last executing test programs: 3m24.223630936s ago: executing program 4 (id=151): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x206, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) mkdir(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000a000600010022"], 0x1c}}, 0x0) 3m23.13616828s ago: executing program 4 (id=158): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x17e, &(0x7f0000000240)="$eJzsmLFO8lAUx//nlg/yGeMDuDhIIsZY2qKGhQETdxNR4yaRStACBmoiJA4+gKODiYuDL+Do5OBb6KBOLozONW0v9EoEdNDEeH7D4Xfh9HJ7SP4kBcMwf5bnp9fH0+VsAQSMI4mEfP9Fi3qE0v9wfjh3llu5uL6/uqtNHN/070cAPO/z3x8DcJvX4Mq1572/OilfCxA9X4fArPRNEHTp2xDYkG6DsCV9T/G636/ruxXH1nfqTskXwy+mXyy/ZPrP1zkhlJTzkfJ5s9XeLzqO3fhGGTW/Tl4gp5xP/b26szGU+ZkQMKVnQFiTnkWiO5twJMr9T8ai/bUfvn8WFpbfJlE+eZeEGSWfYkp+pN3qQbrZas9XqsWyXbZrlpVZMhYMY9FKB0EU1iH59z/IpzFl/38DeuMUx1HRdRtmWHtrK6wfJa4I8k8gNR2u/eyLDzxN+P9H8joKLKUNaWcYhmEYhmEYhmEYhmEYhvkCU6DgKegIrNWg+y0AAP//czJ3SA==") 3m22.539646349s ago: executing program 4 (id=166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xdf96, 0x74}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x42) (async) syz_usb_connect(0x0, 0x164, &(0x7f0000000500)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e010000082406"], 0x0) 3m20.416650945s ago: executing program 1 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9b42, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x10000003) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x12, r2, 0x954c3000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1a, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x6a, &(0x7f00000003c0)=""/106, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x10, 0xf8, 0xffffffff}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000500)=[{0x3, 0x1, 0x6, 0x6}, {0x2, 0x5, 0x5, 0x2}, {0x4, 0x5, 0x0, 0xc}, {0x2, 0x1, 0x6, 0xc}, {0x2, 0x5, 0x1, 0x9}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x0, 0x1, 0x1, 0xb, 0x18}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0xb, 0x5, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000740)=[0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x1, 0xf}, {0x5, 0x4, 0xa}, {0x1, 0x2, 0x3, 0x3}, {0x0, 0x4, 0x8, 0x6}], 0x10, 0x1}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000880)={r1, r3, 0x0, r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x16, &(0x7f0000000040)={[{@init_itable}, {@noblock_validity}, {@mblk_io_submit}, {@acl}, {@nogrpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@minixdf}, {@nolazytime}, {@init_itable}, {@norecovery}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") socket$inet(0x2, 0xa, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x12a03}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4404d80c}, 0x0) 3m20.060109596s ago: executing program 1 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b87}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x6000000, 0x0, 0x2004d808}, 0x4) 3m19.915730951s ago: executing program 1 (id=182): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'bridge_slave_0\x00', @remote}) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000180)) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="3900000013000318680907070000fbf04cad40c732000000170a001700000000040037000f00130025332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r3 = gettid() r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x100, 0x2}) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r5, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r6, 0x8000}], 0x1, 0x0, 0x0, 0x0) r7 = dup2(r5, r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) fcntl$setown(r6, 0x8, r3) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pK \x00'}, 0x20) fsetxattr$trusted_overlay_nlink(r9, &(0x7f0000000440), &(0x7f0000000480)={'U-', 0x8}, 0x16, 0x2) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xd15}, [@IFLA_IFNAME={0x14}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x6a17d65d936771e9) tkill(r3, 0x13) fstatfs(r2, &(0x7f00000000c0)=""/124) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup3(r10, r11, 0x0) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xffffff99}, 0x1c) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000003000000000000000180000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r4, @ANYBLOB="000000000000000000000000850000000c000000b70e0000000000001812000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000005700000018200000", @ANYRES32=r12, @ANYBLOB="00000000fcffffff9500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0x6, 0xa4, &(0x7f0000000700)=""/164, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x25b5f, r1, 0x4, &(0x7f0000000880)=[0xffffffffffffffff, r7], &(0x7f00000008c0)=[{0x0, 0x4, 0xe, 0x8}, {0x5, 0x5, 0x0, 0x9}, {0x1, 0x3, 0x7, 0x8}, {0x5, 0x3, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r13, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) 3m19.790743925s ago: executing program 4 (id=183): syz_mount_image$f2fs(&(0x7f0000005700), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6a71666d743d7666736f6c642c7573726a71756f74613d6e6f696e6c696e650700000074727bbd0426b776aa2dd559defbabe1bb7c2990cf2327e9af29b6214ca1a0f50decac5eab7e9507cc6949f5ddd3e28e8b57ddee3b3e5d8d0f008c19753fb6357ce5402421cdf43ebd58fe035a2c7265737569643d", @ANYRES16, @ANYRESDEC=0x0], 0xfd, 0x554e, &(0x7f0000005740)="$eJzs3E1vG1UXAODjpGnTj7dvhFiw60gVUiLVVp1+CHYFWvEhWlUFFqzAsV3Lre2JYtcNXXXBErHgnyCQWLHkN7BgzQ6xALFDAnnuuDRQpEpxYpI8jzQ+M3euz5xrRZHOjOUAjqyV7LdfKnE2TkbEYkSciSj2K+VWuJbCSxFxLiIWntoq5fiTgeMRcSoizk6Sp5yV8tQXF8bnr/z8zq/ffn/i2Okvv/lhfqsG5u3liOhvpv2H/RTzTor3yvHGuFvE/uVxGdOJ3nI638/T+MP2RpHhYWM6r1HES500P998MJzEu71GcxI73bvF+OYgXXA47kzzFG+419gqjlvtjSJ2h3kRO4/Sdbcfpf9tj4ajlKdV5vukSB+j0TSm8fZ2O61n834Rm4NROZ7y5q329iSOy1heLpp5r1XUsbGLD/o/7t3u4MF2Nm5vDbv5ILtSq79Sq1+t1rfyVnvUvlxt9FtXL2ernd5kWnXUbvSvdfK802vXmnl/LVvtNJvVej1bvd7e6DYGWb1eu1S7WL2yVu5dyN689UHWa2Wrk/h6d/Bg1O0Ns7v5VpbesZat1y69upadr2fv3byd3b5z48bN2+9/dP3DW6/dfPuNctLxstZqvfK4KCtbXb+4vl6tX6yu19cO//qflPVpWfQM1w+7Upl3AQAHj/4fmId/9v/Lz93/9++Xx8/s/7fuROx9/x/6/5k4UP3vtKyj2v/vwfphV/T/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABH1o9LX71V7Kyk49Pl+P/KoRfK40pELETEH8+wGMd35Fws8yz9y/ylv9XwXSWKDJNrnCi3UxFxrdx+//9efwoAAABweH39+NznqVtPLyvzLoj9lG7aLJz5eEb5liNiaeWnGWVbmLy8OKNkxd/3sdieUbbiBtbyjJKlW27HZpXtuSzuCMtPhUoKC/taDgAAsC92dgL724UAAACwnz6bdwHMRyWmjzKnz4KLb97/9UDw5I4jAAAA4ACqzLsAAAAAYM8V/b/f/wMAAIDDLf3+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cc795OzNBDGAfht+Sr4LxLjwp1XcQfH8AguXRoO4CU4gAvO4AU4A+48gqGGzohgWGA6beOX50nK0An8mCGweGeSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCF9b3ZNfH73pW/Ose2nzGwAAACAWw7Nbt09Wab757n/Ze56ne+riKgjon2bOy5q91k8ucqc5Zzmz8u+Xtb6zV9j+BbRJZw+Y56vZxHxPl8/Xw35DQAAAMDjtt9sV6laTw/LqQfEmNKiTf3iQ6G8KiKa5Y9CafUp702hsO73/RCfCqV1C1iLQmFpye2hVNpdur/7edVucdFUqalvvu08yGJzBwAARjS7asatQgAAABjTx6kHwDSq+L2Ved4KnKcmb+89vboDAAAA/kPV1AMAAAAABtfV//98/t8Nd5z/1zr/DwAAAKaRzv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSIdmt95vtqu+Oce2nzKzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBf7M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pDMNADEBVt81nF3z/wwaB7xAC74GNbDGLAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN7os05Gr1+Sb3+u9RgN/1YzydaqYW/VcHSg4ezAfHobAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNm5n9Y4yjAA4M/u7GxNqxij5BARBQ96sem2tvYmHpTgwY8ghHRbo1v/tDnYUsRcvEnOvYgeRQQl3vodem6hl3rrIYcK4nFl/iXTNuImtDPb5PeDd95nhsm8zzsLIc+8kwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMrWeztxkm1mi7hbHrt1/9pK1t9+qM/c2LizkLUs7jSZ9NPhlfpOZ769RAAAADg8kqq+j4i76eZS1ndn8/o/rc7Jav4fnyviqp5/uO6v+qr2z9ofv997aXug2WKc7KLnV0fDE4+m0ntys5xuz//vGb38zufPXpL8A+l+uP7iVprfz873N2++38/DI01kCwDsx/GqL4Pq76GsH7SZGACHRq9WeFf1fzLbbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATdhaj2NV3ImIhd5OnLl9/9rKbv2NjTsLVTtz/fpGfLtzzewSaUScXx0NTzQ6m+l2+crVz5ZHo+GlxxDMlNec8KdejYjHOPqegnerVD+e4OSIFjLcT/DPEx6i1/YE9xd0yw97WvJpPUhigpNb+oUEAMCBlZYtq+vvpptL2bHOXMT4pwfr/zdqcUxY/9/75Myt+lj1+n/Q2Ayn3+LaxS8XL1+5+tbqxeULwwvDz98+OXhncOrs6dNnF/NnJYuemAAAALBn4/F4vL3TL1tW1ydl/d+de3T9/2gtjgnr/69+GHxTHzhR/+9qZ9Gv7UwAAAAOtxde+/uvzi7HO/1+fL28tnZpUGy3908W2xZS3bMjZauv/ydzbWcFAAAANGFrvfPA+v+5WhwTrv8/+/PLv9avmUTETLn+f3zli9G55qYz1Zr4l+O25wgAAEC7ZspWX/9P8/f/u9uvPHQj4s3Xi7j4GsBjEfHf9X9a1v/JB9/9Uh+r/v7/qSYnOU3KL+jrzhf3I+/nI3rzbScGAADAQfZM2bJi/890c+nT345+1Pf+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDT/g0AAP//3hkvlw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) write$P9_RREAD(r0, &(0x7f0000005880)=ANY=[], 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x81c0, 0x800) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x0, &(0x7f0000002500)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x0, 0x3, [0x284, 0x3, 0x9]}}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x9, 0xfffffffe, 0x1000000000000004, 0x2}) 3m19.566618022s ago: executing program 4 (id=184): inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0x1, 0x1512, &(0x7f0000003780)="$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") r3 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 3m19.403816417s ago: executing program 4 (id=185): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r4, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x25dfdbfb, {}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 3m19.403589947s ago: executing program 32 (id=185): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r4, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x25dfdbfb, {}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 3m19.106703676s ago: executing program 1 (id=188): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x10000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$incfs(&(0x7f0000000b40)='./file0\x00', 0x0, &(0x7f0000000bc0), 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB='read_timeout_ms=00040000000']) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x4, 0x2, 0x8000006f, 0x8, 0x5, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x6c1e, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x2000008, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x7, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1ea8, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x0, 0x4, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_clone(0x200211, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r3, 0x0, 0x0, 0x8000, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000980)={0xa, 0x4e23, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb9}, 0x1c) readv(r2, &(0x7f0000000080)=[{0x0, 0x18}, {&(0x7f0000000300)=""/73, 0x49}], 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000054c0)={'sit0\x00', &(0x7f00000053c0)={'syztnl2\x00', 0x0, 0x1, 0x1, 0x6, 0x1, {{0x34, 0x4, 0x1, 0x39, 0xd0, 0x65, 0x0, 0x6b, 0x29, 0x0, @multicast2, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x1a, 0x3, 0x0, [{@local, 0x3}, {@empty, 0xb}, {@loopback, 0x2}]}, @noop, @timestamp={0x44, 0x24, 0xa4, 0x0, 0x8, [0x2, 0x4551b940, 0x200, 0xa4, 0x9, 0x4, 0x4, 0x7b41]}, @ssrr={0x89, 0x17, 0x8e, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @empty, @empty]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xe2, 0x3, 0x6, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa2}, {@empty, 0xa32}, {@multicast2, 0x7}, {@private=0xa010100, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x8001}, {@remote, 0x2}]}, @lsrr={0x83, 0x17, 0x7c, [@multicast2, @local, @broadcast, @multicast2, @broadcast]}]}}}}}) sendmmsg$inet6(r1, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)="9d6802cdac3a81a4421e05bef7bea9dfbac084fecba4ab7341ff46b56cb1ecaaa09d0250bf98774a36c091b2c4bce2409976ebe9240fe4cde6487c0ddfc23393e640307babef40d72329714b1d8ab226bb06f3b693f38e2979573ab5bbc4be51a2faaad92f591f56ad1f5663b8e6dcfb05c60e25a857029ba21e3e0714a5aecc9c39e3758644fa6a3f8b1df9e9d9e930bfcd9cc7081cf1e4cbcc811af19daf13c9f59111e59e81112e8f63a22e83ce3745e632eede9c6087bc58d5c195561a8739c5e8f52e086ad6892a", 0xca}], 0x1}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000880)="01cfd949c87ac0f5514b0a66cab9245ccf30691f61f03bc1907cea8a6db982f7742c4e75c09d71ffa09465c14bb981c9cee8507731e9f8ad3325b428dc1e3b6baea5eec128c240bc381766a7aed123e8bec45d3fd6794c2450039f7e9be77c01a1b97055aa23ba5afd1eda3f803dc26edc20a97f49da14f06f16110e165f0470cd7bd6d30113cd09e5aa64f0afc6ecfddb786b15049cec1aea19e57060e8bc982cdb0c2f58e0d20a9b5b703e11e630f9ff48451bba3d", 0xb6}, {&(0x7f0000000e80)="362f401984195adb79dc5d4891c98cc6bb2c566f59f6ee60ce77e5be7f9edf3ed835ae93f68b7e90c99b8a378017f369626b4bfbd5ad197dd2d9412857b38780e5ba529d06484f996aecaa6118d093d872750558545d1e44f6f4150ec4dd39d37cec242118e8073f9698ddcc97d33521186b3b37a0154c727ae8b7ced9852298e26390ee2fd1f58289c29f28fdcb3e68f1c0dcd80c085ec83dd54a9f4c01e91983b3f765875aeaa4bef3b71c5ba57f832964606a6578a8", 0xb7}, {&(0x7f0000001500)="d63a3838d1f00b00d651df7b2435e3ca6beccefed9880112aca6e0fc6d729a271154a556eb0fa4a1239a8e80ad82d94310c077deeb609f85975c0b895a9b7d9aa5a6a216939b4e202d20527fa6e5e96d5500882460edc515f273ac6a598b5624cc9e1fb5f2fd11d9b7099615fce116626a74e7f9f61af394fa6de49886286af9f4aa8d2e3749cd1b5128f6db7427a37a3143c4fad2c688f960006aa382330ef030a5cc575cb1d25c4eef88132bba0bff1106f28fa9bbed6d89d335e2de98517b365eddc56398c347ee0a6ee6fc", 0xcd}, {&(0x7f0000001600)="85185696def85977b9ab756996dd78b7ca09ff87f50cc6bc57b324c3092da1869ec56042523423e97db189e3291b0ddd55a8571c35fb6db4d119ec5cecd513c38e74ab38d86555cc4b90d3a84a0c865bfc54e57c32ff3d2aee", 0x59}, {&(0x7f0000001680)="ab13605b50d395618e03754c4ff5bd773f72e019198a0d9c2eefff1d207ed90c2a130cd345c960fc14b1758ea16be3c15cc68e68b73014789476ffd32b51781d38d5622926df6b299a9d62", 0x4b}], 0x5, &(0x7f0000002380)=[@hoplimit={{0x14, 0x29, 0x34, 0xffff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002440)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @rthdr={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x1, 0x4, 0x0, [@remote, @empty]}}}], 0x50}}, {{&(0x7f00000024c0)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, 0x1c, &(0x7f0000003ac0)=[{&(0x7f0000002500)="5fb373a734dcb3b776d02fc6040f43c4b78864cf57a282ddcbdd16c3b2ac15bff3c50200c92219e3da925f6882cb14ab1042080022b69562a29a15cf21480b96999023c0b3ebaaec7c8c3e4e66a8eb712f39cf66becb9167f9ced0bac8e6ba7a61c82bd3ce2583f92023e423c01a03fbd24013e8e8abfb9cd57e7b11b66cb1", 0x7f}, {&(0x7f0000002580)="1bfe659835752f8c1f58535f8885f681d278e1e20d7d0132ed20b24ce080e708f74091f954852eee019688ab7a0c4de68fd2fd737ecc3557383f3f869d17fea316cab85eecdde54c61839697c1006c841742fcda40f4eb0f3318b3e72c80b8ffd5c32ac2bfbe93bb23771de73cc04f7351d520dc0a587861562ff1953162bde3598a5b9b65a5899cecc217eb09e518e6dbdea1298640e5ad1afce256373a9f2caf074a89e546d79d", 0xa8}, {&(0x7f00000026c0)="12ac7f6275f911f1fac7e53a364331c4d0bb9dbf3bfd140034bd87f24c55033caa1b40787729743be94a87b1df25019555b25a582bb72fc044e3e8fdd8c62a32819130e3f8a6a38a992f82811630aadf17cd28bedb6db56f87715cde28b39efa341e3aba79c329dcba408d9265888c0c247975e2e357e63b6f57b9b5d99742ecfdddb32931147d9b8e4e3a0160ee3fc177755b57f9f9f02e4d47132dc35aad8b8e7b5b8e3d15f6e3d1e9f97a143b60a1b6169b0d9698231542a4a0f100", 0xbd}, {&(0x7f0000002780)="5453104214c5642ce2f2d4372732224a4939b4dd8748b3ff47bb768113feb832791327f6ae58a6b5c1a3c5a76cacec270cce3362de481178f3fe03d9b040d4070f8e8f2a7aea1dc77ff7407c8aa59967d0f6c645e171097e2abd363d584e215a9079a11433352e05bdc46359c1ce46a03d2a7bf4eb1f5d51eea1c158e0a52a10d81a6ae2bcfa0fd14221afc5149b78d6474185f5e6f96fc6a37c0915e07fb276f4c2dd6bc7dc90", 0xa7}, {&(0x7f0000002840)="14f6f4f7d4e605cab7cadd3a771586a6bc1ad0b4ee35f896a8aeb14a16b1cdd7518786946029a7783f7c5405e3a21e886e5de683ae59c472479c6be2e29c2aea1d91a8d5101a3c65cb03aa3b7b8e19471986996d8ec0293c0d1ddf0e790623bfa5d3de2073f587d53a183954575d816720c238bdbacdc455879a6d5946267d13f1cdb9523d3ed09112cb0c791005a19f891108f04284e90c3bb87a2145ecb8e8ea130cc8f4bc3490468e003e15df863d8afca001c381a391463a96b691e58882359794883fb78cf237846dbd90ca6b634eff4683e531a9234361cfc9c186d82f876f72dd87804712b9", 0xe9}, {&(0x7f0000002940)="4498b789f94d69b3588b83c7a4faeff7ea6a8e89b73f591244833191811968dbdcc4298cdc604bf8347f0246422ff35275615f0e589c40d14a44e752eed466e10a5a95b5d5294db1c7e2bad75c3722f88f7cd1a109858e9063c526ec3123092051690d86c8454547d04438771f45c7d41736cfa7d97e0e257ab3399e1ff074c54ae85edc757f6a210c71d33bfe6b2cb6efe5abbb6981b0787e324220ac80935d88936d9040b52867ddccba2b204fe1035ce2ee9b1a9d4d6991f99b8419d1509e36879058d9ead4b670490f44d25a54646af7d25a74b22ec24b0dba576fcd8349b5d8a1fe0448954cbbb8cab3e8e5dd1472526d310abbab33abf200dd8521a9e141b484db0837b047e5970ed73d3481af8bc490f80583f3031a2982490c856cf8761527c4c7108d7b6cd4fcd2a5b54e96e19a898de69d2f929871a97e3a2e4f50a36402216639426ae2225e5235abcf76b34c7c457be9c5c5870f233fcd423092be33f9dbb7e904410657880458f8009a8c5653227cbd3d192ed50ff041fd7f3fe99edd8cc1a933fd5b7249e24dd13b8a7717c0b063fc14cb4ab4e912b852700f590e6d1a194f045ed143a48abc186275f9b27d8a22e98a38821a32862fca8b5c9276290722b30bdc29ba36a8a1f9e0c9a55a47352bb80b48abf71e495c0cafacc1eb5ff31dad6fe98f106241f2dc27c96f33eb93ccbe9ad38b8b4adc7ff55fed1914f2f64312abedb894fe3b96ff42efcdfa9d6eef1500a403192855663d72968f11021bf4a684b784bdbac883a33cfeddfe985d5b5b99cd33f8c634571272df614dfdd88c2d2015c34294ede00af810d77b948990d916caea2a3518e9c86f140f6bd57592e59c1d500ad6c83abc3a1bfc4dbcb01a11fb48c438e90a1dc0d4dc5eb6e22f83c8b57198311c5220354ff5a049ac3528017b7d4142c538b6b3b345e50ccc95dab0addbad058b454ada4b008b2bb076a0a7e06824f830d5adc638b4df073846d067315a7dbb9152cbf79ea392611d028631d9858f6359559916bf2ab20336bdb596da18b97f331cb589c29f916da6c874ce25ee1bd2310fc18639af5cddc32c48f425789f46b76a2c60f9bcd008b00c94907c3de75318180de69d79765d527759c4cb70ed125efab0bba2dc8d616c77cd2268d0c43e15299507ecf2d67ffd9ca5f1a75486feacaf1a3426e532ce7e07943760cc07c41f1a0e8aeb3ac55c579dc04021fc61f901734c6b77fad89f63dbf985e8b746d254e34ea6b4b031241184c0a88c671dc10a8ebf6c57b577e843c9ccb25a4de342af56806f86f35aa36a136f6a6b5da09f95fbe4852967926151487f9f7635ead14558887a6d0a3484066860a4e8e7c0acfc88cdad61c50a3229b5030d805f308dabd34f4b36884170eedeacb92e34f7d945a627d4a0364272b499b9c96224cca391eb6f26981caeff88bf18792df731bf5ced2723fc3362da68e516d32da793d2cce635b8bd8b32f910d3c09f6ca6f71dfcb911edb043d3bd937e2f640c77680c5cbb075f6764c7ed5489253d0cf8e0277f0705bdd05c25c212ca5a40c433e0d0db2ba5792240fa24c5c11a3f2519600600b6195179b83462cb47b2c1e424168a4e68b1be01070cdbbb57817e3c6c75019bd8878ba492afc9816ddf5976bf60e3f562a0314bb80274c0cff6edc81e8f772f8f6078805d6fee2dfaed85355687d6b77fc3539a38d367d7e32d1bbdc740c19a8015c2966a57f13521795cedad1fa9b61a48a28abf7ced61ad7eb87f19914ddfcc099e40d7d1eea516e027376f77bd12fc59db1a86420f078e4a67a4102a57e9dbc6bb2624475f762866f9e151ef61950ab460d7db3a9a21384c472dab62252498ddd35c50ed4ffc96049924fc0a507296cfd0186247097a48150a7cc6f69b281144c9fff9d26eb5c9584b2b27ca1136418e3f6d2d39e9ef5abf80b9647a973a078c9e35f248aa315952977d0c6c791e0d9cb7caef1586d9250b7e31d2377485fe23539b8f687953897aea4f01aa8a2a30df737d7b12ad66275f87aefcbd0c930f97c7167e87817c540756b9cfe3af913e194cb245bac68cee3a0e82974f894903ea3a4e72d83643d16915d3039a94a5e826c973c78e6975f6ca06c40a6f2a387587a05701a8c0b62d5fd806625b41a3603c8f929b7b3b0114814c84d70f0db8f6828343ace89457862ec19c8fe26fb0725633c55aa94dc7d7cd4fe0a2fdebe963b71526e20d64502446cda75e380ef973e3145c9ec0dc2ea95032ce1cd550f69a6a70075ad5fba33412782f486a88869837dde6adf85a2dce4285425de727ff5e658a72cf07a1ce052ded274c36467e6fc0492a67ec587df1f8bf3d7429693330fa4dfb9eada905098917f599de932f8c5e8ab7627cbd0378c687e230282a9230eeafcfa33e2477c06724ba8fcc98383889b90710a24c4397942d701ad5e365ab8f9204e6a8860d3eaf1f3298219ef2fac2ec425b4e938ec54fa6824804356d2c73cb5c239110d7545040c524ee658dd9a7d3585a766890ac1b28f795da8bd004d8bced018aa836ee9ab6a20cadc68c7b491cbc1614bf7784a2eb88dd507cefc535ed9e1c4cdf6e4033bafd004cb406320542d5a3cf6e11ceddc5e638ab18db021224ec2d8c66f20fd087a245d9e84c507685f74969dd8aee9bb78859a053644c535e022d0c6f8294c824d731bf7d31b4bf3d65ad6a28da1b4d5b988a725ade5c431c9a18b7e9ef828b1dbb48c59cff030113b042a727f21b1306deec3407a474565d8389d032865bc3f2aead415f6c20705bdc098c2e7f37402089352706a0c4d6beac50bbd4a5952f1139dd93f4f002635a821a6d82ab19bde0f26a0ca69c154e5d7caad4a11c08af9ea72dd22f664c9ff1476ed0f73736dbfe3c8331817524a0bd51dfdbf3bd9703d4f8db446cc9ea508b02a7c8169670fd1c4df296f6ca77b6988f944c5791e19a76ef2272f565168fa8b52d86c1d53846f7c56c2b842a8dd25d447d63859c71a7e32842794f781791a4bf67688e7a745b555fb15292decfd3b931dfdec064b8af38466bc851c5ba8019b9ac7bd34650e4a9c6d41da9e0e9c9e61f7212ba4d21e8f4bad1986bcec2709fba5af4e6923fb559399198bc376a73086d853d4b5c0494424f4874bba0dc523c0a7ce4fe01c9e0065096d441bed1abe32ae4ab5b34ac24686dbf7ba576610e002598a839c59e556d866346c624eb505ef82fc3738b3431b27ad1fd3c32faa006c0f968d71ae38f91cecf58655f54fc6f94869248b79e5b968e081c69bafedea8cef32b1f8b52c573eecebeaa18597d5472ab2dd654459030b46f9088f18c64f8f3de28da1ce0871cbef357df21d8e2eccb463d5d1525780c1cb4d2b85dd1602bb7bae6f331b7999f7802ce4a5350d47ea549109e7d152bfe610c78df0d28ec8fcf469f564506a4371696e7b816fba81e35058be914790be1a9128924dbe52c9f8aefe124882ae6cf2d65e9746de1e65dcc47c0e6f562c7579f1379e50cadef6b52d662c839f8bb1c9cf09cd808f43a546a17eb6792c9edb8370f1306f57e0e1090940c86768108bdf2df1a5a01b97da818dd8297bb50bc10b54bff45c926fe00a0a057b58f9f3b0f9eaed9a1b188582490902bef33ddd53e3f102ec486cfb0d87821b5127ff8bfe4cbb50fbd2e91bc8af889c7d1b4ba64fe5082c2afac7bb4ff6fe02dd8ef1126839ac1152d9d3feae0a3c87f44e3cc7f2e4a9123bd2cc0ca2a5a9c3d7594f124b5904d3647dcfd8fb10b93aea48b348c917abd6f9835a3dcd7266e5fa70f7a3279f1f8024256c4c07b241b9d3037df7d935a888b4ccea6a35d4cbcc661225b71d04ed597b3b1ae43701ced747e95300d0e12a6b5618bfe85a6c535d63b5b51b82609f1a558b4e066214a3097c680e931018765416293880df300e5eb32b77672b48d55b8f4efbf642e83a34f5aa75f76c28f8b4ae91c725938030cc414d770aaf6a24d0737af3d2e6b86deecb4ba23e28b58136a797e03c462a0748e2db814e425d51352ed9531b3dabd247ce9bfa4602ca3465a851e3c91e223a1c38d700927ea629648e79afcdaac2f3254b80d20c4a05497fe47283e46aad90c9f9928735d4efda2f6831228305fb0ede4f514ef87b3beadb6f045bba65da536b239f651a87b5f386787f1b2f84f825444b4eca0aae6e88280f4cfbabcb4594cf6ba11befc3b87b268ac25b1936fa38919dc869b678d84208df48412dafb2b03e1a6352fcf8611e0f108b2607d2befd5d4535087501a3381d1b380a0703567ea86dccd252147976f1d585d3ba742f88cceffacc2581cc7167994da1b5eef1d64c7d7848d2fa32879ffb7ca03d02580c4f3b9779fc849091c3214e49ea88042e9a625ac75407e7bf4eb726db8572e7a8cdb21f6a6cc1b35e919486ba341436fcaaaf36bc762530bbea15c3f9ce5aabfa5397ede2c1add3562db110d99fd7b4c87e8e358492f634f2d39afcf8062d63a05fbd277feb29c5e2c667c53c201a880650064eed3d45268cd6ae48101459ee76d0867f45a4ff8fd22e71403a5b26730af2d33c6132344a8fdaf1e34b99b607cd991d98690ed46ccaa70946defdbee0be1ffaecdab50f8dabb676af213c4e58ed9a76ddbc2c14944807826ac8f37a4994f7ce3ce8200411235c42777401c9450041abdbc4ab87bd023bcecfe0198f3ffbfedf15b1e93a7f15ec92b421d8b7bdd91e25d07929c414adedb8bb64fa9955b56ff4f0b2fc6d23baf74e7f44ac0f3b1d9b0270fde77c8e4bc577ffb7aab581365bf9398695b5971eddd0908d0d1c5e7bf245153e18af1de56a7becf98d5e9b783b910ef8922bd2a3d998b4e3b058359383ba2073ad48776b9a7b7b294e3034ac932b4e65b2387b0b119fbae069dbecdfd4fbf094e007799c353892113e3683faafb78711b45b28f45098211dd52e19a84683b538ab478dca645d75c7a63756c1c73b94ce4deebe9c32d82bd9d4e8cdcf0d7139e555e0ea591abac2598716a1c41139ebe833d2181ab076ad8a5dfbaf8dd0469847969e9c3922a93e233f576e147bf2b7cb9863f2e38d0e19e92703c7d199b748cc3ab18c87f534e3e1c18b67ebf37188dd718ae213be68eec337b996a2faa50d65b4af9540c62f487657f27dd37b67d4c30250f370214b4baa3bda3e5e2656b55f085236fea81b72466bfee29ae96a8df8284b36bde0d71c29fbe55adab3d31b0b8d22cd95d517d2af7bc476c005ee71847b94f7c622c146f0ac35d9026eb295bb3775970c9f9859fef4a0d8877f1ba876ba10c363b1f922607bea30d7829daa58bf97b146b57161b0e589f698268c18483ee03a615551458bf509e7a67efebb8fe803d184f408144be46cff1dc55c5e772a7c7dc10762dae6b3658d824a907f90e7c3b4369c00a0f8b0d0f692511ca7ca8be12e673b15e4d7d937250732045bc690053ea9ecc3dd179807c1d7dc7691fdcbb86d32fea45620201a790262c13da4e205c2e9961931d23d714e9e71378d3d79d5c2f1834d935a4fad02cf8f572c805acf532f3ee13b65396bc62d2d3c189e89877813916c4d5b0e29c800c0c9e3b7bc3ce914669c4c16b341aacadfa4961778a0edb4d4446c8eaea6e211c276ec58f109d0bd3e1278f1b63d7c34fb98392b60ce8464ed3015571b431ccadc8449c115d8062def9ef2bfbf07627c7891963c84923b8adf6a6522092b2d8a4246ffb590b64bd4dcd08a93bc39b68ad1cd646dc8631ef314aee87e27d13cc419b5e14e7ea418a2f9a974191d37503d3", 0x1000}, {&(0x7f0000003940)="3ec00b804debd2e8626da793d260655531209ab82c4b0ed8b0f3008fc32d6d299b55e9", 0x23}, {&(0x7f0000003980)="89db20055c6cf59065be7eeb61177fdc0fddd36d1ee9a3c4eb961870a2083603", 0x20}, {&(0x7f00000039c0)="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", 0xfd}], 0x9, &(0x7f0000003b80)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x7, 0x0, [@loopback]}}}], 0x28}}, {{&(0x7f0000003bc0)={0xa, 0x4e20, 0x81, @local, 0x40}, 0x1c, &(0x7f0000004e80)=[{&(0x7f0000003c00)="78fa40a60625a3ad919d67663d3fbcd390e11aea57e395f78788cb00e896b0587e6b0cf279d051ef865dd0d2a842089ff74e177870a6193ec19b4a63794be1d13b8e333fef6109211b8dea45f70d8f5bb5e98cdba84ab1e0ebec02912489f0570fc8341127c304fe4b1cae59b15d44d070c551f30b887d8a1cdaa551ccc853b45ca911f15775435ca37bd7692e95a77b45ceea0c5b9302bbb354029834283656ff7599eebb8f755ca77746110bef3f72826d7eb62873f2d97a4e6b8f3ff4a8f2147d16eade90c4b71b8455f5c1f2dbc79e82462047c635bc38d320ce5fc2a7cff60c25ed1c4e892f19e0accdfcbb1ed401f69b297632ee9f1a56680efe604a08d320af90aa87a12c2e7ba55a7c3114b94799841bc70b8110a2220326e528a1d3526cf0f7bdc4017e9a4b7462185838b98f82a545ef57a043ddd7f4c20f68a4f7f9a36524a38c813029e50e75b2be260fd4111bd8667e76df2062ee6e7bf86d86303d3d6dc90fab0c99118678e54e6efacfe41e2c4e2d624d554aed5304213b5e0db391fd3b1d512361b64e443d6b0ff3d4e445dc3e16befd855f8a4c8108117a434bc55320bb72e31e09fcc8b9f9f194c64f3128d80d2d97c1a0b11947ff11c07dad8e1bc59072a510068b2345e87c70dc76b9285777e4860bf1fcdeb3f6e9d7b0556d25f236ccc17a34f6eb8452e3237ab9ccc4ed512f785cc72352e9b69094ac65fe7c6a7708189bae3c51523327fa1614c37cb9f9f509abdd601205549e4d11e1fecc3db603bad25d9adb8c2bf01361fff76b0be90a431045096f756c0c4383d0966a8cfb9f964695a534725f0f7998b19dfac641f7d0695ac6eaa155ed9f0914b822fd092c087d88c92bae37ccfd674a2794505f07329565116e0e96a7ec65dcd698fd9f1ce9aa251c95960cc133ad252b02a3545c12bfab1ac7901e3c4b810823343e4838d98b70a582591164c664cf266e9ed29c5ed0209a2051a951015dfb6058ebdc0b79b36ff962768bd08285cfa09aa4431a8e7fb65858eb989cd819ee68119e9ad48702e35b2b745a712ea59b62c8b8f5f280157ccd2a13baa9e29913a7885463aed6f0a3d82f42292813022a1c26ef5c518367073d7b45fa263b772cfea20d7eb1108e00d22105e11c3dd05701469273733b8ef32bf99e33fbe61f87ed14ba95192324bd13052a93400e3a1efa0c9d7a9bbaedafa3a495bd67e29948424781676d264b0fb5421bb60e35388e307f2e7f19ce2a81aeae53500b1f6a5842e45951dda27e09c729c7464f366e0a21c6f09de3fac09fe72cfe3a04bbd61349cf8e258586f8cd21cd86b72e115c9de08ab3b428593b79df207bc7979403a13df07d49df366f56987f6ec0a320e57c28af864d2a60c3a1c3fe84b2e9dd3517cddbb8f5667c45cdfb96c3fb8b71bd5fcaa6285d9859e78c30dc3386d5b57a6bee83842bd8118a12448624054f6f31ca3b7f9581fa6f77a2bc1f2f53eaa6c09046e2b76202628af22b8363c26b03b13155551af104bd028adf8617eeb8cd923d7cf47d5f34ed7084deaf4c815775a0ec4cda65e90d75ea4810fdbbbb28ec74389b6483a69237682900f5d7bcb77ef65dc4fc4177701904ac21bb97b9031f16375b6d363139ec2bc55c3bd944636d1e61c44dcd6395eee788783d96d48ad3070575aec28f342a8f66d45a8b0db39d6c730d0f1086f5eee0beb7c3227356382514c0de93dfbca6e104a48d5748c4ffdf2a368d4f847c749b80c5a71515ac09fdbc14254fa237d586df375a0a46e59703611a7030140825285f958cb400470d79e19308ef613623ca8c0f8aee984c3985a0d98c552089a831243296307506ad6b9223275ca1faaedf700533aaffd67075602aea25d2f18119e24a171c009b84f11943f4f0ee7906a15db553e1891d5e69f50535e96fdf4a6a3daff26af564f0894775a03d14c0fe19c3775227e4ce2a16915f8bc1d529f93fa6a546f0fef72fabf500d27af287ff19d6ce269db4f6d377187eede0a96dc7df57befb6fd42a83f50c767ee3e686b9abfb8da3d0d6e3c5f1011113285d4a21d9330a6917f3f04de5afbb8f777eac41fe9601d27a31a98fc65693ee5dadaee72790b3f8dd63672f57210f8fde2d27fb7e63aa8dee654c1b141f8205c3329df8756e0b35950f01bcaa4c30a896b59a00f24a2d1b43e211a3ab5a6b47bd18ba729da9ad8b51852c50dbc29156d63457f8ffcaa4a156d396ec299342a9758602be4fa36e89e594dd0b88433ce3e08c4e364f14780e13a77259e4bcc06c5288486093d23ae9d9b63e97c957788a60c1806a5cafc4d4f7ba6596bac5c70a22378337a0d6e3a6a6118b8eba5d7316edc337b4ec6a2908095c01a860014a1ac37eb08a89f95de61555818911f30cfb4d1597de4cbd070a7cc649cb6f41e6db68f15c7102bcf8495ef9c257fe8d6595b9ba95b24ada29e125cf72e7aaaaabfc06e897b0ed1f52988c7e50bfc721c3ca20979ad9ac84cb8d3c41d086911c6fddf3741b0e83f6a040617838532089cd4495f75c2c5e49c8974348ac6d30b85c412f8ba47bbfaa0e4f8f991a37b86b38ff277abe9b77423604d316850c7b114fe0db52a8f279c572b9b703dc94a93eb8914cac5c889e86fd79cfcb2be06da2b36df7e8b17796e5a02d0e5ab5ec3b78c5afcd88ac12eca35c298226efc438a2e4cdaaea6ab28e8f45f44afe67d028deec23ac1ce563a8a5098da57c8201efe54899e8de45509737824508a5e1f2c2a4f63a083c8552e83f4c3e6f33b3ea7e1629f56b2d5f011bfbaf7100e1b7d312e4e123ef28ef7635790e1f2e2d23d9e85d18266ae3b4d458ef211ae01dfe1ddcaa7c25ef8ee7b187bb46ef4d8352c8d7450fa4738d5e79316b7f3b6167c5c592079a53c47a2ec709119a7117443e2a54319df5a2df18356068b3e08b3396921ceb47d4c0dbcca212c07d88813829e18d4c5a96add562e52b2b3a14683b46dc2e8aa12e0d024d26552452601f031ff0b32b437bc3e9a4d1f6a9bc9288d087d62d9e4a492292e9a4c1c300e3101ffe6146a7bf82c887fb49bb992eaeaeaf77ca86c9f9ba0102e36a7d32309cc8e1ea91646b8761aaaedb3506162eef2282880a442cc82825371594650f4595ed7afec5af821048c3519d1824222926f5aeca7d42f6a089b7ec97bcb0e0cfa72c65777298d9ef035b73608f4c1820b430b9bcde375c7305eaa297a03f82f82a76e1c65f1f26c540a49f1871aae5a15c45cf0d63bbe3415cba0b6baa373875fc01ab33340778e3034421eb3084025bf96ada9b3cb7bac756b0389163108a4ad9affd1b403cc7e74ebc578cbac264590906d2f7f00250167a2d47af0f69f7b8775639c1d7f89e6895a32911d11df664b3d95857407a8070d8721f16031bbf41ffdb353eb78e8adf79d5c70da94ed013907d2b56b6cd7fa6e6fd8623738bf29e02c534bbf2dcd6aad40daaf45c2fefece8a0a47593cf1cfcd30d073779bc048ffeba4d63f5acf799c011d7afab79053d53efa3673a3d7432ded16f6389bb804cab4de472031f27c44b74229f254bf6d41aa59336a05084fd9c2041d6083456a6c631b3baacc47ff65ce42ff22ed8c1c801d057d488041561ce7c29f100b0f724118ff8ba8c7ae5d9ac89190c87a6e7aa76ddb87e4519e89cd32b349721aa922189268eb38499cfe1313a650cea5331a52af6ae1af7ebb9edd7dda40914750953a78d599acf3611f58a078cc0e07ae93219df1bfe54de93f12c0fd1f11be2b8677bf81782ab72177613b78b55776ccf9fcc3371c75ba3d65e9f55a16a1f6acb5894c8a70ce303271653bb5f6c4f9ec607073d0b10e97d7e05b8d75bd14a80814f0cebbf9528bf1298c0bdb2d92d23789618cf41249093f641bc52fb7b706f7ae94e73ed05ade1fcf7fa65ccb91e23ea2ffa5ac4aff9cd18e2c54d578c1c587c939cfb90249a0bd7e6a74bfb77dd1f6346c849b9bdffd88da81b94f9c3583e1d56b57ccf1c830b145d241f19411523da1e19c05a76fc821b6e909921d5bd67758ed6db542a171f09ecf8468cc3e439cb475243e36cebe10dd5cbd3d1054c6d4b5c1b0cbc0d3a1eb1f99176f515b4f9176698769abc56b3776eaf957336f718f0e534c5125006cdc196364dfa02751d3db1d25693533a66396e264b49ee6601b6a84ec94eb204238b251bf7e25b2c84c4d55f66c0970e3419a2439a6b6ed547563e5d40fee20988e513a8e2e92def41e535286442ff10a830eb0be0d3b6f4ed6477724d0df9b21a7370178460a4c941820a6779caa4d22d88e3f481893f4410c2ecf42e16b68ccf77edf07042b3bc0c456433417024f4b607abf3ae827433e1ae620016acaf69f7724db9f243a53d5d7c714659e3095af83ef22e9482a3fd966f856bfe335e95244767e3b3384720b43c8f346a11f47b9b1da50d3a1d94f83be0917805fe8f316ad769bafac600de0d354c2d73e045114f7f7f75ba68f6c5ab1d29f5913026363b8c24f7c9a1fbdcdfc366c2ed44586aef6994c26ae51cac083fc7d8600a18ec0a476aa88b58334198a6e19efce4459ebd106202bf00f6d136d76b62b8008fce202aa3aacf5b4be8bf79701d793f52c19d7a11227ad3050fa7a8612d40e7ee71281e44a296364a22c38c31aae314699c897812c6b8ee800e949917d30e85ada7fa43db9f54edd9dd0b18ca29003f00330bd42fc54b418d343e5c5250f3d798e4074fc868a687b098ab78c731423a3c4360382fa0b46eb414b747cae5345e90ea56ef3958fb4da1c7e8c66ae030ae2c2bae060db53a3f559f9d47d98bc48fab005281c4f109b1fab35c81a8da31c2fd68be12f2fdb4be1e3efb64ebc9fc90635026ada49e8ffc7e1a9fca36e950072ca951aa1dbd199e5f63526d994117185b7774db62db4e2eca55784f910abbcdf5faf9e0123e7a91a4a08df4c2ed5a0a1f634fb6a2d9f8d4b4f0e99c6fe1fd745742458ed9381d065364d8a4ae3630c9451f8233b05f1d7c49224d597bb7c1932154aa964590ec859c4cd96cdafbf896198c28ae930aa8141b04d26af97d93a694e2c19c86760ac2c3203449750a28e34988191e7d11ae7831ce197385b692f2e74114f25ba83c5c7c9dfc22ea153f3bed56b6d050b3015937f596c2ae43afd931bd723ae4bae23a91b28ad5bb99f6e73afca29bf67df7edfc61e5017a1afbe9836208fe7573737ee4dc62be82be87e12bf4da0bcce54159fc7cba6dab44ac05ea5b8f19dc382133fa158a2536351cae9c51f0b88dd0f560bf139fe2a204530b93f7941ae89cf8e227053509c797094afe5fd1639a0d047a6fb2d6da2135cda01c6ee3ce2c5c42ee9a600d1292001123ab92cf6986a3da19e332273f669b7a8834348917f61b45392951621431dbc1da7f2c9b153fd1e81fc734f2ba0ad7e03e35d69c8ab0530b9ee651dc3dccb27e2374b50c644656d255ab829aa466ee497ba4e6022b41f7e5b388d8777ba1c59e816410605995f1de867e40292dcdce2aa8d876cfc99608a28268cc8fad95bcc95d802b014ed939a7bb189dca54febbd9f61b46d1d26042bf85223abd37516ef293cd8bb2d0661cfb23168f5429f0c4f9c3248b2d0aac8153f56db4c38552dfa33df0414bc871d785c2fbe2dbf50566e349d94a57fd6ec7104a005c5b796d6693ff0be579590bf24df3968487dee4f95906b2bc72c4614fcb22b96b17c1a31ec531f0421c876dbc59c0093a2a44fce2083ecdfd3cec279f41397c36a0c1807db3d600a810ecf2444a0f8fa1a1f41feca8b6d479", 0x1000}, {&(0x7f0000004c00)="ba628dc05429b5a865e1ffa2848d3f64a827bf8ecfed4b1fc926d565ba43e69d645d25ba842648da97b88f9b271ab38b5e742fd6d531f2326258c0d60fa7a6e981777ad258ac0429c6654335012563d33f1dbd", 0x53}, {&(0x7f0000004c80)="882b28625e4041c887c5e3fb6bdb4ce6405f279e227f34644ee40fbbf0533bae42eee461dad5e27d0d78a27978c012b23f3e3000e61a", 0x36}, {&(0x7f0000004cc0)}, {&(0x7f0000004d00)="8bea047671c902b8d4fb637b30825312177485b7968ffb4d1e457ce64d7b65b50cace55ed6936950176114e4efcd7e7032cff843099d6bda85fb8dc83faaa2a8c89f74d8c2064f23b08c805bf8bf8eef53d5945f60791990a48fbdb6cabc1cff014d1c1942c5d48946ce95c2f989eb277215c5ab688b2837a716a5dca7bb5734d23f962f4bea7505fd6d8553ba9ba697c2209ce27f4c30edd2673423ca89777e4158e2c38de4551fecc3253f10ced0989e8038ea62cdf43cd7ec7125e677d2a13fafc512b7db09059a19d18cd6b6dede030e6378033aa94cd613", 0xda}, {&(0x7f0000004e00)}, {&(0x7f0000004e40)="a6ed76f14d2ea9a34309815fa646c9c243c9cab64f088c66c6ea353b13ff5629f8b9ea40800d68d8d95de9a3f3866030435779b20c2e925f39", 0x39}], 0x7, &(0x7f0000004f00)}}, {{&(0x7f0000004f40)={0xa, 0x4e21, 0x0, @private0, 0x8}, 0x1c, &(0x7f0000005340)=[{&(0x7f0000004f80)="a186c2242233cd962ffe11289875c0fd97167c62f92ba2a98d13f1d848cdcf4550eb35b18964c75d626aefe6bb2491cc67005ea89587a959d3952c48eecdebd7debdf69ca48f62e52eea63896a3df6877aee3d5658d269b0a7f640890cc076f467a1fc4be1df62556ebacfa4204b6acbb1fa77f8a4440b972b1f95d411315519df283f222c094f76aa1151f91f78a0d95f6293d87aba1cbd08a71ea710f07fde9e6dd3fcaf97cd617fb190573343733cbdf32b14becbe4e7383e6b2334ea05baf99919fabce9b1604c", 0xc9}, {&(0x7f0000005080)="dc259576d1fc5065ee694772ac0dda824c7732a41db77d8e02de3490f1a07bc98478376595ea789b7f39def18c719dc96532564b2b3e13f5ad0b94a560d20020205ced8541629975636163ce7d49d96ea656239b88811af3d4c22e5b7e88776d08cb20e25cc570ed471960157ba8e6d534368a47d814e6bc7e29f0f97034a91037bc4b5b09aeb639a541fb3d6b2a782cc8", 0x91}, {&(0x7f0000005140)="4f1a6216195e228d6133769b82cc4e66483d355bac5bf8f3fafe78866edd686acdfe17903b691895ddfab457cd9a1d7c8bf5edeb8bb831871dc1b62da1dbd0d5ac9ef9c324653022bb762c7261ac9616a0bf09b67bfbc7ba34e7e6b422bdbaf17d16d6eea1a22003d4fc63aa3303bb9e587ad2035d8addee3838adfb7753f737b581c1621cca724c0dc5df6659035610a82b1af6923c87806705ed21d86210", 0x9f}, {&(0x7f0000005200)="6069e8aee2813495f3fd6fabfc198ef408ca44b598fa6b4a083c3320b3167dfb4cd9f570ca3ca7da337d612cb653dee0fbcdff02558d947f8429c172f6300d11054aa39a82537ee0bf341cc471751e1f7e036cc2afed1712488e5b4386ede1cbd2d96d73d82a3c7c5210a1891177b5cc7d5b42bb08afa1520cbe6851119f517eeebfc0", 0x83}, {&(0x7f00000052c0)="5de9e534aa00a9cf6a2ca7ad17e4c2eb2a0a42a324b872fc3a8191917aed9d6072814a206b98624bc3e9f551958d15d718fb003932d7a1feb89d0aeb95de513675038b07ff8c896cecf40e7a32ad3a4c2369d075dc881c9bc6989c", 0x5b}], 0x5, &(0x7f0000005500)=[@dontfrag={{0x14, 0x29, 0x3e, 0x100}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r4}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @tclass={{0x14}}, @dstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x64}]}}}], 0x90}}], 0x6, 0x4008084) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) fsopen(&(0x7f0000000500)='devpts\x00', 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x810) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r7) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r7) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='?\x00\x00\x00', @ANYRES64=r8, @ANYBLOB="01062dbd7000fd4be9fa1e"], 0x3c}, 0x1, 0x0, 0x0, 0x2880}, 0x40) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r8, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800008, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x5, 0x29d, &(0x7f0000000400)="$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") memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) 3m18.867596534s ago: executing program 1 (id=192): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1010000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3m18.082724418s ago: executing program 1 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000005"], 0xffdd) 3m18.0496485s ago: executing program 33 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000005"], 0xffdd) 2m21.349393288s ago: executing program 3 (id=596): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0x2a0, 0x100, 0xffffffff, 0x100, 0x1a8, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x88}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @port=0x4e22, @port=0x4e22}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 2m21.287876199s ago: executing program 3 (id=597): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000000580)) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32], 0x50) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x101042, 0x15) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000002c0)={0xa, 0xac10, 0x7}) 2m21.028196758s ago: executing program 3 (id=598): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x58) (fail_nth: 3) 2m20.711044158s ago: executing program 3 (id=599): r0 = syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000001c0)='./bus\x00', 0x2a41040, &(0x7f0000000000)=ANY=[], 0xfd, 0x1067a, &(0x7f0000010ac0)="$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") dup2(r0, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x2e6c04) 2m19.247397743s ago: executing program 3 (id=607): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x25dfdbfb, {}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 2m19.195831645s ago: executing program 3 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1c43aba69adbed02c5d6cf115129ee07e25ca8518500d95e5e3ff3e7503dcf5347bee255eeba0f102d4c4c415eb56239c523a4dde580ed459f309797655222077a0442fb4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd97a6", 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd97a6", 0x0}, 0x50) dup(r1) (async) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x1010000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}], [{@obj_user={'obj_user', 0x3d, 'trans=fd,'}}]}}) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x1010000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}], [{@obj_user={'obj_user', 0x3d, 'trans=fd,'}}]}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@discard}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@errors_continue}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2200008, &(0x7f00000003c0)={[{@data_err_abort}, {@init_itable}, {@norecovery}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x3, 0x5ad, &(0x7f0000001000)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2200008, &(0x7f00000003c0)={[{@data_err_abort}, {@init_itable}, {@norecovery}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x3, 0x5ad, &(0x7f0000001000)="$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") io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 2m4.024991081s ago: executing program 34 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1c43aba69adbed02c5d6cf115129ee07e25ca8518500d95e5e3ff3e7503dcf5347bee255eeba0f102d4c4c415eb56239c523a4dde580ed459f309797655222077a0442fb4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd97a6", 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd97a6", 0x0}, 0x50) dup(r1) (async) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x1010000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}], [{@obj_user={'obj_user', 0x3d, 'trans=fd,'}}]}}) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x1010000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}], [{@obj_user={'obj_user', 0x3d, 'trans=fd,'}}]}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@discard}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@errors_continue}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2200008, &(0x7f00000003c0)={[{@data_err_abort}, {@init_itable}, {@norecovery}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x3, 0x5ad, &(0x7f0000001000)="$eJzs3U1rG9caAOB35I983hsHQrj3Li6GLJqSRo7tfqRQSLosbWig3afCVkywHAVLDrEbSLJoNt2UUCilgdIf0H2XoX+gf6GbQBsIJZh2kY3KSKNYkS3bkkXsWs8Do5wzc5Qz78ycM2c0YyaAgTWefuQi/hsRXyURx1qWDUe2cLxRbvXZ7Zl0SqJW++SPJJJsXrN8kv17JMv8JyJ+/iLiTG59vZXllflCqVRczPIT1YUbE5XllbPXFgpzxbni9anp6fNvTU+9+87bfYv19ct/ffvxow/Of3lq9Zsfnxx/kMTFOJota8ZxaGdV3G3NjMd4tk1G4mJbwcmd1bPnJLu9AvRkKGvnI5H2AcdiKGv1wP53JyJqwIBKtH8YUM1xQPPavvV6fhA8fb9xAbQ+/uHGbyNx8ED6eXg1eenKKL3eHetD/WkdP/3+8EE6RdvvKe3uvJwd6kP1wAC7ey8izg0Pr+//kqz/6925+o/Hm2uvY9DOP7CbHqXjnzc2Gv/kmuOf+mf7+OfIBm23F1u3/9yTtiJJP+81pOO/9zYc/77ousaGsty/6mO+keTqtVLxXET8OyJOx8iBNL/Z/Zzzq49rnZa1jv/SKa2/ORbM1uPJ8IGXvzNbqBZ2EnOrp/ci/rc2/k1iXf9/sD7Wbd//6fa4vM06ThYf/r/Tsq3jb3Vn+4FtU+2HiNc23P9rR1my+f3JifrxMNE8Ktb78/7JXzrV3138/ff0XuNA3yT+saT1fm2l+zq+P/i82GlZr8f/aPJpPT3amPW8VqhWFycjRpOPWufHrXT+1Np3m/lbWfn0+D99avP+b6Pj/1BEfLbN+O+fuN+xaLf7f4f3p9dJ45/tav93n3j84eff9R5/uv/frKdOZ3O20/9tdwV3su0AAAAAAABgr8lFxNFIcvkX6Vwun28833EiDudK5Ur1zNXy0vXZqP+t7FiM5Jp3uo+1PA8xmT0P28xPteWnI+J4RHw9dKiez8+US7O7HTwAAAAAAAAAAAAAAAAAAADsEUc6/P1/6jdvmIL9zyu/YXA12v9o5wL9eNMTsCd1OP/3/21bwJ5j/A+DS/uHwVVv/x1f0QnsZ87/MLh6aP8eDYB9wvkfBtdw3N3tVQAAAAAAAAAAAAAAAAAAAAAAAAAAAID95PKlS+lUW312eybNz95cXpov3zw7W6zM5xeWZvIz5cUb+blyea5UzM+UF7b6/0rl8o3JqVi6NVEtVqoTleWVKwvlpevVK9cWCnPFK8WRVxIVAAAAAAAAAAAAAAAAAAAA/LNUllfmC6VScbGrxK/Ry7fWErkd1f6qExdiT6xGz4lkq+18IdsdPVUxvPsBSnSXGMr296aFd6lDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAN/B0AAP//UaowBw==") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2200008, &(0x7f00000003c0)={[{@data_err_abort}, {@init_itable}, {@norecovery}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x3, 0x5ad, &(0x7f0000001000)="$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") io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 1m43.33303652s ago: executing program 7 (id=846): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x40, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="201504000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x40, 0x21, 0x64, {0x64, 0x9, "eeb55fabd60ef823582d60d10757ee0b4d2650d980c33d0f36a6a5e2bdc7b40c97b4c53e4e8c0522dfbf7c7e368bb9a01562d175f10d48d3c4b3f1e2d44376c36039e0d50db337786481b3dfc9f2de1115f8579c905c964f61b084450603187a4a3c"}}, &(0x7f0000000300)={0x0, 0x3, 0xb, @string={0xb, 0x3, "2b3f81c48bc449cc4e"}}, &(0x7f0000000340)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x7, 0x2, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "04126bb96529783859a6689d86340206"}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0xf, 0x2, "f20ef307", "2bdce012"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x6, 0x7, 0x1, 0x6, 0x101}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000440)={0x0, 0xa, 0x34, "389e87c10baa3b598516fa26e9c78943520a9c9d5cdaf75e5d8b1346b8b2d49902c7cc8e3b228442174328b67abd2b7fe7df562c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x4, 0x10}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0xd2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000640)={0x40, 0xb, 0x2, "f072"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @random="05f4d3d8e96e"}, &(0x7f0000000780)={0x40, 0x19, 0x2, 'MW'}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xb7}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x8}}) 1m41.715088971s ago: executing program 7 (id=864): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c012001008dffffffffffffff0000000001fe"], 0x0) 1m40.164795139s ago: executing program 7 (id=874): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000001780)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x15}}]}, 0x0, 0x543, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100210104000000000000000a0000000000000100000000", @ANYRES32=0x0, @ANYBLOB="8e1cc985c54895e0edfcdfba11a72b648dfa8ec1f4195f1895ab305b6021ffbf717b647d38dbfa8e21037000c1250000000000"], 0x28}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}]}}}]}, 0x48}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) fallocate(r1, 0x0, 0x9, 0x8ffff) read$FUSE(r0, &(0x7f0000007fc0)={0x2020}, 0x2020) 1m38.793208452s ago: executing program 7 (id=878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=continue,dots,dmask=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRESOCT=0x0], 0x1, 0x20e, &(0x7f0000000400)="$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") mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) (async) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=continue,dots,dmask=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRESOCT=0x0], 0x1, 0x20e, &(0x7f0000000400)="$eJzs3T9rE2EYAPAnbdpcVKSbIAgnDjoVdXKsSAUxIFQy6CboZKZ2SV3a7+DiV/B7+QGkUxZ5Jd4lF9MkDaW5YP39lnvunve990/IJUuepHgWQz/ufIssa8TGXuzFoBE7sREjpwEAXCeDlOJnKqx7LgBAPZb4/P9V85QAgBV7++796+edzv5BnmcRZ6f9br9bHIv8y1ed/cf5HztVr7N+v7s5zj/Jp787DPNbcaPMPy365+P0dkR0t+PRgyI/zL1408n/7t+KjyteOwAAAAAAAAAAAAAAAAAAAAAArMu9yEeq+j6bEVHW99ndnc63y/o8xdlEfaCp+j3NuNssT6vyQOmkllUBAAAAAAAAAAAAAAAAAADAv+Xo+MvnD73ep8MqaEXE5JXmjDbzg0Z546UaXxzcvKL7zAs24nLd26MNbMzcw0VBo9yic6ksrnCB7dkv7jJBNFe44bUEeQ1jtRdub0rDYPa7YFQWY2737YhYPPrDg8tOfpBS6n2/f3h0HGlh4+oZ0arzgQQAAAAAAAAAAAAAAAAAAP+xiV99j329XRyztc0KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOpV/f//MDh/ZWFwEhG34sLGo7G2IlvrWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi+fgcAAP//9DweRg==") (async) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) (async) 1m38.662320906s ago: executing program 7 (id=881): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000840)=ANY=[], 0x3, 0x1b5, &(0x7f00000003c0)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1m38.5460794s ago: executing program 7 (id=886): openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0xe8) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000060000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m38.386405085s ago: executing program 35 (id=886): openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0xe8) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000060000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 6.38388557s ago: executing program 0 (id=1414): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x86dd, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @loopback}, @address_request}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x2, 0x9, 0x8001, 0x2ce61def}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 6.367716151s ago: executing program 0 (id=1415): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040411215500000000000010902240001000000c609040007020300010009210000050122050009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000a7bcfe7e98c9ef821ef2273013ed28deb8650c556041a85c363e2bf631a4eeb1957299c27e5269a1e777511959af27f2c579c41abbda25a51275e88b63d12fd80b20f09a2192099cf212bf337e0306c3d7d499f2fdae"], &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0xe9b}}}}, 0x0) 5.174485688s ago: executing program 2 (id=1419): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@shortname_lower}, {@fat=@check_strict}, {@fat=@dmask={'dmask', 0x3d, 0x40}}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@utf8}, {@uni_xlate}, {@fat=@nfs}, {@utf8no}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8no}, {@utf8no}, {@utf8no}, {@shortname_mixed}]}, 0x1, 0x38c, &(0x7f00000015c0)="$eJzs3U+IW8UfAPBv+pLdTeHX3cMPioISvQm69A8eFA9byhaKuaiEVg9isFuUzVrYYHB7aLpexKPgUUHwIh704KFnERTx5sGrVbQqHrS3gsWRJC/Ja5PdVnS3Lv18Dss335l5M/Mym7zNI7MvXE+rZypx9urVKzE3V4ry0vGluFaKhchi6GJMmpmSAwD2hmspxe9pYJTMpkRjpV0aGgCwQ3rv/6lbzLz++Xb1k3d/ANjz8r//q9vVmZtM/fhE7+e5nRsXALBzJj7/f3Bcdv/gNn/hVn956g0BAGBveebZ5548Vo94ulqbi1h7o9PoNOLxcfmxs/FytGIlDsV8XI8YXCiklE5/339w4mR9+VCtVuvGTwvRiIj3Oo2ItW6nMbhSOJb128/G4ZiPhbx9frWRUspOfFJfPlzri4iL3X7/sVbqNCqxP+//2/2xEkeiFv+faB9xsr58pJYfoLE2bN+N2Bx/btEb/2LMx9cvxrloxZnqqUhpeFlTX75wuFY7nuo3tO80ZuPM6Cws7OIzAgAAAAAAAAAAAAAAAAAAAADA3WCxNrIw2v8mjffvWVycUt7fH2fQPt8faHOwP1CaTZHSb6890ngzG+zVM9wf6Ob9eTqNcuy7s1MHAAAAAAAAAAAAAAAAAACA/4z2xkw0W62V9fbG+dVi0F1vb+yLiF7mlS8/+qwak3VuEZTzPgpFtTx1frWZsmHllN1QJw+yXufDzIeXRiMu1pkdzWLqMHrF7Zkt6vzvgR/eGWfuy4ZH/nNcJ4vpE8xuGsYwqETE2oGIqEaMiirjKW95xo7mwZFbnNXLKaWtjnPh+clWUYoo//0nbvsg9YIvrrx0z9H2wUf7mU/TwEMPz5+6/Pb7v6w2W72ee1ofzKy3r6fVZv54+mJbKZW36DQrrJ9Sfg5LxZVQ3m6omzdmmtk3v56+962vbm+mqZh5dUqdbDCdj9fbG6X8N6VfNDMIermbWlVbJ7OI80tRPE5lyuL/Z8HUxXbw3aXmpQvf/Xy7xym8SIw36qj+268/AAAAAAAAAAAAAAAAAADAWOG74rn8y76V7Vo99lQezO3s6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgd4z//38h2JzI3E7wRzcmi2ZX1tsRB+70NAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuMv9FQAA///XC2PP") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 4.299369926s ago: executing program 2 (id=1424): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}], 0x20}}], 0x1, 0x8080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x2000800) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x400, 0x0) 4.174067809s ago: executing program 2 (id=1426): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x40, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="201504000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x40, 0x21, 0x64, {0x64, 0x9, "eeb55fabd60ef823582d60d10757ee0b4d2650d980c33d0f36a6a5e2bdc7b40c97b4c53e4e8c0522dfbf7c7e368bb9a01562d175f10d48d3c4b3f1e2d44376c36039e0d50db337786481b3dfc9f2de1115f8579c905c964f61b084450603187a4a3c"}}, &(0x7f0000000300)={0x0, 0x3, 0xb, @string={0xb, 0x3, "2b3f81c48bc449cc4e"}}, &(0x7f0000000340)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x7, 0x2, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "04126bb96529783859a6689d86340206"}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0xf, 0x2, "f20ef307", "2bdce012"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x6, 0x7, 0x1, 0x6, 0x101}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000440)={0x0, 0xa, 0x34, "389e87c10baa3b598516fa26e9c78943520a9c9d5cdaf75e5d8b1346b8b2d49902c7cc8e3b228442174328b67abd2b7fe7df562c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x4, 0x10}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0xd2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000640)={0x40, 0xb, 0x2, "f072"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @random="05f4d3d8e96e"}, &(0x7f0000000780)={0x40, 0x19, 0x2, 'MW'}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xb7}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x8}}) 3.450385632s ago: executing program 8 (id=1427): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./bus\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x100, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x10000002, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e000000200000000000000000080fe00fe80000000000000000000000000000000000800100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 3.312040146s ago: executing program 0 (id=1428): unshare(0x64000600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00", 0x20}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) 3.183024461s ago: executing program 8 (id=1430): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x2, 'vlan1\x00', {0xedf}, 0x46e}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000080)) 3.182390681s ago: executing program 0 (id=1431): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xf000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 2.789947353s ago: executing program 0 (id=1432): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x40, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="201504000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x40, 0x21, 0x64, {0x64, 0x9, "eeb55fabd60ef823582d60d10757ee0b4d2650d980c33d0f36a6a5e2bdc7b40c97b4c53e4e8c0522dfbf7c7e368bb9a01562d175f10d48d3c4b3f1e2d44376c36039e0d50db337786481b3dfc9f2de1115f8579c905c964f61b084450603187a4a3c"}}, &(0x7f0000000300)={0x0, 0x3, 0xb, @string={0xb, 0x3, "2b3f81c48bc449cc4e"}}, &(0x7f0000000340)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x7, 0x2, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "04126bb96529783859a6689d86340206"}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0xf, 0x2, "f20ef307", "2bdce012"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x6, 0x7, 0x1, 0x6, 0x101}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000440)={0x0, 0xa, 0x34, "389e87c10baa3b598516fa26e9c78943520a9c9d5cdaf75e5d8b1346b8b2d49902c7cc8e3b228442174328b67abd2b7fe7df562c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x4, 0x10}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0xd2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000640)={0x40, 0xb, 0x2, "f072"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @random="05f4d3d8e96e"}, &(0x7f0000000780)={0x40, 0x19, 0x2, 'MW'}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xb7}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x8}}) 2.312960798s ago: executing program 5 (id=1433): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 2.285276218s ago: executing program 5 (id=1434): r0 = inotify_init1(0x80800) mkdirat(0xffffffffffffff9c, 0x0, 0x1a2) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000080) symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00') 2.283914398s ago: executing program 6 (id=1435): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}], 0x20}}], 0x1, 0x8080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x3b4, @empty, 0x14}, 0x1c, 0x0}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x2000800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x400, 0x0) 2.263510929s ago: executing program 5 (id=1436): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_lock', 0x202, 0xc4) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYRES64], 0x58) 2.207837701s ago: executing program 5 (id=1437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x8700, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2.207581641s ago: executing program 5 (id=1438): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@commit}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@bh}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000200)=[0xee01, 0xffffffffffffffff, 0x0]) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0x1180000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{}, {@allow_other}], [{@obj_role={'obj_role', 0x3d, ')'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x13}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) 2.122784374s ago: executing program 5 (id=1439): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040411215500000000000010902240001000000c609040007020300010009210000050122050009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000a7bcfe7e98c9ef821ef2273013ed28deb8650c556041a85c363e2bf631a4eeb1957299c27e5269a1e777511959af27f2c579c41abbda25a51275e88b63d12fd80b20f09a2192099cf212bf337e0306c3d7d499f2fdae"], &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0xe9b}}}}, 0x0) 2.095397504s ago: executing program 6 (id=1440): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r4, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0x4) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x25dfdbfb, {}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 1.250661251s ago: executing program 2 (id=1441): pipe(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x2000000, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.250214571s ago: executing program 2 (id=1442): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x86dd, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @loopback}, @address_request}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x2, 0x9, 0x8001, 0x2ce61def}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 1.222725682s ago: executing program 6 (id=1443): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}], 0x20}}], 0x1, 0x8080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x3b4, @empty, 0x14}, 0x1c, 0x0}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x2000800) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x400, 0x0) 1.220975902s ago: executing program 2 (id=1444): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000009c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0x5}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}, {{&(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000300)}, {&(0x7f0000000600)="27e4954eee3dacccedcf9fca0d4afc22754ea11643950a30dece7a4e21681ea39e22fe130d648c8db38ed38cd893c260b53fa9a07ec72f1c1dba29bb0d8a19665344380c15d4bc70b1da6baf75525afde4a19a8a89c9ce0f7a25cfd0b18b55e8bc42bf10627e8403bc697e88d2008baadbc2090232930ea01729b67e8a09062c230b673f093d71474389d095526d62348eade964bf547570f5bca631ff5d418d0cb87ca250bbc9d2b3cd2197918e7e91c2da02f3e70b5dd7b1bb362a036180591860261a", 0xc4}, {&(0x7f0000000700)="5113b43e626023c0110b0b36dde1e151437c0afa6670aa6ec3bf96df0bbb8e170063fa77f9183f5525e7ce920ac897924bdc224d817afdc68fadc8bc8fbd4321cdebb8f91dc6709baec2587422e1da42e2290a", 0x53}, {&(0x7f0000000800)="42690633bdf388597566ba71def6f276", 0x10}], 0x4, &(0x7f0000000a40)}}], 0x2, 0x4000800) 1.078160216s ago: executing program 8 (id=1445): unshare(0x64000600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3", 0x22}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) 1.048014808s ago: executing program 8 (id=1446): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r4, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0x4) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x25dfdbfb, {}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 1.035564818s ago: executing program 6 (id=1447): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 1.027926638s ago: executing program 6 (id=1448): r0 = inotify_init1(0x80800) mkdirat(0xffffffffffffff9c, 0x0, 0x1a2) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000080) symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00') 1.017972378s ago: executing program 6 (id=1449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x800029, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001880)={{r3, 0x10, 0x6, 0x8, 0x3f800000000, 0x7cd, 0x0, 0x7, 0x1, 0x9, 0x0, 0x3, 0x40, 0xfffffffffffffffe, 0xf30}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000f2600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000f2800)={{0x0, 0x6, 0x91, 0x3, 0xffffffffffffff64, 0x173a, 0x9, 0x682e, 0x3, 0xa1, 0xd2, 0xffff, 0x9, 0x3ff, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000f28c0)={0x0, 0x0, "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", "64d68e460964a7fba077cc6ffb9dfddf9cd6588f2cbeecf558a04288e765f6195ff5a602b001e73adfe9fd6e080f7200da2b4e4375756e05157423ceb3fb0e04b3e6fb04f7a8e89e2470d12d82b1c46c7bc8db1b4ea313cbe624d31c61f012aa9eee34e2335d84e6d4ab7d84937d054d2512071a84cb618e2f2e355420d6d7268e6c46288446df94a5b77e3544cf9b270b6b2c7e35bea5f9174ff751659d20a3ccfc1ea17a1ac1cac0d84bf545a8c3bb4bd330a49e38a98f741b644c374850aff037383881f29581376208c37d2a403dd22190f583c1752e4e8073f2e133a8ff25b79cf6eabfdb3b3cf7e793bdd42263c3d09a64767040d8e4a97c46b8c0cf36b54cc1d8f1d82e3063327cf96f28319b978aa3eeb389fe8dbe78d23d11ce12c648799dd255f43db227d44c97f962de16876db1d16fb363ac742775cc4c911901e405e7be61cea759260258dfc03ce7365279ecb723597463f4f8c63d32f98966c9f1339c23bfad779d09b21a947e074648389b80476f39d95d7b340683e3ab6a2e588033867691dffd7fce6897b91067433deed93ec87fdc2ba325cd5eeab9fd51c81b446b41a922a99bcfb252272f85652c387b8a1eb21f21e1031bb6f4dbc09a2a30390895108b336d2cf889bec25d43e10ca5b11a8641c50c4f86142789524d1dac940534860073f50147d3ea20568853714b03f033ecb08d74b9aca2aa20e49bec6d0aeabc6efb4cc28064a3ca58be47aef584d68f1525421a1bd5e813d11c3aa257fd2a2ae24abb5f11139ce12f52fec44754cfa471af148554a80fadedbba7880d1c3a5d769a4d1aa1371adf4c49978f65be4a814b0b118cc1bb5d1c4b0ce0c0f61bca5414dbc167c1db2fd8263d2181605a10b50618df9199808b97673bee3b4c822fa918c35ae93d15f5e386957c9bf6a9f57ba653204d8263a6bdc44e3f42e6822666a44cfcd1a77e235634c52ce369e87e0c90467db830a264d1ce749a0e6cd90e0587ca9e669799bc4200d3a144b5046a243fba69c24ccf61e451ca8a0a91eb90af2bf944429356af4f95bd799ce253aa2d9d506b4766e5f48ded52a7f5eb65c5baf4c4fb83b9626f5df5f415408ba6b479308a5f99f9c8b553ba8ff78030e71958c7772d0697451626e6f2ad30251872597962bdae4045bc9b07e7eff4af072f0be16996a74329cb7270be560cff7d5c1342201793d362075095990a6f813ded7ae47e880bfce9ecf8b3d6b0ce737f1a57138dadfe7890edf6219fdaf3d75497c2dcdb64778bfc5fa11ed4edc0aaffe5db1e3f382736ce2ff6c78c7d3bfdc4514fa2a9abff0dbf4bdc103d3af6653ff7895b9c133903a108891f25f9c9072996f6a999f9974caea9ab1a060f1a56db13e86203ffa5e97a4426705854d5cb2b954921be88d25906e0c9288eb96448596b6cdacf1e11a07d0fada05dd8be0723fdcdd7391f1e998e1479f3198b227f0a18e4dcd6c71739ae3d30f71f244e4821b640ac9eb65722b78b13969c9c9c314a6d5b1dd3c6b31bbfce6873039e4235599f73cd6e6405812b6512245b583af89f3a1bbb6fdd5053e5d3eb570babc317e93acb0e8ee297f8762c5f0edc4700f458cd029f2798a3e1e5fdbd15ee7807cc9eaafca1cfedbe1215721d481f632147a7f90972f061b9209aaa4d5dc65dfbdce45c5b766b5ada5e50ad7c405e1be2fa48459c5ab3366dbb6adb97e8f0fd30112f940c641c04d515337a2ec641a75a2317de9c0e892a9318d84610e609415b9c85852cabbded3cbbdf5ecbbcedf44a7fc0a63c9d410c0a36ffc4a41767d09fe66ec00fb9d6a1c690c3d44373cd4141a685308d1354f150c0fd60e2ed8d28f7fc8e0f9fae7a3c5fb1f5f03e039964d952b345f6fa16600327849cdcde21a62d88c1f9995461155a09ca0e6425ed9f8095df873cc339b5cbea76b95365cb5043a0bd5a2ee0b7f397b2c343c9e06d4c3769cb626b566d27dc5faecae6ef065c77e80eb0947acc2e30e8f70be3b0c21e9e203ff7235f5e7d2d03ceb179043714122877b2db720897a4e2eb0d1a0bb3d25c7839f89f7c8eff2d3c66a042154ace9d20e8c22a1be2bf3357a8628e6d99bf71b02b87a899121a7c6503299bcea1357eaebbd9ba777300b690787964e5d4c9eb5b8161a36ce4e4230aebd525573929f20fd00f49e6494119c981dcd4e2525d35dfddf81babcc10a568984df4696c96486a3d7bd9260dec3eff69a87ae9fda77ed20f7672a3ae2026d9f61c6197576f3005e8fd67b482e8ba0a074dc56a9785ee86f32dd4697273b6d71977afc1fdaba6a492ac5f75e3574e59fef0ac6cf1eed04eb8a13604a7cf2c46f0f43ae904bb9558200b0f090dc54a93ebc160838ca28dc25569ce67408049efb75f7ee74f0454f8bfb2c592c463ff5969e1d6d45c720db263936e4a5059eb8ab6d76426b677e946b304062d5f25f8a468c5af1f5c4bc3f5edeb6252b386a0185466777de6a08c0f5b28287786d12d92d82072bb32c27c25a8c44babd82d20503ac5d72a42cfa6d0b8ddd80fc6be4373b8671684721c243a556d6afd1cb6fd84a418c5c5df836f6573e95d37afa125d8e2c7143510c7ba5f49d98a6351a10516457a8f842b594403583c212f90eadb0537c1d84f8ca2eef0ac249aa9c08c1ebaceab652c3b366c5d4702e6aa0b39037aac5cea7c033f522cd41fc0b46733174cb9e1de3994e8eb5e5d5850b141068022372ef7d44ede0e489e1605256911eccf30c7a08229b92a4fbcefbd307d9a8914fe1b846b86cf993380fc76fe478f4d7613bc47a225a012ca0c9173253de70caecd80b7d272eee0b4a91e5a74553b85a66e4fb5b57bd433d1a581652e80e46e972338163a9c84c1cb077f8887f5b4d4fc435225aacf45ebf4d8833654427d0f0c5d55d08bfd9e48dfc9575a660ff3fba913fb7c6053103c0cfc80884dbc4f0da6e633855e8551349bec1c836f522c0728027d96b56a8f7575390351fd6407317d90aa5f634d17b4c665fba80513b4f4c6db5d1812797eb2bf00f50ae3eada569f96a38db88a7015495562aeb3bbb0a19cc8a1c657124caa8fa8ae46cea1a63381f534cbdbe113bbfad5d0fcfed168e0763f99c64f447ee4f64605cb870e241bf41df532370718401e7c905930a33472a38caddd81172d742ce0df72595695e94c66bf293890f6eecb6c42961bf46a2efca2086abc8d084600c0b827683aa0cf7068cfd241570996893a74e9a6aecad325f6a21f653ef07d817dcc114cebf50d3edd1a26821cdcf74e8746cd87ad2e07c6e3c27c8702e6e5fbe4cf84b98b0798636fc31ad9ac16052af75ed23cd35c68620c5eb06bff11608fc41593094080bfdf497538c878e7b51d3984ae2a2a85576c4268d4a133f3e76ca43d0b6ec45727ad2ef1e28b2e9db9072d6af2279ae85efbb85b686d3bfad58933b29a5e54e0898464dcd7d61ecdabf3693211976fa6bd78fc84b8f63525171336f7ff8ce9ad6d183817e852f2326f901ae0ae8c142cdeea9f82226d6e73758721633a646aa7ae1fff7729e0c16a5a494ba194da8d6de2a32e44f9be207b554c24bdf3d822758d652b9adcb89b9b50e517c5de9079266fff380851fcfb82585279f8a4664138ded2417a0ea635d824fd7df3cb58db396b20fa25bc4c232fa703e0fa6c0b6fbadcd4469b94ef75e39b8e193e44daf411ae06b3247896addfe7abab5c8d532041f38b9b23994cf0c0dc670f4c9c89be157c03316f1f080d64db8da170d8f1a73a91b5c213f3d2407bd3b1c4fea31a62bf003ba8aa52359b6aa9b587b5b8ae77a88e452e3ebaedbe7096c2a5b622ed8b5b098b02fa9241659442e4f6bb30769fa1234d225be8060deaeb7c0fdffc1341de744976502a61d1a4f2708525c499666bcc758d2d3aacde84bdcbeacf17f6150b4377c0c5cf3c2c6bf902f7916f3580c0efd7d7fa20dad1dc762a1c20bcc54002ecccfef1ea20377f9296eae24decb5941b8cf56b4059143ca0d5e3d228479bb4db6b7f1efc25d3aa0404ddf04d21eec586d1e0245d4c4212fa1445771560759db67fdcb05722f7bce45b4740a67e7ac38117d58566d09f4469221f95033c1df467e92eba88d73d6e425a342099877ecb535a1d58f23ce504b263d46ff7861faf0175773f9bf6b82676b78048b72f22fa2370ffc283ff4ca194a0145af28b0adf0b9ba4dfaab9fe1fff5ad739c0626d4a3b53013bc20b291ab27b69a5e55bfbf60e66b5f7fd1cfaf5578fb91a4dc16a698ba23b58db58fe8aab1fdb784c5e82c46684d1f59b76a7b40df07e852e6bd69e90a754979cee09d85e63350929dfdb3d38eb5c8ff05500e8efad211cada572ae1b24e4e744dc53a70fac77996e6219937ebb0f17d9aecd89c4c1391e3792ef4ad3dbe2a9ffbd8f2df350a671cada8fd068b515dae27ec8985e1ed1394f37d50202e219b969f2be48a1fb2126d120a5eac3ba2027816252f797e21ac4fc4475fcc6a9643c60beb0616cc04eff7975c1eaec4e7fd9a5156c8c07935e407a6640fc8348100b2e10da54b490f5c423ac40d101d795775831de334d40fda2ad13cdfe6ba6be3d2c9b7adb860ea773c37e78ea4e6cc32043d06f05a853ec41978d968cabd079a9c93d97cda61b8e5c35b0816ba4334d8e8e77c3a84033d59326c307100a95c28be35ae63d76b3a7a072bac7e02a92a2e6d902824cbd551e667fc880ff8b5b474596fe3fec65ff8c1e2fee84e6f792740e481580461795d23c32d4cde5080be84ac4b7338a54ae9150144c9e32c194a1b1e52b288930eae215a74b9b7ea83faf35b4b45a3fc27b3e8efe8f3ac1cf01d403daa17250df8cdd6e1386b4c076b8256080969ef3cd7ab4420c97f8506745c760623468b5654ab09b20673a47bbcd73dd25e82866a04d0b74a0f004f77b60f9672e26cdbeaffcd19c429e70c1e8d65cfb47f87547566dd500decb0735e7996047156909bd35bb2f40fb414acb446bc5b55d28d422697cc3e4c8b73c9702231014a082630e842764468b58aba4dba4f6d08dda185849548ec71e31a312acae756c45e279e6984dec6703e00502342bcd65f2031c35c826fb04c17bbf8f664153446190f4967c1e1adadf9a570f8933eb5066479f2c66f20d1e9bb499346ad90184c06b6b407bd234c0bbebeb2eda152c3da0ef0487ec66f40bf58388d46a04cfa08bb59d4aece497ec34703e56e6b3e818e02e4881fd57254bd12c1a327b86cffe0f4d1f62b50698ecd5fbe1cc2c4aefc71ef2625b060cbc7b76af38a2fcd1a7555bee80878572875aac76f307da951a635aec6f6fb9d122a2bce788337c08fdde5d9af00c2a7031d14453c8cede4cd5c106c5cb757d84baa8b5bd2c371ac4446acbc9b5dcb5c7bc3d4b09b3c0e0122f3f257a"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000380)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000001880)={{r8, 0x10, 0x6, 0x8, 0x3f800000000, 0x7cd, 0x0, 0x7, 0x1, 0x9, 0x0, 0x3, 0x40, 0xfffffffffffffffe, 0xf30}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000f38c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000f3ac0)={0x273a, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {r5, r6}, {r8, r9}], 0x5, "7c43dd97f1d1d7"}) r10 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f0009fc000000010220000904010101010220000905010940000204d80825010230cc000009040200000102200d0700082501010f04100000000000000000010000000000000000b4730e2101a7e25c1335f94e1be52cc0295d7ba40d8b8bd8a5d180de0b010a287e3f8e88d4abdc06d8bd4de6b8851231f26692e5e4a2106d755f67af46bffeaf56f2dd93d1c44fd588463fd29b971d977a749dc9676267e08c546b0e62232a29dba9a59509fe819f81e2cc05e94d794db284057eadce94e8a93dbd9ecc58fd3e324080bce0820063893e1a7f0f4438442b0c72eadd8486b4ce5bfadcdb2ea54f4e529affb16b6118f2ebdaf1b0d5b50fde6dd919f611802d0802e15000bc4dfe480b0fcd06d54a0d66293952c36ca36086dea4fba923ad3c7e246f1cd93b97a8a27c1943917ee368"], 0x0) syz_usb_control_io$uac2(r10, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000001cc0)={0x84, &(0x7f0000001dc0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000240)=0xf) ioctl$TCFLSH(r12, 0x400455c8, 0x20000000008) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9, 0x5], 0xeeee8000, 0x202}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x0, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0x0, 0xff, 0x0, 0x7, 0x6, 0x9}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0xfffb9fff, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0xa, 0x0, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 107.829507ms ago: executing program 8 (id=1450): r0 = syz_io_uring_setup(0x12e, &(0x7f0000000040)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000280), 0x0) io_uring_enter(r0, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000002c0), 0x12) sendfile(r2, r2, 0x0, 0x10001) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000800)="240000001e005f0314f90408faac470002000000010000000000080008000dc013000000", 0x24) 41.140009ms ago: executing program 8 (id=1451): r0 = getpid() kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000002000000731135000000000018140000", @ANYRES32=r1, @ANYBLOB="110000001812000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000ff03000000000000070000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYBLOB="700000000009010800000000000000000a0000023c0002000c001280050001003a0000002c00018014000300fe80000000000000000000000000003514000400fc020000000000000000000000000001080005400000000b0900"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x5f25, 0x99ff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff020100bfa30000000000000703000018feffff720aa9fff8ffffff71a4a9ff0000000072030200000000131d400500000000004704000001ed00006b030000000000001d440000000000007a0a00fe00ffffffc303000051000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r7 = syz_open_pts(r3, 0x0) r8 = dup3(r7, r3, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0xff) close(r2) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r9}}) write$UHID_INPUT(r8, &(0x7f0000001540)={0x8, {"6d2d3331d21dc30ad903ed11aa85c7959df5d72473a5c13947266c36a00cc3b6e9ef0d72031cbb00486ddbf2eeaee49db3c790c2ae01559e20cab4ae6b8b31b351e711a9cb1953ca9cf0e97aa5b134ef25f874cfba9dd13d7f14373fa456bc8c37c8fd7cf64b80337f812f917744b0f4b56213a443f7f900e8b338db8fd00ac885f1363ec3378d338f3dd336b4fb59a7fa5d5d6603260580fbe126ab9506f94fd17385bd8e492f9af9adaaf228ea6c18630720631cb2b44d29e5f9953f8db3867b4bfcb9314578b0447a2ddca554ab7804548badd8aa6bb98b381d88979442fcb11cc2490ae7b196c2fbae39c72ca1437e67af0f173f399943f5846fb73572fab99435114ae8bdc4463fa95ea055e1b2b8e5713d76dd449bc6bbd08d66b186aceb3da18c5915307fe456fdc06df5d27b7790df88475d9305fa3270c54303b7b18603f4b22c5822a131d162e23c789c8f61adad2f581df581be0d6ad66323cf095db8d4bdd43065f3d6f55e0a68e6470a2407923acdd72222d3064e80af2da4a940ce091a35d0f86dbca5a3ab3ad8ff367cd86648cf8f7f491c6fc49de79fe9b34037af175ebe16d45f9fb2367ccbf0e614fc7cdc79ca24fc734ff5c28e9648f5639a86719ce0261c22fe68d26f8eb9fab80e6aa4f579ef9e3ac7f1893adca721f4bdcdcb1f40f1309dd43de2307af4c49b5bff20c7e43a145a87fcbcae9596aa3608f4239ea4ba91e0caf6eafd2757d94063f92fc54cc898a2e6f83f94a095dff473259ed2491d973746628a27a84909eae9d0c3d71ba7012fb4157671f6425cd49e4f9ee40d051e439ac82322e7618b68d7bd27f234d285aed2debefd7adb0abd94df804d1b28cf85ab1f145c2ab86dfe35dd47639569ac19432cfe162c9c31fa3279965689d86a90aef93d2f94cb5871d190b71c8b6f183870540f376c8b511d8e823162225a1c3905ea694f1c8e0eabb40769b530fb96e996de568c395828ae11797228fafda37ea3e16d073f8afd58773eca6896e10fcf5bd9f8a27a573eebee4c2ddb83ac7fdc0efda5859483a27e5124d1f224c1ec12c480d2e829cac63720188d69f77e34c2057924a71aaefab1566c11d553f1e476da603578b0add3253d1c2a743efc0c12cfc39e93401999338020fd483e03a8d054cef91e6aa4fa26ad32dbab88b26afdddeddca21239c0c384ad66de1ea74813c709805995e21b209de90710aff819c558307f13de2d93f02ed2555d91b7ef8b553885c5e2d6a3aba0c2365d94154e03170399f4e8a714c1d9bac0f4e98fd29c00733c40e646515b6584bc103e2ca0e99a539187d4fbedfecabdda4f58a3182aa3dc4d8d1e25ebc77f72db9a1a23d28c47a1463cd4437d2f404b474a4a1cd0aacd24909aabe9cbcb6191739b61049db4720714d0a2b0d31652371cbd5bccc9efa0abe5446e47c4da2d68828f09f9208bc4fafc9ed80fdec3b3fd92588ef4f283b7c808bbef10119438c808f2fc6f14e3dfaccfc431ab66e18fe111a464dc37d40359fe7b3b610d56014c403e396fa17c0d36fe74132e405525cdfabfe59d0df1f99a9c7239bc70c8b8a74c0b99af87120ab207a8b16f227f19cdae53d9489b00bd97c51fa9bd210616cca49f7a29ee36eee0602e0fecc18c7c63995204964402198d748f36447cb211779fcef908d26c64249624a272ae29198d76f1e3c4db72c858510c62dfb982de4b0bf6782729c449b83877458c2421a4c6d57104c73d16b846b772d9053dafa8d7a2d022b4ad7fa30a532565045a9c5c19adff0a793c0e09813e805cf3ce619884993e187706ced90afa02d27df378e1971eb28b9fe2b66a1a8736f600bef03c25258c553172966425cf4845ed6988d202309fd30b3e70bdd84e4a1b6f96542ebdbd9450e3b945d2a9de92fedde05e7ad23e65ff268165fce01e283fd965606eb337f23d1a5f126b1e41b720336ec635c97d9ffd7e2661723f2ab75584945f9b4441ed50e65b6bc35c2a053942f1a2271315e3a222f94204e8ffcad309126ebf570f22046e9322f0f52f87c9f70800607856bd75411c9a76e57d2b07be924c12209d26eafc8933a3486c3039f6cfe75434a89cad67b27efccf7e1b4ee937c4e3db246a8652cb5419513aa01aedc7166969cb8c5ff451adf3e04b3a6bb75fc020192aec2baa63d6629a09127c4af2991f73d4f1e231a1aaab26971927be4572eabd3139d55d2c2a58b1575c797430fe3c836f70a926dc3fbaf5bf7b3111b9cb1a469e91a371c0b177d2a9f0fbef86e98b4b7b186119d259f1b7ed4ddac3b80dc7fc61475e1fb14560f97ef7381e9c195d000bc5e6309d17da74da31c731c8a68f3ebb7a0f1161060e42035c62bc662341ace8a6ca88ba5ec5c2d766674698f2ee67524f52449f0678035d12f9135f373cb916f5bf11608dbc8d68694339c0c0a8ac83ef6dfd54264d7e8d2e9b293dab19c174766e86fc47cb686815ee5bfce5b4f9d322c59c9ea15e5dfe8d070f76b4287d2e2800cb55e4e18ee170e597a0d88e0937c4953261b6d28905edac1ae0784d970a0db0071c2c2eb4a66cf135cdd0e42a6a4c180bf5eb62e39edda64cdfea39c02e36011374e5700f243061b723d8d6df54922556a57f4a0d1a257f8cae15e4c745a80bdf80c932b65205e4c9511f6d2589939067e8ac63ecbac0cbcd3b99a5e6afece741d61c60e82f75f8f60ed83f838d61f759c6023caabc1f1e31ba9ba9c0dd8f864e821fde5c8d1fcbf91195e1fe41398983cd8c08a355d64347a513c42dcc5175d3a99ce7972c9ceb5e74cdeb73ab540f1e24cbabfe44889cb100f589264c806d935fc7667735e3b32f89d8f05baec45cc9f1c0a3f66ea157dffd24f9cadc7645bfdea2895e27d197197e350b379f329793ed45da1115ab68ed980050e4c6ad06b1cdd89b4fb50cab3e66f399eabef40a393bc0749be4df62c11c22048cc717b4cb8af2bbe1feecc6de10c3c55d2bb488cc678d37aab03f1e29ce8d42a16bb48776049960954886dcdf4cce2e0fb371526eb6e3643cc8ce50d763719241166cc4321193d2fb05e17f10402656d71f854a136b2ecdb744a9ea28f54b5caff43788d39881f7fc26ee31d7fcd4e14752800047fff9f1874d880e52e29de05c17a2535cdcbe44f5f12f99fc556d1025742b7127190995668e64bb8778d1cef6399285ad36ff3f85300cba64588f3345a15b92ce9a6d096ad4989f1953ca85d801784d1728b7827b5cd5e8f0d1ec8b4c192fbae4c657a6e67020e4f651baef222d5e44f720aad2427a59e528ad40acd4d334ab5ad71a56287e5036e8ea7fb40d612d7b07810628dcb0d23b5fa7d11cd8af8cb3526de94fb96f06fb3c923840f4862b80ddb1491c181b95d6be015d96796600e6e92cd6226583f4a0bd589966381d64796f9ae5970aa8ba041ea7479cfc8e2f77ba1e747770d8ac2e5ffa79e7850d2098bef8db3ef1e8a5610d01cb2ab0411a8d2e52e38f1221a67adfece19c27f05d60801132af438d3152607150c26aefa80a3b093faafeb6bcfdd595fa53bf125c6c484379f1c5dc865aca60b7555c5830eb4baf72a9fca54e3d7400024f10d527a914ee78ca97899f92b0af34c9c7118bfb1aa4305ad751a01d8d039519589e8e036380adefd2835c7f59c43c2e9b773c7d69c3cca917cb170be51e3767f95441c80b213d918c0b3180bfc1dadb63d2bef76dc825fc977e07b23883a19bf84ef44c92f5f647778b061f7a719e70df271ebf6d238c5a31c483836ebf52425d276db2b3c1c826d8722e3306b0f284242d279eb4300f807bea0b7c2140acd4631442fb01acd955765d9e8a3e22c0d7123996edff4c2f85ef3106cf309a436d9665c89092c7b379d799fe86c6ae1bf0509942cc1663756e7812de09b5d10391d8d6b4da1ccfdb3bb0e036cd3dfcecd173455d70d8771030366fc6af4f15bd664993e00384cda76ed0ead6263949e249a191d56ea90edfff181f98f1754d8f90e16a64e8d8d9e8264c07eb9c72fb14bb8e840fb51c6d16137d363ee4f72a9233672dfce9b3680352d924857c6475517d0855e71062792ba76525ab4bd38a47b2dddc1fd51f244aa0586d66f883250fedb42808d812e99bddb79870fd713461c19d3e6b16e018f6cfd58ba9ac31af6c261691d3c789ce18f1a529a8171e866500e551a92f1fba59eb304e256a24f25c8584f0c89468eafb93c57c59db1c7663b45e3eb9749f486848a18507c5d08d30bdd3974cb1bd68ea18fccc39bbdf5f14530eb412b266fcfb7f173316fcb0fd6d0020074d6ef891474c135c0e95c7b7e371de93dd1c69b3b60219dbd1d3b01a406da764200e56675cba907664b5131ae60939fff2567fdbbd238c4a72f863c50ffa808974a0f11884e7dd0804c0326c4fd3ceeaf158f9955fdcef04910844ae80ef8c971948992612fff72861fa7c66c5625230fffcfeda44c23105b75bfa07540ec469d83a79507f22f1f88af4fc193e688c432b6c59bfd86e601317c9c1ae62fc38d9bcd4d9acc20e9aec978fca6917657b5759dee9c75fa4fdd6a967d9f862c8d3a44816f744b7f06a38005eedc68d55d3783c5a8a5e31731fcb9cd34cbbe642db7cfe27972ba39a0d2408768523d08de440490073868fc28a2bff406cd1e438813552c7e2757c776923af373d5dd2d01462034f1ad2e6bda9b1e74db8888ef6ab7481dd689939a53320aa016df388d7d370f5b2d609e033538ffc2a642e0b36a37ccb09baf54a35356a5328c96657e8d034639170cd5335c813d542bc1e3dc2182b5ac9cf09c6954cb5b4e01e0115ca826c9b9d154195e2e9ce4f9b435eb067f4289fa80addda5ce2c9f72da98a9735782951b0136277cb29dc95fcef10d4cdec9bf948d96fd256a59ff70ff454e2ca2934c36f3ddcff9b322069fb041be71fba6367bb58146fc5caa8227cf220ab3fa5f379683a42e4105dd0308483fcb3427edc514e44253be90b8fc80d07ae7c83814792de408efb7926b6d03a26f14ae61fb708d3ce8b7734ec32431ec7d1d2c98a2a6572823b61acc58e8dd42a9ae256c1dcf76b3a1666ac39038d03c31b3ded3565e92026d1e1da2a3be67b8f9eb05b6e1f21b21bc022ddff8d4adb8a788219ebb62f3205b57462694c670425366677f01ea25c22b71a6692d7a99df9a0901c56f647c47d850cdf711d8864fb5f6fbc2ea37bf20571fb25594e8462b62a68e966e77f1f84c70066a654c15af2b98417beedc943c8984a54d42e9dc7683fe4a3b8def3f2dd384cc25b36a73cbe74436e61427c5c964fdcf6c4941ae561ca7e3950b95f65969cd7a0cb82041c84462e70a97d2df3b9b964d608e7c52d9dc2653f86a948ab0e1d949cfd23598abc6aaab45d3d1c6c8b029c9565bd459ba43d56c63d7896f29b2e30740b959a1c162a99a56ed3405cb6392ccbe5c6ed7b9ab8efb6cffd3781ca6c898577d5d6d9beaa5e1969338d804cca6ceeff33b16b9f5f2c959cb81f9439ab83ad08ffceb6ad6eb1044f3d7d12a7812dde851884a461f8077bdaf36ebd2e0974c4187924612688963c91d7d3b05db72b40001c1ff6578436432c235652fbe5a44fb45678e891c2600c6632f03914cffd36d1f97c8bc14aa1554c217e39111ccd1368aa7059e6a601fcce13a8c3fca4ce98770f17c63ed33fc5dbfde0929d2b32c5c5132f5e4411317362ef62694370f8b96ac3afada71b7ba799fa2d415630858eb39de3b53d728f51db7ff1221be074393bf4324dde9e34d4e920ad5a498a9eceb5ceb84ab78b", 0x1000}}, 0xffffffffffffff5a) 0s ago: executing program 0 (id=1452): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}], 0x20}}], 0x1, 0x8080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x2000800) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x400, 0x0) kernel console output (not intermixed with test programs): syscall=202 compat=0 ip=0x7f7ce319ce59 code=0x7ffc0000 [ 164.516631][ T3284] loop2: detected capacity change from 0 to 1024 [ 164.753371][ T3284] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.788665][ T28] audit: type=1326 audit(1780728985.611:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3272 comm="syz.6.910" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7ce319ce59 code=0x7ffc0000 [ 164.848264][ T28] audit: type=1326 audit(1780728985.611:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3272 comm="syz.6.910" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce319ce59 code=0x7ffc0000 [ 164.916069][ T290] EXT4-fs (loop2): unmounting filesystem. [ 164.998041][ T28] audit: type=1326 audit(1780728985.611:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3272 comm="syz.6.910" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce319ce59 code=0x7ffc0000 [ 165.061661][ T28] audit: type=1326 audit(1780728985.611:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3272 comm="syz.6.910" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce319ce59 code=0x7ffc0000 [ 165.127037][ T28] audit: type=1326 audit(1780728985.611:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3272 comm="syz.6.910" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f7ce319ce59 code=0x7ffc0000 [ 165.156817][ T28] audit: type=1326 audit(1780728985.611:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3272 comm="syz.6.910" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce319ce59 code=0x7ffc0000 [ 165.183981][ T28] audit: type=1326 audit(1780728985.611:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3272 comm="syz.6.910" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce319ce59 code=0x7ffc0000 [ 165.241657][ T28] audit: type=1326 audit(1780728985.611:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3272 comm="syz.6.910" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce319ce59 code=0x7ffc0000 [ 165.299775][ T531] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 165.356077][ T28] audit: type=1326 audit(1780728985.611:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3272 comm="syz.6.910" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ce319ce59 code=0x7ffc0000 [ 165.385241][ T28] audit: type=1326 audit(1780728985.611:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3272 comm="syz.6.910" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce319ce59 code=0x7ffc0000 [ 165.413923][ T3321] loop8: detected capacity change from 0 to 512 [ 165.427543][ T3321] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 165.457591][ T3321] EXT4-fs (loop8): 1 truncate cleaned up [ 165.494780][ T3321] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 165.617171][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 165.929960][ T39] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 165.939540][ T3325] loop0: detected capacity change from 0 to 40427 [ 165.983957][ T3325] F2FS-fs (loop0): invalid crc value [ 166.080592][ T3325] F2FS-fs (loop0): Found nat_bits in checkpoint [ 166.165759][ T3325] F2FS-fs (loop0): Start checkpoint disabled! [ 166.180164][ T3325] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 166.197564][ T3325] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 166.303915][ T3325] F2FS-fs (loop0): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 166.379067][ T311] kworker/u4:3: attempt to access beyond end of device [ 166.379067][ T311] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 166.512824][ T3348] loop0: detected capacity change from 0 to 512 [ 166.529821][ T39] usb 9-1: Using ep0 maxpacket: 8 [ 166.536933][ T39] usb 9-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 166.550252][ T3348] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 166.559202][ T3348] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.569740][ T39] usb 9-1: config 0 interface 0 has no altsetting 0 [ 166.576379][ T39] usb 9-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 166.593294][ T287] EXT4-fs (loop0): unmounting filesystem. [ 166.599096][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.599373][ T3352] netlink: 'syz.6.936': attribute type 3 has an invalid length. [ 166.623569][ T39] usb 9-1: config 0 descriptor?? [ 166.719830][ T531] usb 3-1: device descriptor read/64, error -71 [ 167.031152][ T531] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.047227][ T39] wacom 0003:17EF:6004.000B: unknown main item tag 0x0 [ 167.061438][ T39] wacom 0003:17EF:6004.000B: unknown main item tag 0x0 [ 167.071565][ T531] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 167.085473][ T39] wacom 0003:17EF:6004.000B: unknown main item tag 0x0 [ 167.092564][ T531] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 167.103691][ T39] wacom 0003:17EF:6004.000B: unknown main item tag 0x0 [ 167.110802][ T39] wacom 0003:17EF:6004.000B: unknown main item tag 0x0 [ 167.117933][ T39] wacom 0003:17EF:6004.000B: unknown main item tag 0x0 [ 167.125143][ T39] wacom 0003:17EF:6004.000B: unknown main item tag 0x0 [ 167.132323][ T39] wacom 0003:17EF:6004.000B: unknown main item tag 0x0 [ 167.140072][ T531] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 167.151293][ T531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.159967][ T39] wacom 0003:17EF:6004.000B: hidraw0: USB HID v0.04 Device [HID 17ef:6004] on usb-dummy_hcd.8-1/input0 [ 167.162695][ T3386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.950'. [ 167.180078][ T531] usb 3-1: Product: syz [ 167.189964][ T1054] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 167.196944][ T531] usb 3-1: Manufacturer: syz [ 167.202644][ T531] usb 3-1: SerialNumber: syz [ 167.274920][ T799] usb 9-1: USB disconnect, device number 2 [ 167.400323][ T1054] usb 7-1: Using ep0 maxpacket: 16 [ 167.407123][ T1054] usb 7-1: config 0 has an invalid interface number: 148 but max is 0 [ 167.415398][ T1054] usb 7-1: config 0 has no interface number 0 [ 167.434046][ T1054] usb 7-1: config 0 interface 148 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 167.447549][ T1054] usb 7-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 167.458117][ T1054] usb 7-1: New USB device found, idVendor=0499, idProduct=8202, bcdDevice=f4.55 [ 167.539546][ T1054] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.583565][ T531] usb 3-1: Can't get UAC3 power state for id 10 [ 167.593282][ T1054] usb 7-1: config 0 descriptor?? [ 167.595395][ T531] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 167.610379][ T531] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 169.600177][ T3399] loop5: detected capacity change from 0 to 256 [ 169.616665][ T1603] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.625621][ T1603] Bluetooth: hci1: command 0x1003 tx timeout [ 169.640807][ T1994] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 169.650145][ T3399] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3984d6af, utbl_chksum : 0xe619d30d) [ 169.681613][ T3399] syz.5.953: attempt to access beyond end of device [ 169.681613][ T3399] loop5: rw=0, sector=184, nr_sectors = 3487 limit=256 [ 169.695789][ T3399] syz.5.953: attempt to access beyond end of device [ 169.695789][ T3399] loop5: rw=0, sector=3671, nr_sectors = 3576 limit=256 [ 169.715373][ T3399] syz.5.953: attempt to access beyond end of device [ 169.715373][ T3399] loop5: rw=0, sector=7247, nr_sectors = 5464 limit=256 [ 169.734875][ T3399] syz.5.953: attempt to access beyond end of device [ 169.734875][ T3399] loop5: rw=0, sector=12711, nr_sectors = 5208 limit=256 [ 169.762911][ T3399] syz.5.953: attempt to access beyond end of device [ 169.762911][ T3399] loop5: rw=0, sector=17919, nr_sectors = 5992 limit=256 [ 169.791690][ T3399] syz.5.953: attempt to access beyond end of device [ 169.791690][ T3399] loop5: rw=0, sector=23911, nr_sectors = 2056 limit=256 [ 169.820556][ T3399] syz.5.953: attempt to access beyond end of device [ 169.820556][ T3399] loop5: rw=0, sector=25967, nr_sectors = 2048 limit=256 [ 169.850172][ T3399] syz.5.953: attempt to access beyond end of device [ 169.850172][ T3399] loop5: rw=0, sector=28015, nr_sectors = 2048 limit=256 [ 170.002797][ T3399] syz.5.953: attempt to access beyond end of device [ 170.002797][ T3399] loop5: rw=0, sector=30063, nr_sectors = 1120 limit=256 [ 170.051011][ T3377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.076544][ T3377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.108227][ T531] usb 3-1: USB disconnect, device number 20 [ 170.118942][ T1054] usb 7-1: USB disconnect, device number 7 [ 170.163833][ T1712] udevd[1712]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 170.234216][ T3405] loop0: detected capacity change from 0 to 40427 [ 170.242380][ T3405] F2FS-fs (loop0): invalid crc value [ 170.256521][ T3405] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.293601][ T3405] F2FS-fs (loop0): Start checkpoint disabled! [ 170.300571][ T3405] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 170.308291][ T3405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 170.468901][ T3420] loop8: detected capacity change from 0 to 512 [ 170.476880][ T3420] EXT4-fs: Ignoring removed i_version option [ 170.679968][ T531] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 170.750541][ T3420] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 170.760650][ T3420] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.910807][ T3420] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.958: iget: bad i_size value: 2533274857506816 [ 171.019804][ T531] usb 3-1: device descriptor read/64, error -71 [ 171.291047][ T1928] udevd[1928]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.148/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 171.367234][ T3440] loop6: detected capacity change from 0 to 16 [ 171.376462][ T3440] erofs: (device loop6): mounted with root inode @ nid 36. [ 171.386498][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 171.415356][ T3433] loop5: detected capacity change from 0 to 512 [ 171.522767][ T3442] loop6: detected capacity change from 0 to 8192 [ 171.552267][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 171.552307][ T28] audit: type=1400 audit(1780728995.021:1234): avc: denied { mount } for pid=3441 comm="syz.6.967" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 171.563611][ T3442] syz.6.967: attempt to access beyond end of device [ 171.563611][ T3442] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 171.593630][ T3442] Buffer I/O error on dev loop6, logical block 57847, async page read [ 171.604415][ T3447] x_tables: duplicate underflow at hook 2 [ 171.612167][ T3442] syz.6.967: attempt to access beyond end of device [ 171.612167][ T3442] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 171.626042][ T3442] Buffer I/O error on dev loop6, logical block 57847, async page read [ 171.634333][ T3442] syz.6.967: attempt to access beyond end of device [ 171.634333][ T3442] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 171.647625][ T3442] Buffer I/O error on dev loop6, logical block 57847, async page read [ 171.716571][ T28] audit: type=1400 audit(1780728995.181:1235): avc: denied { unmount } for pid=1015 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 171.745279][ T3433] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 171.757999][ T3449] FAULT_INJECTION: forcing a failure. [ 171.757999][ T3449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.772213][ T3449] CPU: 0 PID: 3449 Comm: syz.6.968 Tainted: G W syzkaller #0 [ 171.779971][ T531] usb 3-1: device descriptor read/64, error -71 [ 171.780985][ T3449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.787319][ T39] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 171.797238][ T3449] Call Trace: [ 171.797246][ T3449] [ 171.797252][ T3449] __dump_stack+0x21/0x24 [ 171.797281][ T3449] dump_stack_lvl+0x110/0x170 [ 171.797299][ T3449] ? __cfi_dump_stack_lvl+0x8/0x8 [ 171.797319][ T3449] dump_stack+0x15/0x24 [ 171.829037][ T3449] should_fail_ex+0x3d4/0x520 [ 171.833702][ T3449] should_fail+0xb/0x10 [ 171.837844][ T3449] should_fail_usercopy+0x1a/0x20 [ 171.842861][ T3449] _copy_to_user+0x1e/0x90 [ 171.847264][ T3449] simple_read_from_buffer+0xe9/0x160 [ 171.852622][ T3449] proc_fail_nth_read+0x1a6/0x220 [ 171.857629][ T3449] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 171.863158][ T3449] ? security_file_permission+0x94/0xb0 [ 171.868695][ T3449] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 171.874228][ T3449] vfs_read+0x27a/0x910 [ 171.878371][ T3449] ? __cfi_vfs_read+0x10/0x10 [ 171.883039][ T3449] ? __kasan_check_write+0x14/0x20 [ 171.888141][ T3449] ? mutex_lock+0x93/0x1b0 [ 171.892543][ T3449] ? __cfi_mutex_lock+0x10/0x10 [ 171.897380][ T3449] ? __fdget_pos+0x2cd/0x380 [ 171.901956][ T3449] ? ksys_read+0x71/0x250 [ 171.906268][ T3449] ksys_read+0x149/0x250 [ 171.910578][ T3449] ? __cfi_ksys_read+0x10/0x10 [ 171.915329][ T3449] ? fpregs_restore_userregs+0x128/0x260 [ 171.920954][ T3449] __x64_sys_read+0x7b/0x90 [ 171.925439][ T3449] x64_sys_call+0x2f/0x9a0 [ 171.929840][ T3449] do_syscall_64+0x4c/0xa0 [ 171.934239][ T3449] ? clear_bhb_loop+0x30/0x80 [ 171.938891][ T3449] ? clear_bhb_loop+0x30/0x80 [ 171.943546][ T3449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.949427][ T3449] RIP: 0033:0x7f7ce315d68e [ 171.953819][ T3449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.973403][ T3449] RSP: 002b:00007f7ce400cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.981796][ T3449] RAX: ffffffffffffffda RBX: 00007f7ce400d6c0 RCX: 00007f7ce315d68e [ 171.989746][ T3449] RDX: 000000000000000f RSI: 00007f7ce400d0a0 RDI: 0000000000000007 [ 171.997694][ T3449] RBP: 00007f7ce400d090 R08: 0000000000000000 R09: 0000000000000000 [ 172.005642][ T3449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.013590][ T3449] R13: 00007f7ce3416038 R14: 00007f7ce3415fa0 R15: 00007fff40b52258 [ 172.021547][ T3449] [ 172.119848][ T39] usb 9-1: Using ep0 maxpacket: 32 [ 172.126670][ T39] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 172.141148][ T39] usb 9-1: config 0 has no interface number 0 [ 172.145755][ T974] EXT4-fs (loop5): unmounting filesystem. [ 172.158360][ T39] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.169805][ T531] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 172.177610][ T39] usb 9-1: config 0 interface 85 has no altsetting 0 [ 172.187820][ T39] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 172.213088][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.221449][ T39] usb 9-1: Product: syz [ 172.225778][ T39] usb 9-1: Manufacturer: syz [ 172.230671][ T39] usb 9-1: SerialNumber: syz [ 172.237702][ T39] usb 9-1: config 0 descriptor?? [ 172.329783][ T531] usb 3-1: device descriptor read/64, error -71 [ 172.343424][ T3459] loop5: detected capacity change from 0 to 512 [ 172.380623][ T3459] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 172.599782][ T531] usb 3-1: device descriptor read/64, error -71 [ 172.644914][ T3445] mmap: syz.8.966 (3445) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 172.669331][ T39] usb 9-1: USB disconnect, device number 3 [ 172.719802][ T531] usb usb3-port1: attempt power cycle [ 172.786160][ T974] EXT4-fs (loop5): unmounting filesystem. [ 173.168856][ T3479] loop5: detected capacity change from 0 to 1024 [ 173.191619][ T3479] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 173.200111][ T531] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 173.207765][ T3479] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.228239][ T3479] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.977: bg 0: block 112: padding at end of block bitmap is not set [ 173.243946][ T3479] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 173.257213][ T3479] EXT4-fs (loop5): This should not happen!! Data will be lost [ 173.257213][ T3479] [ 173.266934][ T3479] EXT4-fs (loop5): Total free blocks count 0 [ 173.272980][ T3479] EXT4-fs (loop5): Free/Dirty block details [ 173.278923][ T3479] EXT4-fs (loop5): free_blocks=0 [ 173.283941][ T3479] EXT4-fs (loop5): dirty_blocks=64 [ 173.289104][ T3479] EXT4-fs (loop5): Block reservation details [ 173.295689][ T3479] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 173.323151][ T28] audit: type=1400 audit(1780728996.791:1236): avc: denied { watch watch_reads } for pid=3490 comm="syz.2.981" path="/236/file0" dev="tmpfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.347450][ T974] EXT4-fs (loop5): unmounting filesystem. [ 173.356614][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 173.366641][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 173.397761][ T3492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.426052][ T3488] loop8: detected capacity change from 0 to 512 [ 173.432729][ T3492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.453961][ T3488] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 173.649962][ T531] usb 3-1: device not accepting address 23, error -71 [ 174.014498][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 174.039413][ T3513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.985'. [ 174.048803][ T3513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.985'. [ 174.059522][ T531] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 174.091362][ T531] usb 3-1: device descriptor read/8, error -71 [ 174.261448][ T531] usb 3-1: device descriptor read/8, error -71 [ 174.299823][ T39] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 174.379829][ T531] usb usb3-port1: unable to enumerate USB device [ 174.449770][ T39] usb 9-1: device descriptor read/64, error -71 [ 174.578527][ T3523] loop5: detected capacity change from 0 to 512 [ 174.586404][ T3523] EXT4-fs: Ignoring removed i_version option [ 174.673676][ T3523] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 174.684099][ T3523] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.708133][ T3523] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.991: iget: bad i_size value: 2533274857506816 [ 174.749901][ T39] usb 9-1: device descriptor read/64, error -71 [ 175.129946][ T39] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 175.307881][ T39] usb 9-1: device descriptor read/64, error -71 [ 175.422740][ T974] EXT4-fs (loop5): unmounting filesystem. [ 175.437030][ T3533] loop0: detected capacity change from 0 to 256 [ 175.589839][ T39] usb 9-1: device descriptor read/64, error -71 [ 175.709813][ T39] usb usb9-port1: attempt power cycle [ 176.119784][ T39] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 176.150870][ T39] usb 9-1: device descriptor read/8, error -71 [ 176.300832][ T39] usb 9-1: device descriptor read/8, error -71 [ 176.420880][ T3549] loop0: detected capacity change from 0 to 512 [ 176.429964][ T3549] ext4: Unknown parameter 'func' [ 176.800593][ T39] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 176.831159][ T39] usb 9-1: device descriptor read/8, error -71 [ 176.981182][ T39] usb 9-1: device descriptor read/8, error -71 [ 177.120073][ T39] usb usb9-port1: unable to enumerate USB device [ 177.506741][ T3564] loop2: detected capacity change from 0 to 256 [ 177.558497][ T3564] FAT-fs (loop2): Directory bread(block 64) failed [ 177.569779][ T3564] FAT-fs (loop2): Directory bread(block 65) failed [ 177.576379][ T3564] FAT-fs (loop2): Directory bread(block 66) failed [ 177.583790][ T3564] FAT-fs (loop2): Directory bread(block 67) failed [ 177.590475][ T3564] FAT-fs (loop2): Directory bread(block 68) failed [ 177.597022][ T3564] FAT-fs (loop2): Directory bread(block 69) failed [ 177.603756][ T3564] FAT-fs (loop2): Directory bread(block 70) failed [ 177.610398][ T3564] FAT-fs (loop2): Directory bread(block 71) failed [ 177.616953][ T3564] FAT-fs (loop2): Directory bread(block 72) failed [ 177.623770][ T3564] FAT-fs (loop2): Directory bread(block 73) failed [ 177.634299][ T3569] loop8: detected capacity change from 0 to 512 [ 177.649999][ T632] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 177.714733][ T2067] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.060791][ T632] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 178.074372][ T632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.093394][ T632] usb 1-1: config 0 descriptor?? [ 178.305879][ T632] usb 1-1: Cannot set MAC address [ 178.311168][ T632] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 178.323577][ T3582] loop0: detected capacity change from 0 to 512 [ 178.328224][ T632] usb 1-1: USB disconnect, device number 26 [ 178.402954][ T3588] loop2: detected capacity change from 0 to 512 [ 178.405786][ T3589] loop8: detected capacity change from 0 to 512 [ 178.410204][ T3582] EXT4-fs (loop0): orphan cleanup on readonly fs [ 178.417041][ T3589] ext4: Unknown parameter 'func' [ 178.444589][ T3591] loop5: detected capacity change from 0 to 4096 [ 178.459981][ T3582] EXT4-fs error (device loop0): ext4_quota_enable:7032: comm syz.0.1009: Bad quota inum: 65536, type: 0 [ 178.471460][ T3588] ext4: Unknown parameter 'func' [ 178.497918][ T3582] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-117, ino=65536). Please run e2fsck to fix. [ 178.513310][ T3591] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 178.519926][ T3582] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 178.528875][ T3582] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 178.530901][ T1928] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.814688][ T3582] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1009'. [ 178.829484][ T3582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.847220][ T3591] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz.5.1013: Invalid inode table block 4 in block_group 0 [ 178.860190][ T3591] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 179.101498][ T287] EXT4-fs (loop0): unmounting filesystem. [ 179.164163][ T974] EXT4-fs (loop5): unmounting filesystem. [ 179.203235][ T3600] loop0: detected capacity change from 0 to 512 [ 179.218783][ T3600] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 179.296512][ T28] audit: type=1326 audit(1780729002.761:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.8.1017" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e659ce59 code=0x7ffc0000 [ 179.323609][ T3600] EXT4-fs (loop0): 1 truncate cleaned up [ 179.336238][ T3604] loop8: detected capacity change from 0 to 256 [ 179.351862][ T3600] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 179.382149][ T3604] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 179.420291][ T3600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 179.429234][ T28] audit: type=1326 audit(1780729002.791:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.8.1017" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e659ce59 code=0x7ffc0000 [ 179.584838][ T287] EXT4-fs (loop0): unmounting filesystem. [ 179.611643][ T28] audit: type=1326 audit(1780729002.801:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.8.1017" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f88e659ce59 code=0x7ffc0000 [ 179.674367][ T28] audit: type=1326 audit(1780729002.801:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.8.1017" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e659ce59 code=0x7ffc0000 [ 179.708524][ T28] audit: type=1326 audit(1780729002.801:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.8.1017" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e659ce59 code=0x7ffc0000 [ 179.823806][ T28] audit: type=1326 audit(1780729002.801:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.8.1017" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f88e659ce59 code=0x7ffc0000 [ 180.054643][ T3619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.102867][ T3619] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.129546][ T28] audit: type=1326 audit(1780729002.801:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.8.1017" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e659ce59 code=0x7ffc0000 [ 180.154632][ T28] audit: type=1326 audit(1780729002.801:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.8.1017" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e659ce59 code=0x7ffc0000 [ 180.183745][ T3619] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1021'. [ 180.184938][ T28] audit: type=1326 audit(1780729002.801:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.8.1017" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88e659ce59 code=0x7ffc0000 [ 180.218033][ T287] EXT4-fs (loop0): unmounting filesystem. [ 180.218227][ T28] audit: type=1326 audit(1780729002.801:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3603 comm="syz.8.1017" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e659ce59 code=0x7ffc0000 [ 180.308553][ T3630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 180.348774][ T3630] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz.0.1025: Invalid inode table block 4 in block_group 0 [ 180.394247][ T3639] ext4: Unknown parameter 'func' [ 180.400020][ T3630] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 180.436423][ T287] EXT4-fs (loop0): unmounting filesystem. [ 180.443507][ T3644] device erspan0 entered promiscuous mode [ 180.449292][ T3644] device macsec2 entered promiscuous mode [ 180.473825][ T3644] device erspan0 left promiscuous mode [ 181.079895][ T531] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 181.351715][ T531] usb 6-1: Using ep0 maxpacket: 32 [ 181.359184][ T531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.370380][ T531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.380253][ T531] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.408718][ T531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.421916][ T531] usb 6-1: config 0 descriptor?? [ 181.455727][ T531] hub 6-1:0.0: USB hub found [ 181.656394][ T531] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 181.754948][ T3648] set_capacity_and_notify: 3 callbacks suppressed [ 181.754967][ T3648] loop2: detected capacity change from 0 to 131072 [ 181.778775][ T3648] F2FS-fs (loop2): Test dummy encryption mode enabled [ 181.800161][ T3648] F2FS-fs (loop2): invalid crc value [ 181.821404][ T3648] F2FS-fs (loop2): Found nat_bits in checkpoint [ 181.873111][ T531] hid-generic 0003:046D:C31C.000C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 181.901187][ T3648] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 182.222937][ T531] usb 6-1: USB disconnect, device number 14 [ 182.524307][ T3686] loop2: detected capacity change from 0 to 4096 [ 182.556397][ T3686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.581768][ T290] EXT4-fs (loop2): unmounting filesystem. [ 182.631363][ T3689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 182.644832][ T3691] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 182.659288][ T3689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 182.680815][ T3691] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 182.686524][ T3691] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 182.692211][ T3691] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 182.697965][ T3691] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 182.703688][ T3691] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 182.709345][ T3691] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 182.715049][ T3691] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 182.720725][ T3691] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 183.072242][ T3701] xt_hashlimit: size too large, truncated to 1048576 [ 183.176003][ T3706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1048'. [ 183.349689][ T3709] loop6: detected capacity change from 0 to 512 [ 183.590645][ T3709] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.019941][ T3709] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.1048: Failed to acquire dquot type 1 [ 184.148182][ T3719] loop2: detected capacity change from 0 to 512 [ 184.200002][ T3709] EXT4-fs (loop6): 1 truncate cleaned up [ 184.205665][ T3709] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 184.219836][ T3719] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 184.263876][ T3709] EXT4-fs (loop6): unmounting filesystem. [ 184.397777][ T3719] EXT4-fs (loop2): 1 truncate cleaned up [ 184.410584][ T3719] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.660304][ T3722] loop8: detected capacity change from 0 to 4096 [ 184.819577][ T39] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 184.851184][ T3722] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 184.891600][ T290] EXT4-fs (loop2): unmounting filesystem. [ 184.911454][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 184.979839][ T39] usb 6-1: device descriptor read/64, error -71 [ 185.037759][ T3738] loop8: detected capacity change from 0 to 256 [ 185.262690][ T3744] netlink: 'syz.8.1055': attribute type 10 has an invalid length. [ 187.431126][ T3746] loop6: detected capacity change from 0 to 512 [ 187.437883][ T3746] EXT4-fs: Ignoring removed i_version option [ 187.462368][ T3747] overlayfs: './file0' not a directory [ 187.570238][ T39] usb 6-1: device descriptor read/64, error -71 [ 187.910857][ T3752] loop2: detected capacity change from 0 to 512 [ 187.918575][ T3746] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 187.927636][ T3746] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.976172][ T3745] EXT4-fs error (device loop6): ext4_lookup:1858: inode #12: comm syz.6.1059: iget: bad i_size value: 2533274857506816 [ 188.036958][ T3752] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 188.046135][ T3752] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.081953][ T290] EXT4-fs (loop2): unmounting filesystem. [ 188.132354][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 188.132368][ T28] audit: type=1400 audit(1780729011.601:1298): avc: denied { getattr } for pid=3758 comm="syz.5.1062" name="/" dev="incremental-fs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 188.169606][ T3762] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 188.199569][ T28] audit: type=1400 audit(1780729011.651:1299): avc: denied { relabelto } for pid=3758 comm="syz.5.1062" name="file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:vhost_device_t:s0" [ 188.242175][ T28] audit: type=1400 audit(1780729011.651:1300): avc: denied { create } for pid=3758 comm="syz.5.1062" name="#27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.262583][ T28] audit: type=1400 audit(1780729011.651:1301): avc: denied { associate } for pid=3758 comm="syz.5.1062" name="#27" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 188.320707][ T1015] EXT4-fs (loop6): unmounting filesystem. [ 188.332393][ T28] audit: type=1400 audit(1780729011.651:1302): avc: denied { setattr } for pid=3758 comm="syz.5.1062" name="#27" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.424545][ T3765] loop0: detected capacity change from 0 to 4096 [ 188.427963][ T28] audit: type=1400 audit(1780729011.651:1303): avc: denied { write } for pid=3758 comm="syz.5.1062" name="#27" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.465631][ T28] audit: type=1400 audit(1780729011.651:1304): avc: denied { rename } for pid=3758 comm="syz.5.1062" name="#27" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.491242][ T3765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 188.508212][ T28] audit: type=1400 audit(1780729011.651:1305): avc: denied { reparent } for pid=3758 comm="syz.5.1062" name="#27" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.542747][ T28] audit: type=1400 audit(1780729011.651:1306): avc: denied { associate } for pid=3758 comm="syz.5.1062" name="file0" dev="tmpfs" ino=829 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:vhost_device_t:s0" [ 188.571070][ T28] audit: type=1400 audit(1780729011.651:1307): avc: denied { write } for pid=3758 comm="syz.5.1062" name="file0" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:vhost_device_t:s0" [ 188.678991][ T3765] kvm [3764]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x7407 [ 188.689493][ T3765] kvm [3764]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xec02 [ 188.828611][ T287] EXT4-fs (loop0): unmounting filesystem. [ 188.865196][ T3790] loop0: detected capacity change from 0 to 512 [ 188.910962][ T3790] ext4: Unknown parameter 'func' [ 189.289820][ T39] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 189.449812][ T39] usb 6-1: device descriptor read/64, error -71 [ 189.739773][ T39] usb 6-1: device descriptor read/64, error -71 [ 190.019813][ T39] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 190.179763][ T39] usb 6-1: device descriptor read/64, error -71 [ 190.449752][ T39] usb 6-1: device descriptor read/64, error -71 [ 190.524371][ T3816] x_tables: duplicate underflow at hook 1 [ 190.569825][ T39] usb usb6-port1: attempt power cycle [ 190.704341][ T3819] device syzkaller0 entered promiscuous mode [ 190.979773][ T39] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 190.999753][ T799] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 191.010738][ T39] usb 6-1: device descriptor read/8, error -71 [ 191.079816][ T3526] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 191.161698][ T39] usb 6-1: device descriptor read/8, error -71 [ 191.190883][ T799] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.201898][ T799] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 191.213629][ T799] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.222910][ T799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.231074][ T799] usb 1-1: Product: syz [ 191.235359][ T799] usb 1-1: Manufacturer: syz [ 191.240111][ T799] usb 1-1: SerialNumber: syz [ 191.250520][ T799] cdc_mbim 1-1:1.0: skipping garbage [ 191.259838][ T3526] usb 9-1: Using ep0 maxpacket: 32 [ 191.266144][ T3526] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.276487][ T3526] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.285946][ T3526] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 191.295193][ T3526] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.306844][ T3526] usb 9-1: config 0 descriptor?? [ 191.429784][ T39] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 191.441097][ T3841] loop6: detected capacity change from 0 to 512 [ 191.447621][ T3841] ext4: Unknown parameter 'func' [ 191.453061][ T3824] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 191.461713][ T39] usb 6-1: device descriptor read/8, error -71 [ 191.611139][ T39] usb 6-1: device descriptor read/8, error -71 [ 191.730065][ T39] usb usb6-port1: unable to enumerate USB device [ 191.866668][ T799] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 191.936215][ T799] cdc_mbim 1-1:1.0: bind() failure [ 191.942355][ T799] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 191.949135][ T799] cdc_ncm 1-1:1.1: bind() failure [ 192.086117][ T632] usb 1-1: USB disconnect, device number 27 [ 193.204657][ T3857] loop6: detected capacity change from 0 to 1024 [ 193.223038][ T3857] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 193.232954][ T3857] EXT4-fs (loop6): orphan cleanup on readonly fs [ 193.270075][ T3857] __quota_error: 4 callbacks suppressed [ 193.270091][ T3857] Quota error (device loop6): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 193.274813][ T3864] loop5: detected capacity change from 0 to 512 [ 193.275923][ T3857] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 193.308053][ T3864] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 193.318050][ T3857] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.1090: Failed to acquire dquot type 0 [ 193.333029][ T3857] Quota error (device loop6): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 193.344021][ T3857] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 193.362170][ T3864] EXT4-fs (loop5): 1 truncate cleaned up [ 193.367883][ T3864] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 193.376599][ T3857] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.1090: Failed to acquire dquot type 0 [ 193.414007][ T974] EXT4-fs (loop5): unmounting filesystem. [ 193.420000][ T3857] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.1090: Freeing blocks not in datazone - block = 0, count = 4096 [ 193.450582][ T3857] Quota error (device loop6): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 193.461413][ T3857] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 193.476662][ T3857] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.1090: Failed to acquire dquot type 0 [ 193.476689][ T3874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1096'. [ 193.488214][ T3857] EXT4-fs (loop6): 1 orphan inode deleted [ 193.502917][ T3857] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 193.557998][ T3857] EXT4-fs (loop6): shut down requested (0) [ 193.570553][ T28] audit: type=1400 audit(1780729017.041:1312): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.661052][ T19] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 193.818513][ T632] usb 9-1: USB disconnect, device number 8 [ 193.824474][ T19] usb 3-1: device descriptor read/64, error -71 [ 194.079062][ T1015] EXT4-fs (loop6): unmounting filesystem. [ 194.094547][ T3884] loop6: detected capacity change from 0 to 512 [ 194.101231][ T3884] ext4: Unknown parameter 'func' [ 194.109857][ T19] usb 3-1: device descriptor read/64, error -71 [ 194.167152][ T3889] loop0: detected capacity change from 0 to 512 [ 194.173806][ T3889] ext3: Unknown parameter 'hash' [ 195.189089][ T632] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 195.850170][ T19] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 195.861174][ T632] usb 9-1: device descriptor read/64, error -71 [ 195.999860][ T19] usb 3-1: device descriptor read/64, error -71 [ 196.139830][ T632] usb 9-1: device descriptor read/64, error -71 [ 196.190340][ T3907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1107'. [ 196.220725][ T3909] netlink: 'syz.6.1108': attribute type 17 has an invalid length. [ 196.245065][ T3911] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1109'. [ 196.265568][ T3907] syz.0.1107 (3907) used greatest stack depth: 19264 bytes left [ 196.271067][ T3915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1110'. [ 196.282665][ T19] usb 3-1: device descriptor read/64, error -71 [ 196.393086][ T3913] loop6: detected capacity change from 0 to 512 [ 196.399835][ T19] usb usb3-port1: attempt power cycle [ 196.409860][ T632] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 196.426315][ T3913] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 196.512642][ T1015] EXT4-fs (loop6): unmounting filesystem. [ 196.543784][ T3927] device vlan2 entered promiscuous mode [ 196.549359][ T3927] device ip6gretap0 entered promiscuous mode [ 196.550419][ T3929] loop6: detected capacity change from 0 to 512 [ 196.564114][ T3929] ext4: Unknown parameter 'func' [ 196.569806][ T632] usb 9-1: device descriptor read/64, error -71 [ 196.676218][ T3932] net_ratelimit: 5268 callbacks suppressed [ 196.676234][ T3932] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 196.861447][ T3932] loop2: detected capacity change from 0 to 16 [ 196.917931][ T28] audit: type=1400 audit(1780729020.381:1313): avc: denied { mounton } for pid=3931 comm="syz.2.1116" path="/file0" dev="ramfs" ino=35543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 196.941063][ T3932] erofs: (device loop2): mounted with root inode @ nid 36. [ 198.296044][ T3956] loop6: detected capacity change from 0 to 256 [ 198.380395][ T3956] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3984d6b3, utbl_chksum : 0xe619d30d) [ 198.409812][ T3956] syz.6.1120: attempt to access beyond end of device [ 198.409812][ T3956] loop6: rw=0, sector=184, nr_sectors = 4439 limit=256 [ 198.435525][ T3956] syz.6.1120: attempt to access beyond end of device [ 198.435525][ T3956] loop6: rw=0, sector=4623, nr_sectors = 12096 limit=256 [ 198.501403][ T3956] syz.6.1120: attempt to access beyond end of device [ 198.501403][ T3956] loop6: rw=0, sector=16719, nr_sectors = 12448 limit=256 [ 198.541370][ T3956] syz.6.1120: attempt to access beyond end of device [ 198.541370][ T3956] loop6: rw=0, sector=29167, nr_sectors = 3776 limit=256 [ 198.710420][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 198.868760][ T3958] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1122'. [ 198.956913][ T3951] loop2: detected capacity change from 0 to 512 [ 199.042113][ T3951] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 199.086729][ T3951] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1121: casefold flag without casefold feature [ 199.099581][ T3951] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1121: couldn't read orphan inode 15 (err -117) [ 199.111764][ T3951] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 199.141047][ T290] EXT4-fs (loop2): unmounting filesystem. [ 199.183951][ T3970] loop6: detected capacity change from 0 to 128 [ 199.197839][ T28] audit: type=1400 audit(1780729022.661:1314): avc: denied { read write } for pid=3969 comm="syz.2.1128" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.208178][ T3974] loop8: detected capacity change from 0 to 512 [ 199.222319][ T28] audit: type=1400 audit(1780729022.661:1315): avc: denied { open } for pid=3969 comm="syz.2.1128" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.238897][ T3974] ext4: Unknown parameter 'func' [ 199.252318][ T28] audit: type=1400 audit(1780729022.661:1316): avc: denied { ioctl } for pid=3969 comm="syz.2.1128" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.509922][ T39] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 199.700785][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.710923][ T39] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.719929][ T39] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 199.728964][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.740396][ T39] usb 3-1: config 0 descriptor?? [ 199.989068][ T3982] loop6: detected capacity change from 0 to 512 [ 200.006096][ T3982] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 200.016180][ T3982] FAT-fs (loop6): Filesystem has been set read-only [ 200.024408][ T3982] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 200.759800][ T1994] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 200.759831][ T1603] Bluetooth: hci0: command 0x1003 tx timeout [ 201.028316][ T28] audit: type=1400 audit(1780729024.491:1317): avc: denied { read write } for pid=3992 comm="syz.0.1135" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 201.055189][ T3993] 9pnet_fd: Insufficient options for proto=fd [ 201.074645][ T28] audit: type=1400 audit(1780729024.521:1318): avc: denied { open } for pid=3992 comm="syz.0.1135" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 201.127060][ T3998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1137'. [ 201.135074][ T3995] loop8: detected capacity change from 0 to 512 [ 201.160961][ T3995] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 201.228514][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 201.236544][ T4012] loop6: detected capacity change from 0 to 16 [ 201.256153][ T28] audit: type=1400 audit(1780729024.721:1319): avc: denied { module_request } for pid=4015 comm="syz.8.1143" kmod="net-pf-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 201.256422][ T4012] erofs: (device loop6): mounted with root inode @ nid 36. [ 202.282870][ T632] usb 3-1: USB disconnect, device number 28 [ 202.351933][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 202.385386][ T4034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 202.430541][ T4040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1149'. [ 202.493855][ T4044] loop0: detected capacity change from 0 to 512 [ 202.556202][ T4044] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 202.602814][ T4039] loop5: detected capacity change from 0 to 40427 [ 202.614889][ T4039] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 202.646127][ T4039] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 202.665556][ T28] audit: type=1326 audit(1780729026.131:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4053 comm="syz.2.1155" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f494459ce59 code=0x0 [ 202.673624][ T4027] loop6: detected capacity change from 0 to 131072 [ 202.699025][ T4027] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 150994945) [ 202.707466][ T4027] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 202.715903][ T4027] F2FS-fs (loop6): invalid crc value [ 202.716480][ T4039] F2FS-fs (loop5): invalid crc value [ 202.739405][ T287] EXT4-fs (loop0): unmounting filesystem. [ 202.745765][ T4027] F2FS-fs (loop6): Found nat_bits in checkpoint [ 202.800001][ T4027] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 202.800684][ T4039] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 202.807047][ T4027] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 202.862195][ T4066] EXT4-fs: dax option not supported [ 202.864721][ T4039] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 202.875025][ T4039] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 203.403685][ T28] audit: type=1400 audit(1780729026.871:1321): avc: denied { getopt } for pid=4074 comm="syz.5.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.443495][ T4076] set_capacity_and_notify: 1 callbacks suppressed [ 203.443583][ T4076] loop5: detected capacity change from 0 to 1024 [ 203.577991][ T4076] EXT4-fs: Ignoring removed orlov option [ 203.940657][ T4076] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 204.236361][ T632] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 204.451298][ T632] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.464387][ T632] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 204.477884][ T632] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 204.489220][ T632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.500759][ T632] usb 1-1: config 0 descriptor?? [ 204.525831][ T4095] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1164'. [ 204.603014][ T4100] loop6: detected capacity change from 0 to 512 [ 204.614832][ T4100] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 204.616602][ T974] EXT4-fs (loop5): unmounting filesystem. [ 204.667243][ T4111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1170'. [ 204.706157][ T1015] EXT4-fs (loop6): unmounting filesystem. [ 204.803637][ T4117] fuse: Bad value for 'fd' [ 204.939765][ T632] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 205.130905][ T632] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 205.143362][ T632] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.161571][ T632] usb 9-1: config 0 descriptor?? [ 205.634703][ T4129] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1175'. [ 205.674564][ T4131] loop5: detected capacity change from 0 to 512 [ 205.698272][ T4131] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 205.775714][ T974] EXT4-fs (loop5): unmounting filesystem. [ 205.866385][ T4139] xt_hashlimit: size too large, truncated to 1048576 [ 205.935856][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1179'. [ 206.833551][ T4153] loop5: detected capacity change from 0 to 256 [ 206.860374][ T1712] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.863190][ T4153] loop5: detected capacity change from 0 to 256 [ 206.870027][ T1712] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.885367][ T1712] Buffer I/O error on dev loop5, logical block 0, async page read [ 206.890890][ T19] usb 1-1: USB disconnect, device number 28 [ 206.911048][ T4153] FAT-fs (loop5): Directory bread(block 64) failed [ 206.921959][ T4153] FAT-fs (loop5): Directory bread(block 65) failed [ 206.951458][ T4156] loop0: detected capacity change from 0 to 512 [ 206.954872][ T4153] FAT-fs (loop5): Directory bread(block 66) failed [ 206.981482][ T4156] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 206.995359][ T4153] FAT-fs (loop5): Directory bread(block 67) failed [ 207.012745][ T4153] FAT-fs (loop5): Directory bread(block 68) failed [ 207.019477][ T4153] FAT-fs (loop5): Directory bread(block 69) failed [ 207.027006][ T4153] FAT-fs (loop5): Directory bread(block 70) failed [ 207.033936][ T4153] FAT-fs (loop5): Directory bread(block 71) failed [ 207.041110][ T4153] FAT-fs (loop5): Directory bread(block 72) failed [ 207.047732][ T4153] FAT-fs (loop5): Directory bread(block 73) failed [ 207.060958][ T287] EXT4-fs (loop0): unmounting filesystem. [ 207.094135][ T4171] loop0: detected capacity change from 0 to 512 [ 207.097883][ T4154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'. [ 207.110530][ T4154] device veth1 entered promiscuous mode [ 207.117303][ T4154] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1182'. [ 207.145155][ T4171] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 207.163909][ T4175] loop6: detected capacity change from 0 to 512 [ 207.170469][ T4175] ext4: Unknown parameter 'func' [ 207.234944][ T287] EXT4-fs (loop0): unmounting filesystem. [ 207.730774][ T4184] device bridge5 entered promiscuous mode [ 207.745808][ T632] usb 9-1: Cannot read MAC address [ 207.751164][ T632] MOSCHIP usb-ethernet driver: probe of 9-1:0.0 failed with error -71 [ 207.771987][ T632] usb 9-1: USB disconnect, device number 11 [ 207.912209][ T4189] FAULT_INJECTION: forcing a failure. [ 207.912209][ T4189] name failslab, interval 1, probability 0, space 0, times 0 [ 208.041264][ T4193] loop6: detected capacity change from 0 to 512 [ 208.044373][ T4189] CPU: 1 PID: 4189 Comm: syz.5.1190 Tainted: G W syzkaller #0 [ 208.056352][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.067534][ T4189] Call Trace: [ 208.068675][ T4193] EXT4-fs: Ignoring removed bh option [ 208.070808][ T4189] [ 208.070816][ T4189] __dump_stack+0x21/0x24 [ 208.070847][ T4189] dump_stack_lvl+0x110/0x170 [ 208.088042][ T4189] ? __cfi_dump_stack_lvl+0x8/0x8 [ 208.093057][ T4189] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 208.098676][ T4189] dump_stack+0x15/0x24 [ 208.102815][ T4189] should_fail_ex+0x3d4/0x520 [ 208.107473][ T4189] __should_failslab+0xac/0xf0 [ 208.112221][ T4189] ? __get_vm_area_node+0x12c/0x360 [ 208.117402][ T4189] should_failslab+0x9/0x20 [ 208.121885][ T4189] __kmem_cache_alloc_node+0x3d/0x2c0 [ 208.127248][ T4189] ? __get_vm_area_node+0x12c/0x360 [ 208.132430][ T4189] kmalloc_node_trace+0x26/0xb0 [ 208.137260][ T4189] __get_vm_area_node+0x12c/0x360 [ 208.142266][ T4189] __vmalloc_node_range+0x326/0x1430 [ 208.147534][ T4189] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 208.153065][ T4189] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 208.158764][ T4189] ? preempt_schedule_irq+0xca/0x120 [ 208.164034][ T4189] ? __cfi___vmalloc_node_range+0x10/0x10 [ 208.169734][ T4189] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 208.175781][ T4189] ? irqentry_exit+0x37/0x40 [ 208.180362][ T4189] ? sysvec_reschedule_ipi+0x78/0x80 [ 208.185634][ T4189] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 208.191252][ T4189] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 208.196780][ T4189] __vmalloc+0x79/0x90 [ 208.200915][ T4189] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 208.206442][ T4189] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 208.211793][ T4189] ? __kasan_check_write+0x14/0x20 [ 208.216884][ T4189] bpf_prog_alloc+0x22/0x1c0 [ 208.221455][ T4189] bpf_prog_load+0x825/0x16a0 [ 208.226112][ T4189] ? map_freeze+0x390/0x390 [ 208.230599][ T4189] ? selinux_bpf+0xc7/0xf0 [ 208.235001][ T4189] ? security_bpf+0x93/0xb0 [ 208.239487][ T4189] __sys_bpf+0x57b/0x850 [ 208.243966][ T4189] ? bpf_link_show_fdinfo+0x330/0x330 [ 208.249322][ T4189] ? fpregs_restore_userregs+0x128/0x260 [ 208.254933][ T4189] __x64_sys_bpf+0x7c/0x90 [ 208.259326][ T4189] x64_sys_call+0x488/0x9a0 [ 208.263809][ T4189] do_syscall_64+0x4c/0xa0 [ 208.268205][ T4189] ? clear_bhb_loop+0x30/0x80 [ 208.272857][ T4189] ? clear_bhb_loop+0x30/0x80 [ 208.277511][ T4189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.283387][ T4189] RIP: 0033:0x7f381419ce59 [ 208.287780][ T4189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.307366][ T4189] RSP: 002b:00007f38150ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.315757][ T4189] RAX: ffffffffffffffda RBX: 00007f3814415fa0 RCX: 00007f381419ce59 [ 208.323712][ T4189] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: 0000000000000005 [ 208.331661][ T4189] RBP: 00007f38150ae090 R08: 0000000000000000 R09: 0000000000000000 [ 208.339614][ T4189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.347565][ T4189] R13: 00007f3814416038 R14: 00007f3814415fa0 R15: 00007ffdb97bd5c8 [ 208.355519][ T4189] [ 208.666788][ T4195] loop8: detected capacity change from 0 to 512 [ 208.680359][ T4195] EXT4-fs: Ignoring removed i_version option [ 209.967672][ T4189] syz.5.1190: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 210.076543][ T4189] CPU: 1 PID: 4189 Comm: syz.5.1190 Tainted: G W syzkaller #0 [ 210.085501][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.095547][ T4189] Call Trace: [ 210.098821][ T4189] [ 210.101752][ T4189] __dump_stack+0x21/0x24 [ 210.106080][ T4189] dump_stack_lvl+0x110/0x170 [ 210.110750][ T4189] ? __cfi_dump_stack_lvl+0x8/0x8 [ 210.115772][ T4189] dump_stack+0x15/0x24 [ 210.119924][ T4189] warn_alloc+0x1dc/0x200 [ 210.124251][ T4189] ? __cfi_warn_alloc+0x10/0x10 [ 210.129099][ T4189] __vmalloc_node_range+0x34b/0x1430 [ 210.134383][ T4189] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 210.140097][ T4189] ? preempt_schedule_irq+0xca/0x120 [ 210.145385][ T4189] ? __cfi___vmalloc_node_range+0x10/0x10 [ 210.150493][ T4199] loop0: detected capacity change from 0 to 1024 [ 210.151104][ T4189] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 210.163451][ T4189] ? irqentry_exit+0x37/0x40 [ 210.168028][ T4189] ? sysvec_reschedule_ipi+0x78/0x80 [ 210.173298][ T4189] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 210.178927][ T4189] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 210.184454][ T4189] __vmalloc+0x79/0x90 [ 210.188505][ T4189] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 210.194031][ T4189] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 210.199387][ T4189] ? __kasan_check_write+0x14/0x20 [ 210.204499][ T4189] bpf_prog_alloc+0x22/0x1c0 [ 210.209070][ T4189] bpf_prog_load+0x825/0x16a0 [ 210.213731][ T4189] ? map_freeze+0x390/0x390 [ 210.218222][ T4189] ? selinux_bpf+0xc7/0xf0 [ 210.222623][ T4189] ? security_bpf+0x93/0xb0 [ 210.227109][ T4189] __sys_bpf+0x57b/0x850 [ 210.231344][ T4189] ? bpf_link_show_fdinfo+0x330/0x330 [ 210.236714][ T4189] ? fpregs_restore_userregs+0x128/0x260 [ 210.242336][ T4189] __x64_sys_bpf+0x7c/0x90 [ 210.246738][ T4189] x64_sys_call+0x488/0x9a0 [ 210.251227][ T4189] do_syscall_64+0x4c/0xa0 [ 210.255629][ T4189] ? clear_bhb_loop+0x30/0x80 [ 210.260292][ T4189] ? clear_bhb_loop+0x30/0x80 [ 210.264953][ T4189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.270834][ T4189] RIP: 0033:0x7f381419ce59 [ 210.275233][ T4189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.294823][ T4189] RSP: 002b:00007f38150ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.303246][ T4189] RAX: ffffffffffffffda RBX: 00007f3814415fa0 RCX: 00007f381419ce59 [ 210.311212][ T4189] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: 0000000000000005 [ 210.319164][ T4189] RBP: 00007f38150ae090 R08: 0000000000000000 R09: 0000000000000000 [ 210.327123][ T4189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.335080][ T4189] R13: 00007f3814416038 R14: 00007f3814415fa0 R15: 00007ffdb97bd5c8 [ 210.343042][ T4189] [ 210.347407][ T4189] Mem-Info: [ 210.351020][ T4189] active_anon:16423 inactive_anon:27 isolated_anon:0 [ 210.351020][ T4189] active_file:20387 inactive_file:2384 isolated_file:0 [ 210.351020][ T4189] unevictable:0 dirty:19 writeback:0 [ 210.351020][ T4189] slab_reclaimable:8811 slab_unreclaimable:77284 [ 210.351020][ T4189] mapped:38359 shmem:6157 pagetables:809 [ 210.351020][ T4189] sec_pagetables:3 bounce:0 [ 210.351020][ T4189] kernel_misc_reclaimable:0 [ 210.351020][ T4189] free:1476634 free_pcp:12764 free_cma:0 [ 210.396570][ T4189] Node 0 active_anon:65692kB inactive_anon:108kB active_file:81548kB inactive_file:9536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153436kB dirty:76kB writeback:0kB shmem:24628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5424kB pagetables:3236kB sec_pagetables:12kB all_unreclaimable? no [ 210.396702][ T4195] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 210.397193][ T4199] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.1194: lblock 2 mapped to illegal pblock 2 (length 1) [ 210.438707][ T4193] EXT4-fs error (device loop6): ext4_iget_extra_inode:4765: inode #11: comm syz.6.1193: corrupted in-inode xattr [ 210.451911][ T4195] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.465415][ T4193] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1193: couldn't read orphan inode 11 (err -117) [ 210.492512][ T4189] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971872kB mlocked:0kB bounce:0kB free_pcp:5388kB local_pcp:5332kB free_cma:0kB [ 210.497908][ T4193] EXT4-fs (loop6): 1 truncate cleaned up [ 210.527460][ T4194] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.1192: iget: bad i_size value: 2533274857506816 [ 210.527718][ T4193] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 210.549606][ T4199] EXT4-fs (loop0): Remounting filesystem read-only [ 210.553351][ T4189] lowmem_reserve[]: 0 3932 3932 3932 [ 210.558363][ T4193] xt_hashlimit: size too large, truncated to 1048576 [ 210.569102][ T4189] Normal free:2940052kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:65592kB inactive_anon:108kB active_file:81548kB inactive_file:9536kB unevictable:0kB writepending:76kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:45988kB local_pcp:25548kB free_cma:0kB [ 210.571615][ T4199] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 210.603358][ T4189] lowmem_reserve[]: 0 0 0 0 [ 210.611577][ T4189] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB [ 210.628827][ T4189] Normal: 5*4kB (ME) 3*8kB (UME) 78*16kB (M) 139*32kB (M) 193*64kB (UM) 40*128kB (UME) 54*256kB (UME) 21*512kB (UME) 9*1024kB (UM) 3*2048kB (M) 702*4096kB (UM) = 2938540kB [ 210.639534][ T4199] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.1194: lblock 0 mapped to illegal pblock 48 (length 1) [ 210.646423][ T4189] 29003 total pagecache pages [ 210.665099][ T4189] 27 pages in swap cache [ 210.679938][ T4199] EXT4-fs (loop0): Remounting filesystem read-only [ 210.686454][ T4199] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 210.706148][ T4189] Free swap = 124472kB [ 210.706463][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 210.710650][ T4189] Total swap = 124996kB [ 210.720080][ T4199] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.1194: Failed to acquire dquot type 0 [ 210.720369][ T4189] 2097051 pages RAM [ 210.735268][ T4189] 0 pages HighMem/MovableOnly [ 210.740315][ T4189] 347483 pages reserved [ 210.744567][ T4189] 0 pages cma reserved [ 210.757495][ T4199] EXT4-fs (loop0): Remounting filesystem read-only [ 210.769952][ T4199] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 210.778709][ T4211] loop5: detected capacity change from 0 to 512 [ 210.789571][ T4199] EXT4-fs (loop0): Remounting filesystem read-only [ 210.806354][ T4199] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.1194: mark_inode_dirty error [ 210.818383][ T4211] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 210.837071][ T4199] EXT4-fs (loop0): Remounting filesystem read-only [ 210.850676][ T4199] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 210.867552][ T974] EXT4-fs (loop5): unmounting filesystem. [ 210.873391][ T4199] EXT4-fs (loop0): 1 orphan inode deleted [ 210.879110][ T4199] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 210.879804][ T799] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 210.888133][ T1053] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.910093][ T1053] EXT4-fs (loop0): Remounting filesystem read-only [ 210.928437][ T1053] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 210.936934][ T1053] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 0 [ 210.949044][ T1053] EXT4-fs (loop0): Remounting filesystem read-only [ 210.955026][ T4199] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 16: comm syz.0.1194: lblock 0 mapped to illegal pblock 16 (length 1) [ 210.956339][ T1015] EXT4-fs (loop6): unmounting filesystem. [ 210.970139][ T4199] EXT4-fs (loop0): Remounting filesystem read-only [ 211.005565][ T4215] loop6: detected capacity change from 0 to 512 [ 211.021209][ T4215] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 211.067230][ T1015] EXT4-fs (loop6): unmounting filesystem. [ 211.101068][ T799] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.117737][ T799] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.130117][ T4223] loop5: detected capacity change from 0 to 512 [ 211.140970][ T4223] EXT4-fs: dax option not supported [ 211.146222][ T799] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 211.200198][ T799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.209385][ T799] usb 3-1: config 0 descriptor?? [ 211.236558][ T28] audit: type=1400 audit(1780729034.701:1322): avc: denied { watch watch_reads } for pid=4227 comm="syz.5.1203" path="/177/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.260113][ T28] audit: type=1400 audit(1780729034.701:1323): avc: denied { setattr } for pid=4227 comm="syz.5.1203" name="/" dev="incremental-fs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.261073][ T287] EXT4-fs (loop0): unmounting filesystem. [ 211.289348][ T287] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 211.304024][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 211.316306][ T287] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 211.326707][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 211.333675][ T287] EXT4-fs error (device loop0): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 211.345805][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 212.035821][ T4238] loop0: detected capacity change from 0 to 512 [ 212.090025][ T2067] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.123456][ T4238] loop0: detected capacity change from 0 to 4096 [ 212.191768][ T4238] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 212.209286][ T4238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1204'. [ 212.320771][ T4247] loop5: detected capacity change from 0 to 512 [ 212.328696][ T4247] EXT4-fs: Ignoring removed i_version option [ 212.546477][ T4247] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 212.556212][ T4247] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.601455][ T4247] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.1207: iget: bad i_size value: 2533274857506816 [ 212.741864][ T287] EXT4-fs (loop0): unmounting filesystem. [ 213.152475][ T974] EXT4-fs (loop5): unmounting filesystem. [ 213.175182][ T4256] loop5: detected capacity change from 0 to 512 [ 213.187000][ T4256] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 213.205235][ T974] EXT4-fs (loop5): unmounting filesystem. [ 213.852386][ T632] usb 3-1: USB disconnect, device number 29 [ 214.134874][ T4269] loop6: detected capacity change from 0 to 40427 [ 214.592598][ T4283] loop5: detected capacity change from 0 to 512 [ 214.677001][ T4285] loop6: detected capacity change from 0 to 512 [ 214.683535][ T4283] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 214.702739][ T4285] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 214.704087][ T4283] EXT4-fs (loop5): 1 truncate cleaned up [ 214.717060][ T4283] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 214.806516][ T4294] loop8: detected capacity change from 0 to 512 [ 214.814388][ T4294] EXT4-fs: Ignoring removed i_version option [ 214.974933][ T1015] EXT4-fs (loop6): unmounting filesystem. [ 215.102537][ T4294] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 215.112118][ T4294] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.156524][ T4294] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.1222: iget: bad i_size value: 2533274857506816 [ 215.646304][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 215.693137][ T974] EXT4-fs (loop5): unmounting filesystem. [ 215.709842][ T3526] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 215.726346][ T4305] loop8: detected capacity change from 0 to 512 [ 215.748273][ T4305] ext4: Unknown parameter 'func' [ 215.919887][ T3526] usb 7-1: Using ep0 maxpacket: 32 [ 215.926796][ T3526] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.975941][ T3526] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.040735][ T4308] loop2: detected capacity change from 0 to 4096 [ 216.047237][ T3526] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.103198][ T3526] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.119963][ T4308] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 216.234282][ T3526] usb 7-1: config 0 descriptor?? [ 216.244980][ T3526] hub 7-1:0.0: bad descriptor, ignoring hub [ 216.272067][ T3526] hub: probe of 7-1:0.0 failed with error -5 [ 216.302472][ T3526] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 216.329680][ T290] EXT4-fs (loop2): unmounting filesystem. [ 216.484331][ T2067] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.497891][ T4311] netlink: 'syz.0.1230': attribute type 3 has an invalid length. [ 216.506993][ T4311] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1230'. [ 216.581300][ T4320] loop0: detected capacity change from 0 to 512 [ 216.600410][ T4320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 216.687694][ T4326] device bridge1 entered promiscuous mode [ 216.799808][ T3526] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 216.857777][ T287] EXT4-fs (loop0): unmounting filesystem. [ 216.881252][ T4330] loop0: detected capacity change from 0 to 512 [ 216.898757][ T4330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 216.917881][ T287] EXT4-fs (loop0): unmounting filesystem. [ 216.931365][ T4333] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1234'. [ 217.020885][ T3526] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.031067][ T3526] usb 6-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.044309][ T3526] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.051091][ T3526] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 217.060998][ T3526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.077787][ T3526] usb 6-1: config 0 descriptor?? [ 217.087786][ T3526] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 217.125778][ T4342] loop8: detected capacity change from 0 to 512 [ 217.133690][ T4342] EXT4-fs: Ignoring removed i_version option [ 217.382725][ T4342] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 217.392729][ T4342] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.441254][ T4342] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.1237: iget: bad i_size value: 2533274857506816 [ 217.949989][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 218.016570][ T4353] loop0: detected capacity change from 0 to 4096 [ 218.031909][ T4353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 218.076797][ T287] EXT4-fs (loop0): unmounting filesystem. [ 218.123054][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 218.421565][ T4367] device erspan0 entered promiscuous mode [ 218.427359][ T4367] device macsec3 entered promiscuous mode [ 218.434000][ T4367] device erspan0 left promiscuous mode [ 218.504383][ T4371] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 218.519851][ T341] usb 7-1: USB disconnect, device number 8 [ 218.526743][ T287] EXT4-fs (loop0): unmounting filesystem. [ 218.556658][ T4375] ext4: Unknown parameter 'func' [ 218.563958][ T4376] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 218.584579][ T1015] EXT4-fs (loop6): unmounting filesystem. [ 219.184162][ T4384] device bridge9 entered promiscuous mode [ 219.212790][ T4388] set_capacity_and_notify: 3 callbacks suppressed [ 219.212824][ T4388] loop6: detected capacity change from 0 to 512 [ 219.225878][ T4388] EXT4-fs: Ignoring removed i_version option [ 221.209130][ T4388] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 221.218591][ T4388] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.240477][ T4392] loop8: detected capacity change from 0 to 128 [ 221.246680][ T531] usb 6-1: USB disconnect, device number 21 [ 221.253311][ T4387] EXT4-fs error (device loop6): ext4_lookup:1858: inode #12: comm syz.6.1249: iget: bad i_size value: 2533274857506816 [ 221.279860][ T4396] loop0: detected capacity change from 0 to 1024 [ 221.295802][ T4399] xt_hashlimit: size too large, truncated to 1048576 [ 221.323460][ T4396] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.1250: lblock 2 mapped to illegal pblock 2 (length 1) [ 221.339865][ T1712] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.353381][ T4403] loop5: detected capacity change from 0 to 256 [ 221.435733][ T4396] EXT4-fs (loop0): Remounting filesystem read-only [ 221.456203][ T1015] EXT4-fs (loop6): unmounting filesystem. [ 221.462623][ T4396] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 221.480318][ T4403] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 221.586770][ T4409] loop2: detected capacity change from 0 to 1024 [ 221.613394][ T4396] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.1250: lblock 0 mapped to illegal pblock 48 (length 1) [ 221.781914][ T4396] EXT4-fs (loop0): Remounting filesystem read-only [ 221.828610][ T4396] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 221.863303][ T4409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 221.996759][ T4396] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.1250: Failed to acquire dquot type 0 [ 222.096919][ T4396] EXT4-fs (loop0): Remounting filesystem read-only [ 222.128412][ T4396] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 222.142045][ T4413] binder: 4406:4413 ioctl c0306201 200000000480 returned -14 [ 222.217324][ T4413] loop8: detected capacity change from 0 to 128 [ 222.225240][ T4396] EXT4-fs (loop0): Remounting filesystem read-only [ 222.247006][ T4413] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 222.271408][ T4396] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.1250: mark_inode_dirty error [ 222.286595][ T4413] FAT-fs (loop8): bogus number of directory entries (127) [ 222.296234][ T4415] loop5: detected capacity change from 0 to 512 [ 222.302955][ T4413] FAT-fs (loop8): Can't find a valid FAT filesystem [ 222.309911][ T4396] EXT4-fs (loop0): Remounting filesystem read-only [ 222.316440][ T4396] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 222.330165][ T4396] EXT4-fs (loop0): 1 orphan inode deleted [ 222.335928][ T4396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 222.345004][ T43] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 222.374849][ T4415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 222.396771][ T4417] loop6: detected capacity change from 0 to 8192 [ 222.404686][ T43] EXT4-fs (loop0): Remounting filesystem read-only [ 222.410917][ T4396] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 16: comm syz.0.1250: lblock 0 mapped to illegal pblock 16 (length 1) [ 222.412502][ T43] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 222.425730][ T4396] EXT4-fs (loop0): Remounting filesystem read-only [ 222.433737][ T43] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 0 [ 222.451230][ T4417] loop6: p1 p2 p3 [ 222.455894][ T4417] loop6: p1 start 51379968 is beyond EOD, truncated [ 222.459925][ T43] EXT4-fs (loop0): Remounting filesystem read-only [ 222.469666][ T290] EXT4-fs (loop2): unmounting filesystem. [ 222.469704][ T4396] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 16: comm syz.0.1250: lblock 0 mapped to illegal pblock 16 (length 1) [ 222.489643][ T4417] loop6: p3 size 100663552 extends beyond EOD, truncated [ 222.495675][ T974] EXT4-fs (loop5): unmounting filesystem. [ 222.507445][ T4423] loop2: detected capacity change from 0 to 512 [ 222.513857][ T4396] EXT4-fs (loop0): Remounting filesystem read-only [ 222.529348][ T4396] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 16: comm syz.0.1250: lblock 0 mapped to illegal pblock 16 (length 1) [ 222.538224][ T4423] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 222.553175][ T4396] EXT4-fs (loop0): Remounting filesystem read-only [ 222.556275][ T4426] loop8: detected capacity change from 0 to 512 [ 222.567314][ T4426] ext4: Unknown parameter 'func' [ 222.569763][ T28] audit: type=1400 audit(1780729046.031:1324): avc: denied { read append } for pid=4416 comm="syz.6.1258" name="loop6p2" dev="devtmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 222.582320][ T4417] FAT-fs (loop6p2): invalid media value (0x0a) [ 222.619568][ T4432] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 16: comm syz.0.1250: lblock 0 mapped to illegal pblock 16 (length 1) [ 222.620879][ T4417] FAT-fs (loop6p2): Can't find a valid FAT filesystem [ 222.641593][ T28] audit: type=1400 audit(1780729046.031:1325): avc: denied { open } for pid=4416 comm="syz.6.1258" path="/dev/loop6p2" dev="devtmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 222.642106][ T1710] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 222.665006][ T28] audit: type=1400 audit(1780729046.051:1326): avc: denied { mounton } for pid=4416 comm="syz.6.1258" path="/dev/loop6p2" dev="devtmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 222.697503][ T4432] EXT4-fs (loop0): Remounting filesystem read-only [ 222.717826][ T290] EXT4-fs (loop2): unmounting filesystem. [ 222.733785][ T4396] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 16: comm syz.0.1250: lblock 0 mapped to illegal pblock 16 (length 1) [ 222.753533][ T4396] EXT4-fs (loop0): Remounting filesystem read-only [ 222.885847][ T4441] device bridge2 entered promiscuous mode [ 223.020972][ T287] EXT4-fs (loop0): unmounting filesystem. [ 223.026908][ T287] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 223.040121][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 223.046650][ T287] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 223.057192][ T287] EXT4-fs error (device loop0): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 223.139793][ T632] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 223.287969][ T4448] EXT4-fs: Ignoring removed i_version option [ 223.732923][ T4448] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 223.742949][ T4448] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.793047][ T4448] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.1266: iget: bad i_size value: 2533274857506816 [ 224.160482][ T287] EXT4-fs (loop0): unmounting filesystem. [ 224.210247][ T4453] F2FS-fs (loop8): invalid crc value [ 224.210790][ T632] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.226187][ T632] usb 6-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.237608][ T4453] F2FS-fs (loop8): Found nat_bits in checkpoint [ 224.239198][ T632] usb 6-1: config 0 interface 0 has no altsetting 0 [ 224.252010][ T632] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 224.261329][ T632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.289369][ T4460] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1270'. [ 224.309957][ T632] usb 6-1: config 0 descriptor?? [ 224.315846][ T632] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 224.348232][ T4453] F2FS-fs (loop8): Start checkpoint disabled! [ 224.354866][ T4453] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 224.606671][ T4453] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 225.181468][ T43] kworker/u4:2: attempt to access beyond end of device [ 225.181468][ T43] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 225.290652][ T4476] set_capacity_and_notify: 2 callbacks suppressed [ 225.290669][ T4476] loop6: detected capacity change from 0 to 512 [ 225.311037][ T4476] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 225.329433][ T1015] EXT4-fs (loop6): unmounting filesystem. [ 225.932398][ T531] usb 6-1: USB disconnect, device number 22 [ 226.515927][ T4498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1281'. [ 226.534432][ T4513] loop0: detected capacity change from 0 to 512 [ 226.621201][ T4516] loop5: detected capacity change from 0 to 512 [ 226.628831][ T4516] EXT4-fs: Ignoring removed i_version option [ 226.842300][ T4513] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 226.891128][ T4516] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 226.900791][ T4516] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.949887][ T4516] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.1279: iget: bad i_size value: 2533274857506816 [ 227.074062][ T4517] loop2: detected capacity change from 0 to 1024 [ 227.225416][ T4517] EXT4-fs: Ignoring removed orlov option [ 227.336366][ T4524] loop8: detected capacity change from 0 to 256 [ 227.367076][ T287] EXT4-fs (loop0): unmounting filesystem. [ 227.480331][ T4517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.543661][ T974] EXT4-fs (loop5): unmounting filesystem. [ 227.707386][ T4517] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 227.772052][ T28] audit: type=1400 audit(1780729051.241:1327): avc: denied { relabelto } for pid=4515 comm="syz.2.1287" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 227.805950][ T4532] loop5: detected capacity change from 0 to 512 [ 227.812477][ T28] audit: type=1400 audit(1780729051.271:1328): avc: denied { write } for pid=4515 comm="syz.2.1287" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 227.818310][ T4532] ext4: Unknown parameter 'func' [ 227.838195][ T28] audit: type=1400 audit(1780729051.271:1329): avc: denied { add_name } for pid=4515 comm="syz.2.1287" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 227.870628][ T290] EXT4-fs (loop2): unmounting filesystem. [ 227.890319][ T2067] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 227.941122][ T4540] loop2: detected capacity change from 0 to 1024 [ 227.973449][ T4540] EXT4-fs (loop2): unsupported descriptor size 65535 [ 228.358640][ T4542] device bridge6 entered promiscuous mode [ 228.367106][ T383] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 228.468803][ T4540] loop2: detected capacity change from 0 to 40427 [ 228.477845][ T4540] F2FS-fs (loop2): fault_injection options not supported [ 228.485142][ T4540] F2FS-fs (loop2): fault_type options not supported [ 228.492275][ T4540] F2FS-fs (loop2): invalid crc value [ 228.498520][ T4540] F2FS-fs (loop2): Found nat_bits in checkpoint [ 228.521530][ T4540] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 228.578163][ T4555] loop2: detected capacity change from 0 to 512 [ 228.581960][ T383] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.594717][ T383] usb 7-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 228.600425][ T4555] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 228.614132][ T383] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.623139][ T383] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 228.632477][ T4555] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.643396][ T383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.652145][ T383] usb 7-1: config 0 descriptor?? [ 228.662288][ T383] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 228.679394][ T290] EXT4-fs (loop2): unmounting filesystem. [ 228.702057][ T4568] loop2: detected capacity change from 0 to 512 [ 228.717502][ T4568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 228.728846][ T4568] EXT4-fs (loop2): 1 truncate cleaned up [ 228.735644][ T4568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 229.288244][ T28] audit: type=1400 audit(1780729052.751:1330): avc: denied { mount } for pid=4578 comm="syz.8.1303" name="/" dev="configfs" ino=12857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 229.311298][ T28] audit: type=1400 audit(1780729052.751:1331): avc: denied { search } for pid=4578 comm="syz.8.1303" name="/" dev="configfs" ino=12857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.333960][ T28] audit: type=1400 audit(1780729052.751:1332): avc: denied { read } for pid=4578 comm="syz.8.1303" name="/" dev="configfs" ino=12857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.380681][ T28] audit: type=1400 audit(1780729052.751:1333): avc: denied { watch watch_reads } for pid=4578 comm="syz.8.1303" path="/" dev="configfs" ino=12857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.428288][ T290] EXT4-fs (loop2): unmounting filesystem. [ 229.446182][ T28] audit: type=1400 audit(1780729052.751:1334): avc: denied { open } for pid=4578 comm="syz.8.1303" path="/" dev="configfs" ino=12857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.559338][ T4589] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 229.634498][ T4595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1307'. [ 229.645141][ T4595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'. [ 229.894537][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 230.112883][ T4608] FAULT_INJECTION: forcing a failure. [ 230.112883][ T4608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.125980][ T4608] CPU: 1 PID: 4608 Comm: syz.5.1311 Tainted: G W syzkaller #0 [ 230.134818][ T4608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.144851][ T4608] Call Trace: [ 230.148120][ T4608] [ 230.148236][ T4611] binder: 4605:4611 ioctl c0306201 200000000480 returned -14 [ 230.151050][ T4608] __dump_stack+0x21/0x24 [ 230.151075][ T4608] dump_stack_lvl+0x110/0x170 [ 230.151093][ T4608] ? __cfi_dump_stack_lvl+0x8/0x8 [ 230.172361][ T4608] dump_stack+0x15/0x24 [ 230.176497][ T4608] should_fail_ex+0x3d4/0x520 [ 230.181150][ T4608] should_fail+0xb/0x10 [ 230.185294][ T4608] should_fail_usercopy+0x1a/0x20 [ 230.190294][ T4608] _copy_from_user+0x1e/0xc0 [ 230.194862][ T4608] kvm_arch_vm_ioctl+0x3ed/0x1520 [ 230.199865][ T4608] ? __cfi_kvm_arch_vm_ioctl+0x10/0x10 [ 230.205302][ T4608] ? is_bpf_text_address+0x177/0x190 [ 230.210568][ T4608] ? kernel_text_address+0xa0/0xd0 [ 230.215661][ T4608] ? __kernel_text_address+0xd/0x30 [ 230.220838][ T4608] ? unwind_get_return_address+0x4d/0x90 [ 230.226447][ T4608] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 230.232584][ T4608] ? arch_stack_walk+0xfc/0x150 [ 230.237432][ T4608] ? stack_trace_save+0xa6/0xf0 [ 230.242261][ T4608] ? __stack_depot_save+0x36/0x480 [ 230.247351][ T4608] ? _parse_integer_limit+0x18a/0x1d0 [ 230.252699][ T4608] ? __asan_set_shadow_00+0xe/0x10 [ 230.257789][ T4608] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 230.262618][ T4608] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 230.268234][ T4608] kvm_vm_ioctl+0x79f/0xb30 [ 230.272720][ T4608] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 230.277741][ T4608] ? ioctl_has_perm+0x1b8/0x4f0 [ 230.282587][ T4608] ? memcpy+0x56/0x70 [ 230.286550][ T4608] ? ioctl_has_perm+0x40f/0x4f0 [ 230.291382][ T4608] ? has_cap_mac_admin+0x370/0x370 [ 230.296476][ T4608] ? vfs_write+0xa2c/0xce0 [ 230.300873][ T4608] ? selinux_file_ioctl+0x3a0/0x4d0 [ 230.306062][ T4608] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 230.311585][ T4608] ? mutex_unlock+0x8f/0x230 [ 230.316156][ T4608] ? __cfi_mutex_unlock+0x10/0x10 [ 230.321163][ T4608] ? __fget_files+0x2d5/0x330 [ 230.325833][ T4608] ? security_file_ioctl+0x95/0xc0 [ 230.330928][ T4608] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 230.335939][ T4608] __se_sys_ioctl+0x12f/0x1b0 [ 230.340616][ T4608] __x64_sys_ioctl+0x7b/0x90 [ 230.345196][ T4608] x64_sys_call+0x58b/0x9a0 [ 230.349688][ T4608] do_syscall_64+0x4c/0xa0 [ 230.354093][ T4608] ? clear_bhb_loop+0x30/0x80 [ 230.358755][ T4608] ? clear_bhb_loop+0x30/0x80 [ 230.363430][ T4608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.369320][ T4608] RIP: 0033:0x7f381419ce59 [ 230.373717][ T4608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.393299][ T4608] RSP: 002b:00007f38150ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.401695][ T4608] RAX: ffffffffffffffda RBX: 00007f3814415fa0 RCX: 00007f381419ce59 [ 230.409646][ T4608] RDX: 0000200000000240 RSI: 000000008048ae66 RDI: 0000000000000004 [ 230.417591][ T4608] RBP: 00007f38150ae090 R08: 0000000000000000 R09: 0000000000000000 [ 230.425539][ T4608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.433488][ T4608] R13: 00007f3814416038 R14: 00007f3814415fa0 R15: 00007ffdb97bd5c8 [ 230.441443][ T4608] [ 230.466828][ T4615] set_capacity_and_notify: 1 callbacks suppressed [ 230.466838][ T4615] loop2: detected capacity change from 0 to 512 [ 230.483768][ T4615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 230.515228][ T290] EXT4-fs (loop2): unmounting filesystem. [ 230.809772][ T531] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 230.822513][ T383] usb 7-1: USB disconnect, device number 9 [ 230.999771][ T531] usb 3-1: Using ep0 maxpacket: 32 [ 231.062341][ T531] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.088252][ T531] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 231.097788][ T531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.106752][ T531] usb 3-1: config 0 descriptor?? [ 231.130958][ T531] hub 3-1:0.0: bad descriptor, ignoring hub [ 231.138683][ T531] hub: probe of 3-1:0.0 failed with error -5 [ 231.145460][ T531] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 231.243196][ T4641] loop0: detected capacity change from 0 to 512 [ 231.250818][ T4641] EXT4-fs: Ignoring removed i_version option [ 231.423814][ T4641] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 231.433385][ T4641] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.587082][ T4641] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.1323: iget: bad i_size value: 2533274857506816 [ 232.135561][ T4651] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1326'. [ 232.166348][ T287] EXT4-fs (loop0): unmounting filesystem. [ 232.202048][ T4653] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1327'. [ 232.239817][ T4653] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 232.289527][ T4656] loop0: detected capacity change from 0 to 512 [ 232.338769][ T4656] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 232.390987][ T4628] loop6: detected capacity change from 0 to 131072 [ 232.409353][ T287] EXT4-fs (loop0): unmounting filesystem. [ 232.448885][ T4628] F2FS-fs (loop6): Found nat_bits in checkpoint [ 232.537854][ T4628] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 232.839768][ T531] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 232.945761][ T4651] loop5: detected capacity change from 0 to 131072 [ 233.030850][ T531] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.050715][ T531] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.062654][ T531] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.081375][ T531] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.092920][ T531] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.102104][ T531] usb 7-1: config 0 descriptor?? [ 233.379772][ T39] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 233.509374][ T531] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 233.519092][ T531] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 233.574932][ T39] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.590448][ T39] usb 9-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 233.603763][ T39] usb 9-1: config 0 interface 0 has no altsetting 0 [ 233.611331][ T39] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 233.620509][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.629105][ T39] usb 9-1: config 0 descriptor?? [ 233.635346][ T39] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 233.669871][ T383] usb 3-1: USB disconnect, device number 30 [ 233.689932][ T4689] loop2: detected capacity change from 0 to 40427 [ 233.702676][ T4691] device syzkaller0 entered promiscuous mode [ 233.705855][ T4689] F2FS-fs (loop2): invalid crc value [ 233.715315][ T4689] F2FS-fs (loop2): Found nat_bits in checkpoint [ 233.742193][ T4689] F2FS-fs (loop2): Start checkpoint disabled! [ 233.748650][ T4689] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 233.756084][ T4689] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 233.782163][ T39] usb 7-1: USB disconnect, device number 10 [ 233.785379][ T28] audit: type=1400 audit(1780729057.251:1335): avc: denied { reparent } for pid=4627 comm="syz.6.1320" name="file0" dev="loop6" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.821309][ T4689] F2FS-fs (loop2): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 233.841945][ T4697] loop0: detected capacity change from 0 to 512 [ 233.855908][ T4697] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 233.871091][ T431] kworker/u4:4: attempt to access beyond end of device [ 233.871091][ T431] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 233.887154][ T287] EXT4-fs (loop0): unmounting filesystem. [ 238.248635][ T4705] loop0: detected capacity change from 0 to 512 [ 238.255897][ T4705] EXT4-fs: Ignoring removed i_version option [ 238.488255][ T6] usb 9-1: USB disconnect, device number 12 [ 238.524746][ T4705] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 238.534019][ T4705] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.558898][ T4705] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.1341: iget: bad i_size value: 2533274857506816 [ 239.376686][ T287] EXT4-fs (loop0): unmounting filesystem. [ 239.623963][ T4729] loop2: detected capacity change from 0 to 512 [ 239.686415][ T4729] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 239.791111][ T4729] EXT4-fs (loop2): 1 truncate cleaned up [ 239.857948][ T4729] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 239.915597][ T4733] loop8: detected capacity change from 0 to 512 [ 239.924058][ T4734] loop0: detected capacity change from 0 to 512 [ 239.970176][ T290] EXT4-fs (loop2): unmounting filesystem. [ 239.976039][ T4734] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 239.987514][ T4733] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 240.010822][ T4734] EXT4-fs (loop0): 1 truncate cleaned up [ 240.019826][ T4734] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 240.031918][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 240.033187][ T28] audit: type=1400 audit(1780729063.501:1336): avc: denied { map } for pid=4732 comm="syz.0.1349" path="/258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 240.137338][ T287] EXT4-fs (loop0): unmounting filesystem. [ 240.159366][ T4744] loop2: detected capacity change from 0 to 40427 [ 240.166758][ T4744] F2FS-fs (loop2): invalid crc value [ 240.188134][ T4744] F2FS-fs (loop2): Found nat_bits in checkpoint [ 240.212466][ T4744] F2FS-fs (loop2): Start checkpoint disabled! [ 240.218954][ T4744] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 240.226371][ T4744] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 240.469580][ T4744] F2FS-fs (loop2): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 240.671458][ T714] kworker/u4:6: attempt to access beyond end of device [ 240.671458][ T714] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 241.169398][ T28] audit: type=1400 audit(1780729064.631:1337): avc: denied { create } for pid=4760 comm="syz.2.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 241.189839][ T60] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 241.197486][ T39] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 241.279997][ T4764] fuse: Bad value for 'fd' [ 241.364713][ T4773] loop2: detected capacity change from 0 to 16 [ 241.389039][ T4773] erofs: (device loop2): mounted with root inode @ nid 36. [ 241.399885][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 241.406065][ T39] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.417508][ T60] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 241.424844][ T39] usb 6-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 241.437783][ T60] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.447187][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.454171][ T39] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 241.465212][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.474599][ T60] usb 7-1: New USB device found, idVendor=0f6d, idProduct=08d3, bcdDevice= b.28 [ 241.485669][ T39] usb 6-1: config 0 descriptor?? [ 241.490743][ T60] usb 7-1: New USB device strings: Mfr=224, Product=6, SerialNumber=3 [ 241.499035][ T60] usb 7-1: Product: syz [ 241.504441][ T39] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 241.511808][ T60] usb 7-1: Manufacturer: syz [ 241.516399][ T60] usb 7-1: SerialNumber: syz [ 241.529799][ T60] usb 7-1: config 0 descriptor?? [ 241.776063][ T4736] loop6: detected capacity change from 0 to 256 [ 241.875177][ T4736] FAT-fs (loop6): Directory bread(block 64) failed [ 241.907897][ T4736] FAT-fs (loop6): Directory bread(block 65) failed [ 241.940642][ T4736] FAT-fs (loop6): Directory bread(block 66) failed [ 241.972984][ T4736] FAT-fs (loop6): Directory bread(block 67) failed [ 242.007154][ T4736] FAT-fs (loop6): Directory bread(block 68) failed [ 242.041716][ T4736] FAT-fs (loop6): Directory bread(block 69) failed [ 242.075099][ T4736] FAT-fs (loop6): Directory bread(block 70) failed [ 242.108455][ T4736] FAT-fs (loop6): Directory bread(block 71) failed [ 242.143732][ T4736] FAT-fs (loop6): Directory bread(block 72) failed [ 242.175403][ T4736] FAT-fs (loop6): Directory bread(block 73) failed [ 242.435421][ T60] usb 7-1: USB disconnect, device number 11 [ 242.490686][ T4780] loop0: detected capacity change from 0 to 512 [ 242.505963][ T4780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 242.543132][ T287] EXT4-fs (loop0): unmounting filesystem. [ 242.576304][ T4786] loop0: detected capacity change from 0 to 512 [ 242.590452][ T4786] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 242.598351][ T4786] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 242.606588][ T4786] System zones: 0-1, 15-15, 18-18, 34-34 [ 242.612559][ T4786] EXT4-fs (loop0): orphan cleanup on readonly fs [ 242.618931][ T4786] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.1367: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 242.637631][ T4786] EXT4-fs error (device loop0): ext4_quota_enable:7039: comm syz.0.1367: Bad quota inode: 4, type: 1 [ 242.648775][ T4786] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 242.663542][ T4786] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 242.670437][ T4786] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 242.679558][ T4784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 242.688667][ T4784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 242.689083][ T287] EXT4-fs (loop0): unmounting filesystem. [ 242.979788][ T510] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 242.997452][ T6] usb 6-1: USB disconnect, device number 23 [ 243.159805][ T510] usb 1-1: Using ep0 maxpacket: 32 [ 243.166950][ T510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.214852][ T510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.260931][ T510] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 243.286346][ T4794] loop5: detected capacity change from 0 to 40427 [ 243.293068][ T510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.335037][ T4794] F2FS-fs (loop5): invalid crc value [ 243.565760][ T4794] F2FS-fs (loop5): Found nat_bits in checkpoint [ 243.583929][ T510] usb 1-1: config 0 descriptor?? [ 243.594479][ T510] hub 1-1:0.0: USB hub found [ 243.652759][ T4794] F2FS-fs (loop5): Start checkpoint disabled! [ 243.660952][ T4794] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 243.669101][ T4794] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 243.798886][ T510] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 244.002254][ T4808] loop2: detected capacity change from 0 to 1024 [ 244.008646][ T28] audit: type=1400 audit(1780729067.471:1338): avc: denied { create } for pid=4807 comm="syz.6.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 244.033663][ T4808] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 244.038790][ T510] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 244.063998][ T28] audit: type=1400 audit(1780729067.471:1339): avc: denied { sys_module } for pid=4807 comm="syz.6.1375" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 244.088765][ T4808] EXT4-fs error (device loop2): ext4_get_journal_inode:5749: inode #32: comm syz.2.1374: iget: special inode unallocated [ 244.094737][ T4814] loop6: detected capacity change from 0 to 512 [ 244.107982][ T4808] EXT4-fs (loop2): no journal found [ 244.124025][ T1053] kworker/u4:7: attempt to access beyond end of device [ 244.124025][ T1053] loop5: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 244.142346][ T1053] kworker/u4:7: attempt to access beyond end of device [ 244.142346][ T1053] loop5: rw=1, sector=77840, nr_sectors = 16 limit=40427 [ 244.156387][ T1053] kworker/u4:7: attempt to access beyond end of device [ 244.156387][ T1053] loop5: rw=1, sector=77872, nr_sectors = 8 limit=40427 [ 244.156605][ T4814] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 244.170352][ T1053] kworker/u4:7: attempt to access beyond end of device [ 244.170352][ T1053] loop5: rw=1, sector=77912, nr_sectors = 24 limit=40427 [ 244.193782][ T1053] kworker/u4:7: attempt to access beyond end of device [ 244.193782][ T1053] loop5: rw=1, sector=77968, nr_sectors = 8 limit=40427 [ 244.223568][ T1053] kworker/u4:7: attempt to access beyond end of device [ 244.223568][ T1053] loop5: rw=1, sector=78008, nr_sectors = 32 limit=40427 [ 244.237750][ T1053] kworker/u4:7: attempt to access beyond end of device [ 244.237750][ T1053] loop5: rw=1, sector=78056, nr_sectors = 8 limit=40427 [ 244.254849][ T1053] kworker/u4:7: attempt to access beyond end of device [ 244.254849][ T1053] loop5: rw=1, sector=78072, nr_sectors = 32 limit=40427 [ 244.269656][ T1015] EXT4-fs (loop6): unmounting filesystem. [ 244.269888][ T1053] kworker/u4:7: attempt to access beyond end of device [ 244.269888][ T1053] loop5: rw=1, sector=78128, nr_sectors = 16 limit=40427 [ 244.343352][ T4826] input: syz1 as /devices/virtual/input/input22 [ 244.349848][ T39] usb 1-1: USB disconnect, device number 29 [ 244.687106][ T4826] loop2: detected capacity change from 0 to 4096 [ 244.693973][ T4826] ext3: Bad value for 'min_batch_time' [ 244.750149][ T2067] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.821376][ T4832] loop2: detected capacity change from 0 to 1024 [ 244.827958][ T4832] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.834991][ T4832] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 244.834991][ T4832] [ 245.707765][ T4854] loop6: detected capacity change from 0 to 512 [ 245.767712][ T4854] ext4: Unknown parameter 'func' [ 245.888342][ T4861] device vlan2 entered promiscuous mode [ 245.912905][ T4865] loop8: detected capacity change from 0 to 512 [ 245.933231][ T4865] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 246.015297][ T4868] device bridge6 entered promiscuous mode [ 246.216246][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 246.279321][ T4874] loop2: detected capacity change from 0 to 8192 [ 246.482269][ T4882] loop6: detected capacity change from 0 to 256 [ 246.489587][ T4882] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.625089][ T4881] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 246.652774][ T4881] FAT-fs (loop6): Filesystem has been set read-only [ 246.659411][ T4881] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 246.668221][ T4881] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 246.676397][ T4881] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 246.684378][ T4881] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 246.692394][ T4881] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 246.725881][ T4863] loop0: detected capacity change from 0 to 131072 [ 246.732880][ T4863] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 150994945) [ 246.741093][ T4863] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 246.749459][ T4863] F2FS-fs (loop0): invalid crc value [ 246.756388][ T4863] F2FS-fs (loop0): Found nat_bits in checkpoint [ 246.788575][ T4863] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 246.797680][ T4863] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 247.810781][ T4904] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 247.835087][ T4904] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 247.958009][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 248.002842][ T4921] ext4: Unknown parameter 'func' [ 248.151977][ T4919] F2FS-fs (loop5): invalid crc value [ 248.158596][ T4919] F2FS-fs (loop5): Found nat_bits in checkpoint [ 248.427543][ T4929] set_capacity_and_notify: 3 callbacks suppressed [ 248.427570][ T4929] loop8: detected capacity change from 0 to 512 [ 248.440870][ T4929] EXT4-fs: Ignoring removed i_version option [ 248.447738][ T39] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 248.475426][ T4919] F2FS-fs (loop5): Start checkpoint disabled! [ 248.486978][ T4929] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 248.496880][ T4929] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.554783][ T4929] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.1410: iget: bad i_size value: 2533274857506816 [ 248.630112][ T4919] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 248.649896][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 248.664931][ T39] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.698707][ T4919] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 248.707281][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.204376][ T39] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 249.214502][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.224411][ T4919] F2FS-fs (loop5): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 249.235561][ T39] usb 7-1: config 0 descriptor?? [ 249.287886][ T39] hub 7-1:0.0: bad descriptor, ignoring hub [ 249.332774][ T39] hub: probe of 7-1:0.0 failed with error -5 [ 249.340435][ T1557] bio_check_eod: 488 callbacks suppressed [ 249.340447][ T1557] kworker/u4:8: attempt to access beyond end of device [ 249.340447][ T1557] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 249.343343][ T39] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 249.418729][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 249.433764][ T4938] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 249.709848][ T4907] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 250.682343][ T4961] loop2: detected capacity change from 0 to 256 [ 250.705277][ T4961] FAT-fs (loop2): Directory bread(block 64) failed [ 250.712214][ T4961] FAT-fs (loop2): Directory bread(block 65) failed [ 250.718778][ T4961] FAT-fs (loop2): Directory bread(block 66) failed [ 250.725400][ T4961] FAT-fs (loop2): Directory bread(block 67) failed [ 250.731993][ T4961] FAT-fs (loop2): Directory bread(block 68) failed [ 250.738569][ T4961] FAT-fs (loop2): Directory bread(block 69) failed [ 250.745363][ T4961] FAT-fs (loop2): Directory bread(block 70) failed [ 250.753341][ T4961] FAT-fs (loop2): Directory bread(block 71) failed [ 250.760349][ T4961] FAT-fs (loop2): Directory bread(block 72) failed [ 250.767411][ T4961] FAT-fs (loop2): Directory bread(block 73) failed [ 250.774086][ T39] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 250.971877][ T39] usb 1-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.013027][ T39] usb 1-1: config 0 interface 0 has no altsetting 0 [ 251.088178][ T39] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 251.116266][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.131778][ T28] audit: type=1400 audit(1780729074.601:1340): avc: denied { write } for pid=4973 comm="syz.6.1421" path="socket:[42647]" dev="sockfs" ino=42647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.132294][ T39] usb 1-1: config 0 descriptor?? [ 251.171829][ T39] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 251.299838][ T531] usb 7-1: USB disconnect, device number 12 [ 251.311373][ T4977] loop6: detected capacity change from 0 to 40427 [ 251.327681][ T4977] F2FS-fs (loop6): invalid crc value [ 251.339062][ T4977] F2FS-fs (loop6): Found nat_bits in checkpoint [ 251.357635][ T4969] loop8: detected capacity change from 0 to 131072 [ 251.370292][ T4969] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1544) blocks(1024) [ 251.380684][ T4969] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 251.390068][ T4977] F2FS-fs (loop6): Start checkpoint disabled! [ 251.396540][ T4969] F2FS-fs (loop8): invalid crc value [ 251.402312][ T4977] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 251.410132][ T4977] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 251.414275][ T4969] F2FS-fs (loop8): Found nat_bits in checkpoint [ 251.445545][ T4977] F2FS-fs (loop6): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 251.463571][ T4969] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 251.470847][ T4969] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 251.481610][ T4582] kworker/u4:10: attempt to access beyond end of device [ 251.481610][ T4582] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 251.499176][ T4969] F2FS-fs (loop8): lookup inode (7) has corrupted xattr [ 251.508748][ T4969] F2FS-fs (loop8): lookup inode (7) has corrupted xattr [ 251.769894][ T4992] loop6: detected capacity change from 0 to 512 [ 251.777765][ T4992] EXT4-fs: Ignoring removed i_version option [ 251.959879][ T39] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 251.987697][ T4997] loop8: detected capacity change from 0 to 512 [ 252.088158][ T4992] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 252.097763][ T4992] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.147022][ T4992] EXT4-fs error (device loop6): ext4_lookup:1858: inode #12: comm syz.6.1423: iget: bad i_size value: 2533274857506816 [ 252.160277][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 252.170534][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.184681][ T4997] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 252.214537][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.310066][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 252.353628][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.366042][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 252.392000][ T39] usb 3-1: config 0 descriptor?? [ 252.405082][ T39] hub 3-1:0.0: USB hub found [ 252.530346][ T531] usb 1-1: USB disconnect, device number 30 [ 252.571171][ T5001] loop8: detected capacity change from 0 to 128 [ 252.578917][ T1015] EXT4-fs (loop6): unmounting filesystem. [ 252.592912][ T5001] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 252.599624][ T39] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 252.605159][ T5001] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.630687][ T5001] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1427'. [ 252.630912][ T5003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1428'. [ 252.657524][ T3190] EXT4-fs (loop8): unmounting filesystem. [ 253.500820][ T39] hid-generic 0003:046D:C31C.000F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 253.623283][ T5029] loop5: detected capacity change from 0 to 512 [ 253.632959][ T5029] EXT4-fs: Ignoring removed bh option [ 253.643394][ T5029] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 253.655422][ T5029] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 253.665580][ T5029] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1438: Corrupt directory, running e2fsck is recommended [ 253.679204][ T5029] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 253.687703][ T5029] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.1438: corrupted in-inode xattr [ 253.699955][ T5029] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1438: couldn't read orphan inode 15 (err -117) [ 253.712111][ T5029] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 253.727461][ T974] EXT4-fs (loop5): unmounting filesystem. [ 253.830056][ T6] usb 3-1: USB disconnect, device number 31 [ 253.999783][ T510] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 254.181414][ T510] usb 6-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.194609][ T510] usb 6-1: config 0 interface 0 has no altsetting 0 [ 254.202026][ T510] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 254.211756][ T510] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.260746][ T510] usb 6-1: config 0 descriptor?? [ 254.318186][ T510] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 254.659788][ T531] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 254.749847][ T1603] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 254.749883][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 254.762159][ T5009] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 254.787183][ T5052] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1445'. [ 254.907950][ T531] usb 1-1: Using ep0 maxpacket: 32 [ 255.209796][ T19] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 255.389861][ T19] usb 7-1: Using ep0 maxpacket: 8 [ 255.397734][ T19] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.409184][ T19] usb 7-1: config 1 interface 1 has no altsetting 0 [ 255.422878][ T19] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 255.432776][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.441399][ T19] usb 7-1: Product: syz [ 255.445923][ T19] usb 7-1: Manufacturer: syz [ 255.451285][ T19] usb 7-1: SerialNumber: syz [ 255.699521][ T531] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.709778][ T531] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.722850][ T531] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 255.732197][ T531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.736780][ T19] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 255.749361][ T19] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 255.757937][ T531] usb 1-1: config 0 descriptor?? [ 255.767646][ T531] hub 1-1:0.0: bad descriptor, ignoring hub [ 255.779869][ T531] hub: probe of 1-1:0.0 failed with error -5 [ 255.786149][ T531] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 255.793456][ C1] ================================================================== [ 255.793544][ C1] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 255.793614][ C1] Write of size 8 at addr ffff888109500a00 by task kworker/1:4/531 [ 255.793658][ C1] [ 255.793665][ C1] CPU: 1 PID: 531 Comm: kworker/1:4 Tainted: G W syzkaller #0 [ 255.793687][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.793699][ C1] Workqueue: usb_hub_wq hub_event [ 255.793758][ C1] Call Trace: [ 255.793764][ C1] [ 255.793771][ C1] __dump_stack+0x21/0x24 [ 255.793845][ C1] dump_stack_lvl+0x110/0x170 [ 255.793862][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 255.793884][ C1] ? enqueue_timer+0xae/0x480 [ 255.793907][ C1] print_address_description+0x71/0x200 [ 255.793976][ C1] print_report+0x4a/0x60 [ 255.793996][ C1] kasan_report+0x122/0x150 [ 255.794050][ C1] ? enqueue_timer+0xae/0x480 [ 255.794074][ C1] __asan_report_store8_noabort+0x17/0x20 [ 255.794118][ C1] enqueue_timer+0xae/0x480 [ 255.794145][ C1] __mod_timer+0x84c/0xc00 [ 255.794169][ C1] mod_timer+0x1f/0x30 [ 255.794190][ C1] can_stat_update+0xb1a/0xbb0 [ 255.794235][ C1] ? __cfi_can_stat_update+0x10/0x10 [ 255.794254][ C1] call_timer_fn+0x46/0x2a0 [ 255.794278][ C1] ? __cfi_can_stat_update+0x10/0x10 [ 255.794297][ C1] __run_timers+0x65b/0x9f0 [ 255.794323][ C1] ? calc_index+0x200/0x200 [ 255.794346][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 255.794374][ C1] run_timer_softirq+0x6a/0xf0 [ 255.794398][ C1] handle_softirqs+0x1d7/0x600 [ 255.794420][ C1] ? irqtime_account_irq+0xc4/0x240 [ 255.794478][ C1] __irq_exit_rcu+0x52/0xf0 [ 255.794499][ C1] irq_exit_rcu+0x9/0x10 [ 255.794517][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 255.794547][ C1] [ 255.794562][ C1] [ 255.794569][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 255.794647][ C1] RIP: 0010:console_emit_next_record+0x8a1/0xab0 [ 255.794708][ C1] Code: de 48 81 e6 00 02 00 00 31 ff e8 4a 8d 19 00 48 81 e3 00 02 00 00 75 07 e8 7c 88 19 00 eb 06 e8 75 88 19 00 fb 0f b6 5c 24 17 <66> 43 c7 44 25 20 f8 f8 43 c6 44 25 22 f8 4f 89 74 25 10 66 43 c7 [ 255.794787][ C1] RSP: 0018:ffffc9001155e7c0 EFLAGS: 00000283 [ 255.794860][ C1] RAX: ffffffff8157f30b RBX: 0000000000000001 RCX: 0000000000100000 [ 255.794875][ C1] RDX: ffffc9000edb1000 RSI: 000000000002448e RDI: 000000000002448f [ 255.794890][ C1] RBP: ffffc9001155e9b0 R08: 0000000000000003 R09: 0000000000000004 [ 255.794904][ C1] R10: dffffc0000000000 R11: fffff520022abce8 R12: dffffc0000000000 [ 255.794926][ C1] R13: 1ffff920022abd04 R14: f8f8f8f8f8f8f8f8 R15: ffffc9001155e9ff [ 255.794942][ C1] ? console_emit_next_record+0x89b/0xab0 [ 255.794981][ C1] ? info_print_prefix+0x360/0x360 [ 255.795009][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 255.795031][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 255.795054][ C1] ? __cfi_vprintk_store+0x10/0x10 [ 255.795075][ C1] console_unlock+0x246/0x560 [ 255.795095][ C1] ? down_trylock+0x52/0xb0 [ 255.795157][ C1] ? __cfi_console_unlock+0x10/0x10 [ 255.795180][ C1] ? snprintf+0xe5/0x140 [ 255.795227][ C1] ? kmem_cache_alloc+0x16e/0x330 [ 255.795279][ C1] vprintk_emit+0x14d/0x420 [ 255.795300][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 255.795321][ C1] ? device_add+0xb4d/0xef0 [ 255.795388][ C1] ? usb_set_configuration+0x19c2/0x1f10 [ 255.795435][ C1] ? usb_generic_driver_probe+0x91/0x150 [ 255.795475][ C1] ? usb_probe_device+0x159/0x270 [ 255.795496][ C1] ? dev_vprintk_emit+0x16f/0x404 [ 255.795515][ C1] dev_vprintk_emit+0x351/0x404 [ 255.795533][ C1] ? __cfi_dev_vprintk_emit+0x8/0x8 [ 255.795552][ C1] ? kernfs_xattr_get+0x81/0x90 [ 255.795641][ C1] dev_printk_emit+0xeb/0x13c [ 255.795660][ C1] ? __cfi_dev_printk_emit+0x8/0x8 [ 255.795677][ C1] ? _raw_spin_lock+0x94/0xf0 [ 255.795700][ C1] ? security_kernfs_init_security+0x8c/0xb0 [ 255.795781][ C1] __dev_printk+0x17f/0x1b0 [ 255.795805][ C1] _dev_err+0x11b/0x16c [ 255.795824][ C1] ? __cfi__dev_err+0x8/0x8 [ 255.795841][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 255.795861][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 255.795881][ C1] usbhid_probe+0xc8a/0xfa0 [ 255.795929][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 255.795953][ C1] ? pm_runtime_enable+0x1e7/0x2c0 [ 255.796025][ C1] usb_probe_interface+0x63f/0xb20 [ 255.796050][ C1] ? __cfi_usb_probe_interface+0x10/0x10 [ 255.796072][ C1] really_probe+0x2cb/0x960 [ 255.796119][ C1] ? pm_runtime_barrier+0x161/0x1e0 [ 255.796148][ C1] __driver_probe_device+0x198/0x280 [ 255.796172][ C1] driver_probe_device+0x54/0x3e0 [ 255.796195][ C1] ? __device_attach_driver+0x2d3/0x4a0 [ 255.796217][ C1] __device_attach_driver+0x2e9/0x4a0 [ 255.796239][ C1] ? __cfi___device_attach_driver+0x10/0x10 [ 255.796263][ C1] bus_for_each_drv+0x192/0x220 [ 255.796281][ C1] ? __kasan_check_write+0x14/0x20 [ 255.796299][ C1] ? __cfi___device_attach_driver+0x10/0x10 [ 255.796323][ C1] ? __cfi_bus_for_each_drv+0x10/0x10 [ 255.796340][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 255.796366][ C1] __device_attach+0x2b0/0x420 [ 255.796387][ C1] ? device_attach+0x20/0x20 [ 255.796407][ C1] ? kobject_uevent_env+0x35d/0x730 [ 255.796480][ C1] device_initial_probe+0x1a/0x20 [ 255.796500][ C1] bus_probe_device+0xc0/0x1f0 [ 255.796517][ C1] device_add+0xb4d/0xef0 [ 255.796545][ C1] usb_set_configuration+0x19c2/0x1f10 [ 255.796573][ C1] usb_generic_driver_probe+0x91/0x150 [ 255.796591][ C1] usb_probe_device+0x159/0x270 [ 255.796612][ C1] ? __cfi_usb_probe_device+0x10/0x10 [ 255.796633][ C1] really_probe+0x2cb/0x960 [ 255.796653][ C1] ? pm_runtime_barrier+0x161/0x1e0 [ 255.796677][ C1] __driver_probe_device+0x198/0x280 [ 255.796697][ C1] driver_probe_device+0x54/0x3e0 [ 255.796747][ C1] ? __device_attach_driver+0x2d3/0x4a0 [ 255.796772][ C1] __device_attach_driver+0x2e9/0x4a0 [ 255.796797][ C1] ? __cfi___device_attach_driver+0x10/0x10 [ 255.796822][ C1] bus_for_each_drv+0x192/0x220 [ 255.796838][ C1] ? __kasan_check_write+0x14/0x20 [ 255.796857][ C1] ? __cfi___device_attach_driver+0x10/0x10 [ 255.796881][ C1] ? __cfi_bus_for_each_drv+0x10/0x10 [ 255.796899][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 255.796930][ C1] __device_attach+0x2b0/0x420 [ 255.796951][ C1] ? device_attach+0x20/0x20 [ 255.796970][ C1] device_initial_probe+0x1a/0x20 [ 255.796995][ C1] bus_probe_device+0xc0/0x1f0 [ 255.797011][ C1] device_add+0xb4d/0xef0 [ 255.797033][ C1] usb_new_device+0xa81/0x1550 [ 255.797053][ C1] ? __cfi_usb_new_device+0x10/0x10 [ 255.797076][ C1] hub_event+0x2aca/0x46b0 [ 255.797104][ C1] ? __cfi_hub_event+0x10/0x10 [ 255.797124][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 255.797149][ C1] ? __cfi_hub_event+0x10/0x10 [ 255.797171][ C1] process_one_work+0x71f/0xc40 [ 255.797192][ C1] worker_thread+0xa29/0x11e0 [ 255.797210][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 255.797238][ C1] kthread+0x281/0x320 [ 255.797258][ C1] ? __cfi_worker_thread+0x10/0x10 [ 255.797276][ C1] ? __cfi_kthread+0x10/0x10 [ 255.797296][ C1] ret_from_fork+0x1f/0x30 [ 255.797321][ C1] [ 255.797329][ C1] [ 255.797339][ C1] Allocated by task 5009: [ 255.797349][ C1] kasan_set_track+0x4b/0x70 [ 255.797371][ C1] kasan_save_alloc_info+0x25/0x30 [ 255.797388][ C1] __kasan_kmalloc+0x95/0xb0 [ 255.797411][ C1] __kmalloc+0xb1/0x1e0 [ 255.797463][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 255.797551][ C1] hci_uart_tty_ioctl+0x3c8/0xa20 [ 255.797593][ C1] tty_ioctl+0x8ef/0xc60 [ 255.797639][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 255.797682][ C1] __x64_sys_ioctl+0x7b/0x90 [ 255.797698][ C1] x64_sys_call+0x58b/0x9a0 [ 255.797727][ C1] do_syscall_64+0x4c/0xa0 [ 255.797745][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.797767][ C1] [ 255.797772][ C1] Freed by task 5009: [ 255.797781][ C1] kasan_set_track+0x4b/0x70 [ 255.797801][ C1] kasan_save_free_info+0x31/0x50 [ 255.797818][ C1] ____kasan_slab_free+0x132/0x180 [ 255.797839][ C1] __kasan_slab_free+0x11/0x20 [ 255.797860][ C1] slab_free_freelist_hook+0xc2/0x190 [ 255.797882][ C1] __kmem_cache_free+0xb7/0x1b0 [ 255.797910][ C1] kfree+0x6f/0xf0 [ 255.797925][ C1] hci_release_dev+0x12a3/0x13b0 [ 255.797949][ C1] bt_host_release+0x82/0x90 [ 255.798031][ C1] device_release+0xa4/0x1d0 [ 255.798053][ C1] kobject_put+0x19d/0x280 [ 255.798074][ C1] put_device+0x1f/0x30 [ 255.798089][ C1] hci_dev_cmd+0x279/0x740 [ 255.798105][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 255.798125][ C1] sock_do_ioctl+0x114/0x330 [ 255.798200][ C1] sock_ioctl+0x4bd/0x710 [ 255.798221][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 255.798238][ C1] __x64_sys_ioctl+0x7b/0x90 [ 255.798254][ C1] x64_sys_call+0x58b/0x9a0 [ 255.798272][ C1] do_syscall_64+0x4c/0xa0 [ 255.798291][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.798315][ C1] [ 255.798319][ C1] Last potentially related work creation: [ 255.798325][ C1] kasan_save_stack+0x3a/0x60 [ 255.798343][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 255.798358][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 255.798374][ C1] insert_work+0x51/0x300 [ 255.798389][ C1] __queue_work+0x9b1/0xd30 [ 255.798411][ C1] queue_work_on+0xde/0x150 [ 255.798433][ C1] __hci_cmd_sync_sk+0xa7f/0xd30 [ 255.798480][ C1] hci_cmd_sync_status+0x53/0x120 [ 255.798500][ C1] hci_dev_cmd+0x648/0x740 [ 255.798515][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 255.798538][ C1] sock_do_ioctl+0x114/0x330 [ 255.798563][ C1] sock_ioctl+0x4bd/0x710 [ 255.798588][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 255.798606][ C1] __x64_sys_ioctl+0x7b/0x90 [ 255.798624][ C1] x64_sys_call+0x58b/0x9a0 [ 255.798642][ C1] do_syscall_64+0x4c/0xa0 [ 255.798662][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.798686][ C1] [ 255.798690][ C1] Second to last potentially related work creation: [ 255.798696][ C1] kasan_save_stack+0x3a/0x60 [ 255.798725][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 255.798739][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 255.798754][ C1] insert_work+0x51/0x300 [ 255.798768][ C1] __queue_work+0x9b1/0xd30 [ 255.798787][ C1] queue_work_on+0xde/0x150 [ 255.798806][ C1] hci_cmd_timeout+0x191/0x200 [ 255.798825][ C1] process_one_work+0x71f/0xc40 [ 255.798840][ C1] worker_thread+0xa29/0x11e0 [ 255.798855][ C1] kthread+0x281/0x320 [ 255.798871][ C1] ret_from_fork+0x1f/0x30 [ 255.798890][ C1] [ 255.798894][ C1] The buggy address belongs to the object at ffff888109500000 [ 255.798894][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 255.798911][ C1] The buggy address is located 2560 bytes inside of [ 255.798911][ C1] 8192-byte region [ffff888109500000, ffff888109502000) [ 255.798940][ C1] [ 255.798944][ C1] The buggy address belongs to the physical page: [ 255.798979][ C1] page:ffffea0004254000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109500 [ 255.798999][ C1] head:ffffea0004254000 order:3 compound_mapcount:0 compound_pincount:0 [ 255.799014][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 255.799037][ C1] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 255.799053][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 255.799063][ C1] page dumped because: kasan: bad access detected [ 255.799077][ C1] page_owner tracks the page as allocated [ 255.799083][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4598, tgid 4597 (syz.8.1308), ts 229930716636, free_ts 229912430702 [ 255.799161][ T28] audit: type=1400 audit(1780729079.261:1341): avc: denied { mount } for pid=5069 comm="syz.8.1451" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 255.799116][ C1] post_alloc_hook+0x1f5/0x210 [ 255.799186][ C1] prep_new_page+0x1c/0x110 [ 255.799200][ T28] audit: type=1400 audit(1780729079.261:1342): avc: denied { mounton } for pid=5069 comm="syz.8.1451" path="/file0" dev="bpf" ino=43326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 255.799209][ C1] get_page_from_freelist+0x2d12/0x2d80 [ 255.799233][ C1] __alloc_pages+0x1fa/0x610 [ 255.799253][ C1] alloc_slab_page+0x6e/0xf0 [ 255.799270][ C1] new_slab+0x98/0x3d0 [ 255.799285][ C1] ___slab_alloc+0x6bd/0xb20 [ 255.799307][ C1] __slab_alloc+0x5e/0xa0 [ 255.799326][ C1] __kmem_cache_alloc_node+0x203/0x2c0 [ 255.799355][ C1] __kmalloc_node+0xa1/0x1e0 [ 255.799371][ C1] kvmalloc_node+0x28a/0x460 [ 255.799410][ C1] kvm_dev_ioctl_get_cpuid+0x206/0x780 [ 255.799423][ C1] kvm_arch_dev_ioctl+0x3d3/0x890 [ 255.799434][ C1] kvm_dev_ioctl+0xd6/0x11f0 [ 255.799447][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 255.799456][ C1] __x64_sys_ioctl+0x7b/0x90 [ 255.799466][ C1] page last free stack trace: [ 255.799471][ C1] free_unref_page_prepare+0x7f8/0x800 [ 255.799494][ C1] free_unref_page+0x95/0x540 [ 255.799517][ C1] __free_pages+0x67/0x100 [ 255.799539][ C1] __free_slab+0xca/0x1a0 [ 255.799553][ C1] __unfreeze_partials+0x160/0x190 [ 255.799561][ C1] put_cpu_partial+0xa9/0x100 [ 255.799574][ C1] __slab_free+0x1c4/0x280 [ 255.799586][ C1] ___cache_free+0xbf/0xd0 [ 255.799597][ C1] qlist_free_all+0xc6/0x140 [ 255.799607][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 255.799619][ C1] __kasan_slab_alloc+0x24/0x80 [ 255.799640][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 255.799665][ C1] kmem_cache_alloc+0x16e/0x330 [ 255.799689][ C1] getname_flags+0xb9/0x500 [ 255.799733][ C1] __se_sys_newfstatat+0x127/0x440 [ 255.799752][ C1] __x64_sys_newfstatat+0x9b/0xb0 [ 255.799771][ C1] [ 255.799775][ C1] Memory state around the buggy address: [ 255.799786][ C1] ffff888109500900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.799800][ C1] ffff888109500980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.799814][ C1] >ffff888109500a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.799824][ C1] ^ [ 255.799834][ C1] ffff888109500a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.799846][ C1] ffff888109500b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.799855][ C1] ================================================================== [ 255.799864][ C1] Disabling lock debugging due to kernel taint [ 255.955869][ T19] snd-usb-audio: probe of 7-1:1.2 failed with error -22 [ 256.000554][ T531] usb 1-1: USB disconnect, device number 31 [ 256.018363][ T2067] udevd[2067]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 256.750512][ T531] usb 6-1: USB disconnect, device number 24 [ 256.752697][ T19] usb 7-1: USB disconnect, device number 13 [ 256.849789][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 257.244864][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 257.253300][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B W syzkaller #0 [ 257.261770][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.271799][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 257.277064][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 51 29 00 4c 89 ff e8 c0 3f ba 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 fc f6 6e 00 49 8b 7d 00 e8 53 3b [ 257.296645][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 257.302690][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888100333cc0 [ 257.310638][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 257.318587][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 257.326537][ C1] R10: dffffc0000000000 R11: ffffed10212a0139 R12: dffffc0000000000 [ 257.334481][ C1] R13: 0000000000000000 R14: ffff8881095009c8 R15: 0000000000000008 [ 257.342426][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 257.351327][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.357883][ C1] CR2: 00007f38143ec4b8 CR3: 0000000121771000 CR4: 00000000003526a0 [ 257.365833][ C1] DR0: 0000000000000100 DR1: 00040000000000ff DR2: 0000000000000004 [ 257.373778][ C1] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.381727][ C1] Call Trace: [ 257.385075][ C1] [ 257.387902][ C1] delayed_work_timer_fn+0x61/0x80 [ 257.393002][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 257.398785][ C1] call_timer_fn+0x46/0x2a0 [ 257.403265][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 257.409047][ C1] __run_timers+0x689/0x9f0 [ 257.413534][ C1] ? calc_index+0x200/0x200 [ 257.418018][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 257.423200][ C1] run_timer_softirq+0x6a/0xf0 [ 257.427948][ C1] handle_softirqs+0x1d7/0x600 [ 257.432688][ C1] ? irqtime_account_irq+0xc4/0x240 [ 257.437865][ C1] __irq_exit_rcu+0x52/0xf0 [ 257.442344][ C1] irq_exit_rcu+0x9/0x10 [ 257.446558][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 257.452172][ C1] [ 257.455085][ C1] [ 257.457993][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 257.463954][ C1] RIP: 0010:default_idle+0xf/0x20 [ 257.468959][ C1] Code: 57 e3 b4 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 43 f3 63 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 257.488545][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 257.494595][ C1] RAX: ffff8881f6f00000 RBX: ffff888100333cc0 RCX: 1256cce05b30c700 [ 257.502542][ C1] RDX: 0000000000000001 RSI: ffffffff85ca8f00 RDI: ffffffff85ca8ec0 [ 257.510486][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 257.518430][ C1] R10: 0000000000000000 R11: ffffffff85023e30 R12: dffffc0000000000 [ 257.526373][ C1] R13: 0000000000000001 R14: ffff888100333cc0 R15: dffffc0000000000 [ 257.534327][ C1] ? __cfi_default_idle+0x10/0x10 [ 257.539337][ C1] arch_cpu_idle+0x1c/0x20 [ 257.543728][ C1] default_idle_call+0x71/0x1d0 [ 257.548592][ C1] do_idle+0x354/0x640 [ 257.552638][ C1] ? ct_irq_exit+0x9/0x10 [ 257.556947][ C1] ? irqentry_exit+0x30/0x40 [ 257.561513][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 257.566687][ C1] cpu_startup_entry+0x43/0x60 [ 257.571425][ C1] start_secondary+0x119/0x120 [ 257.576168][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 257.582040][ C1] [ 257.585037][ C1] Modules linked in: [ 257.588909][ C1] ---[ end trace 0000000000000000 ]--- [ 257.594336][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 257.599616][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 51 29 00 4c 89 ff e8 c0 3f ba 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 fc f6 6e 00 49 8b 7d 00 e8 53 3b [ 257.619197][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 257.625239][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888100333cc0 [ 257.633189][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 257.641144][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 257.649093][ C1] R10: dffffc0000000000 R11: ffffed10212a0139 R12: dffffc0000000000 [ 257.657039][ C1] R13: 0000000000000000 R14: ffff8881095009c8 R15: 0000000000000008 [ 257.664988][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 257.673894][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.680452][ C1] CR2: 00007f38143ec4b8 CR3: 0000000121771000 CR4: 00000000003526a0 [ 257.688412][ C1] DR0: 0000000000000100 DR1: 00040000000000ff DR2: 0000000000000004 [ 257.696359][ C1] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.704310][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 257.711788][ C1] Kernel Offset: disabled [ 257.716105][ C1] Rebooting in 86400 seconds..