [ 171.879426][ T5976] netlink: 'syz.2.1631': attribute type 4 has an invalid length. [ 171.936634][ T5998] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 171.946620][ T5998] overlayfs: missing 'lowerdir' [ 171.971722][ T6006] incfs: Error accessing: ./file0. [ 171.977084][ T6006] incfs: mount failed -2 [ 172.127607][ T413] usb 8-1: string descriptor 0 read error: -22 [ 172.133930][ T413] usb 8-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 172.143016][ T413] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.192598][ T413] usb 8-1: low speed audio streaming not supported [ 172.199111][ T413] usb 8-1: low speed audio streaming not supported [ 172.406143][ T5952] fuse: Invalid rootmode [ 172.495809][ T5952] EXT4-fs (loop7): Test dummy encryption mode enabled [ 172.504388][ T5952] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 172.518642][ T5952] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.730791][ T49] tipc: Subscription rejected, illegal request [ 172.843803][ T413] usb 8-1: 6:0: cannot get min/max values for control 4 (id 6) [ 172.932278][ T413] usb 8-1: USB disconnect, device number 4 [ 173.154543][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 173.439159][ T6061] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1659'. [ 173.493475][ T6067] fuse: Bad value for 'fd' [ 173.527985][ T413] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 173.795230][ T413] usb 8-1: Using ep0 maxpacket: 8 [ 174.043220][ T6118] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 174.071333][ T6118] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.083750][ T305] usbhid 2-1:0.0: can't add hid device: -71 [ 174.090480][ T305] usbhid: probe of 2-1:0.0 failed with error -71 [ 174.096973][ T413] usb 8-1: New USB device found, idVendor=0582, idProduct=0040, bcdDevice= 0.40 [ 174.110439][ T413] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.127119][ T305] usb 2-1: USB disconnect, device number 49 [ 174.137331][ T413] usb 8-1: Product: syz [ 174.148193][ T413] usb 8-1: Manufacturer: syz [ 174.155688][ T6118] EXT4-fs error (device loop1): ext4_iget_extra_inode:4685: inode #15: comm syz.1.1670: corrupted in-inode xattr [ 174.174302][ T413] usb 8-1: SerialNumber: syz [ 174.183462][ T6118] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1670: couldn't read orphan inode 15 (err -117) [ 174.202380][ T6118] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x000000000000003b,lazytime,dioread_lock,dioread_nolock,journal_dev=0x0000000000000007,jqfmt=vfsv0,lazytime,inode_readahead_blks=0x0000000000000040,barrier=0x0000000000000000,resuid=0x0000000000000000,,errors=continue [ 174.683342][ T413] snd-usb-audio: probe of 8-1:1.0 failed with error -2 [ 174.704005][ T413] usb 8-1: USB disconnect, device number 5 [ 174.732532][ T6138] overlayfs: unrecognized mount option "/" or missing value [ 174.786425][ T6140] overlayfs: './file0' not a directory [ 174.975668][ T6153] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1680'. [ 174.985555][ T6153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1680'. [ 175.127834][ T6159] xt_TCPMSS: Only works on TCP SYN packets [ 175.655448][ T2894] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 176.185335][ T6112] ================================================================== [ 176.193440][ T6112] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9e0/0xac0 [ 176.201610][ T6112] Read of size 4 at addr ffff888113b1a470 by task syz.2.1668/6112 [ 176.209403][ T6112] [ 176.211743][ T6112] CPU: 1 PID: 6112 Comm: syz.2.1668 Tainted: G W syzkaller #0 [ 176.220482][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.230540][ T6112] Call Trace: [ 176.233916][ T6112] __dump_stack+0x21/0x24 [ 176.238243][ T6112] dump_stack_lvl+0x1a7/0x208 [ 176.242902][ T6112] ? show_regs_print_info+0x18/0x18 [ 176.248072][ T6112] ? thaw_kernel_threads+0x220/0x220 [ 176.253332][ T6112] print_address_description+0x7f/0x2c0 [ 176.258856][ T6112] ? unaccount_page_cache_page+0x9e0/0xac0 [ 176.264636][ T6112] kasan_report+0xe2/0x130 [ 176.269027][ T6112] ? unaccount_page_cache_page+0x9e0/0xac0 [ 176.274807][ T6112] __asan_report_load4_noabort+0x14/0x20 [ 176.280411][ T6112] unaccount_page_cache_page+0x9e0/0xac0 [ 176.286018][ T6112] __delete_from_page_cache+0xc3/0x470 [ 176.291449][ T6112] ? memset+0x35/0x40 [ 176.295405][ T6112] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 176.302403][ T6112] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 176.307836][ T6112] ? _raw_spin_lock+0xf0/0xf0 [ 176.312492][ T6112] ? __kasan_check_read+0x11/0x20 [ 176.317489][ T6112] ? workingset_eviction+0x3dc/0x940 [ 176.322748][ T6112] ? __kasan_check_read+0x11/0x20 [ 176.327747][ T6112] __remove_mapping+0x562/0x690 [ 176.332571][ T6112] shrink_page_list+0x21a9/0x4250 [ 176.337584][ T6112] ? __this_cpu_preempt_check+0x13/0x20 [ 176.343139][ T6112] ? reclaim_clean_pages_from_list+0x750/0x750 [ 176.349275][ T6112] ? shrink_inactive_list+0xef0/0xef0 [ 176.354627][ T6112] ? lru_add_drain_cpu+0x580/0x6e0 [ 176.359733][ T6112] ? queued_spin_lock_slowpath+0x47/0x50 [ 176.365358][ T6112] ? __count_memcg_events+0x89/0x210 [ 176.370623][ T6112] shrink_inactive_list+0x532/0xef0 [ 176.375801][ T6112] ? arch_stack_walk+0xee/0x140 [ 176.380633][ T6112] ? should_run_aging+0x440/0x440 [ 176.385646][ T6112] ? blk_flush_plug_list+0x40b/0x450 [ 176.390910][ T6112] ? stack_trace_snprint+0xf0/0xf0 [ 176.396000][ T6112] ? __kasan_check_read+0x11/0x20 [ 176.401009][ T6112] ? __kasan_check_read+0x11/0x20 [ 176.406031][ T6112] ? lruvec_lru_size+0x230/0x250 [ 176.410942][ T6112] ? blk_start_plug+0x5a/0x170 [ 176.415678][ T6112] shrink_lruvec+0x1235/0x2860 [ 176.420434][ T6112] ? generic_perform_write+0x2ce/0x540 [ 176.425890][ T6112] ? __init_rwsem+0x1c0/0x1c0 [ 176.430551][ T6112] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 176.436077][ T6112] ? shrink_slab+0x65f/0x810 [ 176.440646][ T6112] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 176.446253][ T6112] ? drop_slab_node+0x140/0x140 [ 176.451101][ T6112] ? __kasan_check_read+0x11/0x20 [ 176.456194][ T6112] ? inactive_is_low+0x183/0x300 [ 176.461111][ T6112] shrink_node+0xf0c/0x2690 [ 176.465601][ T6112] ? ktime_get+0x10e/0x140 [ 176.469998][ T6112] do_try_to_free_pages+0x603/0x1590 [ 176.475274][ T6112] ? try_to_free_pages+0xc20/0xc20 [ 176.480363][ T6112] ? sched_clock_cpu+0x1b/0x3d0 [ 176.485191][ T6112] try_to_free_mem_cgroup_pages+0x261/0x610 [ 176.491057][ T6112] ? shrink_lruvec+0x2860/0x2860 [ 176.495972][ T6112] ? _raw_spin_unlock_irq+0x4e/0x70 [ 176.501159][ T6112] ? psi_memstall_enter+0xff/0x150 [ 176.506247][ T6112] try_charge+0x43e/0x1500 [ 176.510639][ T6112] ? __memcg_kmem_charge+0x150/0x150 [ 176.515898][ T6112] ? get_page_from_freelist+0x223b/0x23d0 [ 176.521615][ T6112] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 176.527141][ T6112] __mem_cgroup_charge+0x14c/0x6d0 [ 176.532235][ T6112] __add_to_page_cache_locked+0x1fe/0x9a0 [ 176.537951][ T6112] ? __alloc_pages_nodemask+0x290/0x620 [ 176.543480][ T6112] ? put_page+0xd0/0xd0 [ 176.547618][ T6112] ? workingset_activation+0x250/0x250 [ 176.553053][ T6112] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 176.558577][ T6112] ? find_get_entry+0x37b/0x3e0 [ 176.563404][ T6112] ? page_cache_prev_miss+0x270/0x290 [ 176.568751][ T6112] add_to_page_cache_lru+0xa7/0x210 [ 176.573925][ T6112] pagecache_get_page+0x700/0x930 [ 176.578924][ T6112] grab_cache_page_write_begin+0x59/0xb0 [ 176.584527][ T6112] simple_write_begin+0x36/0x290 [ 176.589436][ T6112] generic_perform_write+0x2ce/0x540 [ 176.594696][ T6112] ? atime_needs_update+0x5b0/0x5b0 [ 176.599869][ T6112] ? grab_cache_page_write_begin+0xb0/0xb0 [ 176.605667][ T6112] ? file_remove_privs+0x5b0/0x5b0 [ 176.610763][ T6112] ? __kasan_check_write+0x14/0x20 [ 176.615852][ T6112] ? down_write+0xb2/0x120 [ 176.620248][ T6112] __generic_file_write_iter+0x24b/0x480 [ 176.625856][ T6112] ? generic_write_checks+0x3d4/0x480 [ 176.631203][ T6112] generic_file_write_iter+0xa9/0x1d0 [ 176.636723][ T6112] __kernel_write+0x535/0x910 [ 176.641373][ T6112] ? vfs_read+0xa60/0xa60 [ 176.645676][ T6112] ? populate_vma_page_range+0xf0/0xf0 [ 176.651115][ T6112] ? __kasan_check_write+0x14/0x20 [ 176.656201][ T6112] dump_emit+0x246/0x370 [ 176.660417][ T6112] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 176.665853][ T6112] dump_user_range+0x6a/0x1a0 [ 176.670501][ T6112] elf_core_dump+0x2866/0x2cc0 [ 176.675239][ T6112] ? load_elf_binary+0x28e0/0x28e0 [ 176.680933][ T6112] ? __fsnotify_parent+0x6db/0x7c0 [ 176.686022][ T6112] ? __inode_attach_wb+0x55a/0x6d0 [ 176.691113][ T6112] ? do_truncate+0x1c6/0x240 [ 176.695676][ T6112] ? putname+0xfe/0x150 [ 176.699804][ T6112] ? __kasan_check_read+0x11/0x20 [ 176.704819][ T6112] ? __ia32_sys_unshare+0x40/0x40 [ 176.709821][ T6112] do_coredump+0x1ba3/0x28e0 [ 176.714391][ T6112] ? simple_acl_create+0x1c0/0x1c0 [ 176.719562][ T6112] ? debug_smp_processor_id+0x17/0x20 [ 176.724910][ T6112] ? kmem_cache_free+0x100/0x2d0 [ 176.729822][ T6112] ? ____kasan_slab_free+0x130/0x160 [ 176.735083][ T6112] ? get_signal+0xb98/0x12e0 [ 176.739648][ T6112] ? kmem_cache_free+0x100/0x2d0 [ 176.744566][ T6112] get_signal+0xf23/0x12e0 [ 176.748959][ T6112] arch_do_signal_or_restart+0xe2/0x11d0 [ 176.754565][ T6112] ? force_sig_fault+0xd7/0x130 [ 176.759389][ T6112] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 176.764997][ T6112] ? __bad_area_nosemaphore+0x420/0x420 [ 176.770512][ T6112] ? do_user_addr_fault+0x779/0xde0 [ 176.775684][ T6112] ? __bad_area_nosemaphore+0x2b0/0x420 [ 176.781205][ T6112] exit_to_user_mode_loop+0xa2/0xe0 [ 176.786378][ T6112] exit_to_user_mode_prepare+0x76/0xa0 [ 176.791812][ T6112] irqentry_exit_to_user_mode+0x9/0x10 [ 176.797241][ T6112] irqentry_exit+0x12/0x60 [ 176.801652][ T6112] exc_page_fault+0x67/0xc0 [ 176.806125][ T6112] ? asm_exc_page_fault+0x8/0x30 [ 176.811053][ T6112] asm_exc_page_fault+0x1e/0x30 [ 176.815874][ T6112] RIP: 0033:0x7f82678fc877 [ 176.820267][ T6112] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 40 1b 00 48 8d 35 c4 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 176.839842][ T6112] RSP: 002b:00007f8266482120 EFLAGS: 00010202 [ 176.845882][ T6112] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8267a46dd9 [ 176.853828][ T6112] RDX: 00007f8266482140 RSI: 00007f8266482270 RDI: 000000000000000b [ 176.861774][ T6112] RBP: 00007f8267adcd69 R08: 0000000000000000 R09: 0000000000000000 [ 176.869720][ T6112] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 176.877666][ T6112] R13: 00007f8267cc0038 R14: 00007f8267cbffa0 R15: 00007ffdac8443c8 [ 176.885614][ T6112] [ 176.887918][ T6112] Allocated by task 283: [ 176.892136][ T6112] __kasan_slab_alloc+0xbd/0xf0 [ 176.896967][ T6112] slab_post_alloc_hook+0x5d/0x2f0 [ 176.902057][ T6112] kmem_cache_alloc+0x162/0x2d0 [ 176.906880][ T6112] getname_flags+0xb9/0x500 [ 176.911353][ T6112] user_path_at_empty+0x2f/0x50 [ 176.916176][ T6112] vfs_statx+0x10a/0x530 [ 176.920386][ T6112] __se_sys_newfstatat+0x10e/0x3d0 [ 176.925473][ T6112] __x64_sys_newfstatat+0x9b/0xb0 [ 176.930469][ T6112] do_syscall_64+0x31/0x40 [ 176.934858][ T6112] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 176.940721][ T6112] [ 176.943023][ T6112] Freed by task 283: [ 176.946892][ T6112] kasan_set_track+0x4a/0x70 [ 176.951451][ T6112] kasan_set_free_info+0x23/0x40 [ 176.956367][ T6112] ____kasan_slab_free+0x125/0x160 [ 176.961450][ T6112] __kasan_slab_free+0x11/0x20 [ 176.966190][ T6112] slab_free_freelist_hook+0xc5/0x190 [ 176.971531][ T6112] kmem_cache_free+0x100/0x2d0 [ 176.976265][ T6112] filename_lookup+0x4b3/0x6a0 [ 176.981001][ T6112] user_path_at_empty+0x43/0x50 [ 176.985819][ T6112] vfs_statx+0x10a/0x530 [ 176.990029][ T6112] __se_sys_newfstatat+0x10e/0x3d0 [ 176.995114][ T6112] __x64_sys_newfstatat+0x9b/0xb0 [ 177.000111][ T6112] do_syscall_64+0x31/0x40 [ 177.004509][ T6112] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 177.010369][ T6112] [ 177.012672][ T6112] The buggy address belongs to the object at ffff888113b1a200 [ 177.012672][ T6112] which belongs to the cache names_cache of size 4096 [ 177.026781][ T6112] The buggy address is located 624 bytes inside of [ 177.026781][ T6112] 4096-byte region [ffff888113b1a200, ffff888113b1b200) [ 177.040104][ T6112] The buggy address belongs to the page: [ 177.045711][ T6112] page:ffffea00044ec600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113b18 [ 177.055912][ T6112] head:ffffea00044ec600 order:3 compound_mapcount:0 compound_pincount:0 [ 177.064203][ T6112] flags: 0x4000000000010200(slab|head) [ 177.069646][ T6112] raw: 4000000000010200 ffffea0004578000 0000000200000002 ffff88810018ad80 [ 177.078208][ T6112] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 177.086940][ T6112] page dumped because: kasan: bad access detected [ 177.093326][ T6112] page_owner tracks the page as allocated [ 177.099020][ T6112] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 301, ts 44145037924, free_ts 44101659862 [ 177.119385][ T6112] prep_new_page+0x179/0x180 [ 177.123945][ T6112] get_page_from_freelist+0x223b/0x23d0 [ 177.129550][ T6112] __alloc_pages_nodemask+0x290/0x620 [ 177.134892][ T6112] new_slab+0x84/0x3f0 [ 177.138933][ T6112] ___slab_alloc+0x2a6/0x450 [ 177.143495][ T6112] __slab_alloc+0x63/0xa0 [ 177.147795][ T6112] kmem_cache_alloc+0x1ac/0x2d0 [ 177.152616][ T6112] getname_flags+0xb9/0x500 [ 177.157091][ T6112] getname+0x19/0x20 [ 177.160969][ T6112] do_sys_openat2+0xde/0x750 [ 177.165529][ T6112] __x64_sys_openat+0x136/0x160 [ 177.170437][ T6112] do_syscall_64+0x31/0x40 [ 177.174827][ T6112] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 177.180688][ T6112] page last free stack trace: [ 177.185336][ T6112] __free_pages_ok+0x80b/0x830 [ 177.190068][ T6112] __free_pages+0xd8/0x3b0 [ 177.194452][ T6112] __free_slab+0xcf/0x190 [ 177.198753][ T6112] discard_slab+0x29/0x40 [ 177.203061][ T6112] __slab_free+0x313/0x3a0 [ 177.207449][ T6112] ___cache_free+0x10e/0x130 [ 177.212012][ T6112] qlink_free+0x50/0x90 [ 177.216138][ T6112] qlist_free_all+0x5f/0xb0 [ 177.220739][ T6112] kasan_quarantine_reduce+0x14a/0x160 [ 177.226178][ T6112] __kasan_slab_alloc+0x2f/0xf0 [ 177.231017][ T6112] slab_post_alloc_hook+0x5d/0x2f0 [ 177.236210][ T6112] kmem_cache_alloc+0x162/0x2d0 [ 177.241041][ T6112] getname_flags+0xb9/0x500 [ 177.245520][ T6112] user_path_at_empty+0x2f/0x50 [ 177.250367][ T6112] do_readlinkat+0xd9/0x490 [ 177.254844][ T6112] __x64_sys_readlink+0x7f/0x90 [ 177.259662][ T6112] [ 177.261977][ T6112] Memory state around the buggy address: [ 177.267579][ T6112] ffff888113b1a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.275610][ T6112] ffff888113b1a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.283647][ T6112] >ffff888113b1a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.291677][ T6112] ^ [ 177.299361][ T6112] ffff888113b1a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.307393][ T6112] ffff888113b1a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.315422][ T6112] ================================================================== [ 177.323538][ T6112] Disabling lock debugging due to kernel taint [ 177.490874][ T6158] syz.2.1681 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 177.564645][ T6158] CPU: 0 PID: 6158 Comm: syz.2.1681 Tainted: G B W syzkaller #0 [ 177.573429][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.583480][ T6158] Call Trace: [ 177.586771][ T6158] __dump_stack+0x21/0x24 [ 177.591097][ T6158] dump_stack_lvl+0x1a7/0x208 [ 177.595773][ T6158] ? show_regs_print_info+0x18/0x18 [ 177.600979][ T6158] ? ___ratelimit+0x3de/0x560 [ 177.605674][ T6158] ? __kasan_check_write+0x14/0x20 [ 177.610789][ T6158] ? _raw_spin_lock+0x94/0xf0 [ 177.615464][ T6158] dump_stack+0x15/0x1c [ 177.619618][ T6158] dump_header+0xdd/0x650 [ 177.623946][ T6158] oom_kill_process+0x1fa/0x2c0 [ 177.628791][ T6158] out_of_memory+0x93f/0xd20 [ 177.633380][ T6158] ? unregister_oom_notifier+0x20/0x20 [ 177.638835][ T6158] ? mutex_lock_killable+0x92/0xf0 [ 177.643947][ T6158] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 177.650452][ T6158] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 177.656008][ T6158] ? mem_cgroup_oom_trylock+0x350/0x350 [ 177.661558][ T6158] ? _raw_spin_trylock_bh+0x150/0x150 [ 177.666933][ T6158] ? _raw_spin_unlock+0x4d/0x70 [ 177.671785][ T6158] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 177.676156][ T2894] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 177.677411][ T6158] try_charge+0xf69/0x1500 [ 177.677425][ T6158] ? __memcg_kmem_charge+0x150/0x150 [ 177.677434][ T6158] ? __alloc_pages_nodemask+0x290/0x620 [ 177.677444][ T6158] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 177.677452][ T6158] __mem_cgroup_charge+0x14c/0x6d0 [ 177.677463][ T6158] wp_page_copy+0x28d/0x15f0 [ 177.677473][ T6158] ? _raw_spin_unlock+0x4d/0x70 [ 177.677484][ T6158] ? _raw_spin_unlock+0x4d/0x70 [ 177.677500][ T6158] ? do_swap_page+0x1917/0x1ea0 [ 177.691200][ T2894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.696162][ T6158] ? trace_spf_pte_lock+0x110/0x110 [ 177.696181][ T6158] do_wp_page+0x9a6/0xc80 [ 177.712057][ T2894] usb 2-1: Product: syz [ 177.712328][ T6158] handle_pte_fault+0xac1/0x3750 [ 177.721517][ T2894] usb 2-1: Manufacturer: syz [ 177.721725][ T6158] handle_mm_fault+0xf81/0x1710 [ 177.732290][ T2894] usb 2-1: SerialNumber: syz [ 177.739329][ T6158] ? can_reuse_spf_vma+0xe0/0xe0 [ 177.739349][ T6158] ? __kasan_check_write+0x14/0x20 [ 177.781842][ T6158] ? down_read_trylock+0x106/0x160 [ 177.786954][ T6158] ? __kasan_check_write+0x14/0x20 [ 177.792066][ T6158] ? can_reuse_spf_vma+0xc8/0xe0 [ 177.797004][ T6158] do_user_addr_fault+0x5a1/0xde0 [ 177.802065][ T6158] ? do_kern_addr_fault+0x80/0x80 [ 177.807096][ T6158] ? debug_smp_processor_id+0x17/0x20 [ 177.812466][ T6158] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 177.818532][ T6158] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 177.824175][ T6158] exc_page_fault+0x5a/0xc0 [ 177.828680][ T6158] ? asm_exc_page_fault+0x8/0x30 [ 177.833623][ T6158] asm_exc_page_fault+0x1e/0x30 [ 177.838467][ T6158] RIP: 0033:0x7f82679147be [ 177.842882][ T6158] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 f6 d5 3a 00 85 c0 0f 8e 53 fd ff ff 6d 7d fe ff 49 39 c4 73 88 48 8d 1d d1 b7 3a 00 83 3d d6 d5 3a [ 177.862481][ T6158] RSP: 002b:00007ffdac844530 EFLAGS: 00010202 [ 177.868542][ T6158] RAX: 0000000000000001 RBX: 00007f8267cc1da0 RCX: 0000555576e3a808 [ 177.876509][ T6158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.884477][ T6158] RBP: 00007f8267cc1da0 R08: 0000000000000000 R09: 0000000000000000 [ 177.892446][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000290ba [ 177.900412][ T6158] R13: 00007f8267cc018c R14: 0000000000029088 R15: 00007f8267cc0180 [ 177.961505][ T6158] memory: usage 307200kB, limit 307200kB, failcnt 2077 [ 177.968464][ T6158] memory+swap: usage 315812kB, limit 9007199254740988kB, failcnt 0 [ 177.976423][ T6158] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 177.983338][ T6158] Memory cgroup stats for /syz2: [ 177.983433][ T6158] anon 110592 [ 177.983433][ T6158] file 314535936 [ 177.983433][ T6158] kernel_stack 0 [ 177.983433][ T6158] percpu 0 [ 177.983433][ T6158] sock 0 [ 177.983433][ T6158] shmem 135168 [ 177.983433][ T6158] file_mapped 0 [ 177.983433][ T6158] file_dirty 0 [ 177.983433][ T6158] file_writeback 0 [ 177.983433][ T6158] anon_thp 0 [ 177.983433][ T6158] inactive_anon 0 [ 177.983433][ T6158] active_anon 135168 [ 177.983433][ T6158] inactive_file 20480 [ 177.983433][ T6158] active_file 0 [ 177.983433][ T6158] unevictable 314437632 [ 177.983433][ T6158] slab_reclaimable 0 [ 177.983433][ T6158] slab_unreclaimable 0 [ 177.983433][ T6158] slab 0 [ 177.983433][ T6158] workingset_refault_anon 0 [ 177.983433][ T6158] workingset_refault_file 0 [ 177.983433][ T6158] workingset_activate_anon 0 [ 177.983433][ T6158] workingset_activate_file 0 [ 177.983433][ T6158] workingset_restore_anon 0 [ 177.983433][ T6158] workingset_restore_file 0 [ 177.983433][ T6158] workingset_nodereclaim 0 [ 177.989728][ T6165] F2FS-fs (loop7): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 178.083251][ T6158] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.213,pid=1093,uid=0 [ 178.088097][ T6165] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 178.103011][ T6158] Memory cgroup out of memory: Killed process 1093 (syz.2.213) total-vm:94156kB, anon-rss:1228kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 178.111719][ T6165] F2FS-fs (loop7): invalid crc value [ 178.134777][ T283] syz-executor invoked oom-killer: gfp_mask=0x8100cca(GFP_HIGHUSER_MOVABLE|0x8000000), order=0, oom_score_adj=0 [ 178.146857][ T283] CPU: 1 PID: 283 Comm: syz-executor Tainted: G B W syzkaller #0 [ 178.155712][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.165763][ T283] Call Trace: [ 178.169051][ T283] __dump_stack+0x21/0x24 [ 178.172284][ T6165] F2FS-fs (loop7): Found nat_bits in checkpoint [ 178.173373][ T283] dump_stack_lvl+0x1a7/0x208 [ 178.173391][ T283] ? show_regs_print_info+0x18/0x18 [ 178.189429][ T283] ? ___ratelimit+0x3de/0x560 [ 178.194104][ T283] ? __kasan_check_write+0x14/0x20 [ 178.199212][ T283] ? _raw_spin_lock+0x94/0xf0 [ 178.203884][ T283] dump_stack+0x15/0x1c [ 178.208033][ T283] dump_header+0xdd/0x650 [ 178.208435][ T6165] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 178.212354][ T283] oom_kill_process+0x1fa/0x2c0 [ 178.212363][ T283] out_of_memory+0x93f/0xd20 [ 178.212374][ T283] ? unregister_oom_notifier+0x20/0x20 [ 178.212384][ T283] ? mutex_lock_killable+0xdf/0xf0 [ 178.212400][ T283] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 178.219457][ T6165] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 178.224218][ T283] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 178.224229][ T283] ? mem_cgroup_oom_trylock+0x350/0x350 [ 178.224241][ T283] ? _raw_spin_trylock_bh+0x150/0x150 [ 178.224250][ T283] ? _raw_spin_unlock+0x4d/0x70 [ 178.224259][ T283] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 178.224267][ T283] try_charge+0xf69/0x1500 [ 178.224284][ T283] ? xas_nomem+0x6b/0x1d0 [ 178.288715][ T283] ? __memcg_kmem_charge+0x150/0x150 [ 178.294000][ T283] ? add_to_swap_cache+0x97c/0xaa0 [ 178.299125][ T283] ? radix_tree_lookup+0x183/0x1d0 [ 178.304240][ T283] __mem_cgroup_charge+0x14c/0x6d0 [ 178.309349][ T283] __read_swap_cache_async+0x422/0x5d0 [ 178.314812][ T283] swap_cluster_readahead+0x39e/0x5f0 [ 178.320182][ T283] ? read_swap_cache_async+0x80/0x80 [ 178.325464][ T283] ? find_get_entry+0x37b/0x3e0 [ 178.330306][ T283] ? page_cache_prev_miss+0x290/0x290 [ 178.335664][ T283] swapin_readahead+0xeb/0x880 [ 178.340417][ T283] ? exit_swap_address_space+0x160/0x160 [ 178.346045][ T283] ? __this_cpu_preempt_check+0x13/0x20 [ 178.351593][ T283] ? __perf_event_task_sched_in+0x213/0x290 [ 178.357494][ T283] do_swap_page+0x8b4/0x1ea0 [ 178.362077][ T283] ? native_set_ldt+0x370/0x370 [ 178.366926][ T283] ? finish_task_switch+0x12e/0x5a0 [ 178.372108][ T283] ? switch_mm_irqs_off+0x75f/0x990 [ 178.377288][ T283] ? unmap_mapping_range+0x100/0x100 [ 178.382557][ T283] ? __schedule+0xb5b/0x1320 [ 178.387127][ T283] handle_pte_fault+0x3fd/0x3750 [ 178.392043][ T283] handle_mm_fault+0xf81/0x1710 [ 178.396873][ T283] ? can_reuse_spf_vma+0xe0/0xe0 [ 178.401789][ T283] ? __kasan_check_write+0x14/0x20 [ 178.406879][ T283] ? down_read_trylock+0x106/0x160 [ 178.411988][ T283] ? __init_rwsem+0x1c0/0x1c0 [ 178.416637][ T283] ? find_vma+0x30/0x150 [ 178.420888][ T283] do_user_addr_fault+0x5a1/0xde0 [ 178.425894][ T283] ? do_kern_addr_fault+0x80/0x80 [ 178.430890][ T283] ? __kasan_check_read+0x11/0x20 [ 178.435982][ T283] exc_page_fault+0x5a/0xc0 [ 178.440485][ T283] ? asm_exc_page_fault+0x8/0x30 [ 178.445407][ T283] asm_exc_page_fault+0x1e/0x30 [ 178.450247][ T283] RIP: 0033:0x7f8267a01f57 [ 178.454643][ T283] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 178.474228][ T283] RSP: 002b:00007ffdac8446c0 EFLAGS: 00010202 [ 178.480276][ T283] RAX: 0000000000000000 RBX: 0000555576e3a500 RCX: 00007f8267a01f57 [ 178.488222][ T283] RDX: 00007ffdac844700 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.496189][ T283] RBP: 00007ffdac84476c R08: 0000000000000000 R09: 0000000000000000 [ 178.504308][ T283] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 178.512342][ T283] R13: 00000000000927c0 R14: 000000000002905a R15: 00007ffdac8447c0 [ 178.521092][ T283] memory: usage 307200kB, limit 307200kB, failcnt 2107 [ 178.527951][ T283] memory+swap: usage 315660kB, limit 9007199254740988kB, failcnt 0 [ 178.535925][ T283] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 178.543251][ T283] Memory cgroup stats for /syz2: [ 178.543343][ T283] anon 110592 [ 178.543343][ T283] file 314535936 [ 178.543343][ T283] kernel_stack 0 [ 178.543343][ T283] percpu 0 [ 178.543343][ T283] sock 0 [ 178.543343][ T283] shmem 135168 [ 178.543343][ T283] file_mapped 0 [ 178.543343][ T283] file_dirty 0 [ 178.543343][ T283] file_writeback 0 [ 178.543343][ T283] anon_thp 0 [ 178.543343][ T283] inactive_anon 0 [ 178.543343][ T283] active_anon 135168 [ 178.543343][ T283] inactive_file 20480 [ 178.543343][ T283] active_file 0 [ 178.543343][ T283] unevictable 314437632 [ 178.543343][ T283] slab_reclaimable 0 [ 178.543343][ T283] slab_unreclaimable 0 [ 178.543343][ T283] slab 0 [ 178.543343][ T283] workingset_refault_anon 0 [ 178.543343][ T283] workingset_refault_file 0 [ 178.543343][ T283] workingset_activate_anon 0 [ 178.543343][ T283] workingset_activate_file 0 [ 178.543343][ T283] workingset_restore_anon 0 [ 178.543343][ T283] workingset_restore_file 0 [ 178.543343][ T283] workingset_nodereclaim 0 [ 178.639621][ T283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1668,pid=6115,uid=0 [ 178.654455][ T283] Memory cgroup out of memory: Killed process 6115 (syz.2.1668) total-vm:90448kB, anon-rss:1228kB, file-rss:52460kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 178.671683][ T27] oom_reaper: reaped process 6115 (syz.2.1668), now anon-rss:0kB, file-rss:53632kB, shmem-rss:0kB [ 178.691887][ T283] syz-executor invoked oom-killer: gfp_mask=0x8100cca(GFP_HIGHUSER_MOVABLE|0x8000000), order=0, oom_score_adj=0 [ 178.713145][ T283] CPU: 1 PID: 283 Comm: syz-executor Tainted: G B W syzkaller #0 [ 178.722005][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.732148][ T283] Call Trace: [ 178.735435][ T283] __dump_stack+0x21/0x24 [ 178.739764][ T283] dump_stack_lvl+0x1a7/0x208 [ 178.744436][ T283] ? show_regs_print_info+0x18/0x18 [ 178.749626][ T283] ? ___ratelimit+0x3de/0x560 [ 178.754294][ T283] ? __kasan_check_write+0x14/0x20 [ 178.759393][ T283] ? _raw_spin_lock+0x94/0xf0 [ 178.764059][ T283] dump_stack+0x15/0x1c [ 178.768209][ T283] dump_header+0xdd/0x650 [ 178.772527][ T283] oom_kill_process+0x1fa/0x2c0 [ 178.777364][ T283] out_of_memory+0x93f/0xd20 [ 178.781945][ T283] ? unregister_oom_notifier+0x20/0x20 [ 178.787393][ T283] ? mutex_lock_killable+0xdf/0xf0 [ 178.792493][ T283] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 178.798992][ T283] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 178.804536][ T283] ? mem_cgroup_oom_trylock+0x350/0x350 [ 178.810093][ T283] ? _raw_spin_trylock_bh+0x150/0x150 [ 178.815467][ T283] ? _raw_spin_unlock+0x4d/0x70 [ 178.820311][ T283] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 178.825848][ T283] try_charge+0xf69/0x1500 [ 178.830262][ T283] ? xas_nomem+0x6b/0x1d0 [ 178.834587][ T283] ? __memcg_kmem_charge+0x150/0x150 [ 178.839859][ T283] ? add_to_swap_cache+0x97c/0xaa0 [ 178.844978][ T283] ? radix_tree_lookup+0x183/0x1d0 [ 178.850094][ T283] __mem_cgroup_charge+0x14c/0x6d0 [ 178.855197][ T283] __read_swap_cache_async+0x422/0x5d0 [ 178.860650][ T283] swap_cluster_readahead+0x39e/0x5f0 [ 178.866016][ T283] ? read_swap_cache_async+0x80/0x80 [ 178.871291][ T283] ? find_get_entry+0x37b/0x3e0 [ 178.876135][ T283] ? page_cache_prev_miss+0x290/0x290 [ 178.881498][ T283] swapin_readahead+0xeb/0x880 [ 178.886254][ T283] ? exit_swap_address_space+0x160/0x160 [ 178.891966][ T283] ? __this_cpu_preempt_check+0x13/0x20 [ 178.897500][ T283] ? __perf_event_task_sched_in+0x213/0x290 [ 178.903382][ T283] do_swap_page+0x8b4/0x1ea0 [ 178.907963][ T283] ? native_set_ldt+0x370/0x370 [ 178.912807][ T283] ? finish_task_switch+0x12e/0x5a0 [ 178.918001][ T283] ? switch_mm_irqs_off+0x75f/0x990 [ 178.923187][ T283] ? unmap_mapping_range+0x100/0x100 [ 178.928449][ T283] ? __schedule+0xb5b/0x1320 [ 178.933031][ T283] handle_pte_fault+0x3fd/0x3750 [ 178.937950][ T283] handle_mm_fault+0xf81/0x1710 [ 178.942781][ T283] ? can_reuse_spf_vma+0xe0/0xe0 [ 178.947696][ T283] ? __kasan_check_write+0x14/0x20 [ 178.952792][ T283] ? down_read_trylock+0x106/0x160 [ 178.957895][ T283] ? __init_rwsem+0x1c0/0x1c0 [ 178.962548][ T283] ? find_vma+0x30/0x150 [ 178.966762][ T283] do_user_addr_fault+0x5a1/0xde0 [ 178.971761][ T283] ? do_kern_addr_fault+0x80/0x80 [ 178.976763][ T283] ? __kasan_check_read+0x11/0x20 [ 178.981759][ T283] exc_page_fault+0x5a/0xc0 [ 178.986240][ T283] ? asm_exc_page_fault+0x8/0x30 [ 178.991149][ T283] asm_exc_page_fault+0x1e/0x30 [ 178.995971][ T283] RIP: 0033:0x7f8267a01f57 [ 179.000360][ T283] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 179.019960][ T283] RSP: 002b:00007ffdac8446c0 EFLAGS: 00010202 [ 179.026017][ T283] RAX: 0000000000000000 RBX: 0000555576e3a500 RCX: 00007f8267a01f57 [ 179.033973][ T283] RDX: 00007ffdac844700 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.041925][ T283] RBP: 00007ffdac84476c R08: 0000000000000000 R09: 0000000000000000 [ 179.049882][ T283] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 179.057828][ T283] R13: 00000000000927c0 R14: 000000000002905a R15: 00007ffdac8447c0 [ 179.066152][ T2894] usb 2-1: Can't get UAC3 power state for id 10 [ 179.069079][ T283] memory: usage 307200kB, limit 307200kB, failcnt 2158 [ 179.079381][ T283] memory+swap: usage 315660kB, limit 9007199254740988kB, failcnt 0 [ 179.087773][ T283] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 179.094637][ T283] Memory cgroup stats for /syz2: [ 179.094737][ T283] anon 110592 [ 179.094737][ T283] file 314535936 [ 179.094737][ T283] kernel_stack 0 [ 179.094737][ T283] percpu 0 [ 179.094737][ T283] sock 0 [ 179.094737][ T283] shmem 135168 [ 179.094737][ T283] file_mapped 0 [ 179.094737][ T283] file_dirty 0 [ 179.094737][ T283] file_writeback 0 [ 179.094737][ T283] anon_thp 0 [ 179.094737][ T283] inactive_anon 0 [ 179.094737][ T283] active_anon 135168 [ 179.094737][ T283] inactive_file 20480 [ 179.094737][ T283] active_file 0 [ 179.094737][ T283] unevictable 314437632 [ 179.094737][ T283] slab_reclaimable 0 [ 179.094737][ T283] slab_unreclaimable 0 [ 179.094737][ T283] slab 0 [ 179.094737][ T283] workingset_refault_anon 0 [ 179.094737][ T283] workingset_refault_file 0 [ 179.094737][ T283] workingset_activate_anon 0 [ 179.094737][ T283] workingset_activate_file 0 [ 179.094737][ T283] workingset_restore_anon 0 [ 179.094737][ T283] workingset_restore_file 0 [ 179.094737][ T283] workingset_nodereclaim 0 [ 179.162016][ T2894] usb 2-1: BAAD HEADSET c_chmask mismatch [ 179.191946][ T283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1668,pid=6096,uid=0 [ 179.197571][ T2894] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 179.219295][ T283] Memory cgroup out of memory: Killed process 6096 (syz.2.1668) total-vm:90316kB, anon-rss:1228kB, file-rss:52460kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 179.229099][ T2894] usb 2-1: USB disconnect, device number 50 [ 179.247272][ T6105] syz.2.1668 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 179.264077][ T6105] CPU: 0 PID: 6105 Comm: syz.2.1668 Tainted: G B W syzkaller #0 [ 179.272849][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.282889][ T6105] Call Trace: [ 179.286159][ T6105] __dump_stack+0x21/0x24 [ 179.290463][ T6105] dump_stack_lvl+0x1a7/0x208 [ 179.295112][ T6105] ? show_regs_print_info+0x18/0x18 [ 179.300284][ T6105] ? ___ratelimit+0x3de/0x560 [ 179.304949][ T6105] ? __kasan_check_write+0x14/0x20 [ 179.310065][ T6105] ? _raw_spin_lock+0x94/0xf0 [ 179.314746][ T6105] dump_stack+0x15/0x1c [ 179.318904][ T6105] dump_header+0xdd/0x650 [ 179.323231][ T6105] oom_kill_process+0x1fa/0x2c0 [ 179.328077][ T6105] out_of_memory+0x93f/0xd20 [ 179.332652][ T6105] ? unregister_oom_notifier+0x20/0x20 [ 179.338091][ T6105] ? mutex_lock_killable+0xdf/0xf0 [ 179.343193][ T6105] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 179.349675][ T6105] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 179.355197][ T6105] ? mem_cgroup_oom_trylock+0x350/0x350 [ 179.360715][ T6105] ? _raw_spin_trylock_bh+0x150/0x150 [ 179.366059][ T6105] ? _raw_spin_unlock+0x4d/0x70 [ 179.370881][ T6105] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 179.376399][ T6105] try_charge+0xf69/0x1500 [ 179.380788][ T6105] ? __memcg_kmem_charge+0x150/0x150 [ 179.386049][ T6105] ? get_page_from_freelist+0x223b/0x23d0 [ 179.391761][ T6105] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 179.397292][ T6105] __mem_cgroup_charge+0x14c/0x6d0 [ 179.402400][ T6105] __add_to_page_cache_locked+0x1fe/0x9a0 [ 179.408290][ T6105] ? __alloc_pages_nodemask+0x290/0x620 [ 179.413817][ T6105] ? put_page+0xd0/0xd0 [ 179.417949][ T6105] ? workingset_activation+0x250/0x250 [ 179.423393][ T6105] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 179.428927][ T6105] ? find_get_entry+0x37b/0x3e0 [ 179.433762][ T6105] ? page_cache_prev_miss+0x270/0x290 [ 179.439122][ T6105] add_to_page_cache_lru+0xa7/0x210 [ 179.444292][ T6105] pagecache_get_page+0x700/0x930 [ 179.449291][ T6105] grab_cache_page_write_begin+0x59/0xb0 [ 179.454913][ T6105] simple_write_begin+0x36/0x290 [ 179.459821][ T6105] generic_perform_write+0x2ce/0x540 [ 179.465077][ T6105] ? atime_needs_update+0x5b0/0x5b0 [ 179.470247][ T6105] ? grab_cache_page_write_begin+0xb0/0xb0 [ 179.476028][ T6105] ? file_remove_privs+0x5b0/0x5b0 [ 179.481109][ T6105] ? __kasan_check_write+0x14/0x20 [ 179.486193][ T6105] ? down_write+0xb2/0x120 [ 179.490584][ T6105] __generic_file_write_iter+0x24b/0x480 [ 179.496186][ T6105] ? generic_write_checks+0x3d4/0x480 [ 179.501530][ T6105] generic_file_write_iter+0xa9/0x1d0 [ 179.506877][ T6105] __kernel_write+0x535/0x910 [ 179.511525][ T6105] ? vfs_read+0xa60/0xa60 [ 179.515843][ T6105] ? populate_vma_page_range+0xf0/0xf0 [ 179.521278][ T6105] ? __kasan_check_write+0x14/0x20 [ 179.526363][ T6105] dump_emit+0x246/0x370 [ 179.530582][ T6105] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 179.536044][ T6105] dump_user_range+0x6a/0x1a0 [ 179.540701][ T6105] elf_core_dump+0x2866/0x2cc0 [ 179.545442][ T6105] ? load_elf_binary+0x28e0/0x28e0 [ 179.550530][ T6105] ? __fsnotify_parent+0x6db/0x7c0 [ 179.555617][ T6105] ? __inode_attach_wb+0x55a/0x6d0 [ 179.560704][ T6105] ? do_truncate+0x1c6/0x240 [ 179.565262][ T6105] ? putname+0xfe/0x150 [ 179.569388][ T6105] ? __kasan_check_read+0x11/0x20 [ 179.574385][ T6105] ? __ia32_sys_unshare+0x40/0x40 [ 179.579408][ T6105] do_coredump+0x1ba3/0x28e0 [ 179.583985][ T6105] ? simple_acl_create+0x1c0/0x1c0 [ 179.589074][ T6105] ? debug_smp_processor_id+0x17/0x20 [ 179.594428][ T6105] ? kmem_cache_free+0x100/0x2d0 [ 179.599344][ T6105] ? ____kasan_slab_free+0x130/0x160 [ 179.604619][ T6105] ? get_signal+0xb98/0x12e0 [ 179.609181][ T6105] ? kmem_cache_free+0x100/0x2d0 [ 179.614091][ T6105] get_signal+0xf23/0x12e0 [ 179.618491][ T6105] arch_do_signal_or_restart+0xe2/0x11d0 [ 179.624108][ T6105] ? force_sig_fault+0xd7/0x130 [ 179.628952][ T6105] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 179.634562][ T6105] ? __bad_area_nosemaphore+0x420/0x420 [ 179.640078][ T6105] ? do_user_addr_fault+0x779/0xde0 [ 179.645246][ T6105] ? __bad_area_nosemaphore+0x2b0/0x420 [ 179.650771][ T6105] exit_to_user_mode_loop+0xa2/0xe0 [ 179.655954][ T6105] exit_to_user_mode_prepare+0x76/0xa0 [ 179.661417][ T6105] irqentry_exit_to_user_mode+0x9/0x10 [ 179.666881][ T6105] irqentry_exit+0x12/0x60 [ 179.671462][ T6105] exc_page_fault+0x67/0xc0 [ 179.675958][ T6105] ? asm_exc_page_fault+0x8/0x30 [ 179.680878][ T6105] asm_exc_page_fault+0x1e/0x30 [ 179.685706][ T6105] RIP: 0033:0x7f82678fc877 [ 179.690107][ T6105] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 40 1b 00 48 8d 35 c4 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 179.709690][ T6105] RSP: 002b:00007f8266482120 EFLAGS: 00010202 [ 179.715729][ T6105] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8267a46dd9 [ 179.723679][ T6105] RDX: 00007f8266482140 RSI: 00007f8266482270 RDI: 000000000000000b [ 179.731633][ T6105] RBP: 00007f8267adcd69 R08: 0000000000000000 R09: 0000000000000000 [ 179.739586][ T6105] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 179.747535][ T6105] R13: 00007f8267cc0038 R14: 00007f8267cbffa0 R15: 00007ffdac8443c8 [ 179.755684][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 179.764438][ T6105] memory: usage 306840kB, limit 307200kB, failcnt 2243 [ 179.771348][ T6105] memory+swap: usage 310604kB, limit 9007199254740988kB, failcnt 0 [ 179.779233][ T6105] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 179.786092][ T6105] Memory cgroup stats for /syz2: [ 179.786202][ T6105] anon 110592 [ 179.786202][ T6105] file 309669888 [ 179.786202][ T6105] kernel_stack 0 [ 179.786202][ T6105] percpu 0 [ 179.786202][ T6105] sock 0 [ 179.786202][ T6105] shmem 135168 [ 179.786202][ T6105] file_mapped 0 [ 179.786202][ T6105] file_dirty 0 [ 179.786202][ T6105] file_writeback 0 [ 179.786202][ T6105] anon_thp 0 [ 179.786202][ T6105] inactive_anon 0 [ 179.786202][ T6105] active_anon 135168 [ 179.786202][ T6105] inactive_file 20480 [ 179.786202][ T6105] active_file 0 [ 179.786202][ T6105] unevictable 309571584 [ 179.786202][ T6105] slab_reclaimable 0 [ 179.786202][ T6105] slab_unreclaimable 0 [ 179.786202][ T6105] slab 0 [ 179.786202][ T6105] workingset_refault_anon 0 [ 179.786202][ T6105] workingset_refault_file 0 [ 179.786202][ T6105] workingset_activate_anon 0 [ 179.786202][ T6105] workingset_activate_file 0 [ 179.786202][ T6105] workingset_restore_anon 0 [ 179.786202][ T6105] workingset_restore_file 0 [ 179.786202][ T6105] workingset_nodereclaim 0 [ 179.882261][ T6105] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1668,pid=6112,uid=0 [ 179.897918][ T6105] Memory cgroup out of memory: Killed process 6112 (syz.2.1668) total-vm:90448kB, anon-rss:1228kB, file-rss:52204kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 180.114233][ T6101] syz.2.1668 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 180.129109][ T6101] CPU: 0 PID: 6101 Comm: syz.2.1668 Tainted: G B W syzkaller #0 [ 180.137864][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.147902][ T6101] Call Trace: [ 180.151174][ T6101] __dump_stack+0x21/0x24 [ 180.155474][ T6101] dump_stack_lvl+0x1a7/0x208 [ 180.160172][ T6101] ? show_regs_print_info+0x18/0x18 [ 180.165380][ T6101] ? ___ratelimit+0x3de/0x560 [ 180.170565][ T6101] ? __kasan_check_write+0x14/0x20 [ 180.175657][ T6101] ? _raw_spin_lock+0x94/0xf0 [ 180.180322][ T6101] dump_stack+0x15/0x1c [ 180.184457][ T6101] dump_header+0xdd/0x650 [ 180.188769][ T6101] oom_kill_process+0x1fa/0x2c0 [ 180.193649][ T6101] out_of_memory+0x93f/0xd20 [ 180.198215][ T6101] ? unregister_oom_notifier+0x20/0x20 [ 180.203645][ T6101] ? mutex_lock_killable+0x92/0xf0 [ 180.208729][ T6101] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 180.215210][ T6101] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 180.220757][ T6101] ? mem_cgroup_oom_trylock+0x350/0x350 [ 180.226292][ T6101] ? _raw_spin_trylock_bh+0x150/0x150 [ 180.231637][ T6101] ? _raw_spin_unlock+0x4d/0x70 [ 180.236463][ T6101] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 180.241985][ T6101] try_charge+0xf69/0x1500 [ 180.246380][ T6101] ? __memcg_kmem_charge+0x150/0x150 [ 180.251652][ T6101] ? get_page_from_freelist+0x223b/0x23d0 [ 180.257347][ T6101] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 180.262864][ T6101] __mem_cgroup_charge+0x14c/0x6d0 [ 180.267951][ T6101] __add_to_page_cache_locked+0x1fe/0x9a0 [ 180.273640][ T6101] ? __alloc_pages_nodemask+0x290/0x620 [ 180.279165][ T6101] ? put_page+0xd0/0xd0 [ 180.283300][ T6101] ? workingset_activation+0x250/0x250 [ 180.288744][ T6101] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 180.294277][ T6101] ? find_get_entry+0x37b/0x3e0 [ 180.299102][ T6101] ? page_cache_prev_miss+0x270/0x290 [ 180.304448][ T6101] add_to_page_cache_lru+0xa7/0x210 [ 180.309639][ T6101] pagecache_get_page+0x700/0x930 [ 180.314655][ T6101] grab_cache_page_write_begin+0x59/0xb0 [ 180.320259][ T6101] simple_write_begin+0x36/0x290 [ 180.325172][ T6101] generic_perform_write+0x2ce/0x540 [ 180.330427][ T6101] ? atime_needs_update+0x5b0/0x5b0 [ 180.335597][ T6101] ? grab_cache_page_write_begin+0xb0/0xb0 [ 180.341377][ T6101] ? file_remove_privs+0x5b0/0x5b0 [ 180.346730][ T6101] ? __kasan_check_write+0x14/0x20 [ 180.351892][ T6101] ? down_write+0xb2/0x120 [ 180.356301][ T6101] __generic_file_write_iter+0x24b/0x480 [ 180.361918][ T6101] ? generic_write_checks+0x3d4/0x480 [ 180.367273][ T6101] generic_file_write_iter+0xa9/0x1d0 [ 180.372626][ T6101] __kernel_write+0x535/0x910 [ 180.377297][ T6101] ? vfs_read+0xa60/0xa60 [ 180.381605][ T6101] ? populate_vma_page_range+0xf0/0xf0 [ 180.387044][ T6101] ? __kasan_check_write+0x14/0x20 [ 180.392127][ T6101] dump_emit+0x246/0x370 [ 180.396341][ T6101] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 180.401788][ T6101] ? dump_user_range+0x13b/0x1a0 [ 180.406723][ T6101] dump_user_range+0x6a/0x1a0 [ 180.411371][ T6101] elf_core_dump+0x2866/0x2cc0 [ 180.416233][ T6101] ? load_elf_binary+0x28e0/0x28e0 [ 180.421330][ T6101] ? __fsnotify_parent+0x6db/0x7c0 [ 180.426416][ T6101] ? __inode_attach_wb+0x55a/0x6d0 [ 180.431502][ T6101] ? do_truncate+0x1c6/0x240 [ 180.436069][ T6101] ? putname+0xfe/0x150 [ 180.440295][ T6101] ? __kasan_check_read+0x11/0x20 [ 180.445302][ T6101] ? __ia32_sys_unshare+0x40/0x40 [ 180.450305][ T6101] do_coredump+0x1ba3/0x28e0 [ 180.454875][ T6101] ? simple_acl_create+0x1c0/0x1c0 [ 180.459964][ T6101] ? debug_smp_processor_id+0x17/0x20 [ 180.465308][ T6101] ? kmem_cache_free+0x100/0x2d0 [ 180.470216][ T6101] ? ____kasan_slab_free+0x130/0x160 [ 180.475474][ T6101] ? get_signal+0xb98/0x12e0 [ 180.480037][ T6101] ? kmem_cache_free+0x100/0x2d0 [ 180.484958][ T6101] get_signal+0xf23/0x12e0 [ 180.489357][ T6101] arch_do_signal_or_restart+0xe2/0x11d0 [ 180.494965][ T6101] ? force_sig_fault+0xd7/0x130 [ 180.499884][ T6101] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 180.505488][ T6101] ? __bad_area_nosemaphore+0x420/0x420 [ 180.511005][ T6101] ? do_user_addr_fault+0x779/0xde0 [ 180.516178][ T6101] ? __bad_area_nosemaphore+0x2b0/0x420 [ 180.521702][ T6101] exit_to_user_mode_loop+0xa2/0xe0 [ 180.526873][ T6101] exit_to_user_mode_prepare+0x76/0xa0 [ 180.532304][ T6101] irqentry_exit_to_user_mode+0x9/0x10 [ 180.537733][ T6101] irqentry_exit+0x12/0x60 [ 180.542131][ T6101] exc_page_fault+0x67/0xc0 [ 180.546606][ T6101] ? asm_exc_page_fault+0x8/0x30 [ 180.551513][ T6101] asm_exc_page_fault+0x1e/0x30 [ 180.556333][ T6101] RIP: 0033:0x7f82678fc877 [ 180.560724][ T6101] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 40 1b 00 48 8d 35 c4 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 180.580302][ T6101] RSP: 002b:00007f8266482120 EFLAGS: 00010202 [ 180.586346][ T6101] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8267a46dd9 [ 180.594313][ T6101] RDX: 00007f8266482140 RSI: 00007f8266482270 RDI: 000000000000000b [ 180.602261][ T6101] RBP: 00007f8267adcd69 R08: 0000000000000000 R09: 0000000000000000 [ 180.610216][ T6101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 180.618163][ T6101] R13: 00007f8267cc0038 R14: 00007f8267cbffa0 R15: 00007ffdac8443c8 [ 180.626737][ T6101] memory: usage 307200kB, limit 307200kB, failcnt 2514 [ 180.633666][ T6101] memory+swap: usage 309012kB, limit 9007199254740988kB, failcnt 0 [ 180.641634][ T6101] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 180.648477][ T6101] Memory cgroup stats for /syz2: [ 180.648548][ T6101] anon 110592 [ 180.648548][ T6101] file 314535936 [ 180.648548][ T6101] kernel_stack 0 [ 180.648548][ T6101] percpu 0 [ 180.648548][ T6101] sock 0 [ 180.648548][ T6101] shmem 135168 [ 180.648548][ T6101] file_mapped 0 [ 180.648548][ T6101] file_dirty 0 [ 180.648548][ T6101] file_writeback 0 [ 180.648548][ T6101] anon_thp 0 [ 180.648548][ T6101] inactive_anon 0 [ 180.648548][ T6101] active_anon 135168 [ 180.648548][ T6101] inactive_file 20480 [ 180.648548][ T6101] active_file 0 [ 180.648548][ T6101] unevictable 314437632 [ 180.648548][ T6101] slab_reclaimable 0 [ 180.648548][ T6101] slab_unreclaimable 0 [ 180.648548][ T6101] slab 0 [ 180.648548][ T6101] workingset_refault_anon 0 [ 180.648548][ T6101] workingset_refault_file 33 [ 180.648548][ T6101] workingset_activate_anon 0 [ 180.648548][ T6101] workingset_activate_file 0 [ 180.648548][ T6101] workingset_restore_anon 0 [ 180.648548][ T6101] workingset_restore_file 0 [ 180.648548][ T6101] workingset_nodereclaim 0 [ 180.744626][ T6101] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1668,pid=6113,uid=0 [ 180.759556][ T6101] Memory cgroup out of memory: Killed process 6113 (syz.2.1668) total-vm:90448kB, anon-rss:1228kB, file-rss:47980kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 180.776673][ T27] oom_reaper: reaped process 6113 (syz.2.1668), now anon-rss:0kB, file-rss:49984kB, shmem-rss:0kB [ 180.794377][ T6100] syz.2.1668 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 180.805033][ T6100] CPU: 0 PID: 6100 Comm: syz.2.1668 Tainted: G B W syzkaller #0 [ 180.813780][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.823808][ T6100] Call Trace: [ 180.827072][ T6100] __dump_stack+0x21/0x24 [ 180.831369][ T6100] dump_stack_lvl+0x1a7/0x208 [ 180.836026][ T6100] ? show_regs_print_info+0x18/0x18 [ 180.841196][ T6100] ? ___ratelimit+0x3de/0x560 [ 180.845841][ T6100] ? __kasan_check_write+0x14/0x20 [ 180.850951][ T6100] ? _raw_spin_lock+0x94/0xf0 [ 180.855602][ T6100] dump_stack+0x15/0x1c [ 180.859723][ T6100] dump_header+0xdd/0x650 [ 180.864018][ T6100] oom_kill_process+0x1fa/0x2c0 [ 180.868834][ T6100] out_of_memory+0x93f/0xd20 [ 180.873393][ T6100] ? unregister_oom_notifier+0x20/0x20 [ 180.878817][ T6100] ? mutex_lock_killable+0x92/0xf0 [ 180.883916][ T6100] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 180.890384][ T6100] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 180.895900][ T6100] ? mem_cgroup_oom_trylock+0x350/0x350 [ 180.901419][ T6100] ? _raw_spin_trylock_bh+0x150/0x150 [ 180.906756][ T6100] ? _raw_spin_unlock+0x4d/0x70 [ 180.911578][ T6100] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 180.917092][ T6100] try_charge+0xf69/0x1500 [ 180.921477][ T6100] ? __memcg_kmem_charge+0x150/0x150 [ 180.926728][ T6100] ? get_page_from_freelist+0x223b/0x23d0 [ 180.932417][ T6100] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 180.937937][ T6100] __mem_cgroup_charge+0x14c/0x6d0 [ 180.943103][ T6100] __add_to_page_cache_locked+0x1fe/0x9a0 [ 180.948792][ T6100] ? __alloc_pages_nodemask+0x290/0x620 [ 180.954316][ T6100] ? put_page+0xd0/0xd0 [ 180.958441][ T6100] ? workingset_activation+0x250/0x250 [ 180.963868][ T6100] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 180.969381][ T6100] ? find_get_entry+0x37b/0x3e0 [ 180.974195][ T6100] ? page_cache_prev_miss+0x270/0x290 [ 180.979535][ T6100] add_to_page_cache_lru+0xa7/0x210 [ 180.984697][ T6100] pagecache_get_page+0x700/0x930 [ 180.989704][ T6100] grab_cache_page_write_begin+0x59/0xb0 [ 180.995301][ T6100] simple_write_begin+0x36/0x290 [ 181.000206][ T6100] generic_perform_write+0x2ce/0x540 [ 181.005459][ T6100] ? atime_needs_update+0x5b0/0x5b0 [ 181.010626][ T6100] ? grab_cache_page_write_begin+0xb0/0xb0 [ 181.016398][ T6100] ? file_remove_privs+0x5b0/0x5b0 [ 181.021476][ T6100] ? __kasan_check_write+0x14/0x20 [ 181.026556][ T6100] ? down_write+0xb2/0x120 [ 181.030951][ T6100] __generic_file_write_iter+0x24b/0x480 [ 181.036550][ T6100] ? generic_write_checks+0x3d4/0x480 [ 181.041895][ T6100] generic_file_write_iter+0xa9/0x1d0 [ 181.047236][ T6100] __kernel_write+0x535/0x910 [ 181.051878][ T6100] ? vfs_read+0xa60/0xa60 [ 181.056174][ T6100] ? populate_vma_page_range+0xf0/0xf0 [ 181.061601][ T6100] ? __kasan_check_write+0x14/0x20 [ 181.066678][ T6100] dump_emit+0x246/0x370 [ 181.070889][ T6100] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 181.076313][ T6100] dump_user_range+0x6a/0x1a0 [ 181.080958][ T6100] elf_core_dump+0x2866/0x2cc0 [ 181.085692][ T6100] ? load_elf_binary+0x28e0/0x28e0 [ 181.090769][ T6100] ? __fsnotify_parent+0x6db/0x7c0 [ 181.095855][ T6100] ? __inode_attach_wb+0x55a/0x6d0 [ 181.100970][ T6100] ? do_truncate+0x1c6/0x240 [ 181.105530][ T6100] ? putname+0xfe/0x150 [ 181.109672][ T6100] ? __kasan_check_read+0x11/0x20 [ 181.114669][ T6100] ? __ia32_sys_unshare+0x40/0x40 [ 181.119669][ T6100] do_coredump+0x1ba3/0x28e0 [ 181.124257][ T6100] ? simple_acl_create+0x1c0/0x1c0 [ 181.129339][ T6100] ? debug_smp_processor_id+0x17/0x20 [ 181.134678][ T6100] ? kmem_cache_free+0x100/0x2d0 [ 181.139582][ T6100] ? ____kasan_slab_free+0x130/0x160 [ 181.144839][ T6100] ? get_signal+0xb98/0x12e0 [ 181.149404][ T6100] ? kmem_cache_free+0x100/0x2d0 [ 181.154309][ T6100] get_signal+0xf23/0x12e0 [ 181.158719][ T6100] arch_do_signal_or_restart+0xe2/0x11d0 [ 181.164322][ T6100] ? force_sig_fault+0xd7/0x130 [ 181.169143][ T6100] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 181.174747][ T6100] ? __bad_area_nosemaphore+0x420/0x420 [ 181.180263][ T6100] ? do_user_addr_fault+0x779/0xde0 [ 181.185453][ T6100] ? __bad_area_nosemaphore+0x2b0/0x420 [ 181.190995][ T6100] exit_to_user_mode_loop+0xa2/0xe0 [ 181.196177][ T6100] exit_to_user_mode_prepare+0x76/0xa0 [ 181.201619][ T6100] irqentry_exit_to_user_mode+0x9/0x10 [ 181.207052][ T6100] irqentry_exit+0x12/0x60 [ 181.211442][ T6100] exc_page_fault+0x67/0xc0 [ 181.215918][ T6100] ? asm_exc_page_fault+0x8/0x30 [ 181.220829][ T6100] asm_exc_page_fault+0x1e/0x30 [ 181.225650][ T6100] RIP: 0033:0x7f82678fc877 [ 181.230070][ T6100] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 40 1b 00 48 8d 35 c4 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 181.249663][ T6100] RSP: 002b:00007f8266482120 EFLAGS: 00010202 [ 181.255711][ T6100] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8267a46dd9 [ 181.263662][ T6100] RDX: 00007f8266482140 RSI: 00007f8266482270 RDI: 000000000000000b [ 181.271620][ T6100] RBP: 00007f8267adcd69 R08: 0000000000000000 R09: 0000000000000000 [ 181.279569][ T6100] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.287537][ T6100] R13: 00007f8267cc0038 R14: 00007f8267cbffa0 R15: 00007ffdac8443c8 [ 181.299856][ T6100] memory: usage 304620kB, limit 307200kB, failcnt 2718 [ 181.307000][ T6100] memory+swap: usage 306192kB, limit 9007199254740988kB, failcnt 0 [ 181.315143][ T6100] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 181.322203][ T6100] Memory cgroup stats for /syz2: [ 181.322310][ T6100] anon 110592 [ 181.322310][ T6100] file 301289472 [ 181.322310][ T6100] kernel_stack 0 [ 181.322310][ T6100] percpu 0 [ 181.322310][ T6100] sock 0 [ 181.322310][ T6100] shmem 135168 [ 181.322310][ T6100] file_mapped 0 [ 181.322310][ T6100] file_dirty 0 [ 181.322310][ T6100] file_writeback 0 [ 181.322310][ T6100] anon_thp 0 [ 181.322310][ T6100] inactive_anon 0 [ 181.322310][ T6100] active_anon 135168 [ 181.322310][ T6100] inactive_file 0 [ 181.322310][ T6100] active_file 81920 [ 181.322310][ T6100] unevictable 301191168 [ 181.322310][ T6100] slab_reclaimable 0 [ 181.322310][ T6100] slab_unreclaimable 0 [ 181.322310][ T6100] slab 0 [ 181.322310][ T6100] workingset_refault_anon 0 [ 181.322310][ T6100] workingset_refault_file 33 [ 181.322310][ T6100] workingset_activate_anon 0 [ 181.322310][ T6100] workingset_activate_file 0 [ 181.322310][ T6100] workingset_restore_anon 0 [ 181.322310][ T6100] workingset_restore_file 0 [ 181.322310][ T6100] workingset_nodereclaim 0 [ 181.418839][ T6100] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1668,pid=6100,uid=0 [ 181.434116][ T6100] Memory cgroup out of memory: Killed process 6100 (syz.2.1668) total-vm:90316kB, anon-rss:1228kB, file-rss:47980kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 181.451410][ T27] oom_reaper: reaped process 6100 (syz.2.1668), now anon-rss:0kB, file-rss:51648kB, shmem-rss:0kB [ 181.592743][ T6107] syz.2.1668 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 181.650416][ T6107] CPU: 1 PID: 6107 Comm: syz.2.1668 Tainted: G B W syzkaller #0 [ 181.659190][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.669240][ T6107] Call Trace: [ 181.672528][ T6107] __dump_stack+0x21/0x24 [ 181.676858][ T6107] dump_stack_lvl+0x1a7/0x208 [ 181.681528][ T6107] ? show_regs_print_info+0x18/0x18 [ 181.686730][ T6107] ? ___ratelimit+0x3de/0x560 [ 181.691395][ T6107] ? __kasan_check_write+0x14/0x20 [ 181.696491][ T6107] ? _raw_spin_lock+0x94/0xf0 [ 181.701163][ T6107] dump_stack+0x15/0x1c [ 181.705306][ T6107] dump_header+0xdd/0x650 [ 181.709628][ T6107] oom_kill_process+0x1fa/0x2c0 [ 181.714469][ T6107] out_of_memory+0x93f/0xd20 [ 181.719052][ T6107] ? unregister_oom_notifier+0x20/0x20 [ 181.724505][ T6107] ? mutex_lock_killable+0x92/0xf0 [ 181.729606][ T6107] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 181.736095][ T6107] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 181.741625][ T6107] ? mem_cgroup_oom_trylock+0x350/0x350 [ 181.747143][ T6107] ? _raw_spin_trylock_bh+0x150/0x150 [ 181.752490][ T6107] ? _raw_spin_unlock+0x4d/0x70 [ 181.757308][ T6107] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 181.762825][ T6107] try_charge+0xf69/0x1500 [ 181.767214][ T6107] ? __memcg_kmem_charge+0x150/0x150 [ 181.772468][ T6107] ? get_page_from_freelist+0x223b/0x23d0 [ 181.778157][ T6107] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 181.783673][ T6107] __mem_cgroup_charge+0x14c/0x6d0 [ 181.788756][ T6107] __add_to_page_cache_locked+0x1fe/0x9a0 [ 181.794444][ T6107] ? __alloc_pages_nodemask+0x290/0x620 [ 181.799963][ T6107] ? put_page+0xd0/0xd0 [ 181.804089][ T6107] ? workingset_activation+0x250/0x250 [ 181.809529][ T6107] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 181.815054][ T6107] ? find_get_entry+0x37b/0x3e0 [ 181.819881][ T6107] ? page_cache_prev_miss+0x270/0x290 [ 181.825244][ T6107] add_to_page_cache_lru+0xa7/0x210 [ 181.830423][ T6107] pagecache_get_page+0x700/0x930 [ 181.835422][ T6107] grab_cache_page_write_begin+0x59/0xb0 [ 181.841028][ T6107] simple_write_begin+0x36/0x290 [ 181.845939][ T6107] generic_perform_write+0x2ce/0x540 [ 181.851212][ T6107] ? atime_needs_update+0x5b0/0x5b0 [ 181.856404][ T6107] ? grab_cache_page_write_begin+0xb0/0xb0 [ 181.862281][ T6107] ? file_remove_privs+0x5b0/0x5b0 [ 181.867368][ T6107] ? __kasan_check_write+0x14/0x20 [ 181.872450][ T6107] ? down_write+0xb2/0x120 [ 181.876841][ T6107] __generic_file_write_iter+0x24b/0x480 [ 181.882460][ T6107] ? generic_write_checks+0x3d4/0x480 [ 181.887988][ T6107] generic_file_write_iter+0xa9/0x1d0 [ 181.893346][ T6107] __kernel_write+0x535/0x910 [ 181.897999][ T6107] ? vfs_read+0xa60/0xa60 [ 181.902304][ T6107] ? populate_vma_page_range+0xf0/0xf0 [ 181.907740][ T6107] ? __kasan_check_write+0x14/0x20 [ 181.913001][ T6107] dump_emit+0x246/0x370 [ 181.917220][ T6107] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 181.922661][ T6107] dump_user_range+0x6a/0x1a0 [ 181.927323][ T6107] elf_core_dump+0x2866/0x2cc0 [ 181.932062][ T6107] ? load_elf_binary+0x28e0/0x28e0 [ 181.937197][ T6107] ? __fsnotify_parent+0x6db/0x7c0 [ 181.942370][ T6107] ? __inode_attach_wb+0x55a/0x6d0 [ 181.947466][ T6107] ? do_truncate+0x1c6/0x240 [ 181.952034][ T6107] ? putname+0xfe/0x150 [ 181.956168][ T6107] ? __kasan_check_read+0x11/0x20 [ 181.961166][ T6107] ? __ia32_sys_unshare+0x40/0x40 [ 181.966162][ T6107] do_coredump+0x1ba3/0x28e0 [ 181.970726][ T6107] ? simple_acl_create+0x1c0/0x1c0 [ 181.975809][ T6107] ? debug_smp_processor_id+0x17/0x20 [ 181.981154][ T6107] ? kmem_cache_free+0x100/0x2d0 [ 181.986062][ T6107] ? ____kasan_slab_free+0x130/0x160 [ 181.991317][ T6107] ? get_signal+0xb98/0x12e0 [ 181.995881][ T6107] ? kmem_cache_free+0x100/0x2d0 [ 182.000793][ T6107] get_signal+0xf23/0x12e0 [ 182.005185][ T6107] arch_do_signal_or_restart+0xe2/0x11d0 [ 182.010798][ T6107] ? force_sig_fault+0xd7/0x130 [ 182.015623][ T6107] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 182.021230][ T6107] ? __bad_area_nosemaphore+0x420/0x420 [ 182.026749][ T6107] ? do_user_addr_fault+0x779/0xde0 [ 182.031942][ T6107] ? __bad_area_nosemaphore+0x2b0/0x420 [ 182.037466][ T6107] exit_to_user_mode_loop+0xa2/0xe0 [ 182.042642][ T6107] exit_to_user_mode_prepare+0x76/0xa0 [ 182.048079][ T6107] irqentry_exit_to_user_mode+0x9/0x10 [ 182.053506][ T6107] irqentry_exit+0x12/0x60 [ 182.057915][ T6107] exc_page_fault+0x67/0xc0 [ 182.062391][ T6107] ? asm_exc_page_fault+0x8/0x30 [ 182.067298][ T6107] asm_exc_page_fault+0x1e/0x30 [ 182.072119][ T6107] RIP: 0033:0x7f82678fc877 [ 182.076508][ T6107] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 40 1b 00 48 8d 35 c4 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 182.096099][ T6107] RSP: 002b:00007f8266482120 EFLAGS: 00010202 [ 182.102143][ T6107] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8267a46dd9 [ 182.110174][ T6107] RDX: 00007f8266482140 RSI: 00007f8266482270 RDI: 000000000000000b [ 182.118119][ T6107] RBP: 00007f8267adcd69 R08: 0000000000000000 R09: 0000000000000000 [ 182.126074][ T6107] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 182.134024][ T6107] R13: 00007f8267cc0038 R14: 00007f8267cbffa0 R15: 00007ffdac8443c8 [ 182.142937][ T6107] memory: usage 307200kB, limit 307200kB, failcnt 4752 [ 182.149807][ T6107] memory+swap: usage 308776kB, limit 9007199254740988kB, failcnt 0 [ 182.157691][ T6107] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 182.164512][ T6107] Memory cgroup stats for /syz2: [ 182.164583][ T6107] anon 110592 [ 182.164583][ T6107] file 314400768 [ 182.164583][ T6107] kernel_stack 0 [ 182.164583][ T6107] percpu 0 [ 182.164583][ T6107] sock 0 [ 182.164583][ T6107] shmem 135168 [ 182.164583][ T6107] file_mapped 135168 [ 182.164583][ T6107] file_dirty 0 [ 182.164583][ T6107] file_writeback 0 [ 182.164583][ T6107] anon_thp 0 [ 182.164583][ T6107] inactive_anon 69632 [ 182.164583][ T6107] active_anon 135168 [ 182.164583][ T6107] inactive_file 0 [ 182.164583][ T6107] active_file 24576 [ 182.164583][ T6107] unevictable 314437632 [ 182.164583][ T6107] slab_reclaimable 0 [ 182.164583][ T6107] slab_unreclaimable 0 [ 182.164583][ T6107] slab 0 [ 182.164583][ T6107] workingset_refault_anon 66 [ 182.164583][ T6107] workingset_refault_file 2970 [ 182.164583][ T6107] workingset_activate_anon 0 [ 182.164583][ T6107] workingset_activate_file 495 [ 182.164583][ T6107] workingset_restore_anon 0 [ 182.164583][ T6107] workingset_restore_file 99 [ 182.257888][ T6107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1668,pid=6098,uid=0 [ 182.274262][ T6107] Memory cgroup out of memory: Killed process 6098 (syz.2.1668) total-vm:90316kB, anon-rss:1092kB, file-rss:53804kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 182.291513][ T27] oom_reaper: reaped process 6098 (syz.2.1668), now anon-rss:0kB, file-rss:53632kB, shmem-rss:0kB [ 182.291611][ T6110] syz.2.1668 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 182.312395][ T6110] CPU: 0 PID: 6110 Comm: syz.2.1668 Tainted: G B W syzkaller #0 [ 182.321144][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.331178][ T6110] Call Trace: [ 182.334446][ T6110] __dump_stack+0x21/0x24 [ 182.338753][ T6110] dump_stack_lvl+0x1a7/0x208 [ 182.343400][ T6110] ? show_regs_print_info+0x18/0x18 [ 182.348570][ T6110] ? ___ratelimit+0x3de/0x560 [ 182.353222][ T6110] ? __kasan_check_write+0x14/0x20 [ 182.358304][ T6110] ? _raw_spin_lock+0x94/0xf0 [ 182.362959][ T6110] dump_stack+0x15/0x1c [ 182.367091][ T6110] dump_header+0xdd/0x650 [ 182.371395][ T6110] oom_kill_process+0x1fa/0x2c0 [ 182.376218][ T6110] out_of_memory+0x93f/0xd20 [ 182.380796][ T6110] ? unregister_oom_notifier+0x20/0x20 [ 182.386233][ T6110] ? mutex_lock_killable+0xdf/0xf0 [ 182.391314][ T6110] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 182.397787][ T6110] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 182.403435][ T6110] ? mem_cgroup_oom_trylock+0x350/0x350 [ 182.408961][ T6110] ? _raw_spin_trylock_bh+0x150/0x150 [ 182.414336][ T6110] ? _raw_spin_unlock+0x4d/0x70 [ 182.419164][ T6110] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 182.424688][ T6110] try_charge+0xf69/0x1500 [ 182.429099][ T6110] ? __memcg_kmem_charge+0x150/0x150 [ 182.434356][ T6110] ? get_page_from_freelist+0x223b/0x23d0 [ 182.440051][ T6110] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 182.445571][ T6110] __mem_cgroup_charge+0x14c/0x6d0 [ 182.450669][ T6110] __add_to_page_cache_locked+0x1fe/0x9a0 [ 182.456363][ T6110] ? __alloc_pages_nodemask+0x290/0x620 [ 182.461881][ T6110] ? put_page+0xd0/0xd0 [ 182.466009][ T6110] ? workingset_activation+0x250/0x250 [ 182.471437][ T6110] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 182.476969][ T6110] ? find_get_entry+0x37b/0x3e0 [ 182.481791][ T6110] ? page_cache_prev_miss+0x270/0x290 [ 182.487140][ T6110] add_to_page_cache_lru+0xa7/0x210 [ 182.492317][ T6110] pagecache_get_page+0x700/0x930 [ 182.497315][ T6110] grab_cache_page_write_begin+0x59/0xb0 [ 182.502928][ T6110] simple_write_begin+0x36/0x290 [ 182.507843][ T6110] generic_perform_write+0x2ce/0x540 [ 182.513099][ T6110] ? atime_needs_update+0x5b0/0x5b0 [ 182.518268][ T6110] ? grab_cache_page_write_begin+0xb0/0xb0 [ 182.524055][ T6110] ? file_remove_privs+0x5b0/0x5b0 [ 182.529142][ T6110] ? __kasan_check_write+0x14/0x20 [ 182.534238][ T6110] ? down_write+0xb2/0x120 [ 182.538647][ T6110] __generic_file_write_iter+0x24b/0x480 [ 182.544277][ T6110] ? generic_write_checks+0x3d4/0x480 [ 182.549646][ T6110] generic_file_write_iter+0xa9/0x1d0 [ 182.555011][ T6110] __kernel_write+0x535/0x910 [ 182.559682][ T6110] ? vfs_read+0xa60/0xa60 [ 182.563997][ T6110] ? populate_vma_page_range+0xf0/0xf0 [ 182.569444][ T6110] ? __kasan_check_write+0x14/0x20 [ 182.574531][ T6110] dump_emit+0x246/0x370 [ 182.578748][ T6110] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 182.584190][ T6110] dump_user_range+0x6a/0x1a0 [ 182.588847][ T6110] elf_core_dump+0x2866/0x2cc0 [ 182.593591][ T6110] ? load_elf_binary+0x28e0/0x28e0 [ 182.598676][ T6110] ? __fsnotify_parent+0x6db/0x7c0 [ 182.603846][ T6110] ? __inode_attach_wb+0x55a/0x6d0 [ 182.608951][ T6110] ? do_truncate+0x1c6/0x240 [ 182.613518][ T6110] ? putname+0xfe/0x150 [ 182.617649][ T6110] ? __kasan_check_read+0x11/0x20 [ 182.622646][ T6110] ? __ia32_sys_unshare+0x40/0x40 [ 182.627658][ T6110] do_coredump+0x1ba3/0x28e0 [ 182.632232][ T6110] ? simple_acl_create+0x1c0/0x1c0 [ 182.637316][ T6110] ? debug_smp_processor_id+0x17/0x20 [ 182.642665][ T6110] ? kmem_cache_free+0x100/0x2d0 [ 182.647574][ T6110] ? ____kasan_slab_free+0x130/0x160 [ 182.652841][ T6110] ? get_signal+0xb98/0x12e0 [ 182.657410][ T6110] ? kmem_cache_free+0x100/0x2d0 [ 182.662326][ T6110] get_signal+0xf23/0x12e0 [ 182.666733][ T6110] arch_do_signal_or_restart+0xe2/0x11d0 [ 182.672343][ T6110] ? force_sig_fault+0xd7/0x130 [ 182.677177][ T6110] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 182.682782][ T6110] ? __bad_area_nosemaphore+0x420/0x420 [ 182.688300][ T6110] ? __bad_area_nosemaphore+0x2b0/0x420 [ 182.693816][ T6110] exit_to_user_mode_loop+0xa2/0xe0 [ 182.698991][ T6110] exit_to_user_mode_prepare+0x76/0xa0 [ 182.704433][ T6110] irqentry_exit_to_user_mode+0x9/0x10 [ 182.709883][ T6110] irqentry_exit+0x12/0x60 [ 182.714275][ T6110] exc_page_fault+0x67/0xc0 [ 182.718755][ T6110] ? asm_exc_page_fault+0x8/0x30 [ 182.723665][ T6110] asm_exc_page_fault+0x1e/0x30 [ 182.728496][ T6110] RIP: 0033:0x7f82678fc877 [ 182.732885][ T6110] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 40 1b 00 48 8d 35 c4 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 182.752499][ T6110] RSP: 002b:00007f8266482120 EFLAGS: 00010202 [ 182.758539][ T6110] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8267a46dd9 [ 182.766490][ T6110] RDX: 00007f8266482140 RSI: 00007f8266482270 RDI: 000000000000000b [ 182.774431][ T6110] RBP: 00007f8267adcd69 R08: 0000000000000000 R09: 0000000000000000 [ 182.782375][ T6110] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 182.790318][ T6110] R13: 00007f8267cc0038 R14: 00007f8267cbffa0 R15: 00007ffdac8443c8 [ 182.799541][ T6110] memory: usage 307200kB, limit 307200kB, failcnt 4772 [ 182.806391][ T6110] memory+swap: usage 308524kB, limit 9007199254740988kB, failcnt 0 [ 182.814288][ T6110] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 182.821146][ T6110] Memory cgroup stats for /syz2: [ 182.821259][ T6110] anon 110592 [ 182.821259][ T6110] file 311427072 [ 182.821259][ T6110] kernel_stack 0 [ 182.821259][ T6110] percpu 0 [ 182.821259][ T6110] sock 0 [ 182.821259][ T6110] shmem 135168 [ 182.821259][ T6110] file_mapped 135168 [ 182.821259][ T6110] file_dirty 0 [ 182.821259][ T6110] file_writeback 0 [ 182.821259][ T6110] anon_thp 0 [ 182.821259][ T6110] inactive_anon 69632 [ 182.821259][ T6110] active_anon 135168 [ 182.821259][ T6110] inactive_file 0 [ 182.821259][ T6110] active_file 24576 [ 182.821259][ T6110] unevictable 311328768 [ 182.821259][ T6110] slab_reclaimable 0 [ 182.821259][ T6110] slab_unreclaimable 0 [ 182.821259][ T6110] slab 0 [ 182.821259][ T6110] workingset_refault_anon 66 [ 182.821259][ T6110] workingset_refault_file 2970 [ 182.821259][ T6110] workingset_activate_anon 0 [ 182.821259][ T6110] workingset_activate_file 495 [ 182.821259][ T6110] workingset_restore_anon 0 [ 182.821259][ T6110] workingset_restore_file 99 [ 182.914435][ T6110] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1668,pid=6101,uid=0 [ 182.929273][ T6110] Memory cgroup out of memory: Killed process 6101 (syz.2.1668) total-vm:90316kB, anon-rss:1228kB, file-rss:53508kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 182.947359][ T27] oom_reaper: reaped process 6101 (syz.2.1668), now anon-rss:0kB, file-rss:53632kB, shmem-rss:0kB [ 183.175250][ T6111] syz.2.1668 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 183.185279][ T6111] CPU: 0 PID: 6111 Comm: syz.2.1668 Tainted: G B W syzkaller #0 [ 183.194018][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.204051][ T6111] Call Trace: [ 183.207328][ T6111] __dump_stack+0x21/0x24 [ 183.211637][ T6111] dump_stack_lvl+0x1a7/0x208 [ 183.216290][ T6111] ? show_regs_print_info+0x18/0x18 [ 183.221462][ T6111] ? ___ratelimit+0x3de/0x560 [ 183.226115][ T6111] ? _raw_spin_lock+0x94/0xf0 [ 183.230766][ T6111] dump_stack+0x15/0x1c [ 183.234895][ T6111] dump_header+0xdd/0x650 [ 183.239372][ T6111] oom_kill_process+0x1fa/0x2c0 [ 183.244195][ T6111] out_of_memory+0x93f/0xd20 [ 183.248757][ T6111] ? unregister_oom_notifier+0x20/0x20 [ 183.254201][ T6111] ? mutex_lock_killable+0x92/0xf0 [ 183.259283][ T6111] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 183.265786][ T6111] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 183.271321][ T6111] ? mem_cgroup_oom_trylock+0x350/0x350 [ 183.276840][ T6111] ? _raw_spin_trylock_bh+0x150/0x150 [ 183.282192][ T6111] ? _raw_spin_unlock+0x4d/0x70 [ 183.287012][ T6111] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 183.292533][ T6111] try_charge+0xf69/0x1500 [ 183.296923][ T6111] ? __memcg_kmem_charge+0x150/0x150 [ 183.302180][ T6111] ? get_page_from_freelist+0x223b/0x23d0 [ 183.307871][ T6111] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 183.313391][ T6111] __mem_cgroup_charge+0x14c/0x6d0 [ 183.318510][ T6111] __add_to_page_cache_locked+0x1fe/0x9a0 [ 183.324199][ T6111] ? __alloc_pages_nodemask+0x290/0x620 [ 183.329721][ T6111] ? put_page+0xd0/0xd0 [ 183.333853][ T6111] ? workingset_activation+0x250/0x250 [ 183.339282][ T6111] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 183.344795][ T6111] ? find_get_entry+0x37b/0x3e0 [ 183.349616][ T6111] ? page_cache_prev_miss+0x270/0x290 [ 183.354960][ T6111] add_to_page_cache_lru+0xa7/0x210 [ 183.360131][ T6111] pagecache_get_page+0x700/0x930 [ 183.365129][ T6111] grab_cache_page_write_begin+0x59/0xb0 [ 183.370740][ T6111] simple_write_begin+0x36/0x290 [ 183.375651][ T6111] generic_perform_write+0x2ce/0x540 [ 183.381001][ T6111] ? atime_needs_update+0x5b0/0x5b0 [ 183.386178][ T6111] ? grab_cache_page_write_begin+0xb0/0xb0 [ 183.391957][ T6111] ? file_remove_privs+0x5b0/0x5b0 [ 183.397047][ T6111] ? __kasan_check_write+0x14/0x20 [ 183.402128][ T6111] ? down_write+0xb2/0x120 [ 183.406521][ T6111] __generic_file_write_iter+0x24b/0x480 [ 183.412123][ T6111] ? generic_write_checks+0x3d4/0x480 [ 183.417471][ T6111] generic_file_write_iter+0xa9/0x1d0 [ 183.422814][ T6111] __kernel_write+0x535/0x910 [ 183.427483][ T6111] ? vfs_read+0xa60/0xa60 [ 183.431789][ T6111] ? populate_vma_page_range+0xf0/0xf0 [ 183.437218][ T6111] ? __kasan_check_write+0x14/0x20 [ 183.442317][ T6111] dump_emit+0x246/0x370 [ 183.446546][ T6111] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 183.451986][ T6111] dump_user_range+0x6a/0x1a0 [ 183.456644][ T6111] elf_core_dump+0x2866/0x2cc0 [ 183.461387][ T6111] ? load_elf_binary+0x28e0/0x28e0 [ 183.466483][ T6111] ? __fsnotify_parent+0x6db/0x7c0 [ 183.471570][ T6111] ? __inode_attach_wb+0x55a/0x6d0 [ 183.476658][ T6111] ? do_truncate+0x1c6/0x240 [ 183.481219][ T6111] ? putname+0xfe/0x150 [ 183.485348][ T6111] ? __kasan_check_read+0x11/0x20 [ 183.490353][ T6111] ? __ia32_sys_unshare+0x40/0x40 [ 183.495350][ T6111] do_coredump+0x1ba3/0x28e0 [ 183.499915][ T6111] ? simple_acl_create+0x1c0/0x1c0 [ 183.505177][ T6111] ? debug_smp_processor_id+0x17/0x20 [ 183.510534][ T6111] ? kmem_cache_free+0x100/0x2d0 [ 183.515444][ T6111] ? ____kasan_slab_free+0x130/0x160 [ 183.520710][ T6111] ? get_signal+0xb98/0x12e0 [ 183.525272][ T6111] ? kmem_cache_free+0x100/0x2d0 [ 183.530183][ T6111] get_signal+0xf23/0x12e0 [ 183.534581][ T6111] arch_do_signal_or_restart+0xe2/0x11d0 [ 183.540184][ T6111] ? force_sig_fault+0xd7/0x130 [ 183.545006][ T6111] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 183.550613][ T6111] ? __bad_area_nosemaphore+0x420/0x420 [ 183.556135][ T6111] ? do_user_addr_fault+0x779/0xde0 [ 183.561314][ T6111] ? __bad_area_nosemaphore+0x2b0/0x420 [ 183.566832][ T6111] exit_to_user_mode_loop+0xa2/0xe0 [ 183.572010][ T6111] exit_to_user_mode_prepare+0x76/0xa0 [ 183.577449][ T6111] irqentry_exit_to_user_mode+0x9/0x10 [ 183.582906][ T6111] irqentry_exit+0x12/0x60 [ 183.587296][ T6111] exc_page_fault+0x67/0xc0 [ 183.591773][ T6111] ? asm_exc_page_fault+0x8/0x30 [ 183.596681][ T6111] asm_exc_page_fault+0x1e/0x30 [ 183.601511][ T6111] RIP: 0033:0x7f82678fc877 [ 183.605905][ T6111] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 40 1b 00 48 8d 35 c4 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 183.625481][ T6111] RSP: 002b:00007f8266482120 EFLAGS: 00010202 [ 183.631536][ T6111] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8267a46dd9 [ 183.639479][ T6111] RDX: 00007f8266482140 RSI: 00007f8266482270 RDI: 000000000000000b [ 183.647422][ T6111] RBP: 00007f8267adcd69 R08: 0000000000000000 R09: 0000000000000000 [ 183.655370][ T6111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.663316][ T6111] R13: 00007f8267cc0038 R14: 00007f8267cbffa0 R15: 00007ffdac8443c8 [ 183.671785][ T6111] memory: usage 307200kB, limit 307200kB, failcnt 5352 [ 183.678665][ T6111] memory+swap: usage 308524kB, limit 9007199254740988kB, failcnt 0 [ 183.686564][ T6111] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 183.693389][ T6111] Memory cgroup stats for /syz2: [ 183.693466][ T6111] anon 245760 [ 183.693466][ T6111] file 314400768 [ 183.693466][ T6111] kernel_stack 0 [ 183.693466][ T6111] percpu 0 [ 183.693466][ T6111] sock 0 [ 183.693466][ T6111] shmem 135168 [ 183.693466][ T6111] file_mapped 135168 [ 183.693466][ T6111] file_dirty 0 [ 183.693466][ T6111] file_writeback 0 [ 183.693466][ T6111] anon_thp 0 [ 183.693466][ T6111] inactive_anon 106496 [ 183.693466][ T6111] active_anon 0 [ 183.693466][ T6111] inactive_file 65536 [ 183.693466][ T6111] active_file 24576 [ 183.693466][ T6111] unevictable 314437632 [ 183.693466][ T6111] slab_reclaimable 0 [ 183.693466][ T6111] slab_unreclaimable 0 [ 183.693466][ T6111] slab 0 [ 183.693466][ T6111] workingset_refault_anon 264 [ 183.693466][ T6111] workingset_refault_file 3993 [ 183.693466][ T6111] workingset_activate_anon 0 [ 183.693466][ T6111] workingset_activate_file 495 [ 183.693466][ T6111] workingset_restore_anon 0 [ 183.693466][ T6111] workingset_restore_file 99 [ 183.786772][ T6111] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1668,pid=6110,uid=0 [ 183.801682][ T6111] Memory cgroup out of memory: Killed process 6110 (syz.2.1668) total-vm:90448kB, anon-rss:1220kB, file-rss:53804kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 183.818982][ T27] oom_reaper: reaped process 6110 (syz.2.1668), now anon-rss:0kB, file-rss:53632kB, shmem-rss:0kB [ 183.836955][ T6111] syz.2.1668 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 183.847023][ T6111] CPU: 0 PID: 6111 Comm: syz.2.1668 Tainted: G B W syzkaller #0 [ 183.855765][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.865806][ T6111] Call Trace: [ 183.869071][ T6111] __dump_stack+0x21/0x24 [ 183.873369][ T6111] dump_stack_lvl+0x1a7/0x208 [ 183.878016][ T6111] ? show_regs_print_info+0x18/0x18 [ 183.883184][ T6111] ? ___ratelimit+0x3de/0x560 [ 183.887830][ T6111] ? __kasan_check_write+0x14/0x20 [ 183.892909][ T6111] ? _raw_spin_lock+0x94/0xf0 [ 183.897556][ T6111] dump_stack+0x15/0x1c [ 183.901678][ T6111] dump_header+0xdd/0x650 [ 183.905975][ T6111] oom_kill_process+0x1fa/0x2c0 [ 183.910794][ T6111] out_of_memory+0x93f/0xd20 [ 183.915352][ T6111] ? unregister_oom_notifier+0x20/0x20 [ 183.920789][ T6111] ? mutex_lock_killable+0x92/0xf0 [ 183.925892][ T6111] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 183.932364][ T6111] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 183.937877][ T6111] ? mem_cgroup_oom_trylock+0x350/0x350 [ 183.943416][ T6111] ? _raw_spin_trylock_bh+0x150/0x150 [ 183.948759][ T6111] ? _raw_spin_unlock+0x4d/0x70 [ 183.953583][ T6111] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 183.959094][ T6111] try_charge+0xf69/0x1500 [ 183.963480][ T6111] ? __memcg_kmem_charge+0x150/0x150 [ 183.968733][ T6111] ? get_page_from_freelist+0x223b/0x23d0 [ 183.974430][ T6111] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 183.980030][ T6111] __mem_cgroup_charge+0x14c/0x6d0 [ 183.985127][ T6111] __add_to_page_cache_locked+0x1fe/0x9a0 [ 183.990815][ T6111] ? __alloc_pages_nodemask+0x290/0x620 [ 183.996324][ T6111] ? put_page+0xd0/0xd0 [ 184.000459][ T6111] ? workingset_activation+0x250/0x250 [ 184.005886][ T6111] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 184.011396][ T6111] ? find_get_entry+0x37b/0x3e0 [ 184.016221][ T6111] ? page_cache_prev_miss+0x270/0x290 [ 184.021560][ T6111] add_to_page_cache_lru+0xa7/0x210 [ 184.026737][ T6111] pagecache_get_page+0x700/0x930 [ 184.031730][ T6111] grab_cache_page_write_begin+0x59/0xb0 [ 184.037333][ T6111] simple_write_begin+0x36/0x290 [ 184.042354][ T6111] generic_perform_write+0x2ce/0x540 [ 184.047609][ T6111] ? atime_needs_update+0x5b0/0x5b0 [ 184.052775][ T6111] ? grab_cache_page_write_begin+0xb0/0xb0 [ 184.058555][ T6111] ? file_remove_privs+0x5b0/0x5b0 [ 184.063633][ T6111] ? __kasan_check_write+0x14/0x20 [ 184.068722][ T6111] ? down_write+0xb2/0x120 [ 184.073129][ T6111] __generic_file_write_iter+0x24b/0x480 [ 184.078730][ T6111] ? generic_write_checks+0x3d4/0x480 [ 184.084072][ T6111] generic_file_write_iter+0xa9/0x1d0 [ 184.089416][ T6111] __kernel_write+0x535/0x910 [ 184.094063][ T6111] ? vfs_read+0xa60/0xa60 [ 184.098362][ T6111] ? populate_vma_page_range+0xf0/0xf0 [ 184.103791][ T6111] ? __kasan_check_write+0x14/0x20 [ 184.108871][ T6111] dump_emit+0x246/0x370 [ 184.113084][ T6111] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 184.118528][ T6111] dump_user_range+0x6a/0x1a0 [ 184.123173][ T6111] elf_core_dump+0x2866/0x2cc0 [ 184.127924][ T6111] ? load_elf_binary+0x28e0/0x28e0 [ 184.133028][ T6111] ? __fsnotify_parent+0x6db/0x7c0 [ 184.138117][ T6111] ? __inode_attach_wb+0x55a/0x6d0 [ 184.143209][ T6111] ? do_truncate+0x1c6/0x240 [ 184.147788][ T6111] ? putname+0xfe/0x150 [ 184.151926][ T6111] ? __kasan_check_read+0x11/0x20 [ 184.156933][ T6111] ? __ia32_sys_unshare+0x40/0x40 [ 184.161930][ T6111] do_coredump+0x1ba3/0x28e0 [ 184.166494][ T6111] ? simple_acl_create+0x1c0/0x1c0 [ 184.171580][ T6111] ? debug_smp_processor_id+0x17/0x20 [ 184.176923][ T6111] ? kmem_cache_free+0x100/0x2d0 [ 184.181828][ T6111] ? ____kasan_slab_free+0x130/0x160 [ 184.187085][ T6111] ? get_signal+0xb98/0x12e0 [ 184.191642][ T6111] ? kmem_cache_free+0x100/0x2d0 [ 184.196549][ T6111] get_signal+0xf23/0x12e0 [ 184.200942][ T6111] arch_do_signal_or_restart+0xe2/0x11d0 [ 184.206632][ T6111] ? force_sig_fault+0xd7/0x130 [ 184.211478][ T6111] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 184.217088][ T6111] ? __bad_area_nosemaphore+0x420/0x420 [ 184.222600][ T6111] ? do_user_addr_fault+0x779/0xde0 [ 184.227768][ T6111] ? __bad_area_nosemaphore+0x2b0/0x420 [ 184.233418][ T6111] exit_to_user_mode_loop+0xa2/0xe0 [ 184.238591][ T6111] exit_to_user_mode_prepare+0x76/0xa0 [ 184.244024][ T6111] irqentry_exit_to_user_mode+0x9/0x10 [ 184.249454][ T6111] irqentry_exit+0x12/0x60 [ 184.253839][ T6111] exc_page_fault+0x67/0xc0 [ 184.258307][ T6111] ? asm_exc_page_fault+0x8/0x30 [ 184.263213][ T6111] asm_exc_page_fault+0x1e/0x30 [ 184.268046][ T6111] RIP: 0033:0x7f82678fc877 [ 184.272432][ T6111] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 40 1b 00 48 8d 35 c4 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 184.292007][ T6111] RSP: 002b:00007f8266482120 EFLAGS: 00010202 [ 184.298044][ T6111] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8267a46dd9 [ 184.305986][ T6111] RDX: 00007f8266482140 RSI: 00007f8266482270 RDI: 000000000000000b [ 184.313949][ T6111] RBP: 00007f8267adcd69 R08: 0000000000000000 R09: 0000000000000000 [ 184.321892][ T6111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 184.329836][ T6111] R13: 00007f8267cc0038 R14: 00007f8267cbffa0 R15: 00007ffdac8443c8 [ 184.339275][ T6111] memory: usage 307200kB, limit 307200kB, failcnt 5539 [ 184.346136][ T6111] memory+swap: usage 308272kB, limit 9007199254740988kB, failcnt 0 [ 184.354024][ T6111] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 184.360890][ T6111] Memory cgroup stats for /syz2: [ 184.360996][ T6111] anon 245760 [ 184.360996][ T6111] file 311156736 [ 184.360996][ T6111] kernel_stack 0 [ 184.360996][ T6111] percpu 0 [ 184.360996][ T6111] sock 0 [ 184.360996][ T6111] shmem 135168 [ 184.360996][ T6111] file_mapped 135168 [ 184.360996][ T6111] file_dirty 0 [ 184.360996][ T6111] file_writeback 0 [ 184.360996][ T6111] anon_thp 0 [ 184.360996][ T6111] inactive_anon 106496 [ 184.360996][ T6111] active_anon 0 [ 184.360996][ T6111] inactive_file 65536 [ 184.360996][ T6111] active_file 24576 [ 184.360996][ T6111] unevictable 311193600 [ 184.360996][ T6111] slab_reclaimable 0 [ 184.360996][ T6111] slab_unreclaimable 0 [ 184.360996][ T6111] slab 0 [ 184.360996][ T6111] workingset_refault_anon 264 [ 184.360996][ T6111] workingset_refault_file 3993 [ 184.360996][ T6111] workingset_activate_anon 0 [ 184.360996][ T6111] workingset_activate_file 495 [ 184.360996][ T6111] workingset_restore_anon 0 [ 184.360996][ T6111] workingset_restore_file 99 [ 184.454383][ T6111] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1668,pid=6109,uid=0 [ 184.469252][ T6111] Memory cgroup out of memory: Killed process 6109 (syz.2.1668) total-vm:90448kB, anon-rss:1188kB, file-rss:53804kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0