last executing test programs: 1m42.627246342s ago: executing program 4 (id=5): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x401e, &(0x7f0000000100)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f000000ae80)='./file0\x00', 0x1817c1, 0x0) r0 = open(&(0x7f000000bd00)='./file0\x00', 0x8000, 0x83) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f000000bd40)={0x500, 0x100000000}) 1m42.562375288s ago: executing program 2 (id=3): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_tracing={0x1a, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc71, 0x0, 0x0, 0x1dfa2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m39.32403671s ago: executing program 4 (id=12): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x98, 0xc6, 0xdb, 0x8, 0x408, 0x4033, 0x5d62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x8, 0xd0, 0x22, "", [{{0x9, 0x4, 0x32, 0x0, 0x1, 0xe, 0x1, 0x1, 0x1, [], [{{0x9, 0x5, 0xa, 0x10, 0x20, 0xd, 0x54, 0x81}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', 0x8d0, &(0x7f0000000400)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00a99176bffea999ec4947785a4b3392b470a878b010acc5fde3f7c39533b111d92aa1e3cd9504b4aec083a038cd1b944d504716e6b8463de9dc9743fbe9e0ef9396a932024b904283205650ea735ae7adac50b5efe5244d737dc9515a51775b2fafbc85c9c1c8f62872a466192aae714a90990e0b07aa2b92e463ad98"], 0x1, 0x25f, &(0x7f00000005c0)="$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") r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000840)='./file0\x00', 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500, 0x18}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc}]}}}]}, 0x40}}, 0x0) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000300), 0x45b, 0x44000102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='e:my_read_msr1 ms', 0x11) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000001600), 0x0}, 0x20) 1m39.32364606s ago: executing program 2 (id=13): gettid() rt_sigtimedwait(&(0x7f0000000000)={[0x400000002]}, 0xfffffffffffffffc, 0x0, 0x8) pipe2(&(0x7f0000000040), 0x80800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0x5382, 0x1) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xfca) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='3', 0x4e) epoll_create1(0x80000) 1m38.396295345s ago: executing program 2 (id=15): r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x8042, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000400)="1700", 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, &(0x7f00000005c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x0, 0x6, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000640)={0x1, 0x0, [{0x80000007, 0xa, 0x9, 0xbad, 0x9, 0x6, 0x81}]}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_clone3(&(0x7f0000000500)={0x20000, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140), {0x3f}, &(0x7f0000000480)=""/85, 0x55, &(0x7f00000002c0)=""/228, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000280)={[{@grpquota}, {@quota}, {@quota}, {@norecovery}, {@jqfmt_vfsold}]}, 0xff, 0x4f9, &(0x7f00000008c0)="$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") r6 = creat(&(0x7f0000000dc0)='./bus\x00', 0x10) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r5, 0x8, &(0x7f0000000000)={0x800008, 0x2000000008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) 1m37.324304135s ago: executing program 2 (id=22): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000f0018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0xa) r3 = syz_open_dev$usbfs(&(0x7f0000000f00), 0xb, 0x103381) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, 0x0) 1m36.876346981s ago: executing program 4 (id=26): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0xe94, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xe80, 0x3, 0x0, 0x1, [{0xd14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xce8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc9, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFTA_DATA_VALUE={0x35, 0x1, "3f4778707934ae61bcc575b63172720bcd2d736ce46c0d7788e56b3103230271b693db3bebefa142d0773f63c1c743ab69"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x36, 0x1, "b6f977b0885aaf53dd4e59d0b94e316946501fb300abc83c316c6f696bce35b8a88106c447225e657ad5bb328e15c4abc10c"}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}, @NFTA_SET_ELEM_KEY={0x14c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x74, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xad, 0x1, "314d67b7a896b9e9c564152745c54adba6a99813a924a4f6fe1c5980edd11f3ccf4b6a834642f750aa1bf9bcd8223d1b86d71aa49c6ea6210086efd76e4bf0fe685e62a7e6821a97b13a30daa26fdd92d8d19d74308803822f4eebdce616ccd136ddb7e4f286a728ffd44595f654a90be40d6c3b093abd6cca3740c1ce18b267c8c1983983ccf293417aff71bc447236ddb50735344ffac259f48784c98d753647643fc97c7f2ab5c5"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0xed0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a40)={0x0, 0x3c, &(0x7f0000000a80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 1m35.379607874s ago: executing program 2 (id=33): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x200000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x80, 0x0, 0x28}, 0x18) 1m35.306654472s ago: executing program 2 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000009060300000000000000000002000000340007800c00018008000100000000010c001480080001400a010000060004404e2400000600054050640000050007000600000005000100060000000900020073797a3100"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1m35.275952225s ago: executing program 32 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000009060300000000000000000002000000340007800c00018008000100000000010c001480080001400a010000060004404e2400000600054050640000050007000600000005000100060000000900020073797a3100"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1m21.749551131s ago: executing program 33 (id=26): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0xe94, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xe80, 0x3, 0x0, 0x1, [{0xd14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xce8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc9, 0x1, "d5a7778ce3f52b31b5fd7318bf35e9ba6c5f5a6d04247c7d228e456a55183ada2da12a74d9610ff7f48fcd6be620a7ecdeb8755eba53c5c0d1b0139dcd6662e7d2483804406833043078460d6d999a1fc3a5f710bacdb1d530c6fec53590ea825eb3312597786905bd732bffa38490b1066c2738ab11921d82ab5ddc526dec9b1addd2c363a642f1c1693e9eab527c65edbed2ba171395908bc99aa8a180693e03646a1465ee3e57206ea3f0344ff6374c03ac3e9fcf7abbadcc85d1ef06f193124a80104db419aa4ef4033efd4abd96e9a01f07cd7c81435236337a2b6dc719846cf31c2c69d14a4d3e1dce68dcd0f9e7e0513832ec3e3b757386ea10c3cfe0c89439d7769dfc1f34ba7c4a2e9414911145b75e1eb1ca110066f6035195765a63269df946e93f86c415605853819d13b0eea967a454a70aabfebe9db7a3e1519f39109d27cf8e6f88bac9be8355083bf8ffd220a21ea2b516f433d46e0f62d7506677e96b3f76e2496371cb503c9fc33e4d4a7cb53c330b5bc2ecf8a9578526fbfa8e468ef561ee48b6d3d9cd2975a6dbf473578f46440cb677c5c623c764b2911c1bb1657e539b90ae5f986ef1e4b70fa1f08556676fade9491dd089fe2efc75309109c89340eb43b8f621b3bb5be8f470ec16513a4abe87ef8ef683eb52a23484350e7cddc3a791a06c408d38912ea419661f8a91efe467137310299febef317838c9834dee515e06c12483a1723cb48b2cd82d849c2ad9d06c413387ae7fe400de4aa0edaa6434d9a223657d7c07bbb8d84f1d9adf24b3ce6298e4036f9858c3c23984971ca2d0bae23ae5a8b07044e8ee824ec8de74a385df1fea0200dee3708cb615ce4f58b38a0cf20a57c9cf36abd47c0de8bd99718fcdc6e48a16cd6569c123ddc534279b292ed219514363df7059499954b5329f5c53a1402f1147ef13f9b4bfc34b7585fd843260bee62857892dd67e165484628f7495295873426a41c688febf6d2c201548c05519af35689d693d1b5ab0c396a195488f9f5676c5c63350bc942b0b27c68e3a4900514061073f4c21126d4e712b490dc0f67795920f2ecb0ec9e810520b04a75f20d738f3deb7d898fe089c1ee4d8b12a74348486349b798d472eea1edc0f698cf01e98200308acc62131fd9b6854cd912c970173aed404b9eee42d62d19dca74b4fc5678aafcf426c3d3911557a5f3feb58879047dc0651f4ae7122e20cf0db4ff9411239aceaa67e0df4fbea98d5d8880b22cf5d4a41a664d6e81aed2e72148819dc6bc0ed0667885d0df2659c6e676faa2e39def0e801928c33eec681ad6f6486b0a46c1349bd26179616ab8d2f341c395378ecf729816f5f99ee7d35ac4d2c81cb290b5bd7cc531cbc9ef0d0ef217da40ab2ff7e3f8327c49f9796a7a62720445326a391dc39601a1e283ec8cb101aeb3e25c7db8a4cb74aefefdd1c4b7fea5ad8736839584337d76d25970db8da58d1c4d6885e77f6bd9e94c5414068b6c855d28f4724aedb4d705b6daadd39355df93531c551285898ac9c29d07a8e106225a3c1ad9ce5f96a8d24c40d5e2c76a60a42dcfb173804214153198d77b289470f13c043156eee9bc74c1e39b610395627e781202e56e971144132960cdf2db05876de5ce23c1b545712250106acb24b71af68a7e4854fe9428a1990894ac8e266ae6cc8c725c49f79c66c3cb8805d9f7274e7ad377496922b92ceb76abdc4b0a92cce2634b7f80d38f6a2db59a3f4fe996811c52d99b41f95967f21ee027435b3d1f1b88417c4ce8afe855cd0bba91834c354663eddc86e17726e0081fec70e8d60a6b8a5337ba20f9108e7167ed0f72e818c8fc0b9444a1a996e8a23130a755c285ead1c202da1b9c80eee95d952bc3fb23ef28c20781dfe32d7c68e71d94a71ff45a5ba23397f7d83aeee61469d87db8ed4b48a5dc287eb92557457c41e74198970b86890c7e4bb033157089a69dc9f47770a0abe43517a7939df305eef3b4fa9e7c1aafac90c80fdf7c7e2e5e1f7206fb1cb9d2ddb09972d3f3eddbde7f210e92a086736e18d1263ef83ffb9262179f6f648cf192a7300acb8692d93c056d084be9487ddf2a497278d579d4345dfd3787a0877db1cdef543d3c15d6e2c0edb0528fedb9512111d980c0b9045622e53edb0f2a095ba50f269b5170a30203fd8d93f67affc03e0043e1deb2fb60af051f65d9de23692db4bee0e4e93639b62b2478ce8679d0c6106a99a4f694480be700f27ccecaf57f231416eb684ccf9971f6665c0deb590922c26619091ae8cc478a7c7113ff6da845f6d60cb29d120e8604ee70e1ccd95a9e51129633d322cf048f001cf306f5e5689805471bfcf52bfaf2e9eabb8e5fbc3ace814171865acd860716f38f9f3936598bace7255f348179ae20d5eb19688683e6b3a9d5b4453e234fdd441307b5832d03bf15746790025453a4a0bb7ada4e1cf2ee66e8966f9f83e61b4eceb715f06e5c9cd8a36caf39e56b1c55c44832f73e11a54ea7e0fb9adae43ad0d742b7e649b372895466937d8dcb0b67828752534176ea67da767cfa2a4b08666ec369e2f82c2e588a8f466b42d201c8255ea43dbc1eeb967e2886224cad41cba722bac91f775db7841ed7a349071c7bbe4a16de2e0c6ae3f723dd53e5a63cc949ea723b8049a26f38f68ad1a251f506c54bba8ea156844873a0ad84f69ecdeb7c75117a043539b4c7637a78918979d2dff6e01182e886efa5b127b9271de111adc20f3f9f674aea288f1a02ec7b617296c337310e947993fb8e38b13967fa687bc741e73fa83df926179c87d7bb5b64cd208501346019309e1a0459f7ccc4454c9faff2f5af8fe16bd789239a226336fd7a48de004ed91a07018b223fe187d628a1f9cc6a1205922a86601ca86d84c144455a890d87abb284e7c8aa1dfc309758142e835d0dfd7d41177bea03763451e34dedb2547001a82cbeed43a2c9728846d72b9391fa5b006c61e974d29f3c2e84f843cca2a03716bcdb40bce22417478519ef2605ca5eda87fa26dae1789cb6c90928727e6228556a99a590f0082bd4292f786e4c823b6d7fac57d9a96f6d53644c3c21e59dd93049106f62798406479cd575042699d4ef3b754a99af8d7aeffd06cb320106815404115b618c69ec7572046c7c28e5a02c310d9cbeb528d7dc355521df38523f71cc48e6a016d7d84e6ac306ee9939a8352c9446ff4be0b680d3ab5beac077f00167c6a4102bb116f2d637b0a269ad35fe7a3b8305d160b772ef91277cb21ebbdb476fc4846b86b198c8f9c9878dcc9c201915ea1dfec29deb1233624a754b74e613b1b6fed01ec40208f93e5c0ff049a414dcf8d3aebf1f37d178ce6aa4364903e167fcc4580d7014703bdf8c7f15298c7d4f59ce88ed8b99ced76c319cef32385003f45126e9df0b7a32ec219fadbbb2e5b104e863f2d15032ce6c358d3718ba9605cfa486ea3a14751f165b9842555e4e20b4b86a95ffc492b3b3a411907ccb1218c8303feb57c3d970424c7ca475ba4a8fe2feb3826fb2c02c920ed3ac2d13cddf92935d8213545146cf2514720606d447c1782a8faab8454ad488d720284de6544e6d1d2df26442e3ebfb510b61199082c8918c8d23acb50d68bf37e340318db2ecbd6cccc8323a30796624f017e1f2e4f69c40c7ea7fb84efbfde8a6fc3b3b1d6ee1e9c307ea8ac12558fa052de0bd9cd550203354c27d51d73eabe80b50a69ffe37b4369648d8ca45387caac973894284a431dcceb45acac5ec132bc8ae7446fa76cab885e3adfd5bca3f9a6c744fcbedf7c75a3bc35967e44191a055e871d2f4a7b1d57b17275e61fe30e938851b7f79a243c318be0db8ebb9fcd059113a8fdc96dc81dd84de82d9b96f6f6b03c539f3aaa9dca220cd02e3c0afa4fae053f020d306df5699e1399bde900e1aacc024b83b02cad678a18d67b5c3eea24f1644aa3afc30d7478dbb4ffa21ab0f63c231edfefb971cf06b0e16ec01d35f652bebe455fa780295b0228a91a4d710723f2a70a2e544a8fd875c10b2b86461e42ad9850c7318165542be3c943690dc29d0811dbac2a043db95e6ace6d0eb0694a762ad000136252af92df341ebe1e7858b2aa4cf986ba985da0046f756388511e34ec7f02ae37597ae235252b8b04ce1c35f63f83868a497161048d116b4807f2606cabe158c5d43bc97c4f432db4569c469a5a366d10d4c90f6c806357aed1aed1843d1afb3d789faec456b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFTA_DATA_VALUE={0x35, 0x1, "3f4778707934ae61bcc575b63172720bcd2d736ce46c0d7788e56b3103230271b693db3bebefa142d0773f63c1c743ab69"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x36, 0x1, "b6f977b0885aaf53dd4e59d0b94e316946501fb300abc83c316c6f696bce35b8a88106c447225e657ad5bb328e15c4abc10c"}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}, @NFTA_SET_ELEM_KEY={0x14c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x74, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xad, 0x1, "314d67b7a896b9e9c564152745c54adba6a99813a924a4f6fe1c5980edd11f3ccf4b6a834642f750aa1bf9bcd8223d1b86d71aa49c6ea6210086efd76e4bf0fe685e62a7e6821a97b13a30daa26fdd92d8d19d74308803822f4eebdce616ccd136ddb7e4f286a728ffd44595f654a90be40d6c3b093abd6cca3740c1ce18b267c8c1983983ccf293417aff71bc447236ddb50735344ffac259f48784c98d753647643fc97c7f2ab5c5"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0xed0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a40)={0x0, 0x3c, &(0x7f0000000a80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 12.802871167s ago: executing program 3 (id=874): syz_mount_image$ext4(&(0x7f0000001380)='ext4\x00', &(0x7f0000001540)='mnt\x00', 0x4, &(0x7f0000001580), 0x0, 0x236, &(0x7f00000015c0)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001840)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes128, 0x4, @desc3}) 12.650329993s ago: executing program 3 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 11.333066708s ago: executing program 3 (id=881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fchdir(0xffffffffffffffff) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x800002000000, 0x20000, 0x18, 0x0, 0x5, 0x1], 0x0, 0xc3d81}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.231880258s ago: executing program 3 (id=884): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000003c0)=[@request_death={0x400c630e, 0x1, 0x3}, @register_looper]}) 11.21737507s ago: executing program 3 (id=886): syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x2d05, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x80, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd0, 0x14}, [@processing_unit={0xa, 0x24, 0x7, 0x4, 0x5, 0x57, "be63d7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0x8, 0x7}, @as_header={0x7, 0x24, 0x1, 0x7, 0x2, 0x1}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x401, 0x2, 0x2d}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x43, 0x1, 0xd6, {0x7, 0x25, 0x1, 0xc, 0x7f, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x3, 0x7, {0x7, 0x25, 0x1, 0x8, 0x6, 0x3}}}}}}}}]}}, 0x0) 9.504023465s ago: executing program 3 (id=905): ptrace(0x10, 0x1) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000840)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/4096, 0x1000}, 0x9}], 0x1, 0x10022, 0x0) 4.58401119s ago: executing program 6 (id=955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000440)=""/239, &(0x7f0000000540)=0xef) 4.578459261s ago: executing program 6 (id=956): bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=')\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000640)=0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) accept(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.687893032s ago: executing program 6 (id=964): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000005d00)=ANY=[@ANYBLOB='errors=continue,checkpoint_merge,alloc_mode=default,active_logs=6,acl,fault_injection=00000000000000001262,acl,noacl,compress_cache,alloc_mode=default,noextent_cache,compress_cache,mode=lfs,\x00\x00\x00'], 0x1, 0x5505, &(0x7f0000006040)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") 3.335278358s ago: executing program 6 (id=966): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000001340)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f000001a340)='./file0\x00', 0x40, 0x16f) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f0000000000)='grpquota') 3.141672348s ago: executing program 1 (id=967): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 3.051827197s ago: executing program 1 (id=968): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="8d50895c4c690dea156e85f7db65", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) 3.010667441s ago: executing program 1 (id=969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee6}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x2a}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.963040356s ago: executing program 1 (id=970): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000140)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x22, 0x0, &(0x7f0000000280)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000740), 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.383932678s ago: executing program 6 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r3, 0x100000000000011, 0x2000, 0x2f93) 1.36239038s ago: executing program 1 (id=975): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x81, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7fff}}, {@stripe={'stripe', 0x3d, 0x3}}, {@data_err_abort}, {@noinit_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@minixdf}, {@commit={'commit', 0x3d, 0x9}}, {@journal_checksum}, {@usrjquota}, {@init_itable}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") 1.199852897s ago: executing program 1 (id=984): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff0000000705"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='dev/ttyUSB0\x00', 0x2, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x77359400}, {0x0, 0xea60}}, 0x0) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:systemd_logind_var_run_t:s0\x00', 0x2e) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.119303975s ago: executing program 5 (id=987): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x8000000}], 0x1, 0x3687113d38bb0997, 0x0) 1.012074356s ago: executing program 5 (id=989): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0603d0f, &(0x7f00000006c0)={0x200, 0x7}) 1.011881056s ago: executing program 5 (id=991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 989.787048ms ago: executing program 5 (id=993): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 932.037574ms ago: executing program 5 (id=994): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000008c0)={'veth1_to_batadv\x00', &(0x7f0000000980)=@ethtool_sfeatures={0x3b, 0x2, [{0x110000a, 0x100000}, {0x5f35, 0xc}]}}) 931.740794ms ago: executing program 0 (id=996): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c80)={0x2, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) 931.602954ms ago: executing program 5 (id=997): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f0000000380), 0x7fa) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r1, &(0x7f0000000480)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file1\x00', 0x880cc2, 0x20) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x2200002, &(0x7f0000000580)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f0000000640)="$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") open(&(0x7f0000000c80)='./file1\x00', 0x4827e, 0x1bb) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 853.003732ms ago: executing program 0 (id=998): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f0000000200)='my_sys\x00', 0x0) mount(0x0, &(0x7f0000000240)='my_sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 731.157815ms ago: executing program 0 (id=999): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2400, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/132, 0x84}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x20000884) 548.027693ms ago: executing program 0 (id=1000): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000480)={[{@i_version}, {@nolazytime}, {@errors_remount}, {@grpjquota}, {@acl}]}, 0xfe, 0x28f, &(0x7f0000002540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x8a141, 0x59) pwrite64(r0, &(0x7f0000000840)="f6", 0xffffff07, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000002800)='./file1\x00', 0x42, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000002900)={0x17c04, 0xffffffffffffffff, 0x2, 0xb123}) 351.009964ms ago: executing program 0 (id=1001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) close(r1) r2 = memfd_create(&(0x7f00000002c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x21011, r2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 73.571882ms ago: executing program 6 (id=1002): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000300)={0x0, &(0x7f0000000340)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_create_resource$kvm_nested_state(&(0x7f0000000f40)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_GET_NESTED_STATE_res(r3, 0xc080aebe, r4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002fc0)={0x2710, 0x0, 0xf0000000}) ioctl$KVM_SET_NESTED_STATE_res(r3, 0x4080aebf, r4) 0s ago: executing program 0 (id=1003): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x37}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000380)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) kernel console output (not intermixed with test programs): while replacing table [ 71.400651][ T1312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 71.410601][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.419816][ T1312] device bridge_slave_1 left promiscuous mode [ 71.425934][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.430227][ T312] logitech-djreceiver 0003:046D:C53A.0008: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 71.457583][ T26] usb 2-1: USB disconnect, device number 16 [ 71.469308][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 71.489338][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 71.510412][ T39] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 71.584790][ T30] audit: type=1400 audit(1793849547.945:277): avc: denied { read } for pid=1314 comm="syz.1.382" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.600330][ T1315] futex_wake_op: syz.1.382 tries to shift op by 144; fix this program [ 71.609906][ T58] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 71.627763][ T1315] futex_wake_op: syz.1.382 tries to shift op by 144; fix this program [ 71.642184][ T58] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 959 [ 71.652209][ T58] usb 1-1: config 1 interface 0 has no altsetting 0 [ 71.660217][ T356] usb 7-1: USB disconnect, device number 12 [ 71.669122][ T1323] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 71.679588][ T1323] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 71.809426][ T58] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.818711][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.827208][ T58] usb 1-1: Product: syz [ 71.832391][ T58] usb 1-1: Manufacturer: syz [ 71.837017][ T58] usb 1-1: SerialNumber: syz [ 71.859384][ T1296] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 71.866369][ T1296] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 71.899306][ T39] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.909581][ T39] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 71.923900][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.933110][ T39] usb 6-1: config 0 descriptor?? [ 72.079291][ T26] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 72.164250][ T30] audit: type=1326 audit(1793849548.525:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.6.391" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 72.179633][ T58] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 72.189836][ T30] audit: type=1326 audit(1793849548.525:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.6.391" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 72.211458][ T58] usb 1-1: USB disconnect, device number 15 [ 72.229823][ T30] audit: type=1326 audit(1793849548.525:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.6.391" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 72.261694][ T30] audit: type=1326 audit(1793849548.525:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.6.391" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 72.286772][ T30] audit: type=1326 audit(1793849548.525:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.6.391" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 72.314699][ T30] audit: type=1326 audit(1793849548.645:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1344 comm="syz.6.393" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 72.489336][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 72.499119][ T26] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 72.599248][ T6] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 72.659357][ T26] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 72.669835][ T1355] netlink: 44 bytes leftover after parsing attributes in process `syz.3.396'. [ 72.678890][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.699101][ T26] usb 2-1: Product: syz [ 72.703631][ T26] usb 2-1: Manufacturer: syz [ 72.708342][ T26] usb 2-1: SerialNumber: syz [ 72.979312][ T6] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.989563][ T6] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.039331][ T357] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 73.069380][ T6] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 73.078532][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 73.086717][ T6] usb 7-1: SerialNumber: syz [ 73.130127][ T6] usb 7-1: 0:2 : does not exist [ 73.240925][ T26] usb 6-1: USB disconnect, device number 16 [ 73.256394][ T1364] netlink: 'syz.5.400': attribute type 11 has an invalid length. [ 73.303178][ T1373] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.314974][ T1373] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.329378][ T1373] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 73.336450][ T334] usb 7-1: USB disconnect, device number 13 [ 73.559317][ T357] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 73.568509][ T357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.576709][ T357] usb 4-1: Product: syz [ 73.581052][ T357] usb 4-1: Manufacturer: syz [ 73.585663][ T357] usb 4-1: SerialNumber: syz [ 73.749276][ T39] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 73.759440][ T26] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 74.100842][ T1398] xt_hashlimit: size too large, truncated to 1048576 [ 74.109412][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.119876][ T26] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 74.129316][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.137437][ T39] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.152582][ T39] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 74.161994][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.738564][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 74.738584][ T30] audit: type=1326 audit(1793849551.095:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.6.431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 74.769783][ T30] audit: type=1326 audit(1793849551.095:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.6.431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 74.796682][ T30] audit: type=1326 audit(1793849551.115:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.6.431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 74.816408][ T294] usb 2-1: USB disconnect, device number 17 [ 74.822241][ T30] audit: type=1326 audit(1793849551.115:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.6.431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 74.857908][ T30] audit: type=1326 audit(1793849551.115:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.6.431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 74.861590][ T1439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 74.883095][ T30] audit: type=1326 audit(1793849551.115:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.6.431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 74.919334][ T30] audit: type=1326 audit(1793849551.115:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.6.431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 74.951319][ T30] audit: type=1326 audit(1793849551.115:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.6.431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 74.977832][ T30] audit: type=1326 audit(1793849551.115:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.6.431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 75.003471][ T30] audit: type=1400 audit(1793849551.335:307): avc: denied { listen } for pid=1443 comm="syz.6.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.124846][ T294] usb 1-1: USB disconnect, device number 16 [ 75.144929][ T1455] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 75.459389][ T294] usb 6-1: USB disconnect, device number 17 [ 75.786388][ T356] usb 4-1: USB disconnect, device number 18 [ 75.929276][ T294] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 76.209415][ T356] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 76.290008][ T294] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 76.299111][ T294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.589328][ T356] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.749366][ T356] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.24 [ 76.758458][ T356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.767158][ T356] usb 4-1: Product: syz [ 76.771678][ T356] usb 4-1: Manufacturer: syz [ 76.776341][ T356] usb 4-1: SerialNumber: syz [ 76.786133][ T356] usb 4-1: config 0 descriptor?? [ 76.914282][ T1528] kvm [1527]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x94 [ 76.923453][ T1528] kvm [1527]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 76.932577][ T1528] kvm [1527]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x6832 [ 76.941756][ T1528] kvm [1527]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 76.951218][ T1528] kvm [1527]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x21000060a7 [ 76.960794][ T1528] kvm [1527]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 76.978044][ T1528] kvm [1527]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x210000017d, nop [ 76.989260][ T6] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 76.997632][ T1528] kvm [1527]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x21000061a6 [ 77.006548][ T1528] kvm [1527]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 77.017253][ T1528] kvm [1527]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x21000029aa [ 77.027870][ T1528] kvm [1527]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x21000059cf [ 77.039673][ T1528] kvm [1527]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x2100004018 [ 77.042372][ T26] usb 4-1: USB disconnect, device number 19 [ 77.058198][ T1528] kvm [1527]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x21000019fd [ 77.349309][ T6] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 77.360310][ T6] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 77.373494][ T6] usb 2-1: config 1 interface 0 has no altsetting 0 [ 77.489237][ T294] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 77.539285][ T6] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 77.548365][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.579253][ T6] usb 2-1: Product: syz [ 77.583492][ T6] usb 2-1: Manufacturer: syz [ 77.588202][ T6] usb 2-1: SerialNumber: syz [ 77.617066][ T26] usb 6-1: USB disconnect, device number 18 [ 77.749316][ T294] usb 1-1: Using ep0 maxpacket: 16 [ 77.839290][ T312] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 77.869323][ T294] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.879625][ T294] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.049387][ T294] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.058659][ T294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.066720][ T294] usb 1-1: Product: syz [ 78.070949][ T294] usb 1-1: Manufacturer: syz [ 78.075572][ T294] usb 1-1: SerialNumber: syz [ 78.080225][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 78.109331][ T26] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 78.209336][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.220313][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.230285][ T312] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 78.239389][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.248227][ T312] usb 4-1: config 0 descriptor?? [ 78.349377][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 78.409465][ T294] usb 1-1: 0:2 : does not exist [ 78.416392][ T294] usb 1-1: USB disconnect, device number 17 [ 78.469456][ T26] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 78.469924][ T6] usbhid 2-1:1.0: can't add hid device: -71 [ 78.478070][ T26] usb 6-1: config 0 has no interface number 0 [ 78.484599][ T6] usbhid: probe of 2-1:1.0 failed with error -71 [ 78.489916][ T26] usb 6-1: config 0 interface 12 has no altsetting 0 [ 78.500412][ T6] usb 2-1: USB disconnect, device number 18 [ 78.624161][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.659392][ T26] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 78.668565][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.676668][ T26] usb 6-1: Product: syz [ 78.681033][ T26] usb 6-1: Manufacturer: syz [ 78.685634][ T26] usb 6-1: SerialNumber: syz [ 78.691419][ T26] usb 6-1: config 0 descriptor?? [ 78.720338][ T312] hid-generic 0003:0403:6030.0009: unknown main item tag 0x0 [ 78.727774][ T312] hid-generic 0003:0403:6030.0009: unknown main item tag 0x0 [ 78.737661][ T312] hid-generic 0003:0403:6030.0009: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 78.905744][ T1578] syz.1.490 uses obsolete (PF_INET,SOCK_PACKET) [ 78.914051][ T1578] FAULT_INJECTION: forcing a failure. [ 78.914051][ T1578] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 78.927423][ T1578] CPU: 1 PID: 1578 Comm: syz.1.490 Not tainted syzkaller #0 [ 78.929285][ T356] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 78.934820][ T1578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 78.934848][ T1578] Call Trace: [ 78.955954][ T1578] [ 78.958913][ T1578] __dump_stack+0x21/0x30 [ 78.963289][ T1578] dump_stack_lvl+0x110/0x170 [ 78.967996][ T1578] ? show_regs_print_info+0x20/0x20 [ 78.973266][ T1578] dump_stack+0x15/0x20 [ 78.977577][ T1578] should_fail+0x3ab/0x500 [ 78.982036][ T1578] should_fail_alloc_page+0x55/0x80 [ 78.987457][ T1578] prepare_alloc_pages+0x13f/0x590 [ 78.992613][ T1578] ? __alloc_pages_bulk+0xab0/0xab0 [ 78.997852][ T1578] __alloc_pages+0x11d/0x460 [ 79.002617][ T1578] ? unlock_page_memcg+0x114/0x130 [ 79.007799][ T1578] ? zone_watermark_fast+0x250/0x250 [ 79.013130][ T1578] ? page_remove_rmap+0xc6d/0xf40 [ 79.018184][ T1578] ? page_add_file_rmap+0x700/0x700 [ 79.023429][ T1578] ? __kasan_check_write+0x14/0x20 [ 79.028596][ T1578] ? _raw_spin_lock+0x94/0xf0 [ 79.033278][ T1578] __get_free_pages+0x10/0x30 [ 79.037971][ T1578] __tlb_remove_page_size+0x18a/0x310 [ 79.043374][ T1578] unmap_page_range+0x1059/0x1e00 [ 79.048435][ T1578] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 79.054785][ T1578] ? lru_cache_add+0x7e0/0x7e0 [ 79.059581][ T1578] unmap_vmas+0x26d/0x380 [ 79.063917][ T1578] ? unmap_page_range+0x1e00/0x1e00 [ 79.069122][ T1578] ? __kasan_check_write+0x14/0x20 [ 79.074270][ T1578] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 79.079906][ T1578] exit_mmap+0x412/0x8b0 [ 79.084204][ T1578] ? vm_brk+0x30/0x30 [ 79.088228][ T1578] ? mutex_unlock+0x8f/0x230 [ 79.092870][ T1578] ? uprobe_clear_state+0x2c6/0x320 [ 79.098115][ T1578] __mmput+0x92/0x300 [ 79.102142][ T1578] mmput+0x50/0x150 [ 79.106002][ T1578] do_exit+0xacc/0x29a0 [ 79.110231][ T1578] ? kvfree_sensitive+0x4d/0x60 [ 79.115117][ T1578] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.121228][ T1578] ? put_task_struct+0x90/0x90 [ 79.126042][ T1578] ? __kasan_check_write+0x14/0x20 [ 79.131276][ T1578] ? _raw_spin_lock_irq+0x95/0xf0 [ 79.136369][ T1578] do_group_exit+0x149/0x310 [ 79.140999][ T1578] ? __kasan_check_write+0x14/0x20 [ 79.146158][ T1578] ? recalc_sigpending+0x1ac/0x230 [ 79.151315][ T1578] get_signal+0x64f/0x1430 [ 79.155781][ T1578] arch_do_signal_or_restart+0xe2/0x1100 [ 79.161461][ T1578] ? __kasan_slab_free+0x11/0x20 [ 79.165387][ T1589] loop0: detected capacity change from 0 to 512 [ 79.166443][ T1578] ? slab_free_freelist_hook+0xc2/0x190 [ 79.166471][ T1578] ? kvfree_sensitive+0x4d/0x60 [ 79.183152][ T1578] ? get_sigframe_size+0x10/0x10 [ 79.188136][ T1578] ? __se_sys_futex+0x135/0x330 [ 79.193029][ T1578] exit_to_user_mode_loop+0xa7/0xe0 [ 79.198257][ T1578] exit_to_user_mode_prepare+0x87/0xd0 [ 79.203742][ T1578] syscall_exit_to_user_mode+0x1a/0x30 [ 79.209264][ T1578] do_syscall_64+0x58/0xa0 [ 79.213738][ T1578] ? clear_bhb_loop+0x50/0xa0 [ 79.218440][ T1578] ? clear_bhb_loop+0x50/0xa0 [ 79.223137][ T1578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.229065][ T1578] RIP: 0033:0x7f4efd489b19 [ 79.233500][ T1578] Code: Unable to access opcode bytes at RIP 0x7f4efd489aef. [ 79.240894][ T1578] RSP: 002b:00007f4efbee10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 79.249360][ T1578] RAX: fffffffffffffe00 RBX: 00007f4efd70ffa8 RCX: 00007f4efd489b19 [ 79.257344][ T1578] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4efd70ffa8 [ 79.265352][ T1578] RBP: 00007f4efd70ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 79.273461][ T1578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.281449][ T1578] R13: 00007f4efd710038 R14: 00007fff382398f0 R15: 00007fff382399d8 [ 79.289445][ T1578] [ 79.349368][ T356] usb 7-1: Using ep0 maxpacket: 8 [ 79.405954][ T1591] loop1: detected capacity change from 0 to 40427 [ 79.416990][ T1591] F2FS-fs (loop1): fault_type options not supported [ 79.476360][ T1591] F2FS-fs (loop1): Unrecognized mount option "barrier" or missing value [ 79.722015][ T356] usb 7-1: config 2 has an invalid interface number: 241 but max is 0 [ 79.730296][ T356] usb 7-1: config 2 has no interface number 0 [ 79.736478][ T356] usb 7-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 79.746505][ T356] usb 7-1: config 2 interface 241 has no altsetting 0 [ 79.909327][ T356] usb 7-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 79.918920][ T356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.927019][ T356] usb 7-1: Product: syz [ 79.931455][ T356] usb 7-1: Manufacturer: syz [ 79.936068][ T356] usb 7-1: SerialNumber: syz [ 80.089315][ T6] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 80.181785][ T26] usb 7-1: USB disconnect, device number 14 [ 80.222160][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 80.222176][ T30] audit: type=1400 audit(1793849556.585:328): avc: denied { mount } for pid=1600 comm="syz.0.499" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.251663][ T30] audit: type=1400 audit(1793849556.615:329): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.272024][ T30] audit: type=1400 audit(1793849556.615:330): avc: denied { read write } for pid=1602 comm="syz.0.500" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 80.281096][ T1603] device-mapper: table: 253:0: verity: Data device is too small [ 80.296492][ T30] audit: type=1400 audit(1793849556.615:331): avc: denied { open } for pid=1602 comm="syz.0.500" path="/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 80.304551][ T1603] device-mapper: ioctl: error adding target to table [ 80.328640][ T30] audit: type=1400 audit(1793849556.645:332): avc: denied { ioctl } for pid=1602 comm="syz.0.500" path="/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 80.389895][ T1610] device batadv_slave_1 entered promiscuous mode [ 80.396740][ T1609] device batadv_slave_1 left promiscuous mode [ 80.479320][ T6] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 80.490665][ T6] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.504129][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 80.510821][ T30] audit: type=1400 audit(1793849556.875:333): avc: denied { read } for pid=1617 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.530135][ T6] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 80.539267][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.547998][ T6] usb 2-1: config 0 descriptor?? [ 80.578048][ T312] usb 4-1: USB disconnect, device number 20 [ 80.590647][ T30] audit: type=1400 audit(1793849556.955:334): avc: denied { create } for pid=1620 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.613421][ T30] audit: type=1400 audit(1793849556.955:335): avc: denied { bind } for pid=1620 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.637086][ T30] audit: type=1400 audit(1793849556.955:336): avc: denied { write } for pid=1620 comm="syz.3.508" path="socket:[22685]" dev="sockfs" ino=22685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.809256][ T334] usb 6-1: USB disconnect, device number 19 [ 80.916376][ T1642] FAULT_INJECTION: forcing a failure. [ 80.916376][ T1642] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.929884][ T1642] CPU: 1 PID: 1642 Comm: syz.6.518 Not tainted syzkaller #0 [ 80.937223][ T1642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.947319][ T1642] Call Trace: [ 80.950734][ T1642] [ 80.953804][ T1642] __dump_stack+0x21/0x30 [ 80.958260][ T1642] dump_stack_lvl+0x110/0x170 [ 80.962985][ T1642] ? show_regs_print_info+0x20/0x20 [ 80.968229][ T1642] dump_stack+0x15/0x20 [ 80.972419][ T1642] should_fail+0x3ab/0x500 [ 80.976876][ T1642] should_fail_usercopy+0x1a/0x20 [ 80.981941][ T1642] _copy_to_iter+0x220/0x10b0 [ 80.986669][ T1642] ? iov_iter_init+0x180/0x180 [ 80.991479][ T1642] ? security_file_permission+0x79/0xa0 [ 80.997071][ T1642] get_random_bytes_user+0x1cd/0x3b0 [ 81.002397][ T1642] ? signal_pending+0xa0/0xa0 [ 81.007113][ T1642] ? memset+0x35/0x40 [ 81.011124][ T1642] ? import_single_range+0x14a/0x220 [ 81.016454][ T1642] __x64_sys_getrandom+0x1d2/0x2c0 [ 81.021642][ T1642] ? add_disk_randomness+0xd0/0xd0 [ 81.026790][ T1642] ? ksys_write+0x1fa/0x260 [ 81.031360][ T1642] ? __kasan_check_write+0x14/0x20 [ 81.036504][ T1642] ? switch_fpu_return+0x15d/0x2c0 [ 81.041658][ T1642] x64_sys_call+0x426/0x9a0 [ 81.046291][ T1642] do_syscall_64+0x4c/0xa0 [ 81.050747][ T1642] ? clear_bhb_loop+0x50/0xa0 [ 81.055552][ T1642] ? clear_bhb_loop+0x50/0xa0 [ 81.060265][ T1642] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.066351][ T1642] RIP: 0033:0x7fc6934dfb19 [ 81.070810][ T1642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.090553][ T1642] RSP: 002b:00007fc691f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 81.099008][ T1642] RAX: ffffffffffffffda RBX: 00007fc693765fa0 RCX: 00007fc6934dfb19 [ 81.107024][ T1642] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000001f00 [ 81.115032][ T1642] RBP: 00007fc693577b70 R08: 0000000000000000 R09: 0000000000000000 [ 81.123477][ T1642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.131485][ T1642] R13: 00007fc693766038 R14: 00007fc693765fa0 R15: 00007ffe918e0388 [ 81.139529][ T1642] [ 81.269293][ T30] audit: type=1400 audit(1793849557.605:337): avc: denied { read } for pid=1624 comm="syz.3.510" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 81.331843][ T6] hid-generic 0003:04F3:074D.000A: ignoring exceeding usage max [ 81.345842][ T6] hid-generic 0003:04F3:074D.000A: No inputs registered, leaving [ 81.369648][ T6] hid-generic 0003:04F3:074D.000A: hidraw0: USB HID v0.10 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input0 [ 81.489406][ T312] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 81.507478][ T26] usb 2-1: USB disconnect, device number 19 [ 81.564842][ T1653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.523'. [ 81.619516][ T1655] loop0: detected capacity change from 0 to 256 [ 81.707153][ T1655] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 81.730971][ T1655] FAT-fs (loop0): Filesystem has been set read-only [ 81.738259][ T1655] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 81.869365][ T312] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 81.878748][ T312] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.896203][ T312] usb 7-1: config 0 has no interface number 0 [ 81.909974][ T312] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 81.958372][ T312] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 81.968653][ T312] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.019332][ T334] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 82.041080][ T1673] input: syz0 as /devices/virtual/input/input8 [ 82.189471][ T312] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 82.224544][ T312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.234118][ T312] usb 7-1: Product: syz [ 82.238851][ T312] usb 7-1: Manufacturer: syz [ 82.245088][ T312] usb 7-1: SerialNumber: syz [ 82.269288][ T334] usb 4-1: Using ep0 maxpacket: 16 [ 82.341763][ T312] usb 7-1: config 0 descriptor?? [ 82.424310][ T334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.449291][ T334] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.588715][ T294] usb 7-1: USB disconnect, device number 15 [ 82.629324][ T334] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.638992][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.647831][ T1687] fuse: root generation should be zero [ 82.654283][ T334] usb 4-1: Product: syz [ 82.665385][ T334] usb 4-1: Manufacturer: syz [ 82.679294][ T334] usb 4-1: SerialNumber: syz [ 82.999312][ T334] usb 4-1: 0:2 : does not exist [ 83.059114][ T334] usb 4-1: USB disconnect, device number 21 [ 83.299278][ T6] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 83.409258][ T294] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 83.539242][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 83.678569][ T294] usb 7-1: Using ep0 maxpacket: 32 [ 83.809339][ T294] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 83.839916][ T294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.857448][ T1718] loop3: detected capacity change from 0 to 2048 [ 83.870124][ T294] usb 7-1: config 0 descriptor?? [ 83.940005][ T1718] loop3: p1 < > p2 p3 p4 < p5 p6 > [ 83.945374][ T1718] loop3: partition table partially beyond EOD, truncated [ 83.960966][ T1718] loop3: p1 start 3405774849 is beyond EOD, truncated [ 83.976653][ T1718] loop3: p3 start 4225 is beyond EOD, truncated [ 83.994472][ T1718] loop3: p6 start 4225 is beyond EOD, truncated [ 84.211741][ T101] loop3: p1 < > p2 p3 p4 < p5 p6 > [ 84.217080][ T101] loop3: partition table partially beyond EOD, truncated [ 84.224513][ T101] loop3: p1 start 3405774849 is beyond EOD, truncated [ 84.232862][ T101] loop3: p3 start 4225 is beyond EOD, truncated [ 84.240978][ T101] loop3: p6 start 4225 is beyond EOD, truncated [ 84.350242][ T309] udevd[309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 84.363450][ T341] udevd[341]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 84.374706][ T333] udevd[333]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 84.420880][ T6] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 84.431327][ T6] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 84.442122][ T6] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 84.609294][ T6] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 84.618398][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.639237][ T6] usb 2-1: Product: syz [ 84.643425][ T6] usb 2-1: Manufacturer: syz [ 84.648034][ T6] usb 2-1: SerialNumber: syz [ 85.015455][ T1748] device-mapper: table: 253:1: verity: Data device is too small [ 85.023249][ T1748] device-mapper: ioctl: error adding target to table [ 85.113762][ T1752] netlink: 44 bytes leftover after parsing attributes in process `syz.5.562'. [ 85.398353][ T1764] loop3: detected capacity change from 0 to 512 [ 86.089899][ T1791] netlink: 44 bytes leftover after parsing attributes in process `syz.0.577'. [ 86.109257][ T294] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 86.145178][ T334] usb 7-1: USB disconnect, device number 16 [ 86.217988][ T1797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=1797 comm=syz.6.581 [ 86.253206][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 86.253224][ T30] audit: type=1400 audit(1793849562.615:358): avc: denied { mount } for pid=1798 comm="syz.0.582" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 86.283909][ T30] audit: type=1400 audit(1793849562.645:359): avc: denied { mounton } for pid=1798 comm="syz.0.582" path="/145/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 86.359237][ T294] usb 4-1: Using ep0 maxpacket: 16 [ 86.579295][ T294] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.592961][ T294] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.631115][ T334] usb 2-1: USB disconnect, device number 20 [ 86.716862][ T1818] loop5: detected capacity change from 0 to 2048 [ 86.726825][ T1820] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.734104][ T1820] FAULT_INJECTION: forcing a failure. [ 86.734104][ T1820] name failslab, interval 1, probability 0, space 0, times 0 [ 86.746768][ T1820] CPU: 1 PID: 1820 Comm: syz.1.591 Not tainted syzkaller #0 [ 86.754085][ T1820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.764179][ T1820] Call Trace: [ 86.767513][ T1820] [ 86.770470][ T1820] __dump_stack+0x21/0x30 [ 86.774841][ T1820] dump_stack_lvl+0x110/0x170 [ 86.779556][ T1820] ? show_regs_print_info+0x20/0x20 [ 86.784792][ T1820] dump_stack+0x15/0x20 [ 86.788976][ T1820] should_fail+0x3ab/0x500 [ 86.793422][ T1820] ? br_mdb_notify+0x486/0xb90 [ 86.798339][ T1820] __should_failslab+0xa4/0xe0 [ 86.803163][ T1820] should_failslab+0x9/0x20 [ 86.807699][ T1820] slab_pre_alloc_hook+0x39/0xd0 [ 86.812671][ T1820] ? br_mdb_notify+0x486/0xb90 [ 86.817480][ T1820] ? br_mdb_notify+0x486/0xb90 [ 86.822289][ T1820] __kmalloc_track_caller+0x6c/0x2c0 [ 86.827625][ T1820] ? br_mdb_notify+0x486/0xb90 [ 86.832423][ T1820] ? br_mdb_notify+0x486/0xb90 [ 86.837222][ T1820] __alloc_skb+0x210/0x730 [ 86.841673][ T1820] br_mdb_notify+0x486/0xb90 [ 86.846304][ T1820] ? br_mdb_ip_get+0x70/0x70 [ 86.850932][ T1820] ? br_mdb_queue_one+0x650/0x650 [ 86.856079][ T1820] ? rcu_gp_kthread_wake+0x90/0x90 [ 86.861223][ T1820] br_multicast_del_pg+0x4d1/0xb70 [ 86.866367][ T1820] __br_multicast_disable_port_ctx+0x265/0x610 [ 86.872580][ T1820] ? __local_bh_enable_ip+0x58/0x80 [ 86.877820][ T1820] br_multicast_disable_port+0xd2/0x100 [ 86.883416][ T1820] br_stp_disable_port+0x122/0x1b0 [ 86.888568][ T1820] br_stp_disable_bridge+0x82/0x150 [ 86.893807][ T1820] ? br_dev_open+0xe0/0xe0 [ 86.898269][ T1820] br_dev_stop+0x2c/0xd0 [ 86.902548][ T1820] ? br_dev_open+0xe0/0xe0 [ 86.906988][ T1820] __dev_close_many+0x28a/0x350 [ 86.911873][ T1820] ? dev_close_many+0x4d0/0x4d0 [ 86.916756][ T1820] ? __local_bh_enable_ip+0x58/0x80 [ 86.921987][ T1820] ? dev_set_rx_mode+0x20a/0x2c0 [ 86.926959][ T1820] ? br_dev_change_rx_flags+0x30/0x50 [ 86.932360][ T1820] __dev_change_flags+0x2c9/0x6a0 [ 86.937422][ T1820] ? do_vfs_ioctl+0x1c15/0x1d80 [ 86.942308][ T1820] ? dev_get_flags+0x1e0/0x1e0 [ 86.947111][ T1820] dev_change_flags+0x80/0x1a0 [ 86.951908][ T1820] dev_ifsioc+0x130/0xd50 [ 86.956276][ T1820] ? dev_ioctl+0xd00/0xd00 [ 86.960720][ T1820] ? __kasan_check_write+0x14/0x20 [ 86.965862][ T1820] ? mutex_lock+0x9b/0x1c0 [ 86.970323][ T1820] ? wait_for_completion_killable_timeout+0x10/0x10 [ 86.976951][ T1820] ? dev_get_by_name_rcu+0xc8/0xf0 [ 86.982120][ T1820] dev_ioctl+0x546/0xd00 [ 86.986404][ T1820] sock_do_ioctl+0x241/0x310 [ 86.991047][ T1820] ? sock_show_fdinfo+0xa0/0xa0 [ 86.995937][ T1820] ? selinux_file_ioctl+0x3ad/0x4c0 [ 87.001175][ T1820] ? alloc_file+0x448/0x580 [ 87.005713][ T1820] sock_ioctl+0x459/0x6d0 [ 87.010074][ T1820] ? sock_poll+0x3f0/0x3f0 [ 87.014513][ T1820] ? __fget_files+0x2e1/0x340 [ 87.019214][ T1820] ? security_file_ioctl+0x84/0xa0 [ 87.024349][ T1820] ? sock_poll+0x3f0/0x3f0 [ 87.028795][ T1820] __se_sys_ioctl+0x121/0x1a0 [ 87.033505][ T1820] __x64_sys_ioctl+0x7b/0x90 [ 87.038124][ T1820] x64_sys_call+0x2f/0x9a0 [ 87.042568][ T1820] do_syscall_64+0x4c/0xa0 [ 87.047011][ T1820] ? clear_bhb_loop+0x50/0xa0 [ 87.051711][ T1820] ? clear_bhb_loop+0x50/0xa0 [ 87.056437][ T1820] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.062358][ T1820] RIP: 0033:0x7f4efd489b19 [ 87.066793][ T1820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.086425][ T1820] RSP: 002b:00007f4efbee1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.094867][ T1820] RAX: ffffffffffffffda RBX: 00007f4efd70ffa0 RCX: 00007f4efd489b19 [ 87.102877][ T1820] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000004 [ 87.110894][ T1820] RBP: 00007f4efd521b70 R08: 0000000000000000 R09: 0000000000000000 [ 87.118924][ T1820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.126935][ T1820] R13: 00007f4efd710038 R14: 00007f4efd70ffa0 R15: 00007fff382399d8 [ 87.134970][ T1820] [ 87.138101][ T1820] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.179333][ T294] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.195109][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.216318][ T294] usb 4-1: Product: syz [ 87.228480][ T294] usb 4-1: Manufacturer: syz [ 87.234717][ T1818] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.248659][ T294] usb 4-1: SerialNumber: syz [ 87.255504][ T30] audit: type=1400 audit(1793849563.615:360): avc: denied { mount } for pid=1817 comm="syz.5.590" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.327020][ T30] audit: type=1400 audit(1793849563.635:361): avc: denied { create } for pid=1817 comm="syz.5.590" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 87.404025][ T357] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 87.526569][ T30] audit: type=1400 audit(1793849563.885:362): avc: denied { remove_name } for pid=1817 comm="syz.5.590" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.620901][ T30] audit: type=1400 audit(1793849563.885:363): avc: denied { rename } for pid=1817 comm="syz.5.590" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 87.709390][ T357] usb 1-1: Using ep0 maxpacket: 16 [ 87.715672][ T30] audit: type=1400 audit(1793849563.885:364): avc: denied { unlink } for pid=1817 comm="syz.5.590" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.755215][ T30] audit: type=1400 audit(1793849563.885:365): avc: denied { rename } for pid=1817 comm="syz.5.590" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.779371][ T30] audit: type=1400 audit(1793849563.885:366): avc: denied { unlink } for pid=1817 comm="syz.5.590" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 87.859292][ T357] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.875810][ T357] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.898007][ T357] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.908158][ T30] audit: type=1400 audit(1793849563.885:367): avc: denied { read } for pid=1817 comm="syz.5.590" name="file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 87.938640][ T357] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 87.966421][ T357] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.981411][ T357] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 87.999235][ T357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.046149][ T357] usb 1-1: config 0 descriptor?? [ 88.075540][ T1850] loop6: detected capacity change from 0 to 256 [ 88.081996][ T294] usb 4-1: 0:2 : does not exist [ 88.102068][ T294] usb 4-1: USB disconnect, device number 22 [ 88.177733][ T1850] FAT-fs (loop6): Directory bread(block 64) failed [ 88.338295][ T1850] FAT-fs (loop6): Directory bread(block 65) failed [ 88.438789][ T1850] FAT-fs (loop6): Directory bread(block 66) failed [ 88.538944][ T1850] FAT-fs (loop6): Directory bread(block 67) failed [ 88.559275][ T1850] FAT-fs (loop6): Directory bread(block 68) failed [ 88.576230][ T1850] FAT-fs (loop6): Directory bread(block 69) failed [ 88.635230][ T1860] loop5: detected capacity change from 0 to 256 [ 88.979518][ T1850] FAT-fs (loop6): Directory bread(block 70) failed [ 88.989250][ T1850] FAT-fs (loop6): Directory bread(block 71) failed [ 89.006426][ T1850] FAT-fs (loop6): Directory bread(block 72) failed [ 89.019284][ T1850] FAT-fs (loop6): Directory bread(block 73) failed [ 89.084198][ T1865] device-mapper: ioctl: Unable to rename non-existent device, to uuid LVM-syzb0 [ 89.164710][ T357] logitech-djreceiver 0003:046D:C53A.000B: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 89.242037][ T357] usb 1-1: USB disconnect, device number 18 [ 89.316654][ T1876] fido_id[1876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 89.539262][ T294] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 89.929228][ T294] usb 2-1: Using ep0 maxpacket: 8 [ 89.958291][ T1908] overlayfs: missing 'lowerdir' [ 90.050962][ T1917] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 90.067404][ T1919] netlink: 'syz.6.629': attribute type 4 has an invalid length. [ 90.149281][ T294] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 90.160589][ T294] usb 2-1: config 0 has no interface number 0 [ 90.172952][ T294] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 90.195082][ T294] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 90.206154][ T294] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 90.219525][ T294] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 90.228771][ T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.259623][ T294] usb 2-1: config 0 descriptor?? [ 90.310994][ T1927] loop6: detected capacity change from 0 to 4096 [ 90.327317][ T1927] EXT4-fs (loop6): Ignoring removed nobh option [ 90.336971][ T1927] EXT4-fs (loop6): Test dummy encryption mode enabled [ 90.344462][ T1927] EXT4-fs (loop6): Ignoring removed bh option [ 90.352608][ T1927] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 90.537186][ T334] usb 2-1: USB disconnect, device number 21 [ 90.550627][ T1935] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 90.989294][ T294] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 91.024380][ T1940] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.031523][ T1940] FAULT_INJECTION: forcing a failure. [ 91.031523][ T1940] name failslab, interval 1, probability 0, space 0, times 0 [ 91.044177][ T1940] CPU: 0 PID: 1940 Comm: syz.0.635 Not tainted syzkaller #0 [ 91.051697][ T1940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.061778][ T1940] Call Trace: [ 91.065062][ T1940] [ 91.068010][ T1940] __dump_stack+0x21/0x30 [ 91.072363][ T1940] dump_stack_lvl+0x110/0x170 [ 91.077047][ T1940] ? show_regs_print_info+0x20/0x20 [ 91.082261][ T1940] dump_stack+0x15/0x20 [ 91.086437][ T1940] should_fail+0x3ab/0x500 [ 91.090875][ T1940] ? fdb_notify+0x78/0x130 [ 91.095326][ T1940] __should_failslab+0xa4/0xe0 [ 91.100110][ T1940] should_failslab+0x9/0x20 [ 91.104810][ T1940] slab_pre_alloc_hook+0x39/0xd0 [ 91.109776][ T1940] ? fdb_notify+0x78/0x130 [ 91.114231][ T1940] ? fdb_notify+0x78/0x130 [ 91.118748][ T1940] __kmalloc_track_caller+0x6c/0x2c0 [ 91.124088][ T1940] ? fdb_notify+0x78/0x130 [ 91.128549][ T1940] ? fdb_notify+0x78/0x130 [ 91.133010][ T1940] __alloc_skb+0x210/0x730 [ 91.137467][ T1940] fdb_notify+0x78/0x130 [ 91.141754][ T1940] fdb_delete+0x896/0xb00 [ 91.146122][ T1940] br_fdb_delete_by_port+0x167/0x340 [ 91.151448][ T1940] br_stp_disable_port+0x113/0x1b0 [ 91.156695][ T1940] br_stp_disable_bridge+0x82/0x150 [ 91.161942][ T1940] ? br_dev_open+0xe0/0xe0 [ 91.166394][ T1940] br_dev_stop+0x2c/0xd0 [ 91.170655][ T1940] ? br_dev_open+0xe0/0xe0 [ 91.175370][ T1940] __dev_close_many+0x28a/0x350 [ 91.180338][ T1940] ? dev_close_many+0x4d0/0x4d0 [ 91.185217][ T1940] ? __local_bh_enable_ip+0x58/0x80 [ 91.190432][ T1940] ? dev_set_rx_mode+0x20a/0x2c0 [ 91.195384][ T1940] ? br_dev_change_rx_flags+0x30/0x50 [ 91.200950][ T1940] __dev_change_flags+0x2c9/0x6a0 [ 91.205991][ T1940] ? dev_get_flags+0x1e0/0x1e0 [ 91.210776][ T1940] dev_change_flags+0x80/0x1a0 [ 91.215548][ T1940] dev_ifsioc+0x130/0xd50 [ 91.220007][ T1940] ? dev_ioctl+0xd00/0xd00 [ 91.224440][ T1940] ? __kasan_check_write+0x14/0x20 [ 91.229588][ T1940] ? mutex_lock+0x9b/0x1c0 [ 91.234012][ T1940] ? wait_for_completion_killable_timeout+0x10/0x10 [ 91.240612][ T1940] ? dev_get_by_name_rcu+0xc8/0xf0 [ 91.245745][ T1940] dev_ioctl+0x546/0xd00 [ 91.250015][ T1940] sock_do_ioctl+0x241/0x310 [ 91.254635][ T1940] ? sock_show_fdinfo+0xa0/0xa0 [ 91.259493][ T1940] ? selinux_file_ioctl+0x3ad/0x4c0 [ 91.264713][ T1940] ? switch_mm_irqs_off+0x724/0x960 [ 91.270062][ T1940] sock_ioctl+0x459/0x6d0 [ 91.274437][ T1940] ? sock_poll+0x3f0/0x3f0 [ 91.278908][ T1940] ? __fget_files+0x2e1/0x340 [ 91.283628][ T1940] ? security_file_ioctl+0x84/0xa0 [ 91.288817][ T1940] ? sock_poll+0x3f0/0x3f0 [ 91.293278][ T1940] __se_sys_ioctl+0x121/0x1a0 [ 91.298160][ T1940] __x64_sys_ioctl+0x7b/0x90 [ 91.302815][ T1940] x64_sys_call+0x2f/0x9a0 [ 91.307262][ T1940] do_syscall_64+0x4c/0xa0 [ 91.311687][ T1940] ? clear_bhb_loop+0x50/0xa0 [ 91.316392][ T1940] ? clear_bhb_loop+0x50/0xa0 [ 91.321084][ T1940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.327133][ T1940] RIP: 0033:0x7eff5c8b8b19 [ 91.331843][ T1940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.351461][ T1940] RSP: 002b:00007eff5b310028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.359892][ T1940] RAX: ffffffffffffffda RBX: 00007eff5cb3efa0 RCX: 00007eff5c8b8b19 [ 91.367904][ T1940] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000004 [ 91.375999][ T1940] RBP: 00007eff5c950b70 R08: 0000000000000000 R09: 0000000000000000 [ 91.384052][ T1940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.392065][ T1940] R13: 00007eff5cb3f038 R14: 00007eff5cb3efa0 R15: 00007ffeabf69db8 [ 91.400076][ T1940] [ 91.403289][ T1940] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.548149][ T294] usb 6-1: Using ep0 maxpacket: 16 [ 92.649284][ T294] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.681458][ T294] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.703542][ T294] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.639260][ T294] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 93.652130][ T294] usb 6-1: config 0 interface 0 has no altsetting 0 [ 93.658770][ T294] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 93.667936][ T294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.710713][ T294] usb 6-1: config 0 descriptor?? [ 95.738804][ T294] usb 6-1: can't set config #0, error -71 [ 95.835137][ T294] usb 6-1: USB disconnect, device number 20 [ 95.902279][ T1968] device bridge_slave_0 left promiscuous mode [ 95.918770][ T1968] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.936784][ T1968] device bridge_slave_1 left promiscuous mode [ 95.952369][ T1968] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.989370][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 95.989388][ T30] audit: type=1400 audit(1793849572.325:377): avc: denied { execute } for pid=1960 comm="syz.0.640" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.149625][ T30] audit: type=1400 audit(1793849572.325:378): avc: denied { execute_no_trans } for pid=1960 comm="syz.0.640" path=2F6D656D66643A2D42D54E343A29202864656C6574656429 dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.325067][ T1978] input: syz1 as /devices/virtual/input/input10 [ 96.416797][ T1986] loop1: detected capacity change from 0 to 256 [ 96.477727][ T1986] FAT-fs (loop1): Directory bread(block 64) failed [ 96.499420][ T1986] FAT-fs (loop1): Directory bread(block 65) failed [ 96.513277][ T1986] FAT-fs (loop1): Directory bread(block 66) failed [ 96.527018][ T1986] FAT-fs (loop1): Directory bread(block 67) failed [ 96.540854][ T1986] FAT-fs (loop1): Directory bread(block 68) failed [ 96.555172][ T1986] FAT-fs (loop1): Directory bread(block 69) failed [ 96.573782][ T1986] FAT-fs (loop1): Directory bread(block 70) failed [ 96.588556][ T1986] FAT-fs (loop1): Directory bread(block 71) failed [ 96.615949][ T1986] FAT-fs (loop1): Directory bread(block 72) failed [ 96.626518][ T1992] ip_tables: iptables: counters copy to user failed while replacing table [ 96.631040][ T1986] FAT-fs (loop1): Directory bread(block 73) failed [ 96.699325][ T356] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 97.175223][ T2009] xt_hashlimit: size too large, truncated to 1048576 [ 97.801951][ T2027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.667'. [ 99.116621][ T2055] loop5: detected capacity change from 0 to 7 [ 99.205230][ T2064] FAULT_INJECTION: forcing a failure. [ 99.205230][ T2064] name failslab, interval 1, probability 0, space 0, times 0 [ 99.217948][ T2064] CPU: 1 PID: 2064 Comm: syz.6.683 Not tainted syzkaller #0 [ 99.225277][ T2064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.235389][ T2064] Call Trace: [ 99.238705][ T2064] [ 99.241674][ T2064] __dump_stack+0x21/0x30 [ 99.246040][ T2064] dump_stack_lvl+0x110/0x170 [ 99.250758][ T2064] ? show_regs_print_info+0x20/0x20 [ 99.256091][ T2064] ? kernfs_xattr_get+0x81/0x90 [ 99.260975][ T2064] ? selinux_kernfs_init_security+0x143/0x450 [ 99.267081][ T2064] dump_stack+0x15/0x20 [ 99.271281][ T2064] should_fail+0x3ab/0x500 [ 99.275756][ T2064] __should_failslab+0xa4/0xe0 [ 99.280555][ T2064] should_failslab+0x9/0x20 [ 99.285122][ T2064] slab_pre_alloc_hook+0x39/0xd0 [ 99.290188][ T2064] ? __kernfs_new_node+0xe1/0x670 [ 99.295267][ T2064] kmem_cache_alloc+0x44/0x260 [ 99.300065][ T2064] __kernfs_new_node+0xe1/0x670 [ 99.304965][ T2064] ? kernfs_new_node+0x260/0x260 [ 99.309926][ T2064] ? rwsem_write_trylock+0x136/0x300 [ 99.315244][ T2064] ? rwsem_write_trylock+0x136/0x300 [ 99.320561][ T2064] ? up_write+0x7b/0x290 [ 99.324835][ T2064] ? kernfs_activate+0x35e/0x370 [ 99.329809][ T2064] kernfs_new_node+0x150/0x260 [ 99.334605][ T2064] __kernfs_create_file+0x4e/0x270 [ 99.339758][ T2064] sysfs_add_file_mode_ns+0x29a/0x350 [ 99.345159][ T2064] internal_create_group+0x492/0xd00 [ 99.350469][ T2064] ? up_write+0x7b/0x290 [ 99.354760][ T2064] ? sysfs_create_group+0x30/0x30 [ 99.359814][ T2064] ? __kasan_check_write+0x14/0x20 [ 99.364956][ T2064] ? kernfs_put+0x44f/0x480 [ 99.369493][ T2064] sysfs_create_groups+0x58/0x120 [ 99.374547][ T2064] device_add_attrs+0x14b/0x710 [ 99.379453][ T2064] ? device_add+0x781/0xe90 [ 99.383987][ T2064] device_add+0x5a2/0xe90 [ 99.388352][ T2064] netdev_register_kobject+0x18e/0x330 [ 99.393947][ T2064] ? raw_notifier_call_chain+0xe9/0x100 [ 99.399527][ T2064] register_netdevice+0xeaa/0x1490 [ 99.404678][ T2064] ? netif_stacked_transfer_operstate+0x220/0x220 [ 99.411142][ T2064] wg_newlink+0x4f1/0x7a0 [ 99.415518][ T2064] ? wg_setup+0x390/0x390 [ 99.419886][ T2064] rtnl_newlink+0x137f/0x1900 [ 99.424599][ T2064] ? arch_stack_walk+0xee/0x140 [ 99.429507][ T2064] ? rtnl_setlink+0x4d0/0x4d0 [ 99.434228][ T2064] ? __kernel_text_address+0xa0/0x100 [ 99.439630][ T2064] ? unwind_get_return_address+0x4d/0x90 [ 99.445295][ T2064] ? stack_trace_save+0xf0/0xf0 [ 99.450185][ T2064] ? memcpy+0x56/0x70 [ 99.454219][ T2064] ? stack_trace_save+0xf0/0xf0 [ 99.459103][ T2064] ? __kasan_check_write+0x14/0x20 [ 99.464243][ T2064] ? wait_for_completion_killable_timeout+0x10/0x10 [ 99.470871][ T2064] ? ns_capable+0x8c/0xf0 [ 99.475241][ T2064] ? netlink_net_capable+0x125/0x160 [ 99.480574][ T2064] ? rtnl_setlink+0x4d0/0x4d0 [ 99.485281][ T2064] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 99.490247][ T2064] ? 0xffffffffa0030000 [ 99.494429][ T2064] ? rtnetlink_bind+0x80/0x80 [ 99.499137][ T2064] ? avc_has_perm_noaudit+0x398/0x5c0 [ 99.504535][ T2064] ? memcpy+0x56/0x70 [ 99.508560][ T2064] ? avc_has_perm_noaudit+0x313/0x5c0 [ 99.513959][ T2064] ? arch_stack_walk+0xee/0x140 [ 99.518853][ T2064] ? avc_denied+0x1b0/0x1b0 [ 99.523423][ T2064] ? stack_trace_save+0xa6/0xf0 [ 99.528309][ T2064] ? avc_has_perm+0x163/0x250 [ 99.533015][ T2064] ? avc_has_perm_noaudit+0x5c0/0x5c0 [ 99.538416][ T2064] ? x64_sys_call+0x4b/0x9a0 [ 99.543040][ T2064] ? selinux_nlmsg_lookup+0x38f/0x440 [ 99.548451][ T2064] netlink_rcv_skb+0x1e9/0x430 [ 99.553248][ T2064] ? rtnetlink_bind+0x80/0x80 [ 99.558047][ T2064] ? netlink_ack+0xb10/0xb10 [ 99.562693][ T2064] ? _copy_from_iter+0x4a4/0x10a0 [ 99.567762][ T2064] ? __netlink_lookup+0x387/0x3b0 [ 99.572827][ T2064] rtnetlink_rcv+0x1c/0x20 [ 99.577288][ T2064] netlink_unicast+0x86c/0xa30 [ 99.582122][ T2064] netlink_sendmsg+0x879/0xb80 [ 99.586927][ T2064] ? netlink_getsockopt+0x530/0x530 [ 99.592166][ T2064] ? alloc_file+0x59/0x580 [ 99.596615][ T2064] ? security_socket_sendmsg+0x82/0xa0 [ 99.602197][ T2064] ? netlink_getsockopt+0x530/0x530 [ 99.607462][ T2064] ____sys_sendmsg+0x5be/0x8f0 [ 99.612268][ T2064] ? __sys_sendmsg_sock+0x40/0x40 [ 99.617331][ T2064] ? import_iovec+0x7c/0xb0 [ 99.621873][ T2064] ___sys_sendmsg+0x236/0x2e0 [ 99.626585][ T2064] ? __sys_sendmsg+0x280/0x280 [ 99.631383][ T2064] ? percpu_counter_add_batch+0x13c/0x160 [ 99.637170][ T2064] ? __fdget+0x1a1/0x230 [ 99.641443][ T2064] __x64_sys_sendmsg+0x201/0x2d0 [ 99.646499][ T2064] ? ___sys_sendmsg+0x2e0/0x2e0 [ 99.651385][ T2064] ? __kasan_check_write+0x14/0x20 [ 99.656534][ T2064] ? switch_fpu_return+0x15d/0x2c0 [ 99.661690][ T2064] x64_sys_call+0x4b/0x9a0 [ 99.666150][ T2064] do_syscall_64+0x4c/0xa0 [ 99.670597][ T2064] ? clear_bhb_loop+0x50/0xa0 [ 99.675315][ T2064] ? clear_bhb_loop+0x50/0xa0 [ 99.680033][ T2064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.686051][ T2064] RIP: 0033:0x7fc6934dfb19 [ 99.690538][ T2064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.710320][ T2064] RSP: 002b:00007fc691f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.719042][ T2064] RAX: ffffffffffffffda RBX: 00007fc693765fa0 RCX: 00007fc6934dfb19 [ 99.727056][ T2064] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000004 [ 99.735091][ T2064] RBP: 00007fc693577b70 R08: 0000000000000000 R09: 0000000000000000 [ 99.743098][ T2064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.751107][ T2064] R13: 00007fc693766038 R14: 00007fc693765fa0 R15: 00007ffe918e0388 [ 99.759119][ T2064] [ 100.644449][ T30] audit: type=1400 audit(1793849576.705:379): avc: denied { map } for pid=2073 comm="syz.1.684" path="/100/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=13111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 100.909282][ T356] usb 7-1: device not accepting address 17, error -71 [ 101.464664][ T2098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=2098 comm=syz.0.694 [ 101.668345][ T2105] FAULT_INJECTION: forcing a failure. [ 101.668345][ T2105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.681873][ T2105] CPU: 1 PID: 2105 Comm: syz.0.697 Not tainted syzkaller #0 [ 101.689314][ T2105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.699443][ T2105] Call Trace: [ 101.702754][ T2105] [ 101.705714][ T2105] __dump_stack+0x21/0x30 [ 101.710086][ T2105] dump_stack_lvl+0x110/0x170 [ 101.714796][ T2105] ? show_regs_print_info+0x20/0x20 [ 101.720029][ T2105] ? __this_cpu_preempt_check+0x13/0x20 [ 101.725643][ T2105] dump_stack+0x15/0x20 [ 101.729846][ T2105] should_fail+0x3ab/0x500 [ 101.734307][ T2105] should_fail_alloc_page+0x55/0x80 [ 101.739542][ T2105] prepare_alloc_pages+0x13f/0x590 [ 101.744725][ T2105] ? __alloc_pages_bulk+0xab0/0xab0 [ 101.749977][ T2105] __alloc_pages+0x11d/0x460 [ 101.754600][ T2105] ? zone_watermark_fast+0x250/0x250 [ 101.759927][ T2105] ? release_pages+0x1264/0x12c0 [ 101.764897][ T2105] ? lru_cache_disable+0xa0/0xa0 [ 101.769875][ T2105] pte_alloc_one+0x70/0x190 [ 101.774803][ T2105] ? pfn_modify_allowed+0x2f0/0x2f0 [ 101.780092][ T2105] ? __this_cpu_preempt_check+0x13/0x20 [ 101.785692][ T2105] ? vma_data_pages+0xfc/0x130 [ 101.790499][ T2105] handle_pte_fault+0x19d0/0x2770 [ 101.795572][ T2105] ? __this_cpu_preempt_check+0x13/0x20 [ 101.801212][ T2105] ? fault_around_bytes_set+0xc0/0xc0 [ 101.806666][ T2105] do_handle_mm_fault+0x1b3b/0x1e30 [ 101.811911][ T2105] ? _raw_spin_unlock+0x4d/0x70 [ 101.816796][ T2105] ? follow_page_pte+0x943/0x980 [ 101.821817][ T2105] ? numa_migrate_prep+0xd0/0xd0 [ 101.826805][ T2105] ? follow_page_mask+0x516/0xf30 [ 101.831873][ T2105] ? vmacache_update+0xb7/0x120 [ 101.836796][ T2105] __get_user_pages+0x80e/0x10c0 [ 101.841774][ T2105] ? populate_vma_page_range+0xf0/0xf0 [ 101.847271][ T2105] __mm_populate+0x324/0x470 [ 101.851904][ T2105] ? mlock_fixup+0x2fd/0x4b0 [ 101.856535][ T2105] ? check_vma_flags+0x2d0/0x2d0 [ 101.861513][ T2105] __se_sys_mlockall+0x3a1/0x460 [ 101.866487][ T2105] __x64_sys_mlockall+0x38/0x40 [ 101.871371][ T2105] x64_sys_call+0x403/0x9a0 [ 101.875917][ T2105] do_syscall_64+0x4c/0xa0 [ 101.880381][ T2105] ? clear_bhb_loop+0x50/0xa0 [ 101.885116][ T2105] ? clear_bhb_loop+0x50/0xa0 [ 101.889824][ T2105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.895782][ T2105] RIP: 0033:0x7eff5c8b8b19 [ 101.900229][ T2105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.920014][ T2105] RSP: 002b:00007eff5b310028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 101.928478][ T2105] RAX: ffffffffffffffda RBX: 00007eff5cb3efa0 RCX: 00007eff5c8b8b19 [ 101.936495][ T2105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 101.944503][ T2105] RBP: 00007eff5c950b70 R08: 0000000000000000 R09: 0000000000000000 [ 101.952514][ T2105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.960521][ T2105] R13: 00007eff5cb3f038 R14: 00007eff5cb3efa0 R15: 00007ffeabf69db8 [ 101.968538][ T2105] [ 102.173560][ T2111] device-mapper: table: 253:2: raid: unknown target type [ 102.189242][ T2111] device-mapper: ioctl: error adding target to table [ 102.455466][ T356] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 102.809637][ T2127] syz.1.704 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.119338][ T2145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.713'. [ 103.202132][ T2148] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 103.244408][ T30] audit: type=1400 audit(1793849579.605:380): avc: denied { bind } for pid=2151 comm="syz.6.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.279250][ T356] usb 7-1: device descriptor read/all, error -71 [ 103.286388][ T356] usb usb7-port1: attempt power cycle [ 103.343309][ T2155] loop6: detected capacity change from 0 to 2048 [ 103.410139][ T2155] loop6: p1 < > p2 p3 p4 < p5 p6 > [ 103.415458][ T2155] loop6: partition table partially beyond EOD, truncated [ 103.437805][ T2155] loop6: p1 start 3405774849 is beyond EOD, truncated [ 103.460984][ T2155] loop6: p3 start 4225 is beyond EOD, truncated [ 103.478640][ T2155] loop6: p6 start 4225 is beyond EOD, truncated [ 103.559354][ T1955] udevd[1955]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 103.562158][ T1989] udevd[1989]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 103.579069][ T1988] udevd[1988]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 103.730734][ T2173] loop3: detected capacity change from 0 to 16 [ 103.761043][ T2173] erofs: (device loop3): erofs_init_devices: extra devices don't match (ondisk 128, given 0) [ 103.845728][ T2173] loop6: detected capacity change from 0 to 7 [ 104.028908][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 104.043564][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.054562][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.092411][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.103409][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.114481][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.125456][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.134405][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.145387][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.154426][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.165381][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.175873][ T2184] loop3: detected capacity change from 0 to 1024 [ 104.186606][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.198017][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.209240][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.220208][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.229213][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.240339][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.254074][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.265215][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.276262][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.297414][ T2184] EXT4-fs (loop3): barriers disabled [ 104.313310][ T2184] JBD2: no valid journal superblock found [ 104.329295][ T2184] EXT4-fs (loop3): error loading journal [ 104.352901][ T2197] FAULT_INJECTION: forcing a failure. [ 104.352901][ T2197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.366386][ T2197] CPU: 0 PID: 2197 Comm: syz.5.735 Not tainted syzkaller #0 [ 104.373713][ T2197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.384757][ T2197] Call Trace: [ 104.388078][ T2197] [ 104.391022][ T2197] __dump_stack+0x21/0x30 [ 104.395601][ T2197] dump_stack_lvl+0x110/0x170 [ 104.400324][ T2197] ? show_regs_print_info+0x20/0x20 [ 104.405570][ T2197] ? avc_has_perm+0x163/0x250 [ 104.410280][ T2197] dump_stack+0x15/0x20 [ 104.414471][ T2197] should_fail+0x3ab/0x500 [ 104.418915][ T2197] should_fail_usercopy+0x1a/0x20 [ 104.424088][ T2197] _copy_from_user+0x20/0xd0 [ 104.428799][ T2197] do_fcntl+0x45c/0x1220 [ 104.433076][ T2197] ? bpf_map_do_batch+0x15d/0x5d0 [ 104.438129][ T2197] ? match_file+0x130/0x130 [ 104.442666][ T2197] ? kill_fasync+0x210/0x210 [ 104.447288][ T2197] ? __fget_files+0x2e1/0x340 [ 104.451989][ T2197] ? security_file_fcntl+0x84/0xa0 [ 104.457129][ T2197] __se_sys_fcntl+0xdf/0x1b0 [ 104.461759][ T2197] __x64_sys_fcntl+0x7b/0x90 [ 104.466387][ T2197] x64_sys_call+0x6b8/0x9a0 [ 104.471704][ T2197] do_syscall_64+0x4c/0xa0 [ 104.476146][ T2197] ? clear_bhb_loop+0x50/0xa0 [ 104.480849][ T2197] ? clear_bhb_loop+0x50/0xa0 [ 104.485550][ T2197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.491499][ T2197] RIP: 0033:0x7f1dd16ffb19 [ 104.495951][ T2197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.515588][ T2197] RSP: 002b:00007f1dd0157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 104.524032][ T2197] RAX: ffffffffffffffda RBX: 00007f1dd1985fa0 RCX: 00007f1dd16ffb19 [ 104.532034][ T2197] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 104.540032][ T2197] RBP: 00007f1dd1797b70 R08: 0000000000000000 R09: 0000000000000000 [ 104.548030][ T2197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.556052][ T2197] R13: 00007f1dd1986038 R14: 00007f1dd1985fa0 R15: 00007ffdbb76a6f8 [ 104.564149][ T2197] [ 104.570311][ T2199] loop1: detected capacity change from 0 to 2048 [ 104.647430][ T2199] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue. Quota mode: writeback. [ 104.661314][ T2199] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.682278][ T2199] overlayfs: failed to set xattr on upper [ 104.688189][ T2199] overlayfs: ...falling back to index=off,metacopy=off. [ 104.727294][ T30] audit: type=1400 audit(1793849581.035:381): avc: denied { mounton } for pid=2198 comm="syz.1.734" path="/110/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 104.757111][ T30] audit: type=1400 audit(1793849581.035:382): avc: denied { write } for pid=2198 comm="syz.1.734" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 104.774030][ T294] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 104.858679][ T30] audit: type=1400 audit(1793849581.035:383): avc: denied { add_name } for pid=2198 comm="syz.1.734" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 104.955799][ T30] audit: type=1400 audit(1793849581.035:384): avc: denied { setattr } for pid=2198 comm="syz.1.734" name="work" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 104.996453][ T30] audit: type=1400 audit(1793849581.045:385): avc: denied { create } for pid=2198 comm="syz.1.734" name="#a" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 105.130145][ T30] audit: type=1400 audit(1793849581.045:386): avc: denied { remove_name } for pid=2198 comm="syz.1.734" name="#a" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 105.153026][ T294] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 105.179095][ T2227] loop6: detected capacity change from 0 to 512 [ 105.218600][ T294] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64 [ 105.296638][ T2227] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.359392][ T294] usb 1-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.375109][ T2227] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 105.391565][ T30] audit: type=1400 audit(1793849581.045:387): avc: denied { rename } for pid=2198 comm="syz.1.734" name="#a" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 105.415816][ T2227] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 105.425769][ T294] usb 1-1: config 1 interface 0 has no altsetting 0 [ 105.433947][ T2227] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 105.442816][ T30] audit: type=1400 audit(1793849581.045:388): avc: denied { unlink } for pid=2198 comm="syz.1.734" name="#a" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 105.474988][ T2227] System zones: 0-2, 18-18, 34-34 [ 105.498564][ T2227] EXT4-fs error (device loop6): ext4_orphan_get:1436: comm syz.6.746: bad orphan inode 15 [ 105.519303][ T294] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.528422][ T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 105.538058][ T2227] ext4_test_bit(bit=14, block=18) = 1 [ 105.549245][ T30] audit: type=1400 audit(1793849581.045:389): avc: denied { unlink } for pid=2198 comm="syz.1.734" name="#b" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 105.571144][ T2227] is_bad_inode(inode)=0 [ 105.576457][ T294] usb 1-1: SerialNumber: syz [ 105.585881][ T2227] NEXT_ORPHAN(inode)=2264924160 [ 105.602649][ T2227] max_ino=32 [ 105.609444][ T2227] i_nlink=0 [ 105.617007][ T2227] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #15: comm syz.6.746: corrupted inode contents [ 105.629557][ T2192] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.638804][ T2192] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.674519][ T2227] EXT4-fs error (device loop6): ext4_dirty_inode:6118: inode #15: comm syz.6.746: mark_inode_dirty error [ 105.714166][ T2227] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #15: comm syz.6.746: corrupted inode contents [ 105.749251][ T334] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 105.774444][ T2227] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2957: inode #15: comm syz.6.746: mark_inode_dirty error [ 105.776856][ T2245] FAULT_INJECTION: forcing a failure. [ 105.776856][ T2245] name failslab, interval 1, probability 0, space 0, times 0 [ 105.803508][ T2227] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2960: inode #15: comm syz.6.746: mark inode dirty (error -117) [ 105.803549][ T2245] CPU: 1 PID: 2245 Comm: syz.5.755 Not tainted syzkaller #0 [ 105.823297][ T2245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.833378][ T2245] Call Trace: [ 105.833574][ T2227] EXT4-fs warning (device loop6): ext4_evict_inode:305: xattr delete (err -117) [ 105.836685][ T2245] [ 105.846170][ T2227] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.848743][ T2245] __dump_stack+0x21/0x30 [ 105.863581][ T2245] dump_stack_lvl+0x110/0x170 [ 105.868301][ T2245] ? show_regs_print_info+0x20/0x20 [ 105.873523][ T2245] ? __kasan_check_write+0x14/0x20 [ 105.878655][ T2245] dump_stack+0x15/0x20 [ 105.882827][ T2245] should_fail+0x3ab/0x500 [ 105.887258][ T2245] __should_failslab+0xa4/0xe0 [ 105.892040][ T2245] should_failslab+0x9/0x20 [ 105.896565][ T2245] slab_pre_alloc_hook+0x39/0xd0 [ 105.901523][ T2245] __kmalloc+0x6d/0x2c0 [ 105.905703][ T2245] ? kvmalloc_node+0x211/0x320 [ 105.910491][ T2245] kvmalloc_node+0x211/0x320 [ 105.915117][ T2245] ? xt_find_table_lock+0x2a5/0x400 [ 105.920336][ T2245] ? do_ipt_get_ctl+0x60f/0x1100 [ 105.925293][ T2245] ? nf_getsockopt+0x26d/0x290 [ 105.930074][ T2245] ? ip_getsockopt+0x134d/0x17a0 [ 105.935040][ T2245] ? vm_mmap+0xb0/0xb0 [ 105.939138][ T2245] ? __x64_sys_getsockopt+0xbf/0xd0 [ 105.944359][ T2245] ? do_syscall_64+0x4c/0xa0 [ 105.948969][ T2245] ? __kprobes_text_end+0xa4cf0/0xa4cf0 [ 105.954562][ T2245] xt_alloc_entry_offsets+0x43/0x50 [ 105.959781][ T2245] translate_table+0x18d/0x1f60 [ 105.964655][ T2245] ? ipt_register_table+0x7b0/0x7b0 [ 105.969873][ T2245] ? __kmalloc+0x13d/0x2c0 [ 105.974304][ T2245] ? kvmalloc_node+0x211/0x320 [ 105.979085][ T2245] ? kvmalloc_node+0x23c/0x320 [ 105.983862][ T2245] ? vm_mmap+0xb0/0xb0 [ 105.987950][ T2245] ? memcpy+0x56/0x70 [ 105.992124][ T2245] ipt_register_table+0x11f/0x7b0 [ 105.997272][ T2245] ? local_bh_enable+0x30/0x30 [ 106.002054][ T2245] ? ipt_alloc_initial_table+0x526/0x640 [ 106.007796][ T2245] iptable_filter_table_init+0x78/0xb0 [ 106.013377][ T2245] xt_find_table_lock+0x2a5/0x400 [ 106.018423][ T2245] do_ipt_get_ctl+0x60f/0x1100 [ 106.023473][ T2245] ? do_ipt_set_ctl+0xd70/0xd70 [ 106.028348][ T2245] ? __stack_depot_save+0x34/0x480 [ 106.033476][ T2245] ? path_openat+0x284f/0x2f80 [ 106.038345][ T2245] ? __kasan_check_write+0x14/0x20 [ 106.043477][ T2245] ? _raw_spin_lock_bh+0x94/0xf0 [ 106.048432][ T2245] ? memset+0x35/0x40 [ 106.052538][ T2245] ? __kasan_check_write+0x14/0x20 [ 106.057666][ T2245] ? mutex_unlock+0x8f/0x230 [ 106.062379][ T2245] ? __mutex_lock_slowpath+0x10/0x10 [ 106.067687][ T2245] ? avc_has_perm_noaudit+0x313/0x5c0 [ 106.073081][ T2245] nf_getsockopt+0x26d/0x290 [ 106.077690][ T2245] ip_getsockopt+0x134d/0x17a0 [ 106.082471][ T2245] ? ip_setsockopt+0x37a0/0x37a0 [ 106.087447][ T2245] ? avc_has_perm+0x163/0x250 [ 106.092160][ T2245] ? proc_fail_nth_read+0x220/0x220 [ 106.097502][ T2245] ? avc_has_perm_noaudit+0x5c0/0x5c0 [ 106.102915][ T2245] ? vfs_write+0xc72/0xfd0 [ 106.107356][ T2245] ? selinux_socket_getsockopt+0x22f/0x340 [ 106.113176][ T2245] ? file_end_write+0x1b0/0x1b0 [ 106.118062][ T2245] ? selinux_socket_getpeername+0x340/0x340 [ 106.123971][ T2245] ? __kasan_check_write+0x14/0x20 [ 106.129102][ T2245] ? mutex_unlock+0x8f/0x230 [ 106.133709][ T2245] ? __fget_files+0x2e1/0x340 [ 106.138422][ T2245] udp_getsockopt+0x77/0x90 [ 106.142948][ T2245] sock_common_getsockopt+0x98/0xb0 [ 106.148163][ T2245] ? sock_recv_errqueue+0x5c0/0x5c0 [ 106.153393][ T2245] __sys_getsockopt+0x207/0x400 [ 106.158270][ T2245] __x64_sys_getsockopt+0xbf/0xd0 [ 106.163338][ T2245] x64_sys_call+0x6db/0x9a0 [ 106.167859][ T2245] do_syscall_64+0x4c/0xa0 [ 106.172302][ T2245] ? clear_bhb_loop+0x50/0xa0 [ 106.176998][ T2245] ? clear_bhb_loop+0x50/0xa0 [ 106.181695][ T2245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.187893][ T2245] RIP: 0033:0x7f1dd16ffb19 [ 106.192471][ T2245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.212292][ T2245] RSP: 002b:00007f1dd0157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 106.220730][ T2245] RAX: ffffffffffffffda RBX: 00007f1dd1985fa0 RCX: 00007f1dd16ffb19 [ 106.228719][ T2245] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 106.236700][ T2245] RBP: 00007f1dd1797b70 R08: 00002000000001c0 R09: 0000000000000000 [ 106.244687][ T2245] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 106.252772][ T2245] R13: 00007f1dd1986038 R14: 00007f1dd1985fa0 R15: 00007ffdbb76a6f8 [ 106.260764][ T2245] [ 106.266418][ T2192] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.274259][ T2192] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.999259][ T334] usb 2-1: Using ep0 maxpacket: 8 [ 107.005781][ T294] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 107.139598][ T334] usb 2-1: config 3 has an invalid interface number: 78 but max is 1 [ 107.149391][ T334] usb 2-1: config 3 has an invalid interface number: 168 but max is 1 [ 107.157851][ T334] usb 2-1: config 3 has no interface number 0 [ 107.164554][ T334] usb 2-1: config 3 has no interface number 1 [ 107.172442][ T334] usb 2-1: config 3 interface 78 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 107.183688][ T2268] FAULT_INJECTION: forcing a failure. [ 107.183688][ T2268] name failslab, interval 1, probability 0, space 0, times 0 [ 107.184866][ T334] usb 2-1: config 3 interface 78 altsetting 9 has an invalid endpoint with address 0xFC, skipping [ 107.197221][ T2268] CPU: 0 PID: 2268 Comm: syz.6.762 Not tainted syzkaller #0 [ 107.214359][ T2268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.224455][ T2268] Call Trace: [ 107.227771][ T2268] [ 107.230821][ T2268] __dump_stack+0x21/0x30 [ 107.235228][ T2268] dump_stack_lvl+0x110/0x170 [ 107.239951][ T2268] ? show_regs_print_info+0x20/0x20 [ 107.242158][ T334] usb 2-1: config 3 interface 78 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.245191][ T2268] dump_stack+0x15/0x20 [ 107.258713][ T334] usb 2-1: config 3 interface 78 has no altsetting 0 [ 107.262347][ T2268] should_fail+0x3ab/0x500 [ 107.262374][ T2268] ? alloc_uevent_skb+0x85/0x240 [ 107.273349][ T334] usb 2-1: config 3 interface 168 has no altsetting 0 [ 107.273493][ T2268] __should_failslab+0xa4/0xe0 [ 107.290016][ T2268] should_failslab+0x9/0x20 [ 107.294569][ T2268] slab_pre_alloc_hook+0x39/0xd0 [ 107.299556][ T2268] ? alloc_uevent_skb+0x85/0x240 [ 107.304541][ T2268] ? alloc_uevent_skb+0x85/0x240 [ 107.309528][ T2268] __kmalloc_track_caller+0x6c/0x2c0 [ 107.314860][ T2268] ? alloc_uevent_skb+0x85/0x240 [ 107.319848][ T2268] ? alloc_uevent_skb+0x85/0x240 [ 107.324838][ T2268] __alloc_skb+0x210/0x730 [ 107.329293][ T2268] alloc_uevent_skb+0x85/0x240 [ 107.334101][ T2268] ? rx_queue_release+0x170/0x170 [ 107.339158][ T2268] kobject_uevent_net_broadcast+0x1a6/0x5a0 [ 107.345078][ T2268] kobject_uevent_env+0x52b/0x700 [ 107.350147][ T2268] kobject_uevent+0x1d/0x30 [ 107.354724][ T2268] __kobject_del+0xd3/0x2c0 [ 107.359267][ T2268] kobject_put+0x1db/0x270 [ 107.363757][ T2268] net_rx_queue_update_kobjects+0x3f4/0x460 [ 107.369723][ T2268] netdev_unregister_kobject+0xf9/0x260 [ 107.375367][ T2268] unregister_netdevice_many+0x14e4/0x1a00 [ 107.381248][ T2268] ? alloc_netdev_mqs+0xe20/0xe20 [ 107.386362][ T2268] ? queue_delayed_work_on+0x10d/0x160 [ 107.391879][ T2268] ? queue_delayed_work_on+0x117/0x160 [ 107.397394][ T2268] ? __kasan_check_read+0x11/0x20 [ 107.403298][ T2268] unregister_netdevice_queue+0x2e1/0x320 [ 107.409112][ T2268] ? __kasan_check_read+0x11/0x20 [ 107.414194][ T2268] ? linkwatch_urgent_event+0x65/0x460 [ 107.419707][ T2268] ? list_netdevice+0x4c0/0x4c0 [ 107.424608][ T2268] __tun_detach+0xc9d/0x1450 [ 107.429251][ T2268] tun_chr_close+0x92/0x140 [ 107.432907][ T334] usb 2-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=be.2b [ 107.433834][ T2268] ? tun_chr_open+0x540/0x540 [ 107.433868][ T2268] __fput+0x22b/0x900 [ 107.448851][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.451587][ T2268] ____fput+0x15/0x20 [ 107.451617][ T2268] task_work_run+0x127/0x190 [ 107.468218][ T2268] exit_to_user_mode_loop+0xd0/0xe0 [ 107.473487][ T2268] exit_to_user_mode_prepare+0x87/0xd0 [ 107.475900][ T334] usb 2-1: Product: syz [ 107.479036][ T2268] syscall_exit_to_user_mode+0x1a/0x30 [ 107.488706][ T2268] do_syscall_64+0x58/0xa0 [ 107.493158][ T334] usb 2-1: Manufacturer: syz [ 107.493178][ T2268] ? clear_bhb_loop+0x50/0xa0 [ 107.502492][ T2268] ? clear_bhb_loop+0x50/0xa0 [ 107.507059][ T334] usb 2-1: SerialNumber: syz [ 107.507337][ T2268] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.517991][ T2268] RIP: 0033:0x7fc6934dfb19 [ 107.522453][ T2268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.542096][ T2268] RSP: 002b:00007fc691f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 107.550555][ T2268] RAX: 0000000000000000 RBX: 00007fc693765fa0 RCX: 00007fc6934dfb19 [ 107.558548][ T2268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 107.566653][ T2268] RBP: 00007fc693577b70 R08: 0000000000000000 R09: 0000000000000000 [ 107.574673][ T2268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.582672][ T2268] R13: 00007fc693766038 R14: 00007fc693765fa0 R15: 00007ffe918e0388 [ 107.590853][ T2268] [ 107.703614][ T294] usb 1-1: USB disconnect, device number 19 [ 107.719313][ T294] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 107.729638][ T2230] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 107.833142][ T2295] loop6: detected capacity change from 0 to 512 [ 107.890501][ T2295] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 107.904246][ T2295] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.949320][ T39] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 107.983532][ T2314] loop6: detected capacity change from 0 to 128 [ 108.041182][ T2314] EXT4-fs (loop6): dax option not supported [ 108.053749][ T2314] FAULT_INJECTION: forcing a failure. [ 108.053749][ T2314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.067174][ T2314] CPU: 0 PID: 2314 Comm: syz.6.767 Not tainted syzkaller #0 [ 108.074641][ T2314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.084903][ T2314] Call Trace: [ 108.088214][ T2314] [ 108.088599][ T334] usb 2-1: USB disconnect, device number 22 [ 108.091166][ T2314] __dump_stack+0x21/0x30 [ 108.091192][ T2314] dump_stack_lvl+0x110/0x170 [ 108.091210][ T2314] ? show_regs_print_info+0x20/0x20 [ 108.111350][ T2314] dump_stack+0x15/0x20 [ 108.115545][ T2314] should_fail+0x3ab/0x500 [ 108.119998][ T2314] should_fail_alloc_page+0x55/0x80 [ 108.125274][ T2314] prepare_alloc_pages+0x13f/0x590 [ 108.130432][ T2314] ? __alloc_pages_bulk+0xab0/0xab0 [ 108.135669][ T2314] ? release_pages+0x1264/0x12c0 [ 108.140649][ T2314] __alloc_pages+0x11d/0x460 [ 108.145266][ T2314] ? unlock_page_memcg+0x114/0x130 [ 108.150389][ T2314] ? zone_watermark_fast+0x250/0x250 [ 108.155695][ T2314] ? page_remove_rmap+0xc6d/0xf40 [ 108.160728][ T2314] ? page_add_file_rmap+0x700/0x700 [ 108.166041][ T2314] ? __kasan_check_write+0x14/0x20 [ 108.171192][ T2314] ? _raw_spin_lock+0x94/0xf0 [ 108.175944][ T2314] __get_free_pages+0x10/0x30 [ 108.180690][ T2314] __tlb_remove_page_size+0x18a/0x310 [ 108.186122][ T2314] unmap_page_range+0x1059/0x1e00 [ 108.191165][ T2314] ? finish_task_switch+0x32a/0x790 [ 108.196409][ T2314] ? switch_mm_irqs_off+0x2fb/0x960 [ 108.201802][ T2314] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 108.208152][ T2314] ? tokenize_frame_descr+0x60/0xc0 [ 108.213379][ T2314] ? preempt_schedule_common+0xbe/0xf0 [ 108.218890][ T2314] ? schedule_preempt_disabled+0x20/0x20 [ 108.224534][ T2314] unmap_vmas+0x26d/0x380 [ 108.228977][ T2314] ? unmap_page_range+0x1e00/0x1e00 [ 108.234181][ T2314] ? __kasan_check_write+0x14/0x20 [ 108.239306][ T2314] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 108.244782][ T2314] exit_mmap+0x412/0x8b0 [ 108.249029][ T2314] ? vm_brk+0x30/0x30 [ 108.253037][ T2314] ? mutex_unlock+0x8f/0x230 [ 108.257653][ T2314] ? uprobe_clear_state+0x2c6/0x320 [ 108.262863][ T2314] __mmput+0x92/0x300 [ 108.266869][ T2314] mmput+0x50/0x150 [ 108.270687][ T2314] do_exit+0xacc/0x29a0 [ 108.274876][ T2314] ? put_task_struct+0x90/0x90 [ 108.279645][ T2314] ? kasan_set_track+0x5b/0x70 [ 108.284444][ T2314] ? kasan_set_track+0x4a/0x70 [ 108.289214][ T2314] ? kasan_set_free_info+0x23/0x40 [ 108.294356][ T2314] ? ____kasan_slab_free+0x125/0x160 [ 108.299659][ T2314] ? __kasan_slab_free+0x11/0x20 [ 108.304599][ T2314] ? slab_free_freelist_hook+0xc2/0x190 [ 108.310149][ T2314] ? kmem_cache_free+0x100/0x320 [ 108.315112][ T2314] ? do_mknodat+0x726/0x790 [ 108.319622][ T2314] ? __kasan_check_write+0x14/0x20 [ 108.324748][ T2314] ? _raw_spin_lock_irq+0x95/0xf0 [ 108.329812][ T2314] do_group_exit+0x149/0x310 [ 108.334429][ T2314] ? __kasan_check_write+0x14/0x20 [ 108.339547][ T2314] ? recalc_sigpending+0x1ac/0x230 [ 108.344667][ T2314] get_signal+0x64f/0x1430 [ 108.349117][ T2314] arch_do_signal_or_restart+0xe2/0x1100 [ 108.349548][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.354765][ T2314] ? kasan_quarantine_put+0x34/0x190 [ 108.354794][ T2314] ? kmem_cache_free+0x100/0x320 [ 108.372746][ T2314] ? ____kasan_slab_free+0x130/0x160 [ 108.378058][ T2314] ? get_sigframe_size+0x10/0x10 [ 108.383009][ T2314] ? __se_sys_futex+0x135/0x330 [ 108.387878][ T2314] ? kmem_cache_free+0x100/0x320 [ 108.392824][ T2314] ? do_mknodat+0x726/0x790 [ 108.397362][ T2314] exit_to_user_mode_loop+0xa7/0xe0 [ 108.402594][ T2314] exit_to_user_mode_prepare+0x87/0xd0 [ 108.408056][ T2314] syscall_exit_to_user_mode+0x1a/0x30 [ 108.413525][ T2314] do_syscall_64+0x58/0xa0 [ 108.417952][ T2314] ? clear_bhb_loop+0x50/0xa0 [ 108.422661][ T2314] ? clear_bhb_loop+0x50/0xa0 [ 108.427693][ T2314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.433593][ T2314] RIP: 0033:0x7fc6934dfb19 [ 108.438063][ T2314] Code: Unable to access opcode bytes at RIP 0x7fc6934dfaef. [ 108.439508][ T39] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 108.445690][ T2314] RSP: 002b:00007fc691f370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.445715][ T2314] RAX: 0000000000000001 RBX: 00007fc693765fa8 RCX: 00007fc6934dfb19 [ 108.445730][ T2314] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc693765fac [ 108.445743][ T2314] RBP: 00007fc693765fa0 R08: 0001e45092450210 R09: 0000000000000000 [ 108.456901][ T39] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.464721][ T2314] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 108.464744][ T2314] R13: 00007fc693766038 R14: 00007ffe918e02a0 R15: 00007ffe918e0388 [ 108.464765][ T2314] [ 108.517131][ T39] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 52, changing to 7 [ 108.528431][ T39] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 9272, setting to 1024 [ 108.552117][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 108.552134][ T30] audit: type=1326 audit(1793849584.915:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.6.770" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 108.588456][ T30] audit: type=1326 audit(1793849584.915:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.6.770" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 108.639864][ T30] audit: type=1326 audit(1793849584.915:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.6.770" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 108.697305][ T30] audit: type=1326 audit(1793849584.915:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.6.770" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 108.726644][ T30] audit: type=1326 audit(1793849584.915:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.6.770" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 108.751938][ T39] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 108.761982][ T30] audit: type=1326 audit(1793849584.915:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.6.770" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 108.787140][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.795528][ T39] usb 4-1: Product: syz [ 108.800058][ T39] usb 4-1: Manufacturer: syz [ 108.804766][ T39] usb 4-1: SerialNumber: syz [ 108.809864][ T30] audit: type=1326 audit(1793849584.915:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.6.770" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 108.860009][ T2346] FAULT_INJECTION: forcing a failure. [ 108.860009][ T2346] name failslab, interval 1, probability 0, space 0, times 0 [ 108.872967][ T2346] CPU: 1 PID: 2346 Comm: syz.5.777 Not tainted syzkaller #0 [ 108.880304][ T2346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.890428][ T2346] Call Trace: [ 108.893737][ T2346] [ 108.896697][ T2346] __dump_stack+0x21/0x30 [ 108.901074][ T2346] dump_stack_lvl+0x110/0x170 [ 108.905818][ T2346] ? show_regs_print_info+0x20/0x20 [ 108.911147][ T2346] dump_stack+0x15/0x20 [ 108.915339][ T2346] should_fail+0x3ab/0x500 [ 108.919790][ T2346] ? audit_log_start+0x407/0x8a0 [ 108.921946][ T30] audit: type=1326 audit(1793849584.915:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.6.770" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc6934dfb19 code=0x7ffc0000 [ 108.924761][ T2346] __should_failslab+0xa4/0xe0 [ 108.950006][ T30] audit: type=1400 audit(1793849584.975:420): avc: denied { write } for pid=2335 comm="syz.0.773" name="usb_gadget" dev="configfs" ino=13262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.954417][ T2346] should_failslab+0x9/0x20 [ 108.977317][ T30] audit: type=1400 audit(1793849584.975:421): avc: denied { add_name } for pid=2335 comm="syz.0.773" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.981695][ T2346] slab_pre_alloc_hook+0x39/0xd0 [ 109.006895][ T2346] ? audit_log_start+0x407/0x8a0 [ 109.011876][ T2346] ? audit_log_start+0x407/0x8a0 [ 109.016855][ T2346] __kmalloc_track_caller+0x6c/0x2c0 [ 109.022170][ T2346] ? audit_log_start+0x407/0x8a0 [ 109.027128][ T2346] ? audit_log_start+0x407/0x8a0 [ 109.032106][ T2346] __alloc_skb+0x210/0x730 [ 109.036538][ T2346] audit_log_start+0x407/0x8a0 [ 109.041321][ T2346] ? audit_serial+0x30/0x30 [ 109.045835][ T2346] ? call_rcu+0x5af/0xf60 [ 109.050185][ T2346] ? rcu_gp_kthread_wake+0x90/0x90 [ 109.055330][ T2346] ? slow_avc_audit+0x240/0x240 [ 109.060196][ T2346] common_lsm_audit+0xd2/0x1670 [ 109.065068][ T2346] ? avc_update_node+0x34f/0x8a0 [ 109.070026][ T2346] ? avc_audit_pre_callback+0x290/0x290 [ 109.075615][ T2346] ? ipv6_skb_to_auditdata+0xdd0/0xdd0 [ 109.081099][ T2346] ? avc_update_node+0x2c6/0x8a0 [ 109.086061][ T2346] slow_avc_audit+0x1c4/0x240 [ 109.090759][ T2346] ? avc_get_hash_stats+0x180/0x180 [ 109.096135][ T2346] ? avc_has_perm_noaudit+0x313/0x5c0 [ 109.101551][ T2346] avc_has_perm+0x1fb/0x250 [ 109.106082][ T2346] ? avc_has_perm_noaudit+0x5c0/0x5c0 [ 109.111489][ T2346] ? vfs_write+0xc72/0xfd0 [ 109.115929][ T2346] ? security_transition_sid+0x7d/0x90 [ 109.121411][ T2346] selinux_socket_create+0x18c/0x2a0 [ 109.126723][ T2346] ? selinux_socket_unix_may_send+0x2c0/0x2c0 [ 109.132812][ T2346] ? mutex_unlock+0x8f/0x230 [ 109.137423][ T2346] security_socket_create+0x77/0xb0 [ 109.142642][ T2346] __sock_create+0xd4/0x7a0 [ 109.147162][ T2346] __sys_socket+0xec/0x190 [ 109.151593][ T2346] __x64_sys_socket+0x7a/0x90 [ 109.156370][ T2346] x64_sys_call+0x8c5/0x9a0 [ 109.160891][ T2346] do_syscall_64+0x4c/0xa0 [ 109.165323][ T2346] ? clear_bhb_loop+0x50/0xa0 [ 109.170016][ T2346] ? clear_bhb_loop+0x50/0xa0 [ 109.174714][ T2346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.180662][ T2346] RIP: 0033:0x7f1dd16ffb19 [ 109.185094][ T2346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.204725][ T2346] RSP: 002b:00007f1dd0157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 109.213184][ T2346] RAX: ffffffffffffffda RBX: 00007f1dd1985fa0 RCX: 00007f1dd16ffb19 [ 109.221695][ T2346] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000040000000015 [ 109.229887][ T2346] RBP: 00007f1dd1797b70 R08: 0000000000000000 R09: 0000000000000000 [ 109.237875][ T2346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.245862][ T2346] R13: 00007f1dd1986038 R14: 00007f1dd1985fa0 R15: 00007ffdbb76a6f8 [ 109.253856][ T2346] [ 109.359266][ T334] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 110.176338][ T334] usb 1-1: Using ep0 maxpacket: 16 [ 110.200047][ T39] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 110.220128][ T39] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 110.277570][ T39] usb 4-1: 1:1 : unsupported format bits 0xf0000006 [ 110.329317][ T334] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 110.329355][ T334] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.329383][ T334] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.329408][ T334] usb 1-1: New USB device found, idVendor=0b05, idProduct=196b, bcdDevice= 0.00 [ 110.329434][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.330121][ T334] usb 1-1: config 0 descriptor?? [ 110.343432][ T39] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 110.366804][ T39] usb 4-1: unit 2 not found! [ 110.366830][ T39] usb 4-1: unit 0 not found! [ 110.406479][ T39] usb 4-1: USB disconnect, device number 23 [ 110.532735][ T2363] loop6: detected capacity change from 0 to 40427 [ 110.548416][ T2363] F2FS-fs (loop6): Mismatch start address, segment0(0) cp_blkaddr(512) [ 110.564137][ T2363] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 110.585490][ T2363] F2FS-fs (loop6): fault_injection options not supported [ 110.599347][ T2363] F2FS-fs (loop6): fault_type options not supported [ 110.615414][ T2363] F2FS-fs (loop6): invalid crc value [ 110.630964][ T2363] F2FS-fs (loop6): Found nat_bits in checkpoint [ 110.695326][ T2363] F2FS-fs (loop6): Start checkpoint disabled! [ 110.728123][ T2363] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 110.746102][ T2363] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 110.821564][ T334] input: HID 0b05:196b as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0B05:196B.000C/input/input11 [ 110.930476][ T334] hid-generic 0003:0B05:196B.000C: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0b05:196b] on usb-dummy_hcd.0-1/input0 [ 110.997022][ T10] attempt to access beyond end of device [ 110.997022][ T10] loop6: rw=2049, want=40976, limit=40427 [ 111.016379][ T294] usb 1-1: USB disconnect, device number 20 [ 111.198430][ T2402] fido_id[2402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 111.612133][ T294] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 111.629869][ T294] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.723144][ T2448] bridge0: port 3(veth1) entered blocking state [ 111.729501][ T2448] bridge0: port 3(veth1) entered disabled state [ 111.742369][ T2448] device veth1 entered promiscuous mode [ 111.756614][ T2448] bridge0: port 3(veth1) entered blocking state [ 111.762990][ T2448] bridge0: port 3(veth1) entered forwarding state [ 112.827366][ T2533] loop6: detected capacity change from 0 to 512 [ 112.852135][ T2533] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 112.859771][ T2533] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 112.867203][ T2533] EXT4-fs (loop6): Ignoring removed bh option [ 112.878537][ T2533] EXT4-fs error (device loop6): ext4_iget_extra_inode:4604: inode #15: comm syz.6.856: corrupted in-inode xattr [ 112.892048][ T2533] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.856: couldn't read orphan inode 15 (err -117) [ 112.904687][ T2533] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000003,grpjquota=,quota,noload,nomblk_io_submit,mblk_io_submit,noinit_itable,bh,nombcache,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 112.934188][ T2533] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #2: block 12: comm syz.6.856: lblock 3 mapped to illegal pblock 12 (length 1) [ 112.969237][ T6] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 112.979375][ T357] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 113.329397][ T6] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 113.339601][ T357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.352027][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.361868][ T357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.371860][ T6] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 113.381680][ T357] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.394767][ T6] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 113.404045][ T357] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.413333][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.421585][ T357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.441757][ T357] usb 6-1: config 0 descriptor?? [ 113.449821][ T2521] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.878842][ T356] usb 2-1: USB disconnect, device number 23 [ 113.920628][ T357] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 113.940374][ T357] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 114.004543][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 114.004559][ T30] audit: type=1400 audit(1793849590.365:431): avc: denied { read } for pid=2573 comm="syz.0.869" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.034511][ T30] audit: type=1400 audit(1793849590.365:432): avc: denied { open } for pid=2573 comm="syz.0.869" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.059050][ T30] audit: type=1400 audit(1793849590.365:433): avc: denied { ioctl } for pid=2573 comm="syz.0.869" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.093427][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.104299][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.112048][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.131193][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.141872][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.149722][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.157365][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.165056][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.173784][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.182303][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.190079][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.197550][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.205346][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.213290][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.221125][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.228692][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.236784][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.244336][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.251868][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.259470][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.267421][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.275969][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.283477][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.285083][ T2586] loop3: detected capacity change from 0 to 128 [ 114.291158][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.305262][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.312733][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.320227][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.327636][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.335139][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.342850][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.346943][ T2586] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.350392][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.362563][ T2586] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.368890][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.387593][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.396195][ T2586] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 114.420545][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.429635][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.437582][ T334] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 114.447163][ T334] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz0] on syz0 [ 114.535140][ T2596] fido_id[2596]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.677996][ T30] audit: type=1400 audit(1793849591.035:434): avc: denied { read } for pid=2604 comm="syz.1.879" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.747121][ T2607] loop1: detected capacity change from 0 to 1024 [ 114.784566][ T2607] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.789570][ T356] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 114.803446][ T2607] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 114.821219][ T2607] EXT4-fs (loop1): invalid journal inode [ 114.827451][ T2607] EXT4-fs (loop1): can't get journal size [ 114.856640][ T2607] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 115.879276][ T356] usb 1-1: Using ep0 maxpacket: 16 [ 115.979350][ T30] audit: type=1400 audit(1793849592.315:435): avc: denied { write } for pid=2630 comm="syz.1.888" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.087574][ T2636] loop1: detected capacity change from 0 to 512 [ 116.109344][ T356] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.129208][ T356] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.136878][ T2636] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 116.149228][ T294] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 116.162352][ T2636] EXT4-fs (loop1): 1 truncate cleaned up [ 116.168254][ T2636] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000008,stripe=0x00000000000003ff,minixdf,data_err=ignore,i_version,,errors=continue. Quota mode: none. [ 116.209332][ T356] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 116.218403][ T356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.229242][ T356] usb 1-1: SerialNumber: syz [ 116.264466][ T2640] loop1: detected capacity change from 0 to 512 [ 116.271379][ T356] usb 1-1: 0:2 : does not exist [ 116.283061][ T2640] EXT4-fs (loop1): Test dummy encryption mode enabled [ 116.291009][ T2640] EXT4-fs (loop1): Test dummy encryption mode enabled [ 116.303457][ T2640] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.328012][ T2640] EXT4-fs (loop1): 1 truncate cleaned up [ 116.335551][ T2640] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,nojournal_checksum,journal_ioprio=0x0000000000000001,debug_want_extra_isize=0x0000000000000080,dioread_nolock,jqfmt=vfsv1,test_dummy_encryption,nodioread_nolock,,errors=continue. Quota mode: none. [ 116.373856][ T30] audit: type=1400 audit(1793849592.735:436): avc: denied { read } for pid=2639 comm="syz.1.891" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.398344][ T2640] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5924: inode #15: comm syz.1.891: bad extra_isize 62 (inode size 256) [ 116.412232][ T2640] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5924: inode #15: comm syz.1.891: bad extra_isize 62 (inode size 256) [ 116.425688][ T294] usb 4-1: Using ep0 maxpacket: 8 [ 116.430256][ T2640] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5924: inode #15: comm syz.1.891: bad extra_isize 62 (inode size 256) [ 116.472051][ T356] usb 1-1: USB disconnect, device number 21 [ 116.549270][ T294] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 67, changing to 7 [ 116.579673][ T1938] usb 6-1: USB disconnect, device number 21 [ 116.750222][ T294] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 116.760257][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.770781][ T294] usb 4-1: Product: syz [ 116.775360][ T294] usb 4-1: Manufacturer: syz [ 116.781233][ T294] usb 4-1: SerialNumber: syz [ 117.119680][ T294] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 117.139848][ T294] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 117.184320][ T294] usb 4-1: USB disconnect, device number 24 [ 117.202808][ T30] audit: type=1400 audit(1793849593.565:437): avc: denied { sys_admin } for pid=2664 comm="syz.6.900" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 117.449763][ T1988] udevd[1988]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 117.743480][ T2685] loop6: detected capacity change from 0 to 4096 [ 117.759391][ T30] audit: type=1400 audit(1793849594.115:438): avc: denied { read } for pid=2688 comm="syz.5.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.799389][ T2685] EXT4-fs (loop6): Test dummy encryption mode enabled [ 117.808393][ T2685] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 118.096042][ T2698] netlink: 25 bytes leftover after parsing attributes in process `syz.6.914'. [ 118.115519][ T2698] device ifb1 entered promiscuous mode [ 118.205886][ T2701] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.914'. [ 118.247919][ T2701] 0ªX¹¦Dö»: renamed from ifb1 [ 118.276611][ T2701] device 00ªX¹¦Dö» left promiscuous mode [ 118.679292][ T30] audit: type=1400 audit(1793849595.035:439): avc: denied { getopt } for pid=2710 comm="syz.1.917" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.838739][ T30] audit: type=1400 audit(1793849595.175:440): avc: denied { listen } for pid=2720 comm="syz.5.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.888085][ T2727] loop1: detected capacity change from 0 to 512 [ 118.931205][ T2727] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.962745][ T2727] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 119.059859][ T2727] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 119.159246][ T1938] usb 6-1: new full-speed USB device number 22 using dummy_hcd                                                                                                             [ 120.535560][ T30] audit: type=1400 audit(1793849596.895:443): avc: denied { open } for pid=2847 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 120.559974][ T1988] udevd[1988]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.604080][ T30] audit: type=1400 audit(1793849596.895:444): avc: denied { lock } for pid=2847 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 syzkaller syzkaller login: [ 120.788962][ T30] audit: type=1400 audit(1793849597.145:445): avc: denied { read write } for pid=2871 comm="syz.5.945" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.814379][ T30] audit: type=1400 audit(1793849597.175:446): avc: denied { open } for pid=2871 comm="syz.5.945" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.838898][ T30] audit: type=1400 audit(1793849597.175:447): avc: denied { ioctl } for pid=2871 comm="syz.5.945" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.016129][ T30] audit: type=1400 audit(1793849597.375:448): avc: denied { module_request } for pid=2880 comm="syz.6.946" kmod="net-pf-16-proto-18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 121.066746][ T2887] loop6: detected capacity change from 0 to 1024 [ 121.079291][ T1938] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 121.100075][ T2887] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.119254][ T2887] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.147820][ T30] audit: type=1400 audit(1793849597.505:449): avc: denied { map } for pid=2886 comm="syz.6.948" path="/247/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.177100][ T30] audit: type=1400 audit(1793849597.535:450): avc: denied { execute } for pid=2886 comm="syz.6.948" path="/247/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.258231][ T10] EXT4-fs error (device loop6): ext4_map_blocks:742: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 121.274341][ T10] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 121.293326][ T10] EXT4-fs (loop6): This should not happen!! Data will be lost [ 121.293326][ T10] [ 121.308860][ T10] EXT4-fs error (device loop6): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 121.323742][ T10] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 121.355632][ T10] EXT4-fs (loop6): This should not happen!! Data will be lost [ 121.355632][ T10] [ 121.499280][ T1938] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 121.588344][ T1938] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 121.759480][ T1938] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 121.768879][ T1938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.777804][ T1938] usb 6-1: Product: syz [ 121.782806][ T1938] usb 6-1: Manufacturer: syz [ 121.787509][ T1938] usb 6-1: SerialNumber: syz [ 121.869277][ T356] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 121.924468][ T2931] input: syz1 as /devices/virtual/input/input12 [ 121.958120][ T1989] udevd[1989]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 122.119247][ T356] usb 1-1: Using ep0 maxpacket: 32 [ 122.189709][ T1938] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 122.214998][ T1938] usb 6-1: unit 4 not found! [ 122.239321][ T356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.262250][ T356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.279232][ T312] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 122.306808][ T1938] usb 6-1: USB disconnect, device number 23 [ 122.367864][ T356] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.377260][ T356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.389618][ T356] usb 1-1: config 0 descriptor?? [ 122.399090][ T2949] loop6: detected capacity change from 0 to 512 [ 122.421748][ T2949] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.430883][ T356] hub 1-1:0.0: USB hub found [ 122.539748][ T1955] udevd[1955]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.555917][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 122.617968][ T2983] FAULT_INJECTION: forcing a failure. [ 122.617968][ T2983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.633746][ T2983] CPU: 0 PID: 2983 Comm: syz.5.958 Not tainted syzkaller #0 [ 122.641107][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.651219][ T2983] Call Trace: [ 122.654553][ T2983] [ 122.657543][ T2983] __dump_stack+0x21/0x30 [ 122.662136][ T2983] dump_stack_lvl+0x110/0x170 [ 122.666911][ T2983] ? show_regs_print_info+0x20/0x20 [ 122.672127][ T2983] dump_stack+0x15/0x20 [ 122.676471][ T2983] should_fail+0x3ab/0x500 [ 122.679620][ T312] usb 2-1: config 183 has an invalid interface number: 124 but max is 0 [ 122.680932][ T2983] should_fail_usercopy+0x1a/0x20 [ 122.693750][ T312] usb 2-1: config 183 has no interface number 0 [ 122.694305][ T2983] _copy_from_user+0x20/0xd0 [ 122.705158][ T2983] strndup_user+0xb1/0x150 [ 122.709350][ T312] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 122.709708][ T2983] __se_sys_fsopen+0xb4/0x330 [ 122.725448][ T2983] __x64_sys_fsopen+0x5b/0x70 [ 122.729346][ T312] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 122.730175][ T2983] x64_sys_call+0x553/0x9a0 [ 122.745855][ T2983] do_syscall_64+0x4c/0xa0 [ 122.750321][ T2983] ? clear_bhb_loop+0x50/0xa0 [ 122.755067][ T2983] ? clear_bhb_loop+0x50/0xa0 [ 122.758495][ T312] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x1 has an invalid bInterval 92, changing to 7 [ 122.759785][ T2983] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.759813][ T2983] RIP: 0033:0x7f1dd16ffb19 [ 122.759830][ T2983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.775064][ T312] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 122.776961][ T2983] RSP: 002b:00007f1dd0157028 EFLAGS: 00000246 [ 122.781915][ T312] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 122.801199][ T2983] ORIG_RAX: 00000000000001ae [ 122.801218][ T2983] RAX: ffffffffffffffda RBX: 00007f1dd1985fa0 RCX: 00007f1dd16ffb19 [ 122.801234][ T2983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 122.801248][ T2983] RBP: 00007f1dd1797b70 R08: 0000000000000000 R09: 0000000000000000 [ 122.801260][ T2983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.801271][ T2983] R13: 00007f1dd1986038 R14: 00007f1dd1985fa0 R15: 00007ffdbb76a6f8 [ 122.801292][ T2983] [ 122.802161][ T356] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 122.813761][ T312] usb 2-1: config 183 interface 124 has no altsetting 0 [ 122.914722][ T2996] netlink: 32 bytes leftover after parsing attributes in process `syz.5.960'. [ 122.982755][ T3003] loop5: detected capacity change from 0 to 256 [ 123.021378][ T3003] FAT-fs (loop5): Directory bread(block 64) failed [ 123.034563][ T3003] FAT-fs (loop5): Directory bread(block 65) failed [ 123.041950][ T3003] FAT-fs (loop5): Directory bread(block 66) failed [ 123.048515][ T3003] FAT-fs (loop5): Directory bread(block 67) failed [ 123.055408][ T312] usb 2-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=bc.e6 [ 123.064871][ T3003] FAT-fs (loop5): Directory bread(block 68) failed [ 123.071738][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.080083][ T3003] FAT-fs (loop5): Directory bread(block 69) failed [ 123.086713][ T312] usb 2-1: Product: syz [ 123.091253][ T3003] FAT-fs (loop5): Directory bread(block 70) failed [ 123.097889][ T312] usb 2-1: Manufacturer: syz [ 123.102764][ T3003] FAT-fs (loop5): Directory bread(block 71) failed [ 123.109748][ T312] usb 2-1: SerialNumber: syz [ 123.120574][ T3003] FAT-fs (loop5): Directory bread(block 72) failed [ 123.127157][ T3003] FAT-fs (loop5): Directory bread(block 73) failed [ 123.221945][ T356] hid-generic 0003:046D:C31C.0010: unknown main item tag 0x0 [ 123.233255][ T356] hid-generic 0003:046D:C31C.0010: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 123.448392][ T312] usb 2-1: USB disconnect, device number 24 [ 123.524826][ T3041] loop6: detected capacity change from 0 to 40427 [ 123.546769][ T3041] F2FS-fs (loop6): Unrecognized mount option "errors=continue" or missing value [ 123.629406][ T1938] usb 1-1: USB disconnect, device number 22 [ 124.259433][ T3074] tmpfs: Unknown parameter 'grpquota' [ 125.754957][ T3109] loop1: detected capacity change from 0 to 512 [ 125.791031][ T3109] EXT4-fs (loop1): Mount option "journal_checksum" incompatible with ext3 [ 125.886196][ T3132] loop5: detected capacity change from 0 to 128 [ 125.893675][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 125.893690][ T30] audit: type=1400 audit(1793849602.255:453): avc: denied { map } for pid=3128 comm="syz.0.983" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.219249][ T2653] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 126.245939][ T3180] loop5: detected capacity change from 0 to 1024 [ 126.287898][ T3180] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.376496][ T3180] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 126.599542][ T2653] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.620341][ T2653] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 126.649332][ T2653] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.830074][ T2653] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 126.847449][ T2653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.880741][ T2653] usb 2-1: Product: syz [ 126.885278][ T2653] usb 2-1: Manufacturer: syz [ 126.906845][ T2653] usb 2-1: SerialNumber: syz [ 126.949782][ T2653] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 126.981433][ T2653] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 127.001118][ T2653] usbserial_generic 2-1:1.0: device has no bulk endpoints [ 127.037803][ T30] audit: type=1400 audit(1793849603.395:454): avc: denied { set_context_mgr } for pid=3219 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 127.038782][ T3220] binder: 3219:3220 ioctl c0306201 200000000180 returned -14 [ 127.070823][ T3220] ------------[ cut here ]------------ [ 127.076491][ T3220] kernel BUG at drivers/android/binder.c:1330! [ 127.082839][ T3220] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 127.088984][ T3220] CPU: 0 PID: 3220 Comm: syz.0.1003 Not tainted syzkaller #0 [ 127.096399][ T3220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.106491][ T3220] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 127.112980][ T3220] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 f4 aa 10 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 7d 10 d1 fd <0f> 0b 65 8b 05 bc 4a 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 a8 6a e9 [ 127.132665][ T3220] RSP: 0018:ffffc9000121f370 EFLAGS: 00010283 [ 127.138905][ T3220] RAX: ffffffff8398c683 RBX: 0000000000000000 RCX: 0000000000080000 [ 127.146892][ T3220] RDX: ffffc9000134b000 RSI: 0000000000000037 RDI: 0000000000000038 [ 127.154869][ T3220] RBP: ffffc9000121f410 R08: ffff88810bc94e3f R09: ffff88810bc94e30 [ 127.162853][ T3220] R10: dffffc0000000000 R11: ffffed10217929c8 R12: dffffc0000000000 [ 127.170859][ T3220] R13: ffff88810b08cd28 R14: ffff88810b08cd10 R15: 0000000000000000 [ 127.178874][ T3220] FS: 00007eff5b3106c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 127.187836][ T3220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.194422][ T3220] CR2: 0000200000002000 CR3: 0000000130895000 CR4: 00000000003506b0 [ 127.202499][ T3220] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 127.210752][ T3220] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 127.218831][ T3220] Call Trace: [ 127.222113][ T3220] [ 127.225069][ T3220] binder_thread_write+0x1497/0x6fe0 [ 127.230381][ T3220] ? binder_ioctl_get_freezer_info+0x470/0x470 [ 127.236550][ T3220] ? __schedule+0xbd7/0x14a0 [ 127.241165][ T3220] ? release_firmware_map_entry+0x190/0x190 [ 127.247073][ T3220] ? __kasan_check_write+0x14/0x20 [ 127.252287][ T3220] ? _copy_from_user+0x95/0xd0 [ 127.257062][ T3220] binder_ioctl_write_read+0x203/0x6700 [ 127.262617][ T3220] ? futex_wait_setup+0x510/0x510 [ 127.267658][ T3220] ? futex_wait+0x5b1/0x8f0 [ 127.272168][ T3220] ? do_futex+0x2800/0x2800 [ 127.276685][ T3220] ? binder_has_work_ilocked+0x3e0/0x3e0 [ 127.282345][ T3220] ? avc_has_extended_perms+0x869/0xed0 [ 127.287908][ T3220] ? memcpy+0x56/0x70 [ 127.291896][ T3220] ? avc_has_extended_perms+0x9d5/0xed0 [ 127.297449][ T3220] ? __kasan_check_write+0x14/0x20 [ 127.302565][ T3220] ? avc_flush+0x2b0/0x2b0 [ 127.306988][ T3220] ? do_futex+0xdd3/0x2800 [ 127.311411][ T3220] ? __kasan_check_write+0x14/0x20 [ 127.316546][ T3220] ? _raw_spin_lock+0x94/0xf0 [ 127.321235][ T3220] ? _raw_spin_trylock_bh+0x150/0x150 [ 127.326703][ T3220] ? _raw_spin_unlock+0x4d/0x70 [ 127.331571][ T3220] binder_ioctl+0x36c/0x1df0 [ 127.336173][ T3220] ? ioctl_has_perm+0x1b8/0x4f0 [ 127.341048][ T3220] ? binder_poll+0x2d0/0x2d0 [ 127.345653][ T3220] ? has_cap_mac_admin+0x370/0x370 [ 127.350774][ T3220] ? __kasan_slab_free+0x11/0x20 [ 127.355733][ T3220] ? slab_free_freelist_hook+0xc2/0x190 [ 127.361285][ T3220] ? putname+0x111/0x160 [ 127.365538][ T3220] ? selinux_file_ioctl+0x3ad/0x4c0 [ 127.370757][ T3220] ? selinux_file_alloc_security+0x120/0x120 [ 127.376769][ T3220] ? __fget_files+0x2e1/0x340 [ 127.381453][ T3220] ? security_file_ioctl+0x84/0xa0 [ 127.386590][ T3220] ? binder_poll+0x2d0/0x2d0 [ 127.391189][ T3220] __se_sys_ioctl+0x121/0x1a0 [ 127.395889][ T3220] __x64_sys_ioctl+0x7b/0x90 [ 127.400484][ T3220] x64_sys_call+0x2f/0x9a0 [ 127.404912][ T3220] do_syscall_64+0x4c/0xa0 [ 127.409341][ T3220] ? clear_bhb_loop+0x50/0xa0 [ 127.414051][ T3220] ? clear_bhb_loop+0x50/0xa0 [ 127.418751][ T3220] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.424663][ T3220] RIP: 0033:0x7eff5c8b8b19 [ 127.429087][ T3220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.448701][ T3220] RSP: 002b:00007eff5b310028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.457118][ T3220] RAX: ffffffffffffffda RBX: 00007eff5cb3efa0 RCX: 00007eff5c8b8b19 [ 127.465182][ T3220] RDX: 0000200000000280 RSI: 00000000c0306201 RDI: 0000000000000003 [ 127.473164][ T3220] RBP: 00007eff5c950b70 R08: 0000000000000000 R09: 0000000000000000 [ 127.481172][ T3220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.489173][ T3220] R13: 00007eff5cb3f038 R14: 00007eff5cb3efa0 R15: 00007ffeabf69db8 [ 127.497174][ T3220] [ 127.500220][ T3220] Modules linked in: [ 127.504443][ T3220] ---[ end trace 41fbd5b9e1604b41 ]--- [ 127.510211][ T3220] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 127.516667][ T3220] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 f4 aa 10 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 7d 10 d1 fd <0f> 0b 65 8b 05 bc 4a 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 a8 6a e9 [ 127.536304][ T3220] RSP: 0018:ffffc9000121f370 EFLAGS: 00010283 [ 127.542391][ T3220] RAX: ffffffff8398c683 RBX: 0000000000000000 RCX: 0000000000080000 [ 127.550405][ T3220] RDX: ffffc9000134b000 RSI: 0000000000000037 RDI: 0000000000000038 [ 127.558387][ T3220] RBP: ffffc9000121f410 R08: ffff88810bc94e3f R09: ffff88810bc94e30 [ 127.566386][ T3220] R10: dffffc0000000000 R11: ffffed10217929c8 R12: dffffc0000000000 [ 127.574380][ T3220] R13: ffff88810b08cd28 R14: ffff88810b08cd10 R15: 0000000000000000 [ 127.582383][ T3220] FS: 00007eff5b3106c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 127.591356][ T3220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.597973][ T3220] CR2: 0000200000002000 CR3: 0000000130895000 CR4: 00000000003506b0 [ 127.605970][ T3220] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 127.613979][ T3220] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 127.621988][ T3220] Kernel panic - not syncing: Fatal exception [ 127.628178][ T3220] Kernel Offset: disabled [ 127.632503][ T3220] Rebooting in 86400 seconds..