last executing test programs: 3m4.61106772s ago: executing program 32 (id=540): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x20040000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="720d0001", @ANYRES16=r1, @ANYBLOB="000127bd7000fbdbdf2557000000060095000600000006009500fdff00000600950000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x24040085) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 2m10.214526131s ago: executing program 1 (id=971): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x40008) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x800000000000000) 2m10.171212294s ago: executing program 1 (id=972): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x0, 0x16, 0x5, "bca524a6c6"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x20, 0x0, 0x55, "7642fe6c4857ff7d9f25d66707bc9b1609c7c0f3984e1a24bbe1928afdb9bc6dfe79a9a16ff3288514143de80d49cb44cb23035964fbe5e0a2b908cfc6dd13762cf2dec5442917fadea11eb491b3c73c0ca999f763"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x20, 0x0, 0x55, "7642fe6c4857ff7d9f25d66707bc9b1609c7c0f3984e1a24bbe1928afdb9bc6dfe79a9a16ff3288514143de80d49cb44cb23035964fbe5e0a2b908cfc6dd13762cf2dec5442917fadea11eb491b3c73c0ca999f763"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) 2m6.713723393s ago: executing program 1 (id=990): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="20184e00000084341ef0"], 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'pim6reg0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m4.18202748s ago: executing program 1 (id=1005): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000e80)={0x2e8, r2, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2d4, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x114bc0000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x150, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc9, 0x1000, 0xfffc, 0x5, 0x3, 0x7, 0xb0]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x5, 0x7b, 0x5ee, 0x8, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x5, 0x2, 0xff, 0x6, 0x1, 0x5]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x1, 0xd, 0x4, 0x1000, 0x1, 0xfff7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0xf, 0x2, 0x8, 0x8001, 0x81, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xff00, 0x5, 0x8, 0x200, 0xf, 0x9, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x803, 0x3, 0x8000, 0x8001, 0x1, 0xfd8b, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x1, 0xc, 0x24, 0x30, 0x16, 0x18, 0x0, 0x60, 0x3, 0x36, 0x60, 0x48, 0x12, 0x18, 0x1, 0x48, 0x30, 0x1d, 0x3, 0x3, 0x9, 0x5, 0x4b, 0x16, 0x6, 0x18, 0x18]}]}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0xb, 0x40, 0x82d, 0x5, 0x48a, 0xec]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x2}, {0x1, 0x3}, {0x3, 0x3}, {0x3, 0x8}, {0x1, 0x9}, {0x4, 0x4}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x7}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x9}, {0x4, 0x4}, {0x4, 0x5}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x3}, {0x4, 0x4}, {0x2, 0x1}, {0x3, 0x9}, {0x2, 0x3}, {0x4, 0x7}, {0x7, 0x7}, {0x1}, {0x1, 0x1}, {0x3, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x9, 0x1, 0x8, 0x7, 0x1be4, 0xc3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x6, 0x5b1, 0x8, 0xb83, 0xb18, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x5, 0x7, 0x4, 0x7f, 0x4, 0x26b]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xff}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x64}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x2e8}}, 0x48000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000001c00)=ANY=[@ANYBLOB="05000000100c00"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="c51ce70cf6833ad6db083042728e3faf8ada2c84edb79e51a8c07d32570984ded71ceb70bc3d5d8bfb0a0abc47a6f3eda94f7633adfb9feb9e5377555f9ed3af658c58d60d338f2034caf9be7d9895d4672992f3e7ff5575d8ab6452703328937f48f198807479b4a1e99b3cbc5f", @ANYBLOB="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", @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x8}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000108004680002c0000000000069078ac141400ac1e00014404000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000000778fffe6e121fdc46a72b9b4a03abc6e2fa9f37222a36900c8cafccbb805ae6cf0996f93ccfae57605719ff100b205eca475e2a1c6f1d3ce9a9deee4100323a546ec815757382003df0663f938e9d572deb4d07c3e1910a1a7bb4e9f1f9193ff092b143ad9166041354abadda10e5a72a80b91d99bff3e3ef632fa7a8c70e5a859089bac33309d26c43582600567a51825fe00a040046394d8ce29988bd11f9a03af05e56e85f02"], 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)) ptrace$setregs(0xd, r5, 0xce, &(0x7f0000000000)="6bc45f059c3305ae107d707a425d") 2m4.047315968s ago: executing program 1 (id=1007): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00', @ANYRES16=r1], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 2m3.886266667s ago: executing program 1 (id=1011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x700, 0x7800, 0x8, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x3}}}}}}}}}, 0x0) pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast1}}}, 0xbb) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}, 0xc) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000d40)={0x6, {{0x2, 0x4e20, @multicast1}}, 0x1}, 0x90) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="440000000102010100000000000000000a000002300001802c0001"], 0x44}}, 0x0) 2m3.83119427s ago: executing program 33 (id=1011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x700, 0x7800, 0x8, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x3}}}}}}}}}, 0x0) pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast1}}}, 0xbb) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}, 0xc) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000d40)={0x6, {{0x2, 0x4e20, @multicast1}}, 0x1}, 0x90) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="440000000102010100000000000000000a000002300001802c0001"], 0x44}}, 0x0) 1m48.287909698s ago: executing program 0 (id=1132): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x7, 0x4, 0x25cd, 0x1, 0xb1, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x8002, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0xc1, 0x9, 0xf9a2, 0x80000001, 0xff, 0x6, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x23, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0x8, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x4, 0x3, 0xb, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff4, 0x401, 0x46, 0xf1, 0x4, 0x1, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x7, 0x2, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000005, 0x5, 0x5, 0x491, 0x9, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0xa, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100007, 0x2, 0x400, 0x3e55, 0x1, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d2e, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x20008000, 0x3, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfa, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x209, 0x81, 0x3, 0x9d86, 0xf5c, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x3, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32c, 0x3, 0x1ff, 0x2010803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x8, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x5, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x601, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x2804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX, @ANYBLOB=',wfdno=']) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m48.023653683s ago: executing program 0 (id=1135): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=@other={'trylock', ' ', 'none'}, 0xd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1m47.596567357s ago: executing program 0 (id=1139): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000300)) 1m46.619090874s ago: executing program 0 (id=1150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000030c0)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b9b18098b9b4a1b2538181b080d29308f0e1ac6e7149b3468959b189a242a9b3f6d988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e10d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b13a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7cee65802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000500)={[{@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa10408, &(0x7f00000001c0)={[{@nojournal_checksum}, {@dioread_lock}, {@block_validity}, {}, {@noload}, {@inlinecrypt}, {@debug}, {@usrjquota}]}, 0x3, 0x581, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvbJL+1qZQiopIoAcrtZs28UcFwXoULRb0XpdkGmo23ZLdlCYW2h7sxYsUQcSC+Ad491j8B/wrClooUoIevERmM9tsk938XM3W+Xxgsu/NzObNmzfv7Xd2ZpkACmsk+1OKeDFuxddJxOG2ZYORLxxZXm/x8Y2JbEpiaemTP5JI8nmt9ZP89WCeeSEifvky4mRpbbn1+YXpSrWazub50cbM1dH6/MKpyzOVqXQqvTI2Pn72zfGxd95+q2d1fe3CX999fP+Ds18dX/z2p4dH7iZxLg7ly9rrsQO32jMjMZLvk6E4t2rFMz0orJ8ku70BbMtA3s+HIhsDDsdA3uuB/7+bEbEEFFSi/0NBteKA1rl9j86DnxmP3l8+AVpb/8Hl70ZiX/Pc6MBi8tSZUXa+O9yD8rMyfv793t1sim7fQwwsv9zsQXkALbduR8TpwcG141+Sj3/bd7r55fH6VpdRtM8f2E33s/jn9U7xT+lJ/BMd4p+DHfrudmzc/0sPe1BMV1n8927H+PfJ0DU8kOeea8Z8Q8mly9X0dEQ8HxEnYmhvll/ves7ZxQdL3Za1x3/ZlJXfigXz7Xg4uPfp90xWGpWd1Lndo9sRL63Ev0msGf/3NWPd1e2f7Y8LmyzjWHrvlW7LNq5/u95HwEs/Rrzasf1Xrmgl61+fHG0eD6Oto2KtP+8c+7Vb+Vurf+9l7X9g/foPJ+3Xa+tbL+OHfX+n3ZZt9/jfk3zaTO/J512vNBqzZyL2JB+tnT+28t5WvrV+Vv8Tx9cf/zod//sj4rNN1v/O0TtdV+2H9p/cUvtvPfHgwy++71b+5tr/jWbqRD5nM+PfZjdwJ/sOAAAAAAAA+k0pIg5FUio/SZdK5fLy/R1H40CpWqs3Tl6qzV2ZjOZvZYdjqNS60n04vx8i8vsfhtvujxhblR+PiCMR8c3A/ma+PFGrTu525QEAAAAAAAAAAAAAAAAAAKBPHOzy+//Mb83nTh3a5S0E/lUe+Q3FtWH/78WTnoC+5PMfiqtL/zcsQAHo6FBc+j8Ul/4PxaX/Q3Hp/1Bc+j8AAAAAAAAAAAAAAAAAAAAAAAAAAAD01IXz57NpafHxjYksP3ltfm66du3UZFqfLs/MTZQnarNXy1O12lQ1LU/UZjb6f9Va7eqZsZi7PtpI643R+vzCxZna3JXGxcszlan0Yjr0n9QKAAAAAAAAAAAAAAAAAAAAni31+YXpSrWazkp0TbwXu70Zn7+8k7cnnVs5aavgsm0VMdgvzdQ/iYF8f/bL9mwrsYuDEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs8k8AAAD//xJaL7k=") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) fsetxattr$security_capability(r3, &(0x7f0000000080), 0x0, 0x0, 0x2) r5 = dup(r0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000104355810700000000000109022400010000000009040000020300000009210400710122050009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0x9}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f0000000640), 0x8, 0x4d, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000800000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_usb_control_io(r7, &(0x7f0000000240)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="401805"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000071102d00000000009500000000000000d35cb31bfd5a0423621faa6735da73d88960756bb6e08b35878e99c4af0a55bba9e48a9fdd596e381e8bd32c4d60e8772fac2b879313a9b563c0ca896d4d153f7b3836aab479a41b93a2675bb3a3ffc7e8c27d0b668190648f2dc081d13812623fd9170fd8e04914aae418c26583e5c4381c5ffd4828bddcafa3b77a0e"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000040)=0x1) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004fff5"], 0xfdef) 1m44.176908105s ago: executing program 0 (id=1167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x30) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x20000000, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x5, r5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pread64(r2, &(0x7f0000001440)=""/123, 0x7b, 0x841) close(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000500)={@private2}, &(0x7f0000000540)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f00000005c0)=""/73, 0x29, 0x49, 0x1, 0x7, 0x10000}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa1e2fd22ecd4da32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x600, 0x0) 1m44.013415704s ago: executing program 0 (id=1169): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000400)={0xa, 0xfffd, 0x0, @empty, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1m43.962141447s ago: executing program 34 (id=1169): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000400)={0xa, 0xfffd, 0x0, @empty, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1m28.212415646s ago: executing program 6 (id=1307): r0 = fsopen(&(0x7f0000000140)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='_\xfa\x8f\x9f\x00', 0x0) 1m28.212210347s ago: executing program 6 (id=1308): r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m27.169760166s ago: executing program 6 (id=1311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x1d8, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x2, 0xe1ad, 0xe703, 0x4, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) flistxattr(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000193000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000240)="3e440f30c48251df5fd0bbfdffffffab40c81838003ef33e2e0f01f8c4c26d9aa9070000000fc71b440f784f0b0f20a3", 0x30}], 0x1, 0x4e, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/198, 0xc6}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000700)=""/68, 0x44}], 0x5, &(0x7f0000000580)=""/64, 0x40}}], 0x1, 0x2002, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) 1m26.25381774s ago: executing program 6 (id=1315): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x4) mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x10, 0x4000, 0x4000) 1m26.212600842s ago: executing program 6 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 1m26.138508376s ago: executing program 6 (id=1317): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0}) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0xff, "66226d0245e874547b346cea45be9847576b5e1d1a96d134064b8df59702c4e6d04adada32c1e452f3323a2d14fffb991bbdc89e43d2c86ff455ae7ae6300cc1"}) 1m26.138043557s ago: executing program 35 (id=1317): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0}) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0xff, "66226d0245e874547b346cea45be9847576b5e1d1a96d134064b8df59702c4e6d04adada32c1e452f3323a2d14fffb991bbdc89e43d2c86ff455ae7ae6300cc1"}) 35.571086916s ago: executing program 2 (id=1682): r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xb0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000f0000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) 34.656197359s ago: executing program 2 (id=1689): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x3ba) 34.600992732s ago: executing program 2 (id=1690): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000400000000000000071120e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.519294597s ago: executing program 2 (id=1691): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) r0 = openat(0xffffffffffffff9c, 0x0, 0x143, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(0x0, 0x2) 34.440006971s ago: executing program 2 (id=1692): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000000c0)={[{@auto_da_alloc}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}], [{@subj_type={'subj_type', 0x3d, '!\\+(^)+*'}}, {@uid_gt={'uid>', r0}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r1 = open(&(0x7f0000000000)='./file1\x00', 0x4787e, 0x0) write$UHID_INPUT(r1, &(0x7f0000001740)={0x8, {"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", 0x1000}}, 0x1006) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002100)="5f52e3f5466a51c50bcea9d182b00c6f6f5781caf10e9ae81d131782e529f24cf979da2e9545ef59e03bf3f39f22309dc3a33af3b73c20ffe6a3275996cfcfe5d7456addd7b8e09c4e7f2a163b74a6c7c37985c28c77f1f49790937ca86f372a1dc46024d5df18935fee104c30ec343276369b99bcb80776b922793d015da5fec38bb682117fb7b800250c0641db1e98aa57f268cabb3a069bc871fdc13528608e682801f3e40134e3ad1a9485a9fe1a20280f7df34d78dd7d3a198ff22c89df497086c552fab725d4e5cb8da4662444ccedbb40ce5eaa39078be0249b2c046b5b0e9af0bde9e1928744dbaf7d49662b98976131b5d0306602172c4fd900f3b9f4d88ba04cd4479872aecdfb00cb10726bc49ffff0e9d3bf023eba93852846d476f8979f7cf64d45115ef83f01dccae07dca79511d510512506470b838e67dadb66441c65ec814905b42ad194b28062429aaa3a57dcdc02e694e2eb49c20d1b6cdc35ef19837ab25cf9a6104ca84018c34072bcd32e68b6a87490a7070484944307a42a7be819c1dd34b3a50e430219c39101f7bb8850d3897e4ee3905b500ee2d44a7ef69f0489970bd104a5f4e1e529f4a8f62e95a36886ba1ec4b0ad8269d61426f779bfa77ad32764204d10f4747a8395968223c383e4efbd065f7c76e13f61753e14cf1a166cb72b06bea8b1258a2c72d8805f43f20ae2446068523617da4a26aa0e076ffb8d5788d8e8178de93c7c3ba251a7948df2146ef4519c80a11eaf450ec0d37b5262fd0b2c551e70a6ac342945f13c95267b892233d7b8a19ff3dd19a7d6072b5bfed75347d01317dcaa06ddc84f384eeecee33947ebd4b0366770da0ea0fcf92cbfd1220b064a890400e4f8e4fff321fc939e71c462dbcd1fb050e35c01221406ca67b3ca992a0e50de86a6df9e4de8182c0faa4d01fb415f8e1a3edf63498215bb8c1fb29adac7cc367b20634675be4e02a033ab9ba97783b16006f644202ee95777cee1d373e0b9cd4fddb2c2fa27031cfabb44462760d0ad25ebc6be7d9f438635a011141165f196ae9801d9c87f73c2e3d7071a113eba1c1cbc9206d062923cec9b8cbb0833e81a5b4205ded59537cf2ef077fba0a5827034e880d20d29e1dc5ecd393ab3d0cd7ffa5341e4ab770bdb20ff44df1565266795e335148f45cdaab9441a187e2b6b1969e03504d91d9b8d619c50d7ef5ea71a32b0e28583b1c619abc2f944acebe6e2a160c91d3e38f940ab8a6a5d8ab7d0638a6ef0b464d77312832271d22f89d4ec57e5f5312173490d016337590104e9c722a31cbc1f86fdcc56e14f0f925d93fa385486bc4f4c78aaae776974a7f624a87c6a39f6c1280b47a8b07053dbb23ad4342cda14bcd6c76de82ec5e6581833b1616a49aadccbf447c09fb99748312461af1da74f0f5128c1d529307c641048c5d12d8e90de52167fa3f87cfc0bf668beb502db27ba38f94c5ba14c3a3d6219fc4152bbb58650685f335f4d88f015100605cb6ab495810ec189552cb5a1a5103ee5286810feb1d3c30627bdfd904aff52ea6e6384588150bfff29ac7c4e85f5b54003ee4c64c49ae3064a846865c88b1345d5129a2a11b3ea78901485d54dfa8627b0219c88909be65bc7df88de3154049cc0502d498b430c34b6fa2a83cf8da2060fbc0c5c7d62106059435a60ddbee0a4fae2550b0e55d1059ecd13cfc8c514c446f583a56c0c49dca97da40dbbf719a1515a3d18cdcba9b96d135c20fb628bb7903e0c38b3a12f11b2c7fff4a8f6ca6831089792e4e803f21da1b4e8a7cf4ea08e80e0d1250cb4e187c41b343056c3f64463f44f2c54b6b35f8416639fb7c8c5bb56fb46a390611b3d84c01ae72f69da0415b5dc996d630a77a564f9c0c245e1cc89e853e9173471aa694e1b933bbec6e6f230907284c79a0d41cf3c5a571c0f7c7533f6eabe3d5b8bd4b4b026a050f745e2c3d19c83c9e38e46351de848b00bd6a71fb41bee02a7a1dac866a2bde4d97994dd13946bbcd5a096f4edf4a8e9f7d1d4ef7317360c404ecf6845fee8f7923b048519f7fad3bcb12132a907e7e19187807606d1180193fee369ffa6ab66759d5433bc9ebca7c436f7085bde1f71789215cf049bd04ecc2b4f42e5f5d7ca61acc15f7f71c0b292490bc904ee70196d84fd282e80b14ee5312d44127c920793373ac03d49cfab2c4b0c7c0168d8c32e303b252c5a63fd6723a36fd8ae63fbf5afc003d21e01889fe123dce85ea890c413aee271d0d13e02c41efda61e326163991b89397caafc6db216dd6e64690cec5587d082a6f238b007094dc595091c2edaa42f6ce03709eea7b61226da22e1a3b2fb791449ebb7292117365a3dee4e8b768b3ca0b2ed7767d4677c6d76d1a31d418a939ef75771e493ae274fed5783585b563d60d3c72525fccb1dfe3ba428fb80876959b4db011e411996fb242b2db6b411aa97babb90a1b884b8a7fa3cd316a739ecc45875186fa3bfc549bfe2bc41c8cf6f4a579814f5b645d31263a7edca1db92dcce192210be5937c96b3cf15045fda08367461b6ddb254ed0cd781664e98bae03c39939c44a9ff0a2808727a24886d43f2e7f41d6a8a8fc46b4b2a1b8c23ac08c7834d133b57e11885ef2900d1dcbb31d769e4c35ba488f795656ce2ffe479ecae46319c7421dd4b0db5285f515049d6fcd76da588442d7cdd8d6dded775d5fac2fd5152476377d1094633fce5b968d80281acf63ece8601071c73d01b056edf25c7f75f11d112731fa935a89a0f722b1613bef17f3662da71a6f9570fcd8f4d282f1112a10ab17b349e9cab7eee4468f5dd8ece8f6476377f33d427046dc3d5b685cd63427c70fb5b65ef064cbb744d8130155ab906a8adc9e2a9da8e26b842767063e853c52e9bc20b5b3a28cea2c315c7c54ed23d183c848e9560ac84c5e0e95e8605b5b11c5493b84e06f3a2cc777ef8d157d34ba25ae83789fb1c3a4761efc326b038a9dd65ca43058bb85d831b7a9835ef6c4710e5f6f5f88685cef4d9c288a8d9f478e89b74376cf01a3ab4a7367de16de7809deeb3e678469f8c85763150d4d4d93bb4061b3179637ea789b808c475e1336b40502fa1d7081094abdab8d3bfbfca5dcc2c2f498dd769268ea85bc0b4650128ae70d778b621fe11e004c2085c6ef88874387f8ac31831a3ecec3d6f390fba571cd8455780305e6a5768a2e194b7efa69ac0656d825fad8faa649893fd2547a9e8ee723d090c57d75f1334e8b1f9fe573de88b1175f225e46429263da589e51ed32cd7763456baa027fc87f0c8e38ffbc41360bfbc5c14be3f6dab94ef27be3a79c44ec08b54ae2d9f90dff40140fb8310ec0acaf3cbb3eba981c987d82c768e8cefd96220cfa9718b400d0cb931c4ffb3b799c60b0cd66fd72b5e243f768c4965f572f5adbb88d51af0d0ca1a3607d68ab5e73660accefcd0786e357e3f5f69001f41354d05971aa0413b55e7b1491483c63f48b2b8d4cbc67334ada71b64434561918c2c7dcbe3133cee8d6d3886de73bc260fd8078247f8dcdc3fbde4b325f551b5ed699a9e17aebfe98ec180632228262e795475f9c74269ea5fe7d37675a791dcd94d9d550c6ec03c9fe30f065a1d0897b7d5931bd9f26526e3da21305131af9f847875bfb5219c4837404694a69a17bb6421a3450f192dda16bf58480623335734e6b0b9e893e5e3690821a43f35d52a3dd6c800226b10d0e54eba47a420dadea4a571f27c3e10022d703bf1a52a4efb249c599e5c34a117c25b9b6eed3c38362f36a791ac40b079d439e537a8ae09adb10c915e555c99e9b211ed71aa2162fd61218ce7166ec04b94f5b6d93cceca5246c105531a361ad9613543f869fa8abc37df4877c995990bdd77ab844ceec998fe8c46b8809a49aadfeb44b924bd37a2ae46679407ce2a3db1048710672c00932f40d83217cfb7846f6ff4fba38257c80571650a9591fb4daa1fa2214291d6eb6ab0b6c3e3a4ba90e0f4f437a4daf4814dd9d3b4fbdec47d8352d2a9b489a13a52acaa29aca15f0b81370aada17edf7f4ba4801d9c67cc0f7eceaefed2c698a0d9948430645d2c79d09e5fcb9d2db802333a3eaf6f35aff982ef4d11758cbbfc54a6db566695545da7b7555ac4c201c52f8b5709b658cca1e0b5eb8722f09ce7e27b5b65c109ec55690be82fb16cecca3905aabeedf62c9dfaf31d6082963c3df13ce5788098284813b16c45661ca83c83167a76ee5a432792a2fa43bc119450c744b5a84ef4f3cd3b5403f4fa4251cf36ba051bc3717b03b505e31b43ea946e135b156464702c5fbbe063f010866d45e024d7f2d2690b0d7c10b9197f69c1a07abe5620d118d698e4b573f576a4336307d87c99d7108347fe298bc2bb6100f459455c2badd8baf42b6815f8af063f9e93ed3ac1d86c8aedcd01aa2cd5c79d58c3b19e475ff6522bf7424514a674a361ee76e9809f2489bc6cefa4a9d895b56fe7d6461891d46c93c3b41f9e43252c3064da668087f2ed8badfe4bfbe4dc8d65e6c2c05612e432d35138fde1ba6657d1de93353409b6ed555d8aa0275586972aa10115dd29fed701eca54ac1916d74e0d3733f51a690aa45b85fa3016fa507ccd8dca4c6bb8f7205832e01d78ff457b3877ee651e90f7ed7f7209bac92f3f012cbd8086a686d6b2d25a2779d4ca6e8058f90322bc324cbb14562c990ceead8b416f587e228fd427c32b01913140a26098fb3362fc66a14a4108049c0e4303d21ef5e80fd2410cb533332d2a07fe313af3ac0d963e9d8167bf8b2787d14afa96edf7c2f52818ff0fa4dc1fd4dbf3d9fa2da28bc33e95b440c3ba97387b68d500e22953add2559c57ab151175984dd16f349bb9b31f76641eff6966dc427e45f7edd0f040321e6fe6eb2a89bfd7ac44bc90a76e05ccddef3a191f037d0b84317216652d399912630cdf3ad463d450d98ca54dfa08502d9f869f129c6b04e4d59c987bec995e6faee520d1daa77d3717a37482fd66b2f882152bb6eb534d82cec4a2ed2e4b76bd554d7d3ef405d197fce29286696f660950b562043030a2378e4d9326508b2c3fb7cdf72b1b82fad67176bca817c664c6c24d51f2d03c524a85aed4e356b8514ba2750081475340345ff73ebf47a547e9f248059265e169b1441270a50354de40627c25c5ca298f381f58993b76ef1cb9c8d6d0b06db7cb770ee1a5120598d4cbff428c1afaeea2be9e067e69f3f01eda891b3943d23c2ba85c17048a5d7491aa25a7d480c9f0cda6782f36c17d0dc7fbcc4cb706cd571b5181d1f8aa8be30532ffaeaf3d714ee455bb4f5a85fd372ce1ae29dad98572ed30a7d70a09ae842597f6dcc1e00b809e56a8dce93ee3f5188c4768c4049199f4450d7510a0885f94f525b829bb9507f9b3ffebaed5416ee6e593ab2527406a5d3a0aa6f2a3e43c0e53796e80b6b04a4779859c84c71b6bf536e41253f15c327d4b533f0487f5837e5ce71a803210483c98c6bd26c3497448493822e70a3c11837f358bb5be46ee2c1d9cc4a22d0b39acd7329c0c73c8bf872afc77d3515ed7183dc460c7f1ba997ff0e08b02d2419ff76ed7a6ddd87401ff7616404b90b60832a691bcfb6779c6322b90bd4f666dda3a5de350c412209c111211e533fc079b3bc73c6526f8b7a625c60a7128d7daa84af54bae73836dc979b972c2684676ecb6ba559d79ad32cf8dc839593fec4e1dbfbea0db73c3bdcdfa89b6f54627bd4effe34e96add97f1614887333934ec3684539029e1d7ea6553c84303fd82d38a08c2a251650dc0fdb814af172e6fa8b15bb37c7aff3ecac3569aed919801c22b52f1d161d1771607adaa41c04e42d98d96994efc8c102eea87b017113d16b855eca0a5c69ab540ebf329d96b660dc0f0da97f61c7121e2dacf77cd2fec9d35eae703a25c6c25dfff4fe3ef8f3a2eed359ad8ab38109deb71f60413e327ed20f94ea7c1cac8a3391c64da1eb17c292e4f73d929dcf7c420dc0af2473964fb448d78b7e6f53f5c767ffdd748f37abfe2697d35a1fd5a19de7d35fee9cdb21968ea61f58d6f1c1781c429578fcfedd623518aa54c0d4076d9e51aa17e4729c11287ac51cd6a566d1374e781f318a750f178af4771384572ae64611e0d52a3960a5dfb9c70bfa49a862ac873c32df7d497b1cf5477a809b4d133bbc2f74cc4c6c6d7846630ed1b9a271d1cc608a9bf98c9cc00cd7f9ff5cfa677907220ce00875c78d1f770aff684a61839da1b99bce66737e11caf60b3fedc3f5a5c549bcdea1476d48b325546bf75a3c0071ea53b5791da628f5d7aa8ddec8f42be2514be5ff2050a500c9b808ff61367b485cbe648f1b4b2cb03a436fd3a8d90f86c4d321fea46877721e538dc23039dd4ce916c45bedf4aebe1b7bc6be86ef29d9eb62880ad53ed498bbe6c75b3667c440799ead62368614f7ffb4ca357a1bb8abb8478f946b68be3b11bc3b8033d17c3bd433d90aeb63d7a86c9ab7876d48618a0564877daa535231dd397c0fd00c0c1c51fd011409f0d505757e7eb672db66faff9b26f33532d74be5f42ecd1da103f688b3b89b892c37e63f829577706b5b8256d0c2b7da9ca45a6da6d9db107b027a56a02eccde0cc72115277d0f9f9e07cde191c80606ffa937e046e74ec8443f97382fb769b603a40f621940182cc4ebda8a6b6fd72f4dc33e13ee1bed59a29847e736797ed98ae594c88bbaf6a7dd37ec5b2d29e9eee6568919e5987e93da77a63c24b0300c4de7d83a3171bb6e28b6b04ab2e922095e2fd384ded9c5b2852d22cd8e515c6482c88819c4c57e7a96a80273f870bdf6200331a389e75bfbc8bda4c27bda748ba8fb5c0a8dff4840e3f5f0d123e822e177e247fb62611f864bbdf0c1b063ad147ead71067ed664e22ffaa8f7739490ba2948abf637f79af8085462f9dcfe5c0ce087971fed61cc1ec8b8e76925c5e1164f480d8ba553ccc6e88b8c0dccdfda42cf13b7dfc5d0bf21225bd7a49000d4ac98d3d21c5fd0dfbc27da3aad5edb4423fb4724b87b94fb898573b363859b24e2fd66b3e11cbcb2e9f924757584f80c973b24bd3e6fe9836660c5a528efab400cf801ef9331d51b7a447ef1882a939d6800b04c9459d35b7338a0c0631ac5f79d54000d2da628ccf86f99a103ff2c07c93254067d11bda1bade687f6db28e72ad0983924022c327b5f5de04c0d7888c0823d13d74135c90340b4e8278e4797edc021b19af985030821e2fdf06957fd6168f35fdc3c220e80eb025a9534aba38ebe9166958cdd90dcba6707446a5d6ca16cf204760c06c72b6b1b30ca988706ac4ca1b98545b6d959e9b038c1b422fb144eef8b5a7432dc115277390f195498a2d9400f0f15bd4a0cc2d3eadd5a6a409c4819d49519a1542bb2221d9d5d3521076fa472c19e649b29c8d7bfc671c20255119e3a53576932c1d447c7b46383bd2a83b969263174afafe68da1b4557bc894dd31a1716114075b981125f825031999c123891937ca79ba0b3cfd8ef1b847cfa426463266ebe5590e34a230c72d75b548c7167f599ff164453254fb5e63067fc929e4b1dfa196b04ece23a31eac176725fadeb230d91ef6babb28ba6281486cbc3db564b2054bf5839ce7992f0b889344663badb9c88d26e3cd2f238a5a71ebbb4722f2e1e4c54a374a9e36cb762cdeb1900c4d1471c683a7456768884fdfb12bf27262654a4ae78948bd4b0036410282635f4170962b30cd217354154425e08db06066fc7c0b7d0c6d5362169365f320d2d948049350e4a0f841bb6d42f5ef0fd92671a7ab3687a5474e4212cfd37759a266f4b89435914a9d18a4726137da1bcf3755834d76b1c5a407eab462b682120a63676e6f1fc9c94bbbfbe5d945495e336f00d287730201467335e8b3f667961f5457fe220a84eb559bfa7057f6f967949b0d6de1d657609f84e3f61273c5ffe81327cf21693af82de6a64c5872a7722ac4244f66805280b6b15a66c1fb2daccd008fd74ed4c2ef1dad179bef881bb884ce1cb983e42b1d6bc40a4c61854283e46b351f245014a827969bbf5436bf0bc5775d82dd8507489f6ce5a0102d9fe2ed9d6be768427cda773926a2fd97ba05e23f9b737f27164317c6b7ffb8d2e481f445ed449d48b5e403a1cdbf7344c2e53558d55edbbebc0fe1c2ea3263ef4280c96e7c3870f51037de1902751de41256e4fceb3784a59808839c21f90b04112a1ade4d02cd5a4995a0815244f4ff0eabf6af8d08c29ad1fbe6e9192106e0b4fdd104fd656da13be9c10ce4f7eb0917f5d072bbc130e3deccb309ff8e3d728ab2c0badc821d81bce50243ea5fbea741079159843bd68d014c1e260bb955f233cafb43fbeeb9108b9f8e45b302be81af53e2ff776bcc97e307815e744511a4c0e2df0427bcaae8295d7257127d52d15e6c68a64ae6a5d49ee2cbcab537c6bb6ca9da77b826a1d43fc26159df66f87ce9dd98524f71235dc609b21058222b90ec10418ff953f0a60ad3724b410261a48e2ba4e737c219d78000724a7d43dc41f662f1726d57156f6601675a4b2a02251b35032bc3b673687e58e5292948c6106675b6266d8162c572c98bd7a1761efb91c18a81cac90e4a56a6f902a7f5baf82fd1753eb41059a74bca4d92465c26e5f08e2442aca89be5468338032fb4cb6252ba6cd52b4ff6c23e6bd5578c60c6179e49ea264e1a08df4760ecfcf84d1640c95b7af8b7f35ba0564cf81a0be50eaf507739fc167351cb21c202b42e67091627bea84afda966418338938bcecc4c0b0c658ddc6209830258b8e2564d34e118d1368f90756c4fd0ccbcc972170dba7e2d876dfeb71ea6f464f683cbc091622629a6ee28298e45f64ce3a6d9ac47aa474970ee6e498d481bb366978c87a287b4287296ea065c223e7fb7971df9d18a9b5dcbea4ef54adc1cb7f57e5d0a6b57a207f8d26f033bf8e032f5820bcc26d0802658b541a9eca879088a8043d76a48f37d861777d65811c42e6a58c6c21b4a8ded552a4a8d9fdf15b73d9d27d4aa3b6976b9fc907b2dadbc1d24ac3a883d98ddb937b7580cbff59edac20807408764d731b92827391b644264f7f24f41fd4c14ecbffaf8017a8e2dac3d36113b12c5b39d218c376174249da4e2def7ac1960111c0831640c2e8d451e36429319fc4ec6bddd105a6e8f9b4fe75afcccb60bdc3220728003cc5bf9512cead2d52b7cfffe4928cb69ed603f3293e33c36ce7f23117a1ca66583f62628fdde322b2ebdec7b2a2875161ae475617925cdb9f9ea83e6109118d1c0ac20b1214b824c45c08ce73528339265a72f1bef195f4dc402e8318fa05b21e03699cef9f505ea3df7b7cca067d8bea59a82b34c8ac5c156490ed72f227d5f49f03fa1c4a0a4d60aae6d40e0ded79791930f35272e87d851e6df469e79d5c046fe962c05024dc5734e5e0f536f6e24d96f7568586699b97d6f8306a8bc3ae2f03755caf95e0a9a34fce56bf651febf185b21d9f7e9df7c6d5208c641b17438e00d697b20dcf5febc777bc2db88dd5ca402f0cbb0e39dcef3d003dd10a8035e74675ee2b0d457f509cc4ca58d9b6b47f727fc4fae24f4eeca2a1c50658314e1dd3f3b610496976a9dd7954ad02257940efa37a961915a00f76ac8f8d0a804d71fadf6ce1a5b8c1aeeeaf3551ca0219e4e108cfd7dfabd995a003eba7ea326eab11cab840262e51fef362901d86dc884b0363cd6b2a0deb231d83f013d8ec6123bedb64629e4075d73ddfd2759c61c73ab6c2ebf596bbeaea79539bb0cdb1ddcd27dbfb73a957b9233a998e74f70e8e8fc4feed911971e19ec53ce846818b1080171e88de2d8aa6113b663008cc024114b020b84355214cca58f7ac2c120ac7c4ee770e9078511b42698bb7f703e51ff569db9869fcd178e3c4555350a82d0ea0ca9a1db8db8eade5668b7458638df3c79e8b9b3daa31399e245e1396588837cc28545a87cd4363ff18fedb971f1ba765601dce053d38e43740df8b153018663c29c3f55efb42473fd362176d5f1026356baedee2917283216cb1d13c79cb3fdea3771a9e840dfe90659fe87e34a0d045af05f3f673e99a39f0247931e8ec35c7ad66f2ab4e4cbfd601e436929a2a4e106a14f3f7be79e0137f7c41db87297dd2fdc1d5ffadba8046f347c7ee3307d8373f1899ed089e34f952beb18879a92c92f961ed8ce17814c01a4106efc30c756a294353518b8a9f0aa129d82230a1f7e018aa3d034da282f7b02c06ba1a8b83e1f5e2c98079f5d63aaf5ef59f955fea8edfcb9ce98ed828acc9a54a8a478a7aa598201fa322772684dd96f6ff1c12bcf73cfb3a311e53d5886d7b1e78b5437abc7f45f3d825c409391fa462f6ae62aaa73cf7cfdbd49d23abaffd0c43a206e3a76c357f0397d8328540103321ed95f86cab59d9eb2710c220e6370aabf32e4ab15d6771fceed2f9a1322aa640af82bea43965153c60e99378b244d27b57622c256b28fc0cc1ee5b358391714112e89b48f0d7f698af7f28cec3b4cd0bdda00e5fdacd98b5ab8750204adfefb120a2b2ea01f858bf1b5a9c275be2db376502f52ff5c6cc1799cc9b31440a55dfdb253034468da5f1910161ddea749e7583f7dcada3039fd3be388dfb4a4cdcd36cf859aabcf15573d8321911d33dd3edae24efae8dcc5db65a7077ede9b1ebcc15580b92c321fe4d2ec98862ea0d9fc2025e276c17f53e8f526b1e2d7f1aa830827d0868348dd66b29410773c4d79c66dcce581383d461cbac4c81e801024db571b1a6ad4189ee5b9245bd9911b46997aee05c96f74697831d60afe77ef9cd63342afa7306b7ef3e4051d2129f0dc1c55c57e81ec1076a53754421d3573e590294be9e55e96087f84e082e2f989bffd052381e06f6ceb9880a33a1948095f147d61c7eb2d6f56b1dc2a917b5bf335d2351f1e861eff5efcca8b6938c4cd514c4249bc9a295e8721b6459a39d167a9cef092a369b493985646b7114e0592b50259f01cad96f79034d8e3f7f8043113a10da443099c355de5e110c2c6bcf84c64c97dbb7e80f7a583f2e6e31912ff0a0afd88bc234d516728ad7ced32a8bc330d064fa3e3f1754f88c32d562cf5986d4c3bb065efe4afd0e4f61007bb6d1ba7732c5c65c37df1fbdf0a4d5f94a8e4b8c953fec563fcd602d10d2b8ca9b2f07b486a96bd798923278b5d7f3e91c639c7283a6aee77ab9f9901503498af1b70204702707ff241591e33ff199f0d0d06382fc0977650b8b68641ed0818e6f3fccbcec654aa5c960d0bae098cd5387cb8b40e57521cedc1a47f259f0bb4a4adf66730da50f9621c705314fb53c2e46d11e506c2650c034cb92f43309c08f272f88bbaed7a572267240d135e49340d89527372ec5ad61a4a6082eaed4de5fc96032c25bb28d2f31911b15fab8ae33884eabbb2c4e8c0bacafdc92f20cca9f759b85d07cd508bf08c27b08038b38acbe9e2a38b4c740a7e243b728b6c4bfd0ac1b365a40bb14b11aefa071e6827b124ef4a4a72556b574ea033dd518601cc3e3fb7a18a1ed4a7e1a60ccad5cd9", 0x2000, &(0x7f0000000cc0)={&(0x7f0000000180)={0x50, 0x0, 0x8, {0x7, 0x2d, 0x9, 0x1003, 0x7, 0x8, 0x2, 0xe0, 0x0, 0x0, 0x10, 0x9}}, &(0x7f0000000340)={0x18, 0xffffffffffffffda, 0x6, {0x8001}}, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, 0xb3c5, {0x5}}, &(0x7f00000003c0)={0x18, 0x0, 0x7b86}, &(0x7f0000000400)={0x18, 0x0, 0x1, {0x8}}, &(0x7f0000000480)={0x28, 0x0, 0x2, {{0xc9b, 0x2, 0x1, r6}}}, &(0x7f0000000540)={0x60, 0x0, 0x855, {{0x80, 0xfffffffffffffff7, 0x4, 0x4, 0x4, 0x2, 0x3, 0x9}}}, &(0x7f00000004c0)={0x18, 0x2f, 0x0, {0x815e}}, 0x0, &(0x7f0000000600)={0x20, 0x0, 0xd}, &(0x7f0000000640)={0x78, 0x0, 0x2, {0x5, 0x6, 0x0, {0x4, 0x800, 0x502a457a, 0x8b, 0x0, 0x3, 0x9, 0xc97, 0x9, 0x7000, 0x4, r4, r5, 0xcd27, 0x24c2}}}, &(0x7f00000006c0)={0x90, 0x7fffffffffffffdb, 0xaec3, {0x0, 0x1, 0x9, 0xff, 0x3, 0x40, {0x2, 0xb9fb, 0xfa2, 0x5, 0x100000000, 0x61b0, 0x6, 0x5, 0x1, 0xa000, 0x7fffffff, r4, r5, 0x0, 0x46a9}}}, &(0x7f00000007c0)={0x10, 0x0, 0x2}, &(0x7f0000000880)={0x1f8, 0x0, 0xff, [{{0x3, 0x2, 0x7, 0x3, 0x7f, 0x0, {0x3, 0x1, 0x9, 0xc, 0x9, 0x7fffffffffffffff, 0x40, 0x800, 0x8, 0xc000, 0x200000, r4, r5, 0x6, 0x9}}, {0x2, 0x8000, 0x5, 0x1ff, 'fuse\x00'}}, {{0x1, 0x1, 0x2, 0x31e4bea1, 0x401, 0x7, {0x2, 0x1, 0x15c043f8, 0xa292ec8000000000, 0x5, 0x100000001, 0x7, 0x7, 0x5, 0x8000, 0x0, r4, r5, 0xf6, 0x5b}}, {0x0, 0x800, 0x1, 0xff, '\x00'}}, {{0x0, 0x0, 0x401, 0x7fffffff, 0x4, 0x1edd, {0x2, 0x67b, 0x9, 0x2, 0x101, 0x200, 0x1, 0x222022ba, 0x0, 0xc000, 0xf, r4, r5, 0x40, 0x40}}, {0x3, 0x6, 0xa, 0x5, '/dev/fuse\x00'}}]}, &(0x7f0000000a80)={0xa0, 0x0, 0x6, {{0x3, 0x1, 0xffffffffffffff9e, 0x8, 0x2, 0x6, {0x4, 0x6, 0x8, 0x4, 0x81, 0x7, 0xfffffffc, 0x9, 0x2, 0x2000, 0x5, r4, 0xee00, 0x7, 0x10001}}, {0x0, 0x10}}}, &(0x7f0000000b40)={0x20, 0x0, 0xf5c2, {0x1, 0x4, 0x1}}, &(0x7f0000000b80)={0x130, 0x0, 0x2, {0x5, 0x3, 0x0, '\x00', {0x8, 0x7, 0xc8, 0x92ec, 0x0, r5, 0x6000, '\x00', 0x5, 0x8, 0xffff, 0x1, {0xfffffffffffff000, 0x2}, {0x9, 0x9}, {0x8, 0x5}, {0x6, 0x4}, 0x7, 0x31a, 0xc, 0x3}}}}) execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 34.333369997s ago: executing program 2 (id=1693): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a0431a, &(0x7f0000000000)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") (async) chdir(&(0x7f0000000140)='./file0\x00') (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x20000004) (async) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x1b0, 0x98, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff000000, 'vlan0\x00', 'ipvlan1\x00', {}, {}, 0x8, 0x2, 0x40}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 0x1}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1e, 0xd5, 0x8}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x0, 0x1}}, @common=@addrtype={{0x30}, {0x556, 0x140, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x7ff, 0x1, 0x1, 0x9, 0x0, 0xc, 0x2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 34.248933162s ago: executing program 36 (id=1693): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a0431a, &(0x7f0000000000)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQijU0JpYQqAagxsTQ6JrdWniX+DOjVFXJiaudG9IiLIBjYsx9869Mp12mKFOZwrzPMnQc+acO+ecnnvuPfccpgH0rOHsnyRia0T8EhE7qtHlGYarP65dOTv155WzU0lUKq/+nuT5rl45O1VmLY/bUkRG0oj0g6QoZLn5xTMnJmdnZ04X8bGFk2+PzS+eeeL4ycljM8dmTk0cOnTwwPjTT0082ZZ2Zu26uufc3N7dL75+8aWpIxff+v6rrL5bi/TadqzJ4Mq3hrOG/1HJ1ac9HP//T8VtNNtqwkl/FyvCTemLiKy7BrLxX6lUztek7YgX3m9y+JZ1rh6wjrJ706ZV3i/ui0uVhpIbpgK3giS6XQOgO8r7ffb8W746OP3ousvPVh+AsnZfK17VlP5IizwDdc+37TQcEUeW/vose0U71iEAAJr4aOrTw/H4avO/NO6pybe92EMZiog7IuLOiLgrInZGxN0Red57I2JXK4XWbBDUbw2tnP+kl9beuuay+d8zxd7W8vlfOfuLob4iti1v/0By9PjszP7idzISA5uy+PgNyvjm+Z8+bpRWO//LXln55VywqMel/roFuunJhcl8UtoGl9+L2NMff1cqlbr2J1H2UhIRuyNiz8199PYycPzRL/c2ytS8/Ss+7ro27DNVvoh4pNr/S1HX/lKycn9ycNv1/cmx/8XszP6x8qxY6YcfL7zSqPzW278+sv7fvPz8L1I+XywCQ2/W7tfOR4Ody60Ny7jw64cNn2nWev4PJq/l16Ny2/XdyYWF0+MRg8nhPL7s/Ynrx5bxMn/W/pF9WUrZ/vLINL/GRdH/90XE3mK/7P6IeKCo+4MR8VBE7GvY+ojvnmucthH6f7qm/5OoP/93nav+LPt/8aYDfSe+/bpR+a31/8E8NFK8k1//mmi1gmv/zQEAAMCtI81XbpJ09N9wmo6OVv9j787YnM7OzS88dnTunVPT1RWeoRhIy5WuHTXroePJUvGJ1fhEsVZcph8o1o0/6Ys8Pjo1Nzvd5bZDr9vSYPxnfuvrdu2AdbfaPtrEKl9oA24/9eM/XR49/3InKwN0lO9rQ+9qMv7TTtUD6Dz3f+hdq43/83VxewFwe3L/h95l/EPvMv6hd9WN/774uVs1ATpoDV/nFxCYXzwT6YaoRkuB1v8exHoH3tgY1Wgh0O0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8EwAA//9gP+wr") (async) chdir(&(0x7f0000000140)='./file0\x00') (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x20000004) (async) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x1b0, 0x98, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff000000, 'vlan0\x00', 'ipvlan1\x00', {}, {}, 0x8, 0x2, 0x40}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 0x1}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1e, 0xd5, 0x8}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x0, 0x1}}, @common=@addrtype={{0x30}, {0x556, 0x140, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x7ff, 0x1, 0x1, 0x9, 0x0, 0xc, 0x2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 33.869300944s ago: executing program 7 (id=1695): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x4, 0xec58, 0x40, @mcast1, @private2, 0x7, 0x1, 0x8, 0x8}}) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xd}, {0x2}, {0xf, 0xa}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x3f}, {0x8, 0xb, 0x3d}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r2], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x6) clock_getres(0x8, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x47}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.923180919s ago: executing program 7 (id=1697): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x7, 0x4, 0x25cd, 0x1, 0xb1, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x8002, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0xc1, 0x9, 0xf9a2, 0x80000001, 0xff, 0x6, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x23, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0x8, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x4, 0x3, 0xb, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff4, 0x401, 0x46, 0xf1, 0x4, 0x1, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x7, 0x2, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000005, 0x5, 0x5, 0x491, 0x9, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0xa, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100007, 0x2, 0x400, 0x3e55, 0x1, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d2e, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x20008000, 0x3, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfa, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x209, 0x81, 0x3, 0x9d86, 0xf5c, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x3, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32c, 0x3, 0x1ff, 0x2010803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x8, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x5, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x601, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2804000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 31.917252307s ago: executing program 7 (id=1702): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x60000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x12, &(0x7f0000000240)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x48ec21b5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe7}, @generic={0xf, 0xa, 0x2, 0x2, 0x81}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x9, 0x885, 0x84}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x1, 0x1, 0xa}, {0x4, 0x2, 0x4, 0x7}, {0x1, 0x2, 0xc, 0x5}, {0x5, 0x4, 0x5, 0x7}, {0x0, 0x1, 0x2, 0x9}, {0x5, 0x1, 0x4}, {0x3, 0x2, 0x6, 0x9}, {0x1, 0x2, 0x4, 0x3}], 0x10, 0x4}, 0x94) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r3, r4, 0x1, 0x0, @val=@netfilter={0x7, 0x1, 0x5, 0x1}}, 0x20) socket$inet6(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0x0, 0x0, 0xffffffffffffff88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000a80)={'bridge0\x00', &(0x7f0000000a40)=@ethtool_rxfh_indir={0x39}}) 30.993946021s ago: executing program 7 (id=1707): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000025000086dd6000000000242b00fe8000000040000000000000000000aafe8000000000000000000000000000aa3c000000000000002b00"/74, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@sb={'sb', 0x3d, 0x50cf}}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000c80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x78, 0xa, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_MARK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x841}, 0x800) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) 30.887074376s ago: executing program 7 (id=1709): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01') capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000002c0)=@add_del={0x2, 0x0}) r2 = syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x200) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x255ed4530685bfcd, 0x10b010, r2, 0xc119f000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x613ab000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0xc, 0xc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000005000000181100000000000000000032f28a07aec45004d2124d06847d1f4c0e7ae73ffb528968ba55abe3a6bda117467ea85e424fab437315a1e97d6b377c6ec625d7ac477db8350c2277845cb1bcc6e0d7b8e376fe61edce0755ef36584d8d60c591672f0f0217d9316df0ba93b9758379620c7903b10000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000080000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000600)={'security\x00', 0xf1, "cbb189db4f07207d928dd85c3077f22a7fc6d55493ff3761153005983eb58d6852eda4f65510bc54f237e001d090ab6aa76d80e23d0c8c8baee698cd9e3928a3103d484fbd81f82b606deda785e8617b9d3cb79841ad0287555ea8075120de1b0975b03cf412c69635403c0f43ce28224f40c6a657b5fb147d34c3fa75aeeb827a6c150c3f107b40017a48b5e543f7d6b644f002e8987f037a9e896d7ea81a890ff8496c0c5393895324a8f89bd711fc962ee30a7d61086f5b2e6c1790be24a99ce6fd2660b6195208c1b2a65bc77589e26cf292140f70e593ad497192cc54767cd36af553465a8935c311f1d6bade8131"}, &(0x7f0000000180)=0x115) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r6}, 0xc) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r8}, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000040)={0x2, 0x2, 0xfffffffffffffffa}) 30.799186762s ago: executing program 7 (id=1710): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x4, 0xec58, 0x40, @mcast1, @private2, 0x7, 0x1, 0x8, 0x8}}) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xd}, {0x2}, {0xf, 0xa}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x3f}, {0x8, 0xb, 0x3d}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r2], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x6) clock_getres(0x8, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x47}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.793742082s ago: executing program 37 (id=1710): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x4, 0xec58, 0x40, @mcast1, @private2, 0x7, 0x1, 0x8, 0x8}}) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xd}, {0x2}, {0xf, 0xa}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x3f}, {0x8, 0xb, 0x3d}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r2], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x6) clock_getres(0x8, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x47}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.158986006s ago: executing program 8 (id=1860): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x9, 0x1524, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) getdents64(r5, &(0x7f0000000180)=""/82, 0x52) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0xee01, 0xee00, 0x0) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000440)={0xfffa}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rfcomm\x00') ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000300)) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x18d0490, &(0x7f00000003c0)={[{@uuid_off}, {@metacopy_on}, {@redirect_dir_follow}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'net/rfcomm\x00'}}]}) dup3(0xffffffffffffffff, r0, 0x0) 6.677076674s ago: executing program 9 (id=1861): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.623084217s ago: executing program 9 (id=1862): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.576981671s ago: executing program 9 (id=1863): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0xe0, 0x208, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3, 0x20132, 0xffffffffffffffff, 0x986c6000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f00000001c0)) lseek(0xffffffffffffffff, 0xa, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000c80)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303461612c747a3d5554432c73686f72746e616d653d6d697865642c636f6465706167653d3835322c696f636861727365743d6370313235312c756e695f786c6174653d302c696f636861727365743d63703836312c757466383d302c756e695f786c6174653d302c757466383d302c757466383d302c005ed4a338bef3e79ebeeb0dea20ed716e2652f036e76f36af1d77148ac9e99ed844e242770e1a7eee5b41b85f7d7993a9158992a042867549bc8e597489cb14cb3e71653312b7094940d35261b0b10d3305a832c47c8d2e864409a82953ca00605e547b67bb69e887b65c987fc112313cf7290594bc4d91e58b09bfa583e4392b695873732e75f02c50d167eb5caf09e888d1f7075337d4dfd52a32d9ba13b879b7aa285cf8eb6801afd8542606c8"], 0x3, 0x350, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x7c, 0x40}, {0x6, 0x4, 0xff, 0x3}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000100)="c6", 0x1, 0x8000) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000240)={0x28, 0x2, 0x0, {0x5, 0x0, 0x6}}, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffe82) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100039049b3bd41fc8c640c0fdffffff0000000000000000e8a6dc187faa1be2d8542f64b701a89856c470443e560a8480dbf8e03582173afc830b3d206fc7026ec8800d5327db01293062e4fb76bcef0f0305009e4c6f23d0ffac8375628df9f436981fa800906c34286934878e20fbf07a1358527cdf31b3a30e5a6531ec76820eb03907b9116efd2820a1877ebc14624be9289f7fe10ca007b77ed0fadf3dc896ca597f732fdc97c155dc23f12f808cf614ed2172df1cc2d316e3427a5659107027824f01a2adfcdbbf12ff24aac58962196d7458e227428e74e1e5ae3bb4e5e4e46830ce8fa83f25e1e613818eafce6236", @ANYRESHEX=r1, @ANYRESHEX=r0], 0x48}, 0x1, 0x0, 0x0, 0x20004890}, 0x80) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ppoll(&(0x7f0000000140), 0x1c91819c2d4b4339, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 6.220155141s ago: executing program 8 (id=1870): fsopen(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000001000000060000000b00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x6, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x3) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000000080850000000c000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0x0, 0x0}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110014a696d4003041060410100f6020109022400010000"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x92000, 0x0) 4.32555132s ago: executing program 9 (id=1885): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)={[{@nodots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@nodots}, {}, {@fat=@sys_immutable}, {@dots}, {@fat=@nfs_stale_rw}, {}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$eJzs3cFqE0EYB/AvTZqsBbVn8bDgxZOobxCkghAQqrkbaL20Imwv0VMeQ/ANfByPPkZPvUXaXVy7LSIl6WS7vx+E/dj/DjuTQCaHmeyHx5+ODj6ffFz++hZZlscgYhFnEbuxFf0o9arj1kU9jGHUFgEAtM3+/mycug+sUO/qqaIYz7YjYnQlm/64pV4BAAAAAAAAAACwYjdZ//836/8BoH2s/7/7imI826l+v11m/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQztly+XD5j1fq/gEAq2f+B4DuMf8DQPeY/wGge949qIo8zyJOF/PpfFoey9Ov30z2nucXdutWp/P5dLuqJ3svyjxv5jtV+5fX5sN4+qTMz7NXbyeNfBQH6xw4AAAAAAAAAAAAAAAAAAAAbJBn+R+N/f39Mj+/YBTX5FnE90v/D9DYvz+IR4PbHAkAAAAAAAAAAAAAAAAAAAC018mXr0ez4+PDorPFz35EsrtHr/wYUr8JjeJe3KBVtmmjaFHRj4jDUQxivfd6f///L079zQQAAAAAAAAAAAAAAAAAAN1Tb/pN3RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASKd+/v/6itRjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhdwAAAP//UhGHcQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) timer_create(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x40, 0x1, 0x2, "d9c8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="030020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) 3.215246164s ago: executing program 3 (id=1894): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001140)={r0, 0x0, 0x0}, 0x10) 3.214821914s ago: executing program 3 (id=1895): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0xe0, 0x208, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3, 0x20132, 0xffffffffffffffff, 0x986c6000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f00000001c0)) lseek(0xffffffffffffffff, 0xa, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000c80)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303461612c747a3d5554432c73686f72746e616d653d6d697865642c636f6465706167653d3835322c696f636861727365743d6370313235312c756e695f786c6174653d302c696f636861727365743d63703836312c757466383d302c756e695f786c6174653d302c757466383d302c757466383d302c005ed4a338bef3e79ebeeb0dea20ed716e2652f036e76f36af1d77148ac9e99ed844e242770e1a7eee5b41b85f7d7993a9158992a042867549bc8e597489cb14cb3e71653312b7094940d35261b0b10d3305a832c47c8d2e864409a82953ca00605e547b67bb69e887b65c987fc112313cf7290594bc4d91e58b09bfa583e4392b695873732e75f02c50d167eb5caf09e888d1f7075337d4dfd52a32d9ba13b879b7aa285cf8eb6801afd8542606c8"], 0x3, 0x350, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x7c, 0x40}, {0x6, 0x4, 0xff, 0x3}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000100)="c6", 0x1, 0x8000) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000240)={0x28, 0x2, 0x0, {0x5, 0x0, 0x6}}, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffe82) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100039049b3bd41fc8c640c0fdffffff0000000000000000e8a6dc187faa1be2d8542f64b701a89856c470443e560a8480dbf8e03582173afc830b3d206fc7026ec8800d5327db01293062e4fb76bcef0f0305009e4c6f23d0ffac8375628df9f436981fa800906c34286934878e20fbf07a1358527cdf31b3a30e5a6531ec76820eb03907b9116efd2820a1877ebc14624be9289f7fe10ca007b77ed0fadf3dc896ca597f732fdc97c155dc23f12f808cf614ed2172df1cc2d316e3427a5659107027824f01a2adfcdbbf12ff24aac58962196d7458e227428e74e1e5ae3bb4e5e4e46830ce8fa83f25e1e613818eafce6236", @ANYRESHEX=r1, @ANYRESHEX=r0], 0x48}, 0x1, 0x0, 0x0, 0x20004890}, 0x80) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ppoll(&(0x7f0000000140), 0x1c91819c2d4b4339, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.037266844s ago: executing program 4 (id=1896): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff2000008c000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 3.025889026s ago: executing program 4 (id=1897): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x60000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x12, &(0x7f0000000240)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x48ec21b5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe7}, @generic={0xf, 0xa, 0x2, 0x2, 0x81}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x9, 0x885, 0x84}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x1, 0x1, 0xa}, {0x4, 0x2, 0x4, 0x7}, {0x1, 0x2, 0xc, 0x5}, {0x5, 0x4, 0x5, 0x7}, {0x0, 0x1, 0x2, 0x9}, {0x5, 0x1, 0x4}, {0x3, 0x2, 0x6, 0x9}, {0x1, 0x2, 0x4, 0x3}], 0x10, 0x4}, 0x94) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r3, r4, 0x1, 0x0, @val=@netfilter={0x7, 0x1, 0x5, 0x1}}, 0x20) socket$inet6(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0x0, 0x0, 0xffffffffffffff88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000a80)={'bridge0\x00', &(0x7f0000000a40)=@ethtool_rxfh_indir={0x39}}) 2.909851301s ago: executing program 8 (id=1898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x9, 0x1524, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) getdents64(r5, &(0x7f0000000180)=""/82, 0x52) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0xee01, 0xee00, 0x0) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000440)={0xfffa}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rfcomm\x00') ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000300)) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x18d0490, &(0x7f00000003c0)={[{@uuid_off}, {@metacopy_on}, {@redirect_dir_follow}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'net/rfcomm\x00'}}]}) dup3(0xffffffffffffffff, r0, 0x0) 2.319150106s ago: executing program 5 (id=1901): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000100000000000000086aa5b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="e02742e8680d85ff9782762f0800", 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.318831166s ago: executing program 5 (id=1902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007d80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r2, {0x1, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x488c4) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r5, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x5b223762242790ab) 2.318585816s ago: executing program 5 (id=1903): futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x1) futex(&(0x7f0000000000)=0x2, 0x5, 0x2, 0x0, &(0x7f0000000040)=0x88000, 0x3000005) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x6}, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x3ba) 2.105727918s ago: executing program 4 (id=1904): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.096360479s ago: executing program 4 (id=1905): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x400000, 0xfffffffe}, 0x40) 2.047061152s ago: executing program 4 (id=1906): r0 = socket$inet(0x2, 0x1, 0x10001) close_range(r0, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket(0x10, 0x2, 0x0) r3 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r3, 0x10, 0x0, 0x7000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010073f100000000000000000700000006850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_clone3(&(0x7f0000000540)={0xe200200, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x8}, &(0x7f0000000300)=""/139, 0x8b, &(0x7f00000003c0)=""/104, &(0x7f0000000500)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r3}}, 0x58) prlimit64(r4, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02200000000000", 0x1e5) recvmmsg$unix(r2, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) bind$inet(r0, 0x0, 0x0) 2.027979943s ago: executing program 8 (id=1907): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x4, 0xec58, 0x40, @mcast1, @private2, 0x7, 0x1, 0x8, 0x8}}) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xd}, {0x2}, {0xf, 0xa}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x3f}, {0x8, 0xb, 0x3d}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000", @ANYRES32=r2], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x6) clock_getres(0x8, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x47}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.928396428s ago: executing program 9 (id=1908): syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000040)='./file0\x00', 0x3008000, &(0x7f0000000600)=ANY=[@ANYBLOB='codepage=1255,shortname=mixed,debug,nfs,uni\x00\x00\x00\x00\x00\x00\x00\x00,shortname=mixed,iocharset=macromanian,debug,shortname=lower,shortneme=mixed,uni_xlate=0,shortname=winnt,utf8=0,\x00'], 0x2a, 0x35b, &(0x7f0000000280)="$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") r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x80000000, 0x602400) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x5, 0x240000, 0x400, 0x7, 0x80000001, 0x1}) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1.690902242s ago: executing program 9 (id=1909): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x12, {0x2, 0x0, @remote}, 'lo\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee01, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x104aa}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x5740}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="dbc15532000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x1, 0x2800400c, 0x74, 0x9, 0x4, 0x5, 0x0, 0x0, 0x20, 0x32d8}}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x40, 0x3, 0x4, 0x60, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x8, 0x7800, 0x8000, 0x8c6d}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@mpls_newroute={0x168, 0x18, 0x2, 0x70bd28, 0x35dfdbff, {0x1c, 0x0, 0x10, 0x3, 0xfe, 0x4, 0xfd, 0xb, 0x900}, [@RTA_VIA={0x14, 0x12, {0x0, "6a4d9f697964072319637591c9ef"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xc9}, @RTA_NEWDST={0x84, 0x13, [{0x8}, {0x8}, {0x5bcbd, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x100}, {0x200}, {0x8}, {0xc5c}, {0x1}, {0x6df51, 0x0, 0x1}, {0xd00e}, {0x49, 0x0, 0x1}, {0x387}, {0xa, 0x0, 0x1}, {0x2}, {0x1, 0x0, 0x1}, {0xa}, {0xffffe}, {0x7fff, 0x0, 0x1}, {0x2}, {0xc93}, {0x7}, {0xb}, {0x4839}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {}, {0x8000}, {0x8ac}, {0x5, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0xc, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r5}, @RTA_VIA={0x14, 0x12, {0x26, "74e527b100eda66e76c89a75508d"}}, @RTA_NEWDST={0x84, 0x13, [{0x8000, 0x0, 0x1}, {0xc8}, {0x6}, {0x2, 0x0, 0x1}, {0x515}, {0x4, 0x0, 0x1}, {0x367f, 0x0, 0x1}, {0x9}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0xfee, 0x0, 0x1}, {0x5}, {0x9, 0x0, 0x1}, {0x7}, {0x2, 0x0, 0x1}, {0x5}, {0x6}, {0xcc3, 0x0, 0x1}, {0xffc00}, {0x6}, {0x4c}, {0x3}, {0x7fff, 0x0, 0x1}, {0x81}, {0x45, 0x0, 0x1}, {0x76d}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xffff}, {0x800, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x81, 0x18, 0x8, r6}}]}, 0x168}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.405853789s ago: executing program 5 (id=1910): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x301242f, 0x0, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = creat(&(0x7f0000000300)='./bus/file0\x00', 0xed) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000340)={0x2, {0x2, 0x9, 0x5, 0x4, 0x3ff, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000002080)=ANY=[@ANYBLOB="b619f8d2ea0db175811ce19830e6f0247c31a7ad4c06ec294e31f7b577d0bb0531cb9e55003b6e99b12eaf987d79bfc4b475d36994939d1cd37c7c2d1ec21ae9a9e0bc25fe413cb426cdf94828bcab80e6bf9e1031c20426da3ada8c48944fa9280fbe0ff44be4f80d19840d4abeb9bd337066054797db9e09c0cc77a661983fddc95e8a2ec16121b0192c8d15d86d13dc8ac66dc5043325913d66c3fae294fb53c9c7dd4afed2d53088e2a428e74c3a497d91003218d9c0ee0ec499f582", @ANYRESOCT, @ANYRESOCT=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000025c0)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xff, @loopback, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000510b010000010000000b00000000000003b7000000"], 0x30}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="d40900000000000073110300000000008510000002000000850000006700000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="0a000000010000000400000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000010000000000000000000000000000000001216ed00000000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r7}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRESDEC], 0x1f0}}, 0x0) 1.171290912s ago: executing program 4 (id=1911): r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109025f00030100000009040000000101"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = timerfd_create(0x8, 0x0) read(r4, &(0x7f00000000c0)=""/252, 0xfc) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket(0x2a, 0x80000, 0x81) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io$uac1(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 1.069332578s ago: executing program 8 (id=1912): r0 = open(&(0x7f00000002c0)='./bus\x00', 0x14927e, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xeb641000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.068828638s ago: executing program 8 (id=1913): syz_usb_connect(0x0, 0xb23, &(0x7f0000001500)=ANY=[@ANYBLOB="1201000276f5aa0866120910d837010203010902110b0306bd000f0904d8f902ffc35a0b0724060000f0bd05240001800d240f01000000808909030009592413984ab39017353e79eaee93f91a199065b6acefb5c1162f3553585aaf12862ec59e2ae68d138042ffe4ba22fca025025591ed698057ba3963ce765c92fe788bf7213f2a0dad09b88d3e47b7027afbd1e08592f12924c308241c0b000202000624070406001224070104000500ff010600ff074000090009050502200008020c072501000ac400072501020c800009050e000004818107090442070afeb97b32090503000002a9fd025c108c5e24620a8943a86b34e5e3445fbc385c11de09d16a9f9de11167b5dda5ae9137c317ff307641393f522861f79b3d47bf622e6a99d579bdfbed92574cb0c6ecb9a479246d8d81c0cc9f610fc4d649f5e8a0cd0718c0ecdc8cb209050500200003a3ff09050a0210008108020905800040008a0503072501827f080009050110e701020702ac23bd6356645dacb7b07666488fcc0fb4f8af19c576c7b58c3b7b56564d22a7e49e5b919ae8a0de16ccfffaaff7be3ff7ee6f06b4f28c706e92aa83100a226c0c5e8c15f7ac56bcbde0a7b553ecd5c8424a92e2a5c448ba249a16bea1c24fd5ec0adff715c6caa569cbf9080f76bd21a56be9dbdd3abcb81cdff9766942cc2dd66c0102211de80e01bd431af427b4a43b93d2a368e8c6396a0ce07f176c49938c4e65ed4ba4c097b1da4fad09050604ff03050605d3102d2275ecb37a60b96bf10c586637832235c7ed763f3c09ebe0216e574ce1e81a966c17535916afc95f60f869dc27f0d43ab2a6f1598c27afdf17f12add579dc45abe77abdf2ecaaeab4d92aa9727ff05aef54230b1003a21a762d7239ef74dc575218afd5cedfa5111f275ee260339d947293c1363b4dac11ae6a2b2efa63e9d170c5b80792d97b78cca961c34961ea58887612767ad9c6ce96cb4ef097e5a1d5efbabe6ca14b162b563acb7d181d6aebe08f5e4bc6a1a521e73fb0a4540f112a78a8c9004d79ad89adae3fc94158fcaba0523a992d809050cfd0004c6135bfa239df87915e3863fabe28c1a7e54ed9dfa7e8e084cfc97832825882c3250d79ecd68d20334eee639af042e759b4ea9e6ebf70cb91793cf017de2bf3d4c3bf1883cee5b37161d98e94d5805a349a016f30042d2ec4dd53b126cb0e89f2fdf77628efa3138942083440cbf816220218759c1a4b97d68782ff6ac74d4866bfc17f9e3148addfc7097ed2867e5b4885d1b763ddc84fb14388247929bdeae72983b5ad7807213339ef9f06a5fd4a84005df4a425caf9902937a78b6cc30cd6cfd00e354c31f0cde8fe28db4c851fb341396ea1d1ace472e5797c3a44a697c9f8357b8dc985d0379a3cd2dee89bd67a5354e3c13516b4578ddea1942072501810f0700090507102000070502bc11cb1e0b0278a6f06f7c30dc2d9a4a34eecf97cd7fd9e821179d741e8e7253eb33c6be8dca6d60fc3ede592ea249efd31e661d55b79f98e612590378d025f4d918ce3775e06f706e18dd60e20b1e9c490e3812ee70850ac36af5ed9b7544c52c3f72ff09faa5088b2f49a6e31a6e92a18da3b5c8ed5a11a21a760bc297e7b7254ac9cb033b383dadc08c7881a07cf0a577f7a91164972f8439f28141d233f365680790930f18b4d15b12c573cc5ac2f0f10401aabe65790446702d07250100080b000905000108002b06700905010c400009070053218369ecf71214a1a8d5cc0ed707f7b30f1f59fa0db5bc6a8ddb55f56188aa121dd26136fb23b4c970ff6d6988b35c8748fc68483a75dd57c7d21b056e3ebc2320719c1a003f3c27d4536a7566781e61d87c09042002104f47a10506240600018d05240009000d240f01080000000100fd780306241a0004010c241bff0f0389faf0010002222413048a3f5b823fd88c38e56a1dfd3680f1e722429c5e76005eb6b3229d4b87cb74241300eab49737f781c7a9724b84a44f9c67caf54db18709c4c4c18f311320f549de95b24874ee8f4cba7d72a3d3a6e40c87e7c8e1c9e12c56ab9f98f95db4afba36f900c9bdc6cd426e575f2de4a9acbd59dce8c35ae067369046b43c8d1834cc252f7437cda11942ff04c790cb4b65c0ded409050700080001040309050a02ff030807066506c33180e87ee13194354d0a97761bc88dcb5d5faf23637f28ff3b8c026e45ffb32f65581aedcf1eacd977cbf98c77af7b9809c61518522db693e1f20344a70205b55ccabbb2257dd49b24c0ea2f34c3193b2c43decec3309cb7e16adc35d8092b742d1209050d01080009079ee022d03b0770055e9dc76f6354641b904dc0980c01553389c525b985c86d9263f6a86c7837d8097b5ac04921d67d79fa5e6c7bf40095992bd2d94cfda21e38c481e14347c0e073fa41a89b51c4cb3e8b248ab661c4f95c72f267d8ff182d31d72ac74674b7f303026f8b49a82206e490f59b5dd281f148108befd459a4e5d7aae5f3298ce9a0e378db9fc82ea7e6619d420a1060d3b644d97ab66ba5f3a9dabd8ddf094115148f452dcdfd99db38a2e0d95b24ce50d17e45c67bd3cada323130aa1542dd192dfe9476596dcfa2360cd6ea5dc5563af9a79e63d769b23db8ed70072501030a07000905011040007f010807250103eb070009050710ff0308060009050d010004ff030990216ac3c712edce40e33d5f55bc643b58dc334ad3fc068a3f1dd624d9384f20c18431a060012164b9ab8f69867bca0fa6f5414394daa18305a647051a4962c8f404e89ae3e18054e1c809398beeb721173e6a20aacfedb0146f2b2e35c961601b6c98b6e54bc6d15a665772a99c3509a8bb8ec319cffbab304c9ac3c6630e2f900044d4ff265360689099ba588543fb07250102000400090584104000810409b407d07c2ee95f67c04f9c9866b2cdadde67850c5e0a854f6fe687a4bf5fce8701fcdb07418d2f2a8221a97a5daa7d85d80fcb67a47a653a9f8897ba2334b21dad0b88f260c9818cd8b01a88a2c77d67e9ac97f663fd3185ae23f16581f7eb4b781418f524662937d811a982aea09b919e1516cce99390951c5fbf2e3972daf81126cc8263ccbc68d16733d518be59487b807e86318a8f2597d329733c1ea94ba1f8fa5f56178734550c84d4d8ea8117b29169a00725010208000809050c0000020800040a099a9ad6ba458d4f6809050a03ff030400e509050f080002d50f0e09050304000205000207250102aa0b0009050c00000407810e072501017b04007511aba3195f1902a6f1bbd1d6947ace2bc5ab8d32eda51f38fde2b7f0698a4548d5f968326d341afd1876f5411dd28d3ceb9cfa2f45062feb8164eefaefac8e5e38f0c759c0cb2cf2258336cfdf63011b13811c4d61825393fd3877cf1b053f57bd9a22a99c0770e03c9ea4d9328e3f8aa11482e809050002000407090409050d1800020b0c09911061efd63deb4070ac36233bdc2178cb89104d0be78e6bcaaf8eb8f9b9224bb34f54041f4cd5c528d7c4e0c48586a320726d6411938ba94815746544d4e3ccd7166f35ab5ddc50b36dea05f6d50ed8ef35a441200bc85ec4993dc543397e0264538434165fcadbc1591c8136b5545ca2e62adb653d59fbc6ea9539f182cf80a9cb5adb2cd5b86c1b8061cf955582558d0725010001639b09050c10ff0308e507c22173a817ce95b21263636ef3ed37c12ef16c86b9400a7a2ea3bc88ee8ae5380379e3d3940b90e0550e57060d262f914b160438453e7a4f97182e9ce42bbd2075384345338f9764f295136ee8ba4edd4c698d46c0394efcbd2fa040b2ad37e1f12e8e18e38648667ebf476720f2d9d4db1169c291d3b617e4cc2ff1af69cd7a44de5bca757fb3a8efc7141efe4385487c28cc2477b88919f429dd7204ce90fb70abef64cc656c4453f9bef54c32cdbc3bfb27b86767513e0da6d146a0b903fd7d0f09050500000403040f0725010009070041"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 1.063658758s ago: executing program 3 (id=1914): syz_clone3(&(0x7f0000000340)={0x60861400, &(0x7f0000000280), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000500), 0x7, 0x880) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='L', 0x1}], 0x1}, 0x4015) sendmsg$inet(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000005c0)="d9002284", 0x4}], 0x1}, 0x8000) close(r2) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1841886, &(0x7f0000000000)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfd, 0x7c6, &(0x7f00000011c0)="$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") io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xd, @any, 0x8, 0x1}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1f4}, 0x94) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021000cb", @ANYRES32=r6, @ANYBLOB="080004000a010102080001006401010108000200ac14143a08000300e0000001080008002000000008000900"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x24040840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.017741021s ago: executing program 3 (id=1915): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x60000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r3, r4, 0x1, 0x0, @val=@netfilter={0x7, 0x1, 0x5, 0x1}}, 0x20) socket$inet6(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0x0, 0x0, 0xffffffffffffff88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000a80)={'bridge0\x00', &(0x7f0000000a40)=@ethtool_rxfh_indir={0x39}}) 458.246774ms ago: executing program 5 (id=1916): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x94) 457.835094ms ago: executing program 5 (id=1917): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x9, 0x1524, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) getdents64(r5, &(0x7f0000000180)=""/82, 0x52) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0xee01, 0xee00, 0x0) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000440)={0xfffa}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='net/rfcomm\x00') r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x18d0490, &(0x7f00000003c0)={[{@uuid_off}, {@metacopy_on}, {@redirect_dir_follow}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'net/rfcomm\x00'}}]}) dup3(r7, r0, 0x0) 35.272558ms ago: executing program 3 (id=1918): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000f7ffffff00000000000000000000000000000004000000000a0060803b00000035db18b9131dc917ef48614acb9fd56c9371994a8094d41d8d0d06420662ad42f1b06030ce26a3a0568efc375ecdba70655e9739c6a457bced4c644ad9f0b7dc8e7847790358cff63861ebdf2cbae8b829cd29835485c0cf20ba82ede202fe886fa847a342b861033e7803e3c436c84da1b910430ed4b749bc069977e162437c30c6e0f89c6f3144e27ae60180751200651904f0c8d89400f1efb15ecf3801b7758332e34fbb4509beb8fde2069a83c9d3362b4bfa7690495dd109f709b4c65b8395bbf073db5cf7e38cf3567952ca63ba085efffdbd6f6eed7685e6f3ada2089fb27a72bda34b2696775b7cfd53ae1fa850ba4b6c722667f2db59b8e01e08fe97e0181946d86c7fd8700017fd5feb9129ff4a40de54ee1d16f98331cfa3e6a7c2a026590484ac2df2f26e786bf1a19dbfb22e95ef1a4c801c9380d582", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000000001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a00", @ANYRESOCT], 0xb8}}, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000084850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) 0s ago: executing program 3 (id=1919): prctl$PR_SCHED_CORE(0x38, 0x10000, 0x0, 0x81010000000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x71) kernel console output (not intermixed with test programs): 205.420293][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.429212][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.655635][ T315] savu 0003:1E7D:2D5A.0011: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 205.825553][ T19] usb 8-1: USB disconnect, device number 3 [ 205.972227][ T28] audit: type=1400 audit(1769190433.132:1103): avc: denied { map } for pid=4555 comm="syz.2.1314" path="pipe:[14312]" dev="pipefs" ino=14312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 205.992985][ T552] usb 3-1: USB disconnect, device number 42 [ 206.007076][ T28] audit: type=1400 audit(1769190433.132:1104): avc: denied { execute } for pid=4555 comm="syz.2.1314" path="pipe:[14312]" dev="pipefs" ino=14312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 207.012647][ T4617] loop2: detected capacity change from 0 to 512 [ 207.019790][ T4617] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.028954][ T4617] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 207.038095][ T4617] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 207.053448][ T2865] usb 6-1: USB disconnect, device number 22 [ 207.067447][ T4617] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 207.087265][ T4617] System zones: 0-2, 18-18, 34-35 [ 207.095251][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1331'. [ 207.104237][ T4626] support for the xor transformation has been removed. [ 207.104592][ T4617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.124398][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1331'. [ 207.147857][ T4630] loop7: detected capacity change from 0 to 128 [ 208.878826][ T284] EXT4-fs (loop2): unmounting filesystem. [ 209.232859][ T2865] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 209.298019][ T552] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 209.500576][ T552] usb 4-1: Using ep0 maxpacket: 32 [ 209.508036][ T2865] usb 6-1: Using ep0 maxpacket: 8 [ 209.524070][ T552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.536414][ T552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.560021][ T552] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 209.572759][ T552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.574226][ T2865] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 209.591520][ T2865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.601369][ T2865] usb 6-1: Product: syz [ 209.621582][ T2865] usb 6-1: Manufacturer: syz [ 209.651184][ T552] usb 4-1: config 0 descriptor?? [ 209.651996][ T2865] usb 6-1: SerialNumber: syz [ 209.693069][ T552] hub 4-1:0.0: USB hub found [ 209.757788][ T2865] usb 6-1: config 0 descriptor?? [ 209.911901][ T552] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 210.327247][ T552] hid-generic 0003:046D:C31C.0012: unknown main item tag 0x0 [ 210.339578][ T552] hid-generic 0003:046D:C31C.0012: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 210.545685][ T4672] loop8: detected capacity change from 0 to 512 [ 210.625792][ T4672] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 210.718179][ T4565] EXT4-fs (loop8): unmounting filesystem. [ 210.813504][ T4685] loop8: detected capacity change from 0 to 1024 [ 210.929249][ T4685] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 210.952090][ T4690] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 210.955977][ T4689] loop2: detected capacity change from 0 to 16 [ 210.975940][ T4689] erofs: Unknown parameter '0000000000000000000018446744073709551615' [ 211.019901][ T347] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.073867][ T4645] usb 4-1: reset high-speed USB device number 46 using dummy_hcd [ 211.308753][ T552] usb 6-1: USB disconnect, device number 23 [ 211.711540][ T2865] usb 4-1: USB disconnect, device number 46 [ 211.797874][ T4565] EXT4-fs (loop8): unmounting filesystem. [ 212.441631][ T2865] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 212.646385][ T2865] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.658540][ T4727] binder: 4726:4727 ioctl c0306201 200000000600 returned -14 [ 212.666130][ T2865] usb 8-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 212.676139][ T2865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.698361][ T19] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 212.700124][ T2865] usb 8-1: config 0 descriptor?? [ 212.863983][ T4744] loop2: detected capacity change from 0 to 512 [ 212.883687][ T4744] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 212.897855][ T4744] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 212.906344][ T19] usb 9-1: Using ep0 maxpacket: 8 [ 212.912475][ T4744] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 212.922016][ T19] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.933678][ T19] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 212.942887][ T4744] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 212.943035][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.951302][ T4744] System zones: [ 212.963451][ T19] usb 9-1: config 0 descriptor?? [ 212.968856][ T4744] 0-2, 18-18, 34-35 [ 212.977021][ T4744] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.142104][ T2865] zeroplus 0003:0C12:0005.0013: item fetching failed at offset 0/3 [ 213.150548][ T2865] zeroplus 0003:0C12:0005.0013: parse failed [ 213.156902][ T2865] zeroplus: probe of 0003:0C12:0005.0013 failed with error -22 [ 213.360179][ T552] usb 8-1: USB disconnect, device number 4 [ 213.802607][ T284] EXT4-fs (loop2): unmounting filesystem. [ 214.120750][ T1887] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 214.314939][ T1887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.326056][ T1887] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.335475][ T1887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.348077][ T1887] usb 4-1: config 0 descriptor?? [ 214.420345][ T315] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 214.572881][ T1887] usbhid 4-1:0.0: can't add hid device: -71 [ 214.579071][ T1887] usbhid: probe of 4-1:0.0 failed with error -71 [ 214.588767][ T1887] usb 4-1: USB disconnect, device number 47 [ 214.612718][ T315] usb 6-1: Using ep0 maxpacket: 32 [ 214.619531][ T315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.630641][ T315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.640574][ T315] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 214.649949][ T315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.661243][ T315] usb 6-1: config 0 descriptor?? [ 214.820979][ T4788] loop7: detected capacity change from 0 to 128 [ 214.832552][ T4788] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 214.841483][ T4788] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.882804][ T4788] syz.7.1388 (pid 4788) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 214.907903][ T4142] EXT4-fs (loop7): unmounting filesystem. [ 214.926515][ T4796] loop7: detected capacity change from 0 to 1024 [ 214.936271][ T4796] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 214.951355][ T4796] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 214.962579][ T4796] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 214.970169][ T28] audit: type=1400 audit(1769190441.528:1105): avc: denied { append } for pid=4797 comm="syz.2.1392" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 214.978796][ T4796] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 215.003895][ T4796] EXT4-fs (loop7): filesystem has both journal inode and journal device! [ 215.083069][ T4800] loop2: detected capacity change from 0 to 2048 [ 215.097901][ T315] savu 0003:1E7D:2D5A.0014: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 215.112889][ T531] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.121280][ T4800] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1393'. [ 215.211708][ T1887] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 215.228061][ T4807] netlink: 'syz.2.1394': attribute type 24 has an invalid length. [ 215.383560][ T315] usb 6-1: USB disconnect, device number 24 [ 215.414890][ T1887] usb 4-1: Using ep0 maxpacket: 32 [ 215.421366][ T1887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.432544][ T1887] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 215.441798][ T1887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.450572][ T1887] usb 4-1: config 0 descriptor?? [ 215.608067][ T4809] loop7: detected capacity change from 0 to 256 [ 215.614897][ T4809] exfat: Deprecated parameter 'utf8' [ 215.619205][ T6] usb 9-1: USB disconnect, device number 2 [ 215.643853][ T4809] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 215.756011][ T4814] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1397'. [ 215.765075][ T4814] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1397'. [ 215.858243][ T4817] netlink: 45349 bytes leftover after parsing attributes in process `syz.7.1395'. [ 215.996569][ T4767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.011748][ T4767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.026900][ T6] usb 4-1: USB disconnect, device number 48 [ 216.265147][ T4835] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1404'. [ 216.997943][ T4854] /dev/sg0: Can't open blockdev [ 217.011195][ T4850] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1410'. [ 217.111867][ T4864] loop2: detected capacity change from 0 to 1024 [ 217.134005][ T4864] EXT4-fs: Ignoring removed oldalloc option [ 217.142910][ T4864] EXT4-fs: Ignoring removed bh option [ 217.149214][ T4864] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.164867][ T28] audit: type=1400 audit(1769190443.585:1106): avc: denied { create } for pid=4865 comm="syz.5.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 217.212664][ T4864] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 217.350733][ T818] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 217.564607][ T818] usb 4-1: Using ep0 maxpacket: 16 [ 217.576694][ T818] usb 4-1: config 0 has no interfaces? [ 217.597359][ T818] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 217.637575][ T818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.641340][ T4871] loop7: detected capacity change from 0 to 16 [ 217.647209][ T818] usb 4-1: config 0 descriptor?? [ 217.678030][ T4871] erofs: (device loop7): mounted with root inode @ nid 36. [ 217.822496][ T4858] loop8: detected capacity change from 0 to 131072 [ 217.882531][ T347] I/O error, dev loop8, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.914108][ T1887] usb 4-1: USB disconnect, device number 49 [ 217.992415][ T6] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 218.174249][ T6] usb 8-1: device descriptor read/64, error -71 [ 218.258332][ T4877] loop8: detected capacity change from 0 to 1024 [ 218.265953][ T4877] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 218.269222][ T284] EXT4-fs (loop2): unmounting filesystem. [ 218.280745][ T4877] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 218.297562][ T4877] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 218.308017][ T4877] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 218.316950][ T4877] EXT4-fs (loop8): filesystem has both journal inode and journal device! [ 218.429016][ T4883] loop2: detected capacity change from 0 to 2048 [ 218.495510][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1423'. [ 218.630917][ T4883] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1424'. [ 218.655155][ T6] usb 8-1: device descriptor read/64, error -71 [ 218.815974][ T724] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 218.944275][ T6] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 219.029821][ T724] usb 9-1: Using ep0 maxpacket: 16 [ 219.037360][ T724] usb 9-1: unable to get BOS descriptor or descriptor too short [ 219.052455][ T724] usb 9-1: config 1 interface 0 altsetting 15 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 219.072653][ T724] usb 9-1: config 1 interface 0 altsetting 15 bulk endpoint 0x82 has invalid maxpacket 1024 [ 219.082818][ T724] usb 9-1: config 1 interface 0 altsetting 15 bulk endpoint 0x3 has invalid maxpacket 32 [ 219.105128][ T724] usb 9-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.118274][ T6] usb 8-1: device descriptor read/64, error -71 [ 219.124604][ T724] usb 9-1: config 1 interface 0 has no altsetting 0 [ 219.138419][ T724] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.158223][ T724] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.166233][ T724] usb 9-1: Product: syz [ 219.170646][ T724] usb 9-1: Manufacturer: syz [ 219.175246][ T724] usb 9-1: SerialNumber: syz [ 219.184728][ T4877] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 219.192926][ T4877] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 219.404180][ T6] usb 8-1: device descriptor read/64, error -71 [ 219.467685][ T724] usb 9-1: bad CDC descriptors [ 219.475625][ T724] usb 9-1: USB disconnect, device number 3 [ 219.532605][ T6] usb usb8-port1: attempt power cycle [ 219.553948][ T552] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 219.591609][ T4901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.604437][ T4901] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=771 sclass=netlink_tcpdiag_socket pid=4901 comm=syz.3.1429 [ 219.719850][ T4913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.748862][ T552] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 219.758064][ T552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.766067][ T552] usb 6-1: Product: syz [ 219.770683][ T552] usb 6-1: Manufacturer: syz [ 219.775285][ T552] usb 6-1: SerialNumber: syz [ 219.780729][ T552] r8152-cfgselector 6-1: config 0 descriptor?? [ 219.949640][ T1887] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 219.971052][ T6] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 220.020174][ T6] usb 8-1: device descriptor read/8, error -71 [ 220.092223][ T4919] fuse: Unknown parameter 'user_i00000000000000000000' [ 220.143296][ T1887] usb 3-1: config 0 has no interfaces? [ 220.150260][ T1887] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 220.159762][ T1887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.168146][ T1887] usb 3-1: Product: syz [ 220.172373][ T1887] usb 3-1: Manufacturer: syz [ 220.178672][ T1887] usb 3-1: SerialNumber: syz [ 220.183879][ T1887] r8152-cfgselector 3-1: config 0 descriptor?? [ 220.189087][ T6] usb 8-1: device descriptor read/8, error -71 [ 220.217282][ T552] r8152-cfgselector 6-1: Unknown version 0x0000 [ 220.223824][ T552] r8152-cfgselector 6-1: bad CDC descriptors [ 220.230569][ T552] r8152-cfgselector 6-1: Unknown version 0x0000 [ 220.237981][ T552] r8152-cfgselector 6-1: USB disconnect, device number 25 [ 220.405750][ T10] usb 3-1: config 0 descriptor?? [ 220.484398][ T6] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 220.517681][ T6] usb 8-1: device descriptor read/8, error -71 [ 220.623132][ T4905] xt_hashlimit: size too large, truncated to 1048576 [ 220.680711][ T6] usb 8-1: device descriptor read/8, error -71 [ 220.794049][ T28] audit: type=1400 audit(1769190446.980:1107): avc: denied { append } for pid=4935 comm="syz.5.1442" name="pfkey" dev="proc" ino=4026533032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 220.815632][ T4938] device syzkaller0 entered promiscuous mode [ 220.817503][ T6] usb usb8-port1: unable to enumerate USB device [ 220.885229][ T10] usb 3-1: can't set config #0, error -71 [ 220.887994][ T1887] usb 3-1: USB disconnect, device number 43 [ 220.942591][ T4944] device syzkaller0 entered promiscuous mode [ 221.023499][ T4950] fuse: Unknown parameter 'user_i00000000000000000000' [ 221.163888][ T4962] loop8: detected capacity change from 0 to 16 [ 221.173260][ T4962] erofs: (device loop8): mounted with root inode @ nid 36. [ 221.297206][ T315] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 221.489735][ T315] usb 6-1: Using ep0 maxpacket: 16 [ 221.496734][ T315] usb 6-1: unable to get BOS descriptor or descriptor too short [ 221.500421][ T552] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 221.507037][ T315] usb 6-1: config 1 interface 0 altsetting 15 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 222.347491][ T28] audit: type=1326 audit(1769190448.438:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.2.1455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf55b9acb9 code=0x0 [ 222.387129][ T315] usb 6-1: config 1 interface 0 altsetting 15 bulk endpoint 0x82 has invalid maxpacket 1024 [ 222.756400][ T4968] syz.2.1455 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 222.772822][ T315] usb 6-1: config 1 interface 0 altsetting 15 bulk endpoint 0x3 has invalid maxpacket 32 [ 222.798087][ T315] usb 6-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.812671][ T315] usb 6-1: config 1 interface 0 has no altsetting 0 [ 222.824003][ T4976] fuse: Unknown parameter 'user_i00000000000000000000' [ 222.827340][ T315] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.831533][ T552] usb 9-1: device descriptor read/64, error -71 [ 222.840235][ T315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.924310][ T4978] loop7: detected capacity change from 0 to 512 [ 222.934305][ T4978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.039406][ T4978] EXT4-fs (loop7): orphan cleanup on readonly fs [ 223.048476][ T4978] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1458: bg 0: block 248: padding at end of block bitmap is not set [ 223.065296][ T4978] Quota error (device loop7): write_blk: dquota write failed [ 223.073092][ T4978] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 223.083354][ T4978] EXT4-fs error (device loop7): ext4_acquire_dquot:6796: comm syz.7.1458: Failed to acquire dquot type 1 [ 223.097104][ T4978] EXT4-fs (loop7): 1 truncate cleaned up [ 223.104383][ T4978] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 223.147568][ T552] usb 9-1: device descriptor read/64, error -71 [ 223.261782][ T315] usb 6-1: Product: syz [ 223.320499][ T315] usb 6-1: Manufacturer: syz [ 223.325815][ T315] usb 6-1: SerialNumber: syz [ 223.447500][ T552] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 223.521310][ T4991] binder: 4989:4991 ioctl 5427 0 returned -22 [ 223.585686][ T4948] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 223.593650][ T4948] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 223.618109][ T552] usb 9-1: device descriptor read/64, error -71 [ 223.817689][ T315] usb 6-1: bad CDC descriptors [ 223.824614][ T315] usb 6-1: USB disconnect, device number 26 [ 223.835899][ T4142] EXT4-fs (loop7): unmounting filesystem. [ 224.003114][ T552] usb 9-1: device descriptor read/64, error -71 [ 224.131494][ T552] usb usb9-port1: attempt power cycle [ 224.500724][ T5012] loop2: detected capacity change from 0 to 8192 [ 224.591668][ T5012] loop2: p1 p2 [ 224.595266][ T5012] loop2: p1 start 16777216 is beyond EOD, truncated [ 224.601960][ T5012] loop2: p2 size 515840 extends beyond EOD, truncated [ 224.665790][ T5015] loop2: detected capacity change from 0 to 256 [ 224.682529][ T5015] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.696362][ T347] udevd[347]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 224.712143][ T5015] fuse: Unknown parameter 'user_id00000000000000000000' [ 226.617742][ T5017] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1471'. [ 226.757827][ T5019] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 226.766982][ T5019] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 226.768047][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 226.813911][ T5032] loop8: detected capacity change from 0 to 16 [ 226.822640][ T5032] erofs: (device loop8): mounted with root inode @ nid 36. [ 227.051230][ T315] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 227.072678][ T60] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 227.115393][ T552] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 227.243718][ T315] usb 8-1: Using ep0 maxpacket: 32 [ 227.249958][ T315] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 227.258206][ T315] usb 8-1: config 0 has no interface number 0 [ 227.264359][ T315] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 227.275844][ T552] usb 9-1: device descriptor read/64, error -71 [ 227.276091][ T315] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 227.285440][ T60] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 227.291201][ T315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.302426][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.310510][ T2865] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 227.321960][ T60] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 227.329193][ T315] usb 8-1: Product: syz [ 227.343273][ T60] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.346513][ T315] usb 8-1: Manufacturer: syz [ 227.355735][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 227.360286][ T315] usb 8-1: SerialNumber: syz [ 227.368547][ T60] usb 6-1: SerialNumber: syz [ 227.380652][ T315] usb 8-1: config 0 descriptor?? [ 227.386034][ T5029] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 227.564604][ T552] usb 9-1: device descriptor read/64, error -71 [ 227.575293][ T2865] usb 4-1: Using ep0 maxpacket: 16 [ 227.581952][ T2865] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.590676][ T2865] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 227.601276][ T60] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 227.603360][ T2865] usb 4-1: config 1 interface 0 altsetting 15 bulk endpoint 0x82 has invalid maxpacket 1024 [ 227.619183][ T5029] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 227.630529][ T2865] usb 4-1: config 1 interface 0 altsetting 15 bulk endpoint 0x3 has invalid maxpacket 32 [ 227.636907][ T60] usb 6-1: USB disconnect, device number 27 [ 227.641214][ T2865] usb 4-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.659564][ T2865] usb 4-1: config 1 interface 0 has no altsetting 0 [ 227.668772][ T2865] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.677925][ T2865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.685942][ T2865] usb 4-1: Product: syz [ 227.690122][ T2865] usb 4-1: Manufacturer: syz [ 227.694751][ T2865] usb 4-1: SerialNumber: syz [ 227.700254][ T5040] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 227.707494][ T5040] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 227.853391][ T552] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 227.934172][ T2865] usb 4-1: bad CDC descriptors [ 227.942228][ T2865] usb 4-1: USB disconnect, device number 50 [ 228.035199][ T552] usb 9-1: device descriptor read/64, error -71 [ 228.076007][ T315] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 228.086357][ T315] asix: probe of 8-1:0.188 failed with error -61 [ 228.218199][ T5046] fuse: Unknown parameter 'user_id00000000000000000000' [ 228.334693][ T552] usb 9-1: device descriptor read/64, error -71 [ 228.463070][ T552] usb usb9-port1: attempt power cycle [ 229.321092][ T5059] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1488'. [ 229.345519][ T5061] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1489'. [ 229.372853][ T5075] fuse: Unknown parameter 'user_id00000000000000000000' [ 229.506072][ T552] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 229.517250][ T28] audit: type=1400 audit(1769190455.095:1109): avc: denied { create } for pid=5082 comm="syz.3.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 229.540113][ T28] audit: type=1400 audit(1769190455.161:1110): avc: denied { create } for pid=5082 comm="syz.3.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 229.561232][ T28] audit: type=1400 audit(1769190455.179:1111): avc: denied { append } for pid=5068 comm="syz.2.1491" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 229.604992][ T552] usb 9-1: device descriptor read/8, error -71 [ 230.892693][ T552] usb 9-1: device descriptor read/8, error -71 [ 231.095012][ T5107] loop8: detected capacity change from 0 to 2048 [ 231.116579][ T5113] loop2: detected capacity change from 0 to 256 [ 231.123797][ T5113] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.139757][ T5113] fuse: Bad value for 'fd' [ 231.159155][ T5107] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1502'. [ 231.239053][ T5115] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2134793376 (4269586752 ns) > initial count (1370027246 ns). Using initial count to start timer. [ 231.279973][ T28] audit: type=1400 audit(1769190456.788:1112): avc: denied { accept } for pid=5123 comm="syz.8.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 231.436056][ T5130] pic_ioport_write: 20 callbacks suppressed [ 231.436069][ T5130] kvm: pic: level sensitive irq not supported [ 231.442547][ T5130] pic_ioport_write: 14 callbacks suppressed [ 231.442559][ T5130] kvm: pic: single mode not supported [ 231.454628][ T5130] kvm: pic: level sensitive irq not supported [ 231.467614][ T5130] kvm: pic: single mode not supported [ 231.473771][ T5130] kvm: pic: level sensitive irq not supported [ 231.479704][ T5130] kvm: pic: single mode not supported [ 231.485807][ T5130] kvm: pic: level sensitive irq not supported [ 231.494367][ T5130] kvm: pic: single mode not supported [ 231.500519][ T5130] kvm: pic: level sensitive irq not supported [ 231.506221][ T5130] kvm: pic: single mode not supported [ 231.512411][ T5130] kvm: pic: level sensitive irq not supported [ 231.520102][ T5130] kvm: pic: single mode not supported [ 231.526244][ T5130] kvm: pic: level sensitive irq not supported [ 231.532227][ T5130] kvm: pic: single mode not supported [ 231.538366][ T5130] kvm: pic: level sensitive irq not supported [ 231.544720][ T5130] kvm: pic: level sensitive irq not supported [ 231.551431][ T5130] kvm: pic: level sensitive irq not supported [ 231.558452][ T5130] kvm: pic: single mode not supported [ 231.558736][ T5134] kvm: pic: single mode not supported [ 231.570235][ T5134] kvm: pic: single mode not supported [ 231.572457][ T5137] binder: 5132:5137 ioctl 5427 0 returned -22 [ 233.009331][ T315] usb 8-1: USB disconnect, device number 9 [ 233.132495][ T5152] fuse: Bad value for 'fd' [ 233.222945][ T28] audit: type=1326 audit(1769190458.611:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.8.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd315b9acb9 code=0x7fc00000 [ 233.273945][ T5154] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1517'. [ 233.284543][ T5167] tipc: Started in network mode [ 233.296060][ T5167] tipc: Node identity 4, cluster identity 4711 [ 233.302917][ T5167] tipc: Node number set to 4 [ 233.461910][ T5175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 233.682335][ T552] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 233.874862][ T552] usb 6-1: Using ep0 maxpacket: 32 [ 233.881694][ T552] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.889850][ T552] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.900235][ T6] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 233.907978][ T552] usb 6-1: config 0 has no interface number 0 [ 233.915683][ T552] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 233.924799][ T552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.933325][ T552] usb 6-1: Product: syz [ 233.937542][ T552] usb 6-1: Manufacturer: syz [ 233.942173][ T552] usb 6-1: SerialNumber: syz [ 233.947651][ T552] usb 6-1: config 0 descriptor?? [ 234.120922][ T6] usb 9-1: Using ep0 maxpacket: 32 [ 234.127687][ T6] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 234.140759][ T6] usb 9-1: config 0 has no interface number 0 [ 234.149361][ T6] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 234.161286][ T6] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 234.189371][ T552] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 234.197351][ T5182] loop2: detected capacity change from 0 to 256 [ 234.199291][ T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.211744][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 234.228547][ T6] usb 9-1: Product: syz [ 234.232842][ T6] usb 9-1: Manufacturer: syz [ 234.233273][ T5182] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.237448][ T6] usb 9-1: SerialNumber: syz [ 234.239049][ T6] usb 9-1: config 0 descriptor?? [ 234.260470][ T5178] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 234.276847][ T5182] fuse: Bad value for 'fd' [ 234.303607][ T5186] loop2: detected capacity change from 0 to 512 [ 234.388760][ T5161] input: syz0 as /devices/virtual/input/input27 [ 234.400078][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1520'. [ 234.429817][ T5192] netlink: 'syz.2.1531': attribute type 4 has an invalid length. [ 234.476349][ T1887] usb 6-1: USB disconnect, device number 28 [ 234.485052][ T5178] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 234.739071][ T5197] loop7: detected capacity change from 0 to 4096 [ 234.751354][ T5197] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 234.761762][ T5197] FAULT_INJECTION: forcing a failure. [ 234.761762][ T5197] name failslab, interval 1, probability 0, space 0, times 0 [ 234.775175][ T5197] CPU: 1 PID: 5197 Comm: syz.7.1533 Tainted: G W syzkaller #0 [ 234.784216][ T5197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.794553][ T5197] Call Trace: [ 234.797861][ T5197] [ 234.800902][ T5197] __dump_stack+0x21/0x24 [ 234.805255][ T5197] dump_stack_lvl+0x110/0x170 [ 234.809950][ T5197] ? __cfi_dump_stack_lvl+0x8/0x8 [ 234.815008][ T5197] dump_stack+0x15/0x24 [ 234.819180][ T5197] should_fail_ex+0x3d4/0x520 [ 234.823865][ T5197] __should_failslab+0xac/0xf0 [ 234.828657][ T5197] ? enable_verity+0x1b8/0x17d0 [ 234.833514][ T5197] should_failslab+0x9/0x20 [ 234.838019][ T5197] __kmem_cache_alloc_node+0x3d/0x2c0 [ 234.843404][ T5197] ? enable_verity+0x1b8/0x17d0 [ 234.848272][ T5197] __kmalloc+0xa1/0x1e0 [ 234.852447][ T5197] enable_verity+0x1b8/0x17d0 [ 234.857131][ T5197] ? x64_sys_call+0x783/0x9a0 [ 234.861814][ T5197] ? memcpy+0x56/0x70 [ 234.865816][ T5197] ? avc_has_perm_noaudit+0x30b/0x490 [ 234.871312][ T5197] ? deny_write_access+0xe0/0xe0 [ 234.876278][ T5197] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 234.882209][ T5197] ? selinux_capable+0x2b6/0x3b0 [ 234.887176][ T5197] ? from_kgid+0x169/0x690 [ 234.891604][ T5197] ? selinux_inode_permission+0x415/0x5f0 [ 234.897337][ T5197] ? __cfi_selinux_inode_permission+0x10/0x10 [ 234.903433][ T5197] ? __kasan_check_write+0x14/0x20 [ 234.908573][ T5197] fsverity_ioctl_enable+0x495/0x560 [ 234.913871][ T5197] ? __cfi_fsverity_ioctl_enable+0x10/0x10 [ 234.919683][ T5197] ? arch_stack_walk+0xfc/0x150 [ 234.921940][ T6] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 234.924546][ T5197] ext4_ioctl+0x1a5f/0x3e90 [ 234.924577][ T5197] ? memcpy+0x56/0x70 [ 234.943266][ T5197] ? __cfi_ext4_ioctl+0x10/0x10 [ 234.945886][ T6] asix: probe of 9-1:0.188 failed with error -61 [ 234.948139][ T5197] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 234.960381][ T5197] ? __asan_set_shadow_00+0xe/0x10 [ 234.965523][ T5197] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 234.970393][ T5197] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 234.976033][ T5197] ? kstrtouint+0x74/0xe0 [ 234.980380][ T5197] ? ioctl_has_perm+0x1b8/0x4f0 [ 234.985240][ T5197] ? ioctl_has_perm+0x3a6/0x4f0 [ 234.990101][ T5197] ? has_cap_mac_admin+0x370/0x370 [ 234.995224][ T5197] ? vfs_write+0xa2c/0xce0 [ 234.999644][ T5197] ? selinux_file_ioctl+0x3a0/0x4d0 [ 235.004843][ T5197] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 235.010389][ T5197] ? mutex_unlock+0x8f/0x230 [ 235.014992][ T5197] ? __cfi_mutex_unlock+0x10/0x10 [ 235.020127][ T5197] ? __fget_files+0x2d5/0x330 [ 235.024818][ T5197] ? security_file_ioctl+0x95/0xc0 [ 235.029939][ T5197] ? __cfi_ext4_ioctl+0x10/0x10 [ 235.035000][ T5197] __se_sys_ioctl+0x12f/0x1b0 [ 235.039698][ T5197] __x64_sys_ioctl+0x7b/0x90 [ 235.044299][ T5197] x64_sys_call+0x58b/0x9a0 [ 235.048857][ T5197] do_syscall_64+0x4c/0xa0 [ 235.053303][ T5197] ? clear_bhb_loop+0x30/0x80 [ 235.058007][ T5197] ? clear_bhb_loop+0x30/0x80 [ 235.062967][ T5197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.068902][ T5197] RIP: 0033:0x7fd2d099acb9 [ 235.073354][ T5197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.093602][ T5197] RSP: 002b:00007fd2d17ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.102920][ T5197] RAX: ffffffffffffffda RBX: 00007fd2d0c15fa0 RCX: 00007fd2d099acb9 [ 235.110922][ T5197] RDX: 0000200000000040 RSI: 0000000040806685 RDI: 0000000000000004 [ 235.120217][ T5197] RBP: 00007fd2d17ba090 R08: 0000000000000000 R09: 0000000000000000 [ 235.128302][ T5197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.136552][ T5197] R13: 00007fd2d0c16038 R14: 00007fd2d0c15fa0 R15: 00007ffdf2738a48 [ 235.144630][ T5197] [ 235.160730][ T4142] EXT4-fs (loop7): unmounting filesystem. [ 235.209505][ T5201] loop7: detected capacity change from 0 to 4096 [ 235.230689][ T5201] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 235.427184][ T5210] binder: 5206:5210 ioctl 5427 0 returned -22 [ 235.466501][ T5212] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1538'. [ 235.484741][ T5214] loop2: detected capacity change from 0 to 256 [ 235.492159][ T5214] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.564776][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1537'. [ 235.608845][ T1887] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 235.668285][ T5214] fuse: Unknown parameter '0x0000000000000004' [ 235.860672][ T5221] loop2: detected capacity change from 0 to 2048 [ 235.867140][ T1887] usb 8-1: Using ep0 maxpacket: 16 [ 235.873596][ T1887] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 235.883872][ T5221] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1541'. [ 235.892903][ T1887] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.903066][ T1887] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.913723][ T1887] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.923143][ T1887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.929337][ T5226] loop2: detected capacity change from 0 to 256 [ 235.931424][ T1887] usb 8-1: Product: syz [ 235.941754][ T1887] usb 8-1: Manufacturer: syz [ 235.946456][ T1887] usb 8-1: SerialNumber: syz [ 235.955327][ T5226] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1542'. [ 236.270513][ T552] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 236.381211][ T1887] usb 8-1: 0:2 : does not exist [ 236.473833][ T552] usb 3-1: Using ep0 maxpacket: 8 [ 236.480067][ T552] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 236.492991][ T552] usb 3-1: config 0 has no interface number 0 [ 236.501297][ T552] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 236.510528][ T552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.518562][ T552] usb 3-1: Product: syz [ 236.522739][ T552] usb 3-1: Manufacturer: syz [ 236.527382][ T552] usb 3-1: SerialNumber: syz [ 236.533360][ T552] usb 3-1: config 0 descriptor?? [ 236.755487][ T5228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.764101][ T5228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.774433][ T552] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 236.780833][ T552] usb 3-1: No streaming interface found for terminal 6. [ 236.788150][ T552] usb 3-1: Failed to create links for entity 5 [ 236.794563][ T552] usb 3-1: Failed to register entities (-22). [ 236.802051][ T552] usb 3-1: USB disconnect, device number 44 [ 237.026718][ T5201] fs-verity (loop7, inode 15): Unsupported log_blocksize: 13 [ 237.042122][ T1887] usb 8-1: USB disconnect, device number 10 [ 237.365409][ T1887] usb 9-1: USB disconnect, device number 11 [ 237.841061][ T5258] loop8: detected capacity change from 0 to 512 [ 237.870745][ T5258] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1552: bg 0: block 393: padding at end of block bitmap is not set [ 237.992856][ T5258] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 238.014354][ T5258] EXT4-fs (loop8): 2 truncates cleaned up [ 238.782464][ T5258] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 238.830383][ T4142] EXT4-fs (loop7): unmounting filesystem. [ 238.930814][ T5268] fuse: Bad value for 'user_id' [ 238.935844][ T28] audit: type=1400 audit(1769190463.940:1114): avc: denied { ioctl } for pid=5267 comm="syz.7.1555" path="socket:[45513]" dev="sockfs" ino=45513 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 238.979910][ T28] audit: type=1400 audit(1769190463.940:1115): avc: denied { read } for pid=5267 comm="syz.7.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.354245][ T5278] loop2: detected capacity change from 0 to 8192 [ 239.425849][ T28] audit: type=1400 audit(1769190464.408:1116): avc: denied { getopt } for pid=5280 comm="syz.7.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 239.447968][ T5281] loop7: detected capacity change from 0 to 512 [ 239.464416][ T5278] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.477024][ T5281] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1560: bg 0: block 393: padding at end of block bitmap is not set [ 239.491559][ T5281] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 239.501260][ T5281] EXT4-fs (loop7): 2 truncates cleaned up [ 239.507012][ T5281] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 239.542839][ T1887] kernel write not supported for file [eventfd] (pid: 1887 comm: kworker/1:6) [ 239.552708][ T4142] EXT4-fs (loop7): unmounting filesystem. [ 239.558998][ T5285] tap0: tun_chr_ioctl cmd 1074025672 [ 239.570363][ T5285] tap0: ignored: set checksum disabled [ 239.705812][ T5293] binder: 5289:5293 ioctl 5427 0 returned -22 [ 241.852289][ T5312] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1568'. [ 241.862081][ T5312] device gretap0 entered promiscuous mode [ 241.880030][ T5312] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.1568'. [ 241.889880][ T5312] 0XD: renamed from gretap0 [ 241.898872][ T5312] device 00XD left promiscuous mode [ 242.043494][ T4565] EXT4-fs (loop8): unmounting filesystem. [ 242.108534][ T5317] loop2: detected capacity change from 0 to 256 [ 242.125996][ T5319] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1572'. [ 242.229331][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.266485][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 242.276994][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.291073][ T5327] binder: 5325:5327 ioctl 5427 0 returned -22 [ 242.296496][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 242.314101][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.348133][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.384125][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.414153][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.431407][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.464064][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.473689][ T2865] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 242.541234][ T5312] syz.5.1568 (5312) used greatest stack depth: 19848 bytes left [ 242.678058][ T2865] usb 8-1: config 0 has an invalid descriptor of length 166, skipping remainder of the config [ 242.688953][ T2865] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.702104][ T2865] usb 8-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 242.716070][ T2865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.725718][ T2865] usb 8-1: config 0 descriptor?? [ 242.731664][ T2865] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 242.880193][ T315] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 243.094165][ T315] usb 9-1: Using ep0 maxpacket: 32 [ 243.100815][ T315] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 243.109252][ T315] usb 9-1: config 0 has no interface number 0 [ 243.116581][ T315] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 243.145652][ T315] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 243.155505][ T315] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.163920][ T315] usb 9-1: Product: syz [ 243.168215][ T315] usb 9-1: Manufacturer: syz [ 243.173382][ T315] usb 9-1: SerialNumber: syz [ 243.191966][ T315] usb 9-1: config 0 descriptor?? [ 243.197612][ T5336] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 243.426331][ T5336] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 243.750339][ T5344] loop7: detected capacity change from 0 to 512 [ 243.756990][ T5344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.763795][ T5344] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.764589][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'. [ 243.781840][ T5344] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 243.807789][ T5344] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.1571: bad orphan inode 131083 [ 243.819133][ T28] audit: type=1400 audit(1769190468.494:1117): avc: denied { listen } for pid=5345 comm="syz.3.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.839799][ T5344] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 244.005974][ T315] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 244.026359][ T315] asix: probe of 9-1:0.188 failed with error -61 [ 244.111459][ T5355] IPv6: sit2: Disabled Multicast RS [ 244.127388][ T5358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2686 sclass=netlink_route_socket pid=5358 comm=syz.3.1585 [ 244.140708][ T28] audit: type=1400 audit(1769190468.812:1118): avc: denied { create } for pid=5357 comm="syz.3.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 244.222379][ T5361] binder: 5359:5361 ioctl 5427 0 returned -22 [ 244.954896][ T5365] loop2: detected capacity change from 0 to 512 [ 244.967323][ T5365] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 244.976702][ T5365] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.989208][ T5365] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.1587: corrupted xattr block 33 [ 245.005931][ T724] usb 8-1: USB disconnect, device number 11 [ 245.013650][ T4142] EXT4-fs (loop7): unmounting filesystem. [ 245.020309][ T5365] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 245.032007][ T5365] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.1587: corrupted xattr block 33 [ 245.056572][ T5365] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 245.066519][ T5365] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.1587: corrupted xattr block 33 [ 245.079857][ T5365] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 245.089036][ T5365] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.1587: corrupted xattr block 33 [ 245.101261][ T5365] fscrypt (loop2, inode 15): Error -117 getting encryption context [ 245.532989][ T1887] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 245.810592][ T1887] usb 3-1: Using ep0 maxpacket: 16 [ 245.820927][ T1887] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 245.831831][ T1887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.840745][ T1887] usb 3-1: Product: syz [ 245.846341][ T1887] usb 3-1: Manufacturer: syz [ 245.851379][ T1887] usb 3-1: SerialNumber: syz [ 245.906703][ T1887] usb 3-1: config 0 descriptor?? [ 245.947816][ T1887] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 246.206933][ T28] audit: type=1400 audit(1769190470.747:1119): avc: denied { bind } for pid=5364 comm="syz.2.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.228376][ T5365] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #12: comm syz.2.1587: corrupted xattr block 6 [ 246.247194][ T5365] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 246.267106][ T5365] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #12: comm syz.2.1587: corrupted xattr block 6 [ 246.284199][ T5365] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 246.293507][ T5365] fuse: Unknown parameter 'vhn&xO0x000000000000000a' [ 246.301472][ T28] audit: type=1326 audit(1769190470.831:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.5.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ef59acb9 code=0x7ffc0000 [ 246.330759][ T28] audit: type=1326 audit(1769190470.859:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.5.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb8ef59acb9 code=0x7ffc0000 [ 246.354927][ T28] audit: type=1326 audit(1769190470.878:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.5.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ef59acb9 code=0x7ffc0000 [ 246.379552][ T6] usb 3-1: USB disconnect, device number 45 [ 246.394538][ T28] audit: type=1326 audit(1769190470.878:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.5.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ef59acb9 code=0x7ffc0000 [ 246.418539][ T28] audit: type=1326 audit(1769190470.906:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.5.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb8ef59acb9 code=0x7ffc0000 [ 246.442568][ T28] audit: type=1326 audit(1769190470.906:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.5.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ef59acb9 code=0x7ffc0000 [ 246.466448][ T28] audit: type=1326 audit(1769190470.906:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.5.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ef59acb9 code=0x7ffc0000 [ 246.490618][ T28] audit: type=1326 audit(1769190470.906:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.5.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb8ef59acb9 code=0x7ffc0000 [ 246.517564][ T28] audit: type=1326 audit(1769190470.906:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.5.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ef59acb9 code=0x7ffc0000 [ 246.794554][ T1887] usb 9-1: USB disconnect, device number 12 [ 246.896676][ T5417] binder: 5415:5417 ioctl 5427 0 returned -22 [ 246.922775][ T284] EXT4-fs (loop2): unmounting filesystem. [ 247.263434][ T5422] tmpfs: Unknown parameter 'nr_iՠ~' [ 247.571234][ T5431] loop7: detected capacity change from 0 to 512 [ 247.588996][ T5431] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.614633][ T5431] EXT4-fs: Ignoring removed bh option [ 247.630605][ T5431] EXT4-fs (loop7): Test dummy encryption mode enabled [ 247.660440][ T5431] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 247.740221][ T5431] EXT4-fs (loop7): 1 truncate cleaned up [ 247.746279][ T5431] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 247.939823][ T5447] loop8: detected capacity change from 0 to 256 [ 247.952520][ T5447] FAT-fs (loop8): Directory bread(block 64) failed [ 247.959218][ T5447] FAT-fs (loop8): Directory bread(block 65) failed [ 247.966072][ T5447] FAT-fs (loop8): Directory bread(block 66) failed [ 247.972729][ T5447] FAT-fs (loop8): Directory bread(block 67) failed [ 247.979338][ T5447] FAT-fs (loop8): Directory bread(block 68) failed [ 247.986209][ T5447] FAT-fs (loop8): Directory bread(block 69) failed [ 247.992801][ T5447] FAT-fs (loop8): Directory bread(block 70) failed [ 247.999407][ T5447] FAT-fs (loop8): Directory bread(block 71) failed [ 248.006156][ T5447] FAT-fs (loop8): Directory bread(block 72) failed [ 248.012662][ T5447] FAT-fs (loop8): Directory bread(block 73) failed [ 248.139894][ T5448] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1609'. [ 248.163562][ T6] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 248.195621][ T315] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 248.357082][ T6] usb 4-1: config 0 has no interfaces? [ 248.363950][ T6] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 248.373165][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.381740][ T6] usb 4-1: Product: syz [ 248.385962][ T6] usb 4-1: Manufacturer: syz [ 248.390620][ T6] usb 4-1: SerialNumber: syz [ 248.391515][ T4142] EXT4-fs (loop7): unmounting filesystem. [ 248.401061][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 248.402143][ T6] r8152-cfgselector 4-1: config 0 descriptor?? [ 248.412563][ T315] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 248.421042][ T315] usb 3-1: config 0 has no interface number 0 [ 248.427230][ T315] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 248.434831][ T5458] loop7: detected capacity change from 0 to 256 [ 248.439240][ T315] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 248.453176][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.461222][ T315] usb 3-1: Product: syz [ 248.465739][ T315] usb 3-1: Manufacturer: syz [ 248.466392][ T5458] netlink: 'syz.7.1616': attribute type 9 has an invalid length. [ 248.470379][ T315] usb 3-1: SerialNumber: syz [ 248.481162][ T5458] netlink: 'syz.7.1616': attribute type 6 has an invalid length. [ 248.487574][ T315] usb 3-1: config 0 descriptor?? [ 248.495891][ T5446] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 248.534090][ T5462] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1618'. [ 248.580683][ T2865] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 248.628913][ T5467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5467 comm=syz.7.1620 [ 248.718935][ T5446] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 248.741105][ T2865] usb 6-1: device descriptor read/64, error -71 [ 248.846282][ T5442] xt_hashlimit: size too large, truncated to 1048576 [ 248.867638][ T5470] overlayfs: missing 'workdir' [ 249.029842][ T2865] usb 6-1: device descriptor read/64, error -71 [ 249.090090][ T6] usb 4-1: USB disconnect, device number 51 [ 249.157920][ T315] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 249.168460][ T315] asix: probe of 3-1:0.188 failed with error -61 [ 249.319107][ T5485] loop7: detected capacity change from 0 to 512 [ 249.327208][ T5485] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 249.337438][ T2865] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 249.340856][ T5485] EXT4-fs (loop7): 1 truncate cleaned up [ 249.350698][ T5485] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 249.370400][ T5485] EXT4-fs (loop7): shut down requested (0) [ 249.382943][ T4142] EXT4-fs (loop7): unmounting filesystem. [ 249.487747][ T5491] binder: 5489:5491 ioctl 5427 0 returned -22 [ 249.500425][ T2865] usb 6-1: device descriptor read/64, error -71 [ 249.646299][ T5493] netlink: 'syz.3.1628': attribute type 9 has an invalid length. [ 249.654135][ T5493] netlink: 'syz.3.1628': attribute type 6 has an invalid length. [ 249.789181][ T2865] usb 6-1: device descriptor read/64, error -71 [ 249.917601][ T2865] usb usb6-port1: attempt power cycle [ 250.002784][ T5497] xt_hashlimit: max too large, truncated to 1048576 [ 250.077955][ T5441] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 250.366848][ T2865] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 250.434355][ T2865] usb 6-1: device descriptor read/8, error -71 [ 250.496907][ T5514] loop7: detected capacity change from 0 to 512 [ 250.518681][ T5514] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 250.540702][ T5514] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.1635: invalid indirect mapped block 4294967295 (level 0) [ 250.548554][ T1887] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 250.562620][ T5514] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.1635: invalid indirect mapped block 4294967295 (level 1) [ 250.578319][ T5514] EXT4-fs (loop7): 1 orphan inode deleted [ 250.584178][ T5514] EXT4-fs (loop7): 1 truncate cleaned up [ 250.589959][ T5514] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 250.613893][ T2865] usb 6-1: device descriptor read/8, error -71 [ 250.736112][ T4142] EXT4-fs (loop7): unmounting filesystem. [ 250.762476][ T1887] usb 4-1: Using ep0 maxpacket: 16 [ 250.769378][ T1887] usb 4-1: config 0 interface 0 has no altsetting 0 [ 250.776336][ T1887] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 250.785501][ T1887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.803317][ T1887] usb 4-1: config 0 descriptor?? [ 250.819240][ T5505] loop8: detected capacity change from 0 to 131072 [ 250.825686][ T5522] loop7: detected capacity change from 0 to 4096 [ 250.827529][ T5505] F2FS-fs (loop8): invalid crc value [ 250.841904][ T5522] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 250.842640][ T5505] F2FS-fs (loop8): Found nat_bits in checkpoint [ 250.867030][ T5522] fs-verity (loop7, inode 15): Unsupported log_blocksize: 13 [ 250.884805][ T4142] EXT4-fs (loop7): unmounting filesystem. [ 250.912162][ T2865] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 250.922098][ T5505] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 250.957439][ T2865] usb 6-1: device descriptor read/8, error -71 [ 251.022107][ T5534] loop7: detected capacity change from 0 to 256 [ 251.077761][ T5536] loop7: detected capacity change from 0 to 512 [ 251.084405][ T5536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.091428][ T5536] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 251.106081][ T5536] EXT4-fs (loop7): 1 truncate cleaned up [ 251.111898][ T5536] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 251.125801][ T2865] usb 6-1: device descriptor read/8, error -71 [ 251.265741][ T2865] usb usb6-port1: unable to enumerate USB device [ 251.294478][ T1887] hid (null): unknown global tag 0xe [ 251.425580][ T315] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 251.619516][ T315] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 251.631018][ T315] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.642628][ T315] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 251.656943][ T315] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.666486][ T315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 251.674858][ T315] usb 8-1: SerialNumber: syz [ 251.736416][ T1887] usb 3-1: USB disconnect, device number 46 [ 251.829713][ T5550] binder: 5545:5550 ioctl 5427 0 returned -22 [ 251.887817][ T5548] loop2: detected capacity change from 0 to 2048 [ 251.909127][ T315] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 251.938495][ T5548] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1645'. [ 251.974445][ T315] usb 8-1: USB disconnect, device number 12 [ 252.196389][ T5555] loop2: detected capacity change from 0 to 2048 [ 252.249854][ T347] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.275560][ T5555] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1647'. [ 252.409548][ T6] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 252.467969][ T28] kauditd_printk_skb: 227 callbacks suppressed [ 252.467982][ T28] audit: type=1400 audit(1769190476.600:1356): avc: denied { unlink } for pid=4142 comm="syz-executor" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 252.496589][ T28] audit: type=1400 audit(1769190476.600:1357): avc: denied { unlink } for pid=4142 comm="syz-executor" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 252.520700][ T4142] EXT4-fs error (device loop7): mb_free_blocks:1810: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 252.536571][ T4142] EXT4-fs (loop7): unmounting filesystem. [ 252.552714][ T804] Bluetooth: hci0: Frame reassembly failed (-84) [ 252.603434][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.615531][ T6] usb 9-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 252.624753][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 252.632794][ T6] usb 9-1: SerialNumber: syz [ 252.638038][ T6] usb 9-1: config 0 descriptor?? [ 252.893681][ T5569] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.1651'. [ 252.908355][ T5570] loop8: detected capacity change from 0 to 512 [ 253.182700][ T6] usbhid 9-1:0.0: can't add hid device: -32 [ 253.196472][ T6] usbhid: probe of 9-1:0.0 failed with error -32 [ 253.251217][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'. [ 253.307293][ T315] usb 4-1: USB disconnect, device number 52 [ 253.340697][ T5579] loop2: detected capacity change from 0 to 256 [ 253.416319][ T5587] binder: 5582:5587 ioctl 5427 0 returned -22 [ 253.453106][ T5585] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1657'. [ 253.949636][ T1887] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 254.142121][ T1887] usb 6-1: Using ep0 maxpacket: 16 [ 254.148332][ T1887] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 254.157080][ T1887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.167171][ T1887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.177501][ T1887] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.186623][ T1887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.194592][ T1887] usb 6-1: Product: syz [ 254.198765][ T1887] usb 6-1: Manufacturer: syz [ 254.203423][ T1887] usb 6-1: SerialNumber: syz [ 254.552875][ T5613] loop2: detected capacity change from 0 to 1024 [ 254.560217][ T5613] EXT4-fs (loop2): cluster size (1024) smaller than block size (2048) [ 254.625018][ T5617] loop2: detected capacity change from 0 to 512 [ 254.641759][ T1887] usb 6-1: 0:2 : does not exist [ 254.694698][ T5623] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1458873658/1458873659 [ 254.698447][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 254.704313][ T5443] Bluetooth: hci0: command 0x1003 tx timeout [ 254.710747][ T5623] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1458873658/1458873659 [ 254.726383][ T5565] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 254.800034][ T5623] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 254.800034][ T5623] Q&|xX [ 254.839864][ T5626] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1670'. [ 254.864313][ T5631] loop7: detected capacity change from 0 to 256 [ 254.871306][ T5631] exfat: Deprecated parameter 'utf8' [ 254.882789][ T5631] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 255.125576][ T5642] netlink: 45349 bytes leftover after parsing attributes in process `syz.7.1671'. [ 255.198259][ T5643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1676'. [ 255.296264][ T1887] usb 6-1: USB disconnect, device number 33 [ 255.326984][ T6] usb 9-1: USB disconnect, device number 13 [ 255.557297][ T3692] Bluetooth: hci0: Frame reassembly failed (-84) [ 256.281258][ T6] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 256.487076][ T6] usb 6-1: config 0 has no interfaces? [ 256.498913][ T6] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 256.521157][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.550000][ T6] usb 6-1: Product: syz [ 256.559705][ T6] usb 6-1: Manufacturer: syz [ 256.585168][ T6] usb 6-1: SerialNumber: syz [ 256.598647][ T5682] loop2: detected capacity change from 0 to 256 [ 256.599743][ T6] r8152-cfgselector 6-1: config 0 descriptor?? [ 256.633027][ T5682] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.684001][ T284] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 256.704050][ T284] FAT-fs (loop2): Filesystem has been set read-only [ 256.718540][ T284] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 256.762472][ T1887] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 256.830032][ T5668] xt_hashlimit: size too large, truncated to 1048576 [ 257.064835][ T1887] usb 9-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 257.083311][ T1887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.097018][ T1887] usb-storage 9-1:32.0: USB Mass Storage device detected [ 257.137029][ T1887] usb-storage 9-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 257.389747][ T5687] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.397067][ T5687] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.404900][ T5687] device bridge_slave_0 entered promiscuous mode [ 257.412171][ T5687] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.419528][ T5687] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.493085][ T5687] device bridge_slave_1 entered promiscuous mode [ 257.526646][ T5694] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1695'. [ 257.759373][ T5687] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.766497][ T5687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.774010][ T5687] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.781062][ T5687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.789234][ T5444] Bluetooth: hci0: command 0x1003 tx timeout [ 257.795364][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 257.801717][ T5656] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 257.818695][ T6] r8152-cfgselector 6-1: Unknown version 0x0000 [ 257.830898][ T6] r8152-cfgselector 6-1: USB disconnect, device number 34 [ 257.841305][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.849701][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.858456][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.866025][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.880347][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.888748][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.895914][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.904374][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.912759][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.919848][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.937124][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.945513][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.960855][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.972069][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.980179][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.987933][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.996507][ T5687] device veth0_vlan entered promiscuous mode [ 258.009393][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.018711][ T5687] device veth1_macvtap entered promiscuous mode [ 258.028519][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.038633][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.126002][ T5706] binder: 5704:5706 ioctl 5427 0 returned -22 [ 258.132391][ T5706] binder: 5704:5706 ioctl c0306201 200000000240 returned -11 [ 258.238500][ T724] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 258.430904][ T724] usb 4-1: Using ep0 maxpacket: 16 [ 258.442337][ T724] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 258.451043][ T724] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.461190][ T724] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.472295][ T724] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.481414][ T724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.490134][ T724] usb 4-1: Product: syz [ 258.494314][ T724] usb 4-1: Manufacturer: syz [ 258.498979][ T724] usb 4-1: SerialNumber: syz [ 258.517468][ T804] device bridge_slave_1 left promiscuous mode [ 258.523624][ T804] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.531567][ T804] device bridge_slave_0 left promiscuous mode [ 258.537754][ T804] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.557664][ T804] device bridge0 left promiscuous mode [ 258.563340][ T804] device veth1_macvtap left promiscuous mode [ 258.569571][ T804] device veth0_vlan left promiscuous mode [ 258.616305][ T5717] kvm: emulating exchange as write [ 258.936758][ T724] usb 4-1: 0:2 : does not exist [ 259.339992][ T315] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 259.532491][ T315] usb 10-1: Using ep0 maxpacket: 16 [ 259.539908][ T315] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.551108][ T315] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 259.564043][ T315] usb 10-1: New USB device found, idVendor=045e, idProduct=076d, bcdDevice= 0.00 [ 259.570529][ T60] usb 9-1: USB disconnect, device number 14 [ 259.573482][ T315] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.591150][ T315] usb 10-1: config 0 descriptor?? [ 259.595690][ T724] usb 4-1: USB disconnect, device number 53 [ 259.610461][ T5732] overlayfs: missing 'workdir' [ 259.629284][ T5732] x_tables: duplicate underflow at hook 1 [ 259.647290][ T5734] loop8: detected capacity change from 0 to 512 [ 259.659312][ T5734] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.673165][ T5734] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 259.711847][ T4565] EXT4-fs (loop8): unmounting filesystem. [ 259.781506][ T5741] binder: 5739:5741 ioctl 5427 0 returned -22 [ 259.821351][ T6] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 259.829723][ T531] udevd[531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 260.015072][ T6] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 260.023355][ T6] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.033654][ T6] usb 6-1: config 0 has no interface number 0 [ 260.041486][ T6] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 260.050613][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.058633][ T6] usb 6-1: Product: syz [ 260.062948][ T6] usb 6-1: Manufacturer: syz [ 260.067571][ T6] usb 6-1: SerialNumber: syz [ 260.072729][ T6] usb 6-1: config 0 descriptor?? [ 260.149806][ T5743] loop7: detected capacity change from 0 to 512 [ 260.161572][ T5743] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 260.171076][ T5743] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.208804][ T5743] EXT4-fs (loop7): shut down requested (1) [ 260.215339][ T5743] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 260.224608][ T5743] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 260.283414][ T5745] EXT4-fs (loop7): unmounting filesystem. [ 260.301772][ T6] usb 6-1: USB disconnect, device number 35 [ 260.401765][ T5750] loop9: detected capacity change from 0 to 256 [ 260.435066][ T5750] input: syz1 as /devices/virtual/input/input29 [ 260.466907][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.474058][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.481463][ T5751] device bridge_slave_0 entered promiscuous mode [ 260.488550][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.495634][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.502994][ T5751] device bridge_slave_1 entered promiscuous mode [ 260.588233][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.595927][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.605071][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.613952][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.622388][ T804] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.629541][ T804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.654873][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.662910][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.671510][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.681665][ T804] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.688761][ T804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.698192][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.706584][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.717934][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.726242][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.747580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.756414][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.768041][ T5775] loop8: detected capacity change from 0 to 512 [ 260.775214][ T5775] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 260.788848][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.790213][ T5775] EXT4-fs (loop8): 1 truncate cleaned up [ 260.797426][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.810888][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.818297][ T6] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 260.824200][ T5775] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 260.826284][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.849784][ T5775] xt_l2tp: wrong L2TP version: 0 [ 260.850513][ T5751] device veth0_vlan entered promiscuous mode [ 260.873396][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.883013][ T4565] EXT4-fs (loop8): unmounting filesystem. [ 260.885151][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.898664][ T5751] device veth1_macvtap entered promiscuous mode [ 260.913079][ T3692] device bridge_slave_1 left promiscuous mode [ 260.919245][ T3692] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.933799][ T3692] device bridge_slave_0 left promiscuous mode [ 260.942590][ T5780] loop8: detected capacity change from 0 to 4096 [ 260.949453][ T3692] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.966098][ T3692] device veth1_macvtap left promiscuous mode [ 260.973212][ T5780] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 260.982337][ T3692] device veth0_vlan left promiscuous mode [ 261.032514][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 261.046499][ T6] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 261.055616][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.064557][ T6] usb 4-1: config 0 descriptor?? [ 261.090981][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.099226][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.108266][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.118326][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.127442][ T804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.466437][ T724] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 261.613397][ T6] uclogic 0003:2179:0053.0016: interface is invalid, ignoring [ 261.618129][ T818] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 261.660947][ T724] usb 9-1: Using ep0 maxpacket: 16 [ 261.669393][ T724] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 261.678420][ T724] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.688548][ T724] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.698983][ T724] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.708082][ T724] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.716312][ T724] usb 9-1: Product: syz [ 261.720482][ T724] usb 9-1: Manufacturer: syz [ 261.725102][ T724] usb 9-1: SerialNumber: syz [ 261.821284][ T818] usb 5-1: Using ep0 maxpacket: 16 [ 261.827639][ T818] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.832897][ T6] usb 4-1: USB disconnect, device number 54 [ 261.843906][ T818] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 261.853072][ T818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.862706][ T818] usb 5-1: config 0 descriptor?? [ 262.159929][ T724] usb 9-1: 0:2 : does not exist [ 262.218008][ T315] usbhid 10-1:0.0: can't add hid device: -71 [ 262.224154][ T315] usbhid: probe of 10-1:0.0 failed with error -71 [ 262.238498][ T315] usb 10-1: USB disconnect, device number 2 [ 262.261858][ T5796] loop9: detected capacity change from 0 to 256 [ 262.268490][ T5796] exfat: Deprecated parameter 'utf8' [ 262.278001][ T5796] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 262.460659][ T5803] netlink: 45349 bytes leftover after parsing attributes in process `syz.9.1722'. [ 263.128491][ T724] usb 9-1: USB disconnect, device number 15 [ 263.635698][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 263.789170][ T39] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 263.983627][ T39] usb 6-1: not running at top speed; connect to a high speed hub [ 263.992149][ T39] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 264.003971][ T39] usb 6-1: config 1 interface 0 has no altsetting 0 [ 264.018384][ T39] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 264.028203][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.037942][ T39] usb 6-1: Product:   [ 264.048796][ T5806] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 264.130041][ T4565] EXT4-fs (loop8): unmounting filesystem. [ 264.273988][ T5823] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1729'. [ 264.336993][ T39] usbhid 6-1:1.0: can't add hid device: -71 [ 264.343485][ T39] usbhid: probe of 6-1:1.0 failed with error -71 [ 264.358648][ T39] usb 6-1: USB disconnect, device number 36 [ 264.405513][ T818] usbhid 5-1:0.0: can't add hid device: -71 [ 264.433489][ T818] usbhid: probe of 5-1:0.0 failed with error -71 [ 264.460867][ T818] usb 5-1: USB disconnect, device number 19 [ 264.518735][ T5833] loop8: detected capacity change from 0 to 512 [ 264.598293][ T5835] binder: 5830:5835 ioctl 5427 0 returned -22 [ 264.604956][ T5833] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2196: inode #12: comm syz.8.1734: corrupted in-inode xattr [ 264.626804][ T5833] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1734: couldn't read orphan inode 12 (err -117) [ 264.639103][ T5833] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 264.653998][ T5833] EXT4-fs error (device loop8): ext4_add_entry:2486: inode #2: comm syz.8.1734: Directory hole found for htree leaf block 0 [ 264.674700][ T4565] EXT4-fs (loop8): unmounting filesystem. [ 264.731408][ T5827] loop4: detected capacity change from 0 to 40427 [ 264.741434][ T5827] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 264.749347][ T5827] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 264.759571][ T5827] F2FS-fs (loop4): invalid crc value [ 264.771365][ T5827] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 264.808351][ T5827] F2FS-fs (loop4): Start checkpoint disabled! [ 264.815069][ T5827] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 264.823042][ T5827] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 264.830349][ T5827] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 264.884797][ T339] kworker/u4:3: attempt to access beyond end of device [ 264.884797][ T339] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.017461][ T5847] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.1736'. [ 265.123291][ T5849] loop4: detected capacity change from 0 to 512 [ 265.187576][ T724] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 265.199717][ T5849] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 265.211382][ T5849] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 265.222070][ T5849] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1737: Corrupt directory, running e2fsck is recommended [ 265.235865][ T5849] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 265.245702][ T5849] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #15: comm syz.4.1737: corrupted in-inode xattr [ 265.258879][ T5849] EXT4-fs (loop4): Remounting filesystem read-only [ 265.265702][ T5849] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1737: couldn't read orphan inode 15 (err -117) [ 265.278188][ T5849] EXT4-fs (loop4): Remounting filesystem read-only [ 265.284790][ T5849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 265.298897][ T5849] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 265.310550][ T5849] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 265.321625][ T5849] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1737: Corrupt directory, running e2fsck is recommended [ 265.335706][ T5849] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 265.347358][ T5849] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 265.357626][ T5849] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1737: Corrupt directory, running e2fsck is recommended [ 265.371397][ T5849] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 265.383173][ T5849] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 265.393639][ T5849] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1737: Corrupt directory, running e2fsck is recommended [ 265.407275][ T724] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.408058][ T5849] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 265.421374][ T724] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.438857][ T724] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 265.447205][ T724] usb 9-1: Product: syz [ 265.451422][ T724] usb 9-1: SerialNumber: syz [ 265.688164][ T5838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.697895][ T5838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.825389][ T60] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 265.906975][ T6] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 266.174210][ T60] usb 10-1: Using ep0 maxpacket: 16 [ 266.180483][ T60] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.190717][ T60] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.201032][ T60] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.210197][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.218319][ T6] usb 5-1: device descriptor read/64, error -71 [ 266.224585][ T60] usb 10-1: Product: syz [ 266.228871][ T60] usb 10-1: Manufacturer: syz [ 266.233586][ T60] usb 10-1: SerialNumber: syz [ 266.313260][ T818] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 266.460403][ T60] usb 10-1: 0:2 : does not exist [ 266.469172][ T60] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 266.490673][ T60] usb 10-1: USB disconnect, device number 3 [ 266.505894][ T818] usb 4-1: Using ep0 maxpacket: 16 [ 266.514385][ T818] usb 4-1: config 0 interface 0 has no altsetting 0 [ 266.521233][ T818] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 266.527151][ T6] usb 5-1: device descriptor read/64, error -71 [ 266.530787][ T818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.551852][ T818] usb 4-1: config 0 descriptor?? [ 266.632901][ T5876] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1746'. [ 266.796201][ T5838] netlink: 816 bytes leftover after parsing attributes in process `syz.8.1735'. [ 266.808156][ T724] cdc_ncm 9-1:1.0: failed to get mac address [ 266.814446][ T724] cdc_ncm 9-1:1.0: bind() failure [ 266.820681][ T724] cdc_ncm: probe of 9-1:1.1 failed with error -71 [ 266.827256][ T6] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 266.835246][ T724] cdc_mbim: probe of 9-1:1.1 failed with error -71 [ 266.845011][ T724] usb 9-1: USB disconnect, device number 16 [ 267.008455][ T6] usb 5-1: device descriptor read/64, error -71 [ 267.297190][ T6] usb 5-1: device descriptor read/64, error -71 [ 267.350665][ T315] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 267.425780][ T6] usb usb5-port1: attempt power cycle [ 267.508644][ T5887] binder: 5885:5887 ioctl 5427 0 returned -22 [ 267.555040][ T315] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 267.566225][ T315] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 267.580692][ T315] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.590604][ T315] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 267.599013][ T315] usb 10-1: SerialNumber: syz [ 267.611823][ T315] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 267.620032][ T315] cdc_acm 10-1:1.0: This needs exactly 3 endpoints [ 267.626759][ T315] cdc_acm: probe of 10-1:1.0 failed with error -22 [ 267.834269][ T315] usb 10-1: USB disconnect, device number 4 [ 267.864074][ T6] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 267.907911][ T6] usb 5-1: device descriptor read/8, error -71 [ 268.068296][ T6] usb 5-1: device descriptor read/8, error -71 [ 268.327147][ T5751] EXT4-fs (loop4): unmounting filesystem. [ 268.487736][ T5897] loop9: detected capacity change from 0 to 512 [ 268.513616][ T5897] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.1754: inode #1: comm syz.9.1754: iget: illegal inode # [ 268.527038][ T5897] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.1754: error while reading EA inode 1 err=-117 [ 268.617165][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1751'. [ 268.772631][ T5897] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.1754: inode #1: comm syz.9.1754: iget: illegal inode # [ 268.787523][ T5897] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.1754: error while reading EA inode 1 err=-117 [ 268.800436][ T5897] EXT4-fs (loop9): 1 orphan inode deleted [ 268.806461][ T5897] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 269.056158][ T5911] loop8: detected capacity change from 0 to 40427 [ 269.089317][ T818] usbhid 4-1:0.0: can't add hid device: -71 [ 269.093883][ T5911] F2FS-fs (loop8): Invalid log_blocksize (64), supports only 12 [ 269.102065][ T818] usbhid: probe of 4-1:0.0 failed with error -71 [ 269.113914][ T5911] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 269.124271][ T5911] F2FS-fs (loop8): invalid crc value [ 269.138263][ T818] usb 4-1: USB disconnect, device number 55 [ 269.169331][ T5911] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 269.237231][ T5911] F2FS-fs (loop8): Start checkpoint disabled! [ 269.258619][ T5911] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 269.348109][ T5911] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 269.378742][ T5687] EXT4-fs (loop9): unmounting filesystem. [ 269.403382][ T5911] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 269.486597][ T10] kworker/u4:1: attempt to access beyond end of device [ 269.486597][ T10] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.508821][ T5930] binder: 5923:5930 ioctl 5427 0 returned -22 [ 269.522845][ T5931] loop9: detected capacity change from 0 to 256 [ 269.530038][ T5931] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.555759][ T5931] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.810581][ T6] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 269.860593][ T5940] loop8: detected capacity change from 0 to 4096 [ 269.883574][ T5940] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 270.005620][ T6] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 270.014753][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.022724][ T6] usb 4-1: Product: syz [ 270.026927][ T6] usb 4-1: Manufacturer: syz [ 270.031524][ T6] usb 4-1: SerialNumber: syz [ 270.206274][ T552] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 270.253423][ T6] usb 4-1: Found UVC 0.00 device syz (093a:2476) [ 270.259876][ T6] usb 4-1: No valid video chain found. [ 270.266040][ T6] usb 4-1: USB disconnect, device number 56 [ 270.355442][ T28] audit: type=1400 audit(1769190493.318:1358): avc: denied { mount } for pid=5942 comm="syz.4.1768" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 270.420175][ T552] usb 9-1: Using ep0 maxpacket: 16 [ 270.426432][ T552] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 270.452436][ T552] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.464836][ T552] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.484454][ T552] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.502869][ T552] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.511995][ T552] usb 9-1: Product: syz [ 270.516309][ T552] usb 9-1: Manufacturer: syz [ 270.521811][ T552] usb 9-1: SerialNumber: syz [ 270.576297][ T5946] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1769'. [ 270.617844][ T5943] loop4: detected capacity change from 0 to 40427 [ 270.643673][ T5943] F2FS-fs (loop4): fault_type options not supported [ 270.652220][ T5943] F2FS-fs (loop4): extra_attr or flexible_inline_xattr feature is off [ 270.834425][ T28] audit: type=1400 audit(1769190493.767:1359): avc: denied { map } for pid=5954 comm="syz.5.1773" path="socket:[49721]" dev="sockfs" ino=49721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 270.922263][ T28] audit: type=1400 audit(1769190493.767:1360): avc: denied { accept } for pid=5954 comm="syz.5.1773" path="socket:[49721]" dev="sockfs" ino=49721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 270.973151][ T552] usb 9-1: 0:2 : does not exist [ 271.042239][ T5966] loop4: detected capacity change from 0 to 256 [ 271.137447][ T5968] bridge0: port 3(vlan3) entered blocking state [ 271.144099][ T5968] bridge0: port 3(vlan3) entered disabled state [ 271.566766][ T5971] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.1778'. [ 271.581035][ T5966] exfat: Deprecated parameter 'utf8' [ 271.716200][ T5973] binder: 5965:5973 ioctl 5427 0 returned -22 [ 271.770030][ T5966] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 272.048463][ T5979] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.1777'. [ 272.252192][ T5982] x_tables: duplicate underflow at hook 1 [ 272.265976][ T552] usb 9-1: USB disconnect, device number 17 [ 272.301364][ T28] audit: type=1400 audit(1769190495.141:1361): avc: denied { mounton } for pid=5984 comm="syz.4.1784" path="/8/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 272.327022][ T5988] 9pnet: p9_errstr2errno: server reported unknown error  [ 272.362073][ T5991] xt_hashlimit: size too large, truncated to 1048576 [ 272.514198][ T5999] 9pnet_fd: Insufficient options for proto=fd [ 272.591814][ T4565] EXT4-fs (loop8): unmounting filesystem. [ 273.025354][ T60] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 273.326735][ T6013] binder: 6010:6013 ioctl 5427 0 returned -22 [ 273.622471][ T6017] loop9: detected capacity change from 0 to 256 [ 273.639637][ T6017] exfat: Deprecated parameter 'utf8' [ 273.654915][ T6017] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 273.780889][ T6021] loop8: detected capacity change from 0 to 256 [ 273.787555][ T6021] exfat: Deprecated parameter 'utf8' [ 273.834796][ T6021] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 273.852680][ T6023] netlink: 45349 bytes leftover after parsing attributes in process `syz.9.1795'. [ 273.996616][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 274.010056][ T60] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 274.024697][ T60] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 274.058933][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.067470][ T60] usb 4-1: Product: syz [ 274.071630][ T60] usb 4-1: Manufacturer: syz [ 274.076201][ T60] usb 4-1: SerialNumber: syz [ 274.082138][ T60] usb 4-1: config 0 descriptor?? [ 274.088205][ T60] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 274.096447][ T60] usb 4-1: Detected FT232R [ 274.180207][ T6025] netlink: 45349 bytes leftover after parsing attributes in process `syz.8.1797'. [ 274.436622][ T6032] binder: 6030:6032 ioctl 5427 0 returned -22 [ 274.558196][ T6034] loop9: detected capacity change from 0 to 4096 [ 274.570460][ T6034] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 274.727752][ T28] audit: type=1400 audit(1769190497.404:1362): avc: denied { read } for pid=6037 comm="syz.8.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.901634][ T724] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 275.061976][ T6012] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 275.093999][ T724] usb 10-1: Using ep0 maxpacket: 16 [ 275.100391][ T724] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 275.109758][ T724] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.120033][ T724] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.130567][ T724] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.139719][ T724] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.147934][ T724] usb 10-1: Product: syz [ 275.152204][ T724] usb 10-1: Manufacturer: syz [ 275.156875][ T724] usb 10-1: SerialNumber: syz [ 275.222348][ T6012] usb 9-1: device descriptor read/64, error -71 [ 275.281571][ T28] audit: type=1400 audit(1769190497.928:1363): avc: denied { map } for pid=6040 comm="syz.5.1803" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.335196][ T6043] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 275.344248][ T6043] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 275.469649][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 275.476774][ T60] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 275.484251][ T60] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 275.492669][ T60] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 275.502361][ T60] usb 4-1: USB disconnect, device number 57 [ 275.510971][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 275.521800][ T6012] usb 9-1: device descriptor read/64, error -71 [ 275.532363][ T60] ftdi_sio 4-1:0.0: device disconnected [ 275.591591][ T724] usb 10-1: 0:2 : does not exist [ 275.705011][ T6061] binder: 6055:6061 ioctl 5427 0 returned -22 [ 275.810592][ T6012] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 275.820155][ T28] audit: type=1326 audit(1769190498.423:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d48d9acb9 code=0x7ffc0000 [ 275.843772][ T28] audit: type=1326 audit(1769190498.423:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d48d9acb9 code=0x7ffc0000 [ 275.867813][ T28] audit: type=1326 audit(1769190498.423:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f9d48d9acb9 code=0x7ffc0000 [ 275.891312][ T28] audit: type=1326 audit(1769190498.423:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d48d9acb9 code=0x7ffc0000 [ 275.914952][ T28] audit: type=1326 audit(1769190498.423:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d48d9acb9 code=0x7ffc0000 [ 275.938920][ T28] audit: type=1326 audit(1769190498.461:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d48d9acb9 code=0x7ffc0000 [ 275.962451][ T28] audit: type=1326 audit(1769190498.479:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d48d9acb9 code=0x7ffc0000 [ 275.986051][ T28] audit: type=1326 audit(1769190498.479:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d48d9acb9 code=0x7ffc0000 [ 275.986084][ T6012] usb 9-1: device descriptor read/64, error -71 [ 276.009796][ T28] audit: type=1326 audit(1769190498.507:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9d48d9acb9 code=0x7ffc0000 [ 276.039675][ T28] audit: type=1326 audit(1769190498.507:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d48d9acb9 code=0x7ffc0000 [ 276.262470][ T724] usb 10-1: USB disconnect, device number 5 [ 276.276591][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 276.302650][ T6012] usb 9-1: device descriptor read/64, error -71 [ 276.444766][ T6069] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.1812'. [ 276.568164][ T6012] usb usb9-port1: attempt power cycle [ 276.633535][ T339] Bluetooth: hci0: Frame reassembly failed (-84) [ 276.665316][ T6078] binder: 6074:6078 ioctl 5427 0 returned -22 [ 276.672125][ T6078] binder: 6074:6078 ioctl c0306201 200000000240 returned -11 [ 276.802156][ T5687] EXT4-fs (loop9): unmounting filesystem. [ 276.812124][ T6080] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1816'. [ 276.884705][ T6086] loop9: detected capacity change from 0 to 512 [ 276.891949][ T6086] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.901134][ T6086] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 276.910010][ T6086] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 276.919438][ T6086] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 276.927968][ T6086] System zones: 0-2, 18-18, 34-35 [ 276.933744][ T6086] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 277.008415][ T6012] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 277.386052][ T6012] usb 9-1: device descriptor read/8, error -71 [ 277.544625][ T6012] usb 9-1: device descriptor read/8, error -71 [ 277.575752][ T6099] binder: 6096:6099 ioctl 5427 0 returned -22 [ 277.583558][ T6099] binder: 6096:6099 ioctl c0306201 200000000240 returned -11 [ 277.794264][ T5687] EXT4-fs (loop9): unmounting filesystem. [ 277.874574][ T6106] binder: 6104:6106 ioctl 5427 0 returned -22 [ 277.896144][ T6012] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 277.929483][ T6012] usb 9-1: device descriptor read/8, error -71 [ 278.260358][ T6012] usb 9-1: device descriptor read/8, error -71 [ 278.399001][ T6012] usb usb9-port1: unable to enumerate USB device [ 278.444251][ T6117] loop4: detected capacity change from 0 to 4096 [ 278.455344][ T6117] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 278.565612][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1826'. [ 278.788746][ T6122] loop9: detected capacity change from 0 to 40427 [ 278.799171][ T6122] F2FS-fs (loop9): invalid crc value [ 278.805604][ T6122] F2FS-fs (loop9): Found nat_bits in checkpoint [ 278.816439][ T2865] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 278.826626][ T5443] Bluetooth: hci0: command 0x1003 tx timeout [ 278.832824][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 278.839362][ T6077] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 278.842872][ T6122] F2FS-fs (loop9): Start checkpoint disabled! [ 278.853897][ T6122] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 278.863620][ T6122] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 278.909433][ T3692] kworker/u4:7: attempt to access beyond end of device [ 278.909433][ T3692] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 278.976335][ T6012] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 279.001387][ T6130] loop9: detected capacity change from 0 to 4096 [ 279.020754][ T6130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.040546][ T2865] usb 5-1: Using ep0 maxpacket: 16 [ 279.047631][ T2865] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 279.056930][ T2865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.067334][ T2865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.071444][ T6132] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.1829'. [ 279.105963][ T6130] EXT4-fs (loop9): Test dummy encryption mode enabled [ 279.140440][ T2865] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.157692][ T6130] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 279.166144][ T2865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.167157][ T6130] System zones: 0-5 [ 279.174663][ T2865] usb 5-1: Product: syz [ 279.179090][ T6130] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 279.182675][ T2865] usb 5-1: Manufacturer: syz [ 279.199151][ T2865] usb 5-1: SerialNumber: syz [ 279.265282][ T6012] usb 9-1: Using ep0 maxpacket: 16 [ 279.273205][ T6012] usb 9-1: config 0 interface 0 has no altsetting 0 [ 279.280190][ T6012] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 279.289574][ T6012] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.298815][ T6012] usb 9-1: config 0 descriptor?? [ 279.511409][ T6138] IPv6: NLM_F_REPLACE set, but no existing node found! [ 279.661521][ T2865] usb 5-1: 0:2 : does not exist [ 279.877652][ T6012] hid (null): unknown global tag 0xe [ 279.890901][ T5687] EXT4-fs (loop9): unmounting filesystem. [ 280.292488][ T6148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.429946][ T6150] xt_hashlimit: size too large, truncated to 1048576 [ 280.479857][ T2865] usb 5-1: USB disconnect, device number 24 [ 281.332780][ T818] usb 9-1: USB disconnect, device number 22 [ 281.412836][ T5751] EXT4-fs (loop4): unmounting filesystem. [ 281.441905][ T6162] binder: BINDER_SET_CONTEXT_MGR already set [ 281.451036][ T6162] binder: 6156:6162 ioctl 4018620d 200000000040 returned -16 [ 281.468551][ T6162] binder: 6156:6162 ioctl 5427 0 returned -22 [ 281.474780][ T6163] loop9: detected capacity change from 0 to 2048 [ 281.527624][ T6159] loop8: detected capacity change from 0 to 40427 [ 281.537000][ T6159] F2FS-fs (loop8): fault_type options not supported [ 281.543700][ T6159] F2FS-fs (loop8): fault_injection options not supported [ 281.550735][ T6159] F2FS-fs (loop8): Image doesn't support compression [ 281.573393][ T6163] netlink: 7 bytes leftover after parsing attributes in process `syz.9.1840'. [ 281.585233][ T6159] F2FS-fs (loop8): invalid crc value [ 281.610575][ T6159] F2FS-fs (loop8): Found nat_bits in checkpoint [ 281.688844][ T6159] F2FS-fs (loop8): Start checkpoint disabled! [ 281.695461][ T6159] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 281.702874][ T6159] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 281.802445][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1841'. [ 281.930695][ T339] kworker/u4:3: attempt to access beyond end of device [ 281.930695][ T339] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 282.042414][ T6171] loop8: detected capacity change from 0 to 1024 [ 282.139630][ T6177] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.1843'. [ 282.285953][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 282.285975][ T28] audit: type=1400 audit(1769190504.482:1376): avc: denied { create } for pid=6170 comm="syz.8.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 282.314406][ T28] audit: type=1326 audit(1769190504.510:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.9.1844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f454299acb9 code=0x0 [ 283.179566][ T818] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 283.295481][ T6207] tipc: Started in network mode [ 283.300494][ T6207] tipc: Node identity ac1414aa, cluster identity 4711 [ 283.308041][ T6207] tipc: Enabled bearer , priority 10 [ 283.315237][ T6209] xt_hashlimit: size too large, truncated to 1048576 [ 283.372067][ T818] usb 5-1: Using ep0 maxpacket: 32 [ 283.377712][ T2865] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 283.390146][ T818] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 283.420699][ T818] usb 5-1: config 0 has no interface number 0 [ 283.434787][ T818] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 283.445806][ T6213] loop9: detected capacity change from 0 to 2048 [ 283.496789][ T818] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 283.498942][ T6212] netlink: 7 bytes leftover after parsing attributes in process `syz.9.1855'. [ 283.515674][ T818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.530970][ T818] usb 5-1: Product: syz [ 283.545750][ T818] usb 5-1: Manufacturer: syz [ 283.550663][ T818] usb 5-1: SerialNumber: syz [ 283.557609][ T818] usb 5-1: config 0 descriptor?? [ 283.562635][ T28] audit: type=1400 audit(1769190505.669:1378): avc: denied { map } for pid=6215 comm="syz.3.1857" path="socket:[51221]" dev="sockfs" ino=51221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 283.562929][ T6218] binder: Bad value for 'max' [ 283.587035][ T2865] usb 6-1: Using ep0 maxpacket: 16 [ 283.597064][ T6193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 283.604347][ T28] audit: type=1400 audit(1769190505.707:1379): avc: denied { map } for pid=6215 comm="syz.3.1857" path="socket:[51222]" dev="sockfs" ino=51222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.630450][ T2865] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 283.639304][ T2865] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.649772][ T2865] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.673092][ T2865] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.692960][ T2865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.701056][ T2865] usb 6-1: Product: syz [ 283.714307][ T2865] usb 6-1: Manufacturer: syz [ 283.718975][ T2865] usb 6-1: SerialNumber: syz [ 283.844424][ T6193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 283.855077][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1859'. [ 283.981093][ T6230] loop8: detected capacity change from 0 to 256 [ 283.987933][ T6230] exfat: Deprecated parameter 'utf8' [ 283.999841][ T6230] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 284.162180][ T2865] usb 6-1: 0:2 : does not exist [ 284.173977][ T6232] netlink: 45349 bytes leftover after parsing attributes in process `syz.8.1860'. [ 284.293678][ T818] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 284.304537][ T818] asix: probe of 5-1:0.188 failed with error -61 [ 284.495076][ T724] tipc: Node number set to 2886997162 [ 284.511005][ T724] usb 5-1: USB disconnect, device number 25 [ 284.571173][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 284.627420][ T6243] loop9: detected capacity change from 0 to 256 [ 284.639753][ T6243] FAT-fs (loop9): Directory bread(block 64) failed [ 284.648618][ T6243] FAT-fs (loop9): Directory bread(block 65) failed [ 284.666589][ T6243] FAT-fs (loop9): Directory bread(block 66) failed [ 284.673140][ T6243] FAT-fs (loop9): Directory bread(block 67) failed [ 284.684130][ T6249] xt_hashlimit: size too large, truncated to 1048576 [ 284.685548][ T6243] FAT-fs (loop9): Directory bread(block 68) failed [ 284.699087][ T6243] FAT-fs (loop9): Directory bread(block 69) failed [ 284.705664][ T6243] FAT-fs (loop9): Directory bread(block 70) failed [ 284.712413][ T6243] FAT-fs (loop9): Directory bread(block 71) failed [ 284.718977][ T6243] FAT-fs (loop9): Directory bread(block 72) failed [ 284.725898][ T6243] FAT-fs (loop9): Directory bread(block 73) failed [ 284.751475][ T28] audit: type=1326 audit(1769190506.782:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.9.1863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f454299acb9 code=0x0 [ 284.835667][ T2865] usb 6-1: USB disconnect, device number 37 [ 284.868124][ T6251] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1863'. [ 285.217725][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1874'. [ 285.372060][ T818] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 285.587148][ T818] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.597458][ T818] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 285.609154][ T818] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 285.618501][ T818] usb 9-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 285.626919][ T818] usb 9-1: Product: syz [ 285.631842][ T818] usb 9-1: SerialNumber: syz [ 285.717088][ T818] usb 9-1: config 0 descriptor?? [ 285.997084][ T6287] xt_hashlimit: size too large, truncated to 1048576 [ 286.168113][ T6293] loop4: detected capacity change from 0 to 256 [ 286.174716][ T6293] exfat: Deprecated parameter 'utf8' [ 286.182334][ T6293] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 286.374888][ T6296] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.1882'. [ 286.783820][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 286.783829][ T5444] Bluetooth: hci0: command 0x1003 tx timeout [ 286.796158][ T6239] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 286.823441][ T6302] loop9: detected capacity change from 0 to 4096 [ 286.835675][ T6302] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 286.844854][ T724] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 286.944389][ T6306] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1886'. [ 287.040620][ T724] usb 6-1: Using ep0 maxpacket: 32 [ 287.047867][ T724] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 287.056210][ T724] usb 6-1: config 0 has no interface number 0 [ 287.062479][ T724] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 287.074347][ T724] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 287.083479][ T724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.091594][ T724] usb 6-1: Product: syz [ 287.096004][ T724] usb 6-1: Manufacturer: syz [ 287.100680][ T724] usb 6-1: SerialNumber: syz [ 287.114972][ T724] usb 6-1: config 0 descriptor?? [ 287.124911][ T6300] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 287.134136][ T28] audit: type=1400 audit(1769190509.017:1381): avc: denied { write } for pid=6312 comm="syz.4.1889" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 287.179536][ T60] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 287.336361][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'. [ 287.347701][ T6300] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 287.382756][ T60] usb 10-1: Using ep0 maxpacket: 16 [ 287.394295][ T60] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 287.403087][ T60] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.413634][ T60] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.426625][ T60] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.435776][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.444058][ T60] usb 10-1: Product: syz [ 287.448428][ T60] usb 10-1: Manufacturer: syz [ 287.453424][ T60] usb 10-1: SerialNumber: syz [ 287.575744][ T724] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 287.586032][ T724] asix: probe of 6-1:0.188 failed with error -61 [ 287.799222][ T724] usb 6-1: USB disconnect, device number 38 [ 287.893886][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 287.900651][ T60] usb 10-1: 0:2 : does not exist [ 287.951307][ T28] audit: type=1326 audit(1769190509.774:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.3.1895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d48d9acb9 code=0x0 [ 288.059498][ T6332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1895'. [ 288.140036][ T818] usb 9-1: USB disconnect, device number 23 [ 288.195615][ T6339] loop8: detected capacity change from 0 to 256 [ 288.202274][ T6339] exfat: Deprecated parameter 'utf8' [ 288.210622][ T6339] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 288.393216][ T6342] netlink: 45349 bytes leftover after parsing attributes in process `syz.8.1898'. [ 288.580027][ T60] usb 10-1: USB disconnect, device number 6 [ 289.210548][ T5687] EXT4-fs (loop9): unmounting filesystem. [ 289.228712][ T6370] loop9: detected capacity change from 0 to 256 [ 289.297682][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1907'. [ 289.382989][ T347] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.906838][ T818] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 290.035159][ T5443] Bluetooth: hci0: command 0x1003 tx timeout [ 290.041234][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 290.049441][ T6330] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 290.093663][ T6388] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1914'. [ 290.102600][ T818] usb 10-1: Using ep0 maxpacket: 16 [ 290.109004][ T818] usb 10-1: config 0 interface 0 has no altsetting 0 [ 290.116366][ T818] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 290.125775][ T818] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.153026][ T818] usb 10-1: config 0 descriptor?? [ 290.249050][ T2865] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 290.356009][ T60] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 290.464214][ T2865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.474405][ T2865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.484759][ T2865] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.493839][ T2865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.502274][ T2865] usb 5-1: Product: syz [ 290.507242][ T2865] usb 5-1: Manufacturer: syz [ 290.511884][ T2865] usb 5-1: SerialNumber: syz [ 290.559235][ T60] usb 9-1: Using ep0 maxpacket: 8 [ 290.565492][ T60] usb 9-1: config 6 has an invalid interface number: 216 but max is 2 [ 290.574041][ T60] usb 9-1: config 6 has an invalid interface number: 66 but max is 2 [ 290.582271][ T60] usb 9-1: config 6 has an invalid interface number: 32 but max is 2 [ 290.590757][ T60] usb 9-1: config 6 has no interface number 0 [ 290.596927][ T60] usb 9-1: config 6 has no interface number 1 [ 290.603165][ T60] usb 9-1: config 6 has no interface number 2 [ 290.609511][ T60] usb 9-1: config 6 interface 216 altsetting 249 bulk endpoint 0x5 has invalid maxpacket 32 [ 290.619934][ T60] usb 9-1: config 6 interface 216 altsetting 249 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 290.631630][ T60] usb 9-1: config 6 interface 66 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 290.642888][ T60] usb 9-1: config 6 interface 66 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 290.653565][ T60] usb 9-1: config 6 interface 66 altsetting 7 bulk endpoint 0xA has invalid maxpacket 16 [ 290.663523][ T60] usb 9-1: config 6 interface 66 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 290.674373][ T60] usb 9-1: config 6 interface 66 altsetting 7 endpoint 0x1 has invalid maxpacket 487, setting to 64 [ 290.685533][ T60] usb 9-1: config 6 interface 66 altsetting 7 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 290.697842][ T60] usb 9-1: config 6 interface 66 altsetting 7 endpoint 0xC has an invalid bInterval 198, changing to 7 [ 290.709205][ T60] usb 9-1: config 6 interface 66 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 290.720057][ T60] usb 9-1: config 6 interface 66 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 290.731048][ T60] usb 9-1: config 6 interface 32 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 290.750014][ T60] usb 9-1: config 6 interface 32 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 290.761110][ T60] usb 9-1: config 6 interface 32 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 290.772032][ T60] usb 9-1: config 6 interface 32 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 290.782998][ T60] usb 9-1: config 6 interface 32 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 290.794299][ T60] usb 9-1: config 6 interface 32 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 290.864072][ T6399] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.1917'. [ 290.933054][ T60] usb 9-1: config 6 interface 32 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 291.002249][ T60] usb 9-1: config 6 interface 32 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 291.030196][ T60] usb 9-1: config 6 interface 32 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 291.042387][ T60] usb 9-1: config 6 interface 32 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 291.075190][ T60] usb 9-1: config 6 interface 32 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 291.086103][ T60] usb 9-1: config 6 interface 32 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 291.097253][ T60] usb 9-1: config 6 interface 32 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 291.099094][ T6402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6402 comm=syz.3.1918 [ 291.108533][ T60] usb 9-1: config 6 interface 32 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 291.135849][ T60] usb 9-1: config 6 interface 216 has no altsetting 0 [ 291.142786][ T60] usb 9-1: config 6 interface 66 has no altsetting 0 [ 291.149583][ T60] usb 9-1: config 6 interface 32 has no altsetting 0 [ 291.158278][ T6012] ================================================================== [ 291.166451][ T6012] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 291.173496][ T6012] Write of size 8 at addr ffff88812b5c0a00 by task kworker/0:6/6012 [ 291.181481][ T6012] [ 291.183817][ T6012] CPU: 0 PID: 6012 Comm: kworker/0:6 Tainted: G W syzkaller #0 [ 291.192840][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.202908][ T6012] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 291.208998][ T6012] Call Trace: [ 291.212289][ T6012] [ 291.215308][ T6012] __dump_stack+0x21/0x24 [ 291.219728][ T6012] dump_stack_lvl+0x110/0x170 [ 291.224600][ T6012] ? __cfi_dump_stack_lvl+0x8/0x8 [ 291.229635][ T6012] ? __cfi__printk+0x8/0x8 [ 291.234059][ T6012] ? enqueue_timer+0xae/0x480 [ 291.238724][ T6012] print_address_description+0x71/0x200 [ 291.244281][ T6012] print_report+0x4a/0x60 [ 291.248627][ T6012] kasan_report+0x122/0x150 [ 291.253148][ T6012] ? enqueue_timer+0xae/0x480 [ 291.257965][ T6012] __asan_report_store8_noabort+0x17/0x20 [ 291.263761][ T6012] enqueue_timer+0xae/0x480 [ 291.268358][ T6012] __mod_timer+0x84c/0xc00 [ 291.272773][ T6012] mod_timer+0x1f/0x30 [ 291.276849][ T6012] ? wg_timers_any_authenticated_packet_traversal+0x81/0x1a0 [ 291.278157][ T2865] usb 5-1: cannot find UAC_HEADER [ 291.284236][ T6012] wg_timers_any_authenticated_packet_traversal+0x133/0x1a0 [ 291.284273][ T6012] wg_packet_tx_worker+0x15e/0x4e0 [ 291.284291][ T6012] process_one_work+0x71f/0xc40 [ 291.292833][ T2865] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 291.296575][ T6012] worker_thread+0xa29/0x11e0 [ 291.304751][ T2865] usb 5-1: USB disconnect, device number 26 [ 291.306517][ T6012] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 291.329436][ T6012] kthread+0x281/0x320 [ 291.333506][ T6012] ? __cfi_worker_thread+0x10/0x10 [ 291.338610][ T6012] ? __cfi_kthread+0x10/0x10 [ 291.343191][ T6012] ret_from_fork+0x1f/0x30 [ 291.347606][ T6012] [ 291.350616][ T6012] [ 291.352947][ T6012] Allocated by task 6330: [ 291.357265][ T6012] kasan_set_track+0x4b/0x70 [ 291.361849][ T6012] kasan_save_alloc_info+0x25/0x30 [ 291.366962][ T6012] __kasan_kmalloc+0x95/0xb0 [ 291.371559][ T6012] __kmalloc+0xb1/0x1e0 [ 291.375719][ T6012] hci_alloc_dev_priv+0x27/0x1bd0 [ 291.380734][ T6012] hci_uart_tty_ioctl+0x3d6/0xa20 [ 291.385745][ T6012] tty_ioctl+0x8ef/0xc60 [ 291.390021][ T6012] __se_sys_ioctl+0x12f/0x1b0 [ 291.394683][ T6012] __x64_sys_ioctl+0x7b/0x90 [ 291.399259][ T6012] x64_sys_call+0x58b/0x9a0 [ 291.403743][ T6012] do_syscall_64+0x4c/0xa0 [ 291.408141][ T6012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.414032][ T6012] [ 291.416355][ T6012] Freed by task 6330: [ 291.420312][ T6012] kasan_set_track+0x4b/0x70 [ 291.424887][ T6012] kasan_save_free_info+0x31/0x50 [ 291.429900][ T6012] ____kasan_slab_free+0x132/0x180 [ 291.435086][ T6012] __kasan_slab_free+0x11/0x20 [ 291.439832][ T6012] slab_free_freelist_hook+0xc2/0x190 [ 291.445191][ T6012] __kmem_cache_free+0xb7/0x1b0 [ 291.450028][ T6012] kfree+0x6f/0xf0 [ 291.453730][ T6012] hci_release_dev+0x12a3/0x13b0 [ 291.458655][ T6012] bt_host_release+0x82/0x90 [ 291.463495][ T6012] device_release+0xa4/0x1d0 [ 291.468072][ T6012] kobject_put+0x19d/0x280 [ 291.472474][ T6012] put_device+0x1f/0x30 [ 291.476614][ T6012] hci_dev_cmd+0x279/0x740 [ 291.481015][ T6012] hci_sock_ioctl+0x41e/0x7f0 [ 291.485676][ T6012] sock_do_ioctl+0x114/0x330 [ 291.490266][ T6012] sock_ioctl+0x4ca/0x720 [ 291.494680][ T6012] __se_sys_ioctl+0x12f/0x1b0 [ 291.499341][ T6012] __x64_sys_ioctl+0x7b/0x90 [ 291.503914][ T6012] x64_sys_call+0x58b/0x9a0 [ 291.508399][ T6012] do_syscall_64+0x4c/0xa0 [ 291.512993][ T6012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.518890][ T6012] [ 291.521239][ T6012] Last potentially related work creation: [ 291.526959][ T6012] kasan_save_stack+0x3a/0x60 [ 291.531666][ T6012] __kasan_record_aux_stack+0xb6/0xc0 [ 291.537035][ T6012] kasan_record_aux_stack_noalloc+0xb/0x10 [ 291.542835][ T6012] insert_work+0x51/0x300 [ 291.547234][ T6012] __queue_work+0x9b1/0xd30 [ 291.551722][ T6012] queue_work_on+0xde/0x150 [ 291.556223][ T6012] __hci_cmd_sync_sk+0xa7f/0xd30 [ 291.561154][ T6012] hci_cmd_sync_status+0x53/0x120 [ 291.566166][ T6012] hci_dev_cmd+0x648/0x740 [ 291.570657][ T6012] hci_sock_ioctl+0x41e/0x7f0 [ 291.575404][ T6012] sock_do_ioctl+0x114/0x330 [ 291.579985][ T6012] sock_ioctl+0x4ca/0x720 [ 291.584327][ T6012] __se_sys_ioctl+0x12f/0x1b0 [ 291.588987][ T6012] __x64_sys_ioctl+0x7b/0x90 [ 291.593560][ T6012] x64_sys_call+0x58b/0x9a0 [ 291.598056][ T6012] do_syscall_64+0x4c/0xa0 [ 291.602467][ T6012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.608348][ T6012] [ 291.610654][ T6012] Second to last potentially related work creation: [ 291.617479][ T6012] kasan_save_stack+0x3a/0x60 [ 291.622164][ T6012] __kasan_record_aux_stack+0xb6/0xc0 [ 291.627611][ T6012] kasan_record_aux_stack_noalloc+0xb/0x10 [ 291.633404][ T6012] insert_work+0x51/0x300 [ 291.637715][ T6012] __queue_work+0x9b1/0xd30 [ 291.642204][ T6012] queue_work_on+0xde/0x150 [ 291.646708][ T6012] hci_cmd_timeout+0x191/0x200 [ 291.651550][ T6012] process_one_work+0x71f/0xc40 [ 291.656395][ T6012] worker_thread+0xa29/0x11e0 [ 291.661076][ T6012] kthread+0x281/0x320 [ 291.665129][ T6012] ret_from_fork+0x1f/0x30 [ 291.669534][ T6012] [ 291.671842][ T6012] The buggy address belongs to the object at ffff88812b5c0000 [ 291.671842][ T6012] which belongs to the cache kmalloc-8k of size 8192 [ 291.685878][ T6012] The buggy address is located 2560 bytes inside of [ 291.685878][ T6012] 8192-byte region [ffff88812b5c0000, ffff88812b5c2000) [ 291.699314][ T6012] [ 291.701620][ T6012] The buggy address belongs to the physical page: [ 291.708011][ T6012] page:ffffea0004ad7000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812b5c4000 pfn:0x12b5c0 [ 291.719545][ T6012] head:ffffea0004ad7000 order:3 compound_mapcount:0 compound_pincount:0 [ 291.727860][ T6012] flags: 0x4000000000010200(slab|head|zone=1) [ 291.733999][ T6012] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 291.742577][ T6012] raw: ffff88812b5c4000 0000000080020001 00000001ffffffff 0000000000000000 [ 291.751142][ T6012] page dumped because: kasan: bad access detected [ 291.757535][ T6012] page_owner tracks the page as allocated [ 291.763323][ T6012] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5522, tgid 5521 (syz.7.1638), ts 250839518991, free_ts 250744212801 [ 291.786052][ T6012] post_alloc_hook+0x1f5/0x210 [ 291.790840][ T6012] prep_new_page+0x1c/0x110 [ 291.795331][ T6012] get_page_from_freelist+0x2d12/0x2d80 [ 291.800867][ T6012] __alloc_pages+0x1d9/0x480 [ 291.805443][ T6012] alloc_slab_page+0x6e/0xf0 [ 291.810026][ T6012] new_slab+0x98/0x3d0 [ 291.814081][ T6012] ___slab_alloc+0x6bd/0xb20 [ 291.818665][ T6012] __slab_alloc+0x5e/0xa0 [ 291.822983][ T6012] __kmem_cache_alloc_node+0x203/0x2c0 [ 291.828515][ T6012] __kmalloc+0xa1/0x1e0 [ 291.832662][ T6012] mb_cache_create+0x187/0x5a0 [ 291.837420][ T6012] ext4_xattr_create_cache+0x13/0x20 [ 291.842714][ T6012] ext4_fill_super+0x538d/0x7a30 [ 291.847655][ T6012] get_tree_bdev+0x447/0x690 [ 291.852247][ T6012] ext4_get_tree+0x1c/0x20 [ 291.856662][ T6012] vfs_get_tree+0x9a/0x270 [ 291.861075][ T6012] page last free stack trace: [ 291.865727][ T6012] free_unref_page_prepare+0x742/0x750 [ 291.871181][ T6012] free_unref_page+0x95/0x540 [ 291.875882][ T6012] __free_pages+0x67/0x100 [ 291.880289][ T6012] __free_slab+0xca/0x1a0 [ 291.884605][ T6012] __unfreeze_partials+0x160/0x190 [ 291.889707][ T6012] put_cpu_partial+0xa9/0x100 [ 291.894374][ T6012] __slab_free+0x1c4/0x280 [ 291.898773][ T6012] ___cache_free+0xbf/0xd0 [ 291.903182][ T6012] qlist_free_all+0xc6/0x140 [ 291.907771][ T6012] kasan_quarantine_reduce+0x14a/0x170 [ 291.913244][ T6012] __kasan_slab_alloc+0x24/0x80 [ 291.918113][ T6012] slab_post_alloc_hook+0x4f/0x2d0 [ 291.923221][ T6012] kmem_cache_alloc+0x16e/0x330 [ 291.928064][ T6012] getname_flags+0xb9/0x500 [ 291.932549][ T6012] getname+0x19/0x20 [ 291.936436][ T6012] do_sys_openat2+0xeb/0x810 [ 291.941029][ T6012] [ 291.943342][ T6012] Memory state around the buggy address: [ 291.948954][ T6012] ffff88812b5c0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.956997][ T6012] ffff88812b5c0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.965045][ T6012] >ffff88812b5c0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.973091][ T6012] ^ [ 291.977158][ T6012] ffff88812b5c0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.985732][ T6012] ffff88812b5c0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.993789][ T6012] ================================================================== [ 292.001832][ T6012] Disabling lock debugging due to kernel taint [ 292.023337][ T60] usb 9-1: Dual-Role OTG device on HNP port [ 292.029677][ T60] usb 9-1: New USB device found, idVendor=1266, idProduct=1009, bcdDevice=37.d8 [ 292.039130][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.049426][ T60] usb 9-1: Product: syz [ 292.053728][ T60] usb 9-1: Manufacturer: syz [ 292.058406][ T60] usb 9-1: SerialNumber: syz [ 292.064194][ T6386] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 292.210190][ T531] udevd[531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 292.270499][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 292.282250][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 292.290803][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B W syzkaller #0 [ 292.299312][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.309352][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 292.314651][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 44 29 00 4c 89 ff e8 a0 80 b7 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 ec 70 6e 00 49 8b 7d 00 e8 33 7c [ 292.334342][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 292.340416][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c680 [ 292.348376][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 292.356356][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 292.364329][ C0] R10: dffffc0000000000 R11: ffffed10256b8139 R12: dffffc0000000000 [ 292.372387][ C0] R13: 0000000000000000 R14: ffff88812b5c09c8 R15: 0000000000000008 [ 292.380357][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 292.389278][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.395874][ C0] CR2: 00007f9d49c83ff8 CR3: 000000011ffee000 CR4: 00000000003506b0 [ 292.403848][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.411888][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.419854][ C0] Call Trace: [ 292.423144][ C0] [ 292.425984][ C0] delayed_work_timer_fn+0x61/0x80 [ 292.431176][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 292.437077][ C0] call_timer_fn+0x46/0x2a0 [ 292.441581][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 292.447415][ C0] __run_timers+0x689/0x9f0 [ 292.451920][ C0] ? calc_index+0x200/0x200 [ 292.456421][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 292.461615][ C0] run_timer_softirq+0x6a/0xf0 [ 292.466401][ C0] handle_softirqs+0x1d7/0x600 [ 292.471286][ C0] ? irqtime_account_irq+0xc4/0x240 [ 292.476510][ C0] __irq_exit_rcu+0x52/0xf0 [ 292.481021][ C0] irq_exit_rcu+0x9/0x10 [ 292.485328][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 292.491107][ C0] [ 292.494049][ C0] [ 292.496981][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 292.502987][ C0] RIP: 0010:default_idle+0xf/0x20 [ 292.508028][ C0] Code: 67 1c b7 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 d8 46 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 292.527635][ C0] RSP: 0018:ffffffff86e07d58 EFLAGS: 00000257 [ 292.533810][ C0] RAX: ffff8881f7000000 RBX: ffffffff86e1c680 RCX: f6ca02c7c652a100 [ 292.541767][ C0] RDX: 0000000000000001 RSI: ffffffff85aa6980 RDI: ffffffff85aa6940 [ 292.549737][ C0] RBP: ffffffff86e07d58 R08: ffff8881f70348b3 R09: 1ffff1103ee06916 [ 292.557708][ C0] R10: 0000000000000000 R11: ffffffff84ff5aa0 R12: 0000000000000000 [ 292.565672][ C0] R13: 0000000000000000 R14: ffffffff86e1c680 R15: dffffc0000000000 [ 292.573729][ C0] ? __cfi_default_idle+0x10/0x10 [ 292.578755][ C0] arch_cpu_idle+0x1c/0x20 [ 292.583174][ C0] default_idle_call+0x71/0x1d0 [ 292.588030][ C0] do_idle+0x1a7/0x560 [ 292.592110][ C0] ? ct_irq_exit+0x9/0x10 [ 292.596439][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 292.601617][ C0] cpu_startup_entry+0x43/0x60 [ 292.606361][ C0] rest_init+0x10a/0x130 [ 292.610593][ C0] ? __cfi_x86_late_time_init+0x8/0x8 [ 292.615978][ C0] arch_call_rest_init+0xe/0x10 [ 292.620858][ C0] start_kernel+0x47e/0x4ec [ 292.625410][ C0] x86_64_start_reservations+0x2a/0x2c [ 292.630885][ C0] x86_64_start_kernel+0x7c/0x81 [ 292.635823][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 292.641731][ C0] [ 292.644923][ C0] Modules linked in: [ 292.648819][ C0] ---[ end trace 0000000000000000 ]--- [ 292.654344][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 292.659633][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 44 29 00 4c 89 ff e8 a0 80 b7 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 ec 70 6e 00 49 8b 7d 00 e8 33 7c [ 292.679315][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 292.685389][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c680 [ 292.693367][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 292.701420][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 292.709380][ C0] R10: dffffc0000000000 R11: ffffed10256b8139 R12: dffffc0000000000 [ 292.717351][ C0] R13: 0000000000000000 R14: ffff88812b5c09c8 R15: 0000000000000008 [ 292.725401][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 292.734328][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.740890][ C0] CR2: 00007f9d49c83ff8 CR3: 000000011ffee000 CR4: 00000000003506b0 [ 292.748850][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.756864][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.764831][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 292.772364][ C0] Kernel Offset: disabled [ 292.776751][ C0] Rebooting in 86400 seconds..