last executing test programs: 1m21.595108349s ago: executing program 3 (id=20): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, 0x0, 0x8000) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, 0x0, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000000) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4090}, 0x4000) (async) io_setup(0xffff, &(0x7f0000000080)) 1m21.235338488s ago: executing program 3 (id=22): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r1 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xb0da) chown(&(0x7f0000000000)='./file0/file2\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x20, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x8}, @timestamp={0x44, 0x4, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)="6f574433cf53d12f28f48a0f0f62cd1754cc2f294c42790e225b68ed4e02000000b3e7b2012cab59148ca610c4f4bc0f2e88813283e69e36da92a5d19bb686b4129e524b28a3ddeb2488d5624e80449f47b91406966bd06cc20d53684e9cef0000d381c175db6b2b28485901fbd0001a1ff5aea2e21f22476c54e646c2d3368d776015d108eb51e5ba5638a0f2eb32d17732", 0x7e) vmsplice(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)="0fd520656b2bd36b3a8a704cadc057039a9dc9d964389802fae945196fe513c15519e5f05c6ebd451413caf4", 0x2c}, {&(0x7f0000000100)="a3a36d8018a2df2fccb23693f5", 0xd}, {&(0x7f0000000300)="aa364fdaa69828419d72378f7dbe173e41a5994c5122bd65fbef144146cfdae7b87a648e8e64ef583944cea37176d01c7322dc77b5eec14f46f830f1cf2720952286214064f01f081a7ddd705938d3d55811435bd254da1306620c6b618cb81cfc627cf4dc7bedcd8efc5de597c4f975dc119caa8bd762cbf4e95713f3d10bd3532e33eb8ef4067ec379ca5939b396", 0x8f}, {&(0x7f00000003c0)="1fa4bffb48b1c7bfe58896e5be22319355e83785d7b871c634629a108bac620f31f08ff3c6f1b7186260afe3997fe3445f624779fa43de926321708cffcd9c27d3191aed5770d7a8801dee", 0x4b}, {&(0x7f0000000440)="b3ed2d8c34124b338eb372fcda7f5c2ecfe2cb30e70b63783a898f7c049e28c2441bd2aaaf7acd0a366dd9fc51a22290ec9d636093c0c0e2369246f2126e719174bd586d9a313f30bf1af5198198a80c242e89ec612bed87749ea91c439b7e0020f96a444abe4242142a838aabc5919273002774df5d11c10475d5211336b842bd313c2cb557aa072f1ac1a5f6fe21e910c6cbda1857eb1eaf12e40aa6de61da6df55e2c80d87c5b9d44f57d7eff64973de90c2cda8eb1744c07e38435c3dda3dd308c75897ff810feb4b91467763eb9349700443d28645ea8850298054536ec55830d00e24f", 0xe6}, {&(0x7f0000000640)="d06c4d0e56615e928a295c6c22c98d8f3ecc1b54bdadc0b5be29bd9314f578c36f6d26a62cb0a7708cbfbfb80a68eef13001ec6297c9b6348c86aa5884481bc98d2f8feaaf2dc62fa7d5db993bc79b6135cd7a2bef124e9fc2bec8cbbf932b1cc102939fd2c6752b118731d2d2c9422aa95f0e8967ab69613d137a48cfe9329c87699d1356a821a48d7a83e629ee0ff44bbe787360543bc8c3dbce0c089faf343c0453e02a75fae8567d8d4e73bda6f7445b0775d1e6da647455593f07b024637db6558176fbd4fc496c141a4228c353cd36c5a59e94871e5f2a701dfa96", 0xde}, {&(0x7f0000000740)="783dbd089935b5208b5ec96393ff720b1f1aa11f923a1cb18bddc02bf5f25b066b9a5cffbb12fef12e98", 0x2a}, {&(0x7f0000000780)="742a36e35f1e1a29b58dc576b75072a18d06599805ceeafa1e0c", 0x1a}], 0x8, 0x2) 1m20.856179977s ago: executing program 3 (id=24): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5416, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") r1 = openat(0xffffffffffffff9c, 0x0, 0x183b41, 0x12b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) epoll_pwait(0xffffffffffffffff, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x10001, &(0x7f0000000600)={[0x2]}, 0x8) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141a42, 0x15) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080005000000800014000000452b0014006500000c009078ac1e0201ac1414aa16fa90"], 0x2a) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0x0, 'bridge0\x00', 'pimreg1\x00', {}, {0xff}, 0x5c, 0x3, 0x41}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {0x0, 0x0, 0x0, 0x5d}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x4}, {}, {0xfffc}, {0x0, 0x0, 0x0, 0x10001}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x5}, {}, {0x4, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {0xcd2e}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {0x400}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xfd}, {}, {}, {0x3}]}}, @common=@inet=@socket3={{0x28}, 0x7}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 1m18.803456019s ago: executing program 3 (id=30): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x5, 0x5505, &(0x7f0000000340)="$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") setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') utimensat(r0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff1f00001a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f6044ae) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./bus\x00', 0x0, 0x218) getdents64(r4, &(0x7f0000000100)=""/252, 0xfc) 1m17.585186729s ago: executing program 3 (id=38): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000030000000200000001000003000000000000f7ffff836038ffffffffff0000"], &(0x7f0000000d00)=""/198, 0x33, 0xc6, 0x1}, 0x20) (async) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) (async) sendfile(r0, r0, &(0x7f0000000100)=0x4, 0x80000000) 1m15.94447514s ago: executing program 3 (id=41): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) 1m15.911758001s ago: executing program 32 (id=41): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) 8.508378857s ago: executing program 2 (id=224): syz_usb_connect$uac2(0x5, 0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="120110030000004035126146400001020301090275000301093009080b00010107208c0904000000ff"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x200a}}, {0xfd, &(0x7f00000001c0)=@string={0xfd, 0x3, "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"}}, {0x9d, &(0x7f00000002c0)=@string={0x9d, 0x3, "e9d3bc4a28f30b2e8c44c6233dce31cbb00e06e18b0433df8d8842b90523f8e3a2c507a5e033349b27f8a438c220619e50996be425c2c0515b97445eacd9582d2463208c95fba5d6e73cd0f2f4568e0959f89e1b58d5d1421234c347f1f46385695536056b8bb38a21e994c0c0b3ad9e4a6b4b0bbdf4b2d10ed23b90a2e9236397525fef301e73c7ecf27d194e0cd34ec3238b82a73b6f1db309c6"}}, {0xe4, &(0x7f0000000380)=@string={0xe4, 0x3, "80ebdb1ca04bbad7e3606cfcef041b07dc64514ec7825a1a1e32255626ff4b4266c6e70accaadb843ee0841a17d9484eecbdb5247fa6b718557b6e0f68b038064c9d8a8f0059cad57750f8bc44d07f59c922b3c4a5837120224ed4a5a72c40e4fd343b4bfd4a19a0e6e4583d0d11a47b603570aad90f0c92d5894735412be3a2070599da8c5a921f9b755459aa945b51cd3d70e01862aa69db06894e18b56c678e7efaf26f4b3c07d5ad71496859d13964f0fa76bd46f9e4cc1a964cf9e14fdff501c233ce21ce8a4a1000c4faed86212279379ba69273311dff8f1ad949f19d49bf"}}, {0x65, &(0x7f0000000480)=@string={0x65, 0x3, "3a7024686d91abb150229ef05ed69dd7ff50f142420eecab1723d1e9311201953e9f3b7078991696a7bf602cedb40fe88428e81ded02736ba41440ee2f28c8417af32e1ef677156f4295db99c660de77354f25e65a78650efacde02d7480c27a67dec8"}}, {0xa4, &(0x7f0000000500)=@string={0xa4, 0x3, "8cff6b5deebfba7b08cd1c6d9811c88480c07f18cdf0aef11b8a629ef22fd70dff57d9675e2cea66b962f0f79332dd1398500ead7f56141c5890f9a7075c80a2694c1c784ac030e389d18b9202d782bbeb451399590b7759b3e5a2f867ed9da2ec7727926b9f0ba83eccdfb12150e8aeba0d213a236ac9758628923dd41a2aadffedfbe34d3802015c138cc905e8f2d129e72a1e18ceda2d9a2ac237523a3be84236"}}, {0x30, &(0x7f00000005c0)=@string={0x30, 0x3, "a70bd2b5831447ead9d5b3432a865a7b73bf3c21e437999df5050fc2ed4207e443a7736283616cfc9cfffcf66597"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x84}}]}) 6.261300583s ago: executing program 2 (id=237): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) close(0x3) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1200840, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYBLOB="2b25a08707a53687fb0060d82adf2c4b41739fbd20b3b31065210b98d860645ff06a70369b784684bd8edc91bc76042648eaf40b1ea443112dda68c00151a95b92c3b5ed96d1b1b948958b8c9556230053aa"], 0x3, 0x398, &(0x7f00000002c0)="$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") r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x4000000}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r4, 0x0, 0x93, 0xab, &(0x7f0000000680)="85029b9fca423b5c34355e3735fb23d732c36801feb9bf1f5b9d324c5f8f856eabf89eb7f62a491dd5ea107f5f933a9d63e44d0989169682f20d2bd6fb81573ff987a6937b5b2283e634968f05f6d85b79f2caa2bec57bcbc897a06f1a00baec469e3cf6596d92a69bd9d74a93ef126d66012fb051b4d9d7c5a7ce593a65b384d1f2d9f7d461fd19ea22f6f0308c5bd9021186", &(0x7f0000000740)=""/171, 0x10000, 0x0, 0xd6, 0xdf, &(0x7f0000000800)="917b74489d87facd6ccaee6fc37f619ac1faec228629777e32aead89feebf99fce30acbd4223e8af9914574851636c22e4961400c9fdcab3fe107a197219916ed32a329f69e3b84f71e06d84a0b27814756a5aee0388de0974fbeb457c24db40f4f6038c5f93437c169e01e7e57de4efb3bc5f676eef381c863faafb5dc581d58c794e3f5d0509cd756440e9f9c0aeb7d1294b7f9c662bcff12d98735eda8c12457df933cd91a7cde754c2a304ff04f5b51311487a2efa0f98b9c171ccccf35ce4000882c8154a4635f4d7c14ab64293ea3cc6bee033", &(0x7f0000000900)="e505aab0fecaeda237c1720979b6e30e6bdf25cbaad9583674995b9cc3d31aeb6bfdadeadae550c04f8b46d2031c04cb0f3af0fe63c3d27397d4a38b3c0f1fd98f3c8c7fa04c42a966f8c4c052c917cef3fd4b2a894fb573f5420b500eff275a8ea78b3455989665d63fd698b57ce8963ad805a1ce9b79e73f1ed5655486906ef2bdbb87f87b8e504813c753742fa30aeefc41d987ce824185daf0b72235a22235f11ba7c6e365efbbcfad39211c8a7001168dc5241212c54190782c4b85aa098ae6e951f54d8c3a33bf51f84b926314720a9558e14fcb8c68b7db93d4b7db", 0x5}, 0x50) 5.339113486s ago: executing program 1 (id=245): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 5.335341106s ago: executing program 1 (id=247): openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xc, &(0x7f0000000080)=""/144, &(0x7f0000000140)=0x90) (async) getsockopt$inet6_buf(r1, 0x29, 0xc, &(0x7f0000000080)=""/144, &(0x7f0000000140)=0x90) r2 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101200, 0xa6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)=@delsa={0x440, 0x11, 0x400, 0x70bd2b, 0x25dfdbfc, {@in=@remote, 0x4d2, 0xa}, [@algo_auth_trunc={0xf3, 0x14, {{'hmac(sha1-ce)\x00'}, 0x538, 0x80, "6efc34d87dbe56e1e18376f6de4759a965b9649de1917c7ffa0513b6733137a50d6a8b9453963f710e7cae87df6f333e46f6f3780519f37ae0106dc5df1d433308c4b9a560d2d7d5f4d2e77fea3fe671ba085116fc17509e7b039a39b1c2cceddc8047d3d0ecadbb199951559406fa32011f6033f62ed5e09ef4f31f799c6550bb5a9d6de75726cce4cd712fcfd49bece575d5e2f8d729c318f51445b2fd3271b6f30bec16507d"}}, @offload={0xc, 0x1c, {r3, 0x3}}, @algo_crypt={0xac, 0x2, {{'cbc(camellia)\x00'}, 0x320, "9bc8eb1cf4f41e7c2a428eda3b4df90e8a25a094cab3be1c179311e1d5e34582bb47bb0ee744da9cca432e4a3a9a16d664147efd0eb726078034795752afe85173db95e2a75c254d543234e3f29d134eaa6d123432363827b71cecb6ac156111a66b6276"}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd25, 0x70bd2c, 0x70bd2d, 0x70bd29, 0x1ff, [0x7, 0x1000, 0x800, 0x7ff]}}, @tfcpad={0x8, 0x16, 0x9}, @algo_auth={0x140, 0x1, {{'poly1305-simd\x00'}, 0x7c0, "66d50a3527fa382bf704bd5f38d0f8cc7a6f9b582eebfe34f419f45c2fb8f5f366567e7ad285754db36725cdeb1145e68f4b814d7fa8048a7e69e032f0108926146a8cb87e3442413487154b923041b054246f3758552cd46ac0c6b32f25ae182106a55fe77bc212942d2de19b26c28332a5f4a5a710c117ee052b64edfaa4f2da8a37dc58a09edbf7b310fff50c1cf409e537dd6ffbc30402f3e24b6a5cad569f80cc6fd69a9f3f6d450bc5e513307220a32742bdace99e80908f9eeb239f7fe067bbac9f7c21806c3174d94cdffcf73443fd371e2a2fdeebd95671c6e8e244ff4417b4dc28bdc9838e8d6459027e3eedc5bcd039a166ec"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2b, 0x70bd2a, 0x70bd26, 0x70bd26, 0x80, [0x1]}}, @sec_ctx={0xd8, 0x8, {0xd4, 0x8, 0x0, 0x4, 0xcc, "c85b2965fabdc55bbf6d6f77e3e82896850a4e1c86316ad0775bea2805c0fc37e12e03de0e133a3d7336a6757e895f1791f2196356d2f19225251a6421177cd5e506d3178eb74f5dfe79a202c493fdec464b9a08ea5a0df389a4f93650044a212af2cb64b0f728e10fc2d80e1506f596134cf222988585dc476d7b853049287fba3b48b88bcb8fbebb9788999f21602a81aac8c7d6885fa7ba9723a180c107e4029cae77ba87c0fc1d3775a224877a13cd98587c342ce256e56b0dcfc91997cb967220ac978384e216d7c0c1"}}]}, 0x440}, 0x1, 0x0, 0x0, 0x1}, 0x81) (async) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)=@delsa={0x440, 0x11, 0x400, 0x70bd2b, 0x25dfdbfc, {@in=@remote, 0x4d2, 0xa}, [@algo_auth_trunc={0xf3, 0x14, {{'hmac(sha1-ce)\x00'}, 0x538, 0x80, "6efc34d87dbe56e1e18376f6de4759a965b9649de1917c7ffa0513b6733137a50d6a8b9453963f710e7cae87df6f333e46f6f3780519f37ae0106dc5df1d433308c4b9a560d2d7d5f4d2e77fea3fe671ba085116fc17509e7b039a39b1c2cceddc8047d3d0ecadbb199951559406fa32011f6033f62ed5e09ef4f31f799c6550bb5a9d6de75726cce4cd712fcfd49bece575d5e2f8d729c318f51445b2fd3271b6f30bec16507d"}}, @offload={0xc, 0x1c, {r3, 0x3}}, @algo_crypt={0xac, 0x2, {{'cbc(camellia)\x00'}, 0x320, "9bc8eb1cf4f41e7c2a428eda3b4df90e8a25a094cab3be1c179311e1d5e34582bb47bb0ee744da9cca432e4a3a9a16d664147efd0eb726078034795752afe85173db95e2a75c254d543234e3f29d134eaa6d123432363827b71cecb6ac156111a66b6276"}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd25, 0x70bd2c, 0x70bd2d, 0x70bd29, 0x1ff, [0x7, 0x1000, 0x800, 0x7ff]}}, @tfcpad={0x8, 0x16, 0x9}, @algo_auth={0x140, 0x1, {{'poly1305-simd\x00'}, 0x7c0, "66d50a3527fa382bf704bd5f38d0f8cc7a6f9b582eebfe34f419f45c2fb8f5f366567e7ad285754db36725cdeb1145e68f4b814d7fa8048a7e69e032f0108926146a8cb87e3442413487154b923041b054246f3758552cd46ac0c6b32f25ae182106a55fe77bc212942d2de19b26c28332a5f4a5a710c117ee052b64edfaa4f2da8a37dc58a09edbf7b310fff50c1cf409e537dd6ffbc30402f3e24b6a5cad569f80cc6fd69a9f3f6d450bc5e513307220a32742bdace99e80908f9eeb239f7fe067bbac9f7c21806c3174d94cdffcf73443fd371e2a2fdeebd95671c6e8e244ff4417b4dc28bdc9838e8d6459027e3eedc5bcd039a166ec"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2b, 0x70bd2a, 0x70bd26, 0x70bd26, 0x80, [0x1]}}, @sec_ctx={0xd8, 0x8, {0xd4, 0x8, 0x0, 0x4, 0xcc, "c85b2965fabdc55bbf6d6f77e3e82896850a4e1c86316ad0775bea2805c0fc37e12e03de0e133a3d7336a6757e895f1791f2196356d2f19225251a6421177cd5e506d3178eb74f5dfe79a202c493fdec464b9a08ea5a0df389a4f93650044a212af2cb64b0f728e10fc2d80e1506f596134cf222988585dc476d7b853049287fba3b48b88bcb8fbebb9788999f21602a81aac8c7d6885fa7ba9723a180c107e4029cae77ba87c0fc1d3775a224877a13cd98587c342ce256e56b0dcfc91997cb967220ac978384e216d7c0c1"}}]}, 0x440}, 0x1, 0x0, 0x0, 0x1}, 0x81) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd824}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000880), 0x802, 0x0) write(r0, &(0x7f00000008c0)="6a3f57b749bb83834b77c45aef9c", 0xe) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x45, 0x3, "7b83f80575c777f830e44ac8b7772c766f374b62e2f64736c3f228219ca5d479bec035b4daf07aee0a572fa3f1e9c9480180002a968c30206315972f52d8809bcb"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) getsockname$packet(r2, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r2}, &(0x7f0000000b00), &(0x7f0000000b40)='%pi6 \x00'}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000bc0)={0x1, 0x3, 0x13}) rt_sigprocmask(0x2, &(0x7f0000000c00)={[0x4000000000000000]}, &(0x7f0000000c40), 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r7, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, r8, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1a}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200408b0}, 0x4008004) (async) sendmsg$NL80211_CMD_START_NAN(r7, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, r8, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1a}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200408b0}, 0x4008004) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r2) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x50, r10, 0x60a, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x50}}, 0x4) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x50, r10, 0x60a, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x50}}, 0x4) r11 = syz_open_dev$hidraw(&(0x7f0000000fc0), 0x0, 0xc0002) fcntl$dupfd(0xffffffffffffffff, 0x0, r11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r2, 0x0, 0x9f, 0x82, &(0x7f0000001000)="d2a7ec7086726ff8c7239e7c8a0dc44ebc9ffae16702d67a9e6bc873b6bb6e5449192843aaea63df975eb39c3d95b6b8aa76a9cbaf837882b9db7da79e6236a9fed1437072a2b4ba284a06ec116b0d03460d427871e11df7bee1c6b46bfd570ae64ebcb82f8d0d842ffec5efb972a716a23faef0c1644427eee639a79f8ea12b13cb44c8d8082dc0ac584ad76adae5775112ab37cc03375222970149aae8b4", &(0x7f00000010c0)=""/130, 0xfffffffc, 0x0, 0xf, 0x7f, &(0x7f0000001180)="1318b47e36dcc508771bfbe1b53c76", &(0x7f00000011c0)="7b9d12ecb2b04676acbf940a1066e6adfeaaef708dc892318c601bdc353c9e4935754d63778cb0f7a69a0f943ae732e20b9895d04be90b593025a53ca7374dd1622b38e4094be32fb13015e61a12722a68f92e54082a270127f9b431207b6beed50237acd2687b977052408e38ec56a7dd34f6383ad4421aeac63579c5de3d", 0x6, 0x0, 0xd2}, 0x50) syz_usb_connect(0x0, 0x537, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x4c, 0x29, 0x39, 0x40, 0xfe9, 0xdb78, 0x8257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x525, 0x1, 0x7f, 0x7, 0x50, 0xff, "", [{{0x9, 0x4, 0xc0, 0x1, 0xf, 0x1b, 0xd0, 0xe9, 0xe7, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "ed26ea2f"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x100, 0x6f}, [@acm={0x4}, @ncm={0x6, 0x24, 0x1a, 0x401, 0x10}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @dmm={0x7, 0x24, 0x14, 0xfff8, 0xd595}, @obex={0x5, 0x24, 0x15, 0x5}]}], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0x3, 0x7, 0xb}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0xb, 0x2, 0x1}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x6, 0xbe, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x8000}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0xf, 0xfa, 0x5, [@generic={0x62, 0x30, "bc956e53961709f83f7855136e30b18b707f7615957f9f451e884b7b9413cca9e8d1b821e351943a193ffb29313c0b19d4d1cde6073b1e56ba210846c747ef7b3f87fb10658cfdeb5760dab1a352240e5bedcbca24b75aae93d14f55f4e4f713"}, @generic={0xbe, 0xd, "21dfda5946ff9bc9cab8225594d07bdb44fbdad4e6190f9fe7600eca3d1eab57d330d025a1da1a7de2568825ced0e2d5094de7c886697feba9217f17400791a0f5bd260b89b921b406bd499b74908c0e378ff0494f7f168b228a6ff3657ca2b332af09f206edfb89b8d09307db13fe3f421a26cec43aafc32d828685408e77cf1d6f6d52946bcabcd6dacd049c7002bef14dfee96b8c440f8ee0a8a59db30de45977cd2c27ab83cbe819745491d01a36090c5319d6df5c4f603c27e9"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x3, 0x5, 0x1}}, {{0x9, 0x5, 0x7, 0x3, 0x24, 0xe, 0x3, 0xe, [@generic={0x5f, 0xd, "2a17858f355db7510ce1ea803d49f5eee422235a7179440b5cd478bee9cdd4a5452d1f5cacb970b9ac6a494e6aaf287d4f4e035d7c687bfbc4eebc99b12f69a014c1e813415f0db22068a4cc5aa31b32b73f5a086e2e9a074f65aeac39"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0xfc, 0x10, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x71}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x9, 0xc4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x9}, @generic={0x101, 0x24, "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"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x6, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x5}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x6, 0x8, 0xe2}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x7, 0x9d, 0x0, [@generic={0x4b, 0x4, "687503c0dcdb851c6c49fdd2b73de124b2cf8e69b4666333353ddfd0749f5c30e72ddac55dca911ce525cf93be8ea1be8080470848230720cad32ae14a0649c409295067f7602a7b26"}, @generic={0x57, 0x6, "b5b6ff41959a7a8d0be769b4f462f68010bb1aed23c86cf59dd4644a1efbad31ae456c85ea21f618829e13c1f6d12b554cdf54cce4fc17cedf62500a5fe92955f85ef90dd79c399ca3f79e6ac04f35701b5381f009"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x4f, 0x6, 0xee}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x3, 0x5, 0x3}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0x7, 0x1, 0xf, [@generic={0xdf, 0x11, "75f297f0d2e5ac33e9b66d8d33b6e4f9528c261755b27dcfa78fa0532decb9c651bf3c94e8e0549a01dbc06fd29788d8fa35af736b4538ccbfb41a9262ca1d0f65627cffc52e9c2a652c4352a537ae0ce4996e4978a81cc904feea7b53f38809a0d8991a203405ad34a92e645b938479b7ded20a56231e1e3eac43078451835a84a6b4c148880d4111aee89efa5028ad94bbbad72f2e519d35302cbca44583082bb88a5c2612a4a8adc12068628873eb8027b3716416f8ebdff6d3979359475b039fba5d8f45cf8a8951acdc019c6eb35562b705a8d052d438f7a598ef"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x8, 0xfe, 0x1, [@generic={0x32, 0x8, "8c7c94b7bbbc10786512d6954c9f2df246091c9a8b32f76802c8d9161e273094048c738cb100e59c51b587d16d331ccf"}]}}]}}]}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x200, 0x8f, 0x6, 0xe5, 0x8, 0x6}, 0x3b, &(0x7f0000001840)={0x5, 0xf, 0x3b, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x81, 0x7f, 0xbc, 0x6, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x14, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x38, 0x5, 0xb, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "863dce1f8517fae0d53000a9e5998681"}, @ptm_cap={0x3}]}, 0x5, [{0xbf, &(0x7f0000001880)=@string={0xbf, 0x3, "2a30569fa6c79df4628121e15c31c05fc9f4f65bc9c930f94ad4b5ab9da4f191c6298679cf758cc7ce207b910d9d86f51b975dbe7e337c12347773fc95e6202c7ce8cb82f76f53144844bd256a13857ac577ff9661d9cd268f1f68419a59269a0f08345fb4ab295f20961f1abb5e867609ac44f8176222b4f9fc11c81c78643ecfff6863b9127a0f56a045ecf37e8530d01d27ba40e980a77b7c72a04ae45a921154d1568b4aff1fd60e5019ab01b08491b95256166db7bf05a15797c4"}}, {0x20, &(0x7f0000001940)=@string={0x20, 0x3, "8ca38744675f3d422292bfa5727cdf1466391f86447fd63051c12716c8a9"}}, {0x45, &(0x7f0000001980)=@string={0x45, 0x3, "db0008beb329523bd9a250515f95c191a0d900e4284786562cc728a8c8742b51d1932d423b0cf43660a5f0ab56edfbe429cfc8acecdd48f400da6e20ea5d58e43db5b1"}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x3009}}, {0xb0, &(0x7f0000001a40)=@string={0xb0, 0x3, "1ad217d19066897e0ad6dc280f46c7745f5aede7d174ec7c1ccde8ba59242281bb84b134323f8c362e97946d5e1da050bfa2a8c7c876b6ce86a8d79d0cc1102c5ffc4b38a6f3d852dc2a34c4984d9ef9e42609a92bd1938843bf857a2d18e61e90944e170683e35145d18fcf3ab8a28b5bd610e4cdd1b59742890a3b5696fbcc2e7e222fe84a3444593a6eb7272913b0f8c355741de0fad824c819c20b122e93bb24440fe08dd383234748e5ef50"}}]}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b80)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x80000001, '\x00', r6, r1, 0x5, 0x4}, 0x50) open$dir(&(0x7f0000001c00)='./file0\x00', 0x2aa082, 0x0) (async) r12 = open$dir(&(0x7f0000001c00)='./file0\x00', 0x2aa082, 0x0) openat(r12, &(0x7f0000001c40)='./file0\x00', 0x10040, 0xa6) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000001d40)={{0xd, 0x0, 0x28b8, 0x8000, 0x4}, &(0x7f0000001c80)=[{}]}) 3.651021368s ago: executing program 2 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x6, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'sit0\x00', {0x2, 0x4e1e, @remote}}) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth0_vlan\x00', {0x2, 0x4e21, @loopback}}) (async) setpgid(r0, r0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) (async) sendfile(r5, r4, 0x0, 0x3ffff) 3.247502149s ago: executing program 2 (id=254): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000680)={[{@umask={'umask', 0x3d, 0x81}}, {@namecase}, {@utf8}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@fmask={'fmask', 0x3d, 0x1}}, {@discard}, {@errors_continue}, {@namecase}]}, 0x1, 0x1541, &(0x7f00000038c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x34}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x24008040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/make-it-fail\x00', 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0xf0}, 0x80) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r10], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3.245528189s ago: executing program 2 (id=256): r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r2, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0xa3a, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x7, 0x0, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f74, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x1, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0x1000, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x4, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=@raw=[@ringbuf_query], &(0x7f0000000200)='GPL\x00', 0xf02, 0x0, 0x0, 0x177685d1e1dee371, 0x10, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x8, 0x1, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000300)=[{0x3, 0x3, 0x4, 0x5}, {0x1, 0x3, 0xc, 0x6}, {0x1, 0x1, 0xf, 0x1}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x7b2f3dffe74e61fd, 0x1, 0x89b, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x14) ioctl(r8, 0x40104d07, &(0x7f00000003c0)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x18, 0x20, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x54a955c3, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='GPL\x00', 0x8, 0x1000, &(0x7f0000001140)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002140)=[0x1], &(0x7f0000002180)=[{0x3, 0x3, 0xa, 0xb}, {0x0, 0x2, 0xa, 0x7}, {0x2, 0x1, 0x6, 0x1}, {0x4, 0x1, 0x8, 0x2}, {0x4, 0x5, 0xd, 0x9}, {0x1, 0x3, 0x10, 0x462637449530c3bd}]}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup=r8, r6, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=r9, @void, @void, r7}, 0x20) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x17a0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0x10, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x35}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x9, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xc, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0x2, 0x9}}}}}}}}]}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r10, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0xb0}, 0x28008801) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001000)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4010) syz_clone3(&(0x7f0000000440)={0x63000400, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r0], 0x1}, 0x58) 2.749903701s ago: executing program 5 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setpriority(0x0, 0x0, 0x2a14b58) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async) r2 = getpgid(0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x6, 0x5001) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) write$uinput_user_dev(r3, &(0x7f0000001b00)={'syz0\x00', {0x4, 0x7, 0x800, 0xfffa}, 0xf, [0x9, 0x4, 0x0, 0x3, 0x7, 0x7, 0x3, 0xe, 0x3ff, 0x53a8, 0x6a5b, 0xbb, 0x8, 0xfffffffa, 0x2, 0x9, 0x5, 0x0, 0xfffff000, 0x7, 0x7, 0x7, 0x44979c10, 0x2, 0x6, 0x5, 0x10000, 0x6cb, 0x719, 0x81, 0x1, 0x8, 0x6, 0x2, 0x4, 0x3, 0x1, 0x9, 0xc, 0x0, 0x2e, 0x7, 0x5, 0x4, 0x4, 0xffffffff, 0x235, 0x699, 0x4, 0x7, 0x3, 0x3, 0x1, 0x5d, 0x4f, 0x4, 0x6, 0xb0712d1, 0xda2f, 0x1, 0x5, 0x0, 0x10000, 0x8], [0x327, 0x7, 0x7fffffff, 0x9, 0x6, 0x34, 0x2, 0x3, 0x0, 0xd, 0x1e33, 0x3, 0x7, 0x6, 0x8, 0xffff, 0x7f, 0x3, 0x0, 0x10, 0xfffff000, 0x5, 0x9ef3, 0x8, 0x2bb7, 0x954, 0x5, 0x1, 0x4, 0xb5, 0x8, 0x8f3, 0x1, 0x8001, 0x2, 0x3, 0x80000001, 0x1, 0x40, 0x9, 0x6, 0x7f, 0x0, 0x5, 0x1, 0x71, 0x9, 0x5, 0x80, 0xfffff9db, 0x1, 0x5, 0x6, 0x6, 0x80, 0xa5, 0x6, 0x5, 0x2, 0x0, 0xf7c1, 0x400, 0x0, 0x4], [0x3, 0x5, 0x6, 0xffff8001, 0x3, 0x8, 0x3, 0x40, 0xc4, 0x10, 0x1, 0x1d, 0xa, 0xac6550c2, 0x3, 0x0, 0xf21, 0x40, 0x6, 0x400, 0x3, 0x9, 0x9, 0x2, 0x6, 0xfe, 0x5, 0xc1, 0x8, 0x4, 0x1, 0x3, 0x101, 0x1, 0x2, 0x0, 0x3, 0x5, 0x6, 0xfff, 0x3, 0x6, 0x8, 0x9, 0x5, 0x0, 0xfffffff7, 0x8000, 0x4, 0x2, 0x84, 0x7, 0xff, 0xffffffff, 0x3118000, 0x8, 0xcbd, 0x47, 0x40, 0xe, 0x80000000, 0xc, 0x1, 0x9], [0x3, 0x5, 0x8, 0x8, 0x99f, 0x7fb, 0x5, 0x0, 0x9, 0x7, 0x4, 0x3, 0x4e, 0x4, 0x1, 0x4, 0x3, 0x98, 0xffff, 0x0, 0x6, 0x8, 0x7, 0x67c, 0xf154, 0x7, 0x7f, 0x8, 0x8001, 0x9e, 0x9, 0x6, 0x8, 0x7, 0x9, 0x5, 0x6, 0x8, 0x2, 0x7, 0x4, 0x2, 0x2, 0xf56, 0xffffff83, 0x400, 0x1, 0x5, 0x3, 0xd37, 0x3, 0x0, 0x80000000, 0x0, 0xff, 0x4, 0x4, 0x6, 0x101, 0x3, 0xc, 0x9, 0x600, 0x6]}, 0x45c) (async) socket$tipc(0x1e, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) (async) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0xb, 0x100000001, 0x6, 0x6, 0x7fffffff}, 0x0, 0x0) (async) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.676119443s ago: executing program 0 (id=260): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0xfffffffffffffffd) r1 = dup3(r0, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) syz_read_part_table(0x5d4, &(0x7f0000000000)="$eJzs279r02kcB/BPqiF3OrgIBy6nDg6HHCiOZlBJoqKQi3aRGxQUETNFECIXEHTQDIoZxNFFCln6Y2qaoVNLC517pUOPQocud7RLoUtzhD5dyg0tlx4cvF7w5cPzfN/f5/N8/oBv8L82FH/1er1MRPRyEd8d8uvhdqF462z5WuV+RKZ/WPz+8w+/9N/8mBL9U/vOp/VKWn/7eqL7fvNmtr18b+vCw5nm0N51IuJ1RJwc6QwPYj6O1mh+9tSbt7XSh3r+2VKpsfZuceHu2Eah0rnTbI3fzt54nHJzqR5P9UXU41U8j0dRjWo8idqA+n9pr17aOVNqTz69ul3sfpy+nHLlfznnQfu/PPfpQatx/eLE6c9X6lPzlfVju7lq7oguAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQI3mZ0+9eVsrfajncxGx9m5x4e7YRqHSudNsjd/O3niccnOpHk/1RdTjVTyPR1GNajyJ2t6Bvd5B2n7/D/2fLZUaa1/aq5d2zpTak0+vbhe7H6cvp1x5UAPvs7//y3OfHrQa1y9OnP58pT41X1k/tpur5o7oAgAAAAAAAAAAAAAAAAAAABARheKts+VrlfsRmfg1In7687eh/n4v/e+eSbnzqa6k/W9fT3Tfb97MtpfvbV14ONP8I+2/Ts/Jkc7wfz4Mh/Z3AAAA///sR5Sb") r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711807000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb011c180000000005000010000000"], 0x0, 0x33, 0x0, 0x1, 0x6}, 0x28) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r6) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x3f3, 0x0, 0x0, 0x0, {0x10, 0x3fb}}, 0x420}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x27, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x69}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x85}, @alu={0x4, 0x1, 0xd, 0x8, 0xa, 0xfffffffffffffff0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) 2.663023603s ago: executing program 5 (id=261): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = eventfd2(0xffffffff, 0x1) write$eventfd(r1, &(0x7f0000000080)=0xffffffff00000000, 0x8) r2 = epoll_create1(0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000008140)={0x2020}, 0x207f) pread64(r3, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) syz_fuse_handle_req(r3, &(0x7f0000000540)="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", 0x2000, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000002600)={0x18, 0x0, 0x9ccc, {0x8001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x4}) read$eventfd(r1, &(0x7f0000000040), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38dfe7, [{{0x9, 0x2, 0xfffffffffffffc3f}}]}}, 0x7fe782539b0b) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x68, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '$\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '^!]##.-(,}{\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2400c004}, 0x0) pselect6(0x40, &(0x7f0000000500)={0x6, 0x6, 0x5, 0x9, 0xa, 0x2, 0x6, 0x8}, &(0x7f0000000540)={0x9, 0x2, 0x6, 0x100, 0x2, 0x2, 0x10001, 0x8001}, 0x0, &(0x7f00000005c0)={0x77359400}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40884}, 0x40081) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x1, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0xf5a7ab78bfb7130f}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x10}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008040) 2.593836125s ago: executing program 0 (id=262): r0 = userfaultfd(0x800) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x3}) 2.500037187s ago: executing program 0 (id=263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x4, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x238, 0xfeffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xaf7, 0x241, 0xfffc, 0x0, "9cc82cf0d8d50ba1ddac6fc4b8610ea5326f91ea2065aadf7c1ee95a416eff6fdb04e1976a71f996a05bd168f4baf65b670c0e8c7a054fe6c19e0fd46e11fc41"}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0x0, 0xff, 0xffffffff, 0xff], [0xff000000, 0xffffffff, 0xff, 0xffffffff], 'dvmrp1\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x3b, 0x25, 0x4, 0x30}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@ipv6header={{0x28}, {0x91591cded2fa7045, 0x15}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x238}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r1 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1c41a, &(0x7f0000000500)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x8000}}, {@debug}, {@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@block_validity, 0x2e}, {@jqfmt_vfsv1}, {@noacl}, {@jqfmt_vfsv1}, {@resuid}], [], 0x2c}, 0x81, 0x483, &(0x7f0000000c40)="$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") chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$f2fs(&(0x7f0000000a80), &(0x7f00000000c0)='./bus\x00', 0x410, &(0x7f0000000380)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230", @ANYRESOCT, @ANYRES8], 0x3, 0x105ea, &(0x7f0000020c40)="$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") r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r3) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042dbd7000fedbdf25120000000c00060002000000020000000c00060000000000000000000c00060001000000010000200000000000000003030000000c0006000200000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="b10629bd700004000000000000000a003170ca1a086572e10000"], 0x20}, 0x1, 0x0, 0x0, 0x44000000}, 0x40010) getrusage(0xfffffffffffffffe, 0x0) read$FUSE(r2, &(0x7f0000001100)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000003180)={0x2020}, 0x2020) prctl$PR_SET_DUMPABLE(0x4, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000080)={0x17c04, r1, 0x3, 0x141000ff7ff, 0xdb, 0x6d3}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x8c, r8, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2a}}}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="9062dfcb75736f1199deec8ceabd793c3b054a87660546f897176619"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x3e, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xf7, 0xe, 0x4}}, @ht={0x2d, 0x1a, {0x400, 0x0, 0x1, 0x0, {0x8b, 0x1ffd, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x0, 0xd7}}, @random={0xfe, 0x16, "6cd352117e778e11dd491dfd96aa00d6ec7e7fa8740e"}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 2.028327539s ago: executing program 1 (id=264): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x1, 0x2}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = dup2(r1, r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0) 2.027346009s ago: executing program 1 (id=265): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x53bd, 0x4) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010122000000206a05330300200000000109022400010000402009040041030300030009212000040122060009058103200003fef0a6bc8eb191325f0d979f600cd6f6a6f4d139e6c073806a1f4b77d474464d41b4a74923"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0xfffffffffffffd05, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.018825629s ago: executing program 4 (id=268): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2.01854906s ago: executing program 4 (id=269): stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x30, &(0x7f0000000080)={[{@clone_children}], [{@appraise_type}, {@uid_gt={'uid>', r0}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, ':\'('}}, {@smackfshat}]}) 2.0175841s ago: executing program 4 (id=270): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file1\x00'}, 0x6e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001000000000000000001f7910b800000000006200e0ff000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x10d, &(0x7f00000002c0)=""/196}, 0x80) 1.729704157s ago: executing program 2 (id=271): timerfd_create(0x8, 0x80000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x100000006, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xe6, 0x40, 0x40, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0xa9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x8, 0x7, {0x8, 0x25, 0x1, 0x1, 0x30, 0x8, 0xeef}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x14, 0x8, 0x3, {0x8, 0x25, 0x1, 0x103, 0x3, 0x8, 0x9}}}}}}}}]}}, 0x0) 1.723877177s ago: executing program 0 (id=272): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0xa, &(0x7f0000000000)=""/97, &(0x7f00000000c0)=0x61) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) preadv(r4, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 1.442893584s ago: executing program 4 (id=273): r0 = syz_open_dev$evdev(&(0x7f0000001640), 0x2, 0x2301) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000000)='/dev/input/event#\x00', 0x2bcc1dde85f4bc52, &(0x7f00000000c0)={@_ha_fsid={[0x1, 0xd33]}, {0x3, 0x1, 0xaf400000, 0x9}}, 0xffff, &(0x7f0000000100), &(0x7f0000000140)=0x800}, {[0x9, 0x1, 0x10, 0x5]}, 0x4, 0x76, &(0x7f0000000180)=""/118}) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000280)=""/168) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000000)=0x6528, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)={0x38, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) read(r9, &(0x7f0000000440)=""/9, 0x9) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200000000000000}]}, 0xc0}}, 0x2004005) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES16=r0, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe80", @ANYRES16=r10], 0xec}}, 0xc804) 1.248242339s ago: executing program 4 (id=274): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@setlink={0x50, 0x13, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2024, 0x1920}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_NET_NS_FD={0x8}, @IFLA_BROADCAST={0xfffffcae, 0x2, @random="720753da95bf"}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0000c1}, 0x20048000) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@lazytime}]}, 0x1, 0x50b, &(0x7f00000005c0)="$eJzs3c9vI1cdAPDvTOKNm6ZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBrdeygGpwArUIHEwGv/IZjd2HHYdG+LPRxp53ryX+b633nkv+e7GL4CJdT0iDiPiWkS8FRHznetJ54jX2kfW7pN7d9eO791dS6LZfPNvSas+uxanvibzZOee+Yj47rcifpCcjVvfP9harVTKu51ysVHdKdb3D25tVlc3yhvl7VJpeWl58ZXbL5eGNtbnq7/6+Jubr3/v/d984aM/HH79R1m35jp1p8cxTO2h507iZKYj4vXLCDYGU53xXBt3R3gkaUR8KiJeaD3/8zHVejcvpsdjDQD8H2g256M5f7p8rlzWYGpwOwDgf1jayoElaaGTC5iLNC0U2jm8Z2M2rdTqjZt3anvb6+1c2ULk0jublfJiJ1e4ELkkKy+9m53fL5fiwfLtiHgmIn4880SrXFi7eJ4BABiuJx9a//85017/AYArLj+owcpo+gEAjM7A9R8AuHLyETPj7gMAMFp+/geAyWP9B4DJY/0HgEnzYXf9nxp3TwCAkfjOG29kR/O48/nX62/v723V3r61Xq5vFap7a4W12u5OYaNW26iUC2u16qD7VWq1naWXYu+dYqNcbxTr+wcr1dredmOl9bneK+XcSEYFAJznmec/+FMSEYevPtE64tReDtZquNrScXcAGBs5f5hcPoUbJpef8YFBe3n2/S/C7z1CsOa7j/BFwLDd+Kz8P0wq+X+YXPL/MLnk/2FyNZtJv73805MmAMCVIscPjPTf/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCKmGsdC6fKaVooRDwVEQuRS+5sVsqLEfF0RPxxJjeTlZfG2mMA4PGlf0k6+3/dmH9x7uHaa8m/ZlqvEfHDn775k3dWG43dpez630+uN97rXC+No/8AwCDddbq7jnd9cu/uWvcYZX8+/kZ7c9Es7nHnaNdMx3T28vt85CJi9h9Ju9yRfb8yNYT4h0cR8Zle409auZGFzs6nD8fPYj810vjpA/HTVl37Nfuz+PSZO8/0jTlor1eYFB9k889rvZ6/NK63XvM9Nz/Ot2aox9ed/47PzH/d5z3fmmt6zX/XLxrjpd9+u2/dUcTnpnvFT07iJ33iv3jB+B9+/osv9Ktr/jziRvSOfzpWsVHdKdb3D25tVlc3yhvl7VJpeWl58ZXbL5eKrRx1sZupPuuvr958uu/4fxkx2yd+fsD4v3LuqJsnE/Av/v3W97/UL/5RxNe+3Pv9f/ac+Nma+NVz49+3Ovvrvtt3Z/HX2+M/+m/f/5sXjP/Rnw/WL9gUABiB+v7B1mqlUt4d6kkuhnzDUydJ1uepuIQ7O7nSJ9n34+e1SS/wl/a5TsqsZ5vf/ez957LKsY90KCdjnpiAS3f/oR93TwAAAAAAAAAAAAAAgH4u/deJ0nGPEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKvsPwEAAP//Xm/DpQ==") r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x100) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000780)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="9ed725d125686f6a543d7d6b38186be9a8e47503b976619ea0c2d10217749a74923284ba1ae5f89f9af604266f4758d5fc8b375f77bbd86af03eb1494a3c3d727c18dda8407280626446fbaeb42e77bc777cc9ed5e24df76f6adc40c1c1584806dc9bd763683da153f4f46e6829f9ddbef25c223a59d9f3799a16fca0b5afca6df6e31be7b85e8c32c58b6aeeb8c3156d21a0ee4a452b25b62a73760377d9421cd9ac4b74ce15d6f2fdffc5315a4a959db26dbee69c02a19c1f052ba513b6c", 0xbf}, {&(0x7f0000000300)}], 0x2, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000000), 0x0, 0x4fed0) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000100)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x52a10, 0x210}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8000000000000000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x400) 1.135313162s ago: executing program 1 (id=275): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000240)={[], [{@fowner_eq={'fowner', 0x3d, r0}}]}, 0x3, 0x469, &(0x7f0000000a80)="$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") 1.069226193s ago: executing program 4 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r1}, 0x20) sendto(r1, &(0x7f0000000800)="01", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000a80)=@newtaction={0x48, 0x30, 0x109, 0x70bd26, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x60, 0x48, 0x400, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x18, 0x0, r8, 0xffff8000}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x20000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r9, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x190, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x13}}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5aa9d29ecd6e4352ef1d61702eba7c16"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="34700cae9a62191e25e9c6bd50d76967"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc903}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b6fdf359326676d4"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9a2aac8e70227ee4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="aef3b7c32eb59b153a254b063c6ec881"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c530864b00852f23"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="75559b7cb884c774b6e6af509c92ffba6f6bd879f0b0753fd976202bc1f2d8e0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aa2b90f3861921fb635bc3f2908e1137f2ae011e0392a16c40a1e61b4d021b34"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe8}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1c30b93d7ea5c9364b0347f83fbb6e6562ea55a064609c957088d298e17c25e0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c4f05e0eee6d9dcd"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="751a88b4ae595a691f5b29a816b2488e7d837dd6c563a77d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="de66eaed0ddbbd05812eda95cfc74ff5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="25f404f7c71471381f1aa21d04f2a51ed80f7ddefc84490c25969691d996738d"}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) syz_usb_connect$uac3(0x5, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0xf, 0x10, 0xfa, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x2a, 0x1b}, [@processing_unit={0xd, 0x24, 0x9, 0x1, 0x3, [0x0, 0x1]}, @output_terminal={0x13, 0x24, 0x3, 0x0, 0x303, 0x5, 0x1, 0x5, 0x2, 0x3, 0x7fff, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x80, 0x1, {0xa, 0x25, 0x25, 0x2, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x4, 0x9, {0xa, 0x25, 0x25, 0x3, 0x3, 0x4}}}}}}}}]}}, 0x0) close_range(r0, r0, 0x2) 875.399878ms ago: executing program 1 (id=277): syz_usb_connect(0x5, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002fe4683089edaeaaa085a52b81be95c481170190b8031bb0102030109021b000103050d020800fd802a"], 0x0) 874.383898ms ago: executing program 0 (id=278): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) (async, rerun: 32) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) (rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') lseek(r4, 0x1, 0x1) (async, rerun: 64) getdents64(r4, &(0x7f0000000200)=""/101, 0x65) (async, rerun: 64) pipe2(&(0x7f0000000000), 0x0) 862.053968ms ago: executing program 0 (id=279): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$midi(0x6, 0xb3, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x499, 0x1006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x1, 0x1, 0x0, 0x80, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x6, 0x3}, @ms_header={0x7, 0x24, 0x1, 0x400, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0x5, 0x6, [{0x6, 0x8}, {0xfb, 0x81}, {0x6, 0x3}, {0xd, 0x6}, {0x6, 0x1e}, {0xa, 0x5}], 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x3, 0x3}, @ms_header={0x7, 0x24, 0x1, 0x7fff, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}], [{{0x9, 0x5, 0x9, 0xd, 0x3ff, 0x5b, 0xe, 0xd, {0xe, 0x25, 0x1, 0xa, "9ba03656c11cccaf8010"}}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x8, 0x7f, 0x8, {0x8, 0x25, 0x1, 0x4, "398e4da9"}}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x9, 0x6, 0x2, {0x5, 0x25, 0x1, 0x1, '`'}}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x4, 0x7d, 0x5, {0x6, 0x25, 0x1, 0x2, "2eb0"}}}, {{0x9, 0x5, 0x8b, 0x0, 0x3ff, 0x2, 0xb6, 0x81, {0x6, 0x25, 0x1, 0x2, "ae2d"}}}]}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x4, 0x40, 0x18, 0x10}, 0xc, &(0x7f0000000900)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x2, 0x8000}]}, 0x3, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2022}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x44f}}, {0x31, &(0x7f00000009c0)=@string={0x31, 0x3, "ee29e5c7e9519d1d7f11ae5300c5a7447326788381c071a7fd55bc0700a90ef02ee82303252c16fdbaae197c86d486"}}]}) (async) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) pidfd_getfd(r2, r1, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x138, 0x298, 0x298, 0x0, 0x298, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@private=0xa010102, @multicast1=0xe0007600, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {0xff}}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0xc, 0x0, 0x16}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'caif0\x00', 'nr0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x3, 0x3}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0xf5}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) (async) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)=ANY=[@ANYBLOB="050000000100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000020000000000000001000020f212810183bdfbeb"], 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) listen(r1, 0x4980000) r4 = socket(0x1, 0x5, 0x0) close(r4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200048f4, &(0x7f0000b63fe4)={0xa, 0x2, 0x9, @empty, 0x5}, 0x1c) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000500)={0xe000200c}) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000040)={0x80002017}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x11, 0x9, 0x2b, 0x14, 0x604, 0x8236, 0x9, 0x400, 0xffff, 0x4, 0x4, 0x7}}, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xfffffffe}, {0x30}, {0x28, 0x0, 0x81, 0x1}, {0xb1, 0x0, 0x28, 0x7}, {0x16, 0xfc, 0x5, 0xffffffff}]}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 424.216829ms ago: executing program 5 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$incfs(0x0, 0x0, 0x0, 0x82, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setreuid(0xee01, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x14, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r5 = socket(0x10, 0x3, 0x0) getpeername$unix(r5, 0x0, &(0x7f0000005840)) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) close_range(r4, 0xffffffffffffffff, 0x200000000000000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000440)={0x4, {{0xa, 0x4e21, 0x1, @private2, 0x28ab}}, {{0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xff}}}, 0x108) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000380)={r6, r1, 0x3, 0x7d, &(0x7f0000000240)="d7903f680b9451c11009ce836c8ac16a16c10e0252960ab4c658947691493b494f3d58969bdf0b77357df8298533cb615918f1875b9254cbc0a7fc6d0bbd571ca5bb98cdd5f75696585d454bd4e694d5f51c216d77b81ff5eaf21043cceeaf028e2dd4da2826fae73b78b7eefd85588d753db8d1d30d65f1f9ecedd74d", 0x2, 0x80, 0x1cab, 0x5072, 0xf, 0x0, 0x7, 'syz0\x00'}) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x30, r7, 0x601, 0x70bd28, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0xfffffd3a, 0x1, 'broadcast-link\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044884}, 0x0) 396.68501ms ago: executing program 5 (id=281): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000005c0)={{}, 0x0, 0x1e, @inherit={0x0, 0x0}, @name="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"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}]}}], 0x1, 0xc0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@nogrpid}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@nodiscard}]}, 0x1, 0x61f, &(0x7f0000000180)="$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") ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc5, 0x0, r0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000003800128008000100767469002c00028008000200040000000800060001f0ffff08000100", @ANYRES32=0x0, @ANYBLOB="0800030007000000020005000a010102"], 0x58}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000200)={0x0, 0x0}) close_range(0xffffffffffffffff, r6, 0x2) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}, {0x40000003, 0x4, 0x1, 0xffff, 0xffffffff, 0x5b}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@rdmsr={0x66, 0x18, {0x4000009f}}], 0x18}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x13}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x2000080) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) 116.025927ms ago: executing program 5 (id=282): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x200, 0x420}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1b}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0xa}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040044}, 0x8044) 0s ago: executing program 5 (id=283): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000001c0)="e65387") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x238}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000840}, 0x10) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05002dbd7000dcdbdf251b00000008009a00020040"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f0000000500)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000000c0)) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r6, &(0x7f0000001080)=[{&(0x7f0000000040)="ae5afbc1f9dda67daf579d53908f1c09c1", 0x11}], 0x1) getdents(r2, &(0x7f0000000f40)=""/243, 0xf3) kernel console output (not intermixed with test programs): 20.943383][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.950597][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.957958][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.965101][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.972378][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.979480][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.987092][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.994613][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.002665][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.043710][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.051369][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.059990][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.067981][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.076626][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.084658][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.092384][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.099793][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.108070][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.115123][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.122551][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.130651][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.137681][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.145047][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.152992][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.160832][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.169061][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.176109][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.183499][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.191567][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.198589][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.205953][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.214315][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.221322][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.228639][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.236793][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.243819][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.251137][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.259320][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.266355][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.273760][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.281875][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.288935][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.296945][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.305136][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.312162][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.319461][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.327582][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.340824][ T281] device veth0_vlan entered promiscuous mode [ 21.352410][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.360875][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.369792][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.376855][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.384460][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.392523][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.400362][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.408541][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.424021][ T281] device veth1_macvtap entered promiscuous mode [ 21.435934][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.444065][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.451948][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.460512][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.468654][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.476857][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.484976][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.492523][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.500728][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.515709][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.523848][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.531755][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.539977][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.548510][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.556803][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.567964][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.576424][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.593691][ T279] device veth0_vlan entered promiscuous mode [ 21.602611][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.610830][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.619623][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.628330][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.636753][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.644797][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.652891][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.660265][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.671906][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.679969][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.690381][ T280] device veth0_vlan entered promiscuous mode [ 21.699792][ T283] device veth0_vlan entered promiscuous mode [ 21.706601][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 21.706802][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.721401][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.729001][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.737021][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.745064][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.753370][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.761755][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.769192][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.783876][ T281] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.784762][ T280] device veth1_macvtap entered promiscuous mode [ 21.805642][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.814427][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.822910][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.830592][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.838741][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.848969][ T279] device veth1_macvtap entered promiscuous mode [ 21.864224][ T304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 21.873144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.881038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.890861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.899918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.908604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.917686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.926213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.935374][ T283] device veth1_macvtap entered promiscuous mode [ 21.943564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.951852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.960196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.995027][ T282] device veth0_vlan entered promiscuous mode [ 22.013705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.021215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.029232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.037687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.046496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.055067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.063722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.072324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.080860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.089292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.098603][ T307] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue [ 22.117396][ T282] device veth1_macvtap entered promiscuous mode [ 22.157121][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.172567][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.182361][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.227298][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.245946][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.258780][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.262745][ T316] erofs: (device loop1): mounted with root inode @ nid 36. [ 22.270797][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.312931][ T316] erofs: (device loop1): find_target_block_classic: corrupted dir block 67108936 @ nid 36 [ 22.332920][ T316] process 'syz.1.2' launched './file0/file0' with NULL argv: empty string added [ 22.352615][ T316] erofs: (device loop1): find_target_block_classic: corrupted dir block 67108936 @ nid 36 [ 22.381613][ T316] erofs: (device loop1): find_target_block_classic: corrupted dir block 67108936 @ nid 36 [ 22.502321][ T327] ====================================================== [ 22.502321][ T327] WARNING: the mand mount option is being deprecated and [ 22.502321][ T327] will be removed in v5.15! [ 22.502321][ T327] ====================================================== [ 22.538469][ T321] F2FS-fs (loop3): Invalid log blocks per segment (1545) [ 22.546504][ T329] exfat: Bad value for 'fmask' [ 22.553792][ T321] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 22.592440][ T321] F2FS-fs (loop3): invalid crc value [ 22.603134][ T321] F2FS-fs (loop3): Found nat_bits in checkpoint [ 22.679939][ T321] F2FS-fs (loop3): Start checkpoint disabled! [ 22.703337][ T321] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 22.710540][ T321] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 23.024176][ T342] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 23.029774][ T342] loop3: partition table partially beyond EOD, truncated [ 23.048081][ T342] loop3: p2 start 4278190080 is beyond EOD, truncated [ 23.073358][ T342] loop3: p4 size 8192 extends beyond EOD, truncated [ 23.092059][ T290] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.098531][ T342] loop3: p6 size 8192 extends beyond EOD, truncated [ 23.255643][ T349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 23.293949][ T302] udevd[302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 23.293987][ T323] udevd[323]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 23.328531][ T326] udevd[326]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 23.350831][ T351] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 23.362388][ T344] udevd[344]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 23.377485][ T345] udevd[345]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 23.464115][ T351] EXT4-fs error (device loop3): ext4_get_journal_inode:5247: comm syz.3.12: inode #1: comm syz.3.12: iget: illegal inode # [ 23.477106][ T290] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.492246][ T290] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 23.506686][ T351] EXT4-fs (loop3): no journal found [ 23.521386][ T351] EXT4-fs (loop3): can't get journal size [ 23.521493][ T302] udevd[302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 23.527321][ T290] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 23.538030][ T345] udevd[345]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 23.551174][ T323] udevd[323]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 23.560702][ T326] udevd[326]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 23.580291][ T344] udevd[344]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 23.580312][ T351] EXT4-fs (loop3): failed to initialize system zone (-22) [ 23.597679][ T356] Illegal XDP return value 5, expect packet loss! [ 23.618224][ T351] EXT4-fs (loop3): mount failed [ 23.670630][ T5] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 23.802605][ T290] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 23.814975][ T290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.835386][ T290] usb 3-1: Product: syz [ 24.336789][ T24] kauditd_printk_skb: 56 callbacks suppressed [ 24.336945][ T24] audit: type=1400 audit(1786004815.550:130): avc: denied { create } for pid=362 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.101247][ T290] usb 3-1: Manufacturer: syz [ 25.106909][ T290] usb 3-1: SerialNumber: syz [ 25.137268][ T24] audit: type=1400 audit(1786004815.650:131): avc: denied { write } for pid=362 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.159045][ T24] audit: type=1326 audit(1786004816.450:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.3.17" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e73620d9 code=0x7ffc0000 [ 25.184144][ T24] audit: type=1326 audit(1786004816.450:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.3.17" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e73620d9 code=0x7ffc0000 [ 25.285143][ T290] cdc_ncm 3-1:1.0: skipping garbage [ 25.290384][ T290] cdc_ncm 3-1:1.0: bind() failure [ 25.298754][ T24] audit: type=1326 audit(1786004816.470:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.3.17" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fc4e73620d9 code=0x7ffc0000 [ 25.326067][ T24] audit: type=1326 audit(1786004816.470:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.3.17" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e73620d9 code=0x7ffc0000 [ 25.351439][ T24] audit: type=1326 audit(1786004816.470:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.3.17" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e73620d9 code=0x7ffc0000 [ 25.380023][ T24] audit: type=1326 audit(1786004816.480:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.4.16" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5503630d9 code=0x7ffc0000 [ 25.405864][ T24] audit: type=1326 audit(1786004816.480:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.4.16" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5503630d9 code=0x7ffc0000 [ 25.430675][ T24] audit: type=1326 audit(1786004816.500:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.3.17" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc4e73620d9 code=0x7ffc0000 [ 25.722053][ T370] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.837749][ T354] exfat: Deprecated parameter 'utf8' [ 25.841468][ T385] fuse: Bad value for 'fd' [ 25.843420][ T354] exfat: Deprecated parameter 'namecase' [ 25.853679][ T354] exfat: Unknown parameter 'keep_last_dots' [ 25.945640][ T384] EXT4-fs (loop3): Test dummy encryption mode enabled [ 25.952763][ T384] EXT4-fs (loop3): Ignoring removed orlov option [ 25.986209][ T384] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue [ 25.992046][ T370] usb 5-1: device descriptor read/64, error -71 [ 26.062154][ T384] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 26.100885][ T384] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 26.165215][ T390] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 26.181821][ T390] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 26.191002][ T390] F2FS-fs (loop0): invalid crc value [ 26.198063][ T390] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.272423][ T390] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 26.279597][ T390] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 26.347682][ T404] udc-core: couldn't find an available UDC or it's busy [ 26.362300][ T404] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 26.432069][ T370] usb 5-1: device descriptor read/64, error -71 [ 26.601485][ T406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 26.702067][ T370] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 26.892400][ T402] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 26.910365][ T402] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 26.932764][ T402] F2FS-fs (loop3): invalid crc value [ 26.951777][ T402] F2FS-fs (loop3): Found nat_bits in checkpoint [ 27.029420][ T402] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 27.042084][ T402] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 27.052181][ T370] usb 5-1: device descriptor read/64, error -71 [ 27.402171][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 27.467930][ T422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 27.485626][ T370] usb 5-1: device descriptor read/64, error -71 [ 27.981072][ T370] usb usb5-port1: attempt power cycle [ 28.130202][ T54] usb 3-1: USB disconnect, device number 2 [ 28.229313][ T428] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue [ 28.273901][ T428] FAULT_INJECTION: forcing a failure. [ 28.273901][ T428] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 28.312213][ T428] CPU: 0 PID: 428 Comm: syz.2.29 Not tainted syzkaller #0 [ 28.319368][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.329452][ T428] Call Trace: [ 28.332770][ T428] __dump_stack+0x21/0x24 [ 28.337126][ T428] dump_stack_lvl+0x1a7/0x208 [ 28.341833][ T428] ? show_regs_print_info+0x18/0x18 [ 28.347226][ T428] ? vfs_write+0xae4/0xd70 [ 28.351668][ T428] dump_stack+0x15/0x1c [ 28.355909][ T428] should_fail+0x3ab/0x500 [ 28.360438][ T428] should_fail_usercopy+0x1a/0x20 [ 28.365480][ T428] _copy_from_user+0x20/0xd0 [ 28.370082][ T428] __se_sys_bpf+0x1bb/0x740 [ 28.374591][ T428] ? __x64_sys_bpf+0x90/0x90 [ 28.379191][ T428] ? ____fput+0x15/0x20 [ 28.383348][ T428] ? debug_smp_processor_id+0x17/0x20 [ 28.388724][ T428] __x64_sys_bpf+0x7b/0x90 [ 28.392075][ T370] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 28.393153][ T428] do_syscall_64+0x31/0x40 [ 28.393165][ T428] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.393184][ T428] RIP: 0033:0x7f135c2d60d9 [ 28.415438][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.435048][ T428] RSP: 002b:00007f135ad2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 28.443464][ T428] RAX: ffffffffffffffda RBX: 00007f135c55dfa0 RCX: 00007f135c2d60d9 [ 28.451440][ T428] RDX: 0000000000000010 RSI: 0000200000000a00 RDI: 000000000000000f [ 28.459420][ T428] RBP: 00007f135ad2f090 R08: 0000000000000000 R09: 0000000000000000 [ 28.467400][ T428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 28.475460][ T428] R13: 00007f135c55e038 R14: 00007f135c55dfa0 R15: 00007fff570842c8 [ 28.659387][ T424] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 28.678200][ T424] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 28.687286][ T424] F2FS-fs (loop0): invalid crc value [ 28.695369][ T424] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 28.727200][ T424] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 28.742142][ T424] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 28.788111][ T424] tipc: Started in network mode [ 28.793126][ T426] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 28.801945][ T424] tipc: Own node identity 10101, cluster identity 4711 [ 28.809464][ T424] tipc: 32-bit node address hash set to 10101 [ 28.816498][ T424] tipc: Enabled bearer , priority 0 [ 28.823226][ T426] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 28.842365][ T426] F2FS-fs (loop1): invalid crc value [ 28.882051][ T370] usb 5-1: device not accepting address 4, error -71 [ 28.902858][ T426] F2FS-fs (loop1): Found nat_bits in checkpoint [ 28.910263][ T449] EXT4-fs (loop4): Test dummy encryption mode enabled [ 28.931432][ T449] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 28.957203][ T449] System zones: 0-5 [ 28.961886][ T449] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,noload,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf, [ 29.010655][ T426] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 29.042085][ T426] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 29.126300][ T440] F2FS-fs (loop3): fault_injection options not supported [ 29.133891][ T280] attempt to access beyond end of device [ 29.133891][ T280] loop0: rw=2049, want=45104, limit=40427 [ 29.142204][ T440] F2FS-fs (loop3): fault_type options not supported [ 29.152809][ T440] F2FS-fs (loop3): invalid crc value [ 29.166190][ T440] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.352499][ T440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.404579][ T24] kauditd_printk_skb: 95 callbacks suppressed [ 29.404591][ T24] audit: type=1400 audit(1786004820.920:235): avc: denied { create } for pid=438 comm="syz.3.30" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 29.462982][ T282] attempt to access beyond end of device [ 29.462982][ T282] loop3: rw=524288, want=45072, limit=40427 [ 29.472067][ T24] audit: type=1400 audit(1786004820.920:236): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.483173][ T282] attempt to access beyond end of device [ 29.483173][ T282] loop3: rw=0, want=45072, limit=40427 [ 29.494119][ T24] audit: type=1400 audit(1786004820.950:237): avc: denied { read } for pid=438 comm="syz.3.30" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 29.527250][ T24] audit: type=1400 audit(1786004820.950:238): avc: denied { mount } for pid=438 comm="syz.3.30" name="/" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.548991][ T24] audit: type=1400 audit(1786004820.960:239): avc: denied { rename } for pid=438 comm="syz.3.30" name="file0" dev="overlay" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 29.595804][ T312] attempt to access beyond end of device [ 29.595804][ T312] loop3: rw=2049, want=45120, limit=40427 [ 29.612208][ T24] audit: type=1400 audit(1786004820.960:240): avc: denied { create } for pid=438 comm="syz.3.30" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 29.682078][ T24] audit: type=1400 audit(1786004820.960:241): avc: denied { setattr } for pid=438 comm="syz.3.30" name="#d" dev="loop3" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 29.719241][ T466] device batadv_slave_0 entered promiscuous mode [ 29.757567][ T467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'. [ 29.944647][ T470] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.041907][ T24] audit: type=1400 audit(1786004821.490:242): avc: denied { mount } for pid=462 comm="syz.0.35" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.945082][ T24] audit: type=1400 audit(1786004821.670:243): avc: denied { accept } for pid=462 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 30.965700][ T24] audit: type=1400 audit(1786004822.460:244): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.092920][ T479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=479 comm=syz.4.40 [ 31.117833][ T482] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.140127][ T479] netlink: 'syz.4.40': attribute type 3 has an invalid length. [ 31.158187][ T479] netlink: 'syz.4.40': attribute type 3 has an invalid length. [ 31.213630][ T490] binder_alloc: 488: pid 488 spamming oneway? 1 buffers allocated for a total size of 4096 [ 31.242313][ T490] binder_alloc: 488: pid 488 spamming oneway? 2 buffers allocated for a total size of 5120 [ 31.270516][ T493] input: syz0 as /devices/virtual/input/input4 [ 31.299637][ T493] size and base must be multiples of 4 kiB [ 31.305662][ T493] CPU: 0 PID: 493 Comm: syz.1.45 Not tainted syzkaller #0 [ 31.309105][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.312787][ T493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.312791][ T493] Call Trace: [ 31.312810][ T493] __dump_stack+0x21/0x24 [ 31.312822][ T493] dump_stack_lvl+0x1a7/0x208 [ 31.312841][ T493] ? thaw_kernel_threads+0x220/0x220 [ 31.312852][ T493] ? do_vfs_ioctl+0x1403/0x15d0 [ 31.312863][ T493] ? show_regs_print_info+0x18/0x18 [ 31.312873][ T493] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 31.312885][ T493] ? has_cap_mac_admin+0x370/0x370 [ 31.312896][ T493] dump_stack+0x15/0x1c [ 31.312914][ T493] mtrr_add+0xa1/0xb0 [ 31.376535][ T493] mtrr_ioctl+0x8e8/0xf90 [ 31.380858][ T493] ? mtrr_close+0x1f0/0x1f0 [ 31.385353][ T493] ? selinux_file_ioctl+0x3ad/0x4c0 [ 31.390548][ T493] ? putname+0xa0/0x150 [ 31.394700][ T493] ? do_sys_openat2+0x68e/0x750 [ 31.399646][ T493] ? __fget_files+0x2e1/0x340 [ 31.404318][ T493] ? mtrr_close+0x1f0/0x1f0 [ 31.408817][ T493] proc_reg_unlocked_ioctl+0x1c6/0x2b0 [ 31.414268][ T493] ? proc_reg_poll+0x290/0x290 [ 31.419064][ T493] __se_sys_ioctl+0x121/0x1a0 [ 31.423734][ T493] __x64_sys_ioctl+0x7b/0x90 [ 31.428317][ T493] do_syscall_64+0x31/0x40 [ 31.432814][ T493] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.438788][ T493] RIP: 0033:0x7f03a9e6f0d9 [ 31.443204][ T493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.462899][ T493] RSP: 002b:00007f03a88c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 31.471309][ T493] RAX: ffffffffffffffda RBX: 00007f03aa0f6fa0 RCX: 00007f03a9e6f0d9 [ 31.479272][ T493] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 31.487241][ T493] RBP: 00007f03a9f06024 R08: 0000000000000000 R09: 0000000000000000 [ 31.495208][ T493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.503261][ T493] R13: 00007f03aa0f7038 R14: 00007f03aa0f6fa0 R15: 00007ffdf88482a8 [ 31.512812][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.521149][ T491] device bridge_slave_0 entered promiscuous mode [ 31.541054][ T446] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 31.579829][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.592072][ T446] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 31.601176][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.608313][ T446] F2FS-fs (loop2): invalid crc value [ 31.615977][ T491] device bridge_slave_1 entered promiscuous mode [ 31.625829][ T446] F2FS-fs (loop2): Found nat_bits in checkpoint [ 31.629361][ T514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 31.668329][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 31.679263][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 31.687319][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 31.698224][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 31.706160][ T514] loop3: unable to read partition table [ 31.712106][ T514] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 31.737154][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 31.748069][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 31.785307][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.792424][ T491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.799692][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.806763][ T491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.822152][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 31.833076][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 31.841141][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 31.852041][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 31.860114][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 31.871015][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 31.879966][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 31.890999][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 31.946012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.979518][ T530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=530 comm=syz.0.53 [ 31.979584][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.002998][ T528] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.014693][ T528] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.028341][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.036572][ T528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.046607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.055248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.063839][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.070517][ T528] EXT4-fs (loop1): 1 truncate cleaned up [ 32.070881][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.077246][ T528] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,acl,,errors=continue [ 32.084159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.106229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.114433][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.121464][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.129048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.137177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.145295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.153267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.161448][ T530] netlink: 'syz.0.53': attribute type 3 has an invalid length. [ 32.169147][ T530] netlink: 'syz.0.53': attribute type 3 has an invalid length. [ 32.183724][ T528] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz.1.54: Siphash requires key [ 32.207425][ T528] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz.1.54: Siphash requires key [ 32.209007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.218714][ T528] EXT4-fs error (device loop1): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.1.54: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 32.227644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.253236][ T538] overlayfs: unrecognized mount option "dont_appraise" or missing value [ 32.259876][ T491] device veth0_vlan entered promiscuous mode [ 32.270034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.277988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.286618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.294195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.302403][ T300] device bridge_slave_1 left promiscuous mode [ 32.308558][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.316785][ T300] device bridge_slave_0 left promiscuous mode [ 32.325513][ T536] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.333635][ T536] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 32.345897][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.354410][ T536] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008, [ 32.396076][ T300] device veth1_macvtap left promiscuous mode [ 32.402437][ T300] device veth0_vlan left promiscuous mode [ 32.486993][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.495341][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.505626][ T491] device veth1_macvtap entered promiscuous mode [ 32.516276][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.530782][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.542218][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.552496][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.565038][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.574964][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.610899][ T556] input: syz0 as /devices/virtual/input/input5 [ 32.634341][ T556] size and base must be multiples of 4 kiB [ 32.649108][ T556] CPU: 0 PID: 556 Comm: syz.5.43 Not tainted syzkaller #0 [ 32.656253][ T556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.666324][ T556] Call Trace: [ 32.669679][ T556] __dump_stack+0x21/0x24 [ 32.674029][ T556] dump_stack_lvl+0x1a7/0x208 [ 32.678730][ T556] ? thaw_kernel_threads+0x220/0x220 [ 32.684028][ T556] ? do_vfs_ioctl+0x1403/0x15d0 [ 32.688897][ T556] ? show_regs_print_info+0x18/0x18 [ 32.694131][ T556] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 32.699870][ T556] ? has_cap_mac_admin+0x370/0x370 [ 32.704995][ T556] dump_stack+0x15/0x1c [ 32.709165][ T556] mtrr_add+0xa1/0xb0 [ 32.713158][ T556] mtrr_ioctl+0x8e8/0xf90 [ 32.717498][ T556] ? mtrr_close+0x1f0/0x1f0 [ 32.722016][ T556] ? selinux_file_ioctl+0x3ad/0x4c0 [ 32.727229][ T556] ? putname+0xa0/0x150 [ 32.731446][ T556] ? do_sys_openat2+0x68e/0x750 [ 32.736307][ T556] ? __fget_files+0x2e1/0x340 [ 32.741001][ T556] ? mtrr_close+0x1f0/0x1f0 [ 32.745522][ T556] proc_reg_unlocked_ioctl+0x1c6/0x2b0 [ 32.751003][ T556] ? proc_reg_poll+0x290/0x290 [ 32.755783][ T556] __se_sys_ioctl+0x121/0x1a0 [ 32.760472][ T556] __x64_sys_ioctl+0x7b/0x90 [ 32.765111][ T556] do_syscall_64+0x31/0x40 [ 32.769538][ T556] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.775439][ T556] RIP: 0033:0x7fa5094e00d9 [ 32.779882][ T556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.799498][ T556] RSP: 002b:00007fa507f39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.807934][ T556] RAX: ffffffffffffffda RBX: 00007fa509767fa0 RCX: 00007fa5094e00d9 [ 32.815931][ T556] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 32.824006][ T556] RBP: 00007fa509577024 R08: 0000000000000000 R09: 0000000000000000 [ 32.831995][ T556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.839980][ T556] R13: 00007fa509768038 R14: 00007fa509767fa0 R15: 00007ffc13505bf8 [ 32.879092][ T564] x_tables: unsorted underflow at hook 4 [ 32.885162][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 32.992148][ T15] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.043018][ T578] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 33.062099][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.102212][ T578] overlayfs: failed to resolve './bus': -40 [ 33.152114][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.172052][ T20] usb 2-1: too many endpoints for config 1 interface 0 altsetting 241: 34, using maximum allowed: 30 [ 33.192073][ T20] usb 2-1: config 1 interface 0 altsetting 241 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 33.205535][ T20] usb 2-1: config 1 interface 0 has no altsetting 0 [ 33.352116][ T15] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 33.363527][ T15] usb 3-1: config 8 has no interface number 0 [ 33.376116][ T15] usb 3-1: config 8 interface 39 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 33.397734][ T15] usb 3-1: config 8 interface 39 has no altsetting 0 [ 33.446094][ T549] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.461217][ T549] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue [ 33.473069][ T20] usb 2-1: string descriptor 0 read error: -22 [ 33.479308][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.499441][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.552617][ T20] usb 2-1: bad CDC descriptors [ 33.572230][ T15] usb 3-1: New USB device found, idVendor=0870, idProduct=0001, bcdDevice=c1.9e [ 33.584621][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.601320][ T15] usb 3-1: Product: syz [ 33.609892][ T15] usb 3-1: Manufacturer: syz [ 33.620038][ T15] usb 3-1: SerialNumber: syz [ 33.736278][ T588] fuse: Bad value for 'rootmode' [ 33.753447][ T566] usb 2-1: USB disconnect, device number 2 [ 33.788769][ T583] F2FS-fs (loop5): Invalid log sectorsize (0) [ 33.795148][ T583] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 33.805319][ T583] F2FS-fs (loop5): invalid crc value [ 33.815993][ T583] F2FS-fs (loop5): Found nat_bits in checkpoint [ 33.857263][ T583] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 33.864831][ T583] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 33.955789][ T15] usb 3-1: USB disconnect, device number 3 [ 34.017946][ T598] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 34.035629][ T598] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 34.046259][ T598] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.083860][ T598] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 34.091150][ T598] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.210807][ T598] attempt to access beyond end of device [ 34.210807][ T598] loop0: rw=2049, want=79880, limit=40427 [ 34.224875][ T598] attempt to access beyond end of device [ 34.224875][ T598] loop0: rw=2049, want=81920, limit=40427 [ 34.246399][ T598] attempt to access beyond end of device [ 34.246399][ T598] loop0: rw=2049, want=53248, limit=40427 [ 34.290338][ T598] attempt to access beyond end of device [ 34.290338][ T598] loop0: rw=2049, want=77824, limit=40427 [ 34.313054][ T598] attempt to access beyond end of device [ 34.313054][ T598] loop0: rw=2049, want=85872, limit=40427 [ 34.358590][ T280] attempt to access beyond end of device [ 34.358590][ T280] loop0: rw=2049, want=40968, limit=40427 [ 34.448468][ T616] cgroup: syz.2.76 (616) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 34.474318][ T616] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 34.488543][ T616] No source specified [ 34.502089][ T15] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 34.619508][ T613] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 34.627539][ T613] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 34.636593][ T613] F2FS-fs (loop1): invalid crc value [ 34.643327][ T626] erofs: (device loop0): mounted with root inode @ nid 36. [ 34.644166][ T623] EXT4-fs (loop2): Ignoring removed orlov option [ 34.657665][ T613] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.693355][ T623] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpquota,,errors=continue [ 34.697400][ T613] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 34.719853][ T613] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 34.860796][ T641] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 34.950996][ T641] EXT4-fs error (device loop4): ext4_get_first_dir_block:3708: inode #12: comm syz.4.81: Directory hole found for htree leaf block 0 [ 34.965006][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 34.965163][ T24] audit: type=1400 audit(1786004826.460:297): avc: denied { rename } for pid=640 comm="syz.4.81" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.171254][ T24] audit: type=1400 audit(1786004826.620:298): avc: denied { create } for pid=642 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.744043][ T24] audit: type=1400 audit(1786004827.260:299): avc: denied { mount } for pid=655 comm="syz.0.85" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.767078][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.850507][ T24] audit: type=1400 audit(1786004827.360:300): avc: denied { mounton } for pid=658 comm="syz.4.83" path="/24/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 35.850876][ T659] fuse: Unknown parameter 'Od' [ 35.909055][ T24] audit: type=1400 audit(1786004827.420:301): avc: denied { wake_alarm } for pid=658 comm="syz.4.83" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.930083][ T15] usb 6-1: New USB device found, idVendor=0582, idProduct=004d, bcdDevice= 0.40 [ 35.939561][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.960166][ T15] usb 6-1: Product: syz [ 35.964457][ T15] usb 6-1: Manufacturer: syz [ 35.969056][ T15] usb 6-1: SerialNumber: syz [ 35.999487][ T24] audit: type=1400 audit(1786004827.510:302): avc: denied { mmap_zero } for pid=663 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 36.021347][ T24] audit: type=1400 audit(1786004827.540:303): avc: denied { create } for pid=663 comm="syz.1.86" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.043656][ T24] audit: type=1400 audit(1786004827.540:304): avc: denied { read write } for pid=663 comm="syz.1.86" name="file2" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.066553][ T24] audit: type=1400 audit(1786004827.540:305): avc: denied { ioctl open } for pid=663 comm="syz.1.86" path="/12/file2" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.275305][ T609] netlink: 96 bytes leftover after parsing attributes in process `syz.5.73'. [ 36.284664][ T20] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 36.338275][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.474138][ T24] audit: type=1400 audit(1786004827.900:306): avc: denied { block_suspend } for pid=663 comm="syz.1.86" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.848747][ T667] EXT4-fs: failed to create workqueue [ 36.854186][ T667] EXT4-fs (loop1): mount failed [ 36.872412][ T20] usb 3-1: config 0 descriptor?? [ 36.997672][ T673] EXT4-fs (loop4): Test dummy encryption mode enabled [ 37.023418][ T673] EXT4-fs (loop4): Test dummy encryption mode enabled [ 37.080554][ T673] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 37.142582][ T15] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 37.152585][ T15] usb 6-1: USB disconnect, device number 2 [ 37.160187][ T673] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.343802][ T657] F2FS-fs (loop0): invalid crc value [ 37.365419][ T657] F2FS-fs (loop0): Found nat_bits in checkpoint [ 37.394222][ T657] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 37.733722][ T712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.96'. [ 37.762157][ T712] device ip6tnl1 entered promiscuous mode [ 37.779346][ T709] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 37.808427][ T709] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 37.825514][ T709] F2FS-fs (loop1): invalid crc value [ 37.843289][ T709] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.883384][ T20] usb 3-1: Cannot set autoneg [ 37.888220][ T20] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -32 [ 37.910632][ T709] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 37.917945][ T709] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 38.253859][ T727] EXT4-fs (loop4): Test dummy encryption mode enabled [ 38.261007][ T727] EXT4-fs (loop4): quotafile must be on filesystem root [ 39.191176][ T20] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 39.348169][ T54] usb 3-1: USB disconnect, device number 4 [ 39.722119][ T20] usb 5-1: unable to get BOS descriptor or descriptor too short [ 40.042168][ T20] usb 5-1: string descriptor 0 read error: -22 [ 40.048418][ T20] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice= 0.40 [ 40.057467][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.102974][ T20] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 40.110412][ T20] snd-usb-audio: probe of 5-1:1.1 failed with error -2 [ 40.117882][ T20] snd-usb-audio: probe of 5-1:1.2 failed with error -2 [ 40.302698][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 40.302709][ T24] audit: type=1400 audit(1786004831.820:320): avc: denied { map } for pid=724 comm="syz.4.98" path="socket:[16198]" dev="sockfs" ino=16198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 40.332852][ T566] usb 5-1: USB disconnect, device number 6 [ 77.959498][ T24] audit: type=1400 audit(1786004869.470:321): avc: denied { create } for pid=749 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.028740][ T24] audit: type=1400 audit(1786004869.500:323): avc: denied { unmount } for pid=491 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 78.292347][ T24] audit: type=1400 audit(1786004869.500:324): avc: denied { read write } for pid=491 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.316478][ T24] audit: type=1400 audit(1786004869.500:325): avc: denied { open } for pid=491 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.364616][ T24] audit: type=1400 audit(1786004869.500:326): avc: denied { ioctl } for pid=491 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.432143][ T24] audit: type=1400 audit(1786004869.500:322): avc: denied { setopt } for pid=749 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.452054][ T15] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.481280][ T24] audit: type=1400 audit(1786004869.920:327): avc: denied { create } for pid=749 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.488026][ T754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.105'. [ 78.527601][ T24] audit: type=1400 audit(1786004869.990:328): avc: denied { ioctl } for pid=739 comm="syz.0.100" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.582102][ T24] audit: type=1400 audit(1786004870.060:329): avc: denied { mounton } for pid=753 comm="syz.5.105" path="/9/file1" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.606571][ T757] EXT4-fs (loop5): quotafile must be on filesystem root [ 78.635188][ T744] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 78.649494][ T24] audit: type=1400 audit(1786004870.160:330): avc: denied { ioctl } for pid=749 comm="syz.1.101" path="socket:[16286]" dev="sockfs" ino=16286 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.675279][ T744] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 78.685395][ T744] F2FS-fs (loop2): invalid crc value [ 78.701677][ T744] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.712122][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 78.750149][ T744] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 78.762097][ T744] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.872152][ T15] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.952134][ T15] usb 1-1: config 1 has an invalid descriptor of length 12, skipping remainder of the config [ 78.982041][ T15] usb 1-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 79.001765][ T15] usb 1-1: config 1 interface 0 has no altsetting 0 [ 79.411377][ T772] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 79.432055][ T772] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 79.452066][ T772] System zones: 0-1, 15-15, 18-18, 34-34 [ 79.468973][ T772] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.494464][ T772] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 79.558752][ T772] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 79.576988][ T772] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.108: bad orphan inode 16 [ 79.602164][ T772] ext4_test_bit(bit=15, block=18) = 1 [ 79.612246][ T772] is_bad_inode(inode)=0 [ 79.616418][ T772] NEXT_ORPHAN(inode)=0 [ 79.631476][ T772] max_ino=32 [ 79.639580][ T772] i_nlink=2 [ 79.647631][ T772] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 79.812138][ T15] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40 [ 79.821430][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.830619][ T15] usb 1-1: Product: syz [ 79.835124][ T15] usb 1-1: Manufacturer: syz [ 79.840003][ T15] usb 1-1: SerialNumber: syz [ 79.917635][ T796] EXT4-fs (loop1): Test dummy encryption mode enabled [ 79.935981][ T796] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2749: inode #11: comm syz.1.113: corrupted xattr block 95 [ 79.949419][ T796] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2799: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 79.963752][ T796] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.113: bg 0: block 7: invalid block bitmap [ 79.976779][ T796] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 79.987452][ T796] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2914: inode #11: comm syz.1.113: corrupted xattr block 95 [ 79.999784][ T796] EXT4-fs warning (device loop1): ext4_evict_inode:305: xattr delete (err -117) [ 80.008905][ T796] EXT4-fs (loop1): 1 orphan inode deleted [ 80.014788][ T796] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue [ 80.027147][ T754] EXT4-fs (loop5): Test dummy encryption mode enabled [ 80.034486][ T754] EXT4-fs (loop5): Ignoring removed oldalloc option [ 80.122827][ T15] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 80.148765][ T754] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue [ 80.254916][ T754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.105'. [ 80.267910][ T754] Zero length message leads to an empty skb [ 80.285302][ T820] FAT-fs (loop1): Unrecognized mount option "sh" or missing value [ 80.345080][ T827] xt_hashlimit: size too large, truncated to 1048576 [ 80.400511][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 80.419959][ T740] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.100: inode has both inline data and extents flags [ 80.434485][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.476501][ T740] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.100: couldn't read orphan inode 15 (err -117) [ 80.495582][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 80.512052][ T54] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 80.525322][ T740] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 80.534928][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.543620][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.551868][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.560900][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.569336][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.622108][ T740] loop_set_status: loop0 () has still dirty pages (nrpages=1) [ 80.691622][ T740] Unknown ioctl -2114415556 [ 80.961863][ T54] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.052077][ T54] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.062616][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.262201][ T54] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 81.271768][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.282723][ T859] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.512316][ T54] usb 5-1: Product: syz [ 81.516783][ T54] usb 5-1: Manufacturer: syz [ 81.521456][ T54] usb 5-1: SerialNumber: syz [ 81.583715][ T54] usb 5-1: selecting invalid altsetting 1 [ 81.589816][ T54] usb 5-1: unit 6 not found! [ 81.802583][ T870] exfat: Bad value for 'errors' [ 81.846813][ T870] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 81.856014][ T870] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.962052][ T301] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 82.074868][ T882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.132'. [ 82.134192][ T884] EXT4-fs (loop2): Ignoring removed bh option [ 82.140875][ T884] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 82.151513][ T884] EXT4-fs (loop2): 1 truncate cleaned up [ 82.157190][ T884] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,,errors=continue [ 82.242129][ T473] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.249726][ T301] usb 6-1: device descriptor read/64, error -71 [ 82.261649][ T676] usb 1-1: USB disconnect, device number 2 [ 82.433074][ T822] tipc: Enabling of bearer rejected, failed to enable media [ 82.452191][ T54] usb 5-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3 [ 82.482115][ T54] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 82.494767][ T896] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 82.502873][ T896] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 82.512540][ T54] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 82.513030][ T896] F2FS-fs (loop0): invalid crc value [ 82.531133][ T54] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 82.557158][ T54] usb 5-1: USB disconnect, device number 7 [ 82.565948][ T896] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.608865][ T896] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 82.616025][ T896] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.642059][ T301] usb 6-1: device descriptor read/64, error -71 [ 82.878611][ T473] usb 2-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 82.981252][ T904] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.003219][ T301] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 83.030920][ T473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.042785][ T894] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 83.105961][ T894] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 83.548888][ T473] usb 2-1: Product: syz [ 83.553284][ T473] usb 2-1: Manufacturer: syz [ 83.557896][ T473] usb 2-1: SerialNumber: syz [ 83.602831][ T894] F2FS-fs (loop2): invalid crc value [ 83.617602][ T24] kauditd_printk_skb: 218 callbacks suppressed [ 83.617612][ T24] audit: type=1400 audit(1786004875.130:548): avc: denied { create } for pid=905 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.645453][ T907] capability: warning: `syz.4.137' uses 32-bit capabilities (legacy support in use) [ 83.656614][ T894] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.705049][ T24] audit: type=1400 audit(1786004875.160:549): avc: denied { ioctl } for pid=905 comm="syz.4.137" path="socket:[17619]" dev="sockfs" ino=17619 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.730481][ T301] usb 6-1: device descriptor read/64, error -71 [ 83.739559][ T24] audit: type=1400 audit(1786004875.190:550): avc: denied { ioctl } for pid=905 comm="syz.4.137" path="socket:[17621]" dev="sockfs" ino=17621 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.769316][ T894] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 83.776926][ T894] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 83.782329][ T911] exfat: Deprecated parameter 'utf8' [ 83.789975][ T911] exfat: Deprecated parameter 'utf8' [ 83.790614][ T24] audit: type=1400 audit(1786004875.300:551): avc: denied { rmdir } for pid=280 comm="syz-executor" name="work" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.836025][ T24] audit: type=1400 audit(1786004875.350:552): avc: denied { read } for pid=893 comm="syz.2.135" path="/23/file1/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.923818][ T911] exFAT-fs (loop4): bogus fat length [ 83.932197][ T473] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 83.933179][ T911] exFAT-fs (loop4): failed to read boot sector [ 83.947217][ T911] exFAT-fs (loop4): failed to recognize exfat type [ 83.956508][ T473] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 83.965977][ T24] audit: type=1400 audit(1786004875.480:553): avc: denied { create } for pid=917 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.985498][ T24] audit: type=1400 audit(1786004875.480:554): avc: denied { bind } for pid=917 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.002095][ T473] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 84.005108][ T24] audit: type=1400 audit(1786004875.480:555): avc: denied { listen } for pid=917 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.031836][ T24] audit: type=1400 audit(1786004875.480:556): avc: denied { accept } for pid=917 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.037059][ T473] usb 2-1: USB disconnect, device number 3 [ 84.120725][ T24] audit: type=1400 audit(1786004875.630:557): avc: denied { mount } for pid=910 comm="syz.4.138" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 84.132036][ T301] usb 6-1: device descriptor read/64, error -71 [ 84.272745][ T301] usb usb6-port1: attempt power cycle [ 84.422030][ T20] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 84.672019][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 84.682127][ T301] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 84.744308][ T926] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 84.752380][ T926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 84.760701][ T926] F2FS-fs (loop1): Unrecognized mount option "fault_type=1844674407709551615" or missing value [ 84.792084][ T20] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 84.800291][ T20] usb 5-1: config 0 has no interface number 0 [ 84.972082][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 84.981340][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.990499][ T939] Alternate GPT is invalid, using primary GPT. [ 85.001205][ T939] loop0: p1 p2 p3 [ 85.025130][ T939] loop0: partition table partially beyond EOD, truncated [ 85.037877][ T20] usb 5-1: Product: syz [ 85.050870][ T20] usb 5-1: Manufacturer: syz [ 85.059911][ T20] usb 5-1: SerialNumber: syz [ 85.066037][ T20] usb 5-1: config 0 descriptor?? [ 85.082637][ T95] Alternate GPT is invalid, using primary GPT. [ 85.092454][ T95] loop0: p1 p2 p3 [ 85.096871][ T95] loop0: partition table partially beyond EOD, truncated [ 85.105631][ T926] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 85.113751][ T926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 85.122221][ T926] F2FS-fs (loop1): Unrecognized mount option "fault_type=1844674407709551615" or missing value [ 85.172080][ T301] usb 6-1: device not accepting address 5, error -71 [ 85.367371][ T764] udevd[764]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 85.370442][ T961] EXT4-fs (loop0): Unrecognized mount option "fsuuid=84 226e-ee13-1118-a7c2-e30a4ccc" or missing value [ 85.378385][ T790] udevd[790]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 85.399814][ T801] udevd[801]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.420788][ T964] xt_hashlimit: size too large, truncated to 1048576 [ 85.468068][ T54] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 85.506683][ T956] udevd[956]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 85.517535][ T790] udevd[790]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 85.528348][ T801] udevd[801]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.542087][ T301] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.613203][ T969] EXT4-fs (loop0): Test dummy encryption mode enabled [ 85.742134][ T301] usb 6-1: Using ep0 maxpacket: 32 [ 85.796408][ T969] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.151: inode has both inline data and extents flags [ 85.810531][ T969] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.151: couldn't read orphan inode 15 (err -117) [ 85.822823][ T969] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 85.862609][ T54] usb 3-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 85.974592][ T54] usb 3-1: config 0 interface 0 has no altsetting 0 [ 86.006185][ T54] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 86.032115][ T301] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.062028][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.071012][ T301] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 86.106102][ T54] usb 3-1: config 0 descriptor?? [ 86.121432][ T301] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 86.302164][ T301] usb 6-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 86.311354][ T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.319610][ T301] usb 6-1: Product: syz [ 86.324077][ T301] usb 6-1: Manufacturer: syz [ 86.328850][ T301] usb 6-1: SerialNumber: syz [ 86.422042][ T676] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 86.431244][ T978] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.155: invalid indirect mapped block 4294967295 (level 1) [ 86.445360][ T978] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.155: invalid indirect mapped block 4294967295 (level 1) [ 86.459859][ T978] EXT4-fs (loop0): 2 truncates cleaned up [ 86.465792][ T978] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 86.614244][ T54] hid-led 0003:04D8:F372.0001: unknown main item tag 0x0 [ 86.622591][ T54] hid-led 0003:04D8:F372.0001: unknown main item tag 0x0 [ 86.629773][ T54] hid-led 0003:04D8:F372.0001: unknown main item tag 0x0 [ 86.637576][ T54] hid-led 0003:04D8:F372.0001: unknown main item tag 0x0 [ 86.644979][ T54] hid-led 0003:04D8:F372.0001: unknown main item tag 0x0 [ 86.653746][ T54] hid-led 0003:04D8:F372.0001: unknown main item tag 0x0 [ 86.663195][ T54] hid-led 0003:04D8:F372.0001: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 86.683531][ T54] hid-led 0003:04D8:F372.0001: Greynut Luxafor initialized [ 86.749388][ T997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=997 comm=syz.4.158 [ 86.762086][ T20] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 86.768638][ T20] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 86.785310][ T20] usb 5-1: USB disconnect, device number 8 [ 86.794030][ T301] usb 6-1: MIDIStreaming interface descriptor not found [ 86.801117][ T676] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.818511][ T301] usb 6-1: USB disconnect, device number 6 [ 86.824539][ T676] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 86.836251][ T676] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 251, using maximum allowed: 30 [ 86.836286][ T5] usb 3-1: USB disconnect, device number 5 [ 86.847396][ T676] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 86.854197][ T560] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 86.866288][ T676] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.887401][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.891794][ T560] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 86.903766][ T560] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 86.912300][ T566] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 86.920926][ T15] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 86.933285][ T15] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 86.941427][ T15] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 86.950611][ T566] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 86.959082][ T566] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 86.967397][ T15] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 86.976461][ T566] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 86.985077][ T566] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 86.993295][ T566] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 87.001645][ T566] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 87.010408][ T15] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 87.018836][ T15] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 87.027275][ T566] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 87.035905][ T15] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 87.086925][ T676] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 87.096987][ T676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.105062][ T676] usb 2-1: Product: syz [ 87.109222][ T676] usb 2-1: Manufacturer: syz [ 87.113915][ T676] usb 2-1: SerialNumber: syz [ 87.119774][ T676] usb 2-1: Interface #1 referenced by multiple IADs [ 87.209932][ T301] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 87.262304][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.276765][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 87.289209][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 87.363783][ T1009] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.493206][ T301] usb 6-1: device descriptor read/64, error -71 [ 87.532118][ T25] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 87.551416][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.561502][ T25] usb 1-1: Product: syz [ 87.588288][ T25] usb 1-1: Manufacturer: syz [ 87.596938][ T25] usb 1-1: SerialNumber: syz [ 87.622288][ T676] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 87.639647][ T676] usb 2-1: USB disconnect, device number 4 [ 87.882218][ T301] usb 6-1: device descriptor read/64, error -71 [ 87.906457][ T1027] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 87.919738][ T1027] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 1) [ 87.922971][ T1034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1034 comm=syz.5.168 [ 87.928332][ T1027] exFAT-fs (loop2): failed to load alloc-bitmap [ 87.944572][ T1034] netlink: 'syz.5.168': attribute type 3 has an invalid length. [ 87.946827][ T1027] exFAT-fs (loop2): failed to recognize exfat type [ 87.955001][ T1034] netlink: 'syz.5.168': attribute type 3 has an invalid length. [ 87.983858][ T25] usb 1-1: USB disconnect, device number 3 [ 88.165764][ T1042] xt_hashlimit: size too large, truncated to 1048576 [ 88.181251][ T1041] device macsec1 entered promiscuous mode [ 88.202107][ T1041] device vlan1 entered promiscuous mode [ 88.212572][ T1041] device vlan1 left promiscuous mode [ 88.234610][ T1045] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 88.672536][ T1048] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 88.680901][ T1048] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 88.744096][ T1048] F2FS-fs (loop1): invalid crc value [ 88.855572][ T994] udevd[994]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.983785][ T1058] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.175975][ T1048] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.199472][ T801] udevd[801]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.316627][ T1048] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 89.342067][ T1048] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.409987][ T1053] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 89.454875][ T1053] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 89.485770][ T1053] F2FS-fs (loop4): invalid crc value [ 89.498940][ T1051] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 89.514906][ T1051] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 89.524748][ T1053] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.533588][ T1051] F2FS-fs (loop0): invalid crc value [ 89.601114][ T1074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=1074 comm=syz.1.177 [ 89.619778][ T1051] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.626568][ T1053] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 89.642145][ T1053] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 89.697988][ T1051] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 89.712040][ T1051] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.989097][ T1083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.077539][ T1044] F2FS-fs (loop5): invalid crc value [ 91.143669][ T1044] F2FS-fs (loop5): Found nat_bits in checkpoint [ 91.391986][ C0] sched: RT throttling activated [ 91.601597][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 91.601610][ T24] audit: type=1400 audit(1786004883.110:597): avc: denied { setopt } for pid=1107 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.772310][ T676] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.832878][ T1081] F2FS-fs (loop2): invalid crc value [ 91.862833][ T1081] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 91.942972][ T1081] F2FS-fs (loop2): Start checkpoint disabled! [ 91.953007][ T1081] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 91.991308][ T1126] FAT-fs (loop4): Directory bread(block 64) failed [ 91.998286][ T1126] FAT-fs (loop4): Directory bread(block 65) failed [ 92.005444][ T1126] FAT-fs (loop4): Directory bread(block 66) failed [ 92.012252][ T1126] FAT-fs (loop4): Directory bread(block 67) failed [ 92.018892][ T1126] FAT-fs (loop4): Directory bread(block 68) failed [ 92.026423][ T1126] FAT-fs (loop4): Directory bread(block 69) failed [ 92.033295][ T1126] FAT-fs (loop4): Directory bread(block 70) failed [ 92.040165][ T24] audit: type=1400 audit(1786004883.550:598): avc: denied { map } for pid=1075 comm="syz.2.178" path="/35/bus/memory.swap.current" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.040280][ T1075] attempt to access beyond end of device [ 92.040280][ T1075] loop2: rw=10241, want=45104, limit=40427 [ 92.064759][ T676] usb 2-1: Using ep0 maxpacket: 8 [ 92.075211][ T5] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 92.088424][ T1126] FAT-fs (loop4): Directory bread(block 71) failed [ 92.095158][ T1126] FAT-fs (loop4): Directory bread(block 72) failed [ 92.101842][ T1126] FAT-fs (loop4): Directory bread(block 73) failed [ 92.115074][ T1079] attempt to access beyond end of device [ 92.115074][ T1079] loop2: rw=2049, want=45104, limit=40427 [ 92.127577][ T24] audit: type=1400 audit(1786004883.650:599): avc: denied { read append } for pid=1075 comm="syz.2.178" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.151486][ T24] audit: type=1400 audit(1786004883.650:600): avc: denied { open } for pid=1075 comm="syz.2.178" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.176150][ T1124] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 92.184967][ T1124] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 92.202444][ T1124] F2FS-fs (loop0): invalid crc value [ 92.209213][ T1124] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.212095][ T676] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 92.242921][ T1124] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 92.250001][ T1124] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 92.252034][ T676] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 92.275730][ T1133] attempt to access beyond end of device [ 92.275730][ T1133] loop4: rw=2049, want=1352, limit=256 [ 92.291879][ T676] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.296040][ T1133] attempt to access beyond end of device [ 92.296040][ T1133] loop4: rw=2049, want=1512, limit=256 [ 92.317183][ T1133] attempt to access beyond end of device [ 92.317183][ T1133] loop4: rw=2049, want=1832, limit=256 [ 92.342611][ T1133] attempt to access beyond end of device [ 92.342611][ T1133] loop4: rw=2049, want=9088, limit=256 [ 92.361967][ T1126] attempt to access beyond end of device [ 92.361967][ T1126] loop4: rw=524288, want=1352, limit=256 [ 92.369107][ T300] attempt to access beyond end of device [ 92.369107][ T300] loop2: rw=1, want=45104, limit=40427 [ 92.384985][ T300] attempt to access beyond end of device [ 92.384985][ T300] loop2: rw=2049, want=40976, limit=40427 [ 92.400550][ T1126] attempt to access beyond end of device [ 92.400550][ T1126] loop4: rw=524288, want=1512, limit=256 [ 92.410435][ T5] usb 6-1: device descriptor read/64, error -71 [ 92.462114][ T676] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 92.479634][ T676] usb 2-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3 [ 92.508288][ T676] usb 2-1: Product: syz [ 92.537611][ T676] usb 2-1: SerialNumber: syz [ 92.650102][ T1135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.222138][ T24] audit: type=1400 audit(1786004884.710:601): avc: denied { ioctl } for pid=1105 comm="syz.1.182" path="socket:[18094]" dev="sockfs" ino=18094 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.252856][ T676] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 93.276960][ T676] usb 2-1: USB disconnect, device number 5 [ 93.643717][ T1140] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.884138][ T24] audit: type=1400 audit(1786004885.400:602): avc: denied { getopt } for pid=1144 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.907875][ T24] audit: type=1400 audit(1786004885.420:603): avc: denied { connect } for pid=1144 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.186298][ T1149] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.193083][ T1149] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.192: ea_inode with extended attributes [ 94.206005][ T1149] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.192: error while reading EA inode 11 err=-117 [ 94.218650][ T1149] EXT4-fs (loop2): 1 orphan inode deleted [ 94.224423][ T1149] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 94.252105][ T15] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 94.312166][ T5] usb 6-1: device descriptor read/64, error -71 [ 94.319216][ T1153] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.333177][ T1153] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,grpquota,jqfmt=vfsv0,dioread_nolock,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue [ 94.432082][ T24] audit: type=1400 audit(1786004885.940:604): avc: denied { setattr } for pid=1152 comm="syz.2.193" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.486523][ T1160] xt_hashlimit: size too large, truncated to 1048576 [ 94.550123][ T1161] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 94.559061][ T15] usb 5-1: too many configurations: 236, using maximum allowed: 8 [ 94.592102][ T5] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 94.615556][ T1158] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 94.633505][ T1158] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 94.642427][ T1158] F2FS-fs (loop1): invalid crc value [ 94.651824][ T1158] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.662097][ T15] usb 5-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config [ 94.676779][ T15] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 94.688445][ T15] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 94.688755][ T1158] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 94.712202][ T1158] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.768738][ T290] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.782066][ T15] usb 5-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config [ 94.812563][ T15] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 94.832186][ T290] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.853490][ T1174] xt_hashlimit: max too large, truncated to 1048576 [ 94.860281][ T15] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 94.949143][ T1177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.392418][ T24] audit: type=1400 audit(1786004886.910:605): avc: denied { write } for pid=1172 comm="syz.5.198" name="hidraw0" dev="devtmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.478890][ T1173] exfat: Unknown parameter '' [ 95.652846][ T1185] xt_hashlimit: size too large, truncated to 1048576 [ 95.752044][ T15] usb 5-1: unable to read config index 2 descriptor/start: -71 [ 95.759663][ T15] usb 5-1: can't read configurations, error -71 [ 95.785932][ T1186] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 95.897644][ T24] audit: type=1400 audit(1786004887.410:606): avc: denied { connect } for pid=1191 comm="syz.5.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.064331][ T1171] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 96.088104][ T1171] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.097051][ T1171] F2FS-fs (loop2): invalid crc value [ 96.104322][ T1171] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.123331][ T1202] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue [ 96.147960][ T1202] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.192347][ T1171] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.199473][ T1171] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 96.212041][ T5] usb 6-1: device descriptor read/64, error -71 [ 96.441612][ T1223] xt_hashlimit: size too large, truncated to 1048576 [ 96.490096][ T1225] capability: warning: `syz.4.211' uses deprecated v2 capabilities in a way that may be insecure [ 96.522036][ T566] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 96.565030][ T1225] loop4: p1 p2 p3 [ 96.693860][ T956] blk_update_request: I/O error, dev loop4, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 96.693934][ T801] blk_update_request: I/O error, dev loop4, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.707429][ T991] blk_update_request: I/O error, dev loop4, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 96.717022][ T283] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 96.728692][ T956] blk_update_request: I/O error, dev loop4, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.735660][ T801] Buffer I/O error on dev loop4p2, logical block 8, async page read [ 96.747072][ T991] blk_update_request: I/O error, dev loop4, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.754872][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.766250][ T956] Buffer I/O error on dev loop4p3, logical block 8, async page read [ 96.782219][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.784936][ T301] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.799287][ T801] blk_update_request: I/O error, dev loop4, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.812569][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 96.812580][ T24] audit: type=1400 audit(1786004888.330:620): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 96.813804][ T991] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 96.822669][ T956] blk_update_request: I/O error, dev loop4, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.849292][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.872562][ T956] Buffer I/O error on dev loop4p3, logical block 9, async page read [ 96.875097][ T801] Buffer I/O error on dev loop4p2, logical block 9, async page read [ 96.881952][ T956] blk_update_request: I/O error, dev loop4, sector 1010 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.888655][ T801] blk_update_request: I/O error, dev loop4, sector 60 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.900494][ T956] Buffer I/O error on dev loop4p3, logical block 10, async page read [ 96.911282][ T991] blk_update_request: I/O error, dev loop4, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.927559][ T24] audit: type=1400 audit(1786004888.440:621): avc: denied { mount } for pid=1239 comm="syz.0.213" name="/" dev="ramfs" ino=18349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 96.934753][ T5] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.953852][ T956] Buffer I/O error on dev loop4p3, logical block 11, async page read [ 96.963304][ T566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.970155][ T956] Buffer I/O error on dev loop4p3, logical block 12, async page read [ 96.980920][ T991] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 96.989126][ T956] Buffer I/O error on dev loop4p3, logical block 13, async page read [ 97.005281][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.014915][ T566] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 97.021970][ T24] audit: type=1400 audit(1786004888.530:622): avc: denied { bind } for pid=1241 comm="syz.0.215" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.027432][ T5] usb 6-1: config 0 descriptor?? [ 97.049380][ T566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.059101][ T24] audit: type=1400 audit(1786004888.570:623): avc: denied { name_bind } for pid=1241 comm="syz.0.215" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 97.063278][ T566] usb 2-1: config 0 descriptor?? [ 97.083630][ T24] audit: type=1400 audit(1786004888.570:624): avc: denied { node_bind } for pid=1241 comm="syz.0.215" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 97.153248][ T301] usb 3-1: Using ep0 maxpacket: 8 [ 97.160162][ T24] audit: type=1400 audit(1786004888.670:625): avc: denied { remount } for pid=1243 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.352057][ T301] usb 3-1: config 170 has an invalid interface number: 213 but max is 0 [ 97.360436][ T301] usb 3-1: config 170 has no interface number 0 [ 97.366892][ T301] usb 3-1: config 170 interface 213 has no altsetting 0 [ 97.682939][ T5] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xe [ 97.700784][ T5] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 97.713021][ T5] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 97.802907][ T24] audit: type=1400 audit(1786004889.320:626): avc: denied { mounton } for pid=1243 comm="syz.4.216" path="/53/file0/bus" dev="ramfs" ino=18373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 97.826015][ T1248] F2FS-fs (loop4): invalid crc value [ 97.846919][ T1248] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 97.882352][ T301] usb 3-1: New USB device found, idVendor=05a9, idProduct=7670, bcdDevice=79.c8 [ 97.900668][ T1248] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.910608][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.919707][ T1253] handle_bad_sector: 2243 callbacks suppressed [ 97.919720][ T1253] attempt to access beyond end of device [ 97.919720][ T1253] loop4: rw=2049, want=45104, limit=40427 [ 97.923829][ T5] usb 6-1: USB disconnect, device number 10 [ 97.926469][ T301] usb 3-1: Product: syz [ 97.951140][ T301] usb 3-1: Manufacturer: syz [ 97.976151][ T301] usb 3-1: SerialNumber: syz [ 98.012964][ T1246] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 98.021577][ T1246] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 98.030350][ T1246] F2FS-fs (loop0): invalid crc value [ 98.037433][ T1246] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.059223][ T1246] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 98.066430][ T1246] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 98.108363][ T24] audit: type=1400 audit(1786004889.620:627): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 98.222561][ T24] audit: type=1400 audit(1786004889.740:628): avc: denied { name_bind } for pid=1226 comm="syz.2.207" src=65535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 98.282750][ T1227] EXT4-fs (loop2): Ignoring removed nobh option [ 98.296241][ T1227] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.306567][ T1227] EXT4-fs warning (device loop2): ext4_xattr_inode_get:492: inode #11: comm syz.2.207: ea_inode file size=1535 entry size=6 [ 98.333742][ T1227] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.346977][ T1227] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27 [ 98.356026][ T1227] EXT4-fs error (device loop2): ext4_dirty_inode:6181: inode #15: comm syz.2.207: mark_inode_dirty error [ 98.368831][ T1227] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27 [ 98.377660][ T1227] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2943: inode #15: comm syz.2.207: mark_inode_dirty error [ 98.389940][ T1227] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2946: inode #15: comm syz.2.207: mark inode dirty (error -27) [ 98.402615][ T1227] EXT4-fs warning (device loop2): ext4_evict_inode:305: xattr delete (err -27) [ 98.412144][ T1227] EXT4-fs (loop2): 1 orphan inode deleted [ 98.417983][ T1227] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,min_batch_time=0x000000000000b656,block_validity,,errors=continue [ 98.508220][ T24] audit: type=1400 audit(1786004890.020:629): avc: denied { ioctl } for pid=1279 comm="syz.0.223" path="socket:[18512]" dev="sockfs" ino=18512 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.534593][ T1280] x_tables: duplicate underflow at hook 1 [ 98.557740][ T1284] syz.0.225 (1284) used obsolete PPPIOCDETACH ioctl [ 98.592177][ T301] uvcvideo: Found UVC 0.00 device syz (05a9:7670) [ 98.598665][ T301] uvcvideo: No valid video chain found. [ 98.615575][ T301] usb 3-1: USB disconnect, device number 6 [ 98.642354][ T5] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 98.683604][ T1286] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 98.695507][ T1286] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.772109][ T676] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 98.882147][ T5] usb 5-1: Invalid ep0 maxpacket: 64 [ 98.972089][ T301] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 99.032076][ T15] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 99.039669][ T5] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 99.052055][ T676] usb 6-1: device descriptor read/64, error -71 [ 99.216723][ T1294] EXT4-fs (loop1): 1 truncate cleaned up [ 99.222613][ T1294] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,,errors=continue [ 99.232990][ T566] usbhid 2-1:0.0: can't add hid device: -71 [ 99.236920][ T1294] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.228: invalid indirect mapped block 234881024 (level 0) [ 99.238979][ T566] usbhid: probe of 2-1:0.0 failed with error -71 [ 99.264747][ T566] usb 2-1: USB disconnect, device number 6 [ 99.302086][ T5] usb 5-1: Invalid ep0 maxpacket: 64 [ 99.307489][ T5] usb usb5-port1: attempt power cycle [ 99.422090][ T15] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 99.422117][ T301] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.442022][ T15] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.453399][ T15] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 99.466680][ T15] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.473403][ T15] usb 1-1: New USB device found, idVendor=056a, idProduct=0316, bcdDevice= 0.00 [ 99.482089][ T676] usb 6-1: device descriptor read/64, error -71 [ 99.482909][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.497800][ T15] usb 1-1: config 0 descriptor?? [ 99.512112][ T301] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.522390][ T301] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.655365][ T1299] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 99.664023][ T1299] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 99.673159][ T1299] F2FS-fs (loop1): invalid crc value [ 99.680111][ T1299] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.692128][ T301] usb 3-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice= 0.40 [ 99.701569][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.706929][ T1299] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 99.709806][ T301] usb 3-1: Product: 즨뎔杻޸쳽눁鋼鶾ꅤ鍽ꗞᢅ㺉꯯퍴䞋뮗麇阕IJ윉뼭鸆륬袌伄麞필옎邦奙臏暈钱潻㛁䇠霒鵯僊밄ځ构ඈ詤뼁⇑烮勶퍴嗞촑쩙ۦ巕㕎羲烴岾퍂얯婲桎﯈肋쀟⽤↹Ქ喟뎃朁Ⱉ渉榪伿褞玿㋛ᯭ솠ጊǐ퓳瞭갏ഺ﵌ḣ⟀瘾ꦆ爕覣닶ᳰ纭⟗孅⫨簉鿝ྀ᎘거岛씁 [ 99.717221][ T1299] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 99.755352][ T676] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 99.761616][ T5] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 99.769258][ T301] usb 3-1: Manufacturer:   [ 99.789598][ T301] usb 3-1: SerialNumber: 폩䪼⸋䒌⏆츽쬱ະҋ袍륂⌅얢ꔇ㏠鬴㢤⃂鹡饐숥净靛幄ⵘ挤谠ﮕ횥㳧围঎ᮞ하䋑㐒䟃蕣啩Զ譫誳삔돀麭歊ୋ톲툎逻挣劗Ḱ읳᥽౎仓⏃芋㮧ᵯ঳ [ 99.912076][ T5] usb 5-1: Invalid ep0 maxpacket: 64 [ 99.981023][ T1292] udc-core: couldn't find an available UDC or it's busy [ 99.982802][ T1306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 99.988192][ T1292] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 99.997143][ T1306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.230'. [ 100.013580][ T1306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.230'. [ 100.042068][ T676] usb 6-1: device descriptor read/64, error -71 [ 100.072108][ T5] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 100.092109][ T15] usbhid 1-1:0.0: can't add hid device: -71 [ 100.093097][ T301] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 100.098128][ T15] usbhid: probe of 1-1:0.0 failed with error -71 [ 100.112972][ T15] usb 1-1: USB disconnect, device number 4 [ 100.125272][ T301] usb 3-1: USB disconnect, device number 7 [ 100.143182][ T1317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 100.172125][ T5] usb 5-1: Invalid ep0 maxpacket: 64 [ 100.177654][ T5] usb usb5-port1: unable to enumerate USB device [ 100.432073][ T676] usb 6-1: device descriptor read/64, error -71 [ 100.570613][ T676] usb usb6-port1: attempt power cycle [ 100.965506][ T1326] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777+%6" or missing value [ 101.359177][ T676] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 101.480455][ T1338] mmap: syz.1.240 (1338) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 101.523683][ T1343] netlink: 20 bytes leftover after parsing attributes in process `syz.5.243'. [ 101.542714][ T676] usb 6-1: device descriptor read/8, error -71 [ 101.597931][ T1356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1356 comm=syz.4.246 [ 101.605144][ T1359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1359 comm=syz.4.246 [ 101.692121][ T473] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 101.812084][ T676] usb 6-1: device descriptor read/8, error -71 [ 101.872077][ T301] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 101.932095][ T473] usb 3-1: Using ep0 maxpacket: 16 [ 101.942085][ T15] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.032041][ T5] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 102.052174][ T473] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.063648][ T473] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.073660][ T473] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 102.087073][ T473] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.093879][ T473] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 102.103108][ T473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.111594][ T473] usb 3-1: config 0 descriptor?? [ 102.242101][ T301] usb 2-1: config 127 has an invalid interface number: 192 but max is 0 [ 102.250661][ T301] usb 2-1: config 127 has an invalid descriptor of length 1, skipping remainder of the config [ 102.260964][ T301] usb 2-1: config 127 has no interface number 0 [ 102.267250][ T301] usb 2-1: config 127 interface 192 altsetting 1 bulk endpoint 0xC has invalid maxpacket 32 [ 102.277358][ T301] usb 2-1: config 127 interface 192 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 102.288607][ T301] usb 2-1: config 127 interface 192 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 102.299498][ T301] usb 2-1: config 127 interface 192 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 102.310552][ T301] usb 2-1: config 127 interface 192 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 102.321525][ T301] usb 2-1: config 127 interface 192 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 102.322113][ T15] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 102.332894][ T301] usb 2-1: config 127 interface 192 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 15 [ 102.332906][ T301] usb 2-1: config 127 interface 192 has no altsetting 0 [ 102.373452][ T15] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.411323][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 102.411334][ T24] audit: type=1400 audit(1786004893.920:640): avc: denied { bind } for pid=1368 comm="syz.5.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.445762][ T24] audit: type=1400 audit(1786004893.960:641): avc: denied { getopt } for pid=1372 comm="syz.5.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.452087][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.475888][ T15] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.485215][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.489510][ T1373] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 102.494738][ T15] usb 1-1: SerialNumber: syz [ 102.510336][ T5] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.532438][ T1327] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 102.547905][ T1382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.251'. [ 102.564465][ T301] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db78, bcdDevice=82.57 [ 102.566836][ T24] audit: type=1400 audit(1786004894.080:642): avc: denied { mount } for pid=1383 comm="syz.5.252" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 102.573759][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.573772][ T301] usb 2-1: Product: Û븈⦳㭒ꋙ児镟釁䜨嚆윬꠨瓈儫鏑䈭఻㛴ꕠ꯰켩곈巪딽 [ 102.573782][ T301] usb 2-1: Manufacturer: ꎌ䒇彧䈽鈢ꖿ籲ᓟ㥦蘟罄ブ셑ᘧ꧈ [ 102.573791][ T301] usb 2-1: SerialNumber: 〉 [ 102.574403][ T301] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 102.637952][ T301] usb 2-1: no configuration chosen from 1 choice [ 102.651341][ T24] audit: type=1400 audit(1786004894.160:643): avc: denied { bind } for pid=1383 comm="syz.5.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.673473][ T24] audit: type=1400 audit(1786004894.190:644): avc: denied { watch } for pid=1383 comm="syz.5.252" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 102.702134][ T5] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 102.711200][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.719348][ T5] usb 5-1: Product: syz [ 102.723550][ T5] usb 5-1: Manufacturer: syz [ 102.728150][ T5] usb 5-1: SerialNumber: syz [ 102.754990][ T1327] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 102.802682][ T24] audit: type=1400 audit(1786004894.320:645): avc: denied { mounton } for pid=1383 comm="syz.5.252" path="/file0" dev="bpf" ino=19706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 102.882123][ T473] usbhid 3-1:0.0: can't add hid device: -71 [ 102.888415][ T473] usbhid: probe of 3-1:0.0 failed with error -71 [ 102.900158][ T473] usb 3-1: USB disconnect, device number 8 [ 103.002867][ T5] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 103.202737][ T1327] bridge0: port 3(syz_tun) entered blocking state [ 103.208048][ T24] audit: type=1400 audit(1786004894.720:646): avc: denied { read write } for pid=1363 comm="syz.4.248" name="lp0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 103.209272][ T1327] bridge0: port 3(syz_tun) entered disabled state [ 103.233255][ T24] audit: type=1400 audit(1786004894.750:647): avc: denied { open } for pid=1363 comm="syz.4.248" path="/dev/usb/lp0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 103.239848][ T1327] device syz_tun entered promiscuous mode [ 103.268803][ T1327] bridge0: port 3(syz_tun) entered blocking state [ 103.275490][ T1327] bridge0: port 3(syz_tun) entered forwarding state [ 103.293588][ T15] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 103.312725][ T24] audit: type=1400 audit(1786004894.830:648): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 103.334703][ T24] audit: type=1400 audit(1786004894.830:649): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.392831][ T1399] exfat: Deprecated parameter 'namecase' [ 103.405633][ T1399] exfat: Deprecated parameter 'utf8' [ 103.411231][ T1399] exfat: Deprecated parameter 'namecase' [ 103.417313][ T1399] exfat: Deprecated parameter 'namecase' [ 103.459557][ T1399] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d) [ 103.492675][ T1412] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 103.502248][ T1412] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 2: comm syz.5.255: lblock 2 mapped to illegal pblock 2 (length 1) [ 103.516560][ T1412] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 48: comm syz.5.255: lblock 0 mapped to illegal pblock 48 (length 1) [ 103.531244][ T1412] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.255: Failed to acquire dquot type 0 [ 103.544210][ T1412] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 103.556354][ T560] usb 5-1: USB disconnect, device number 15 [ 103.563390][ T1412] EXT4-fs error (device loop5): ext4_evict_inode:285: inode #11: comm syz.5.255: mark_inode_dirty error [ 103.575255][ T560] usblp0: removed [ 103.579967][ T1412] EXT4-fs warning (device loop5): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 103.590500][ T1412] EXT4-fs (loop5): 1 orphan inode deleted [ 103.596541][ T1412] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,resuid=0x0000000000000000,norecovery,nodiscard,nodioread_nolock,nomblk_io_submit,,errors=continue [ 103.615810][ T49] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.630663][ T49] EXT4-fs error (device loop5): ext4_release_dquot:6266: comm kworker/u4:2: Failed to release dquot type 0 [ 103.668442][ T1419] input: syz0 as /devices/virtual/input/input7 [ 103.782683][ T1327] SELinux: failed to load policy [ 103.942062][ T15] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 104.075860][ T991] print_req_error: 257 callbacks suppressed [ 104.075877][ T991] blk_update_request: I/O error, dev loop4, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 104.085555][ T801] blk_update_request: I/O error, dev loop4, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 104.095789][ T956] blk_update_request: I/O error, dev loop4, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 104.105225][ T801] blk_update_request: I/O error, dev loop4, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.119278][ T956] blk_update_request: I/O error, dev loop4, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.130063][ T991] blk_update_request: I/O error, dev loop4, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.139075][ T956] buffer_io_error: 229 callbacks suppressed [ 104.139085][ T956] Buffer I/O error on dev loop4p3, logical block 8, async page read [ 104.150156][ T991] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 104.156190][ T956] blk_update_request: I/O error, dev loop4, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.164786][ T801] Buffer I/O error on dev loop4p2, logical block 8, async page read [ 104.172275][ T956] Buffer I/O error on dev loop4p3, logical block 9, async page read [ 104.184787][ T991] blk_update_request: I/O error, dev loop4, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.191382][ T15] usb 3-1: Using ep0 maxpacket: 8 [ 104.199617][ T801] blk_update_request: I/O error, dev loop4, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.210892][ T956] blk_update_request: I/O error, dev loop4, sector 1010 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.215744][ T991] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 104.230093][ T956] Buffer I/O error on dev loop4p3, logical block 10, async page read [ 104.237811][ T801] Buffer I/O error on dev loop4p2, logical block 9, async page read [ 104.245793][ T956] Buffer I/O error on dev loop4p3, logical block 11, async page read [ 104.254225][ T991] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 104.262368][ T956] Buffer I/O error on dev loop4p3, logical block 12, async page read [ 104.301461][ T491] EXT4-fs error (device loop5): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 104.311824][ T5] usb 1-1: USB disconnect, device number 5 [ 104.321481][ T5] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 104.335752][ T491] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 104.345481][ T491] EXT4-fs error (device loop5): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error [ 104.483055][ T1467] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 104.502270][ T15] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 104.511687][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.520169][ T15] usb 3-1: Product: syz [ 104.524673][ T15] usb 3-1: Manufacturer: syz [ 104.529429][ T15] usb 3-1: SerialNumber: syz [ 104.554876][ T1471] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 104.562662][ T1471] EXT4-fs (loop0): Unrecognized mount option "block_validity.jqfmt=vfsv1" or missing value [ 104.598421][ T473] usb 2-1: USB disconnect, device number 7 [ 104.722077][ T301] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 104.915811][ T15] usb 3-1: USB disconnect, device number 9 [ 105.022153][ T301] usb 6-1: too many configurations: 231, using maximum allowed: 8 [ 105.052129][ T473] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 105.085420][ T1471] F2FS-fs (loop0): Test dummy encryption mode enabled [ 105.093015][ T1471] F2FS-fs (loop0): invalid crc value [ 105.099700][ T1471] F2FS-fs (loop0): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:0, type:0, next_blkoff:0, blkofs:0 [ 105.114349][ T1471] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 105.132111][ T301] usb 6-1: config index 0 descriptor too short (expected 64575, got 68) [ 105.140620][ T301] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 105.142979][ T991] udevd[991]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.151007][ T301] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 105.272210][ T301] usb 6-1: config index 1 descriptor too short (expected 64575, got 68) [ 105.280828][ T301] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 105.291474][ T301] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 105.402119][ T301] usb 6-1: config index 2 descriptor too short (expected 64575, got 68) [ 105.410670][ T301] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 105.421031][ T301] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 105.482089][ T473] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.522098][ T301] usb 6-1: config index 3 descriptor too short (expected 64575, got 68) [ 105.530486][ T301] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 105.541402][ T301] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 105.612060][ T473] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 105.622021][ T20] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 105.629753][ T473] usb 2-1: can't read configurations, error -71 [ 105.636425][ T301] usb 6-1: config index 4 descriptor too short (expected 64575, got 68) [ 105.645155][ T301] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 105.655611][ T301] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 105.674554][ T1513] loop4: p1 p2 p3 [ 105.681093][ T1513] netlink: 204 bytes leftover after parsing attributes in process `syz.4.273'. [ 105.742184][ T301] usb 6-1: config index 5 descriptor too short (expected 64575, got 68) [ 105.750782][ T301] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 105.761736][ T301] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 105.806315][ T283] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 105.819817][ T1517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'. [ 105.852195][ T301] usb 6-1: config index 6 descriptor too short (expected 64575, got 68) [ 105.860779][ T1517] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,lazytime, [ 105.860971][ T301] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 105.873983][ T1517] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.883789][ T301] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 105.906919][ T20] usb 3-1: device descriptor read/64, error -71 [ 105.924194][ T1517] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.274: bg 0: block 377: padding at end of block bitmap is not set [ 105.938993][ T1517] EXT4-fs (loop4): Remounting filesystem read-only [ 105.946053][ T1517] EXT4-fs error (device loop4) in ext4_evict_inode:260: Readonly filesystem [ 105.949575][ T1522] EXT4-fs (loop1): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 105.955503][ T1517] EXT4-fs error (device loop4) in ext4_evict_inode:260: Readonly filesystem [ 106.012182][ T301] usb 6-1: config index 7 descriptor too short (expected 64575, got 68) [ 106.020821][ T301] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 106.031072][ T301] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 106.063328][ T1449] device macsec0 entered promiscuous mode [ 106.102255][ T301] usb 6-1: string descriptor 0 read error: -71 [ 106.111552][ T301] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.122382][ T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.173040][ T301] usb 6-1: can't set config #1, error -71 [ 106.192145][ T301] usb 6-1: USB disconnect, device number 15 [ 106.193485][ T1534] ip_tables: iptables: counters copy to user failed while replacing table [ 106.312095][ T20] usb 3-1: device descriptor read/64, error -71 [ 106.462212][ T25] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 106.532051][ T676] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 106.539915][ T473] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 106.582331][ T20] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 106.702807][ T1541] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 106.712720][ T1541] EXT4-fs error (device loop5): ext4_get_journal_inode:5247: comm syz.5.281: inode #1: comm syz.5.281: iget: illegal inode # [ 106.725904][ T1541] EXT4-fs (loop5): no journal found [ 106.731121][ T1541] EXT4-fs (loop5): can't get journal size [ 106.737564][ T1541] EXT4-fs (loop5): failed to initialize system zone (-22) [ 106.744815][ T1541] EXT4-fs (loop5): mount failed [ 106.772064][ T676] usb 5-1: Using ep0 maxpacket: 32 [ 106.782145][ T473] usb 2-1: Using ep0 maxpacket: 8 [ 106.822147][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.833426][ T473] usb 2-1: too many configurations: 233, using maximum allowed: 8 [ 106.841273][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 106.852301][ T20] usb 3-1: device descriptor read/64, error -71 [ 106.855265][ T1541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.281'. [ 106.858620][ T25] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 106.896989][ T1541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1541 comm=syz.5.281 [ 106.952213][ T473] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 106.960048][ T473] usb 2-1: can't read configurations, error -61 [ 106.966669][ T473] usb usb2-port1: attempt power cycle [ 107.032137][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.036212][ T1551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.283'. [ 107.043400][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.058628][ T676] usb 5-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 107.068926][ T25] usb 1-1: Product: syz [ 107.072103][ C0] ================================================================== [ 107.073282][ T676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.081190][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 107.081211][ C0] Read of size 8 at addr ffff88810bf2d990 by task ksoftirqd/0/12 [ 107.089717][ T25] usb 1-1: Manufacturer: syz [ 107.097010][ C0] [ 107.097024][ C0] CPU: 0 PID: 12 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 107.097030][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.097034][ C0] Call Trace: [ 107.097053][ C0] __dump_stack+0x21/0x24 [ 107.097064][ C0] dump_stack_lvl+0x1a7/0x208 [ 107.097074][ C0] ? show_regs_print_info+0x18/0x18 [ 107.097092][ C0] ? thaw_kernel_threads+0x220/0x220 [ 107.151941][ C0] print_address_description+0x7f/0x2c0 [ 107.157483][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 107.162505][ C0] kasan_report+0x100/0x140 [ 107.167003][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 107.172021][ C0] __asan_report_load8_noabort+0x14/0x20 [ 107.177650][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 107.182493][ C0] rcu_do_batch+0x448/0xaf0 [ 107.186988][ C0] ? local_bh_enable+0x20/0x20 [ 107.191757][ C0] ? __kasan_check_write+0x14/0x20 [ 107.196869][ C0] ? rcu_report_qs_rnp+0x2bc/0x390 [ 107.201977][ C0] rcu_core+0x50a/0xca0 [ 107.206128][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 107.211324][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 107.216976][ C0] ? rcu_softirq_qs+0xd5/0x1d0 [ 107.221733][ C0] ? rcu_get_gp_kthreads_prio+0x10/0x10 [ 107.227365][ C0] rcu_core_si+0x9/0x10 [ 107.231617][ C0] __do_softirq+0x255/0x563 [ 107.236286][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 107.241490][ C0] run_ksoftirqd+0x23/0x30 [ 107.245923][ C0] smpboot_thread_fn+0x464/0x820 [ 107.250865][ C0] kthread+0x324/0x3b0 [ 107.254932][ C0] ? cpu_report_death+0x1b0/0x1b0 [ 107.259954][ C0] ? kthread_blkcg+0xd0/0xd0 [ 107.264537][ C0] ret_from_fork+0x1f/0x30 [ 107.269034][ C0] [ 107.271362][ C0] Allocated by task 1550: [ 107.275696][ C0] __kasan_kmalloc+0xd4/0x100 [ 107.280364][ C0] __kmalloc+0x19f/0x330 [ 107.284688][ C0] l2tp_session_create+0x39/0xb60 [ 107.289702][ C0] pppol2tp_connect+0xbf5/0x1640 [ 107.294657][ C0] __sys_connect+0x3ce/0x450 [ 107.299242][ C0] __x64_sys_connect+0x7a/0x90 [ 107.304262][ C0] do_syscall_64+0x31/0x40 [ 107.308671][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 107.314552][ C0] [ 107.316874][ C0] Freed by task 7: [ 107.320587][ C0] kasan_set_track+0x4a/0x70 [ 107.325173][ C0] kasan_set_free_info+0x23/0x40 [ 107.330123][ C0] ____kasan_slab_free+0x125/0x160 [ 107.335234][ C0] __kasan_slab_free+0x11/0x20 [ 107.339987][ C0] slab_free_freelist_hook+0xc5/0x190 [ 107.345355][ C0] kfree+0xc0/0x270 [ 107.349165][ C0] l2tp_session_put+0xb2/0x1a0 [ 107.354016][ C0] l2tp_session_delete+0x3a9/0x4a0 [ 107.359251][ C0] l2tp_tunnel_del_work+0x180/0x3d0 [ 107.364453][ C0] process_one_work+0x6fd/0xbc0 [ 107.369398][ C0] worker_thread+0xa8e/0x13c0 [ 107.374187][ C0] kthread+0x324/0x3b0 [ 107.378260][ C0] ret_from_fork+0x1f/0x30 [ 107.382669][ C0] [ 107.385021][ C0] Last potentially related work creation: [ 107.390753][ C0] kasan_save_stack+0x3a/0x60 [ 107.395424][ C0] __kasan_record_aux_stack+0xd2/0x100 [ 107.400880][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 107.406680][ C0] call_rcu+0x11a/0x1090 [ 107.410934][ C0] pppol2tp_release+0x1e3/0x2b0 [ 107.415778][ C0] sock_close+0xb8/0x200 [ 107.420022][ C0] __fput+0x2dc/0x730 [ 107.424106][ C0] ____fput+0x15/0x20 [ 107.428092][ C0] task_work_run+0x127/0x190 [ 107.432674][ C0] exit_to_user_mode_loop+0xcb/0xe0 [ 107.438129][ C0] exit_to_user_mode_prepare+0x76/0xa0 [ 107.443581][ C0] syscall_exit_to_user_mode+0x1d/0x40 [ 107.449032][ C0] do_syscall_64+0x3d/0x40 [ 107.453553][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 107.459517][ C0] [ 107.461840][ C0] The buggy address belongs to the object at ffff88810bf2d800 [ 107.461840][ C0] which belongs to the cache kmalloc-512 of size 512 [ 107.476180][ C0] The buggy address is located 400 bytes inside of [ 107.476180][ C0] 512-byte region [ffff88810bf2d800, ffff88810bf2da00) [ 107.489645][ C0] The buggy address belongs to the page: [ 107.495295][ C0] page:ffffea00042fcb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10bf2c [ 107.505614][ C0] head:ffffea00042fcb00 order:2 compound_mapcount:0 compound_pincount:0 [ 107.514057][ C0] flags: 0x4000000000010200(slab|head) [ 107.519535][ C0] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 107.528124][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 107.536890][ C0] page dumped because: kasan: bad access detected [ 107.543467][ C0] page_owner tracks the page as allocated [ 107.549186][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, ts 21420187047, free_ts 21348686138 [ 107.568655][ C0] prep_new_page+0x176/0x190 [ 107.573257][ C0] get_page_from_freelist+0x225f/0x23f0 [ 107.578796][ C0] __alloc_pages_nodemask+0x29a/0x640 [ 107.584254][ C0] new_slab+0x84/0x3f0 [ 107.588317][ C0] ___slab_alloc+0x2f8/0x4c0 [ 107.592905][ C0] __slab_alloc+0x63/0xa0 [ 107.597312][ C0] __kmalloc_track_caller+0x1e4/0x310 [ 107.603197][ C0] __alloc_skb+0xdc/0x520 [ 107.607517][ C0] netlink_sendmsg+0x693/0xb70 [ 107.612297][ C0] __sys_sendto+0x467/0x620 [ 107.616795][ C0] __x64_sys_sendto+0xe5/0x100 [ 107.621551][ C0] do_syscall_64+0x31/0x40 [ 107.625960][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 107.631838][ C0] page last free stack trace: [ 107.636690][ C0] __free_pages_ok+0x80b/0x830 [ 107.641447][ C0] __free_pages+0xd8/0x390 [ 107.645939][ C0] __free_slab+0xcf/0x190 [ 107.650261][ C0] unfreeze_partials+0x150/0x180 [ 107.655190][ C0] put_cpu_partial+0xc1/0x180 [ 107.659859][ C0] __slab_free+0x2c9/0x3a0 [ 107.664274][ C0] ___cache_free+0x10e/0x130 [ 107.668855][ C0] qlink_free+0x50/0x90 [ 107.673000][ C0] qlist_free_all+0x5f/0xb0 [ 107.677497][ C0] kasan_quarantine_reduce+0x14a/0x160 [ 107.682944][ C0] __kasan_slab_alloc+0x2f/0xe0 [ 107.687782][ C0] slab_post_alloc_hook+0x5d/0x2f0 [ 107.692891][ C0] kmem_cache_alloc+0x15a/0x2d0 [ 107.697728][ C0] sock_alloc_inode+0x1b/0xb0 [ 107.702394][ C0] new_inode_pseudo+0x62/0x210 [ 107.707411][ C0] __sock_create+0x12c/0x770 [ 107.712168][ C0] [ 107.714500][ C0] Memory state around the buggy address: [ 107.720145][ C0] ffff88810bf2d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.728212][ C0] ffff88810bf2d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.736443][ C0] >ffff88810bf2d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.744493][ C0] ^ [ 107.749250][ C0] ffff88810bf2da00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 107.757480][ C0] ffff88810bf2da80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 107.765616][ C0] ================================================================== [ 107.773754][ C0] Disabling lock debugging due to kernel taint [ 107.780644][ T676] usb 5-1: Product: syz [ 107.786783][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 107.786791][ T25] usb 1-1: SerialNumber: syz [ 107.786804][ T24] audit: type=1400 audit(1786004899.310:697): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 107.792959][ T676] usb 5-1: Manufacturer: syz [ 107.799755][ T24] audit: type=1400 audit(1786004899.310:698): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.820211][ T676] usb 5-1: SerialNumber: syz [ 107.845522][ T1536] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 107.853121][ T24] audit: type=1400 audit(1786004899.310:699): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.879488][ T24] audit: type=1400 audit(1786004899.310:700): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.900329][ T24] audit: type=1400 audit(1786004899.310:701): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.920925][ T24] audit: type=1400 audit(1786004899.310:702): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.943928][ T20] usb 3-1: device descriptor read/64, error -71 [ 107.950213][ T24] audit: type=1400 audit(1786004899.310:703): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.062040][ T473] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 108.069853][ T20] usb usb3-port1: attempt power cycle [ 108.112165][ T25] cdc_ncm 1-1:1.0: bind() failure [ 108.118255][ T25] cdc_ncm 1-1:1.1: bind() failure [ 108.125141][ T25] usb 1-1: USB disconnect, device number 6 [ 108.162054][ T473] usb 2-1: Using ep0 maxpacket: 8 [ 108.195966][ T1554] F2FS-fs (loop5): invalid crc value [ 108.202291][ T473] usb 2-1: too many configurations: 233, using maximum allowed: 8 [ 108.211524][ T1554] F2FS-fs (loop5): Found nat_bits in checkpoint [ 108.234584][ T1554] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 108.242706][ T1554] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753 [ 108.253747][ T24] audit: type=1400 audit(1786004899.770:704): avc: denied { mounton } for pid=1553 comm="syz.5.284" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 108.253881][ T1554] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 108.287522][ T491] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 108.287530][ T491] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 108.295225][ T491] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 108.323232][ T491] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 108.330861][ T491] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 108.338845][ T491] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 108.347614][ T473] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 108.355975][ T491] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 108.362857][ T473] usb 2-1: can't read configurations, error -61 [ 108.363105][ T491] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 108.376844][ T491] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 108.384403][ T491] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 108.512069][ T473] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 108.622082][ T473] usb 2-1: Using ep0 maxpacket: 8 [ 108.662107][ T473] usb 2-1: too many configurations: 233, using maximum allowed: 8 [ 108.782133][ T473] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 108.789976][ T473] usb 2-1: can't read configurations, error -61 [ 108.796599][ T473] usb usb2-port1: unable to enumerate USB device [ 109.140964][ T991] print_req_error: 275 callbacks suppressed [ 109.140979][ T991] blk_update_request: I/O error, dev loop4, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 109.168708][ T956] blk_update_request: I/O error, dev loop4, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 109.182969][ T994] blk_update_request: I/O error, dev loop4, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 109.192104][ T956] blk_update_request: I/O error, dev loop4, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.209721][ T994] blk_update_request: I/O error, dev loop4, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.212062][ T991] blk_update_request: I/O error, dev loop4, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.221561][ T994] buffer_io_error: 244 callbacks suppressed [ 109.221571][ T994] Buffer I/O error on dev loop4p3, logical block 8, async page read [ 109.246359][ T956] Buffer I/O error on dev loop4p2, logical block 8, async page read [ 109.252030][ T991] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 109.254523][ T956] blk_update_request: I/O error, dev loop4, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.272064][ T991] blk_update_request: I/O error, dev loop4, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.273542][ T676] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 109.292317][ T994] blk_update_request: I/O error, dev loop4, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.302017][ T991] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 109.304059][ T994] Buffer I/O error on dev loop4p3, logical block 9, async page read [ 109.320411][ T994] blk_update_request: I/O error, dev loop4, sector 1010 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.322169][ T956] Buffer I/O error on dev loop4p2, logical block 9, async page read [ 109.331989][ T994] Buffer I/O error on dev loop4p3, logical block 10, async page read [ 109.339773][ T991] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 109.347939][ T676] usb 5-1: unit 5 not found! [ 109.363031][ T994] Buffer I/O error on dev loop4p3, logical block 11, async page read [ 109.371499][ T994] Buffer I/O error on dev loop4p3, logical block 12, async page read [ 109.386845][ T676] usb 5-1: USB disconnect, device number 16