last executing test programs: 2m13.693356245s ago: executing program 32 (id=1346): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 2m3.693860229s ago: executing program 33 (id=1415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000300)=""/187, 0xbb) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/igmp6\x00') read$FUSE(r3, &(0x7f0000002a80)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsmount(r4, 0x0, 0x8) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) 2m2.063431897s ago: executing program 1 (id=1422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000e40)={[{@abort}, {@barrier_val={'barrier', 0x3d, 0x10001}}]}, 0x2, 0x569, &(0x7f0000000e80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4004, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$cgroup2(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000001c0), 0x800, &(0x7f00000002c0)={[{@memory_hugetlb_accounting}, {@memory_localevents}, {}, {@subsystem='freezer'}, {@pids_localevents}, {@subsystem='memory'}, {@memory_hugetlb_accounting}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') read$FUSE(r1, 0x0, 0x0) 2m1.445446126s ago: executing program 1 (id=1427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2m1.049392025s ago: executing program 1 (id=1430): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x2, 0xae}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e20, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000000000000080000003f3984dfe2ac02ffdf9f748f1bcd870b12367c0aa0fff7aac8dbb82cda7c5fc5196271fa865ec3a1428039a60144418203fe51146368f19fae39ad77ac769d3b56bbf8e600e820520479d5fd08ba02549f4b3a37cfb473f42c2f564f7d4b02132e0e679d92baf2fc43e315d5e3a6c6b5de7dd738c51fe0", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0) 2m1.009991867s ago: executing program 34 (id=1430): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x2, 0xae}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e20, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000000000000080000003f3984dfe2ac02ffdf9f748f1bcd870b12367c0aa0fff7aac8dbb82cda7c5fc5196271fa865ec3a1428039a60144418203fe51146368f19fae39ad77ac769d3b56bbf8e600e820520479d5fd08ba02549f4b3a37cfb473f42c2f564f7d4b02132e0e679d92baf2fc43e315d5e3a6c6b5de7dd738c51fe0", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0) 1m55.768928706s ago: executing program 35 (id=1475): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r3, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(0x0, r2, &(0x7f0000000100)='./config/usb_gadget/g1/functions/ecm.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r7, &(0x7f00000004c0)='\n', 0x1) socket(0x10, 0x803, 0x0) 1m55.687491639s ago: executing program 36 (id=1478): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r4, r5, 0x25, 0x4, @val=@tcx}, 0x1c) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) 1m54.661558978s ago: executing program 3 (id=1483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(r2, &(0x7f0000001840)=""/4096, 0x1000) 1m53.781588419s ago: executing program 3 (id=1488): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[], 0x8, 0x2f1, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @loopback, 0x10}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000002900000032000000fe80"], 0x28}, 0x4040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) 1m53.641883296s ago: executing program 37 (id=1489): close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b)<', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) (fail_nth: 2) 1m53.295957133s ago: executing program 3 (id=1492): creat(&(0x7f0000000540)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00') (fail_nth: 1) 1m52.906153951s ago: executing program 3 (id=1493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000e40)={[{@abort}, {@barrier_val={'barrier', 0x3d, 0x10001}}]}, 0x2, 0x569, &(0x7f0000000e80)="$eJzs3cFvG1kZAPBv3LhJu+mmC3sABGxZFgoqdRp3W62WA90LaLVaCbHixKGbTbxRVLuuYldsTA/pkftKVOIE/AfcOCDtiQM3biBx2MtyQCpQgbZIHIxmPEncxK69TepJ499PmnjmvfF879l582aeZb8Apta5iNiKiJMR8W5ELOTpSb7Etd6S7vfpgzsrDx/cWUmi233nn0mWn6ZF33NSz+XHnIuIH/0g4r1kf9zWZufGcr1e28i3F9uNW4utzc7F9VKeUr26dPXSa5evVA+tri81fnv/++tv/fj3v/vKJ3/a+vbP0mLN//xMltdfj13lA8dM8uPM96XNRMRbBz7y0TGT///w7Elb2+ci4uWs/S/EiezdHOnKd9/7ztMvHADwVHS7C9Fd6N8GAI679P5/PpJSJR8LmI9SqVLpjeG9GKdL9WarfWGhefvmamRjWGejXHp/vV67lI8Vno1ykm4vZeu729VHtj+sXY6IFyLiw9lTWX5lpVlfLfLCBwCm2HN7+v//zPb6/34H/xQMADhy5oouAAAwcX39/9kiywEATI77fwCYPvv7/6Ef+Y/17UAA4Ohz/w8A02e7/58vuBwAwOSMvP+/O5lyAAAT8cO3306X7sPe719v/1L3xdVa60alcXulstLcuFVZazbX6rXKSrc76nj1ZvPW0qs7m63NzvVG8/bN9vX1xvJa7XrNbwkAQPFeeOmjv6Sd/tbrp7Il+uZy0FfD8VYqugBAYU4UXQCgML7PA9NrjHt8wwBwzA2YorcnHyBIhu1wz+Sv8Kw6/0Xj/zCt9o7/v/kZnmvsAJ5tTzb+/71DLwcwefpwmF7dbmLOfwCYMrtj/LOPXhgM/UAQOG5GNffeT4TM7s+4N8bBrz1ZmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCom8+WpFTJ5gLfSv+WKpWIMxFxNsrJ++v12qWIeD4i/jxbnk23l4ouNABwQKW/J/n8X+cXXpnfm3sy+W826dfJiPjpL9/5xQfL7fbGUpr+r5309r00/VR7o3qyiAoAAP225938eDcp67+r+WPfjfynD+6sbC+TLOL9NyJi7lQW/2G+9HJmYiZ7nItyRJz+d5Jv96TXKycOIf7W3Yj4wnb95+KDvgjz2RhIb+bTvfHT2GcOPX7/6783fumR+payvPSxnL0Wn489hQNG+uiN3nkyb3tpE8/bXynOZY+D2/9cdoY6uPT8lzbXh/vOf6Wd89+JffGTrM2f29l+fEnuv/qHN/cldhd6eXcjvjQzKH6yEz8ZfP4tvzJmHT/+8ldfHpbX/VXE+YH1356RupGdZhfbjVuLrc3OxfXG8lptrXazWr26dPXSa5evVBezMere3z8OivGP1y88Pyx+Wv/TQ+LPPb7+8Y0x6//r/737k689Jv63vj74/X/xMfHTPvGbY8ZfPn1tblheGn91SP1HvP9xYcz4n/ytszrmrgDABLQ2OzeW6/XaxoiV9Fpz1D5Wxl9J7+13U7Zv2IspT2xFfLZnlYdmZYMSETHw6ekVdeGv/FNdSTrplXER0X9z2Acs8qwETMJuox++z18nWSAAAAAAAAAAAAAAAGCf1mbnxuzgb2sd2krRdQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4+n8AAAD///1EwkM=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4004, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$cgroup2(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000001c0), 0x800, &(0x7f00000002c0)={[{@memory_hugetlb_accounting}, {@memory_localevents}, {}, {@subsystem='freezer'}, {@pids_localevents}, {@subsystem='memory'}, {@memory_hugetlb_accounting}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x4) read$FUSE(r1, 0x0, 0x0) 1m52.680703802s ago: executing program 38 (id=1494): socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRES16, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m52.534406119s ago: executing program 3 (id=1496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1m52.443408533s ago: executing program 8 (id=1476): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r0, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000100)='./config/usb_gadget/g1/functions/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 1m52.422830655s ago: executing program 8 (id=1497): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 1m52.363271337s ago: executing program 8 (id=1498): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r2, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001000000") (async) open_tree(r0, &(0x7f0000000080)='./file1\x00', 0x88000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(&(0x7f0000000040), &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/tty/rfcomm0/address\x00', 0x0, 0x0) read(r3, &(0x7f0000000300)=""/64, 0x40) (async) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r4, r5) 1m51.781114734s ago: executing program 8 (id=1499): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000080000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000e100000055190100000000009500000000000000850000000f000000bf91000000000000b7020000010000008500000085000000b700b32b000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001340)="0ac568db97b79d9815efa5801479125b20bb465e6c6524738bda905f284a5b63d235dbafe9dc9ad053c78896afbea41b15d39a5331cb6e4fee6f9a11990d7efb5d9620c1c32a8b854f8f10d5a0d6a04e0ab61872e181c2032555160319770fdd4747626318a2bcbc9092cff8c7a22abb7e1383e324e55ff5326d9eee0aa1daa93d7e99083be32c6b82a0abf11e8edcf35f359d7167094978e220e58e7053118f7c8de21d2638fc01caa8161dacdcfdcec915c2b82592438ec97aa1a00ea696acda65445ae1f9474d15f317908c9465777656aee231317088cc18f433af8c9cd9494fd8de5c2fba8dd4622aae39f6cd6de86b51498432c8ab984158ea6d498aacfbd677496bddb0d988511a3def231b0efff1d56a981c018d205121419665906274957bccf9382d3b6b0f9e453d23ea1f523cb613720873a4988dbf00da0a1c3b23c977b0a675baf13f69d0b9e09a9ee3783f9516939afd30541256b48f50424b2c197fa40f61fc7940d28b03dacbc9fd69efe3b902fdc5658ba3a809f4657f809ac720ca18f09d9b6df0c21238b2423c46e8b2ba35c94bf0359f990ca2eb66b1521cbce88201edf5851c7e835b2a805201555750245cbcced7f4dcde3d51c05356434f81556d6117c9fb3728d403f5ecc7f30c630d0910b6bfdeb672e6e17338e9df030555b8b6c16e41811e9d9fcf29e9d73fb90b2f14dc6ed69bc5830bd833c899956be15676c7c7697ee8b211070daebc9da357c63377411967829b715707809f0d29c1f73df70126b0f905ef74605166c57e1975cf94e424cf4aee03ae355703d71fbed0e59edf9526e75f73e85250c9911044f3f10114b2f0dfdfbc54a8a9e11a2dce3133131ffa926b2ea2ac63067277ec0a33d58753d132b34e362f9c33459fcd959cce182c143958c798819453351a519586408c0a08015b20b6aea0d366aa75e4c14f9a8046743ae2423970686a8e9d694405124b9b2098fb6b08c89963b970f2e0194c61a7eca380670c3e66da277466b563938468ea42caafac326a61fb48463a7492576acfd400c2d4d26d86516a0e9f3199e154cff271af2f4bb6cbf466f20731df8485f447a281d9a2488a51bbfd24e4404268098c8f48bee272f2177f9d9f13486b58aaf31601e8ce5d2f813f5b327f090ff6595f86a1c8bdb02a4421aed403a4f70ed30841bb7096a1a84d5c52877c7ddf377f9431e920e328c712fcedf5cd7a532ff0df03facb539a7f4bb34acfbe5364403c29d0be0420f9813f7124386f4197f2166fd7385581d9e95912d6084166a6ec141462e4d4a45dcbe5c1c74f787ff6dbc1e1f6be9a27df697c3e10e1f1a3add7fa048b258d6689e80f9eff66be46e4d69efa64c46872b77d1cbb6eb846a5f009b0e108ffe7a70686a43f650451d084467b22f40decf31b1d1b3112922aa932f17772bf667427ef296ed46cfc94b6b560d72b1cf10130a10e1b18c2aed508d36064319962d430e5980ba7285e3bad3b7991de90843485d67e562489ae56d32721ca91d58a39d1ad6034d6f711f3ed4a9115f6ff55cbb294efe44f51c2b0717a92d3561319ee383037132eb2c94f43e65d2031a539f6cea0c66b6ac2216c0f94bab28b505a014cf3a8a90daa87c6c07a153a4118441f5686bf0058e7f4cc5465663d0572856eac85b00818e2bba620fbcdd473884a36256deedb2ab5b9518d32e6bba19e4a674408fa964a6f43f4109e404228a6378894d801d51ad2d5ee1217168aed3093619cb7564bb1583cd172b92a62787a8a943bdd21d839c6a5905cd885a29bd8a3adbf59c692fff2612daaf0a62c59b4f9d7dd917ec7d818710ee051d6f9d29625ba9b945a7f0ef9dbfb36b0c004e498a5a13b0a0d0d725d8bf2c01625bb5b8e3db79fe7d2c79d5efd41ad3ef7f5cb54aa5ca757ffcb437529aad5411a8386a52fa0817d8855d65782a234f76fda75d8ecbb37c382f21152960991acf0eab079641b69c1b745090ad66ad7673eadc98d39285f7c74e7043f2a90d6b7d375c0e3e102cf80cae1ae2cea98c363386f7fc1e21c0f55d20d5b9f5f3986577a61055da82e5fec80ebc91f8233a4bd22c5bf9b6a9d02c354ade01a2e975951da6a13e7aa5781151872f952421685052e86612586143a85116821ba99a3775fce3ec45c4f2ef106c3e2a0893e2486389a66985a72ca8c28d604a2e1e405db82eaaab77f425f60c6a11cc73ed7b7f3b6f0d15d97ff977118b116eec73f80eb4061a20de4804da7c2ae4c7276ae5c76079148b0687a30d3bc0203d92f89a7739fb569b532c8d14cd1c6d3383f0adf60351946a078a75f429099a118842c8b75955ba073d8ad1da1d0cf291b708e44440b3dcf7a35aee9f2e818dccfb760aa92f932cf8353c70ad6bfb14bdf163217db68ccc97415ae9396bf641a3271dc5c1356378f8398af1b4c466900bf24efa21fe378ab073f5476cf2558eaadeb8b91c75e6fae161a9db690aa6c625767e1ef116e8b1c82580600dd4116705aee1e967cec4234f8e7933299eb8e294bdc60b99f453342c60f93749be0e1ed9759dbcc566cf33b05e2c2b6d287bf2173e5d5f5a41bc41351ee07d638619bbbef9d2ceacf0940dd02f0f89b4fc863626f2a98b23a15a2d91c9779bb2bc89be81217070b34fcaa2d2053163a8a994f02f63a5d34971acb0e1dae09a663ca999eeca94eea30362eebddc53242f39c0fa89bf380633c369a40391979e827afdd4187a7624f5a6ac7995db7ec4ed1c4afb53bccf90ee889eefd232db06f62d68bf4c108c00759f6eb536fa3b630101f153a72b51311538231ad686f54e7dece397a52562d814f10ce28256b5bbe38876b61f4845563f9060c383b4f43fd33059271a181f8b8a6e4e34cff645ad681a822c49d4487e2fab45bc2f5db03a2886bf8e9c9aa15e61119a639a06e3df2611bcbab0c1a8c7f897932b3d76f80c47a27349f3ba27d2f477e85d8fafb4689ec50d4940e32b4b2effe90a202880532206031851d08ce1011085466356bc56ac1eeab3b72513c8d43cf624287931ea263609ef1e3db4038b682c5838d600e6a6c04e760ddc46141a120078c82dc5da45ba4b3fe6fda746ba39dd8a725b96720abd6fb4fb83603d956ecb37701d8e7c00bd3c788e5c5746dad9df3a330ecfefc4029a9c334cbe7203d723d8ccb1603f8c1aac12dbf9e4188a7af23a485158df6b7adf855ebe19a728c8cdf485dd4554da650643a19552ee85c2bd58f8c035a19bde4507287d499d42073ae5861aef7f196e5c3543679a19b383144de5ba5f750e9f16cb70eb84d35ca89c5ad78f4e50d17b906799698ac54def82748cd7526116fe7898c071d918e9ed29a083101fc24ca02c12f822cc9309e3232898995bb9f1daf8a7d617dc26d55444b1a75c8df614aa3dc43954d1d93fa370a68244a4af129228112d7b9d0e4547b951671953647cb07c0d6fe0aae314be2fd097c7b78ad6cbe072228078daf814576f43f9e7592e946be0e66bf4138d50119d3cb1712725a5ad6bec342f90c8779ab1152399361c6dac7956d83b618576c5e1a52fe58f795d1525c203f027dbf41ef5cbefefeb4a595ef80fc4e30f5dd53253d004a23261156059f07126316724b29f9bc3c72bcef48d9117a48dcf3cb0cc61efc18df0810ab20350a498bf41e6adeac4eaf8cd51f226cbe0d3c399c4598b2eb19d3b31d94821afbfdecfca55aeb3163981072591601592b0e00d53773821f9a6d8bd87dcdecc75e73090fc3e5faf427658d38430b169953277764d487fc7eeb89b3bb407d164ee85d22cda60c2ceae2d8a50fc5185ec2bdb454e91763da538f11b81f2298a09cce08b2bc9e2fdb85009182ae990e9e43242bf7189eb7d5acac60050836819582315fa24d85083843a167e9ba75d2f84cba99047ab08e4dfc397161a4ff65ad3aa459cec458395ef8e1f7b0a2b39c48cfc13795aba51b97e91416261fa98aa1e4a7b6002787e290cb2715e80a2ef9d9deeb647c8011b365ee5ae6ba38b3e5990c0edd62681a6608989234ff11a0b2d1d8e0d44cd232a3410f63c1dba64483187857a0a8aec62925e10fbf6e205a6df8bd33502cd458d1307bbd66f22a303d6673e0ffa7d4f5ab21da8148647c6e639041fdd815a548f429d84fcd5cdd223577cda70b75ac2f5e4ca9f6df6fc0d2f9848fe4810a76ab9f3375b757feb67eaca2eac9db45e387eafde284910edcea2459cf1ffbd2e25bd062640e964c22cc48981ba5a2ed656de302f02275406753d95dd8177e7d3547bc12a168ebb2dae498540a237369e8ce2b23636ecfa7a87007268438ae08ff0f3a3668755c705d0e72a36af8c9c4442ceb928c28b38bb909f049b04b67f839fd88fb64973f275a6489d097a22d5e88088b5f774194791cfe8dad2f7991947bc086c423eb908df7a671052ef920d6ca9174939dcd61c08f4cda729874a5d09e8c194e62e159e39432b07398c446b34346a3fb2937f9d9af1a781778ee28dc9ba002713fd799276d8d1984c64c476309c3b2d2d627ff5a32fc45a136dbe34512f2c71037c2ca938c5555147f8dd17dafd197d0960dc8ca58cd8005cdf8c9b07d560909985010698ca9d7ecb743290a95c855c589c99cce902de2e2eb431c07c2ec6961ee79d53081e56a2846363a4c234274a6f5790dfb77f3435a12be785d814ba87fb37527eeca4010a4f58ceb6ba62febbf37faf80a096badb6c895efe162fc01973eed2ebcc13a9e727a10eeb57d4135cb9dcc80fa9d2c5cd58a31a6a80e16558899e8a2387982acc851894855ecb41f7fa51b9b324193", 0xd4f}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0x10, 0x2}, 0x50) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f00000000c0)=0x5, 0x4) 1m51.711068848s ago: executing program 8 (id=1500): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000340), 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0c009900fd"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 1m51.532080266s ago: executing program 3 (id=1501): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 1m51.47357392s ago: executing program 39 (id=1501): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 1m51.153927805s ago: executing program 8 (id=1504): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r0, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000100)='./config/usb_gadget/g1/functions/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 1m51.073886548s ago: executing program 40 (id=1504): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r0, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000100)='./config/usb_gadget/g1/functions/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 1m49.694130633s ago: executing program 2 (id=1510): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x800ffd, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x800f, 0x0, 0x7, 0x0, 0x0, 0x10, 0x3}}, 0x50) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x2004402, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101441) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(r2, &(0x7f0000000240)='./file1\x00', 0x400080, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) creat(&(0x7f0000000140)='./file0/file2\x00', 0x14) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 1m48.660189853s ago: executing program 2 (id=1513): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080)=r5, 0x12) 1m48.660009813s ago: executing program 1 (id=1502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000e40)={[{@abort}, {@barrier_val={'barrier', 0x3d, 0x10001}}]}, 0x2, 0x569, &(0x7f0000000e80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4004, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x4) read$FUSE(r1, 0x0, 0x0) 1m47.745319216s ago: executing program 2 (id=1517): syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600010a60014040000000000010000000000000000000000ff020000000000000000000000000001223427d5c9a46b9fa14172170a013589317d2af3"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000080)={0x1000, 0x8, 0x5, 0xb, 0x0, 0xfffffffc}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000001c80)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file2\x00', 0x64, &(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYRES16], 0xfe, 0x1520, &(0x7f00000006c0)="$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") r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x2, {{0xa, 0x1, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d40)=ANY=[@ANYRESOCT=r5, @ANYBLOB="49676ae01208df96ceb70ab97455bcb34cbd34524a8d66802eaaff15c67564089778dcb393263eb2dff70efb1745f4934cb274438f0523ce255a710dfa1a9cee0d0359804fef2ebaf32e634f2e902e233a984b98a4ef2fadcd767f1ffab9e1b4b3366556", @ANYRES8=r5, @ANYBLOB="1872a2ef959b80f4b6b2b2a536a4726d06897bf1bdb0e4b42427a1a91e6e73bb39dffe256f3459b691957e326ba945b0eb8d9959b3e0db33ae4f372d86f918a59e5af8acdbd2ba137a624b9023e0498bf8b3256ca65b11baa7d9e38ae6c3bf00000000000000022d0a4d5ae645491147196c3f65c68fd03cd5023cf249c1996ca0c2a754284ef256cd16c83541bb09a3ce7c2a83", @ANYRES16=r4, @ANYRES8], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x1c, &(0x7f0000002580)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000f414000000b7030040000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="69d8af941214950c9e3a0f582ff1d186583271b676365a48df3d97bf4695bc1d22c820333e2bc4b81d2aa44146d3b41eeface850896c2e8e1fe94cae8b7e85a44e08b798799a115337e2e465e109295915127549885e16db477beb3f67bf890eb8e7967f3821b4aba9610f92d0e57d", @ANYBLOB="0000000000000000b7020000000003008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b80000050005005baf2312bbc200", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket(0x10, 0x3, 0x80000003) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c) 1m46.751003493s ago: executing program 2 (id=1522): syz_clone3(&(0x7f0000000380)={0x1181700, &(0x7f0000000000), 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0x10044c3, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlateno}, {@uni_xlate}, {@fat=@flush}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@rodir}, {@utf8no}, {@rodir}, {@fat=@errors_remount}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}]}, 0x53, 0x36b, &(0x7f0000000500)="$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") r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r1, 0x0, 0x56) socket(0x2b, 0x1, 0x1) socket$netlink(0x10, 0x3, 0xf) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x20000002, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_setup(0x9, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r8, 0x2, 0x1) r9 = signalfd(r4, &(0x7f00000016c0)={[0x8]}, 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000008b40)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000008b00)={&(0x7f0000002140)=@newtaction={0x6994, 0x30, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{0x1ee0, 0x1, [@m_ctinfo={0x138, 0x9, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xe}, @TCA_CTINFO_ACT={0x18, 0x3, {0x10000, 0x1, 0xffffffffffffffff, 0x3, 0x8}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffff9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xd3, 0x6, "8fb1b0bf70bd340c35ab329615439d6359630a93a0e7552c9836676f7c485442bf9bfb0bd89704f615392567f94e8b28188438c43fccd2c0279a584f6443a44aed9bdd2acae67fc0e29de4100ef63ac0052f88cc21d93de1a7ce8761be30dc4722e794cb83a3801ca5b99d3d98caf9601804dd860bcbb6d1717321d980e71e36ab919935a93bea2c7a3bc87c258fa631c36557f94862fb5cef156f2b0ca6be72d70aadefcd3fe82204492f93d575cd2aed1a1eed54bc779d66995a8b88e729563b0ba081578c8b052178d04beb495a"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_pedit={0x1da4, 0x12, 0x0, 0x0, {{0xa}, {0x1d1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x5, 0x70, 0x8, 0x6, 0x8}, 0xa0, 0x6, [{0x8, 0x1, 0x1, 0x3, 0x3, 0xe800}, {0x8, 0x7, 0x0, 0x661, 0x400, 0xfffffffb}, {0x3, 0x9, 0x0, 0xc32, 0x22, 0x2}, {0x17, 0xc8, 0x3, 0x2, 0xffff, 0x19}, {0xffffff48, 0x4, 0x6, 0x7ff, 0x7fff, 0xffff}]}, [{0xe, 0x293b, 0xffffffff, 0x5, 0x4, 0x3}, {0x5, 0xa765, 0x4, 0x8, 0xb, 0x200}, {0x0, 0x7ff, 0x401, 0x2, 0x8, 0x6}, {0x1, 0x9, 0x5, 0x1, 0xac3, 0x40}, {0x401, 0xffff0c1f, 0x5, 0x7ff, 0x9, 0x7}, {0x40, 0xffffffff, 0x800, 0xa2c, 0x3, 0xad53}, {0x8, 0x2, 0x9, 0xe9, 0x4, 0x10}, {0x10, 0x7fff, 0xf7d, 0x8831, 0x3, 0xffffff00}, {0x9, 0x8876, 0x4, 0x0, 0x2, 0xffffffff}, {0x7, 0x5, 0x3, 0x3, 0x8, 0x7}, {0x5, 0xffff, 0x4, 0x81, 0x46, 0x1}, {0x0, 0x100, 0x80000001, 0x7, 0x8, 0x3433}, {0x7ff, 0x80000001, 0x80000001, 0x9, 0xffffffff, 0x305f69c3}, {0x1000, 0x55e3, 0x7fc0000, 0x5, 0x5, 0x2}, {0xc3, 0x1, 0x1ff, 0x8, 0x7, 0x8b}, {0x3, 0x46a, 0x3, 0x1, 0x3, 0xfb1d}, {0x56, 0x4, 0x7, 0x100, 0x401, 0xffffffff}, {0x10, 0x712a1321, 0x676, 0x3, 0x5, 0x1}, {0xe, 0x3ff, 0x3ff, 0xc49f, 0x6, 0x4}, {0x6, 0x5d, 0x6, 0x9, 0x8bd, 0x7713}, {0x59c706a0, 0x7, 0x100, 0xf, 0x10000, 0xfffffffe}, {0x2, 0x7aca, 0x4, 0x7f, 0x7}, {0x5, 0x9, 0x7, 0xc71, 0x873, 0x2}, {0xe8c, 0x8, 0x6, 0x2, 0x3, 0xef1d}, {0x4060, 0x3, 0xc09d, 0xe8f, 0x9, 0x16}, {0x68, 0x2, 0x3de5, 0x1, 0x3, 0x200}, {0xf68d, 0x7fff, 0x3, 0x5, 0x2, 0x7}, {0x7d, 0x8000, 0x14, 0x1, 0x400, 0x101}, {0x6, 0x7, 0x8, 0xedac, 0x2, 0xd7}, {0x9, 0x51, 0x90000000, 0xff, 0xfff}, {0x7fff, 0x7fff, 0xe, 0x8, 0xfffffffc}, {0x0, 0xfffe, 0x1, 0x4, 0x8, 0x9}, {0x580, 0x3, 0x1, 0x9, 0xfffffeff, 0x811a}, {0xfffffff6, 0x4, 0xf8e8, 0x401}, {0x7, 0xfffffffb, 0x0, 0x4, 0x4, 0x1}, {0x2, 0x9, 0xd1600, 0x3e, 0x1ff, 0xc}, {0x10001, 0x8, 0x7f, 0x6, 0x6, 0x9}, {0xa, 0x4, 0x3, 0x7f, 0x8, 0x2}, {0x6, 0xf2b, 0x0, 0x3, 0xd0, 0x9}, {0x7, 0xfffffffb, 0x3, 0x5, 0x1, 0xad}, {0x4, 0xe2, 0xff, 0x4, 0x81, 0x9}, {0x6e06, 0x9a8f, 0x2, 0xffffffff, 0x1000, 0x8001}, {0x7, 0x9cf0, 0x7, 0x2, 0xffffffff, 0xd}, {0xff, 0x40, 0x7, 0x4, 0x800, 0x400}, {0x7, 0xb, 0xfb, 0x7, 0xe, 0x40}, {0x3, 0x9, 0x2, 0x3e057590, 0xffffffff, 0x2333}, {0x8, 0x6, 0x10000, 0x5, 0x2, 0x10}, {0x1, 0xb8c, 0xca, 0xdc5, 0x7fffffff, 0x95}, {0x7fff, 0x7, 0x2, 0x7, 0x3, 0x2}, {0x0, 0x9, 0x3, 0xbe, 0x0, 0x9}, {0x3, 0x9, 0x4, 0x9, 0x7, 0x4}, {0xd, 0x0, 0x2, 0x3d, 0x0, 0x7df}, {0x6, 0x4, 0x4, 0xda8, 0x5, 0x4}, {0x9, 0xffffffff, 0x80, 0x4717, 0xfffff6c4, 0x7}, {0x0, 0x3, 0x6, 0x8, 0x6, 0x1623}, {0x10000, 0xd, 0x2, 0x4, 0x2, 0x6}, {0xf8, 0x100, 0x970, 0x1000, 0x8, 0x9}, {0x1, 0x10001, 0x7, 0x5, 0x8, 0x5}, {0x3, 0x3, 0x8, 0x2, 0x6, 0x6}, {0xfffffffa, 0x5, 0x21, 0x1, 0x180}, {0x1000, 0x2, 0x6, 0x8337, 0x0, 0x1}, {0x0, 0x5, 0x6, 0x5, 0xe7f, 0x8}, {0xf, 0x6, 0x4, 0x8f, 0xee, 0x7}, {0x8, 0x48000, 0x800000, 0x7, 0x81, 0x1}, {0x4, 0x80, 0x4d60, 0x2, 0xfd11, 0x200}, {0x5, 0x2, 0x5, 0x2c, 0x8001, 0x1}, {0x9, 0x0, 0x9, 0x9, 0x3, 0x6}, {0xffffffff, 0xb2a, 0x401, 0x63b, 0x3, 0x8001}, {0xd55, 0xfffffffc, 0xfffffff8, 0x47, 0x100, 0x1}, {0x2, 0x3, 0x6, 0x25e, 0xfffffff7, 0x6}, {0xc, 0xfffffffa, 0x9, 0x3, 0x6, 0xd}, {0xe, 0x3, 0xfff, 0x4, 0x800, 0x8000}, {0xff, 0x10, 0x3, 0x1, 0x1000, 0x5}, {0x6, 0x9, 0x8599, 0x9, 0x0, 0x9}, {0x4672, 0x400, 0xe6, 0x2, 0x7, 0xfffffffa}, {0x10000, 0x7, 0x8, 0x2, 0x401, 0x1a}, {0x4, 0xf499, 0x7f, 0x1, 0xffff7fff, 0x7}, {0x4, 0x5, 0x8, 0x1, 0x7f, 0x401}, {0x7, 0xdb, 0x5, 0x843, 0x80, 0xcc}, {0x5, 0x7289, 0xffff7fff, 0x8, 0x7, 0x5974}, {0xbfa, 0x5c, 0x800, 0x1834, 0x9, 0x100}, {0x7, 0xaae9, 0x7, 0x1, 0x0, 0x6}, {0x4, 0x1, 0xffff7fff, 0x6, 0x7, 0x401}, {0x7, 0x7, 0x7, 0x33, 0x8, 0x7}, {0x2, 0x9, 0x2, 0xfffff7c3, 0x80000001, 0x8}, {0x2, 0x0, 0x2, 0x9, 0xf126, 0x9}, {0x10000, 0x6, 0x6, 0x80000000, 0x6, 0x80000000}, {0x76b4, 0x7, 0x7ff, 0x0, 0x401, 0xd5d0}, {0x9, 0x20f3, 0x319b9860, 0x2, 0x6, 0x4}, {0x0, 0x4, 0x7f, 0x6, 0x8, 0x20}, {0x4, 0x830, 0x3, 0x8000, 0x3, 0x5}, {0x6, 0x6, 0x8, 0x1, 0xffff26bb, 0x4}, {0x1, 0x4, 0x0, 0xe, 0x3ff}, {0xf, 0xfdb, 0x7, 0x1, 0xfffffffc, 0x4}, {0x8, 0x9, 0x742, 0x401, 0x6, 0x9}, {0x75a7, 0x8, 0x2, 0x4, 0xfffffffe, 0x80}, {0x8677, 0x4, 0x5, 0xf, 0xdb, 0xcf}, {0xe, 0x3, 0x0, 0x8, 0x3}, {0x8eb, 0xb, 0x1, 0x5, 0x1, 0x6}, {0x0, 0xac, 0x2, 0x62, 0x1, 0x7d4}, {0x1ff, 0x8, 0x7, 0x10000, 0x4, 0x4}, {0x4, 0x4, 0x624f, 0x3ff, 0x6, 0x7}, {0x21ca, 0x7f1dca2f, 0x4, 0x5, 0x5, 0x4}, {0x8, 0x3ff, 0x6, 0x2, 0xffffff0f, 0x8}, {0x3, 0x5, 0x3, 0x1, 0x7fffffff, 0x4}, {0x6, 0x5, 0xc30, 0xa51, 0x965, 0x4}, {0x4, 0x0, 0x7, 0x9, 0x9, 0x8}, {0xb, 0x2, 0x9, 0x468, 0x0, 0x80000000}, {0x5, 0x8, 0x115edd21, 0xfffffff9, 0x0, 0x9}, {0x8001, 0x0, 0x8000, 0x1, 0x0, 0xfffffff2}, {0x7277, 0x401, 0x8, 0x3, 0x7, 0x8}, {0x7fff, 0xab80, 0xfff, 0x1, 0x1, 0x6}, {0x9, 0xa, 0x0, 0x6, 0x5, 0x9}, {0x3, 0x72bc, 0x6, 0xe, 0xffff, 0xff}, {0xf, 0x4, 0x7, 0x101, 0xfffffff8, 0xc5}, {0x8, 0x595, 0xb0, 0x50, 0xffffffff, 0xbc8}, {0x2, 0x2c9, 0x6, 0xfffffffb, 0xfffff801, 0x7}, {0xf, 0x3, 0xfffffff7, 0x5, 0x9, 0x3}, {0x9, 0x5, 0xff, 0x7, 0x7, 0x5}, {0xd9f, 0x7, 0x6, 0x5, 0x4, 0x1}, {0x9, 0x5, 0x81e, 0x9, 0x4, 0x9}, {0x9, 0x1, 0x101, 0x3, 0x0, 0x7f}, {0x6, 0x5, 0x5, 0x9, 0x8, 0x1}, {0x7, 0x2, 0x5, 0x66, 0x414}, {0x100, 0xfffffffb, 0x5, 0xf, 0x50, 0x2}, {0x1000, 0x0, 0x6, 0x7ff, 0xae, 0x80000000}, {0x1, 0xe57b, 0x2, 0x3aba, 0x7, 0x3}, {0x400, 0xbe26, 0x6, 0x3ff, 0x10, 0x9}], [{0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x7, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x6d557aaf73e3257a}, {0x3, 0x2}, {0x3, 0x1}, {0x4, 0x1}, {}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0xb16050a3b2848815}, {}, {0x5}, {0x1}, {}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x4}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {}, {0x3, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x4239, 0x8001, 0x3000000c, 0x4}, 0x3, 0xf4, [{0xfffffff9, 0x5, 0x1000, 0x8, 0x0, 0x3}, {0x5, 0x2, 0x0, 0x7, 0x73fd, 0x6}, {0xd5, 0x28, 0x8, 0x0, 0x5, 0x4}, {0x9, 0xa6e, 0x5, 0x6, 0x4, 0x4f7}]}, [{0xb7a, 0x0, 0x6, 0x3ff, 0x280000, 0x3}, {0x8, 0x6, 0x4, 0x3, 0x6, 0xd91}, {0x2, 0x31, 0xf, 0x9, 0xfffffff7, 0x9}, {0x81, 0x400, 0xe, 0x7fff, 0x5, 0x200}, {0x7e1, 0x1000, 0x2, 0x7ff00, 0x80, 0x6}, {0x1, 0x8, 0xffffffff, 0x4, 0x1, 0xcc30}, {0x2, 0x6, 0x8, 0x3ff, 0x7, 0x7}, {0x9, 0xfffff801, 0xc1d, 0xbc, 0x2, 0x5}, {0x800, 0x83, 0xffffffff, 0x1, 0x4, 0x1}, {0x1400000, 0x4, 0x32, 0x4, 0x6, 0x5}, {0x401, 0x7fff, 0x272, 0x7f, 0x0, 0x3}, {0x1000, 0xa, 0x9, 0x8, 0x401, 0xfffffff9}, {0x7fffffff, 0x8000, 0x9, 0x3, 0x3, 0x200}, {0x7, 0x8, 0x9, 0x1a4000, 0x3, 0x400}, {0xfffffffd, 0x5, 0x3, 0x1, 0x5}, {0x145, 0x6, 0xb, 0xb71, 0x5, 0x1}, {0x10001, 0x0, 0xffffff00, 0x6, 0xffff0001, 0x9}, {0x3, 0x7, 0x200, 0xf295, 0x7, 0x9}, {0x8000, 0x10, 0x0, 0x7ff, 0x3f6, 0x1}, {0xfffffff9, 0x4, 0x40, 0x6, 0x2}, {0xb1, 0x4800, 0x9, 0x80000000, 0x5, 0x9}, {0x8, 0xd4e1, 0x2800000, 0x9, 0xa557}, {0x5, 0x3, 0x5, 0x80000000, 0x0, 0xc}, {0xbc0e, 0x10, 0x0, 0x5, 0x0, 0x5}, {0x0, 0xfffffffb, 0x2, 0x0, 0x4aec, 0x4}, {0x9, 0x10000, 0xe5, 0x9, 0x3, 0x10000}, {0x9, 0x9, 0x9, 0xc, 0x13f, 0x2}, {0x7f, 0x7fffffff, 0x4, 0x5, 0x10, 0x8}, {0xc0f, 0xb, 0x101, 0x8, 0x5, 0x2}, {0x900000, 0x8, 0x7fffffff, 0x0, 0x4, 0x8}, {0x80, 0xffff, 0x0, 0x9, 0x6, 0x7}, {0x75, 0x400, 0x8, 0x5, 0x1, 0x9}, {0x7fffffff, 0x592d, 0x2, 0xa34, 0xb7bc, 0x2}, {0x1, 0x6, 0xd, 0x5, 0x80, 0x8}, {0x10, 0x93e, 0x400, 0x9, 0x15f1, 0xffff}, {0xfffffff8, 0x2, 0x401, 0x3, 0x1, 0x8}, {0x5e8, 0xfa, 0xce8, 0x5, 0x7, 0x7}, {0x74, 0x5f0, 0xff, 0x1, 0x1000, 0x200}, {0x8001, 0xfff, 0x1, 0x7c3f9082, 0x2}, {0xd53f, 0x6, 0x4, 0x0, 0x10001}, {0x0, 0xbc, 0x928, 0x10001, 0x9, 0x47d1}, {0x5, 0xc, 0x4, 0x2, 0x2ee6, 0x7}, {0xfffffff9, 0x6, 0x6, 0x0, 0x7, 0xb1}, {0xf24a, 0x3, 0xfffffff7, 0x97a, 0x8, 0x8}, {0x7, 0x4, 0x6, 0x8, 0x9, 0x8f}, {0x6, 0x0, 0x4, 0xcb, 0xd, 0x4}, {0x5, 0x7, 0x0, 0x56, 0x232b8fea, 0x8}, {0x7, 0x101, 0x5, 0x3, 0x8, 0x9}, {0x13c20000, 0x8, 0x0, 0x401, 0x4, 0x7}, {0x6093, 0x3, 0x0, 0x5, 0x101, 0x1}, {0x5, 0x401, 0x0, 0x26, 0x3}, {0x8000, 0xf, 0x3, 0x9, 0x3, 0x3}, {0xfffffffc, 0x9, 0x5, 0x4, 0x6, 0x4}, {0xa7, 0x7fffffff, 0x3, 0x4, 0x0, 0xfffffffe}, {0x400, 0x5, 0x1, 0x7b, 0x67, 0x800}, {0x3, 0xfffff8a2, 0x2, 0x1, 0x200, 0x4}, {0x800, 0x4, 0x3, 0x0, 0x8000}, {0x6, 0x1, 0xfffffffc, 0x54b3, 0x37, 0xc03}, {0xb4e, 0x5, 0x1000, 0x6, 0x5, 0x6}, {0x3, 0x3, 0x3a3a, 0x3}, {0x2f919e72, 0x401, 0x22, 0x4, 0x8, 0x90}, {0x456b, 0x6, 0x15, 0x3, 0x10, 0xfffffff4}, {0x7fff, 0x5, 0x7, 0x0, 0xffffffff, 0x3ff}, {0x4, 0x1c5, 0x0, 0x8, 0x4}, {0x79, 0xd3, 0xbfb540a5, 0x8}, {0x27, 0x0, 0xf, 0x4, 0xc, 0x9}, {0x1, 0x9, 0x4, 0x8, 0x7, 0xbd3}, {0x3, 0x6, 0x5, 0x5, 0x8, 0x400}, {0x200, 0x200000, 0x2, 0xfffffff8, 0x1, 0x7}, {0x1c9, 0x5, 0x3, 0x2, 0xffffffff, 0x600}, {0xff, 0x36b7, 0x6, 0x1, 0xf7f5, 0x2}, {0x5, 0x3, 0x84aa, 0x81, 0x3, 0x9d2a}, {0x6b3, 0x2, 0xef6f, 0x4, 0xc71, 0x7}, {0x4, 0x80000001, 0xfffffffc, 0xffffffff, 0x1, 0x6}, {0x9, 0x8001, 0x3, 0x5, 0x7fffffff, 0xe}, {0x0, 0x4, 0x1, 0x2, 0x6, 0x8}, {0x2, 0x1d2, 0x7ff, 0x9, 0x7, 0x4}, {0x2, 0x7, 0x6, 0x8, 0xa0, 0x7ff}, {0x1, 0x7, 0x79, 0xdf, 0x5, 0x8}, {0x61, 0xa, 0x9, 0x1, 0x40, 0x9}, {0xb, 0x4, 0xffffff00, 0x5, 0xffff0001, 0x3}, {0x9, 0x3, 0x1, 0xdcf2, 0x1, 0x7}, {0x8b, 0xffffff81, 0xffffff1f, 0x197, 0x7ff, 0xfb4}, {0x2, 0x7fff, 0x0, 0x2, 0x6, 0x8}, {0x6db, 0x8000, 0x53, 0x8, 0x5, 0x10}, {0xffffffc0, 0x1, 0x81, 0x2, 0x1, 0x1}, {0x8, 0x2d1, 0x7, 0x9, 0x7fffffff}, {0x7fff, 0x3, 0x2, 0x0, 0x2, 0x5}, {0x6, 0x2000000, 0x0, 0x218, 0x4, 0x9}, {0x9, 0x4, 0x9, 0xd, 0x7ff, 0x10000}, {0x2, 0x5, 0x2, 0x0, 0x4, 0x1000}, {0x6, 0x5, 0x8, 0xfffffffe, 0x0, 0x49}, {0x90000, 0xb368, 0x3, 0x5, 0x2, 0x80b}, {0x7, 0x6, 0x10001, 0x11fe, 0x10000, 0x147}, {0xfffff800, 0xc185, 0x1, 0x32b06c4c, 0x1000, 0x200}, {0x7fffffff, 0x1, 0x1d24, 0x9, 0x6, 0x4}, {0x91, 0x7, 0xd, 0x9, 0x2, 0xd}, {0x401, 0x3, 0x2, 0x7, 0xfffffff7, 0x10001}, {0x0, 0xffff, 0x6, 0xffffffff, 0x81, 0x1}, {0xd, 0x6, 0x46ac, 0x3, 0xa6, 0x7}, {0x5a, 0x2, 0x7, 0x0, 0x1, 0x57}, {0x6, 0x200, 0x796, 0x0, 0xefc, 0x401}, {0xd1, 0xfffffffa, 0xc5, 0x7fff, 0x4, 0xda9}, {0x9, 0xce6c, 0x4, 0x9, 0x64, 0x126}, {0x6, 0x3, 0x8, 0x558, 0x4, 0x7}, {0x5, 0xc, 0x3, 0x8, 0xffffffff, 0x9a5}, {0x6, 0x73d, 0x3, 0x5, 0x8, 0x2}, {0x5, 0x6, 0x4, 0x1ff, 0x1, 0x2}, {0xb9, 0x1, 0x3, 0x4, 0x752, 0x8}, {0x7, 0x0, 0xb, 0x3, 0x15, 0x9}, {0x3, 0x3, 0xb, 0x6, 0x401, 0x1}, {0x1000, 0x401, 0xffffffff, 0x5, 0x2, 0x8}, {0x9, 0x9, 0x479e9cdd, 0x32, 0x9d9, 0x2}, {0x3aca, 0x1, 0xffffffff, 0x1ff, 0x8, 0x9a}, {0xb3, 0x8, 0x2, 0x7, 0x4, 0x4}, {0x3, 0x2, 0x81, 0x9, 0xfffffffc, 0xfffffb52}, {0xfff, 0xeeb, 0x7, 0x56a343f7, 0x7, 0x5}, {0x6, 0x7, 0x9, 0x3, 0xcb2, 0xfffeffff}, {0x7ff, 0x3, 0x7, 0x8, 0xfffffffb, 0x40}, {0xd, 0x5, 0x2, 0xa7ff, 0x3}, {0xda, 0x7, 0x8, 0x3, 0x8, 0x8}, {0x6, 0x3, 0x9, 0xfd97, 0xffffffff, 0x2}, {0x3ff, 0x5, 0x4, 0x3, 0x0, 0x2}, {0x10000, 0x1, 0x7, 0x40, 0x326, 0x20000}, {0x0, 0x1000, 0x7, 0x3, 0x1, 0x2}, {0xd4, 0x1, 0x1, 0xffffffff, 0x1000, 0xff}, {0x0, 0x2, 0x8, 0x1000, 0x7, 0x9}, {0xe, 0x3, 0x68f, 0x6, 0x2, 0x1000}], [{0x2}, {0x4}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x3}, {0x5}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x5}, {0x4}, {0x6}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0xa1cade90b15ac9c}, {0x6, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0xe0eed6114e0bab39, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x4, 0x3fe1a5c7960c7477}, {0x4}, {}, {0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x3, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x3}, {0x1}, {0x6}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x7}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x9f73abeafc52051c}, {0x2}]}}]}, {0x5e, 0x6, "664500b28a3b7bcfd8a90fb9b2263c42a52e74aadd5f398f224c13a27bfdb43bbba3d98fa4dbe6cdecc9d4e6cf62d655b4538903dc57a2981b21296d0b9362cdd3552cbd0c936eed67017d4b25d386534c820b24c5ee9c15a3fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x3ba8, 0x1, [@m_skbedit={0x1048, 0x17, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xfff5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x2a10, 0x16, 0x0, 0x0, {{0xb}, {0x29a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x9, 0xe, 0xfffffff8, 0x285, 0x9, 0x9, 0x0, 0x5, 0x400, 0x7fffffff, 0x4, 0x5, 0x0, 0x0, 0x8, 0x4, 0x40, 0x2, 0x80009, 0xbaa, 0x698, 0x6, 0x1000, 0x280000, 0x8, 0x9, 0x7cbb, 0x2, 0x1ff, 0x80000001, 0x1, 0xe66, 0x2, 0x0, 0x2, 0x4b, 0x7, 0xa6, 0x0, 0x8, 0x0, 0xfd88, 0x401, 0x7fffffff, 0x0, 0x2, 0x2, 0x2, 0x101, 0xf5d, 0x0, 0x2d2, 0x1000, 0x5, 0x6, 0x400, 0x580, 0x9, 0x200, 0x5, 0x1, 0x9, 0x5, 0x81, 0x9, 0x5, 0x9c29, 0x4, 0x7, 0x9, 0x9, 0x7, 0x8000, 0xff7c, 0x200, 0x4, 0x1, 0x7ff, 0x3ff, 0x5, 0x3, 0x7, 0x5, 0x8000, 0x2, 0x9, 0x8, 0x7, 0xd, 0x7, 0x68, 0x8, 0x100, 0x8, 0x2, 0x10001, 0x83b, 0x0, 0x7fffffff, 0xffff, 0x8, 0x2, 0x7, 0x5, 0x4, 0x2, 0x1, 0x9128, 0x4, 0x3, 0x5, 0x40, 0x7, 0xaf42, 0x0, 0x5b, 0x4e, 0x0, 0x8, 0x700, 0x2, 0xfb4e, 0x7, 0xf, 0x9, 0xb07, 0x4, 0x3, 0x4, 0x5, 0xf, 0x6d, 0x5, 0x1c, 0x8, 0x7, 0x4, 0x3, 0x208, 0x0, 0x1, 0x2, 0xb3, 0x9, 0xc0000000, 0x6, 0x8, 0x7, 0x1, 0x0, 0x7, 0x3, 0x5c, 0x40, 0x4, 0x4, 0x1, 0x7, 0xb, 0x1, 0x8, 0x200, 0x4, 0x8, 0x1, 0x80000001, 0x3, 0x7fff, 0x8, 0x5, 0xfffffeff, 0xfffffffb, 0x5, 0x8, 0x4, 0x2, 0x6, 0x1, 0x293e, 0x350, 0x8, 0x12, 0x8, 0x27ba3fe1, 0xedf, 0x8, 0x7, 0xcaae, 0x5, 0x5, 0x80008000, 0x1, 0x10001, 0x7, 0xb143, 0x7, 0x8, 0x0, 0x81, 0x4, 0xc8f, 0x49, 0x8, 0x80000001, 0x0, 0x8000, 0x4, 0x7, 0x4, 0x2, 0x1000, 0x5, 0x6, 0xa0, 0x0, 0xe, 0x0, 0xd0bf, 0x8a5, 0x7, 0x10, 0x9, 0x101, 0x2, 0x4d7, 0x8, 0x8, 0xfffff801, 0x8b4, 0x4, 0x4, 0x6, 0x1, 0x7fff, 0x0, 0x0, 0x0, 0xb, 0x1a0d, 0xffffffb2, 0x48, 0x9, 0x3a9, 0x0, 0xffff83b7, 0xfffffffa, 0x6, 0x3, 0x7, 0x4, 0xaaac, 0x0, 0x7fffffff, 0x5, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x4, 0x3, 0x6, 0x8, 0x101, 0xc, 0x1, 0x4, 0x6, 0x3ff, 0x101, 0x8, 0x0, 0x80000000, 0x1000, 0x7b2, 0x8, 0x8000, 0x2, 0x6, 0x14f7, 0xcbab, 0x33, 0x9, 0x0, 0x55, 0xa2, 0x8, 0x4, 0x8000, 0x6, 0x8, 0x7, 0x0, 0xe, 0x9e1, 0x1, 0xc7c7, 0xc803, 0x7fffffff, 0xa69, 0xfffffff8, 0xfffffff8, 0xffff8001, 0x9, 0xa0, 0x7fffffff, 0xd7, 0x8, 0xb, 0x22, 0x6, 0x7fff, 0xc, 0xab, 0x3ff, 0x401, 0xfffffffb, 0x80000000, 0xb, 0xc00000, 0x8, 0x7f, 0x9, 0xe0e6, 0x10000, 0xbfb3, 0x7, 0x400, 0x5, 0x100, 0xfffffff1, 0x1, 0xff, 0x0, 0x5, 0x2, 0x81, 0x8, 0xe7, 0x2, 0xd, 0x3, 0xa5d, 0x6, 0x4, 0xfffffffa, 0x1, 0xc, 0x100000, 0x1, 0x5, 0x10000, 0x6, 0x8d2, 0x200, 0x4c, 0x1, 0x0, 0x8, 0x6, 0x7, 0x9, 0x2, 0x7, 0x2, 0x6, 0x0, 0x800, 0x80000001, 0x4, 0x1, 0x80, 0x7, 0xffff, 0x9000000, 0x9, 0xde, 0xe6, 0x7, 0x9, 0xb, 0x9, 0x8, 0x8, 0x4, 0x7f, 0x7fffffff, 0x4, 0x0, 0x1, 0xdc, 0x1, 0x8, 0xff, 0x3ff, 0x80000000, 0x6, 0x1, 0x691, 0x193, 0x3, 0xfffffff8, 0xcaa, 0x8000, 0x2, 0x10, 0xef93000, 0x3, 0xd, 0x7, 0x6, 0x80d, 0x0, 0x8, 0x1, 0x280, 0x5, 0xaf5d, 0xe7c, 0x7f, 0x10000, 0x6, 0xffff, 0x1, 0x9, 0x7, 0x81, 0xd9, 0x52a1, 0x5, 0x1b48, 0x0, 0x0, 0x6, 0x3, 0xcad0, 0x8000, 0x8, 0x3, 0x1, 0x292, 0x1, 0x7fff, 0x6, 0x80000000, 0x5, 0x3, 0xf5e, 0x6, 0xfffffc01, 0x5, 0x6, 0x0, 0x7f, 0x6, 0xf8, 0x8, 0x8, 0xfffffff9, 0x4, 0x80, 0x1000, 0x364, 0x10, 0x1, 0xd738, 0x4, 0x8000, 0x101, 0x1ff, 0x2, 0x1, 0xd, 0x1, 0x4, 0x9, 0xbbce, 0x7, 0x1, 0x7, 0x6, 0x6, 0xffff, 0x60, 0xb11, 0xd, 0x6, 0x2, 0x3ff, 0x2, 0x6, 0x8, 0x5d, 0x5, 0xfc, 0x4b45, 0x40, 0x0, 0x1, 0x20000, 0xfffffffd, 0x1000, 0x0, 0x26200000, 0x7, 0x9, 0x10000, 0x3, 0x7, 0x0, 0x4, 0x4, 0x5, 0x10]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7, 0x80000000, 0x7, 0x1, 0xe6f, 0x40, 0xffffff7f, 0xfffeffff, 0x16c, 0x8, 0x6, 0x4, 0x8, 0xd9ad, 0x36, 0xfff, 0xe3, 0x9, 0xa9ff, 0x1, 0xb, 0x1, 0x9, 0x1, 0x4, 0xb, 0x40, 0x7, 0x1, 0x3, 0x4b, 0xfffffff8, 0x6, 0x4167, 0x7, 0x1, 0x5, 0xffff, 0xfffffff2, 0x7, 0x7fff, 0x0, 0x8000, 0x66b5269c, 0x101, 0xf, 0x5, 0x8, 0x1000, 0x40, 0x1, 0x3, 0x454, 0x10001, 0x6, 0x7, 0x3240, 0x10000, 0x6, 0x2, 0x0, 0x3, 0x9, 0x9, 0x7fffffff, 0x9, 0x1, 0x10, 0x364, 0x64, 0x7, 0xfffffffc, 0x6, 0x5, 0x3, 0x7, 0x7, 0xffff, 0x81, 0x8, 0x0, 0x586, 0x1, 0x40, 0x1ff, 0x4, 0x5, 0x6ee535b6, 0x10, 0x9, 0x1, 0xe, 0xffffffff, 0x2, 0x1e8, 0xa776, 0xffffffff, 0x100, 0x5, 0x9, 0xa73, 0x300000, 0xffffffff, 0x56d, 0x1100745d, 0x5, 0xd, 0x40000000, 0x6, 0x10e, 0x3, 0x5, 0x81, 0x1, 0x7fffffff, 0x74, 0x0, 0x2, 0x7, 0x4, 0x8, 0x9, 0x1, 0x0, 0x3, 0x6, 0x2, 0x0, 0x9, 0x2, 0x200, 0x6, 0x1, 0x869, 0x4, 0x55, 0x7, 0x1, 0xc, 0xfffffffa, 0x4, 0x61, 0x4, 0x9, 0x0, 0x6, 0x7, 0x80000000, 0xd35, 0x8, 0x6, 0x8, 0x7, 0x276, 0x2, 0x7, 0x4, 0xfffffff0, 0xb852, 0x0, 0x0, 0x710, 0x5, 0x4, 0x800, 0x2, 0x1, 0x5, 0x8, 0x48f, 0x0, 0xffff, 0x502c, 0x3, 0x5, 0x790, 0x200, 0x9, 0xd, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x401, 0xfffffbff, 0x5, 0x3, 0x9, 0x3, 0x2, 0x2, 0x1, 0x8, 0x3800, 0x9, 0x2, 0x718db673, 0x7, 0x5, 0x7, 0x2, 0x3, 0x81, 0x3, 0x4, 0x4, 0xfff, 0x4b1, 0xd, 0x7, 0x101, 0x6, 0x1, 0x2, 0x3, 0x87d, 0x9, 0x1, 0x10001, 0xa9, 0x422, 0x101, 0x19, 0x401, 0x3, 0x4, 0x80000000, 0x1, 0x1ff, 0x6, 0x1, 0x4, 0x7, 0x2, 0x4, 0x7fffffff, 0x10, 0x7f, 0x5baa, 0x401, 0x10001, 0x9, 0x2, 0xff, 0x80000000, 0x5, 0x101, 0x200000, 0x9, 0x3ff, 0x7d2f, 0xb4d, 0x3, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xcc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff5, 0x3e5e, 0x4, 0xd39d, 0x4, 0x3b67, 0x10000, 0xffff1c3a, 0x5, 0x2974, 0xf947, 0x0, 0x1, 0x8, 0xdff, 0x1d0000, 0x8, 0x80, 0x0, 0x1ff, 0x8, 0x2, 0x37fe, 0x7ff, 0x4, 0x8, 0x800, 0xfffffff7, 0x6, 0x3, 0x5, 0x4a0, 0x5c7, 0x7fff, 0x7ff, 0x0, 0x4, 0x0, 0x7, 0xd20, 0x0, 0xab, 0x3, 0x3, 0x6, 0xffff0c04, 0x0, 0x5, 0x3, 0x5, 0x3000, 0x7798, 0x3, 0x10, 0x3, 0x6055, 0xffff18af, 0xfffffffe, 0x200, 0x73ae, 0x5, 0x7f, 0x0, 0x1, 0x9, 0x7, 0x6, 0x3, 0x4, 0x3, 0x10001, 0x82, 0x3, 0x5, 0x10000, 0xffff0000, 0x6, 0x1, 0xaaf2, 0xe, 0x1, 0x3, 0xffff5ea2, 0x5, 0xfffffffb, 0x3e, 0x1, 0x7fff, 0x0, 0x1, 0xf, 0xdae8, 0x9, 0x7fffffff, 0x4c, 0x9, 0x6, 0x6, 0x200, 0x9231f3f, 0x1b, 0x80000001, 0x1, 0x9, 0x7, 0x3, 0xf9d, 0x7fff, 0x0, 0x1, 0x74, 0x0, 0x4, 0x4, 0xe2, 0x93, 0x3, 0x4, 0x6240, 0x6, 0x1, 0xb344, 0xb, 0x2, 0x9, 0xffff, 0x7, 0x9, 0x0, 0x7, 0x8, 0x3, 0x1, 0x7, 0x2, 0xffffffff, 0x5ea8f0ac, 0x8, 0x244, 0x1f, 0x30, 0xdac, 0x9, 0x2, 0x9, 0x9, 0x40, 0xfffffffa, 0x1, 0x5, 0xc22, 0x100, 0x2, 0x8229, 0x6, 0x0, 0xc4c, 0x9, 0x8, 0x3, 0x5, 0x5, 0xd, 0xe, 0xf, 0x3, 0x7, 0x3c6, 0x6, 0xfff, 0x7, 0xff, 0x5, 0x9, 0x10001, 0x2, 0xfffff001, 0x197, 0x20000, 0x1, 0x5, 0x9, 0x81, 0x5, 0x80000000, 0x4, 0xcb68, 0x4, 0x93, 0x0, 0xfffffffb, 0x5373, 0x80000001, 0x163, 0xa, 0xd, 0x5e4, 0x1, 0x6, 0x20, 0xb, 0xffffff81, 0xc751, 0x5, 0x0, 0x6, 0x9932, 0x0, 0x5, 0x9a, 0x80000001, 0x4, 0x28, 0x3, 0x0, 0x8a1, 0x6, 0x1, 0x9, 0x80000000, 0x3, 0x5, 0x1, 0x9, 0x8, 0x7, 0x40, 0x6, 0x0, 0xfffff5ea, 0x1, 0x6, 0x10, 0x6, 0xfffffff9, 0xfffffff9, 0x6, 0x8, 0xcfe4, 0x7, 0x5, 0x2, 0x7, 0x2, 0x7ff, 0x1, 0x1, 0x0, 0x1, 0xedd, 0x7fff, 0x8, 0x1, 0x1, 0x3, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf2b2, 0x17fc000, 0x11, 0xfb9b, 0x9, 0x40, 0x7, 0x0, 0x1, 0x1000, 0x8, 0x595e, 0x10, 0x58, 0x4, 0x7, 0x0, 0xb8, 0x4f, 0x0, 0x7, 0x2, 0x4, 0x8, 0x1, 0x5, 0x9, 0x2, 0x4, 0x2, 0x0, 0xa970, 0x3, 0xb, 0x0, 0xe5a0, 0x4, 0x0, 0x6, 0x9, 0x9, 0x70, 0xffffffff, 0x0, 0x4, 0x4, 0x80000000, 0x10001, 0x3, 0x80000000, 0x0, 0x5, 0x8, 0x4, 0x7, 0xe8, 0x5, 0x3, 0x4, 0x2, 0x2, 0x7, 0xff, 0xc3, 0x800, 0x3, 0xfffff43f, 0xbb0f124, 0xd, 0x8, 0xe29c, 0x4, 0xfffffff4, 0x0, 0x0, 0x0, 0x5, 0xf8e, 0x8dac, 0x8, 0xffffffe2, 0x5, 0x1, 0x3, 0x9, 0x8000, 0x0, 0x3, 0x54, 0x9bc, 0x8, 0x7f, 0x6, 0x5, 0x54, 0x0, 0x4, 0x9, 0xd, 0x3, 0x4, 0x9c8, 0x5, 0x50, 0x4, 0x5, 0x6, 0x7, 0x2b0, 0x8, 0x8, 0x24a9, 0x100, 0x7, 0x6542, 0x5, 0xfffffffd, 0x1e2, 0x2, 0x80, 0x4eb, 0x6, 0x7fffffff, 0x7, 0x7, 0x2, 0x8, 0x4, 0x3, 0x3, 0x7e, 0xdf9, 0x8, 0x7, 0x0, 0x4, 0x6, 0x7fff, 0x8, 0x7, 0x4, 0xfe, 0x89, 0x80000001, 0x1, 0x400, 0x4f, 0x8, 0x8, 0x2, 0x5, 0x4, 0x7ac, 0x6, 0xd, 0x6a8, 0x7ff, 0x7, 0x5, 0x40000000, 0x1e2, 0x5, 0x81, 0x2, 0x7, 0x7, 0x9b, 0x5, 0x10000, 0xfff, 0x5, 0x8, 0x3, 0x8, 0xb, 0x5, 0x1, 0x4, 0x8, 0x2, 0xffffffff, 0x9, 0x3, 0x6, 0xe1e, 0x99c, 0x8, 0xffff7fff, 0x1, 0xab, 0x0, 0x9, 0x2, 0xfff, 0x4, 0x2, 0xea7de14, 0xfffffffb, 0xccd, 0x10000, 0x19101b91, 0x5, 0xfffffffe, 0x0, 0x5, 0x8, 0x7, 0x1, 0x1, 0x5, 0x7, 0xfffffffb, 0xdb7, 0xf29, 0xff, 0xf, 0x6, 0x9, 0x3, 0x9, 0x3, 0x7fff, 0xb, 0x3, 0x8, 0x5, 0x7ff, 0x106384b, 0x101, 0xb, 0x5, 0x2, 0x9, 0x1, 0x9, 0xffffffff, 0x663, 0xcd7, 0xfff, 0x4, 0x8, 0x1ff, 0x101, 0xa47, 0x3, 0x67, 0x1, 0x7, 0x1, 0xffff96e3, 0xfff, 0x2, 0x6, 0x7, 0x3, 0x10001]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffff7f, 0x2, 0x2, 0x8, 0xffff, {0x5, 0x2, 0xff, 0x5bea, 0x6, 0xb6}, {0x1, 0x1, 0x5, 0x4, 0x7, 0x9}, 0x7, 0xfffffffa, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0xe, 0xd67c, 0xfffffc3a, {0x13, 0x2, 0x5, 0x8, 0x8, 0x8}, {0xa9, 0x2, 0x7f, 0x2e1d, 0x9, 0x3}, 0x80, 0x7e, 0x990}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x0, 0xa, 0x4, 0x7, 0x4, 0xf, 0xfffffffa, 0x7, 0x8, 0x5, 0xe2a, 0x7, 0xc4c, 0x5429, 0x5, 0x1, 0xb, 0x0, 0x7e, 0x6, 0x45, 0x66, 0x9, 0x6, 0x80000001, 0x34d, 0x6, 0x9, 0xffff, 0x5de, 0x3, 0x0, 0x9, 0x7, 0xdb, 0x10000, 0x7b0, 0x6, 0x101, 0x6, 0x2f, 0x6, 0x3, 0x3, 0x8, 0x2, 0x8, 0x4, 0x3ff, 0xfffffffa, 0xa, 0x4, 0xf7, 0x3, 0x800, 0x7, 0x4, 0x6, 0xfff, 0x9, 0x7, 0x497f8cdc, 0x6, 0x6, 0xa0f, 0x8, 0x200, 0x3, 0x0, 0x5, 0xfffffff8, 0x0, 0x288, 0x6, 0x5, 0x8, 0xd, 0xfffffffa, 0xfffffffc, 0x0, 0x3, 0x3, 0xd52, 0x10000, 0xffffffff, 0xff, 0x5, 0xfff, 0x5, 0x10, 0xffffffff, 0x72, 0x80000001, 0x9, 0xc187, 0x9, 0x5, 0x4f, 0xe, 0x100000, 0x3, 0x2, 0x3, 0x64d, 0x5, 0xd3f0, 0x3ff, 0x8000, 0x8, 0x1, 0x401, 0x1, 0x1, 0x8, 0x1, 0xffffffff, 0x8, 0x1000, 0x8001, 0x2, 0xbb67, 0xffffffff, 0xace, 0x9, 0x0, 0x7fffffff, 0x9, 0x10001, 0x7f12, 0x3, 0xdd9, 0x7, 0x0, 0x1, 0x8000, 0x1, 0x6, 0xfffffff8, 0x5, 0xfffffffd, 0x401, 0x4, 0x8, 0x1, 0xd830, 0x5, 0xd1, 0x6d57, 0x3, 0x7, 0x2, 0x10000, 0x21, 0x5, 0x1, 0x3ff, 0x1, 0x2, 0x6, 0x7, 0x207, 0x7d, 0xff, 0x8, 0xfffffffc, 0x32f80, 0x0, 0x3, 0x7, 0x746f, 0x3, 0x1, 0x8, 0x6, 0x1, 0x80000001, 0x3, 0x5, 0x10001, 0x9b, 0x5, 0x80000001, 0x100, 0xb0, 0x8, 0x1, 0x7, 0x0, 0x100, 0x7, 0x401, 0x9, 0x4, 0x6, 0xc68a, 0xe2, 0x80000000, 0x9, 0x2a96, 0x500000, 0x0, 0x9, 0x7, 0xfffff801, 0xb02, 0x8, 0xbb, 0x4, 0x2, 0x7f, 0xe, 0x96, 0xd, 0x7, 0xf43d, 0x3ff, 0x5, 0x7, 0x7, 0x10000, 0x3, 0x5, 0x8, 0x2, 0xfffffff9, 0x3d3b, 0x8000, 0x2, 0x3, 0x6a, 0x69, 0x4, 0x6, 0x6, 0x1, 0x3, 0x6, 0x3, 0xa, 0x8721, 0xcba80000, 0x4, 0x1, 0x8, 0x5, 0x2, 0xe0000, 0x1ff, 0x5, 0x8, 0xe, 0xb8, 0xfffffffc, 0xfff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x8, 0x1d5, 0x9, 0x1, 0x2, 0x0, 0x10000, 0x0, 0x9, 0x1, 0xfffffff9, 0x5, 0xffffffff, 0x5, 0xfffffff8, 0x2d, 0xe, 0xffffffc2, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x1, 0x719, 0x0, 0x8, 0xc, 0x2c35055b, 0x800, 0x0, 0xeb8, 0x28, 0x57f3ce, 0x3da, 0x80, 0x8001, 0x872, 0x3, 0x5, 0x4, 0x4, 0x80000001, 0xfffffff9, 0x9, 0x6671, 0x1c33, 0x9, 0x6, 0x10000, 0x400, 0x1, 0x40, 0x10001, 0x7, 0xda, 0x1, 0x0, 0x7, 0x7f, 0x3ff, 0x8, 0x0, 0x200, 0x8, 0x200, 0x6, 0x7, 0x3, 0x1, 0x1, 0x5, 0x1, 0x7f, 0x81, 0xfffffff3, 0x8, 0x3, 0xffff, 0x9, 0x800, 0xd8, 0x30f9ea2e, 0x0, 0x1, 0xb, 0x10, 0xcaa1, 0x0, 0x3f80, 0x8, 0xf, 0x51, 0x0, 0x61a4, 0x0, 0xef87, 0xaaa, 0x0, 0x7ff, 0xe60, 0x3ff, 0x1, 0x8000, 0x401, 0x3, 0x400, 0x94, 0xff25, 0x3, 0x59, 0xf52, 0x33c1, 0x7, 0x3, 0x6, 0x3, 0x4, 0x1, 0x3, 0x2, 0xfffffffd, 0x6, 0x7, 0xd43, 0x8, 0x1, 0x4, 0x7f, 0xffffffff, 0x8001, 0x5, 0x3, 0x8000, 0x2a, 0xdd9, 0x3, 0x6, 0x5, 0x7fff, 0xd, 0x44a0, 0xedf7, 0xf1cb, 0x101, 0x6, 0x9, 0x4, 0x6, 0x3, 0xffffffff, 0x5, 0xe4, 0x4, 0x81, 0x7, 0x39d, 0x8, 0x7, 0x3, 0x0, 0x0, 0x771d9bfa, 0x9, 0xb, 0x8, 0xfffffff6, 0x8, 0xfffffff0, 0x93, 0x8, 0x6, 0x2, 0x200, 0x8, 0x5, 0xfffffffe, 0x8, 0x1, 0x8, 0x0, 0x441a360c, 0xafc, 0x5, 0x8, 0x1, 0x1, 0x8, 0x6, 0x8, 0xede5, 0x8, 0xfff, 0x7fffffff, 0x8, 0x7, 0x6, 0x5, 0xfffffffa, 0x7, 0x8, 0x93a, 0x8, 0x101, 0x7, 0x4, 0xfa, 0x2, 0x372a0000, 0x6, 0x6, 0x80000000, 0x8893, 0x5b, 0x1, 0xd0, 0x400, 0x4, 0x2, 0x3, 0x4, 0x0, 0xffff1189, 0x7, 0x3a, 0x200000, 0x2, 0x101, 0x7, 0x7ff, 0x7fff, 0xebbe, 0x19, 0x7, 0x1, 0x4, 0xa551, 0x5, 0x0, 0x4, 0x9c, 0x5, 0xf2, 0x7, 0x4c3d, 0x4, 0x1, 0x1, 0x1, 0x0, 0x4, 0xffff0000, 0x9, 0x3, 0x3b97, 0x200]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x5, 0x3, 0x8bf, 0x5e96a7bd, 0x2, 0x63, 0x10, 0x81, 0x3, 0x1000, 0x8, 0x60, 0x80000001, 0xfffff171, 0x5, 0x2, 0x0, 0xfff, 0x6, 0x7, 0xfffffffd, 0xe5, 0xab80, 0x471, 0x800, 0x7ff, 0xfffffffb, 0x3ff, 0x4, 0x7, 0x7, 0x4, 0x7fffffff, 0x3, 0x3ff, 0x8, 0xcd9, 0xb, 0x9c8, 0x1, 0x9, 0xffffff7a, 0x1, 0x5, 0x4c2, 0x1, 0x7, 0xfff, 0x4, 0x101, 0x5, 0x4161, 0x7, 0x8, 0x80800000, 0x5, 0x81, 0x6, 0x7fffffff, 0x1, 0x6, 0x4, 0x0, 0xf, 0x2, 0x8d, 0x335, 0xd3d0, 0x9, 0x5, 0x9, 0x6, 0x800, 0xb, 0x9, 0x0, 0x2, 0x89b, 0x80000000, 0x3, 0xfff, 0x5, 0x9, 0x8, 0x2, 0x1, 0x3, 0x9, 0x8, 0x1, 0x7, 0x6, 0x79a, 0x3, 0x3, 0x3, 0x3, 0xf131a94, 0x2, 0x26f, 0x1, 0x3, 0xa6b3, 0xbe, 0x4, 0x80, 0x1, 0x800, 0x4, 0x6, 0x5, 0x3, 0x4, 0x2, 0xfffffff7, 0x4, 0x7, 0x7, 0x0, 0x3, 0x81, 0x1, 0xf, 0x8, 0xab67, 0x4, 0xd, 0x8, 0xac4e, 0x101, 0x8, 0x2, 0x10000, 0xffffffff, 0x4, 0xfffffff8, 0x9, 0x1, 0x6, 0x2, 0x40, 0x9, 0xfffffeff, 0x9, 0x7, 0x5, 0x4, 0xb532, 0x4, 0x7fffffff, 0x6, 0x8, 0x9, 0xffff, 0x9, 0x8, 0xb8, 0xff, 0x3, 0x800, 0x10, 0x5, 0x5, 0x2, 0xffffff39, 0x8, 0xffff317b, 0x2, 0x5, 0x6, 0x315ce876, 0x67, 0x1, 0x1, 0x10, 0x401, 0x10000, 0x0, 0x2, 0x5, 0xb38, 0x9, 0xc, 0x0, 0x9, 0x1ff, 0x7fffffff, 0x0, 0x7, 0x40, 0x49, 0x4, 0x89dc, 0x0, 0x3, 0x235f, 0x4000, 0x0, 0xb0, 0x6, 0x0, 0x1, 0x6, 0x8ec, 0xffffffff, 0x3, 0x7, 0xb7, 0x80000000, 0x9, 0x0, 0x800, 0x100, 0x3, 0x1, 0x5, 0x5, 0x5, 0x4a70, 0x1ff, 0xffffffff, 0x5, 0xffff68b6, 0x10000, 0x7, 0x1ff, 0x6, 0x3, 0x4, 0x10000, 0x5bda0, 0x0, 0x5, 0x2, 0x0, 0x5, 0x9, 0xffff, 0xfff, 0x0, 0x4, 0x7, 0x8, 0x200, 0x2, 0x0, 0xedb, 0x2, 0x5, 0x6, 0x2f, 0x100, 0x9, 0xfd, 0x10]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x7, 0x9c, 0x9, 0x200, 0x6a, 0x4, 0x9, 0x4, 0x4ca, 0x1, 0x9, 0x2, 0x8, 0x6, 0x5, 0x4, 0xccad, 0x9, 0x2953df1d, 0x2, 0x8, 0x7, 0x7, 0x80000000, 0x1ff, 0x7ff, 0x9, 0x4d, 0x8, 0x5, 0x1, 0x1, 0x9, 0x4, 0x6, 0x7fff, 0x7ff, 0x7, 0x6, 0x8, 0x80000000, 0xc54, 0x9d, 0x101, 0x9, 0x7f, 0x9, 0x5, 0x2, 0x800, 0x6, 0x5, 0x200, 0x8, 0xb27c, 0x101, 0x1, 0x2, 0xfffffffd, 0x8, 0x81, 0x1, 0x80000000, 0xa4, 0x9, 0x5, 0x9, 0x5, 0xfffffff9, 0x1, 0x6, 0x80000001, 0x3, 0x8, 0x6, 0x10001, 0xb231, 0x1, 0x4, 0x10000, 0x100, 0x5, 0x2, 0xaa1, 0x6, 0x2, 0x0, 0xafe8, 0x1, 0x7f, 0x0, 0x6, 0x724, 0x10001, 0x81, 0x2, 0x4, 0x4, 0xe, 0x7, 0x5, 0x4, 0x8, 0x28751b0b, 0x81, 0x3, 0x15e, 0x9, 0x1ff, 0xf596, 0x7, 0x7f, 0x7fffffff, 0x9, 0x7, 0x8, 0x5, 0x6, 0x4, 0x6, 0x6, 0x3, 0x0, 0x2, 0x7, 0xbe6, 0x3, 0x1, 0x6, 0x8, 0x4, 0x1000, 0x5, 0x4afddd00, 0xd, 0x80, 0x7f, 0x1, 0x2585, 0x8, 0xf, 0x2, 0xd55, 0x9, 0x8c, 0x3, 0x7, 0x0, 0x10001, 0x1, 0x7, 0x4, 0xfffffffa, 0x8, 0x4, 0x7, 0x401, 0xb9, 0x8, 0x101, 0x10000, 0x10000, 0x3, 0x5, 0x74c, 0xbf, 0x7f, 0xffff0000, 0x2, 0xc, 0x2, 0xfffffffe, 0x6, 0x2, 0x6, 0x6, 0x7, 0x80000000, 0x6, 0x101, 0x0, 0x5, 0xffffffff, 0x80000001, 0x4, 0xffffffff, 0x0, 0x6, 0x10000, 0xcebb, 0x8, 0xb, 0x1, 0x5, 0xe74, 0x1, 0x6, 0x9, 0x3, 0x5, 0xd0, 0x1ae0, 0x6, 0x5, 0x1, 0x400, 0x5, 0x4, 0x4, 0x44e6731f, 0x13, 0xa, 0x6, 0x3b, 0x6, 0x7fff, 0x83f, 0xfffffff2, 0x0, 0xff, 0x4, 0x200, 0x4, 0xcc6, 0x1764, 0x1, 0x2, 0x8, 0x4, 0x5, 0x80000000, 0x8, 0x9, 0xfffffffc, 0x4, 0x9, 0x6, 0x0, 0x4, 0x2, 0xfff, 0x2, 0x7ff, 0x4, 0x7fffffff, 0x2, 0xf0d, 0x8, 0x7fff, 0x82d2494, 0x7, 0x6, 0x18000, 0x3, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0x3, 0x2, 0xfffffff6, 0x3, 0x4, 0x401, 0x7, 0x2, 0x4, 0x5, 0x0, 0x4, 0x1000, 0x9, 0x6a, 0x8, 0x8001, 0x9, 0x6, 0x7, 0x1000, 0x1, 0x0, 0xfffffff9, 0x3, 0x4, 0x3, 0x1, 0xb, 0x8, 0x80000000, 0x0, 0x8, 0x1, 0x4, 0xfa, 0x4, 0x2, 0xd, 0x6, 0x51, 0x8950, 0x10, 0x2, 0x7, 0x4, 0x1, 0x0, 0x10, 0x4, 0x18c, 0x8, 0xfffffc63, 0x0, 0x4, 0x0, 0xe, 0xfffffffb, 0x9, 0x7999, 0xd, 0x7f, 0x428, 0x8, 0x100, 0x4, 0x8, 0x9, 0x2, 0x400, 0x4, 0x6, 0x200, 0x200, 0x5, 0x9, 0x7, 0x6ff3, 0x8, 0x6, 0x40, 0x9, 0x241f, 0xfffff800, 0x0, 0x2, 0xbef80000, 0x1, 0x9, 0xfffffffa, 0x3, 0xe, 0xff, 0x80000000, 0x5, 0xef7, 0x4959, 0xffffffff, 0x80000000, 0x9, 0x1, 0x25, 0x4, 0x6, 0x8, 0x6, 0x1188, 0xe, 0x7ff, 0x5, 0xc, 0x6, 0x7, 0x8, 0x8000, 0x1e3, 0x6, 0xfffffff9, 0x4, 0x5, 0x9, 0xfffffffb, 0x1b6, 0x2, 0x0, 0x52, 0x0, 0x1, 0x0, 0x1, 0x2, 0x319, 0x1, 0x3, 0x7, 0xffff, 0x3, 0x7, 0xff, 0x8, 0x0, 0x5, 0x2, 0x6, 0x81, 0x40, 0x9, 0xffff, 0x7, 0x7, 0x0, 0x6, 0xff, 0x6, 0x4, 0xf, 0xf, 0x7, 0x5, 0xfffffffe, 0x328, 0x7, 0x4, 0x6, 0x9, 0x7ff, 0x1, 0x2, 0x1, 0x6, 0x0, 0x6, 0x6, 0x5, 0x6, 0xfff, 0x9, 0x9, 0x1, 0x6b, 0x5, 0xa94fda6, 0xa96, 0xfffff800, 0x10001, 0x9, 0x6, 0xffffffff, 0x7fffffff, 0x7, 0x9e5, 0x7, 0x400, 0x0, 0x1, 0x6, 0x6, 0x7f, 0x0, 0x6, 0xffffffff, 0x3c0, 0x2, 0x5, 0x9, 0x4, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x5c36, 0x9, 0x3, 0x957f, 0x2, 0x1, 0x4, 0x7, 0x0, 0x3, 0xa, 0x0, 0x6, 0x0, 0xf, 0x946, 0xfffffbff, 0x800, 0x9, 0x707, 0x6, 0x4, 0xf41, 0x1, 0x6, 0x4, 0xfffffffe, 0x9, 0x6, 0xea, 0x40, 0x80000000, 0x5, 0x60, 0x10001, 0x3, 0x1000, 0x1, 0x1, 0x2, 0x95, 0x80000001, 0xc1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x62, 0x9, 0xb03, {0x4, 0x0, 0x3, 0xc034, 0x0, 0x1}, {0x2, 0x1, 0x9888, 0x2, 0x7, 0xf}, 0x4, 0x2, 0x65a}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x2, 0xec30, 0x4, {0x3, 0x2, 0x100, 0x8, 0x0, 0x8128}, {0x8, 0x1, 0xf30c, 0x40, 0x4, 0xffffffff}, 0xfffffff1, 0x1, 0x80000001}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}], [], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8cf5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}]]}, {0x44, 0x6, "74643c229daee0a7dbe973bbb75bfc025563f7e24d0f1c882fa6dd92b1ff7f49a0381156f000a56735fd89822ac7a9a19985cd8e671558a4ff76d935523ca71c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x14c, 0xb, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x67, 0x7, 0x6, 0x4}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3800, 0x2, 0x8, 0x10000, 0x14}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xac1}]}, {0xd8, 0x6, "25f9d2fac62b276e0188125d6cab6171b7cdf27e1a9ad24bf317c57e60ba7a51365a0b75802617523f29c86427b2b2c6ea56649718912e576c40e0f3a1ea1f4ec0cb5c241385bd5dfee3a1c5320aa7a750ca02d63c9c0fec148363f14d637a42c71fec5ad3264976b32918ee0d4d040d155984655c2231a39a35257528843902c640caec090a298f20da6e308ef5e33212bedf41c3a861c40a7163e07fcf756c53f1595864c4a4ac501a67133873e711b88ef7208ed9029a38f7193f1fa2af1be8ab3a26009a8f7d19f528799bc574f53c3c9c18"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x8f8, 0x1, [@m_police={0x8f4, 0x0, 0x0, 0x0, {{0xb}, {0x8a8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x9, 0x4, 0x5, {0x33, 0x1, 0xfff9, 0x1ff, 0x1, 0x7fffffff}, {0x8, 0x0, 0x4, 0xfff8, 0xffff, 0x4}, 0x2, 0x5, 0x80000000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xb4d, 0x8, 0xc5a, 0x9, 0x1, 0x680, 0x2, 0x5, 0x4, 0x0, 0x5, 0x9, 0x5e, 0x7ff, 0x9, 0x4, 0x1, 0x4, 0x1000, 0x9, 0x5, 0x6, 0x4, 0x3, 0x2, 0x0, 0x2, 0x9, 0x2c, 0x7, 0x10001, 0x1, 0x5802fa95, 0xe83a, 0xd, 0x6, 0x4, 0x2, 0x8001, 0x8, 0x1, 0xdc, 0x81, 0x80000001, 0x81, 0x0, 0x9, 0x3, 0x77, 0x10001, 0x8, 0xd17, 0x6, 0x6, 0x6, 0x9, 0x7, 0xfffffffb, 0x1, 0xa, 0x80000000, 0x10000, 0x7d4b140b, 0x3, 0x9, 0x1a468964, 0xffffffff, 0xffff, 0x1576, 0xd27, 0xc, 0x10001, 0x6, 0xe, 0x3, 0x8, 0x4, 0x8000000, 0x7, 0x9, 0x8001, 0x1, 0x29c3, 0x3ff, 0x8, 0x7, 0x9, 0x800, 0x6, 0xe0, 0x4, 0x5, 0xf52, 0xb7, 0x7f, 0x8, 0x9, 0xae1d682, 0x8, 0x1, 0x2, 0x1c, 0xfffffff8, 0x9, 0x5, 0x3, 0x9, 0x800, 0xfffffffc, 0x3d45, 0xa0a, 0xc, 0x3, 0x800, 0xfffffff9, 0x1, 0x101, 0x1, 0x4, 0x80000000, 0x5, 0x8001, 0xb, 0xc31, 0x6, 0xc932, 0x9, 0x6, 0xa, 0x80, 0xffffffff, 0x8000, 0x2, 0x100, 0x1ff, 0xfffff8bc, 0x6, 0xe6b, 0x0, 0xc, 0x400, 0xfffffff8, 0x5, 0x46, 0xcd4, 0xa69f, 0x1, 0xba0, 0x7, 0x7, 0x101, 0x1, 0x8, 0x10000, 0xa6, 0x3, 0xac7, 0x5, 0x1, 0x3, 0x1, 0x4, 0x9, 0x4, 0x4, 0x9, 0x3, 0x346, 0x2, 0x6, 0x9, 0x4, 0xb12, 0x80, 0x401, 0xf, 0x5, 0x8, 0x3, 0x9, 0x94b5, 0x5, 0x2, 0x9, 0x9, 0x2, 0xb, 0x1, 0x5, 0x9, 0x3, 0x3, 0x40, 0xfffffffd, 0x1, 0x4, 0xffff0001, 0x7fffffff, 0x1, 0x9, 0x6, 0x2, 0x6, 0xfffffc01, 0x9, 0x3, 0x4, 0x80000000, 0x1, 0xd8, 0x9, 0x8, 0xff, 0xb5f, 0xfffffff7, 0x3ff, 0x8, 0xb, 0x0, 0x9, 0x9cf, 0x200, 0x2, 0x1, 0x4, 0x40, 0x0, 0x9, 0x800, 0x6, 0x4, 0x3, 0x15efe754, 0xdb, 0xac52, 0x6, 0x766ab10f, 0x1, 0x7f, 0x6, 0x8, 0xfffffff9, 0x101, 0xa3b6, 0xb, 0x71, 0xff, 0x6, 0x1000, 0x2, 0x3, 0x4, 0x8, 0xffff0d9f, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x4f569f563902e519, 0xb, 0x401, 0x4, {0x4, 0x1, 0x5, 0xe, 0x2, 0xe0000000}, {0xa0, 0x1, 0x6, 0x0, 0x7, 0x8000}, 0x96, 0x7, 0x1000}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x2, 0xffff290c, 0x9, 0x62, 0x6dc, 0x9d, 0x10000, 0x4, 0xff, 0x401, 0xe, 0x6, 0x8, 0x10001, 0x3c, 0x100, 0x5f21, 0x47, 0x3, 0x8, 0x5, 0xffffffff, 0x1000, 0x2, 0x2, 0x8f, 0x2, 0x3, 0xfffffff7, 0xd, 0x0, 0xfffffffe, 0x3, 0x9, 0xaf, 0x0, 0x0, 0x5, 0x1ff, 0x3, 0x8001, 0x7, 0x7f, 0x6, 0xffff88b5, 0x2, 0xf, 0x0, 0x6, 0x8, 0x2, 0x2, 0x2170, 0x6383, 0xc765, 0xd82c, 0x3, 0x9e8, 0x2e, 0x400, 0x3, 0xfffffff8, 0x6, 0xfffffff7, 0xdde, 0x2, 0x9eb000, 0x9f, 0x9, 0x7, 0x40, 0xfffffffd, 0xd, 0x9cb1, 0x2, 0xfffffffa, 0x7, 0xaaf, 0x8, 0xffff8908, 0xfffffffa, 0xfffffffd, 0x0, 0x9, 0x5, 0xffff, 0x10001, 0x3ff, 0x0, 0x1, 0x1, 0x4, 0x5f, 0x40, 0x1d1, 0x8, 0x1, 0xb, 0x80000001, 0x1, 0x2, 0x0, 0x6, 0x4, 0x7, 0x5, 0x1, 0xe, 0x3, 0x3, 0xc, 0x3, 0xb31a, 0x5, 0x0, 0x462000, 0x7, 0xae4a, 0xee9, 0x4, 0x7ff, 0x9, 0x8378, 0x2, 0x89, 0x9, 0x10001, 0x80000000, 0x8, 0x9, 0xafb, 0x4, 0x7, 0x1e6c0187, 0xf, 0x7, 0x4, 0x4, 0x0, 0x6, 0x2, 0x2, 0x4, 0x9, 0xfffffffc, 0x9, 0x3, 0x80000000, 0x14b, 0x5f76, 0x4, 0x1, 0x5e, 0x5, 0x16e0000, 0x1ff, 0xfffffffe, 0x1, 0x5, 0x10000, 0x1, 0x3d59, 0x2, 0x5, 0x4, 0x0, 0x3, 0x101, 0x9, 0x80, 0x95bc, 0x40, 0x5, 0x9, 0x5, 0x4, 0x6, 0x0, 0xd, 0xf, 0x1fe0, 0xfffffffb, 0xbf6, 0x15, 0x2ce, 0x9, 0x8, 0x7, 0x3, 0x9ff, 0x7f, 0xff, 0x7, 0x9, 0x4, 0x5, 0xffffffff, 0x3, 0x101, 0x6, 0x1ff, 0x401, 0x570, 0xf, 0x10, 0x1, 0x7fffffff, 0x0, 0x1, 0x4, 0x4, 0x7, 0x0, 0x1, 0x200, 0x5, 0x8, 0x0, 0x3ff, 0x0, 0x1000, 0xd28, 0x33c0, 0x72, 0x9, 0x7e6, 0x0, 0x0, 0x7, 0x800, 0x3f66000, 0x8000, 0x6, 0x1, 0x7, 0xd, 0xee2, 0x5ba205b7, 0x6, 0x0, 0xd, 0x5, 0x4, 0x1, 0x5, 0x4, 0x2, 0x5, 0xeb71, 0x473, 0x9, 0x1000, 0x0, 0x2]}]]}, {0x23, 0x6, "ef2e97729b47edf99a4ee45d73672cf2b31e59b5937cf631367305d4572b3e"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x2a8, 0x1, [@m_bpf={0x150, 0xf, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x7, 0x2, 0x5, 0x7}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_NAME={0xa, 0x6, './bus\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x100, 0x0, 0x2, 0x8000}, {0x4, 0x58, 0x0, 0xa}]}]}, {0xd7, 0x6, "40402a864e45d650992e60c949b7ef25b8d68f5a9233a86db5b9bd0ef4fcce5f79c18381855842c164be16f0967674dc6326b29b18347f47ac72fbb90992763e8fda58d0deb893ea77b3873ec8caf1fe8b4a6b1e31ed7f32e4866159d1f237ef9dc3dafaac74b305cc37ebf46d75671b4318ad35f9f190e5c474abd7b2b2a8170e7e8365626993c11cc2837ee18c5b479b8e172fe6da3ee49c8b4e2c32808d6c6764120662e21aafe67f644895e661a902fae3eb6f99b2372d0ffb20a51e310531082328732ba4946be84f0fa72d810138d5ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x104, 0x1d, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x0, 0x5, 0x8001}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x0, 0x3, 0x7ff}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x1, 0xafa2, 0x1}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0xffffffffffffffff, 0x6f50, 0xd378}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x8, 0x4, 0x5}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xb01, 0x7, 0x6, 0x1200000}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xfffff81a, 0xffffffffffffffff, 0xf}, 0x31}}]}, {0x13, 0x6, "5eb3ac4204e577b8cf1bf82ffc5ebf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x50, 0x20, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1ff}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x358, 0x1, [@m_ctinfo={0x64, 0xc, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xa76}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffc}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x200}]}, {0x7, 0x6, "2d0e5b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x7c, 0x10, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfffffffc, 0x2, 0x0, 0x8}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x2, 0x1042, 0x76d}}}]}, {0x1a, 0x6, "26b9b393218762f95fb9f5247f954a74b26762e6dcc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x80, 0x18, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x2}, @TCA_CT_MARK={0x8, 0x5, 0x4}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x22, 0x6, "16c7aa296cf367e32bf73c1f4f707099f2cbb5ef88f9af0def94cca49fd8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x5c, 0x19, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5}]}, {0xf, 0x6, "0c111269455717ac0b2252"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x104, 0x18, 0x0, 0x0, {{0x9}, {0x4}, {0xd5, 0x6, "82d3e394c2128f5973bde67caf00372151e93f6222a7cff125efe7bd056e2ddd86407e0382133bf5d191abab4510f723a9fa93fc5da0fc45155e3f2e535cd03a807a80c8fe00f63efd09dcf93b3af6a069a4a96555ba9ae780728872b2580d39b8ae1dfc4405dbf3e9317ed1e3da42149e4a0cb6a656eddae35fa01b303c3105b5482d683290eaa6b631469a9cd72ea7ea94a5a5a7f7513d5059b562b6f518eb0e575ceea4ab5eb897160a0d1c36642da759c7b8e7a2fe8466c9f4841826c73c34edc42e33311e8aabc7d96ed9c93a84c3"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x94, 0x1b, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x4, 0x4, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x22, 0x6, "adfb5e437dbfd0fa096e1d372178059040b230e8d5d8e93dbd2057c6defa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x6994}, 0x1, 0x0, 0x0, 0x1}, 0x40004) 1m46.710324106s ago: executing program 1 (id=1523): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x400, &(0x7f0000000180)={[{@bh}, {@i_version}, {@oldalloc}, {@block_validity}, {@barrier}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@grpjquota}]}, 0x2, 0x790, &(0x7f0000006a80)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) socket$nl_xfrm(0x10, 0x3, 0x6) pwrite64(r0, 0x0, 0x0, 0xfecc) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d303030303030303030bc0230303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000580)=0x3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x41c18, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x40) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000000000000030000"]) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000005980)) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4}) 1m45.961349651s ago: executing program 1 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r1 = openat(0xffffffffffffff9c, 0x0, 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0x5, 0xfffffffffffffffc}, {0x5, 0x0, 0x9, 0xa, 0x4, 0x5}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x44) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x804019, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ftruncate(r4, 0x2000009) sendfile(r2, r4, 0x0, 0x7ffff004) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x9, 0x10, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x4, 0x2, 0x0, 0x0, 0x6, {0x6, 0x6c, 0x5, 0x9, 0x0, 0x0, 0x0, @in=@loopback, @in6=@mcast1}}, @sadb_lifetime={0x4, 0x3, 0xb065, 0x47eca428, 0x936, 0xffffffffffffffff}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd27}]}, 0x80}}, 0x40840) 1m45.854144696s ago: executing program 41 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r1 = openat(0xffffffffffffff9c, 0x0, 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0x5, 0xfffffffffffffffc}, {0x5, 0x0, 0x9, 0xa, 0x4, 0x5}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x44) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x804019, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ftruncate(r4, 0x2000009) sendfile(r2, r4, 0x0, 0x7ffff004) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x9, 0x10, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x4, 0x2, 0x0, 0x0, 0x6, {0x6, 0x6c, 0x5, 0x9, 0x0, 0x0, 0x0, @in=@loopback, @in6=@mcast1}}, @sadb_lifetime={0x4, 0x3, 0xb065, 0x47eca428, 0x936, 0xffffffffffffffff}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd27}]}, 0x80}}, 0x40840) 1m44.884851052s ago: executing program 2 (id=1534): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffbfb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r2, &(0x7f0000000c40)=ANY=[@ANYBLOB="0083080057e01500"], 0x34a) getpid() r3 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r4, 0xb, 0x0, 0xce2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff7fffff08004500005c0000000000019078ac1e0001ac1414aa05009078000000004000000000000000000200000a010102ac1414aa940400008625000000000010f79eb4cf48b5a5788fc15a45b5b1000f749018c9a54b61394327f11535000000"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0x2d, 0x0, 0x62, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) r11 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r11, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) write$ppp(r10, &(0x7f0000000140)="b216", 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r8, @ANYBLOB="02000000000000005fbed6b7be33d77a3a26f095576b14c609ab373fa3a341ae211285c3ec8953c03050f2d36aa75c595518e23b7ec7ca3cadec5c93aaddb68f1b5d896623844cad8f4d20158b573ef68780d563b8e9a2525f228e29657e219bbb1ccb29fd8a0bce4f8ecd29e9e2fb4d1f956a68ab7aea43567c48c0454ba7345442d32f97fbc02f17a513a9088cf979be6bd774", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r9], 0x20) 1m44.52157033s ago: executing program 2 (id=1537): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="ff", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x80000001, 0x0}, 0x2002) 1m44.251703312s ago: executing program 42 (id=1537): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="ff", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x80000001, 0x0}, 0x2002) 49.549080868s ago: executing program 9 (id=1919): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd20, &(0x7f0000000100)="04") 49.008164954s ago: executing program 9 (id=1922): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x24) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000000c0)={'binder1\x00'}) 48.833484142s ago: executing program 9 (id=1924): socket$nl_xfrm(0x10, 0x3, 0x6) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030bc0230303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000580)=0x3) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x41c18, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$eJzslM9K80AUxc9M+rX0Q1fuBHFhwbpomqQqbkSKL1DwH+6MNpZqaksbwdaVuPUB3Lr1FboRfBF1JUKXriPJTJuptFUELeL9LW7OZO7c3LmBA4Ig/ixPj68PVy/tcw3ABFJIyPfPWpTDlfzTQnJ/KrN+276+v1yrzVQH1fT9z38/BuAur8Hrne0/nZLPTfCe3gLHgtQ7YNCl3gPHttQOGHalPlJ0NcjX9cOy6+gHVbcYCCMIZhCsIOTe99e5YCgq/TFlv9FsHduu69S/UXw0v06eY1XpT/1f3dkYyvxMcJhS58CwIfUKEt3ZiJEo95+ORfW1H74/CRIkfpuI/Mm/YZhX/Cmm+EfWq9SyjWYrU67YJafknFhWbtlYNIwlKxsakYgj/C8Z+tN/pf6/IblxFseZ7Xl1U8Te2hJxkOPy0P840nNiHXh/fGg3Yp/JcyxUaW1EOkEQxNiYBYNv+wqT0kX7sArjbpQgCIIgCIIgCIIgiC/zFgAA///dqHHL") r3 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x40) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000000000000030000"]) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4}) 47.371818131s ago: executing program 9 (id=1933): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x6, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x66, 0x0, 0x48, 0x1}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @typedef={0x5, 0x0, 0x0, 0x8, 0x3}, @enum64={0xa, 0x6, 0x0, 0x13, 0x1, 0xf, [{0xd, 0x3, 0x40}, {0xa, 0x2, 0xff}, {0x8, 0x7, 0x2f7a5057}, {0x9, 0x5, 0xe4}, {0xd, 0xff, 0x400}, {0x10, 0x1, 0x1}]}]}, {0x0, [0x5f, 0x61, 0x30, 0x0]}}, &(0x7f0000000cc0)=""/169, 0x9a, 0xa9, 0x1, 0x6, 0x10000}, 0x28) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.io_serviced\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000000480)=""/213, 0xd5}], 0x1, 0x0, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@bloom_filter={0x1e, 0x3, 0x0, 0xfff, 0x21000, r1, 0xfcd6, '\x00', 0x0, 0xffffffffffffffff, 0x200005, 0x0, 0x4, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9e}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) fcntl$setlease(r4, 0x400, 0x2) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r7, 0x0, r6, 0x0, 0xd9d7, 0x5) (async) ioctl$int_in(r8, 0x5452, &(0x7f00000004c0)=0x1ff) (async) write$FUSE_INIT(r8, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3, 0xc002e38, 0x7ff, 0x9, 0x10000, 0xa7d, 0x0, 0x0, 0x100}}, 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x185093, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_usb_connect(0x4, 0x142, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0xae, 0xa0, 0x55, 0x8, 0x5c6, 0x9034, 0x9c46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x130, 0x1, 0x6, 0xe1, 0xd0, 0x7, "", [{{0x9, 0x4, 0x6, 0x9, 0x4, 0xf1, 0x94, 0x67, 0x6, [], [{{0x9, 0x5, 0xa, 0x1, 0x200, 0xbc, 0xc0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x800}, @generic={0xb5, 0x8, "0342c2d1d20f6c5f4c7915b2e913e979a4145252e5f8a62a7e69f86354fb836463f610cd28bfc9290a501cd1c3a7132d159ca5eb784d048f0cd41ef7b35088f153d309ffdcdecbbb5665ebfb730e2a0e2746876b8ad2efecf95f58d6c626f06be7609fd55b8d7957a3bd3389ad9945df41fe7e0564e7186fc7be1cf696056e2d1c95a5c8536f0ec41950b94e069dca2e1ebf9867254f28e2b3d4ff66954d9dafabe2e811ce386b5de76d75bba79b59aabbb936"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x40, 0xae, 0xa}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x81, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x1}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x1, 0x4, 0x37, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1}, @generic={0x29, 0x10, "8778c03feccb23cdda072982ca37e1124eb7bdb97561e4968c7044caf89c2946139ed27f201c9a"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x200, 0x6, 0x40, 0x3, 0x40, 0x8}, 0xbf, &(0x7f0000000900)={0x5, 0xf, 0xbf, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x8, 0xb, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "6a3acefeb670904a4563790bd9aee8be"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x6, 0x9, 0x1, 0x44}, @generic={0x94, 0x10, 0xa, "8deb20a251fe728711fe1a1c561f26da372af4e578d09775ae205b0b27aba00707e0e8ae0e23e4c844fa0dec988e5600d7fbc535352f959d162c30b5b5394f358cfc00c21abea5497a136e7fe88c09519647de5c1d58db8dc8c7217d1c97919587ade2586847d3c16ae0ce79a3e321c72918c1dafa4975842e439cb07b98f89678aa9f86922e029bd956f85d56676d86ec"}]}, 0x5, [{0x47, &(0x7f00000009c0)=@string={0x47, 0x3, "a0225bd422a84b859f2f4d6a2d1a9da930cbc0cdc9bb22b611ed7e9bf95954aa5064bacae8db6d0064c88dabe176dff80f579afe7b44e11a0683a9fef17f2e47650264c134"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x406}}, {0x78, &(0x7f0000000a80)=@string={0x78, 0x3, "4fb49196a07f773b2eefbe296df152048715c57ff52dad39211f572ac5e58d93d682df6924d55aadfa62ead28d170da50de1bcbad4528a763fedd46271a87924655dacfd1d5d9263dfbeaa0988546eb1bd79784a963a030a3cff020e6e46649881fceb6117f6cd60ce825eaf49c2d5e5f4f56c8b99d8"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4}}]}) 46.738881582s ago: executing program 9 (id=1937): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x0, @multicast1}}) splice(r3, &(0x7f0000000040)=0x10, r5, 0x0, 0x807, 0x0) vmsplice(r4, &(0x7f00000020c0)=[{&(0x7f0000000600)="996c57e2", 0x4}], 0x1, 0x7) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$binfmt_aout(r5, &(0x7f0000002100)=ANY=[@ANYBLOB="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"/6432], 0x1920) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x3fff, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB], 0xfdef) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000100000000000100008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) pipe(&(0x7f00000001c0)) 46.581365819s ago: executing program 9 (id=1939): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0xfd00, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x0) 46.466371535s ago: executing program 43 (id=1939): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0xfd00, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x0) 13.233447852s ago: executing program 7 (id=2078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) recvfrom(r4, 0x0, 0x0, 0x80010002, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00001e4000/0x3000)=nil, 0x3000}, 0x5}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x36cf724ef16547b2) r7 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c"], 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000100)=[@enter_looper], 0x0, 0x0, 0x0}) 13.005855922s ago: executing program 7 (id=2080): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0)=[{0x0}], 0x1) socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x2, 0xae, r2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e20, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000000000000080000003f3984dfe2ac02ffdf9f748f1bcd870b12367c0aa0fff7aac8dbb82cda7c5fc5196271fa865ec3a1428039a60144418203fe51146368f19fae39ad77ac769d3b56bbf8e600e820520479d5fd08ba02549f4b3a37cfb473f42c2f564f7d4b02132e0e679d92baf2fc43e315d5e3a6c6b5de7dd738c51fe0", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0) 8.242264719s ago: executing program 7 (id=2086): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c0054a87b439fa421753f060fe37a330d2dfc32e88fa453fa800f65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8dd9bb0c5a1701ca98ae66a4d6cc0bd0e1d7f95e498e29114b5fe25d58f32e5a2c69a2efadce55"], 0xfe, 0x17d, &(0x7f00000008c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000000000000030000000000"]) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x4296, 0x10}, {0xffffffffffffffff}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1fffffc, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x0, 0x1, 0x3, 0xffffffff}}, 0xe8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r5, &(0x7f00000000c0), 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f00000005c0)=0xe8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000580)={0xb69, 0x101, 0x2, 0x4, 0x2, 0x6}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000500)=@v1={0x0, @aes128, 0x3, @desc3}) 7.242484866s ago: executing program 6 (id=2088): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x150) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0), 0x0, 0x4000000) 7.173383639s ago: executing program 5 (id=2090): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = inotify_init() syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) timer_create(0x1, &(0x7f0000000400)={0x0, 0x12, 0x4, @thr={&(0x7f00000000c0)="cc82be88f5ddc27bb2a032c7e429409c94f0", &(0x7f0000000300)="d71ad0c4bd60b989b4648754c0b18ca2c030406d787ebae4e1b771a66d827d03a67e359ee8f0da76b566e75a040158c3d1f46c19fa164e06d7e574370cb9d31476ed2f059e22473a6566017a2deccb6181bbf9120d8b4ccd720954e7e42247abc8b78a835ffb83be3aa3f57a32646e3590ec5f82cabd0ea5b5fb4dd2ca1d5efaf65a41e7c662c100186db168247d7c2deb15a005e87f25ab41826e57031fd592139817a534eaf3e1f724954746a46923a459ed5e1345b3cf8f84993a5cb6c79cd6400c8dbbdb"}}, &(0x7f0000000440)=0x0) timer_getoverrun(r4) unlink(0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) sigaltstack(&(0x7f00000002c0)={0x0, 0x80000002}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x6, [0xffffffff, 0x5, 0x9, 0x5, 0xe766, 0x6]}}) clock_getres(0x6, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 6.269426842s ago: executing program 5 (id=2094): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x800ffd, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x800f, 0x0, 0x7, 0x0, 0x0, 0x10, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x2004402, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101441) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(r2, &(0x7f0000000240)='./file1\x00', 0x400080, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) creat(&(0x7f0000000140)='./file0/file2\x00', 0x14) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 4.572435103s ago: executing program 6 (id=2096): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0)=[{0x0}], 0x1) socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x2, 0xae, r2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e20, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000000000000080000003f3984dfe2ac02ffdf9f748f1bcd870b12367c0aa0fff7aac8dbb82cda7c5fc5196271fa865ec3a1428039a60144418203fe51146368f19fae39ad77ac769d3b56bbf8e600e820520479d5fd08ba02549f4b3a37cfb473f42c2f564f7d4b02132e0e679d92baf2fc43e315d5e3a6c6b5de7dd738c51fe0", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0) 3.490106434s ago: executing program 7 (id=2099): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x4, [@union={0xe, 0x4, 0x0, 0x5, 0x0, 0xf7e, [{0x9, 0x2, 0x6}, {0x9, 0x4, 0x5}, {0x0, 0x1, 0x5}, {0xa, 0x3, 0x7}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x0, 0x4}, {0x0, 0x3}, {0x7, 0x2}, {0xb, 0x5}, {0x10, 0x4}, {0xc, 0x4}, {0x0, 0x4}]}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000500)=""/33, 0x9c, 0x21, 0x1, 0x1}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x12, 0x0, 0x1, 0x8, 0x4, @private1, @local, 0x0, 0x20, 0x1, 0x100000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x2, 0xe04, 0x3, 0x100, r1, 0x8, '\x00', r2, r0, 0x0, 0x2, 0x0, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000b4a8ee74833d750fc500"/37], 0x50) r5 = socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(r5, 0x28, 0x1, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000080), 0x0, 0x2}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x2, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000013000000ad2cb36673f659bf28", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 3.338593501s ago: executing program 4 (id=2101): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000200)={'veth1\x00', {0x2, 0x0, @remote}}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x8, 0x695a, 0x3]}, &(0x7f00000001c0)=0x44) close(r0) accept4$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x0, 0x2}, 0x10) quotactl_fd$Q_SYNC(r2, 0xffffffff80000102, 0x0, 0x0) 3.290796683s ago: executing program 4 (id=2102): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) fstat(r3, 0x0) 3.210150797s ago: executing program 5 (id=2103): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_virt_wifi\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000300)={0x7d, {{0x29, 0x0, 0x3000000, @local, 0x5}}}, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) 2.94909679s ago: executing program 4 (id=2114): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) fstat(r3, 0x0) 2.865311954s ago: executing program 7 (id=2105): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x24c2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118400000004008510000002000000850000003a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(r2, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) fcntl$setsig(r1, 0xa, 0xf) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x87000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xb000, 0xfffffff8, 0x4b, 0x7, 0x0, [{0x0, 0x1, 0x7, '\x00', 0x80}, {0x5, 0x0, 0x0, '\x00', 0x4}, {0x50, 0x30, 0x80, '\x00', 0x5}, {0x1, 0xe, 0xb, '\x00', 0xd}, {0x3, 0x5, 0x2, '\x00', 0x81}, {0x1d, 0x3, 0x5, '\x00', 0x6}, {0x8, 0x8, 0x6, '\x00', 0x2}, {0x8, 0xc, 0x7}, {0x6, 0x2, 0x8, '\x00', 0x7}, {0x0, 0x1, 0xd}, {0x1, 0x9, 0x2, '\x00', 0x7}, {0xfe, 0x1, 0xc, '\x00', 0x6a}, {0x8, 0x8, 0x7, '\x00', 0x7}, {0x0, 0x6, 0x4, '\x00', 0x1}, {0x2, 0x2e, 0x3, '\x00', 0x6}, {0x4, 0x0, 0xfa, '\x00', 0xf4}, {0xfc, 0x8, 0x5}, {0x6, 0xff, 0x7, '\x00', 0x5f}, {0x5, 0x12, 0x8}, {0x6, 0x10, 0x9, '\x00', 0x9}, {0x2, 0x3, 0xf8, '\x00', 0x10}, {0x8, 0x8, 0xc1, '\x00', 0x2d}, {0x7, 0x9, 0x6, '\x00', 0x54}, {0x9, 0x6, 0x5, '\x00', 0xa2}]}}) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000240)={0x3, 0x7d, "104fd48aca8e7db1d61b77f0dd7585f3a71af274722582ee57b56bcf445e6dc754c8aa6292e6c2177111ea8e76ee2179542133052257c8f8f263bd6c5378025604c0533ab3741247e3e7087f3b6d0c7cc01065b6451fb1b0c47567087fd8c1d8c97d70e6feb19f2e9f8e1e5e039e52c8797aa193950fbd318e764503b4"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000c00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00m\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf258100000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x690}}, 0x4000000) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000c40)=ANY=[@ANYBLOB="1201000300070020fd07010027000102030109026900038000ff0300000000000020020904000000010020000924010700060900b20904010000010220000b04010101010220000905010900020699800825010118030000090402000001022000090402010101022000090562e75e16ff4d82112501040c43ce03d2dae4f2b78ab8abdbd08b06d7286d60e410f6"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) setns(0xc9, 0x0) r7 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) 2.666477463s ago: executing program 0 (id=2106): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x150) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 2.159468227s ago: executing program 6 (id=2107): socket$nl_xfrm(0x10, 0x3, 0x6) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000580)=0x3) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x41c18, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x40) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000000000000030000"]) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4}) 2.134902418s ago: executing program 5 (id=2108): socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r0, 0x12) 2.085105581s ago: executing program 4 (id=2109): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000280)}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1540, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r5, 0x0, r6, 0x0, 0x38f9, 0x0) fcntl$setstatus(r6, 0x4, 0x6c00) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) write(r4, &(0x7f0000000000)='3', 0x4e) r8 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r8, 0x2, 0x0, 0x2) sendmsg$AUDIT_SET_FEATURE(r4, 0x0, 0x4000) ioctl$KVM_CAP_X86_GUEST_MODE(r4, 0x4068aea3, &(0x7f0000000480)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r10, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x3d, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mic={0x8c, 0x18, {0xfac, "0000001000", @long="322e981dd4e9e4dccdb2eceabeb57be8"}}, @ht={0x2d, 0x1a, {0x80, 0x3, 0x4, 0x0, {0x8000000000000001, 0x1f80, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x8, 0x2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x24000890) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r3, 0x0, 0x0}, 0x20) unlinkat(r3, &(0x7f00000000c0)='./file0\x00', 0x0) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r11, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="f245a70f7807c74424005e000000c7442402164f0000ff1c240fed9f3f980000c4e1e9e04cfab2660f3881855d690000c441f9111b410f01dfc46148565af666bad004ec"}], 0x1, 0xd, 0x0, 0xfffffe97) 2.013475324s ago: executing program 5 (id=2110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x2, 0x2000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/237, 0xed}, 0x9}, {{0x0, 0x0, &(0x7f0000000b40)}, 0x68}], 0x2, 0x40002022, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, 0x0}], 0x1, 0x5, &(0x7f0000000000)=[@efer={0x2, 0x801}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.351570856s ago: executing program 0 (id=2111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced0"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf337cfe74a4", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.319211737s ago: executing program 0 (id=2112): syz_emit_ethernet(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x10c0840, &(0x7f0000002940), 0x1, 0x5df, &(0x7f00000022c0)="$eJzs3V+IXFcdB/Dfnd3Z5s/WpLFVW2OzGmoDoTubzSYk4oMl/qk1qRXFh1AIS3a6GzK7s2Y30J0KtvhSFETwRQShYh+siAbyUim1fWjxRUGpf6jUGFBBhKKVggjqyJ0/6djc7aad3b3t3M8H7u65587sObPDd+6dOefODaCwxtIfScRoRFyMiB3t1f+/wVj7V+Pghbl0SaLZ/OzfktbtZg5emOvetHu/7emP4YgtEbHrWBJ7y1e3u7TSODtdq1XPddYry/OLlaWVxh1n5qdnq7PVhUNHpo5OHp46MrV+j3Xi59tu+vNt91x+7Nl//vvbvz38w7S/o51tvY9jvYzFWOd/Uo4beuqHk4i717uxnAy1n+q4racuGc6xQ1yzZnPXD9Ln750RsbeV/x0xFO0n74Un7/vHjvj1XXn3Edg4za7szS83gYFVah0DJ6XxiGiXS6Xx8fYx/I2xrVSrLy3vv79+fmGmfay8M8ql+8/UqhOd9wo7o5yk6wda5VfXJ1+zfjCidQz8yNDW1vr46XptZrNf7ICW0YhLF79wemT7a/L/l6F2/oHBleb/V8898XRafmUo794AmynN//dfmf9UyD8UjvxDcfWf/4xBfeBtwf4fikv+YeCtmmz5h0FResP3kH8oLvmH4pJ/KC75h+Lq5v/eEyfi3hMnmo3O+e8L9dkzZ+cWj05OjM+fPz1+un5ucXy2Xp9tnbEzv/bfrdXriwcm4/wDleXq0nJlaaVxar5+fmH5VOu8/lNVswbgreHk5S1337DnmReSiHjoQ1tbS2qks11WYbA1m0nkfQ4ykA9v/aG4fFUbFJf3+ECyxvYtq22orX9fgM3xxmcOA4Pi9puN/0FR+fwfisvn/1Bc13iMP7LR/QDy4/N/KB6f/0Nxja5y/a/re67dNRER74iInw2Vr+te6wt4+xqNuHTpu5+vXLkO95sqlKOvu69X4S3SDQWFwSnk/QoFbLRXQ593T4C8zBy8MNddNqvNp2Y3qyUgy0t3ticBpblvdJb2luErYwPlDZon9OIjEWPx498/um9uKF2i8zq0AU0BGR56OCLek7X/T1pjAzs7t9vVvlncGBE3RcS7IuLdfbb9zc+k+X+u2lsn/7B5rjX/N0fErRFxS0S8NyJ2R8T7+mz7lxfT/P9ma2/davk3AREGyxefzbsHQF4++UTePQDyctIcAyis7z2Ydw+AvDz5o7x7AOTla8/n3QMotmfujIiJrPG/Umu8v6vcGYO7rvNdAFsjYltEbO+cQ3h95xzBHT1jhms59emIsbj1J711xv9h83Tn/zWumv9XujL/bygi9vTRxlMfHv1qVv307jT/jz3Ynf+XLmn73bmAwMZ66eGIWzLzn1yZ85tEmtOI97/JNsa+dPnxrPrn70n/bvkX8g/5aH4n4oORnf+utFRZnl+sLK007mhdx3u2unDoyNTRycNTR6Yqra8IqXS/KCTD8b+/vD+r/sXJNP/fOiT/kI90/79tlfz3Hv9/oI82jn3jKyez6kf/mOZ/99Ovn//SX0eSz7XWu3OAH5heXj53IGIkOX51/WQfHYUB181IN0Np/vftzX7/v6tzn3T/fywiPpoeL0TEfyLivxHxsYj4eER8IiLuep02v3777OWs+j88nub/0bP2/5CPNP8za+z/09//6qON/ft++uWs+o/sSfM//rs/Hb9vOF3kHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD9La00zk7XtsS5dqFW3YBC3o8RAAAAAAAAiuJ/AQAA//939TJ/") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './config\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') preadv(r4, &(0x7f00000008c0)=[{&(0x7f0000000940)=""/205, 0xcd}, {0x0}], 0x2, 0x5c, 0x25c) signalfd(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001400190126bd7000f5dbdf250a0819fe", @ANYRES32, @ANYBLOB="14000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) 1.227174402s ago: executing program 4 (id=2113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$igmp6(0xa, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 1.081063579s ago: executing program 4 (id=2115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt+bH/ved+a93TcznQmgbQ2kf5KIbRHxe0T0ZdnbFxjI3ubnZsZuzs2MJbGw8PbfSWW5G3MzY8WixXpb88yhUkTpsySOJ0vLnbp46cxouTxxPs8PTZ/9cGjq4qXnTp8dPTVxauLcyLFjR48Mv/jCyPNrEmca1429H0/u2/P6u1ffHDtx9b2fvk2rtXt/Nr86jju6WSegOgbSrfbPQkXtvCebqPu9YHtVOulsYUVoSkdEpLurq9L/+6IjFndeX7z2aUsrB6yr9LdpS+PZswvAJpZEq2sAtEbxQ58e/xavDRp6/C9cfzmiO0/Pz82Mzd+KvzNK+fSudSx/ICJOzP77VfqKZs9DAACsQmVs82y98V8pdlfes2sdO/JrKP0RcX9E7IyIByJiV0Q8GFFZ9qGIeDhbeaFvheUP1OSXjn9K1+rWeY2k47+XqsZ+81Xx52/9HXlueyX+ruTk6fLE4XybHIquLWl+eJkyvn/1ty8azase/6WvtPxiLJhX4FpnzQm68dHp0bXaCNcvR+ztrBd/cutKQNoC9kTE3uY+ekeROP30N/saLXTn+JexBteZFr6OeCrb/7NRE38hWf765FBPlCcODxWtYqmff73yVqPy7yr+NXD9wCNZYnH/1yxR1dDK5YnzU82XceWPzxse06y2/Xcn71T65C/vZ9MujE5Pnx+O6E7eqOSLY7rK9JHFdS+MTvem+WL5tP0fOli//+/M10n3f7qV0ka8PyIejYjH8ro/HhEHIuLgMvH/+MoTHywTfxJJtG7/X44Yr/v9d6v99yfV1+tXkeg488N3ja6Yr2z/H43ZyndtpvL9dwcrreBdbj4AAAC4J5QiYlskpcEsPbAtSqXBwex/+HfFfaXy5NT0MycnPzo3nt0j0B9dpeJMV1/V+dDhZDb/xCw/kp8rLuYfyc8bf9nRW8kPjk2Wx1scO7S7rbf3/yj6f+qvjlbXDlh37teC9lXb/0stqgew8Vby++9YADan2/t/T/qnt1V1ATaW439oX/X6/yc1eeN/2JyW9v8/6zyyDtiMjP+hfen/0L70f2hLzdzOH8cbzeqJiGYeC1DcLLD6pwr0rPgO/3ZJFE+8WM+yeuPSme58SpRaFGlHk41tUyTSHrOxhS4+QwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBe9l8AAAD//3ow3kU=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c0054a87b439fa421753f060fe37a330d2dfc32e88fa453fa800f65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8dd9bb0c5a1701ca98ae66a4d6cc0bd0e1d7f95e498e29114b5fe25d58f32e5a2c69a2efadce55"], 0xfe, 0x17d, &(0x7f00000008c0)="$eJzslM9K80AUxc9M+rX0Q1fuBHFhwbpomqQqbkSKL1DwH+6MNpZqaksbwdaVuPUB3Lr1FboRfBF1JUKXriPJTJuptFUELeL9LW7OZO7c3LmBA4Ig/ixPj68PVy/tcw3ABFJIyPfPWpTDlfzTQnJ/KrN+276+v1yrzVQH1fT9z38/BuAur8Hrne0/nZLPTfCe3gLHgtQ7YNCl3gPHttQOGHalPlJ0NcjX9cOy6+gHVbcYCCMIZhCsIOTe99e5YCgq/TFlv9FsHduu69S/UXw0v06eY1XpT/1f3dkYyvxMcJhS58CwIfUKEt3ZiJEo95+ORfW1H74/CRIkfpuI/Mm/YZhX/Cmm+EfWq9SyjWYrU67YJafknFhWbtlYNIwlKxsakYgj/C8Z+tN/pf6/IblxFseZ7Xl1U8Te2hJxkOPy0P840nNiHXh/fGg3Yp/JcyxUaW1EOkEQxNiYBYNv+wqT0kX7sArjbpQgCIIgCIIgCIIgiC/zFgAA///dqHHL") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000000000000030000000000"]) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x4296, 0x10}, {0xffffffffffffffff}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1fffffc, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x0, 0x1, 0x3, 0xffffffff}}, 0xe8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r5, &(0x7f00000000c0), 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f00000005c0)=0xe8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000580)={0xb69, 0x101, 0x2, 0x4, 0x2, 0x6}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000500)=@v1={0x0, @aes128, 0x3, @desc3}) 1.080953188s ago: executing program 6 (id=2116): syz_usb_connect(0x3c0944f681b8a3b1, 0x63, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0) 302.237906ms ago: executing program 5 (id=2117): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) mount$incfs(&(0x7f0000000080)='\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x18006, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f00000002c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x0, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='4', 0x1) 258.317257ms ago: executing program 7 (id=2118): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x2, 0xae, r2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e20, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000000000000080000003f3984dfe2ac02ffdf9f748f1bcd870b12367c0aa0fff7aac8dbb82cda7c5fc5196271fa865ec3a1428039a60144418203fe51146368f19fae39ad77ac769d3b56bbf8e600e820520479d5fd08ba02549f4b3a37cfb473f42c2f564f7d4b02132e0e679d92baf2fc43e315d5e3a6c6b5de7dd738c51fe0", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0) 209.6395ms ago: executing program 0 (id=2119): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_virt_wifi\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000300)={0x7d, {{0x29, 0x0, 0x3000000, @local, 0x5}}}, 0x88) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) 161.363662ms ago: executing program 6 (id=2120): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) fstat(r3, 0x0) 125.375644ms ago: executing program 0 (id=2121): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x50) 63.069937ms ago: executing program 0 (id=2122): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="3801"], 0x138) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x3, &(0x7f0000000f80)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@journal_checksum}, {@resgid}]}, 0x8, 0x625, &(0x7f0000002ac0)="$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") 0s ago: executing program 6 (id=2123): syz_emit_ethernet(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) socket(0xa, 0x3, 0x87) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x10c0840, &(0x7f0000002940), 0x1, 0x5df, &(0x7f00000022c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './config\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): .885776][ T852] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 293.245781][ T852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.265742][ T852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.285764][ T852] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.315717][ T852] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.324934][ T852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.345972][ T852] usb 6-1: config 0 descriptor?? [ 293.406011][ T7025] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1746'. [ 293.440056][ T7027] EXT4-fs (loop0): Ignoring removed bh option [ 293.446307][ T7027] EXT4-fs (loop0): Ignoring removed oldalloc option [ 293.462962][ T7027] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,i_version,oldalloc,block_validity,barrier,noinit_itable,auto_da_alloc=0x0000000000000004,grpjquota=,,errors=continue. Quota mode: none. [ 293.817921][ T852] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 293.831519][ T852] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 293.862296][ T39] usb 5-1: USB disconnect, device number 29 [ 294.536280][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 294.536331][ T30] audit: type=1400 audit(1789215903.090:1478): avc: denied { unmount } for pid=6143 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 294.650424][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1755'. [ 294.711506][ T7062] xt_hashlimit: max too large, truncated to 1048576 [ 294.724192][ T30] audit: type=1400 audit(1789215903.270:1479): avc: denied { remount } for pid=7056 comm="syz.6.1755" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 294.751065][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1755'. [ 294.769279][ T30] audit: type=1400 audit(1789215903.310:1480): avc: denied { create } for pid=7061 comm="syz.0.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 294.784402][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1755'. [ 294.792414][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1755'. [ 294.801681][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1755'. [ 294.807965][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1755'. [ 294.915161][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1755'. [ 294.948071][ T7067] set_capacity_and_notify: 2 callbacks suppressed [ 294.948090][ T7067] loop4: detected capacity change from 0 to 2048 [ 294.987537][ T7067] EXT4-fs (loop4): Ignoring removed bh option [ 294.987568][ T7067] EXT4-fs (loop4): Ignoring removed oldalloc option [ 295.006645][ T7067] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,i_version,oldalloc,block_validity,barrier,noinit_itable,auto_da_alloc=0x0000000000000004,grpjquota=,,errors=continue. Quota mode: none. [ 295.029458][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.029652][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.195774][ C1] plantronics 0003:047F:FFFF.000D: usb_submit_urb(ctrl) failed: -1 [ 295.225474][ T7036] loop9: detected capacity change from 0 to 131072 [ 295.311782][ T7036] F2FS-fs (loop9): Unrecognized mount option "ÿÿ" or missing value [ 295.895567][ T7075] loop5: detected capacity change from 0 to 128 [ 295.968624][ T7075] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.968709][ T7075] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 295.969697][ T30] audit: type=1400 audit(1789215904.520:1481): avc: denied { create } for pid=7074 comm="syz.5.1759" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 295.971576][ T30] audit: type=1400 audit(1789215904.520:1482): avc: denied { write } for pid=7074 comm="syz.5.1759" name="encrypted_dir" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 295.971702][ T30] audit: type=1400 audit(1789215904.520:1483): avc: denied { add_name } for pid=7074 comm="syz.5.1759" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 296.034204][ T7078] loop0: detected capacity change from 0 to 512 [ 296.089887][ T7057] __nla_validate_parse: 44 callbacks suppressed [ 296.089907][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1755'. [ 296.295724][ T7085] loop5: detected capacity change from 0 to 512 [ 296.352397][ T30] audit: type=1326 audit(1789215904.900:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.9.1762" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 296.354290][ T30] audit: type=1326 audit(1789215904.900:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.9.1762" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 296.355079][ T30] audit: type=1326 audit(1789215904.900:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.9.1762" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 296.357516][ T30] audit: type=1326 audit(1789215904.910:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.9.1762" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 296.623320][ T7085] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1763: casefold flag without casefold feature [ 296.623798][ T7085] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1763: couldn't read orphan inode 15 (err -117) [ 296.624032][ T7085] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,,errors=continue. Quota mode: writeback. [ 296.856288][ T852] usb 6-1: USB disconnect, device number 5 [ 296.917162][ T7085] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 296.917591][ T7085] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 296.977297][ T7104] UDC core: couldn't find an available UDC or it's busy: -16 [ 296.977319][ T7104] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 297.041745][ T7106] loop5: detected capacity change from 0 to 256 [ 297.053183][ T7106] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 297.072214][ T7106] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1768'. [ 297.257409][ T7111] loop9: detected capacity change from 0 to 2048 [ 297.313246][ T7111] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.709930][ T7119] loop0: detected capacity change from 0 to 260 [ 297.738801][ T7125] loop6: detected capacity change from 0 to 1024 [ 297.759770][ T7127] loop4: detected capacity change from 0 to 2048 [ 297.821368][ T7125] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.960253][ T7127] EXT4-fs (loop4): Ignoring removed bh option [ 297.985248][ T7127] EXT4-fs (loop4): Ignoring removed oldalloc option [ 298.014228][ T7131] EXT4-fs (loop5): Unsupported blocksize for fs-verity [ 298.056866][ T7127] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,i_version,oldalloc,block_validity,barrier,noinit_itable,auto_da_alloc=0x0000000000000004,grpjquota=,,errors=continue. Quota mode: none. [ 298.155564][ T7133] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 298.368880][ T7149] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 298.765735][ T20] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 299.005758][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 299.186076][ T20] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 299.224113][ T20] usb 5-1: config 0 has no interface number 0 [ 299.233838][ T7167] EXT4-fs (loop6): Unsupported blocksize for fs-verity [ 299.252787][ T20] usb 5-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid maxpacket 64800, setting to 1024 [ 299.266730][ T20] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 299.466127][ T20] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 299.482752][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.600242][ T7176] EXT4-fs (loop6): Ignoring removed bh option [ 299.606870][ T20] usb 5-1: Product: syz [ 299.611139][ T20] usb 5-1: Manufacturer: syz [ 299.613249][ T7176] EXT4-fs (loop6): Ignoring removed oldalloc option [ 299.616071][ T20] usb 5-1: SerialNumber: syz [ 299.630805][ T20] usb 5-1: config 0 descriptor?? [ 299.642964][ T7178] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 299.655916][ T7149] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 299.663408][ T7178] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 299.687211][ T7178] EXT4-fs (loop0): 1 truncate cleaned up [ 299.692963][ T7178] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 299.719909][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 299.719923][ T30] audit: type=1400 audit(1789215908.270:1552): avc: denied { mmap_zero } for pid=7177 comm="syz.0.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 299.747313][ T7176] EXT4-fs (loop6): mounted filesystem without journal. Opts: bh,i_version,oldalloc,block_validity,barrier,noinit_itable,auto_da_alloc=0x0000000000000004,grpjquota=,,errors=continue. Quota mode: none. [ 299.797269][ T30] audit: type=1400 audit(1789215908.330:1553): avc: denied { mounton } for pid=7177 comm="syz.0.1793" path="/61/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.832456][ T6260] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 299.857027][ T7180] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 299.873107][ T6260] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 299.888302][ T7149] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 299.899695][ T30] audit: type=1400 audit(1789215908.380:1554): avc: denied { remove_name } for pid=6260 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.935184][ T6260] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 299.950570][ T7180] EXT4-fs (loop9): 1 truncate cleaned up [ 299.968181][ T30] audit: type=1400 audit(1789215908.380:1555): avc: denied { rmdir } for pid=6260 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.992097][ T7180] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 300.022903][ T30] audit: type=1400 audit(1789215908.380:1556): avc: denied { rmdir } for pid=6260 comm="syz-executor" name=".index" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 300.051356][ T30] audit: type=1400 audit(1789215908.380:1557): avc: denied { unlink } for pid=6260 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 300.104121][ T30] audit: type=1400 audit(1789215908.380:1558): avc: denied { unlink } for pid=6260 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 300.135046][ T30] audit: type=1400 audit(1789215908.630:1559): avc: denied { watch watch_reads } for pid=7179 comm="syz.9.1792" path="/65/file0/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 300.185466][ T7195] set_capacity_and_notify: 8 callbacks suppressed [ 300.185481][ T7195] loop0: detected capacity change from 0 to 512 [ 300.218789][ T7197] loop5: detected capacity change from 0 to 512 [ 300.233214][ T7195] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 300.249784][ T7195] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.419641][ T30] audit: type=1326 audit(1789215908.970:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.6.1797" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86d4aa159 code=0x7ffc0000 [ 300.524593][ T30] audit: type=1326 audit(1789215908.970:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.6.1797" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86d4aa159 code=0x7ffc0000 [ 300.815781][ T20] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 300.835776][ T20] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 300.857342][ T20] asix: probe of 5-1:0.188 failed with error -71 [ 300.885586][ T20] usb 5-1: USB disconnect, device number 30 [ 301.343960][ T7232] loop6: detected capacity change from 0 to 40427 [ 301.351148][ T7233] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 301.506911][ T7232] F2FS-fs (loop6): invalid crc value [ 301.575111][ T7237] loop4: detected capacity change from 0 to 2048 [ 301.587967][ T7232] F2FS-fs (loop6): Found nat_bits in checkpoint [ 301.627222][ T7232] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 301.642361][ T7237] EXT4-fs (loop4): Ignoring removed bh option [ 301.677036][ T7241] loop5: detected capacity change from 0 to 512 [ 301.695817][ T7237] EXT4-fs (loop4): Ignoring removed oldalloc option [ 301.737286][ T7237] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,i_version,oldalloc,block_validity,barrier,noinit_itable,auto_da_alloc=0x0000000000000004,grpjquota=,,errors=continue. Quota mode: none. [ 301.766337][ T7241] loop5: detected capacity change from 0 to 512 [ 301.826678][ T7241] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 301.844775][ T7241] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.866968][ T39] logitech-hidpp-device 0005:046D:B012.000E: Device not connected [ 301.956167][ T7252] UDC core: couldn't find an available UDC or it's busy: -16 [ 301.963644][ T7252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 301.972341][ T7252] UDC core: couldn't find an available UDC or it's busy: -16 [ 301.987387][ T7252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 302.045304][ T7258] loop5: detected capacity change from 0 to 512 [ 302.099200][ T6143] handle_bad_sector: 40485 callbacks suppressed [ 302.099219][ T6143] attempt to access beyond end of device [ 302.099219][ T6143] loop6: rw=2049, want=45104, limit=40427 [ 302.205766][ T7264] loop4: detected capacity change from 0 to 1024 [ 302.236151][ T7264] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 302.266029][ T7264] EXT4-fs (loop4): Invalid want_extra_isize 65537 [ 302.593422][ T7269] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1817'. [ 302.636475][ T7271] loop4: detected capacity change from 0 to 512 [ 302.647317][ T7271] FAT-fs (loop4): bogus number of FAT sectors [ 302.664631][ T7271] FAT-fs (loop4): Can't find a valid FAT filesystem [ 303.695654][ T7290] loop6: detected capacity change from 0 to 2048 [ 303.806846][ T7290] EXT4-fs (loop6): Ignoring removed bh option [ 303.845498][ T7290] EXT4-fs (loop6): Ignoring removed oldalloc option [ 303.911036][ T7290] EXT4-fs (loop6): mounted filesystem without journal. Opts: bh,i_version,oldalloc,block_validity,barrier,noinit_itable,auto_da_alloc=0x0000000000000004,grpjquota=,,errors=continue. Quota mode: none. [ 304.107381][ T7305] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 304.170012][ T7320] FAULT_INJECTION: forcing a failure. [ 304.170012][ T7320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 304.256872][ T7320] CPU: 0 PID: 7320 Comm: syz.9.1831 Not tainted syzkaller #0 [ 304.264389][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.274509][ T7320] Call Trace: [ 304.277810][ T7320] [ 304.280752][ T7320] __dump_stack+0x21/0x30 [ 304.285120][ T7320] dump_stack_lvl+0x110/0x170 [ 304.289829][ T7320] ? show_regs_print_info+0x20/0x20 [ 304.295056][ T7320] ? __kasan_kmalloc+0xe6/0x100 [ 304.299984][ T7320] ? __kasan_kmalloc+0xd4/0x100 [ 304.304861][ T7320] ? __kmalloc+0x13d/0x2c0 [ 304.309307][ T7320] ? bpf_map_area_alloc+0x49/0xe0 [ 304.314375][ T7320] dump_stack+0x15/0x20 [ 304.318551][ T7320] should_fail+0x3ab/0x500 [ 304.322992][ T7320] should_fail_alloc_page+0x55/0x80 [ 304.328265][ T7320] prepare_alloc_pages+0x13f/0x590 [ 304.333425][ T7320] ? __alloc_pages_bulk+0xab0/0xab0 [ 304.338653][ T7320] __alloc_pages+0x11d/0x460 [ 304.343258][ T7320] ? prep_new_page+0x110/0x110 [ 304.348036][ T7320] ? __kmalloc+0x13d/0x2c0 [ 304.352518][ T7320] ? bpf_map_area_alloc+0x49/0xe0 [ 304.357573][ T7320] bpf_ringbuf_alloc+0x6a/0x470 [ 304.362438][ T7320] ? ringbuf_map_alloc+0x191/0x310 [ 304.367580][ T7320] ? bpf_map_init_from_attr+0x146/0x350 [ 304.373158][ T7320] ringbuf_map_alloc+0x1e5/0x310 [ 304.378149][ T7320] map_create+0x3f4/0x1fa0 [ 304.382594][ T7320] __sys_bpf+0x2ff/0x7d0 [ 304.386988][ T7320] ? bpf_link_show_fdinfo+0x330/0x330 [ 304.392394][ T7320] ? debug_smp_processor_id+0x17/0x20 [ 304.397812][ T7320] __x64_sys_bpf+0x7c/0x90 [ 304.402264][ T7320] x64_sys_call+0x4b9/0x9a0 [ 304.406785][ T7320] do_syscall_64+0x4c/0xa0 [ 304.411486][ T7320] ? clear_bhb_loop+0x50/0xa0 [ 304.416184][ T7320] ? clear_bhb_loop+0x50/0xa0 [ 304.420893][ T7320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.426803][ T7320] RIP: 0033:0x7f7aa7893159 [ 304.431241][ T7320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.450866][ T7320] RSP: 002b:00007f7aa62ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 304.459310][ T7320] RAX: ffffffffffffffda RBX: 00007f7aa7b1afa0 RCX: 00007f7aa7893159 [ 304.467313][ T7320] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000000 [ 304.475312][ T7320] RBP: 00007f7aa62ec090 R08: 0000000000000000 R09: 0000000000000000 [ 304.483454][ T7320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.491447][ T7320] R13: 00007f7aa7b1b038 R14: 00007f7aa7b1afa0 R15: 00007ffc16e0b128 [ 304.499477][ T7320] [ 304.684739][ T7327] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 304.820650][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 304.820686][ T30] audit: type=1400 audit(1789215913.370:1605): avc: denied { write } for pid=7333 comm="syz.6.1834" name="softnet_stat" dev="proc" ino=4026533298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 305.159952][ T7351] device lo entered promiscuous mode [ 305.174926][ T7351] device tunl0 entered promiscuous mode [ 305.182114][ T30] audit: type=1326 audit(1789215913.730:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.9.1836" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 305.194185][ T7351] device gre0 entered promiscuous mode [ 305.225756][ T30] audit: type=1326 audit(1789215913.730:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.9.1836" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 305.253687][ T7349] UDC core: couldn't find an available UDC or it's busy: -16 [ 305.253878][ T7351] device gretap0 entered promiscuous mode [ 305.278498][ T7345] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 305.291090][ T7283] set_capacity_and_notify: 5 callbacks suppressed [ 305.291105][ T7283] loop5: detected capacity change from 0 to 131072 [ 305.304169][ T7349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 305.309652][ T7351] device erspan0 entered promiscuous mode [ 305.312061][ T30] audit: type=1326 audit(1789215913.730:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.9.1836" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 305.342665][ T30] audit: type=1326 audit(1789215913.730:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.9.1836" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 305.358751][ T7351] device ip_vti0 entered promiscuous mode [ 305.367719][ T30] audit: type=1326 audit(1789215913.730:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.9.1836" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 305.398517][ T30] audit: type=1326 audit(1789215913.730:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.9.1836" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 305.398837][ T7283] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 305.423641][ T30] audit: type=1326 audit(1789215913.730:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.9.1836" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 305.458976][ T30] audit: type=1326 audit(1789215913.730:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.9.1836" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 305.485340][ T30] audit: type=1326 audit(1789215913.730:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.9.1836" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa7893159 code=0x7ffc0000 [ 305.512597][ T7283] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 305.533024][ T1949] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 305.563064][ T7283] F2FS-fs (loop5): invalid crc value [ 305.613496][ T7283] F2FS-fs (loop5): Found nat_bits in checkpoint [ 305.705481][ T7283] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 305.717247][ T7283] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 305.805796][ T1949] usb 7-1: device descriptor read/64, error -71 [ 305.924005][ T7368] loop0: detected capacity change from 0 to 40427 [ 305.940198][ T7368] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 305.951042][ T7368] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 305.986272][ T7368] F2FS-fs (loop0): invalid crc value [ 306.006634][ T7368] F2FS-fs (loop0): Found nat_bits in checkpoint [ 306.065221][ T7377] loop9: detected capacity change from 0 to 128 [ 306.089816][ T7368] F2FS-fs (loop0): recover fsync data on readonly fs [ 306.106097][ T7368] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 306.113346][ T7368] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 306.190107][ T7386] loop5: detected capacity change from 0 to 2048 [ 306.205798][ T1949] usb 7-1: device descriptor read/64, error -71 [ 306.251315][ T7386] EXT4-fs (loop5): Ignoring removed bh option [ 306.285852][ T7386] EXT4-fs (loop5): Ignoring removed oldalloc option [ 306.304620][ T7390] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1849'. [ 306.338156][ T7386] EXT4-fs (loop5): mounted filesystem without journal. Opts: bh,i_version,oldalloc,block_validity,barrier,noinit_itable,auto_da_alloc=0x0000000000000004,grpjquota=,,errors=continue. Quota mode: none. [ 306.338806][ T7394] loop9: detected capacity change from 0 to 2048 [ 306.416899][ T7399] tipc: Started in network mode [ 306.426899][ T319] Alternate GPT is invalid, using primary GPT. [ 306.434300][ T319] loop9: p1 p2 p3 [ 306.450119][ T7399] tipc: Node identity , cluster identity 4711 [ 306.459296][ T7394] Alternate GPT is invalid, using primary GPT. [ 306.469931][ T7394] loop9: p1 p2 p3 [ 306.487384][ T7361] loop4: detected capacity change from 0 to 131072 [ 306.494078][ T7399] tipc: Failed to obtain node identity [ 306.499621][ T1949] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 306.507158][ T7399] tipc: Enabling of bearer rejected, failed to enable media [ 306.627928][ T7402] FAULT_INJECTION: forcing a failure. [ 306.627928][ T7402] name failslab, interval 1, probability 0, space 0, times 0 [ 306.732065][ T7402] CPU: 1 PID: 7402 Comm: syz.4.1854 Not tainted syzkaller #0 [ 306.739591][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.749667][ T7402] Call Trace: [ 306.752991][ T7402] [ 306.755942][ T7402] __dump_stack+0x21/0x30 [ 306.760311][ T7402] dump_stack_lvl+0x110/0x170 [ 306.765037][ T7402] ? show_regs_print_info+0x20/0x20 [ 306.770270][ T7402] ? kmem_cache_alloc_trace+0x119/0x270 [ 306.775853][ T7402] ? bpf_prog_create_from_user+0x2c5/0x420 [ 306.781679][ T7402] ? __x64_sys_seccomp+0x7b/0x90 [ 306.786668][ T7402] ? x64_sys_call+0x22e/0x9a0 [ 306.791362][ T7402] ? do_syscall_64+0x4c/0xa0 [ 306.795978][ T7402] dump_stack+0x15/0x20 [ 306.800154][ T7402] should_fail+0x3ab/0x500 [ 306.804591][ T7402] __should_failslab+0xa4/0xe0 [ 306.809379][ T7402] should_failslab+0x9/0x20 [ 306.813908][ T7402] slab_pre_alloc_hook+0x39/0xd0 [ 306.818860][ T7402] __kmalloc+0x6d/0x2c0 [ 306.823036][ T7402] ? kvmalloc_node+0x211/0x320 [ 306.827831][ T7402] kvmalloc_node+0x211/0x320 [ 306.832446][ T7402] ? vm_mmap+0xb0/0xb0 [ 306.836540][ T7402] ? bpf_int_jit_compile+0x1ed/0xc4c0 [ 306.841945][ T7402] bpf_int_jit_compile+0x3df/0xc4c0 [ 306.847176][ T7402] ? bpf_convert_filter+0x5048/0x51e0 [ 306.852572][ T7402] ? kfree+0xc4/0x270 [ 306.856576][ T7402] ? bpf_convert_filter+0x5048/0x51e0 [ 306.861983][ T7402] ? bpf_convert_filter+0x507b/0x51e0 [ 306.867385][ T7402] ? __kasan_slab_alloc+0x69/0xe0 [ 306.872444][ T7402] ? emit_bpf_dispatcher+0x1070/0x1070 [ 306.877941][ T7402] ? sk_filter_release_rcu+0x110/0x110 [ 306.883429][ T7402] bpf_prog_select_runtime+0x6ea/0x9e0 [ 306.888911][ T7402] ? kmemdup+0x41/0x60 [ 306.893025][ T7402] ? memcpy+0x56/0x70 [ 306.897030][ T7402] ? bpf_prog_realloc+0x185/0x200 [ 306.902084][ T7402] bpf_prepare_filter+0x100e/0x11b0 [ 306.907307][ T7402] ? seccomp_attach_filter+0xb50/0xb50 [ 306.912795][ T7402] ? bpf_prog_create+0x1f0/0x1f0 [ 306.917757][ T7402] bpf_prog_create_from_user+0x2c5/0x420 [ 306.923415][ T7402] ? seccomp_attach_filter+0xb50/0xb50 [ 306.928906][ T7402] do_seccomp+0x803/0x1480 [ 306.933344][ T7402] ? prctl_set_seccomp+0x60/0x60 [ 306.938311][ T7402] ? __x64_sys_futex+0x100/0x100 [ 306.943275][ T7402] ? __kasan_check_write+0x14/0x20 [ 306.948408][ T7402] ? switch_fpu_return+0x15d/0x2c0 [ 306.953546][ T7402] __x64_sys_seccomp+0x7b/0x90 [ 306.958326][ T7402] x64_sys_call+0x22e/0x9a0 [ 306.962844][ T7402] do_syscall_64+0x4c/0xa0 [ 306.967281][ T7402] ? clear_bhb_loop+0x50/0xa0 [ 306.972033][ T7402] ? clear_bhb_loop+0x50/0xa0 [ 306.976730][ T7402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.982733][ T7402] RIP: 0033:0x7f0967597159 [ 306.987160][ T7402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.006803][ T7402] RSP: 002b:00007f0965fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 307.015270][ T7402] RAX: ffffffffffffffda RBX: 00007f096781f090 RCX: 00007f0967597159 [ 307.023272][ T7402] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001 [ 307.031275][ T7402] RBP: 00007f096762e03b R08: 0000000000000000 R09: 0000000000000000 [ 307.039272][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.047277][ T7402] R13: 00007f096781f128 R14: 00007f096781f090 R15: 00007ffe61c224e8 [ 307.055275][ T7402] [ 307.129376][ T1949] usb 7-1: device descriptor read/64, error -71 [ 307.392272][ T7414] xt_limit: Overflow, try lower: 167772/2147483648 [ 307.450218][ T7410] loop4: detected capacity change from 0 to 32768 [ 307.496180][ T319] loop4: p1 p3 < > [ 307.525300][ T7410] loop4: p1 p3 < > [ 307.545736][ T1949] usb 7-1: device descriptor read/64, error -71 [ 307.592664][ T7413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.599959][ T7413] IPv6: NLM_F_CREATE should be set when creating new route [ 307.607213][ T7413] IPv6: NLM_F_CREATE should be set when creating new route [ 307.665878][ T1949] usb usb7-port1: attempt power cycle [ 307.677919][ T7424] FAULT_INJECTION: forcing a failure. [ 307.677919][ T7424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.701761][ T7424] CPU: 0 PID: 7424 Comm: syz.0.1861 Not tainted syzkaller #0 [ 307.709253][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.719336][ T7424] Call Trace: [ 307.722643][ T7424] [ 307.725593][ T7424] __dump_stack+0x21/0x30 [ 307.729950][ T7424] dump_stack_lvl+0x110/0x170 [ 307.734655][ T7424] ? show_regs_print_info+0x20/0x20 [ 307.739965][ T7424] dump_stack+0x15/0x20 [ 307.744135][ T7424] should_fail+0x3ab/0x500 [ 307.748567][ T7424] should_fail_usercopy+0x1a/0x20 [ 307.753623][ T7424] _copy_from_user+0x20/0xd0 [ 307.758229][ T7424] bpf_prog_test_run_flow_dissector+0x2d8/0x620 [ 307.764514][ T7424] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 307.770074][ T7424] ? __fget_files+0x2e1/0x340 [ 307.774796][ T7424] ? fput_many+0x15a/0x1a0 [ 307.779230][ T7424] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 307.784803][ T7424] bpf_prog_test_run+0x3a5/0x5b0 [ 307.789751][ T7424] ? bpf_prog_query+0x230/0x230 [ 307.794655][ T7424] ? selinux_bpf+0xce/0xf0 [ 307.799110][ T7424] ? security_bpf+0x82/0xa0 [ 307.803630][ T7424] __sys_bpf+0x590/0x7d0 [ 307.807894][ T7424] ? bpf_link_show_fdinfo+0x330/0x330 [ 307.813280][ T7424] ? debug_smp_processor_id+0x17/0x20 [ 307.818672][ T7424] __x64_sys_bpf+0x7c/0x90 [ 307.823105][ T7424] x64_sys_call+0x4b9/0x9a0 [ 307.827634][ T7424] do_syscall_64+0x4c/0xa0 [ 307.832069][ T7424] ? clear_bhb_loop+0x50/0xa0 [ 307.836764][ T7424] ? clear_bhb_loop+0x50/0xa0 [ 307.841481][ T7424] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.847403][ T7424] RIP: 0033:0x7f49c3fc3159 [ 307.851855][ T7424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.871492][ T7424] RSP: 002b:00007f49c2a1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.875016][ T390] udevd[390]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 307.879962][ T7424] RAX: ffffffffffffffda RBX: 00007f49c424afa0 RCX: 00007f49c3fc3159 [ 307.879979][ T7424] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 307.879992][ T7424] RBP: 00007f49c2a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 307.880004][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.892872][ T319] udevd[319]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 307.897613][ T7424] R13: 00007f49c424b038 R14: 00007f49c424afa0 R15: 00007ffdf5c942d8 [ 307.897636][ T7424] [ 307.936670][ T7426] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1862'. [ 307.965846][ T20] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 307.981168][ T319] udevd[319]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 307.981193][ T390] udevd[390]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 308.007054][ T7429] FAULT_INJECTION: forcing a failure. [ 308.007054][ T7429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.038868][ T7429] CPU: 0 PID: 7429 Comm: syz.5.1864 Not tainted syzkaller #0 [ 308.045145][ T7433] FAULT_INJECTION: forcing a failure. [ 308.045145][ T7433] name failslab, interval 1, probability 0, space 0, times 0 [ 308.046296][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.046310][ T7429] Call Trace: [ 308.046315][ T7429] [ 308.046322][ T7429] __dump_stack+0x21/0x30 [ 308.046345][ T7429] dump_stack_lvl+0x110/0x170 [ 308.046363][ T7429] ? show_regs_print_info+0x20/0x20 [ 308.046383][ T7429] dump_stack+0x15/0x20 [ 308.093620][ T7429] should_fail+0x3ab/0x500 [ 308.098070][ T7429] should_fail_usercopy+0x1a/0x20 [ 308.103124][ T7429] _copy_from_user+0x20/0xd0 [ 308.107733][ T7429] bpf_test_init+0x13d/0x1c0 [ 308.112385][ T7429] bpf_prog_test_run_skb+0x193/0x1180 [ 308.117781][ T7429] ? __fget_files+0x2e1/0x340 [ 308.122491][ T7429] ? __kasan_check_write+0x14/0x20 [ 308.127628][ T7429] ? fput_many+0x15a/0x1a0 [ 308.132060][ T7429] ? __bpf_prog_test_run_raw_tp+0x2c0/0x2c0 [ 308.137969][ T7429] bpf_prog_test_run+0x3a5/0x5b0 [ 308.142942][ T7429] ? bpf_prog_query+0x230/0x230 [ 308.147809][ T7429] ? selinux_bpf+0xce/0xf0 [ 308.152289][ T7429] ? security_bpf+0x82/0xa0 [ 308.156818][ T7429] __sys_bpf+0x590/0x7d0 [ 308.161092][ T7429] ? bpf_link_show_fdinfo+0x330/0x330 [ 308.166498][ T7429] ? debug_smp_processor_id+0x17/0x20 [ 308.171894][ T7429] __x64_sys_bpf+0x7c/0x90 [ 308.176336][ T7429] x64_sys_call+0x4b9/0x9a0 [ 308.180863][ T7429] do_syscall_64+0x4c/0xa0 [ 308.185301][ T7429] ? clear_bhb_loop+0x50/0xa0 [ 308.190002][ T7429] ? clear_bhb_loop+0x50/0xa0 [ 308.194726][ T7429] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.195923][ T1949] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 308.200642][ T7429] RIP: 0033:0x7f35db212159 [ 308.200663][ T7429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.232224][ T7429] RSP: 002b:00007f35d9c6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.240645][ T7429] RAX: ffffffffffffffda RBX: 00007f35db499fa0 RCX: 00007f35db212159 [ 308.248621][ T7429] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 308.256600][ T7429] RBP: 00007f35d9c6b090 R08: 0000000000000000 R09: 0000000000000000 [ 308.264580][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.272557][ T7429] R13: 00007f35db49a038 R14: 00007f35db499fa0 R15: 00007ffe63f9cc88 [ 308.280658][ T7429] [ 308.312435][ T7435] loop5: detected capacity change from 0 to 512 [ 308.321278][ T7433] CPU: 0 PID: 7433 Comm: syz.0.1865 Not tainted syzkaller #0 [ 308.328682][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.338757][ T7433] Call Trace: [ 308.342047][ T7433] [ 308.344991][ T7433] __dump_stack+0x21/0x30 [ 308.349338][ T7433] dump_stack_lvl+0x110/0x170 [ 308.349770][ T7438] FAULT_INJECTION: forcing a failure. [ 308.349770][ T7438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.354028][ T7433] ? show_regs_print_info+0x20/0x20 [ 308.354050][ T7433] ? __kernel_text_address+0xa0/0x100 [ 308.377643][ T7433] ? unwind_get_return_address+0x4d/0x90 [ 308.383301][ T7433] dump_stack+0x15/0x20 [ 308.387475][ T7433] should_fail+0x3ab/0x500 [ 308.391915][ T7433] __should_failslab+0xa4/0xe0 [ 308.396692][ T7433] should_failslab+0x9/0x20 [ 308.401209][ T7433] slab_pre_alloc_hook+0x39/0xd0 [ 308.406159][ T7433] kmem_cache_alloc_trace+0x48/0x270 [ 308.411474][ T7433] ? __get_vm_area_node+0x11d/0x350 [ 308.416719][ T7433] __get_vm_area_node+0x11d/0x350 [ 308.421761][ T7433] __vmalloc_node_range+0xe8/0xad0 [ 308.426885][ T7433] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 308.432442][ T7433] ? selinux_capset+0xf0/0xf0 [ 308.437130][ T7433] ? _kstrtoull+0x3bb/0x4c0 [ 308.441656][ T7433] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 308.447212][ T7433] __vmalloc+0x79/0x90 [ 308.451329][ T7433] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 308.457029][ T7433] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 308.462436][ T7433] ? bpf_prog_alloc+0x15/0x1e0 [ 308.467239][ T7433] bpf_prog_alloc+0x1f/0x1e0 [ 308.471860][ T7433] bpf_prog_load+0x80e/0x1620 [ 308.476653][ T7433] ? map_freeze+0x370/0x370 [ 308.481172][ T7433] ? selinux_bpf+0xc7/0xf0 [ 308.485600][ T7433] ? security_bpf+0x82/0xa0 [ 308.490111][ T7433] __sys_bpf+0x51d/0x7d0 [ 308.494362][ T7433] ? bpf_link_show_fdinfo+0x330/0x330 [ 308.499757][ T7433] ? debug_smp_processor_id+0x17/0x20 [ 308.505144][ T7433] __x64_sys_bpf+0x7c/0x90 [ 308.509570][ T7433] x64_sys_call+0x4b9/0x9a0 [ 308.514095][ T7433] do_syscall_64+0x4c/0xa0 [ 308.518532][ T7433] ? clear_bhb_loop+0x50/0xa0 [ 308.523277][ T7433] ? clear_bhb_loop+0x50/0xa0 [ 308.527971][ T7433] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.533885][ T7433] RIP: 0033:0x7f49c3fc3159 [ 308.538326][ T7433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.557951][ T7433] RSP: 002b:00007f49c2a1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.566463][ T7433] RAX: ffffffffffffffda RBX: 00007f49c424afa0 RCX: 00007f49c3fc3159 [ 308.574456][ T7433] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000005 [ 308.582448][ T7433] RBP: 00007f49c2a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 308.590479][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.598471][ T7433] R13: 00007f49c424b038 R14: 00007f49c424afa0 R15: 00007ffdf5c942d8 [ 308.606459][ T7433] [ 308.609491][ T7438] CPU: 1 PID: 7438 Comm: syz.4.1867 Not tainted syzkaller #0 [ 308.616901][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.626970][ T7438] Call Trace: [ 308.630274][ T7438] [ 308.633219][ T7438] __dump_stack+0x21/0x30 [ 308.637606][ T7438] dump_stack_lvl+0x110/0x170 [ 308.642333][ T7438] ? show_regs_print_info+0x20/0x20 [ 308.647559][ T7438] ? __kmalloc+0x13d/0x2c0 [ 308.652007][ T7438] ? kvmalloc_node+0x211/0x320 [ 308.655802][ T20] usb 10-1: Using ep0 maxpacket: 32 [ 308.656795][ T7438] dump_stack+0x15/0x20 [ 308.656818][ T7438] should_fail+0x3ab/0x500 [ 308.670639][ T7438] should_fail_usercopy+0x1a/0x20 [ 308.675701][ T7438] _copy_from_user+0x20/0xd0 [ 308.680329][ T7438] generic_map_delete_batch+0x2b6/0x520 [ 308.686033][ T7438] ? bpf_map_inc_not_zero+0x110/0x110 [ 308.691440][ T7438] ? bpf_map_inc_not_zero+0x110/0x110 [ 308.696842][ T7438] bpf_map_do_batch+0x461/0x5d0 [ 308.701722][ T7438] __sys_bpf+0x65c/0x7d0 [ 308.706029][ T7438] ? bpf_link_show_fdinfo+0x330/0x330 [ 308.711430][ T7438] ? debug_smp_processor_id+0x17/0x20 [ 308.716834][ T7438] __x64_sys_bpf+0x7c/0x90 [ 308.721374][ T7438] x64_sys_call+0x4b9/0x9a0 [ 308.725905][ T7438] do_syscall_64+0x4c/0xa0 [ 308.730341][ T7438] ? clear_bhb_loop+0x50/0xa0 [ 308.735065][ T7438] ? clear_bhb_loop+0x50/0xa0 [ 308.739802][ T7438] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.745724][ T7438] RIP: 0033:0x7f0967597159 [ 308.750155][ T7438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.769774][ T7438] RSP: 002b:00007f0965ff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.778261][ T7438] RAX: ffffffffffffffda RBX: 00007f096781efa0 RCX: 00007f0967597159 [ 308.786275][ T7438] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001b [ 308.794263][ T7438] RBP: 00007f0965ff0090 R08: 0000000000000000 R09: 0000000000000000 [ 308.802270][ T7438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.810267][ T7438] R13: 00007f096781f038 R14: 00007f096781efa0 R15: 00007ffe61c224e8 [ 308.816027][ T20] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 308.818352][ T7438] [ 308.818822][ T7433] syz.0.1865: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 308.829551][ T1949] usb 7-1: device not accepting address 10, error -71 [ 308.851153][ T20] usb 10-1: can't read configurations, error -61 [ 308.858936][ T7433] ,cpuset=syz0,mems_allowed=0 [ 308.863936][ T7433] CPU: 0 PID: 7433 Comm: syz.0.1865 Not tainted syzkaller #0 [ 308.871338][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.881420][ T7433] Call Trace: [ 308.884735][ T7433] [ 308.887685][ T7433] __dump_stack+0x21/0x30 [ 308.892040][ T7433] dump_stack_lvl+0x110/0x170 [ 308.896722][ T7433] ? show_regs_print_info+0x20/0x20 [ 308.901933][ T7433] ? pr_cont_kernfs_name+0xe3/0xf0 [ 308.907059][ T7433] dump_stack+0x15/0x20 [ 308.911226][ T7433] warn_alloc+0x1dc/0x200 [ 308.915562][ T7433] ? __should_failslab+0xa4/0xe0 [ 308.920506][ T7433] ? zone_watermark_ok_safe+0x270/0x270 [ 308.926057][ T7433] ? kmem_cache_alloc_trace+0x119/0x270 [ 308.931610][ T7433] __vmalloc_node_range+0x15e/0xad0 [ 308.936811][ T7433] ? selinux_capset+0xf0/0xf0 [ 308.941507][ T7433] ? _kstrtoull+0x3bb/0x4c0 [ 308.946016][ T7433] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 308.951576][ T7433] __vmalloc+0x79/0x90 [ 308.955660][ T7433] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 308.961221][ T7433] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 308.966598][ T7433] ? bpf_prog_alloc+0x15/0x1e0 [ 308.971462][ T7433] bpf_prog_alloc+0x1f/0x1e0 [ 308.976063][ T7433] bpf_prog_load+0x80e/0x1620 [ 308.980838][ T7433] ? map_freeze+0x370/0x370 [ 308.985352][ T7433] ? selinux_bpf+0xc7/0xf0 [ 308.989774][ T7433] ? security_bpf+0x82/0xa0 [ 308.994286][ T7433] __sys_bpf+0x51d/0x7d0 [ 308.998540][ T7433] ? bpf_link_show_fdinfo+0x330/0x330 [ 309.003921][ T7433] ? debug_smp_processor_id+0x17/0x20 [ 309.009305][ T7433] __x64_sys_bpf+0x7c/0x90 [ 309.013736][ T7433] x64_sys_call+0x4b9/0x9a0 [ 309.018276][ T7433] do_syscall_64+0x4c/0xa0 [ 309.022693][ T7433] ? clear_bhb_loop+0x50/0xa0 [ 309.027373][ T7433] ? clear_bhb_loop+0x50/0xa0 [ 309.032066][ T7433] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.038006][ T7433] RIP: 0033:0x7f49c3fc3159 [ 309.042439][ T7433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.062113][ T7433] RSP: 002b:00007f49c2a1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.070551][ T7433] RAX: ffffffffffffffda RBX: 00007f49c424afa0 RCX: 00007f49c3fc3159 [ 309.078530][ T7433] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000005 [ 309.086506][ T7433] RBP: 00007f49c2a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 309.094518][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.102537][ T7433] R13: 00007f49c424b038 R14: 00007f49c424afa0 R15: 00007ffdf5c942d8 [ 309.110559][ T7433] [ 309.133625][ T7444] FAULT_INJECTION: forcing a failure. [ 309.133625][ T7444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.156025][ T7444] CPU: 1 PID: 7444 Comm: syz.4.1870 Not tainted syzkaller #0 [ 309.162490][ T7435] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 309.163496][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.184094][ T7444] Call Trace: [ 309.185209][ T7435] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.187401][ T7444] [ 309.187409][ T7444] __dump_stack+0x21/0x30 [ 309.187433][ T7444] dump_stack_lvl+0x110/0x170 [ 309.187451][ T7444] ? show_regs_print_info+0x20/0x20 [ 309.187470][ T7444] dump_stack+0x15/0x20 [ 309.199332][ T20] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 309.200745][ T7444] should_fail+0x3ab/0x500 [ 309.231109][ T7444] should_fail_usercopy+0x1a/0x20 [ 309.236161][ T7444] _copy_to_user+0x20/0x90 [ 309.240602][ T7444] simple_read_from_buffer+0xe9/0x160 [ 309.245996][ T7444] proc_fail_nth_read+0x1a6/0x220 [ 309.251046][ T7444] ? proc_fault_inject_write+0x310/0x310 [ 309.256710][ T7444] ? security_file_permission+0x83/0xa0 [ 309.262287][ T7444] ? proc_fault_inject_write+0x310/0x310 [ 309.267978][ T7444] vfs_read+0x28c/0xc20 [ 309.272182][ T7444] ? __kasan_check_write+0x14/0x20 [ 309.277323][ T7444] ? kernel_read+0x1f0/0x1f0 [ 309.281943][ T7444] ? __kasan_check_write+0x14/0x20 [ 309.287080][ T7444] ? mutex_lock+0x9b/0x1c0 [ 309.291524][ T7444] ? wait_for_completion_killable_timeout+0x10/0x10 [ 309.298157][ T7444] ? __fget_files+0x2e1/0x340 [ 309.302860][ T7444] ? __fdget_pos+0x2d2/0x380 [ 309.307472][ T7444] ? ksys_read+0x70/0x260 [ 309.311832][ T7444] ksys_read+0x14a/0x260 [ 309.316094][ T7444] ? vfs_write+0xfd0/0xfd0 [ 309.320530][ T7444] ? debug_smp_processor_id+0x17/0x20 [ 309.325934][ T7444] __x64_sys_read+0x7b/0x90 [ 309.330464][ T7444] x64_sys_call+0x96d/0x9a0 [ 309.334992][ T7444] do_syscall_64+0x4c/0xa0 [ 309.339570][ T7444] ? clear_bhb_loop+0x50/0xa0 [ 309.344284][ T7444] ? clear_bhb_loop+0x50/0xa0 [ 309.348989][ T7444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.354910][ T7444] RIP: 0033:0x7f096755798e [ 309.359343][ T7444] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 309.378979][ T7444] RSP: 002b:00007f0965feffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.387407][ T7444] RAX: ffffffffffffffda RBX: 00007f0965ff06c0 RCX: 00007f096755798e [ 309.395418][ T7444] RDX: 000000000000000f RSI: 00007f0965ff00a0 RDI: 0000000000000004 [ 309.403398][ T7444] RBP: 00007f0965ff0090 R08: 0000000000000000 R09: 0000000000000000 [ 309.411379][ T7444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.419355][ T7444] R13: 00007f096781f038 R14: 00007f096781efa0 R15: 00007ffe61c224e8 [ 309.427358][ T7444] [ 309.475766][ T20] usb 10-1: Using ep0 maxpacket: 32 [ 309.497149][ T7433] Mem-Info: [ 309.500501][ T7433] active_anon:41 inactive_anon:24351 isolated_anon:0 [ 309.500501][ T7433] active_file:24248 inactive_file:4022 isolated_file:0 [ 309.500501][ T7433] unevictable:0 dirty:543 writeback:0 [ 309.500501][ T7433] slab_reclaimable:9248 slab_unreclaimable:73207 [ 309.500501][ T7433] mapped:37395 shmem:9866 pagetables:832 bounce:0 [ 309.500501][ T7433] kernel_misc_reclaimable:0 [ 309.500501][ T7433] free:1511503 free_pcp:21187 free_cma:0 [ 309.542614][ T7433] Node 0 active_anon:164kB inactive_anon:97204kB active_file:96992kB inactive_file:16388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150080kB dirty:2172kB writeback:0kB shmem:39364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5012kB pagetables:3328kB all_unreclaimable? no [ 309.575814][ T7433] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982744kB mlocked:0kB bounce:0kB free_pcp:3972kB local_pcp:0kB free_cma:0kB [ 309.603194][ T7433] lowmem_reserve[]: 0 3941 3941 [ 309.608277][ T7433] Normal free:3066984kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:164kB inactive_anon:96304kB active_file:96992kB inactive_file:17088kB unevictable:0kB writepending:2172kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:80672kB local_pcp:48144kB free_cma:0kB [ 309.635970][ T20] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 309.638328][ T7433] lowmem_reserve[]: 0 0 0 [ 309.649861][ T7433] DMA32: 3*4kB (M) 1*8kB [ 309.652316][ T20] usb 10-1: can't read configurations, error -61 [ 309.663491][ T7433] (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 309.693677][ T20] usb usb10-port1: attempt power cycle [ 309.698780][ T7433] Normal: 3225*4kB (UME) 1111*8kB (UME) 985*16kB (UME) 376*32kB (UME) 109*64kB (UME) 123*128kB (UME) 58*256kB (UME) 29*512kB (UME) 27*1024kB (UM) 14*2048kB (UM) 710*4096kB (UM) = 3066476kB [ 309.771123][ T7465] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1874'. [ 309.780891][ T7433] 37949 total pagecache pages [ 309.798923][ T7433] 37 pages in swap cache [ 309.803315][ T7433] Swap cache stats: add 15822, delete 15785, find 7636/8468 [ 309.865729][ T7433] Free swap = 124016kB [ 309.870401][ T7472] FAULT_INJECTION: forcing a failure. [ 309.870401][ T7472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.890213][ T7433] Total swap = 124996kB [ 309.894408][ T7433] 2097051 pages RAM [ 309.901941][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 309.901955][ T30] audit: type=1326 audit(1789215918.450:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.6.1878" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86d4aa159 code=0x7ffc0000 [ 309.905800][ T7433] 0 pages HighMem/MovableOnly [ 309.916295][ T30] audit: type=1326 audit(1789215918.450:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.6.1878" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86d4aa159 code=0x7ffc0000 [ 309.939622][ T7472] CPU: 1 PID: 7472 Comm: syz.4.1877 Not tainted syzkaller #0 [ 309.969872][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.979932][ T7472] Call Trace: [ 309.983214][ T7472] [ 309.986157][ T7472] __dump_stack+0x21/0x30 [ 309.990498][ T7472] dump_stack_lvl+0x110/0x170 [ 309.995182][ T7472] ? show_regs_print_info+0x20/0x20 [ 310.000382][ T7472] ? stack_trace_save+0xa6/0xf0 [ 310.005247][ T7472] ? __stack_depot_save+0x34/0x480 [ 310.010370][ T7472] ? path_openat+0x284f/0x2f80 [ 310.015149][ T7472] dump_stack+0x15/0x20 [ 310.019437][ T7472] should_fail+0x3ab/0x500 [ 310.023901][ T7472] should_fail_usercopy+0x1a/0x20 [ 310.028945][ T7472] _copy_from_user+0x20/0xd0 [ 310.033550][ T7472] iovec_from_user+0x1bc/0x2f0 [ 310.038329][ T7472] ? _kstrtoull+0x3bb/0x4c0 [ 310.042849][ T7472] __import_iovec+0x71/0x3f0 [ 310.047456][ T7472] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 310.052750][ T7472] ? kstrtouint_from_user+0x1c4/0x220 [ 310.058125][ T7472] import_iovec+0x7c/0xb0 [ 310.062464][ T7472] ___sys_sendmsg+0x1fd/0x2e0 [ 310.067154][ T7472] ? __sys_sendmsg+0x280/0x280 [ 310.071934][ T7472] ? __fdget+0x1a1/0x230 [ 310.076190][ T7472] __x64_sys_sendmsg+0x201/0x2d0 [ 310.081136][ T7472] ? ___sys_sendmsg+0x2e0/0x2e0 [ 310.085986][ T7472] ? ksys_write+0x1fa/0x260 [ 310.090492][ T7472] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 310.096567][ T7472] x64_sys_call+0x4b/0x9a0 [ 310.100995][ T7472] do_syscall_64+0x4c/0xa0 [ 310.105465][ T7472] ? clear_bhb_loop+0x50/0xa0 [ 310.110149][ T7472] ? clear_bhb_loop+0x50/0xa0 [ 310.114831][ T7472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.120727][ T7472] RIP: 0033:0x7f0967597159 [ 310.125144][ T7472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.144772][ T7472] RSP: 002b:00007f0965ff0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.153189][ T7472] RAX: ffffffffffffffda RBX: 00007f096781efa0 RCX: 00007f0967597159 [ 310.161165][ T7472] RDX: 0000000000008000 RSI: 0000200000000180 RDI: 0000000000000003 [ 310.169143][ T7472] RBP: 00007f0965ff0090 R08: 0000000000000000 R09: 0000000000000000 [ 310.177131][ T7472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.185119][ T7472] R13: 00007f096781f038 R14: 00007f096781efa0 R15: 00007ffe61c224e8 [ 310.193104][ T7472] [ 310.200987][ T30] audit: type=1326 audit(1789215918.450:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.6.1878" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86d4aa159 code=0x7ffc0000 [ 310.215768][ T7433] 342341 pages reserved [ 310.231885][ T30] audit: type=1326 audit(1789215918.450:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.6.1878" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86d4aa159 code=0x7ffc0000 [ 310.257019][ T7433] 0 pages cma reserved [ 310.265726][ T20] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 310.285514][ T30] audit: type=1326 audit(1789215918.470:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.6.1878" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ff86d4aa159 code=0x7ffc0000 [ 310.331337][ T30] audit: type=1326 audit(1789215918.470:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.6.1878" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86d4aa159 code=0x7ffc0000 [ 310.375822][ T30] audit: type=1326 audit(1789215918.470:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.6.1878" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86d4aa159 code=0x7ffc0000 [ 310.401013][ T20] usb 10-1: Using ep0 maxpacket: 32 [ 310.406599][ T30] audit: type=1326 audit(1789215918.470:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.6.1878" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86d4aa159 code=0x7ffc0000 [ 310.431838][ T30] audit: type=1326 audit(1789215918.470:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.6.1878" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86d4aa159 code=0x7ffc0000 [ 310.457146][ T30] audit: type=1326 audit(1789215918.470:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.6.1878" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff86d4aa159 code=0x7ffc0000 [ 310.535478][ T7482] loop5: detected capacity change from 0 to 128 [ 310.565764][ T20] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 310.575190][ T20] usb 10-1: can't read configurations, error -71 [ 310.601728][ T7485] loop9: detected capacity change from 0 to 128 [ 310.609098][ T7482] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 310.625803][ T7482] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 310.687219][ T7485] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 310.717280][ T7485] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 310.743501][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 310.745354][ T7496] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1886'. [ 311.047006][ T7506] loop5: detected capacity change from 0 to 512 [ 312.028216][ T7494] loop6: detected capacity change from 0 to 40427 [ 312.063910][ T7494] F2FS-fs (loop6): invalid crc value [ 312.122635][ T7494] F2FS-fs (loop6): Found nat_bits in checkpoint [ 312.302664][ T7494] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 312.309663][ T7534] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1898'. [ 312.356175][ T7494] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 312.432100][ T7540] loop4: detected capacity change from 0 to 128 [ 312.594752][ T7535] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 312.646927][ T7540] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 312.697904][ T7535] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 312.766041][ T7540] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 313.077747][ T7549] fuse: Bad value for 'fd' [ 313.123068][ T6143] attempt to access beyond end of device [ 313.123068][ T6143] loop6: rw=2051, want=45064, limit=40427 [ 313.156298][ T6143] attempt to access beyond end of device [ 313.156298][ T6143] loop6: rw=2051, want=131072, limit=40427 [ 313.193760][ T6143] F2FS-fs (loop6): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 313.193803][ T6143] F2FS-fs (loop6): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 313.326292][ T7556] netlink: 'syz.9.1906': attribute type 9 has an invalid length. [ 313.400012][ T7556] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1906'. [ 313.427400][ T7557] loop5: detected capacity change from 0 to 16 [ 313.540602][ T7562] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1905'. [ 313.774632][ T7575] loop6: detected capacity change from 0 to 1024 [ 313.812285][ T7576] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1909'. [ 313.861146][ T7575] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.1911: Failed to acquire dquot type 0 [ 313.966773][ T7575] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 314.036324][ T7575] EXT4-fs (loop6): 1 truncate cleaned up [ 314.042773][ T7575] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 314.231089][ T7581] FAULT_INJECTION: forcing a failure. [ 314.231089][ T7581] name failslab, interval 1, probability 0, space 0, times 0 [ 314.336011][ T7581] CPU: 1 PID: 7581 Comm: syz.9.1913 Not tainted syzkaller #0 [ 314.343455][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.353569][ T7581] Call Trace: [ 314.356884][ T7581] [ 314.359830][ T7581] __dump_stack+0x21/0x30 [ 314.364166][ T7581] dump_stack_lvl+0x110/0x170 [ 314.368856][ T7581] ? show_regs_print_info+0x20/0x20 [ 314.374066][ T7581] ? trace_event_buffer_commit+0x252/0x880 [ 314.379889][ T7581] dump_stack+0x15/0x20 [ 314.384049][ T7581] should_fail+0x3ab/0x500 [ 314.388477][ T7581] __should_failslab+0xa4/0xe0 [ 314.393258][ T7581] should_failslab+0x9/0x20 [ 314.397794][ T7581] slab_pre_alloc_hook+0x39/0xd0 [ 314.402745][ T7581] ? kvm_mmu_topup_memory_cache+0xd8/0x210 [ 314.408566][ T7581] kmem_cache_alloc+0x44/0x260 [ 314.413344][ T7581] kvm_mmu_topup_memory_cache+0xd8/0x210 [ 314.419016][ T7581] kvm_mmu_load+0x88/0x1ea0 [ 314.423538][ T7581] ? kvm_apic_accept_events+0x576/0x580 [ 314.429094][ T7581] ? kvm_apic_has_interrupt+0x776/0x780 [ 314.434655][ T7581] ? kvm_lapic_enable_pv_eoi+0x140/0x140 [ 314.440317][ T7581] vcpu_enter_guest+0x4edb/0x6600 [ 314.445359][ T7581] ? local_bh_enable+0x30/0x30 [ 314.450132][ T7581] ? __kasan_check_read+0x11/0x20 [ 314.455181][ T7581] ? __rb_reserve_next+0x734/0xc90 [ 314.460306][ T7581] ? __kasan_check_read+0x11/0x20 [ 314.465347][ T7581] ? rb_commit+0x75a/0x7b0 [ 314.469773][ T7581] ? __kasan_check_read+0x11/0x20 [ 314.474810][ T7581] ? ring_buffer_unlock_commit+0x46f/0x5d0 [ 314.480639][ T7581] ? trace_buffer_unlock_commit_regs+0x12e/0x5f0 [ 314.486987][ T7581] ? trace_event_buffer_commit+0x252/0x880 [ 314.492814][ T7581] ? trace_event_raw_event_kvm_fpu+0x14b/0x240 [ 314.498985][ T7581] ? __traceiter_x86_fpu_xstate_check_failed+0xb0/0xb0 [ 314.505862][ T7581] ? perf_trace_kvm_mmio+0x3e0/0x3e0 [ 314.511175][ T7581] ? kvm_load_guest_fpu+0x22b/0x240 [ 314.516385][ T7581] kvm_arch_vcpu_ioctl_run+0xfa7/0x2020 [ 314.521946][ T7581] kvm_vcpu_ioctl+0x8ed/0xc00 [ 314.526661][ T7581] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 314.532309][ T7581] ? selinux_file_ioctl+0x3ad/0x4c0 [ 314.537527][ T7581] ? ring_buffer_unlock_commit+0x46f/0x5d0 [ 314.543346][ T7581] ? selinux_file_alloc_security+0x120/0x120 [ 314.549339][ T7581] ? trace_buffer_unlock_commit_regs+0x12e/0x5f0 [ 314.555681][ T7581] ? __fget_files+0x2e1/0x340 [ 314.560376][ T7581] ? security_file_ioctl+0x84/0xa0 [ 314.565502][ T7581] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 314.571181][ T7581] __se_sys_ioctl+0x121/0x1a0 [ 314.575875][ T7581] __x64_sys_ioctl+0x7b/0x90 [ 314.580505][ T7581] x64_sys_call+0x2f/0x9a0 [ 314.584931][ T7581] do_syscall_64+0x4c/0xa0 [ 314.589360][ T7581] ? clear_bhb_loop+0x50/0xa0 [ 314.594048][ T7581] ? clear_bhb_loop+0x50/0xa0 [ 314.598737][ T7581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.604644][ T7581] RIP: 0033:0x7f7aa7893159 [ 314.609079][ T7581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.628697][ T7581] RSP: 002b:00007f7aa62ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.637179][ T7581] RAX: ffffffffffffffda RBX: 00007f7aa7b1afa0 RCX: 00007f7aa7893159 [ 314.645186][ T7581] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 314.653171][ T7581] RBP: 00007f7aa62ec090 R08: 0000000000000000 R09: 0000000000000000 [ 314.661151][ T7581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.669133][ T7581] R13: 00007f7aa7b1b038 R14: 00007f7aa7b1afa0 R15: 00007ffc16e0b128 [ 314.677141][ T7581] [ 314.702163][ T7592] loop6: detected capacity change from 0 to 128 [ 314.857634][ T7597] FAULT_INJECTION: forcing a failure. [ 314.857634][ T7597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.891003][ T7592] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 314.912416][ T7592] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 314.926057][ T7597] CPU: 0 PID: 7597 Comm: syz.5.1918 Not tainted syzkaller #0 [ 314.933485][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.943566][ T7597] Call Trace: [ 314.946869][ T7597] [ 314.949811][ T7597] __dump_stack+0x21/0x30 [ 314.954167][ T7597] dump_stack_lvl+0x110/0x170 [ 314.958859][ T7597] ? show_regs_print_info+0x20/0x20 [ 314.964087][ T7597] ? format_decode+0x1bb/0x1520 [ 314.968953][ T7597] dump_stack+0x15/0x20 [ 314.973141][ T7597] should_fail+0x3ab/0x500 [ 314.977580][ T7597] should_fail_usercopy+0x1a/0x20 [ 314.982627][ T7597] _copy_from_user+0x20/0xd0 [ 314.987237][ T7597] kstrtouint_from_user+0xd3/0x220 [ 314.992369][ T7597] ? kstrtol_from_user+0x2a0/0x2a0 [ 314.997500][ T7597] ? __kasan_check_read+0x11/0x20 [ 315.002547][ T7597] ? __rb_reserve_next+0x734/0xc90 [ 315.007683][ T7597] proc_fail_nth_write+0x8b/0x200 [ 315.012739][ T7597] ? proc_fail_nth_read+0x220/0x220 [ 315.017978][ T7597] ? security_file_permission+0x79/0xa0 [ 315.023553][ T7597] ? security_file_permission+0x83/0xa0 [ 315.029117][ T7597] ? proc_fail_nth_read+0x220/0x220 [ 315.034344][ T7597] vfs_write+0x404/0xfd0 [ 315.038612][ T7597] ? __kasan_check_read+0x11/0x20 [ 315.043659][ T7597] ? file_end_write+0x1b0/0x1b0 [ 315.048532][ T7597] ? __kasan_check_write+0x14/0x20 [ 315.053668][ T7597] ? mutex_lock+0x9b/0x1c0 [ 315.058101][ T7597] ? wait_for_completion_killable_timeout+0x10/0x10 [ 315.064714][ T7597] ? __fget_files+0x2e1/0x340 [ 315.069413][ T7597] ? __fdget_pos+0x2d2/0x380 [ 315.074029][ T7597] ? ksys_write+0x70/0x260 [ 315.078480][ T7597] ksys_write+0x14a/0x260 [ 315.082837][ T7597] ? __ia32_sys_read+0x90/0x90 [ 315.087632][ T7597] ? trace_event_raw_event_sys_enter+0x127/0x140 [ 315.093998][ T7597] __x64_sys_write+0x7b/0x90 [ 315.098615][ T7597] x64_sys_call+0x8ef/0x9a0 [ 315.103181][ T7597] do_syscall_64+0x4c/0xa0 [ 315.107630][ T7597] ? clear_bhb_loop+0x50/0xa0 [ 315.112346][ T7597] ? clear_bhb_loop+0x50/0xa0 [ 315.117048][ T7597] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.122966][ T7597] RIP: 0033:0x7f35db1d298e [ 315.127401][ T7597] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 315.147033][ T7597] RSP: 002b:00007f35d9c49fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.155520][ T7597] RAX: ffffffffffffffda RBX: 00007f35d9c4a6c0 RCX: 00007f35db1d298e [ 315.163523][ T7597] RDX: 0000000000000001 RSI: 00007f35d9c4a0a0 RDI: 0000000000000005 [ 315.171626][ T7597] RBP: 00007f35d9c4a090 R08: 0000000000000000 R09: 0000000000000000 [ 315.179644][ T7597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.187728][ T7597] R13: 00007f35db49a128 R14: 00007f35db49a090 R15: 00007ffe63f9cc88 [ 315.195749][ T7597] [ 315.452118][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 315.452134][ T30] audit: type=1400 audit(1789215924.000:1781): avc: denied { mount } for pid=7599 comm="syz.9.1919" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 315.501522][ T7601] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 315.602425][ T30] audit: type=1400 audit(1789215924.040:1782): avc: denied { read write } for pid=7599 comm="syz.9.1919" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 315.746425][ T30] audit: type=1400 audit(1789215924.050:1783): avc: denied { open } for pid=7599 comm="syz.9.1919" path="/90/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 315.894524][ T30] audit: type=1400 audit(1789215924.050:1784): avc: denied { ioctl } for pid=7599 comm="syz.9.1919" path="/90/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 315.957555][ T7616] fuse: Bad value for 'fd' [ 316.025817][ T30] audit: type=1400 audit(1789215924.240:1785): avc: denied { unmount } for pid=6062 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 316.138785][ T30] audit: type=1400 audit(1789215924.330:1786): avc: denied { bind } for pid=7606 comm="syz.6.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 316.235734][ T30] audit: type=1400 audit(1789215924.350:1787): avc: denied { read } for pid=7605 comm="syz.9.1922" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 316.340841][ T30] audit: type=1400 audit(1789215924.350:1788): avc: denied { open } for pid=7605 comm="syz.9.1922" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 316.447124][ T30] audit: type=1400 audit(1789215924.350:1789): avc: denied { ioctl } for pid=7605 comm="syz.9.1922" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 316.585272][ T30] audit: type=1400 audit(1789215924.810:1790): avc: denied { accept } for pid=7606 comm="syz.6.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.849649][ T7616] loop9: detected capacity change from 0 to 16 [ 317.140875][ T7637] loop5: detected capacity change from 0 to 128 [ 317.170636][ T7635] loop4: detected capacity change from 0 to 256 [ 317.216481][ T7637] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 317.235974][ T7637] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 317.250161][ T7635] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.395885][ T20] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 317.645772][ T20] usb 7-1: Using ep0 maxpacket: 32 [ 317.686008][ T852] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 317.775918][ T7654] UDC core: couldn't find an available UDC or it's busy: -16 [ 317.805867][ T20] usb 7-1: unable to get BOS descriptor or descriptor too short [ 317.840962][ T7654] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 317.885890][ T20] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 317.915892][ T20] usb 7-1: config 128 has 0 interfaces, different from the descriptor's value: 3 [ 317.945749][ T852] usb 5-1: Using ep0 maxpacket: 32 [ 318.075978][ T20] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.27 [ 318.085116][ T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.095778][ T852] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 318.104066][ T852] usb 5-1: config 0 has no interface number 0 [ 318.131266][ T852] usb 5-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid maxpacket 64800, setting to 1024 [ 318.153573][ T20] usb 7-1: Product: syz [ 318.158041][ T20] usb 7-1: Manufacturer: syz [ 318.162667][ T20] usb 7-1: SerialNumber: syz [ 318.167683][ T852] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 318.259726][ T7660] loop5: detected capacity change from 0 to 512 [ 318.355899][ T852] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 318.365290][ T852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.405954][ T852] usb 5-1: Product: syz [ 318.415943][ T852] usb 5-1: Manufacturer: syz [ 318.437749][ T852] usb 5-1: SerialNumber: syz [ 318.495993][ T852] usb 5-1: config 0 descriptor?? [ 318.516913][ T7635] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 318.529451][ T39] usb 7-1: USB disconnect, device number 12 [ 319.297291][ T7635] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 319.447476][ T7670] fuse: Bad value for 'fd' [ 319.470092][ T7662] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.485810][ T7662] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.516791][ T7662] device bridge_slave_0 entered promiscuous mode [ 319.524313][ T331] device bridge_slave_1 left promiscuous mode [ 319.535811][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.559368][ T331] device bridge_slave_0 left promiscuous mode [ 319.585769][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.595016][ T331] device veth1_macvtap left promiscuous mode [ 319.625775][ T331] device veth0_vlan left promiscuous mode [ 319.759601][ T7671] loop6: detected capacity change from 0 to 16 [ 319.785761][ T7662] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.792857][ T7662] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.821946][ T7673] loop5: detected capacity change from 0 to 128 [ 319.836179][ T7662] device bridge_slave_1 entered promiscuous mode [ 319.891414][ T7673] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 319.929363][ T7673] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 320.157407][ T7662] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.164579][ T7662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.171970][ T7662] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.179153][ T7662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.285959][ T852] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 320.310366][ T852] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 320.322547][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.335178][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.341909][ T852] asix: probe of 5-1:0.188 failed with error -71 [ 320.371200][ T852] usb 5-1: USB disconnect, device number 31 [ 320.383108][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.406175][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.446358][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.458016][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.465196][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.489007][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.498108][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.505200][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.536565][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.545416][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.564885][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.578448][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.627435][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.656631][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.683459][ T7662] device veth0_vlan entered promiscuous mode [ 320.702125][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.733146][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.759674][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.786829][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.822736][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.852327][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.880399][ T7662] device veth1_macvtap entered promiscuous mode [ 320.924351][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 320.942439][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.976224][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.008669][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.046304][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.097903][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 321.097925][ T30] audit: type=1400 audit(1789215929.650:1796): avc: denied { mounton } for pid=7662 comm="syz-executor" path="/root/syzkaller.qAlbtD/syz-tmp" dev="sda1" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 321.144426][ T7712] loop4: detected capacity change from 0 to 512 [ 321.208491][ T30] audit: type=1400 audit(1789215929.690:1797): avc: denied { mounton } for pid=7662 comm="syz-executor" path="/root/syzkaller.qAlbtD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 321.287006][ T7718] UDC core: couldn't find an available UDC or it's busy: -16 [ 321.363363][ T30] audit: type=1400 audit(1789215929.690:1798): avc: denied { mounton } for pid=7662 comm="syz-executor" path="/root/syzkaller.qAlbtD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=51400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 321.403297][ T7718] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 321.509878][ T30] audit: type=1400 audit(1789215929.690:1799): avc: denied { mounton } for pid=7662 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 321.646155][ T30] audit: type=1400 audit(1789215929.690:1800): avc: denied { mounton } for pid=7662 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 321.716406][ T7729] FAULT_INJECTION: forcing a failure. [ 321.716406][ T7729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.802002][ T7729] CPU: 0 PID: 7729 Comm: syz.5.1965 Not tainted syzkaller #0 [ 321.809436][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.819530][ T7729] Call Trace: [ 321.822828][ T7729] [ 321.825794][ T7729] __dump_stack+0x21/0x30 [ 321.830151][ T7729] dump_stack_lvl+0x110/0x170 [ 321.834848][ T7729] ? show_regs_print_info+0x20/0x20 [ 321.840071][ T7729] dump_stack+0x15/0x20 [ 321.844255][ T7729] should_fail+0x3ab/0x500 [ 321.848695][ T7729] should_fail_usercopy+0x1a/0x20 [ 321.853748][ T7729] _copy_to_user+0x20/0x90 [ 321.858183][ T7729] simple_read_from_buffer+0xe9/0x160 [ 321.863598][ T7729] proc_fail_nth_read+0x1a6/0x220 [ 321.868642][ T7729] ? proc_fault_inject_write+0x310/0x310 [ 321.874328][ T7729] ? security_file_permission+0x83/0xa0 [ 321.879903][ T7729] ? proc_fault_inject_write+0x310/0x310 [ 321.885563][ T7729] vfs_read+0x28c/0xc20 [ 321.889746][ T7729] ? kernel_read+0x1f0/0x1f0 [ 321.894375][ T7729] ? __kasan_check_write+0x14/0x20 [ 321.899507][ T7729] ? mutex_lock+0x9b/0x1c0 [ 321.903951][ T7729] ? wait_for_completion_killable_timeout+0x10/0x10 [ 321.910563][ T7729] ? __fget_files+0x2e1/0x340 [ 321.915288][ T7729] ? __fdget_pos+0x2d2/0x380 [ 321.919985][ T7729] ? ksys_read+0x70/0x260 [ 321.924348][ T7729] ksys_read+0x14a/0x260 [ 321.928607][ T7729] ? vfs_write+0xfd0/0xfd0 [ 321.933040][ T7729] ? trace_event_raw_event_sys_enter+0x127/0x140 [ 321.939387][ T7729] __x64_sys_read+0x7b/0x90 [ 321.943955][ T7729] x64_sys_call+0x96d/0x9a0 [ 321.948474][ T7729] do_syscall_64+0x4c/0xa0 [ 321.952912][ T7729] ? clear_bhb_loop+0x50/0xa0 [ 321.957625][ T7729] ? clear_bhb_loop+0x50/0xa0 [ 321.962339][ T7729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.968254][ T7729] RIP: 0033:0x7f35db1d298e [ 321.972707][ T7729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 321.992326][ T7729] RSP: 002b:00007f35d9c6afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.000761][ T7729] RAX: ffffffffffffffda RBX: 00007f35d9c6b6c0 RCX: 00007f35db1d298e [ 322.008767][ T7729] RDX: 000000000000000f RSI: 00007f35d9c6b0a0 RDI: 0000000000000005 [ 322.016758][ T7729] RBP: 00007f35d9c6b090 R08: 0000000000000000 R09: 0000000000000000 [ 322.024764][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.032756][ T7729] R13: 00007f35db49a038 R14: 00007f35db499fa0 R15: 00007ffe63f9cc88 [ 322.040778][ T7729] [ 322.136581][ T7701] loop6: detected capacity change from 0 to 16 [ 322.182966][ T7732] netlink: 'syz.7.1966': attribute type 3 has an invalid length. [ 322.205882][ T7732] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1966'. [ 322.380930][ T7748] FAULT_INJECTION: forcing a failure. [ 322.380930][ T7748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.417081][ T7748] CPU: 0 PID: 7748 Comm: syz.4.1972 Not tainted syzkaller #0 [ 322.424528][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.434607][ T7748] Call Trace: [ 322.437912][ T7748] [ 322.440906][ T7748] __dump_stack+0x21/0x30 [ 322.445279][ T7748] dump_stack_lvl+0x110/0x170 [ 322.449981][ T7748] ? show_regs_print_info+0x20/0x20 [ 322.455211][ T7748] dump_stack+0x15/0x20 [ 322.459389][ T7748] should_fail+0x3ab/0x500 [ 322.463828][ T7748] should_fail_usercopy+0x1a/0x20 [ 322.468881][ T7748] _copy_to_user+0x20/0x90 [ 322.473337][ T7748] simple_read_from_buffer+0xe9/0x160 [ 322.478848][ T7748] proc_fail_nth_read+0x1a6/0x220 [ 322.483912][ T7748] ? proc_fault_inject_write+0x310/0x310 [ 322.489571][ T7748] ? security_file_permission+0x83/0xa0 [ 322.495148][ T7748] ? proc_fault_inject_write+0x310/0x310 [ 322.500826][ T7748] vfs_read+0x28c/0xc20 [ 322.505019][ T7748] ? kernel_read+0x1f0/0x1f0 [ 322.509639][ T7748] ? __kasan_check_write+0x14/0x20 [ 322.514800][ T7748] ? mutex_lock+0x9b/0x1c0 [ 322.519252][ T7748] ? wait_for_completion_killable_timeout+0x10/0x10 [ 322.525886][ T7748] ? __fget_files+0x2e1/0x340 [ 322.530602][ T7748] ? __fdget_pos+0x2d2/0x380 [ 322.535232][ T7748] ? ksys_read+0x70/0x260 [ 322.539588][ T7748] ksys_read+0x14a/0x260 [ 322.543856][ T7748] ? vfs_write+0xfd0/0xfd0 [ 322.548299][ T7748] ? trace_event_raw_event_sys_enter+0x127/0x140 [ 322.554662][ T7748] __x64_sys_read+0x7b/0x90 [ 322.559192][ T7748] x64_sys_call+0x96d/0x9a0 [ 322.563728][ T7748] do_syscall_64+0x4c/0xa0 [ 322.566346][ T39] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 322.568192][ T7748] ? clear_bhb_loop+0x50/0xa0 [ 322.580357][ T7748] ? clear_bhb_loop+0x50/0xa0 [ 322.585067][ T7748] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.590991][ T7748] RIP: 0033:0x7f096755798e [ 322.595431][ T7748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 322.615206][ T7748] RSP: 002b:00007f0965feffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.616884][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.623655][ T7748] RAX: ffffffffffffffda RBX: 00007f0965ff06c0 RCX: 00007f096755798e [ 322.623674][ T7748] RDX: 000000000000000f RSI: 00007f0965ff00a0 RDI: 0000000000000006 [ 322.623685][ T7748] RBP: 00007f0965ff0090 R08: 0000000000000000 R09: 0000000000000000 [ 322.623697][ T7748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.623709][ T7748] R13: 00007f096781f038 R14: 00007f096781efa0 R15: 00007ffe61c224e8 [ 322.675582][ T7748] [ 322.724559][ T7751] FAULT_INJECTION: forcing a failure. [ 322.724559][ T7751] name failslab, interval 1, probability 0, space 0, times 0 [ 322.737311][ T7751] CPU: 0 PID: 7751 Comm: syz.5.1973 Not tainted syzkaller #0 [ 322.744787][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.754876][ T7751] Call Trace: [ 322.758175][ T7751] [ 322.761128][ T7751] __dump_stack+0x21/0x30 [ 322.765497][ T7751] dump_stack_lvl+0x110/0x170 [ 322.770208][ T7751] ? show_regs_print_info+0x20/0x20 [ 322.775456][ T7751] dump_stack+0x15/0x20 [ 322.779659][ T7751] should_fail+0x3ab/0x500 [ 322.784106][ T7751] __should_failslab+0xa4/0xe0 [ 322.788903][ T7751] should_failslab+0x9/0x20 [ 322.793432][ T7751] slab_pre_alloc_hook+0x39/0xd0 [ 322.798410][ T7751] kmem_cache_alloc_trace+0x48/0x270 [ 322.803719][ T7751] ? tipc_nametbl_lookup_group+0x710/0xbc0 [ 322.809547][ T7751] tipc_nametbl_lookup_group+0x710/0xbc0 [ 322.815203][ T7751] __tipc_sendmsg+0x12f5/0x2860 [ 322.820111][ T7751] ? inode_doinit_with_dentry+0xf6/0xd90 [ 322.825769][ T7751] ? local_bh_enable+0x30/0x30 [ 322.830575][ T7751] ? avc_has_perm+0x163/0x250 [ 322.835281][ T7751] ? __kasan_check_write+0x14/0x20 [ 322.840420][ T7751] ? _raw_spin_lock_bh+0x94/0xf0 [ 322.845400][ T7751] ? _raw_spin_lock_irq+0xf0/0xf0 [ 322.850480][ T7751] ? __local_bh_enable_ip+0x58/0x80 [ 322.855710][ T7751] ? lock_sock_nested+0x217/0x2a0 [ 322.860773][ T7751] ? sock_init_data+0xc0/0xc0 [ 322.865487][ T7751] tipc_sendmsg+0x55/0x70 [ 322.869846][ T7751] ? tipc_recvmsg+0x13a0/0x13a0 [ 322.874742][ T7751] ____sys_sendmsg+0x5be/0x8f0 [ 322.879543][ T7751] ? __sys_sendmsg_sock+0x40/0x40 [ 322.884595][ T7751] ? kstrtouint_from_user+0x1c4/0x220 [ 322.890097][ T7751] ? import_iovec+0x7c/0xb0 [ 322.894628][ T7751] ___sys_sendmsg+0x236/0x2e0 [ 322.899330][ T7751] ? __sys_sendmsg+0x280/0x280 [ 322.904147][ T7751] ? __fdget+0x1a1/0x230 [ 322.904169][ T7751] __x64_sys_sendmsg+0x201/0x2d0 [ 322.904188][ T7751] ? ___sys_sendmsg+0x2e0/0x2e0 [ 322.904208][ T7751] ? trace_sys_enter+0x3d/0x50 [ 322.904227][ T7751] x64_sys_call+0x4b/0x9a0 [ 322.904271][ T7751] do_syscall_64+0x4c/0xa0 [ 322.904291][ T7751] ? clear_bhb_loop+0x50/0xa0 [ 322.904311][ T7751] ? clear_bhb_loop+0x50/0xa0 [ 322.904330][ T7751] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.904351][ T7751] RIP: 0033:0x7f35db212159 [ 322.904368][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.904387][ T7751] RSP: 002b:00007f35d9c6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.904409][ T7751] RAX: ffffffffffffffda RBX: 00007f35db499fa0 RCX: 00007f35db212159 [ 322.904426][ T7751] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 322.904440][ T7751] RBP: 00007f35d9c6b090 R08: 0000000000000000 R09: 0000000000000000 [ 322.904453][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.904464][ T7751] R13: 00007f35db49a038 R14: 00007f35db499fa0 R15: 00007ffe63f9cc88 [ 322.904483][ T7751] [ 322.975813][ T39] usb 8-1: Using ep0 maxpacket: 32 [ 322.980591][ T30] audit: type=1400 audit(1789215931.530:1801): avc: denied { map } for pid=7754 comm="syz.6.1975" path="socket:[51548]" dev="sockfs" ino=51548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 323.195829][ T39] usb 8-1: unable to get BOS descriptor or descriptor too short [ 325.440945][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.459647][ T39] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.176495][ T7775] FAULT_INJECTION: forcing a failure. [ 326.176495][ T7775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.189724][ T7775] CPU: 1 PID: 7775 Comm: syz.4.1977 Not tainted syzkaller #0 [ 326.197126][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.207205][ T7775] Call Trace: [ 326.210526][ T7775] [ 326.213483][ T7775] __dump_stack+0x21/0x30 [ 326.217827][ T7775] dump_stack_lvl+0x110/0x170 [ 326.222519][ T7775] ? show_regs_print_info+0x20/0x20 [ 326.227732][ T7775] ? irqentry_exit+0x37/0x40 [ 326.232336][ T7775] dump_stack+0x15/0x20 [ 326.236538][ T7775] should_fail+0x3ab/0x500 [ 326.241037][ T7775] should_fail_usercopy+0x1a/0x20 [ 326.246091][ T7775] _copy_from_user+0x20/0xd0 [ 326.250714][ T7775] iovec_from_user+0x1bc/0x2f0 [ 326.255499][ T7775] __import_iovec+0x71/0x3f0 [ 326.260099][ T7775] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 326.265401][ T7775] import_iovec+0x7c/0xb0 [ 326.269748][ T7775] ___sys_sendmsg+0x1fd/0x2e0 [ 326.274438][ T7775] ? __sys_sendmsg+0x280/0x280 [ 326.279211][ T7775] ? push_rt_task+0x46f/0x5d0 [ 326.283916][ T7775] ? __fdget+0x1a1/0x230 [ 326.288168][ T7775] __x64_sys_sendmsg+0x201/0x2d0 [ 326.293133][ T7775] ? ___sys_sendmsg+0x2e0/0x2e0 [ 326.298118][ T7775] ? trace_event_buffer_commit+0x252/0x880 [ 326.303978][ T7775] ? trace_sys_enter+0x4b/0x50 [ 326.308774][ T7775] x64_sys_call+0x4b/0x9a0 [ 326.313205][ T7775] do_syscall_64+0x4c/0xa0 [ 326.317630][ T7775] ? clear_bhb_loop+0x50/0xa0 [ 326.322318][ T7775] ? clear_bhb_loop+0x50/0xa0 [ 326.327013][ T7775] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.332922][ T7775] RIP: 0033:0x7f0967597159 [ 326.337342][ T7775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.356956][ T7775] RSP: 002b:00007f0965fae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.365377][ T7775] RAX: ffffffffffffffda RBX: 00007f096781f180 RCX: 00007f0967597159 [ 326.373408][ T7775] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 326.381398][ T7775] RBP: 00007f0965fae090 R08: 0000000000000000 R09: 0000000000000000 [ 326.389384][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.397364][ T7775] R13: 00007f096781f218 R14: 00007f096781f180 R15: 00007ffe61c224e8 [ 326.405363][ T7775] [ 326.755946][ T39] usb 8-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 326.767402][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.780725][ T30] audit: type=1400 audit(1789215935.330:1802): avc: denied { bind } for pid=7792 comm="syz.4.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 326.819775][ T30] audit: type=1400 audit(1789215935.330:1803): avc: denied { listen } for pid=7792 comm="syz.4.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 326.840227][ T39] usb 8-1: can't set config #1, error -71 [ 328.445087][ T39] usb 8-1: USB disconnect, device number 3 [ 328.816762][ T7810] loop0: detected capacity change from 0 to 16 [ 328.914777][ T7806] loop6: detected capacity change from 0 to 512 [ 328.954344][ T7791] loop7: detected capacity change from 0 to 40427 [ 329.012836][ T7806] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 329.043073][ T7791] F2FS-fs (loop7): invalid crc value [ 329.080917][ T7791] F2FS-fs (loop7): Found nat_bits in checkpoint [ 329.219738][ T7806] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 329.262453][ T7791] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 329.328374][ T7820] loop0: detected capacity change from 0 to 1024 [ 329.345124][ T7791] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 329.352810][ T30] audit: type=1400 audit(1789215937.890:1804): avc: denied { remount } for pid=7805 comm="syz.6.1989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 329.352824][ T7806] EXT4-fs (loop6): Remounting file system with no journal so ignoring journalled data option [ 329.352876][ T7806] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring [ 329.423818][ T7806] EXT4-fs (loop6): re-mounted. Opts: journal_checksum,journal_ioprio=0x0000000000000001,user_xattr,grpjquota=,data=writeback,noblock_validity,minixdf,journal_checksum,. Quota mode: writeback. [ 329.495065][ T7820] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,noinit_itable,grpquota,usrjquota=,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: writeback. [ 329.551551][ T7820] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.555369][ T7809] EXT4-fs (loop6): re-mounted. Opts: . Quota mode: writeback. [ 329.745815][ T7662] attempt to access beyond end of device [ 329.745815][ T7662] loop7: rw=2051, want=45064, limit=40427 [ 329.769856][ T7662] attempt to access beyond end of device [ 329.769856][ T7662] loop7: rw=2051, want=131072, limit=40427 [ 329.787624][ T7662] F2FS-fs (loop7): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 329.787669][ T7662] F2FS-fs (loop7): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 330.017972][ T7820] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: comm syz.0.1992: lblock 0 mapped to illegal pblock 0 (length 1) [ 330.096263][ T7819] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: comm syz.0.1992: lblock 0 mapped to illegal pblock 0 (length 1) [ 330.126292][ T7819] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.1992: lblock 0 mapped to illegal pblock 0 (length 1) [ 330.173470][ T7819] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.1992: lblock 0 mapped to illegal pblock 0 (length 1) [ 330.184849][ T30] audit: type=1400 audit(1789215938.720:1805): avc: denied { create } for pid=7839 comm="syz.6.1998" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 330.188030][ T7838] loop7: detected capacity change from 0 to 2048 [ 330.213492][ T7840] fuse: Unknown parameter 'gƒoup_id' [ 330.232647][ T30] audit: type=1400 audit(1789215938.760:1806): avc: denied { mounton } for pid=7839 comm="syz.6.1998" path="/100/file0" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 330.259900][ T7819] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.1992: lblock 0 mapped to illegal pblock 0 (length 1) [ 330.285379][ T7838] EXT4-fs (loop7): Ignoring removed bh option [ 330.292393][ T7838] EXT4-fs (loop7): Ignoring removed oldalloc option [ 330.300719][ T7819] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.1992: lblock 0 mapped to illegal pblock 0 (length 1) [ 330.334236][ T7842] loop6: detected capacity change from 0 to 512 [ 330.356037][ T7819] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.1992: lblock 0 mapped to illegal pblock 0 (length 1) [ 330.436357][ T7819] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.1992: lblock 0 mapped to illegal pblock 0 (length 1) [ 330.496477][ T7819] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.1992: lblock 0 mapped to illegal pblock 0 (length 1) [ 330.512353][ T7819] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.1992: lblock 0 mapped to illegal pblock 0 (length 1) [ 330.547536][ T7838] EXT4-fs (loop7): mounted filesystem without journal. Opts: bh,i_version,oldalloc,block_validity,barrier,noinit_itable,auto_da_alloc=0x0000000000000004,grpjquota=,,errors=continue. Quota mode: none. [ 331.487951][ T7848] loop6: detected capacity change from 0 to 512 [ 331.607370][ T7848] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.2000: missing EA_INODE flag [ 331.686580][ T7848] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2000: error while reading EA inode 2 err=-117 [ 331.748502][ T7857] loop0: detected capacity change from 0 to 16 [ 331.777859][ T7859] loop5: detected capacity change from 0 to 128 [ 331.806058][ T7848] EXT4-fs (loop6): 1 orphan inode deleted [ 331.815150][ T7848] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 331.847670][ T7859] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 331.937131][ T7859] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.048186][ T7870] loop7: detected capacity change from 0 to 128 [ 333.107813][ T7870] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 333.161411][ T7870] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.198339][ T30] audit: type=1400 audit(1789215941.750:1807): avc: denied { ioctl } for pid=7869 comm="syz.7.2007" path="socket:[50684]" dev="sockfs" ino=50684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 333.200820][ T7870] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2007'. [ 333.245969][ T7874] FAULT_INJECTION: forcing a failure. [ 333.245969][ T7874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.275746][ T7874] CPU: 1 PID: 7874 Comm: syz.0.2010 Not tainted syzkaller #0 [ 333.283189][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.293281][ T7874] Call Trace: [ 333.296587][ T7874] [ 333.299532][ T7874] __dump_stack+0x21/0x30 [ 333.303914][ T7874] dump_stack_lvl+0x110/0x170 [ 333.308635][ T7874] ? show_regs_print_info+0x20/0x20 [ 333.313866][ T7874] dump_stack+0x15/0x20 [ 333.318041][ T7874] should_fail+0x3ab/0x500 [ 333.322476][ T7874] should_fail_usercopy+0x1a/0x20 [ 333.327544][ T7874] _copy_to_user+0x20/0x90 [ 333.331993][ T7874] simple_read_from_buffer+0xe9/0x160 [ 333.337437][ T7874] proc_fail_nth_read+0x1a6/0x220 [ 333.342496][ T7874] ? proc_fault_inject_write+0x310/0x310 [ 333.348160][ T7874] ? security_file_permission+0x83/0xa0 [ 333.353737][ T7874] ? proc_fault_inject_write+0x310/0x310 [ 333.359389][ T7874] vfs_read+0x28c/0xc20 [ 333.363572][ T7874] ? kernel_read+0x1f0/0x1f0 [ 333.368185][ T7874] ? __kasan_check_write+0x14/0x20 [ 333.373330][ T7874] ? mutex_lock+0x9b/0x1c0 [ 333.377781][ T7874] ? wait_for_completion_killable_timeout+0x10/0x10 [ 333.384395][ T7874] ? __fget_files+0x2e1/0x340 [ 333.389102][ T7874] ? __fdget_pos+0x2d2/0x380 [ 333.393711][ T7874] ? ksys_read+0x70/0x260 [ 333.398172][ T7874] ksys_read+0x14a/0x260 [ 333.402463][ T7874] ? vfs_write+0xfd0/0xfd0 [ 333.406910][ T7874] ? trace_event_raw_event_sys_enter+0x127/0x140 [ 333.413271][ T7874] __x64_sys_read+0x7b/0x90 [ 333.417805][ T7874] x64_sys_call+0x96d/0x9a0 [ 333.422340][ T7874] do_syscall_64+0x4c/0xa0 [ 333.425096][ T30] audit: type=1400 audit(1789215941.930:1808): avc: denied { write } for pid=7869 comm="syz.7.2007" name="001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 333.426782][ T7874] ? clear_bhb_loop+0x50/0xa0 [ 333.426806][ T7874] ? clear_bhb_loop+0x50/0xa0 [ 333.426827][ T7874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.426849][ T7874] RIP: 0033:0x7f49c3f8398e [ 333.426866][ T7874] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.426884][ T7874] RSP: 002b:00007f49c2a1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.426902][ T7874] RAX: ffffffffffffffda RBX: 00007f49c2a1c6c0 RCX: 00007f49c3f8398e [ 333.426916][ T7874] RDX: 000000000000000f RSI: 00007f49c2a1c0a0 RDI: 0000000000000007 [ 333.426928][ T7874] RBP: 00007f49c2a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 333.426941][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.529347][ T7874] R13: 00007f49c424b038 R14: 00007f49c424afa0 R15: 00007ffdf5c942d8 [ 333.537363][ T7874] [ 333.621656][ T30] audit: type=1400 audit(1789215942.170:1809): avc: denied { set_context_mgr } for pid=7879 comm="syz.4.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 333.656420][ T7880] binder: 7879:7880 ioctl c0306201 200000000040 returned -14 [ 333.665080][ T7880] binder: 7879:7880 unknown command 0 [ 333.716164][ T30] audit: type=1400 audit(1789215942.170:1810): avc: denied { write } for pid=7879 comm="syz.4.2011" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 333.745862][ T7880] FAULT_INJECTION: forcing a failure. [ 333.745862][ T7880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.809664][ T7880] CPU: 0 PID: 7880 Comm: syz.4.2011 Not tainted syzkaller #0 [ 333.817114][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.827200][ T7880] Call Trace: [ 333.830512][ T7880] [ 333.833466][ T7880] __dump_stack+0x21/0x30 [ 333.837829][ T7880] dump_stack_lvl+0x110/0x170 [ 333.842537][ T7880] ? show_regs_print_info+0x20/0x20 [ 333.847762][ T7880] ? trace_event_raw_event_binder_function_return_class+0x14b/0x240 [ 333.855782][ T7880] dump_stack+0x15/0x20 [ 333.859999][ T7880] should_fail+0x3ab/0x500 [ 333.864453][ T7880] should_fail_usercopy+0x1a/0x20 [ 333.869508][ T7880] _copy_to_user+0x20/0x90 [ 333.873958][ T7880] binder_ioctl_write_read+0x53ca/0x6700 [ 333.879629][ T7880] ? __kasan_check_read+0x11/0x20 [ 333.884701][ T7880] ? __rb_reserve_next+0x734/0xc90 [ 333.889856][ T7880] ? __kasan_check_read+0x11/0x20 [ 333.894924][ T7880] ? rb_commit+0x75a/0x7b0 [ 333.899378][ T7880] ? binder_has_work_ilocked+0x3e0/0x3e0 [ 333.905050][ T7880] ? trace_buffer_unlock_commit_regs+0x12e/0x5f0 [ 333.911412][ T7880] ? trace_event_buffer_commit+0x252/0x880 [ 333.917320][ T7880] ? __kasan_check_write+0x14/0x20 [ 333.922471][ T7880] ? _raw_spin_lock+0x94/0xf0 [ 333.927182][ T7880] ? _raw_spin_trylock_bh+0x150/0x150 [ 333.932598][ T7880] ? __traceiter_binder_return+0xb0/0xb0 [ 333.938264][ T7880] ? _raw_spin_unlock+0x4d/0x70 [ 333.943142][ T7880] binder_ioctl+0x36c/0x1df0 [ 333.947842][ T7880] ? ioctl_has_perm+0x1b8/0x4f0 [ 333.952725][ T7880] ? binder_poll+0x2d0/0x2d0 [ 333.957343][ T7880] ? has_cap_mac_admin+0x370/0x370 [ 333.962488][ T7880] ? selinux_file_ioctl+0x3ad/0x4c0 [ 333.967717][ T7880] ? ring_buffer_unlock_commit+0x46f/0x5d0 [ 333.973570][ T7880] ? selinux_file_alloc_security+0x120/0x120 [ 333.979585][ T7880] ? trace_buffer_unlock_commit_regs+0x12e/0x5f0 [ 333.985937][ T7880] ? __fget_files+0x2e1/0x340 [ 333.990634][ T7880] ? security_file_ioctl+0x84/0xa0 [ 333.995773][ T7880] ? binder_poll+0x2d0/0x2d0 [ 334.000397][ T7880] __se_sys_ioctl+0x121/0x1a0 [ 334.005105][ T7880] __x64_sys_ioctl+0x7b/0x90 [ 334.009725][ T7880] x64_sys_call+0x2f/0x9a0 [ 334.014160][ T7880] do_syscall_64+0x4c/0xa0 [ 334.018600][ T7880] ? clear_bhb_loop+0x50/0xa0 [ 334.023310][ T7880] ? clear_bhb_loop+0x50/0xa0 [ 334.028022][ T7880] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.033963][ T7880] RIP: 0033:0x7f0967597159 [ 334.038402][ T7880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.058042][ T7880] RSP: 002b:00007f0965ff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.066523][ T7880] RAX: ffffffffffffffda RBX: 00007f096781efa0 RCX: 00007f0967597159 [ 334.074530][ T7880] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000004 [ 334.082528][ T7880] RBP: 00007f0965ff0090 R08: 0000000000000000 R09: 0000000000000000 [ 334.090528][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.098528][ T7880] R13: 00007f096781f038 R14: 00007f096781efa0 R15: 00007ffe61c224e8 [ 334.106533][ T7880] [ 334.110420][ T329] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 334.124213][ T7880] binder: 7879:7880 ioctl c0306201 200000000640 returned -14 [ 334.192528][ T7882] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 334.220055][ T7891] set_capacity_and_notify: 1 callbacks suppressed [ 334.220074][ T7891] loop4: detected capacity change from 0 to 512 [ 334.250157][ T7882] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.488924][ T7897] loop5: detected capacity change from 0 to 16 [ 335.536669][ T7913] loop4: detected capacity change from 0 to 2048 [ 335.632390][ T7913] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 335.686133][ T7913] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.820694][ T7917] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2023: bg 0: block 345: padding at end of block bitmap is not set [ 335.896746][ T7917] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 117 [ 335.946056][ T7917] EXT4-fs (loop4): This should not happen!! Data will be lost [ 335.946056][ T7917] [ 336.066475][ T329] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 46 with error 28 [ 336.105755][ T329] EXT4-fs (loop4): This should not happen!! Data will be lost [ 336.105755][ T329] [ 336.140470][ T7919] loop5: detected capacity change from 0 to 512 [ 336.147108][ T329] EXT4-fs (loop4): Total free blocks count 0 [ 336.153173][ T329] EXT4-fs (loop4): Free/Dirty block details [ 336.175807][ T329] EXT4-fs (loop4): free_blocks=0 [ 336.180901][ T329] EXT4-fs (loop4): dirty_blocks=48 [ 336.205722][ T329] EXT4-fs (loop4): Block reservation details [ 336.211792][ T329] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 336.252975][ T20] logitech-hidpp-device 0005:046D:B012.000F: Device not connected [ 336.625862][ T20] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 336.703361][ T7931] loop0: detected capacity change from 0 to 512 [ 336.803265][ T30] audit: type=1326 audit(1789215945.350:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.4.2028" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0967597159 code=0x0 [ 337.835460][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.853400][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.871619][ T20] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 337.886868][ T20] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.896279][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.925481][ T20] usb 6-1: config 0 descriptor?? [ 338.027486][ T7940] loop0: detected capacity change from 0 to 256 [ 338.058231][ T7940] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 338.117273][ T7940] UDC core: couldn't find an available UDC or it's busy: -16 [ 338.145396][ T7940] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 338.367389][ T7936] loop6: detected capacity change from 0 to 40427 [ 338.391457][ T7936] F2FS-fs (loop6): invalid crc value [ 338.417551][ T20] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 338.439537][ T20] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 338.492401][ T7936] F2FS-fs (loop6): Found nat_bits in checkpoint [ 338.523421][ T7945] loop7: detected capacity change from 0 to 16 [ 338.553138][ T7949] loop4: detected capacity change from 0 to 2048 [ 338.588126][ T7936] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 338.595425][ T7936] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 338.606336][ T7949] EXT4-fs (loop4): Ignoring removed bh option [ 338.612460][ T7949] EXT4-fs (loop4): Ignoring removed oldalloc option [ 338.671067][ T7949] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,i_version,oldalloc,block_validity,barrier,noinit_itable,auto_da_alloc=0x0000000000000004,grpjquota=,,errors=continue. Quota mode: none. [ 338.823199][ T7956] loop0: detected capacity change from 0 to 1024 [ 338.832368][ T30] audit: type=1400 audit(1789215947.380:1812): avc: denied { mounton } for pid=7955 comm="syz.0.2037" path="/121/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 338.865396][ T7956] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 338.925825][ T7956] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 339.112823][ T7958] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.136913][ T7958] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 339.158859][ T30] audit: type=1400 audit(1789215947.710:1813): avc: denied { append } for pid=7959 comm="syz.0.2038" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 339.206541][ T30] audit: type=1400 audit(1789215947.750:1814): avc: denied { bind } for pid=7962 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 339.258124][ T7966] set_capacity_and_notify: 1 callbacks suppressed [ 339.258152][ T7966] loop7: detected capacity change from 0 to 512 [ 340.235930][ C0] plantronics 0003:047F:FFFF.0010: usb_submit_urb(ctrl) failed: -1 [ 340.879325][ T30] audit: type=1326 audit(1789215949.430:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7974 comm="syz.7.2045" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f98dd8159 code=0x0 [ 341.720501][ T852] usb 6-1: USB disconnect, device number 6 [ 341.967888][ T7983] loop4: detected capacity change from 0 to 40427 [ 342.059203][ T7983] F2FS-fs (loop4): invalid crc value [ 342.127591][ T7983] F2FS-fs (loop4): Found nat_bits in checkpoint [ 342.246551][ T7983] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 342.451728][ T7983] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 343.445712][ T852] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 343.624954][ T8002] loop0: detected capacity change from 0 to 16 [ 344.196763][ T30] audit: type=1400 audit(1789215952.750:1816): avc: denied { ioctl } for pid=8010 comm="syz.4.2054" path="/90/tracing/events/sched/filter" dev="tracefs" ino=2480 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 344.223487][ T1949] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 344.286100][ T8015] loop4: detected capacity change from 0 to 128 [ 344.314627][ T8015] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 344.346065][ T8015] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 344.595968][ T1949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.615337][ T1949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.626247][ T1949] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.648107][ T8025] loop7: detected capacity change from 0 to 2048 [ 344.654846][ T1949] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.665189][ T1949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.674439][ T1949] usb 7-1: config 0 descriptor?? [ 344.683709][ T8023] UDC core: couldn't find an available UDC or it's busy: -16 [ 344.691441][ T8023] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 344.728243][ T8025] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 344.739403][ T8025] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.797067][ T852] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.808781][ T852] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 344.809053][ T8029] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2059: bg 0: block 345: padding at end of block bitmap is not set [ 344.833711][ T8029] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 117 [ 344.846397][ T8029] EXT4-fs (loop7): This should not happen!! Data will be lost [ 344.846397][ T8029] [ 344.862501][ T329] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 501 with error 28 [ 344.875232][ T329] EXT4-fs (loop7): This should not happen!! Data will be lost [ 344.875232][ T329] [ 344.885084][ T329] EXT4-fs (loop7): Total free blocks count 0 [ 344.891853][ T329] EXT4-fs (loop7): Free/Dirty block details [ 344.897949][ T329] EXT4-fs (loop7): free_blocks=0 [ 344.903340][ T329] EXT4-fs (loop7): dirty_blocks=512 [ 344.908729][ T329] EXT4-fs (loop7): Block reservation details [ 344.914956][ T329] EXT4-fs (loop7): i_reserved_data_blocks=32 [ 345.015939][ T852] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.061594][ T852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.095837][ T852] usb 6-1: can't set config #1, error -71 [ 345.106082][ T852] usb 6-1: USB disconnect, device number 7 [ 346.467952][ T1949] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 346.482947][ T1949] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 346.539155][ T8037] loop0: detected capacity change from 0 to 512 [ 346.559901][ T1949] usb 7-1: USB disconnect, device number 13 [ 346.584783][ T8033] loop5: detected capacity change from 0 to 40427 [ 346.675926][ T8033] F2FS-fs (loop5): invalid crc value [ 347.456827][ T8033] F2FS-fs (loop5): Found nat_bits in checkpoint [ 348.063344][ T30] audit: type=1400 audit(1789215956.610:1817): avc: denied { create } for pid=8046 comm="syz.6.2064" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 348.122809][ T30] audit: type=1400 audit(1789215956.670:1818): avc: denied { read } for pid=8046 comm="syz.6.2064" name="file0" dev="tmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 348.172063][ T8044] fido_id[8044]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 348.193046][ T30] audit: type=1400 audit(1789215956.670:1819): avc: denied { open } for pid=8046 comm="syz.6.2064" path="/111/file0" dev="tmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 348.271878][ T8056] loop4: detected capacity change from 0 to 512 [ 348.283657][ T30] audit: type=1400 audit(1789215956.830:1820): avc: denied { unlink } for pid=6143 comm="syz-executor" name="file0" dev="tmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 348.288765][ T8033] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 348.477178][ T8064] loop6: detected capacity change from 0 to 128 [ 348.522262][ T8064] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 348.533262][ T8064] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.898266][ T8054] loop0: detected capacity change from 0 to 16 [ 349.421853][ T8069] loop5: detected capacity change from 0 to 512 [ 349.454089][ T8071] loop4: detected capacity change from 0 to 512 [ 349.464344][ T8069] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 349.488974][ T30] audit: type=1400 audit(1789215958.040:1821): avc: denied { append } for pid=8068 comm="syz.5.2071" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.522306][ T30] audit: type=1400 audit(1789215958.070:1822): avc: denied { map } for pid=8068 comm="syz.5.2071" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.651683][ T8075] loop6: detected capacity change from 0 to 512 [ 351.309390][ T2566] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 351.339955][ T8083] loop6: detected capacity change from 0 to 512 [ 351.389053][ T8087] loop0: detected capacity change from 0 to 1024 [ 351.411304][ T8083] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.2075: missing EA_INODE flag [ 351.427030][ T8087] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 351.441717][ T8083] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2075: error while reading EA inode 2 err=-117 [ 351.454567][ T8083] EXT4-fs (loop6): 1 orphan inode deleted [ 351.460810][ T8083] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 351.475892][ T8087] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 351.494847][ T30] audit: type=1400 audit(1789215960.040:1823): avc: denied { read } for pid=8089 comm="syz.7.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 351.565769][ T2566] usb 6-1: Using ep0 maxpacket: 16 [ 351.595133][ T30] audit: type=1400 audit(1789215960.140:1824): avc: denied { create } for pid=8089 comm="syz.7.2078" dev="anon_inodefs" ino=52025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 351.617410][ T1717] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 351.628320][ T8090] syz.7.2078 uses obsolete (PF_INET,SOCK_PACKET) [ 351.637628][ T8090] binder: 8089:8090 ioctl c0306201 200000000040 returned -14 [ 351.651807][ T30] audit: type=1400 audit(1789215960.180:1825): avc: denied { ioctl } for pid=8089 comm="syz.7.2078" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52025 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 351.725924][ T2566] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 351.734434][ T2566] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.745187][ T2566] usb 6-1: config 0 has no interface number 0 [ 351.751539][ T2566] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 351.760940][ T2566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.778344][ T2566] usb 6-1: config 0 descriptor?? [ 351.817692][ T2566] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 351.824918][ T2566] usb 6-1: No valid video chain found. [ 351.839472][ T8101] loop0: detected capacity change from 0 to 128 [ 353.458758][ T2566] usb 6-1: USB disconnect, device number 8 [ 353.480719][ T8101] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.449008][ T8101] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 354.809064][ T8072] EXT4-fs warning (device loop5): kmmpd:170: kmmpd being stopped since MMP feature has been disabled. [ 354.906773][ T1717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.151261][ T1717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.162033][ T1717] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.184923][ T1717] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.195759][ T1717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.207650][ T1717] usb 5-1: config 0 descriptor?? [ 355.545900][ T1717] usbhid 5-1:0.0: can't add hid device: -71 [ 355.552258][ T1717] usbhid: probe of 5-1:0.0 failed with error -71 [ 355.592746][ T1717] usb 5-1: USB disconnect, device number 32 [ 355.633038][ T8106] loop6: detected capacity change from 0 to 2048 [ 355.641746][ T8109] loop0: detected capacity change from 0 to 512 [ 355.665583][ T8110] loop5: detected capacity change from 0 to 512 [ 355.841014][ T8106] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 355.862351][ T8106] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.007291][ T8117] loop7: detected capacity change from 0 to 512 [ 357.969524][ T8117] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.2086: missing EA_INODE flag [ 358.013840][ T8117] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.2086: error while reading EA inode 2 err=-117 [ 358.036132][ T8117] EXT4-fs (loop7): 1 orphan inode deleted [ 358.041917][ T8117] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 358.100658][ T8132] loop4: detected capacity change from 0 to 16 [ 358.649425][ T30] audit: type=1400 audit(1789215967.130:1826): avc: denied { bind } for pid=8116 comm="syz.7.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 359.468621][ T30] audit: type=1400 audit(1789215967.140:1827): avc: denied { connect } for pid=8116 comm="syz.7.2086" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.647936][ T8145] loop0: detected capacity change from 0 to 128 [ 359.860656][ T30] audit: type=1326 audit(1789215968.410:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.5.2094" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35db212159 code=0x0 [ 360.574977][ T30] audit: type=1400 audit(1789215968.830:1829): avc: denied { write } for pid=8152 comm="syz.4.2098" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 360.821742][ T8145] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.244691][ T8145] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.328893][ T30] audit: type=1400 audit(1789215969.880:1830): avc: denied { ioctl } for pid=8158 comm="syz.4.2101" path="socket:[52229]" dev="sockfs" ino=52229 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 361.373457][ T8145] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2095'. [ 361.445192][ T30] audit: type=1400 audit(1789215969.940:1831): avc: denied { getopt } for pid=8158 comm="syz.4.2101" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 361.474897][ T30] audit: type=1400 audit(1789215969.940:1832): avc: denied { accept } for pid=8158 comm="syz.4.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 361.701519][ T30] audit: type=1400 audit(1789215970.250:1833): avc: denied { create } for pid=8163 comm="syz.7.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 361.732582][ T329] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.765401][ T30] audit: type=1400 audit(1789215970.280:1834): avc: denied { getopt } for pid=8163 comm="syz.7.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 362.135828][ T1949] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 362.385777][ T1949] usb 8-1: Using ep0 maxpacket: 32 [ 362.546004][ T1949] usb 8-1: unable to get BOS descriptor or descriptor too short [ 362.665986][ T1949] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 362.682199][ T1949] usb 8-1: config 128 has 0 interfaces, different from the descriptor's value: 3 [ 362.798584][ T8196] loop6: detected capacity change from 0 to 16 [ 362.857358][ T30] audit: type=1326 audit(1789215971.410:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.4.2109" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0967597159 code=0x0 [ 362.882829][ T1949] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.27 [ 362.888281][ T8199] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 362.906298][ T1949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.926327][ T1949] usb 8-1: Product: syz [ 362.934945][ T1949] usb 8-1: Manufacturer: syz [ 362.940780][ T1949] usb 8-1: SerialNumber: syz [ 362.974867][ T8199] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 363.406981][ T8204] loop0: detected capacity change from 0 to 512 [ 363.946035][ T371] usb 8-1: USB disconnect, device number 4 [ 364.414720][ T8215] loop5: detected capacity change from 0 to 128 [ 364.425227][ T8213] loop4: detected capacity change from 0 to 512 [ 364.546830][ T8213] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.2115: missing EA_INODE flag [ 364.580245][ T8215] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.614412][ T8213] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2115: error while reading EA inode 2 err=-117 [ 364.671228][ T8213] EXT4-fs (loop4): 1 orphan inode deleted [ 364.694548][ T8215] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 364.713854][ T8215] ================================================================== [ 364.721982][ T8215] BUG: KASAN: use-after-free in trace_event_raw_event_mm_filemap_op_page_cache+0x3c6/0x3f0 [ 364.732134][ T8215] Read of size 4 at addr ffff888122746010 by task syz.5.2117/8215 [ 364.740090][ T8215] [ 364.742514][ T8215] CPU: 1 PID: 8215 Comm: syz.5.2117 Not tainted syzkaller #0 [ 364.746056][ T8213] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 364.749923][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.772502][ T8215] Call Trace: [ 364.775902][ T8215] [ 364.778859][ T8215] __dump_stack+0x21/0x30 [ 364.783383][ T8215] dump_stack_lvl+0x110/0x170 [ 364.788095][ T8215] ? show_regs_print_info+0x20/0x20 [ 364.793396][ T8215] ? load_image+0x3f0/0x3f0 [ 364.797943][ T8215] print_address_description+0x7f/0x2c0 [ 364.800537][ T8229] loop0: detected capacity change from 0 to 1024 [ 364.803527][ T8215] ? trace_event_raw_event_mm_filemap_op_page_cache+0x3c6/0x3f0 [ 364.817547][ T8215] kasan_report+0x10f/0x150 [ 364.822194][ T8215] ? trace_event_raw_event_mm_filemap_op_page_cache+0x3c6/0x3f0 [ 364.829872][ T8215] __asan_report_load4_noabort+0x14/0x20 [ 364.835545][ T8215] trace_event_raw_event_mm_filemap_op_page_cache+0x3c6/0x3f0 [ 364.843080][ T8215] ? __traceiter_file_check_and_advance_wb_err+0xc0/0xc0 [ 364.850148][ T8215] __delete_from_page_cache+0x418/0x470 [ 364.855750][ T8215] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 364.862814][ T8215] ? __kasan_check_write+0x14/0x20 [ 364.867980][ T8215] ? __kasan_check_read+0x11/0x20 [ 364.873052][ T8215] ? workingset_eviction+0x402/0x9f0 [ 364.878466][ T8215] __remove_mapping+0x601/0x990 [ 364.883509][ T8215] ? remove_mapping+0xa0/0xa0 [ 364.888347][ T8215] ? __kasan_check_read+0x11/0x20 [ 364.893414][ T8215] shrink_page_list+0x2a24/0x5800 [ 364.898488][ T8215] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 364.904691][ T8215] ? __this_cpu_preempt_check+0x13/0x20 [ 364.910398][ T8215] ? __mod_zone_page_state+0x8e/0xd0 [ 364.915723][ T8215] ? isolate_lru_pages+0xff1/0x11f0 [ 364.920994][ T8215] ? should_run_aging+0x410/0x410 [ 364.926046][ T8215] ? cgroup_rstat_updated+0xe0/0x360 [ 364.931427][ T8215] ? _raw_spin_lock_irq+0x95/0xf0 [ 364.936534][ T8215] ? __this_cpu_preempt_check+0x13/0x20 [ 364.942100][ T8215] ? __count_memcg_events+0xad/0x120 [ 364.947526][ T8215] shrink_lruvec+0x1297/0x3a40 [ 364.952341][ T8215] ? mem_cgroup_shrink_node+0x550/0x550 [ 364.957907][ T8215] ? __kasan_check_read+0x11/0x20 [ 364.962967][ T8215] ? __kasan_check_write+0x14/0x20 [ 364.968099][ T8215] ? _raw_spin_lock+0x94/0xf0 [ 364.972789][ T8215] ? _raw_spin_trylock_bh+0x150/0x150 [ 364.978176][ T8215] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 364.983996][ T8215] ? inactive_is_low+0x160/0x2f0 [ 364.988947][ T8215] ? css_next_descendant_pre+0x1e1/0x210 [ 364.994669][ T8215] ? mem_cgroup_iter+0x465/0x6c0 [ 364.999630][ T8215] shrink_node+0x11ee/0x2a40 [ 365.004277][ T8215] ? allow_direct_reclaim+0x370/0x370 [ 365.009863][ T8215] ? trace_buffer_unlock_commit_regs+0x12e/0x5f0 [ 365.016272][ T8215] do_try_to_free_pages+0x5a7/0x1580 [ 365.021585][ T8215] ? perf_trace_mm_vmscan_wakeup_kswapd+0x3e0/0x3e0 [ 365.028189][ T8215] ? try_to_free_pages+0xc50/0xc50 [ 365.033316][ T8215] ? propagate_protected_usage+0x84/0x250 [ 365.039055][ T8215] try_to_free_mem_cgroup_pages+0x261/0x610 [ 365.044969][ T8215] ? shrink_lruvec+0x3a40/0x3a40 [ 365.049920][ T8215] ? mutex_unlock+0x8f/0x230 [ 365.054527][ T8215] ? __kasan_check_read+0x11/0x20 [ 365.059564][ T8215] ? page_counter_set_max+0x65/0x140 [ 365.064861][ T8215] mem_cgroup_resize_max+0x309/0x3e0 [ 365.070232][ T8215] mem_cgroup_write+0x1ed/0x230 [ 365.075102][ T8215] ? mem_cgroup_reset+0x130/0x130 [ 365.080141][ T8215] ? __kasan_check_write+0x14/0x20 [ 365.085277][ T8215] ? _copy_from_iter+0x4a4/0x10a0 [ 365.090416][ T8215] ? mem_cgroup_reset+0x130/0x130 [ 365.095457][ T8215] cgroup_file_write+0x294/0x560 [ 365.100424][ T8215] ? cgroup_seqfile_stop+0xc0/0xc0 [ 365.105548][ T8215] ? mutex_lock+0x9b/0x1c0 [ 365.110013][ T8215] ? wait_for_completion_killable_timeout+0x10/0x10 [ 365.116618][ T8215] ? __kasan_check_write+0x14/0x20 [ 365.121746][ T8215] ? cgroup_seqfile_stop+0xc0/0xc0 [ 365.126868][ T8215] kernfs_fop_write_iter+0x2bd/0x400 [ 365.132246][ T8215] vfs_write+0x831/0xfd0 [ 365.136527][ T8215] ? __kasan_check_read+0x11/0x20 [ 365.141598][ T8215] ? file_end_write+0x1b0/0x1b0 [ 365.146495][ T8215] ? wait_for_completion_killable_timeout+0x10/0x10 [ 365.153135][ T8215] ? __fget_files+0x2e1/0x340 [ 365.157908][ T8215] ? __fdget_pos+0x2d2/0x380 [ 365.162513][ T8215] ? ksys_write+0x70/0x260 [ 365.166950][ T8215] ksys_write+0x14a/0x260 [ 365.171292][ T8215] ? __ia32_sys_read+0x90/0x90 [ 365.176087][ T8215] ? trace_event_raw_event_sys_enter+0x127/0x140 [ 365.182512][ T8215] __x64_sys_write+0x7b/0x90 [ 365.187122][ T8215] x64_sys_call+0x8ef/0x9a0 [ 365.191712][ T8215] do_syscall_64+0x4c/0xa0 [ 365.196146][ T8215] ? clear_bhb_loop+0x50/0xa0 [ 365.200837][ T8215] ? clear_bhb_loop+0x50/0xa0 [ 365.205550][ T8215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 365.211459][ T8215] RIP: 0033:0x7f35db212159 [ 365.215945][ T8215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.235584][ T8215] RSP: 002b:00007f35d9c6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 365.244070][ T8215] RAX: ffffffffffffffda RBX: 00007f35db499fa0 RCX: 00007f35db212159 [ 365.252057][ T8215] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000006 [ 365.260037][ T8215] RBP: 00007f35db2a903b R08: 0000000000000000 R09: 0000000000000000 [ 365.268026][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.276002][ T8215] R13: 00007f35db49a038 R14: 00007f35db499fa0 R15: 00007ffe63f9cc88 [ 365.283987][ T8215] [ 365.287015][ T8215] [ 365.289345][ T8215] Allocated by task 8033: [ 365.293741][ T8215] __kasan_kmalloc+0xd4/0x100 [ 365.298433][ T8215] kmem_cache_alloc_trace+0x119/0x270 [ 365.303838][ T8215] alloc_super+0x5e/0x840 [ 365.308184][ T8215] sget+0x1e2/0x4c0 [ 365.311996][ T8215] mount_bdev+0xec/0x3c0 [ 365.316245][ T8215] f2fs_mount+0x34/0x40 [ 365.320508][ T8215] legacy_get_tree+0xed/0x190 [ 365.325422][ T8215] vfs_get_tree+0x89/0x260 [ 365.329856][ T8215] do_new_mount+0x251/0xb40 [ 365.334544][ T8215] path_mount+0x640/0xff0 [ 365.338907][ T8215] __se_sys_mount+0x320/0x390 [ 365.343600][ T8215] __x64_sys_mount+0xbf/0xd0 [ 365.348209][ T8215] x64_sys_call+0x6bf/0x9a0 [ 365.352728][ T8215] do_syscall_64+0x4c/0xa0 [ 365.357156][ T8215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 365.363079][ T8215] [ 365.365411][ T8215] Freed by task 852: [ 365.369312][ T8215] kasan_set_track+0x4a/0x70 [ 365.373914][ T8215] kasan_set_free_info+0x23/0x40 [ 365.378859][ T8215] ____kasan_slab_free+0x125/0x160 [ 365.383977][ T8215] __kasan_slab_free+0x11/0x20 [ 365.388746][ T8215] slab_free_freelist_hook+0xc2/0x190 [ 365.394123][ T8215] kfree+0xc4/0x270 [ 365.397966][ T8215] destroy_super_work+0x40/0x50 [ 365.402829][ T8215] process_one_work+0x6c8/0xbb0 [ 365.407800][ T8215] worker_thread+0xaa0/0x1250 [ 365.412489][ T8215] kthread+0x3f5/0x4f0 [ 365.416560][ T8215] ret_from_fork+0x1f/0x30 [ 365.420995][ T8215] [ 365.423328][ T8215] Last potentially related work creation: [ 365.429131][ T8215] kasan_save_stack+0x3a/0x60 [ 365.433823][ T8215] __kasan_record_aux_stack+0xd2/0x100 [ 365.439295][ T8215] kasan_record_aux_stack_noalloc+0xb/0x10 [ 365.445121][ T8215] insert_work+0x51/0x310 [ 365.449468][ T8215] __queue_work+0x8e1/0xc60 [ 365.453984][ T8215] queue_work_on+0xde/0x150 [ 365.458505][ T8215] destroy_super_rcu+0xd1/0xe0 [ 365.463289][ T8215] rcu_do_batch+0x4c1/0xbf0 [ 365.467880][ T8215] rcu_core+0x4a3/0xef0 [ 365.472047][ T8215] rcu_core_si+0x9/0x10 [ 365.476267][ T8215] handle_softirqs+0x250/0x560 [ 365.481109][ T8215] __irq_exit_rcu+0x52/0xf0 [ 365.485631][ T8215] irq_exit_rcu+0x9/0x10 [ 365.489892][ T8215] sysvec_apic_timer_interrupt+0x58/0xc0 [ 365.495539][ T8215] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 365.501536][ T8215] [ 365.503869][ T8215] Second to last potentially related work creation: [ 365.510459][ T8215] kasan_save_stack+0x3a/0x60 [ 365.515147][ T8215] __kasan_record_aux_stack+0xd2/0x100 [ 365.520620][ T8215] kasan_record_aux_stack_noalloc+0xb/0x10 [ 365.526463][ T8215] call_rcu+0x10b/0xf60 [ 365.530637][ T8215] __put_super+0x26b/0x2d0 [ 365.535063][ T8215] deactivate_locked_super+0xd4/0x100 [ 365.540463][ T8215] mount_bdev+0x2ab/0x3c0 [ 365.544819][ T8215] f2fs_mount+0x34/0x40 [ 365.548985][ T8215] legacy_get_tree+0xed/0x190 [ 365.553677][ T8215] vfs_get_tree+0x89/0x260 [ 365.558111][ T8215] do_new_mount+0x251/0xb40 [ 365.562630][ T8215] path_mount+0x640/0xff0 [ 365.566975][ T8215] __se_sys_mount+0x320/0x390 [ 365.571662][ T8215] __x64_sys_mount+0xbf/0xd0 [ 365.576264][ T8215] x64_sys_call+0x6bf/0x9a0 [ 365.580785][ T8215] do_syscall_64+0x4c/0xa0 [ 365.585213][ T8215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 365.591124][ T8215] [ 365.593462][ T8215] The buggy address belongs to the object at ffff888122746000 [ 365.593462][ T8215] which belongs to the cache kmalloc-2k of size 2048 [ 365.607547][ T8215] The buggy address is located 16 bytes inside of [ 365.607547][ T8215] 2048-byte region [ffff888122746000, ffff888122746800) [ 365.620832][ T8215] The buggy address belongs to the page: [ 365.626484][ T8215] page:ffffea000489d000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x122740 [ 365.636735][ T8215] head:ffffea000489d000 order:3 compound_mapcount:0 compound_pincount:0 [ 365.645069][ T8215] flags: 0x4000000000010200(slab|head|zone=1) [ 365.651154][ T8215] raw: 4000000000010200 ffffea0004422a00 0000000200000002 ffff888100043200 [ 365.659745][ T8215] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 365.668336][ T8215] page dumped because: kasan: bad access detected [ 365.674791][ T8215] page_owner tracks the page as allocated [ 365.680516][ T8215] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5674, ts 235712862480, free_ts 235698201302 [ 365.702144][ T8215] post_alloc_hook+0x192/0x1b0 [ 365.707015][ T8215] prep_new_page+0x1c/0x110 [ 365.711553][ T8215] get_page_from_freelist+0x2c3a/0x2cd0 [ 365.717120][ T8215] __alloc_pages+0x1a2/0x460 [ 365.721737][ T8215] new_slab+0xa0/0x4d0 [ 365.725905][ T8215] ___slab_alloc+0x3ac/0x840 [ 365.730525][ T8215] __slab_alloc+0x49/0x90 [ 365.734894][ T8215] __kmalloc_track_caller+0x169/0x2c0 [ 365.740280][ T8215] pskb_expand_head+0x123/0x1280 [ 365.745272][ T8215] netlink_trim+0x193/0x230 [ 365.749876][ T8215] netlink_broadcast_filtered+0x75/0x1280 [ 365.755617][ T8215] nlmsg_notify+0xe9/0x1a0 [ 365.760046][ T8215] rtmsg_ifinfo+0xea/0x130 [ 365.764532][ T8215] register_netdevice+0x120a/0x1490 [ 365.769766][ T8215] register_netdev+0x3e/0x50 [ 365.774467][ T8215] sit_init_net+0x243/0x470 [ 365.779035][ T8215] page last free stack trace: [ 365.783714][ T8215] free_unref_page_prepare+0x5fa/0x600 [ 365.789184][ T8215] free_unref_page+0xae/0x540 [ 365.793874][ T8215] __free_pages+0x6c/0x100 [ 365.798305][ T8215] __free_slab+0xe5/0x1e0 [ 365.802651][ T8215] __unfreeze_partials+0x15a/0x190 [ 365.807883][ T8215] put_cpu_partial+0xc6/0x120 [ 365.812568][ T8215] __slab_free+0x1d4/0x290 [ 365.816989][ T8215] ___cache_free+0x104/0x120 [ 365.821592][ T8215] qlink_free+0x4d/0x90 [ 365.825755][ T8215] qlist_free_all+0x5f/0xb0 [ 365.830275][ T8215] kasan_quarantine_reduce+0x14a/0x170 [ 365.835762][ T8215] __kasan_slab_alloc+0x2f/0xe0 [ 365.840630][ T8215] slab_post_alloc_hook+0x4f/0x2b0 [ 365.845749][ T8215] kmem_cache_alloc+0xf7/0x260 [ 365.850523][ T8215] getname_flags+0xba/0x510 [ 365.855043][ T8215] __x64_sys_mkdirat+0x7c/0xa0 [ 365.859843][ T8215] [ 365.862185][ T8215] Memory state around the buggy address: [ 365.867820][ T8215] ffff888122745f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 365.876080][ T8215] ffff888122745f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 365.884160][ T8215] >ffff888122746000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 365.892226][ T8215] ^ [ 365.896820][ T8215] ffff888122746080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 365.904891][ T8215] ffff888122746100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 365.912969][ T8215] ================================================================== [ 365.921067][ T8215] Disabling lock debugging due to kernel taint [ 365.937740][ T8232] loop6: detected capacity change from 0 to 512 [ 365.956384][ T30] audit: type=1400 audit(1789215974.510:1836): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 365.988282][ T30] audit: type=1400 audit(1789215974.540:1837): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.004799][ T8229] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 366.023541][ T8229] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 366.055830][ T30] audit: type=1400 audit(1789215974.540:1838): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.164216][ T30] audit: type=1400 audit(1789215974.540:1839): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.222716][ T30] audit: type=1400 audit(1789215974.540:1840): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 366.243726][ T30] audit: type=1400 audit(1789215974.540:1841): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 366.277394][ T30] audit: type=1400 audit(1789215974.540:1842): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1