last executing test programs: 14.453124202s ago: executing program 0 (id=399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x8f, 0x0, 0x7, 0x40, @local, @private0, 0x8, 0x8, 0x24, 0x5}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r5, &(0x7f00000002c0)=[{&(0x7f00000000c0)="89", 0x1}], 0x1, 0x2, 0xfffffffb, 0x1a) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0x1, 0x52, &(0x7f00000003c0)=""/82, 0x41000, 0x60, '\x00', r2, 0x19, r3, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x5, 0x7, 0x10000}, 0x10, 0x28f13, r1, 0x2, &(0x7f0000000700)=[r0, r0, r5, r6, r0, r0, r0], &(0x7f0000000740)=[{0x0, 0x1, 0xf, 0xc}, {0x3, 0x2, 0x5, 0x6}], 0x10, 0x89}, 0x94) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0x6, 0xfffe, 0x10, 0xd4}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r7, 0x5501) write$input_event(r7, &(0x7f0000000040)={{0x0, 0xea60}, 0x11, 0x402, 0x7fdffffe}, 0xffffff87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="5b747266732e006ce48e653bd136db3206325af7ece7b2e1e2162f9ec6208a01fde3f8e52339c315caddbdc549c67233f899a453ba3b6906d96b2f0815ae0c8b4b82ac1ab7c961a24b3eb705c16e40e539330be34ba51d436093e2ffcef3dfedb2deb37e4a282a1c149db603d0399d49e2286bad"]) syz_fuse_handle_req(r10, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x1, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0x1, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f0000006400)="7f73a2cec5d0db4d420442fce4e4191e2ed112a607e662fc1eeef7926d41c5a0f91c64de08fcd231ba34fb2b58307d834cc83ce0f3908b5333fec9af958c900344d938cfa948f432dd5acb1a7a73bdba45cd411b82f7fed6fa3bf23c9abdc4f263fdf3fd68dcbd973b4dc2aef81c7296d7d08e562f89231f57d43e4d7458c8f389810e60c1c20bddfefcf1739824ad409148f4647b52cc98987f7c31bd6f7f44e39ac5f97f75f06dccd331d2828625fbfd3a65fd0d32871b92c0a6aa8895d3b467921c933eeb93cdbd7387abe27c4427d4ab77bbf9558a9a085a74170e875d83f8c5017d46901eb519854e8aaeaf94e6e050fec7c1afd81e26da117484dfb042805ed1ad3fc67a28636f5a35ad72f6106a5c3cbdd25048567ef13b229024142ebeb7a8bf518f017fd49dc31d8652ab7036107f8d5216a142e58f8ed850ba177786e911fa4f9ff952f8ddb66af705c7b97ed4b385d9ea3c0fecfdd5dcf168832726ced26b51f7a5911a35106aaee0e8662497f6c5dce5543690ea32505e79f13bace0f89ad9e8c551578eedc78028c414145dc3be2184e2055c037cc2ae07842a78910815c69d010bfbb850ec8f1a5da8b48ed2f75838dfe8657e5b1b59c561cd5d219a481802939c7abfb216e01173985e3436b7135d2377ba714281dcb3f82c064957e621464e5de29e8248d2400668e5775d8a75d23d7e3fd9fdce31aef258be698b121ac4ff319c6e4f872c4cf1b5f3ebbfb2ebabe113ccffe028d829922ea909a5522e5b632e3b99fb47ba9d0f8e15ca401e3ac671e80dcb56214330e7ffb3a415d6a0b84c56b056a6f2a4ffbb77130a5867b12e061a2539aaf67360af472c21a27855b5387e132ef9bac10b86b1f93974da52b3f4c48011c77eab7481e1838975fec2ae160f6b8c168b80dcfd3e03e8c1ec2a643cf850203e8254112c08ed4c2c6d0715b6bf5f281df7356cc2c9f8baac8b0dc574fc46eef5eaa9530dc0a6a88b3ad315d01a36282c5338cc5c399deb78cad23b22eb71b80d266fa904fc1a6d94f77a1e3a2173abe5dba58af48a75fbadd339eddfe7dc5ecf3fb85284e903ab70dc00663f0a5270ab805556aaf09223679845a1e091f24318d71dff015847107ffd9d7f789e8753abc2a51d5067da21c49fa8b8f66c89afb009cf17200753164786af597b8b6d5b5505d1d716c74fb26cd78679d77330c2cb2bd154423bd6e5b8972e2c576a89806e57686a7019a369de75c99e0bb6704f508adfd5394568a2f8c56a5333c861432e4ed056e5b8f20217c81563f0fb9efa6467459753832814e3118c24b634d6068b35871bcaaadda1d206584324a2bd35050f5fb993e898ca25fe82b3578e325658a4cb91ba32589c6d6720284c610569788acd2907091a968651b3978d797a5e808d4f33be1859de2bb57b5d249725f06d94e32ab46d1b7d1174703bf8dba02d4a5f5a16fb3878d6a2c915df4ea588ad8b0545b62308112d6c7f9bd93e5a51a45af9e990985f8d7dc8925ac1f63210cad488769d4957b03108e5e6f716d80a0bf88349d680067fb0a0bc59edd8ba646a2a86b4c32fd531dbc4879c86ab74e17f49f877c30a36279698a3420f3f236a69a84781fb981a2248bc0dd12dcc464f6b970b27ee634f0fa8c1338bdc3b4193b865727eb856995c08d9b88161b9a15245ec0967000f678e807c953f933edc6e80fcfe963663f7cc801927bc91c238d0b6f0c61ae66a8d210ca577b17677d79ffad404194d733dbcce9b2f163637b7ed1cf4f967ca680bf1db83b1b6f090dd99b8e0d49e7b3cac65864c32cb321d84bf43e7a300a6f4ac27c8091e39e4383fc99617f4b367d7a2e0041176dee5fa85ceb501c3d2a2efc1f489f83fbbbdc4af125fcac9a2ed8db3cc227543b195e36adef6a67a126a28be525e0441d3c5def236da4bb1d5cec084b1f08da02299f72b2a10ea7fdd5eb3c2f999740a287c179db7fa5766f8781b5147a6933623bbaec777152c4e65d262733ce7e864c5c79a56f60075662248f6b765562f718d0767a89de9bd3649957fa54bc9df603158d4ea631d71be5ea93ce64d4718abc196fdc85dddd8656806500660aaf5e3c5c74732872141cf9c542bd32f1ad210cae53fd91bce48a55afe056540d396b0930632d6b252833a91bb4d9020d5ed10d66d2467e324ee68f06926194d378da476f0d4dbb9c452475d938e8c774cc68bd291726a95223ae3866d9a2f3e4e6c319e2b4700ef4640ceedd9ab0a587bdaabd649363f0d93ec1afd6106e791f8d8f1a0d52c085a4c8a89a5c6d8443c63d3757dcca07e1f813aa6c7d007385b54b9a280713e80d8b61630360166c5ef66190fe367d7694112f340f790d8a9cf0f39eef719edbe914c9da3ecae2913a544cdce5bdb9fa462ef83bf3da34e76670612885e66c1cb13c76f72fa796ab1810f507be6dccdb66aad16e88168e0637ce5ea5bbb01ba6731052459600121734f1db7c610920e979e1f2c69be00a33a7cf14e5dec0626d3928040c75db097626e198c17114da8841c9e5cea3ba122dc119d6a2da3144993e7e023849f5360f299675f49353828a592aa8b6c2ec821b0991dc478024a6811656a265431f9aa56feda7e8267d6e3351ce340a79856e59de5db2c919c6726cff7ee678b95390d6c6ddd2ba323be59eb4c42f08a2f9973ff0c45820d59b50b6a153775ed0e9e73e73c6ccb98887bf70d35d97ae8d226c35b4fe8a5d4cda816eac80cdb962e8444a5cb4452ea83da83ccb437c7b00e146d7b71aa86a0933aced67fada0588dfd280066f5a735215691ecdcfd474dd0ae3c644af51a79f8fe7a84b0c2130e619dba270a101b0d1669c9317d5e548a2cc3755d5a37817d8eaae8059713854fb1b5b70991ac62db6453afc3bc4fb78a5cdd56e22b4d7abd70e6370ba28d5cba9478886f232a482cc4a1dda770c0458c8bef5ac19d8f4a24117d6ab0c7d37928c05a9b51cb6b2d8f5e422383dfae0f8152365fea2a948a12899aac9587a01ed162e6e70572d3eb02fec0cf0af4e65757f4bb535aa4fb82a193f79913b09e8a4d1ebe26eb4bd3d1549ecb20a08c501bfb5aa8ceb236a99d6ac3cf7be65475a867c27d301bd62a947c1d03e7247db527d9f7356bd59ea335f3c0afe3de183fc16c77e658aade451f036c34b9ee58ba53672994358355209728a760d76aa2f22d7d4e37732cca6404fde0d067bc97a4020a9f3946893743fe132704285a7e1b01403955d61aa22805dd592e4f4af41bd3c3f3ff2b1f0fa434c141261fc28b2bc1b104c78ed7f27cc9609a3d9ca2b8b976dd2374db05550e85032d7e080fac951aa68eac62a9de55565ab6201508cff33c38286494184219c919958415b50420756d32ea98cd04b6ac9c5f311fc933e48a597285c2f8a3dc008f174854b6ea186af6aa55aeecc10345b7d9bb9d2bbd3c0bb8153f6fbf080f4cd49e07dd850ab3a44cf505fecc8cb52b0540a60598ca941d40bda71b16f703bb30e344d3de13e540bc1205a1d9b3c94658b2199b2f2008c9f106eae565ef605278b8779ece25cda761069c7c72f020b820a39e6d0c441cdb00a41292c3146f39d2a5f7bb2fc8723a318fe3df11ce8a2e81eeabd0dd9245cb0f54a6d048c428c899182804cff8947361c01b009214b7d95617d312fbbfd379925f402bd9cc0cf5c25f14c24c64ccc7d87add9ce615711c9c6df6b0866d001f4669030abde15fd2e4059f25ad1c5543ededdf6d26c5a4f52d6c4448d105bbaad24a88cdc41b7e741c82973dc2578f9f1fd1faf4e522eb08c430f4efc4772fa4f6e504164b7b0b275635446c64fe3764cc13b1903b2a359eaa16c28abd331a34f78354ef286116c7b4a0ed3b8c38e8667f26a4ad8de9e205b9f1b24ec8c46a3c3578655f45d4356bd9504b2c4bceab55e7b02cd53139c1b5f044d9182b1e41c9020ad44eb31b8e8a7bf01e85c182ec849d7ed42d69eda8eb57d58c1c38e4ef4c3266fab97db4047eee31d289e91c53b243f5ad50af8de32c35cdd1165c894cfc9df5f59f55b2acdf81b6ee3db4eeed50c7cad36cf53dd10ad592c6d059f067d76711c067d42a148443a195512ea16f41589b3f1dace5e63d2c1255ea19c8ef1836ed19ff7ccaf96536548c06d4fdc76daf99d960c040e4df0e5a1f39f57bcd6dc294adff4af3a8ef364338049c5991d532a248aef4a0d166de764a4c3b583b6f8c30a8cad255f34f342f2b778fdda98766e11c21f4df0db226e6bfb66e71c342d904e99d506aea721d01456938e02f60e78b2652204819ed4595ee77e987d9646b2720ecdd41869653f7225e23dec28dbf0709a1da684693cb22f5b74f569f2d424499eb246ca8d8cf9ba86b2f1d25ac5e3707d46c46fa5d3008cc01aaf2e645b92dda134010df5ce5ad6ca03c2a30ae023a72688f766bcc821f24fb81d1c9edf5da5d96816476a3afcd4df699cc2b98664af0d1365e589673ee7272e3746d7e95ff6c87e1d5ae8055551724e3ad3c50d852eeac1333a4507d096687c6a7765accefc4b22dcc36a73f231d6c9dc242a5e7a0309415bb10455c2df3bf719c79d73e35ad068f5473b66c7e9bf769919b295d6c9dce8f774a21bb7878fd7d4b887bd2efaee03c73532a35bd23810dfe10e214d4f9cec03c72afa212f009e068852546eca171ce2c7070228901527621eca6771cb75b1613df30ad1582df923e12b91013f73102f130fb33b85d82f038bc1f54e6f126d5077262ca82ea7130995a5b24c4974ca8a1b1d4ae7c3417d05547cdf5e6030c4d02c6cfa0bec697be7df432b8d78926831d00e7bca1a5e67e6d55666cca07c6842950cd793ce986da89185efe61046e863add47c745775b8e3727b074434f1c14c502e44d276b73ad2faad946cef2435fbf1225076c461b76b3f83e24a05cbaf0fed70c3a05f4765c0499a9b7a80805be294053e7f27e2260e1ddd1737d535aeb7692a0c8c169b5c058a9d217776b1a9888dd8175477f4cfa44b83715ab4f6f212153628554f719fcdb6bd376c1d443c2692ba8f2db168c63723eb8c88e9a9612a0934ee66dd63daab19078d61fe68ab10a621460d98d12bd3cc6799b2c35eb1010a457e2f36fccf3b37a96233d844291bf798f630fec23525ffa41e64b17b895c28ff7699cf31e9faab9b2f515d2e14dd3981ac7c21dea76810ab33ac178648ecab1cb09b158f43d1d9a97ab05b52c322d02206922a719a400367796063570b480980d4f9347214d747ce0de4f56902df321e892bac8a79ededdac14b93682b9ca8b95452b68c8ec3fa1ed188237dd1f67a286d988fb8e43889c00f4a87a3e6416bfb34259646296cd5f73d0e00534309af6e8f5e0e54c63fca9822505237f4e3cd95b8adccf45f3709e8427da5d7c3c57c99286a2c094db3f815373a756e9ffd2af88d6e69a8829dd4a7cee75942aea8556ffcd82653fce46daeee574ed7502fb2b1e8dd8d60a5d46b898684a0d715f643ad91505747cca04968e6a1d0c447e036e1ca25419cd8bd785402d88bce5e40532b1806aee693f8b5030cfad71e9f52d0445304aa2af28893b1bc731f37b55bfc6e5846634482cfa3cee7e9d2c8a34a48fcca25393d7b3fe5c5a3c2d53de126654468984ab1777954272c6e25ba392f3c3c2a658518625921196839ddfbaa0bab14836ea12e63542a60db72048bc0770351cc2c30ed6185ce69b61f8160078415e86f9bab5f399bd7ed4b720fd19fa327f440f6054937b0dd6ef511849823e6162e0c7d1f846f9ebafc32583954e7b136303977a191d9974e939fc7cac14134026967b5408fa6907afbdfa41cf80a17c251fc1363725987819f165518f86fee07ca1660c25d04f157ecd43b8b92f93b2c6c02e0c1e715836d70c503e60ceaeaaac61f7b9e07d3fc9904ecfc81ece857754191e57a8991bd0042750b53722f35741641ebd5c5febee02d648fc1d048bf916a8d8f33227fca790602c02dfbd4aad34f2dc8e77e537ad4042a553e5e8a0a15dbee27da24ac13048378899c3a8772a0d8b85c442c8082f464b58fc016e845186bafa8fdf4f04d0d952136d4c7be90a909e3e6adcb3d74ed37da19769cb81114ead1a40dc0368169e5c230eb02a0d1c1a11ffd808f27159baeaa8879a034dcaf6a70b2f99e5859ad9c7465d61b4b51e993d8b93095ca63675dee276ba112bd2f469efdfb79fc8c97b809e0076001b98651bffa6829b2141fb3ff789d0ddc3d73b077d36521841ed9aa5a8a134f5875c444c62efa1f9b0d98a4bb4a62760a15d33824791420a5a89467ec364f30954db77219b849677e0f5bfea9c3d2a3a1e1e76ce3df4c8b9a6a3866b20566e7c68c6d32bad4d70fd2b9235fa7d38475ec1b9c9d746f55b02bdbdee6dcb6238caeed353de28d1e6e2d5126117e5fa82b9d57b703dd527736b51444b0d7d4b77562d4a370a202ed70b4940bf58ef3ff8801f78d632f2d2428fb133a910aaf4757b32d657d831c5575398aa88643e7fb1431ed0dec16a505e2d8583ef3d8787413bbdfe132c921d16cf272ca791e88e196824ea3a5c009a6a21b88dd1d6d6f87733528959ed24a4d3505d469d32a09b1970329add757c533afea8f8314c58400c0f3e25b703d9757c4b04f1b1bf293defb008ea60dcc77b0d3a6e9a1286c761bb3aa0c8f3aed74f8cab11094741c093e495867afb3857d3a92ef0fae7253b2bc3291a9ac0dcdb62c517ce2471ca23d985012f2e860238ccbec834039e8538de07f6086d1ac09027729bcc4e0bbd36e931be4242ec7135d16b01b3da39b1cd1c1d751017df8ffb31875f5a541a94099a4f035044f310fe5356d3b2d9a1eb5bcefd422e546bb3c169b8793df2764e6390dd161d90943a55d40f1984e1e211fd0227296e2b5c6485ad19675dcbce483a88f5c68d44b80ebb716c1aa0017ebafe340a0273b48979c7dd4e426f8c0a736e40c4f844a037742d00a73b67fba3c14051c6278c4dabdc4d8446ab5762e2d9d4f34359da34cdc333735b02e5deb9f71c8af1a5cea228eb70d0d8b371e378f5fd8172e60d9432e38e8eef54758d89e5413693ff2deb95fadfda6ecb6feb3adeae0c08860056a23d122e7b070568ca196b58cf0c5e737be9f2d9c66fa2be4f532c603ea8533cf06152d231cd2513cdcf212af2869ab96488f5cc484cf773c4d6eff8573b9487e51c84c3ea2e03e0bf3bea7717b8c92470a05d6e518265e8d31e23a22dbefbf82bb2a81d6c76372c5f41b19c5bcbea706ebd0b3cb7e52be6f8c70b7fbbfda4de69318cf9186aaba9d94c93b2df2310c44ed93d937db65b5f596dfaf6b52a7a4ae77c4b096d0075189cb568e4bbf6ce9c796839855440e6f060e241f295e4f76b0f162dacb2cb2e47a06961152e0057ed615fe14943822e8d6fa18636f3168f09ff2986dbf1904043ba4fee74b5c4706781568861df4c9b13bf2a815ba7c69a0b60114e19d817c3a038921fbb1b47acb8597bb38f7980f8b628f3565b09d7f7be504264ff143409b54516b4e79bdf7147eac7b1de7e43d76c558d6306bf780095f2bb5b9ffa3846df980001b22171d65463c17f4adbb95274abe315707946e65026a86d1b368586046e0cfd2a99352c16b9bbd91bb839c443e9962ae35a9d0dd6e2a48e773e6ac06597c6e428f5cc14836e6462135972bec63de2e7e3b5306704d44c2d9367308ffc4bb43cf839e37ee5fda8e50383aaf2eb67004645fad98662d6ce3d499ed921c9015ee5691b030f53cf95c346131097fd8fdbf257dbbb4410fb1dd14d64e384ad486ed5903866cb1982c606d41d611d4bb6298fb26cf965a7dbaf57309d46483fd5ff7c4782341446e7ad9695c52f7aa57a0c856214f67b7a7b8def0e915f5eb2ae457e4800d8791faac0133cb3851881aa429826cda874a42b7956a032f3d0615296c4f706ed649690d196ca6a6a2481be470c0a3922c7789276effa51e0221c8e163ce47dd8ba62391882338ad843d5579a6c3cd3ed711d770b8e0be9de4c91120bc01d69f457715fd770d6c335de853c87be3b638953faa0f2284d415c537e01285afe9b7f54d7a432bb7e16cd18621b6e5769b635dba997a5c65279bad6522d189da110e549f51fe20af42fcabf1a900cdea166bfe279855b8fdcb1bfb97049238dd17aec8093ea38b04e04bf43dd1b43658abab3b0b395cecf73d59279b9001e0d4ba93b95de101534ac718336a82216f2112b7aa0235c15594960f4771a0fdc21b4636ce3ddda5dd63291bfedce53347b725f8fe17848319b05cdf4c8d3d198b64deb3e10f6fab3db35ecce06908cd4f26cbda0f8c4a7deeb6ee12e0b5c13dd022851e6da21f44505697a4a974a10e57145bc75960ba59e189768938e89eb0c81071b45345ce428e90c4fc04ba11e75127f96698a4a2dba776a0f0a1576853d39e0ad3addb7bc1f3c030794d1fe621799d34582d07b80114df1039cd2866f1899f19fe34b946571c17f8b3efdc0e857fcf83f1ebc2b99ad59485fef3057e07534d36e7b4350dee86fe84f6f85f75330064301e2f055e017cc187f93bb8e92583b9e6e3999ae5c7ad1521ec77ee0ba476308242f9d6cad4d5ed385924c3806077f0d143bce70b9205b6d59f8f107f50133fd6fa87ddffaabab3a16156d353c28c5b3d92ba8643e4f06b866ea3f7ffc604a234750e5eba551e4787b340ddc90081b74a0d2e7df723e73b09e5cd38568993f171ecd6056aee45496c8d8fc458f8e2e721e359541cbb9dbcb1d801538cb84324fb090e960d53bc81c0020229e38e36c186cfaff1a1bc385e2d5338bd3bd9148730275b36f2dab198ee329b060159efb17ab00e40a940245d8ca47712921db546dde1100c29ff47dab5dd8cf10cca97565ed96901b0309841d7e3d746cde9fb1985cc276e4420636b145a2ee8720ad2fa2c256b995879b95e2e597f6d6fdeac1f2d349e3305322cd4b0df519abf958e874ed6d25bd4eb7418e9e45addd44e4a9e6cdf7b553cb48fc0c2d12683b2a83d2aeeaf03b6718abfaaffa59f38879a1b380668ade3e320ec2db4bdfa4409d09abf35fdd2ff501dafd55fbb2dd2ff2821a47ef41f644f4cc87d4a41576e2618a4da38302aa3ab38516e656b5a64f790a008d0200aede7267bea8bfe554e7d082d11d8ec186e314b070b5ea07b0ae722b4f2ab965bea7f906326710e0909eb1c0ba9959dd97a7b5331494d87b74c04587e4b78c420b8aa8ac99ad6c59d05d35a2e370b2126de5eb8901cc6ba879ee86de290bcf77e0bed67a74932794b3faaa187f5fd23a7932037f0a3d4517a1509eb981752492d13aa7d48d997fb71e65ee97db61d51ede49a215a158890bb60103f5502893a998be6ba800a07ecf9d8e5379b817621047933b3b314b7cb20abb6c30c6d490db451c7ee5c37942b5e886e0b43f21b9ff383ab80461e1a2c9c05f870111d023fc49dc425fae83e848eae43772902f83bdb1af645039e0cc961d6ce39588bd4b00e2a5e55ec02cfcc3ebe3783fbedab8ab64ed2d78202493ff6550471ba6196e73ad2b35f828eceaf8e340b78e9ff0fca04431e56cb7d0c3e366f938f0d7d966ba34458b0ac9dd6dd5c0034f73f902ed2183d7438377b72e81919ce168f294009c734220b4a501ec8e47b2d1f3f69605ce91fc825b5c4ac7b267718cf28c81d485aaa7de1d0dee66f677b6ee9ad02d75099c653decac58e0f1e13f414304b972d6e17d3d1fc0ff30591b82aa785a3dbf24c59bc8efc57fdef33c7c2d051214d9d8f48a9a71ed77ee6a3a2a699bd3882a4a71ccb714c8a911388be571a2a7136b9c308c5c854f6ed7bb74bab77076ff3d48ba989384ee4dc996262fc9e1585d2638107df8615d66f335d147efb64373ad8668fb50e00eba86ef4c65842cbf246496e997fcf0546c043740035af30e05f69d69ae06334e249fc828d5c3d1d58f31f2e439fd6d415be63ac6c88385935bdb11f4e8cba2f0209314253a0e5001fb029cfff63e012c379d8269611eb3868055868087f3916990089d3cb9dd201db0fbc4768a03b4c36c2a58511932468ce65f6b2d5fdaf3b1e669dbb7bd3ed2525d6f81944512d79918b1b14e17e225b3b7cce0bbcc073eec2ca8aa47a260d4842ab5a0e29b163d83ed1392ede695ad64e44f530af80aa4af328f8fbad8e4ea11f71bfc8418a145ae47612f9e7a7d4d037c3249e5d3a1feded9798dbd78af07990aa8d607254194256c1c662479a881f8bb6e6ecc4cb92aacd919fef13e78b58ad44ef3a3e7e0145950706e762c1ac44e78249cd1a29c5dd1f635c596c8046cc432024079ac0eb4b7376d89ac60485300594ce3a2498a374e0ef103a6aa5e0c42df5cbdb6da478bcfece47ff79e79cc2abaa7678a2d6f5f26bf3702d3b07cc5cdf5f402b2b5801c7d5489ecdef4477d111a5040f65cf7ba8586509151890a0a1ff2a093b1b969a4d01fbb29de063138d5407ff358d7c98a8ec79a424d3080d5b9b4533f23dc80ad3fd9baef5d1895576a8af9479c65f772874b9f7b0379d9212f386af9fbe816179316290746a973b5178601b861c1054e9d8f38426edfbe8206765314c723f262fe0e32950f68f00a45582e6e72d0140614035f58e3527eba96d29363f966bda6a29b4453285ad94b3eb51ebfbf5afba8bd6a89fc54e8cfc1d8b91555282e27ebcba8b2aa7f4d397b6b017bbcd80d30fc0180cd93b97541a0b127925d609baae79e4243c34b9660a17ff066c4b906ba554655dc30e47cca38f18e5190ff861dc3cb2bf777052da48bcac3925db0b9e9ce401c1cb2c2a1c51d0c420d357af3c939166cc01759d50f9e65fb04957c7c5c5ac46433e064ec563233d8dc7eea97d9f5c12b4a03a46ce306550f3bd4c7166dea3d4876f7a83b39b207654e6fd2a01abadfb2a3f19436c065088ea49859d5dbc8fdfcf1e0c4857cc512870795fe74989f674f40875a5104713ad3560ee1ce61df8fa6b97937703c7434fbf81009890d98f327954c3f7800e39fe5269e5b030b6cd8312bff2c0c44eb435ab1a3d861a0aaf01e992776d135d33e0b02fb28ca2d06c545366f222f55d28514d883e11aa255681ee7f20d61f73a5c20955ea919c557c1b7403401c34ceb76cde309ab991a13a5b6c3535dff4118b1162a22329be3efba01f08d3f0a9a68becd040c09bf6da005aea6c8120af5c6775925af7e042a1847087067c1b8e1527dc2b9ba6fc3082b47a9e42a7eddb980ecda3f66ab5af600b5f92d1db42032b1fb4a11ed8a4732ea3ec73454ebf0b84acd58a545ccc95b9f413044f47b9e40df58a8225651c379ace7b826cfe7f5bd5205917b606cc7fe266702918eb7da26be268e137aea627ba1b849961692ccc8a6fe2d42957601fc95e393a399c6199a2f1c0adf2187711b9e82023872a99fc25c7144131364ddb03d392961080734533c49911fc91e1a2d2b14f7db46d8133a9b2ab3824b53f620b659c877ca458c1c8d0cef838ec467bf67f2060b688fdb0f8ba0948da364a742d87e2eb2173b2cc019d1c76b53505a87ae986cab70db7885056a3989dd1a3abb6f21d3415f3e53aba7ed09b6864a", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0xffff, {0x7, 0x29, 0x7, 0x1021900, 0x5c9, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 13.482296294s ago: executing program 3 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000200)) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) (async) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xc00, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@access_any}], [], 0x6b}}) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 13.480715004s ago: executing program 0 (id=404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7e, 0x0, '\x00', 0x5, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00d505241301"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x40, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7e, 0x0, '\x00', 0x5, 0x6}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00d505241301"], 0x0) (async) 13.33388854s ago: executing program 3 (id=405): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x42498edb, 0x9, {{0x9, 0x4, 0x1, 0x5, 0x24, 0x64, 0x0, 0xf9, 0x0, 0x0, @loopback, @private=0xa010102, {[@generic={0x7, 0xe, "99e1bdb0211ca0b34d343922"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000700)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf25180000002000018008000100", @ANYRES32=r6, @ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x404c050) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c02a86b09153cfdf9435e3ffe469213c607cf1e", 0x52, 0x4000840, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf2500e97094309a7675d6c13b917316bf5fb00d6bb60e91a027d03837e276cb5f02cb65be58700041e496250fb41cb4cb3682b804059b67702a1660b67b6167bc2a40b1c4c82af8b1bebebc2891fb977e39a65cdad1fd445f8f8a5df3028cc31f93781c38b21f12d69910051bf47be40d95e7e24ecbbf5b320a3d34b5470aebe6a9151b786434b6f0ba3a228d49c4ef3a00"/165, @ANYRES32=0x0, @ANYBLOB="0800028004000380"], 0x28}, 0x1, 0x0, 0x0, 0xb3d5cca18a0e4a1}, 0x4000085) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xb00, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r9, @ANYRES32=r0, @ANYRES64=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000400), &(0x7f0000000600)=r10}, 0x20) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2a002, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 13.33311801s ago: executing program 3 (id=406): unshare(0x42000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) (async) munlockall() (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0xfdffffffffffffff, 0x0, 0x0, 0x71cf0b8c, 0x0, 0x5}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 13.311878591s ago: executing program 3 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x19006000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x19006000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000300)="$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") ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_clone(0x40000200, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000008c0)="362d0305c20eeb4d1ee5dfe8546b2047e1fddb39964fbb2ba7b03dbd09f91e998e0b339c94f0f08b3fe53f5302d6080b447c1d70b0") 12.40031289s ago: executing program 3 (id=411): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xe, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x111101, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x65) futimesat(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000080)={0x2, 0x5}, 0x16) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) 12.3991523s ago: executing program 3 (id=413): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r3}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r0, 0x6) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) dup(r1) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r3}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) (async) 12.307433674s ago: executing program 0 (id=416): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r2}, 0x18) set_robust_list(&(0x7f0000000280), 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@inlinecrypt}, {@noauto_da_alloc}, {@nobarrier}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@delalloc}, {@nolazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) getdents(r4, 0x0, 0xc0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000040)='\x00') syz_clone(0xa080000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380)="581d443309c4420d97941461a23c754f57baa283479601cf6a6371e4e5b5e477e88df3c0315050dd99397016736998c3a58ab1c5907de13504c2a0845de554f0c365bddc085c235f910189a98f6358b52c2ae2263fff6d", 0x57, r0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000000000b93b8477275b5c441c54d000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x50) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) mknodat$loop(r8, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') ftruncate(r8, 0x5) 12.128048302s ago: executing program 0 (id=418): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) r1 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='defcontext', &(0x7f0000000040)='defcontext', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='defcontext', &(0x7f0000000040)='defcontext', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x168, &(0x7f0000000540)="$eJzs27GKE1EUBuCT2bhZtdlaLAZsrIJaWSqygjigKCncSmG12ZWAaUarPIovKEiqdFfMxMSEhCg4Gcl8X5NDfhLOJZk53IH79vbHy4vh6MPw5SROOp3oPoo8phGnkcVRVMYBABySaUrxPfVmU/7610gpNd0RAFC3av6nlHrmPwC0xc75/7ChxgCA2tj/A0D7vH5z/vxxUZy9yvOTiG/jclAOqtcqf/qsOLuXz5wuPzUpy8HRIr9f5flqfi1uzPMHG/PjuHunyn9mT14Ua/nNuKh/+QAAANAK/Xxh4/6+39+WV9VvzwfW9u/duNXd2zIAgL8w+vzl8t3V1ftPikMvsl0/d2/+n2i+1WWR/R9ttLBo+MYE1G550TfdCQAAAAAAAAAAAAAAsM2/OTN0PP+2X+90IrI/OllwvqdlAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIofAQAA//+LpUUq") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000007c0)={0x0}, &(0x7f0000000800)=0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) syz_clone(0x2002400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x2002400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$hiddev(r5, &(0x7f0000000080)=""/39, 0x27) syz_clone3(&(0x7f0000000ac0)={0x200000000, &(0x7f0000000100), &(0x7f00000006c0), &(0x7f0000000700), {0x32}, &(0x7f0000000740)=""/123, 0x7b, &(0x7f00000009c0)=""/182, &(0x7f0000000a80)=[r2, r3, r4], 0x3}, 0x58) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0x2, "b0b5"}, @local=@item_012={0x2, 0x2, 0x2, "37af"}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) 10.714066712s ago: executing program 0 (id=429): syz_usb_connect(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc30309058803200006020409058302"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0x14b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0x90, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "522b35d5"}, {0x5, 0x24, 0x0, 0xd2f}, {0xd, 0x24, 0xf, 0x1, 0x90, 0x6, 0x2, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x16}, [@mdlm_detail={0xd9, 0x24, 0x13, 0x0, "2bf10b64b17c9abe334b52a853965d41165020b6c604f8d03d45fe159a96f1e4e3b3a144a0c345cb4e3a6ffcdedb56933881cf3b050140da1a571252a37a03773491e51e939a4b4bc82f30fe7d795ee108d646c0d26bf28139b1c2c5c7f88936cd4263748bb60e977223fadf85fd2a1503cebee46f0fdbd6c14858d82cdfbbdfa575cca04d7df20e7479c19ecbc12c2bcb25d1f96147808dc09b2f908cd8eb19a8c19c613803960c0823a50d265d04c474161d9d7ee1a4211b5bdf4228d71801af028a5caf9a2e5da931372b0192655dd16818430c"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x6, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xdb, 0x1, 0xd5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x6, 0xff, 0x8, 0x8, 0x1}, 0x1d, &(0x7f0000000200)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x10, 0x3, 0x7f000, 0xf00f, 0xb, [0x30, 0x0, 0x30]}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40b}}, {0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d0312225736bcd26d1deda942dd16be5bbf549c7eece910574e1922b34af8c88c12ba0371d765cfd48fa45d612bc9a6059b98ce38896370a15fcb0c517e"]}, {0x89, &(0x7f0000000340)=@string={0x89, 0x3, "3442fc552c2c01b3a236dcb35e29ae8caf5807f3df71c3295ee75dbf430f5dac889663fd7f3babc7b9beee7c89988531a244c58192a65bbd3ec46248d84c4574e138594e5c8ec6e16385c1c4ea600ca1c9426856d6206a50e82a81310363268d4e5a0ba83652daa93c99e2b179f654199976a33fb4b6f0f9f9e933e3bc6166292559f0e13b21a7"}}, {0x87, &(0x7f0000000400)=@string={0x87, 0x3, "642b1b71f9d53a22c8ddedceaab388b933bd17afd8040261392885324d415f9af44f1dc2c1a0f13cc8ba4fee655e083b605ca02bc0dc95d6c9be053d5a6e9b1040831b1750b4332faed7eecee6aeeea15111dc3ccc2d7a6989604c7095223a27fbaa58a70b1ccbafea6789b52f22f8fa0aca347e93f2b4339c2dc85ec572a0c426cd208ad5"}}]}) (async) syz_usb_connect$cdc_ncm(0x5, 0x14b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x2, 0x1, 0x0, 0x90, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "522b35d5"}, {0x5, 0x24, 0x0, 0xd2f}, {0xd, 0x24, 0xf, 0x1, 0x90, 0x6, 0x2, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x16}, [@mdlm_detail={0xd9, 0x24, 0x13, 0x0, "2bf10b64b17c9abe334b52a853965d41165020b6c604f8d03d45fe159a96f1e4e3b3a144a0c345cb4e3a6ffcdedb56933881cf3b050140da1a571252a37a03773491e51e939a4b4bc82f30fe7d795ee108d646c0d26bf28139b1c2c5c7f88936cd4263748bb60e977223fadf85fd2a1503cebee46f0fdbd6c14858d82cdfbbdfa575cca04d7df20e7479c19ecbc12c2bcb25d1f96147808dc09b2f908cd8eb19a8c19c613803960c0823a50d265d04c474161d9d7ee1a4211b5bdf4228d71801af028a5caf9a2e5da931372b0192655dd16818430c"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x6, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xdb, 0x1, 0xd5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x6, 0xff, 0x8, 0x8, 0x1}, 0x1d, &(0x7f0000000200)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x10, 0x3, 0x7f000, 0xf00f, 0xb, [0x30, 0x0, 0x30]}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40b}}, {0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d0312225736bcd26d1deda942dd16be5bbf549c7eece910574e1922b34af8c88c12ba0371d765cfd48fa45d612bc9a6059b98ce38896370a15fcb0c517e"]}, {0x89, &(0x7f0000000340)=@string={0x89, 0x3, "3442fc552c2c01b3a236dcb35e29ae8caf5807f3df71c3295ee75dbf430f5dac889663fd7f3babc7b9beee7c89988531a244c58192a65bbd3ec46248d84c4574e138594e5c8ec6e16385c1c4ea600ca1c9426856d6206a50e82a81310363268d4e5a0ba83652daa93c99e2b179f654199976a33fb4b6f0f9f9e933e3bc6166292559f0e13b21a7"}}, {0x87, &(0x7f0000000400)=@string={0x87, 0x3, "642b1b71f9d53a22c8ddedceaab388b933bd17afd8040261392885324d415f9af44f1dc2c1a0f13cc8ba4fee655e083b605ca02bc0dc95d6c9be053d5a6e9b1040831b1750b4332faed7eecee6aeeea15111dc3ccc2d7a6989604c7095223a27fbaa58a70b1ccbafea6789b52f22f8fa0aca347e93f2b4339c2dc85ec572a0c426cd208ad5"}}]}) 10.124909917s ago: executing program 0 (id=430): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x10000101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x9]}, 0x8, 0x80000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = inotify_init() io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x400017e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 10.074595249s ago: executing program 32 (id=430): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x10000101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x9]}, 0x8, 0x80000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = inotify_init() io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x400017e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 8.506959967s ago: executing program 5 (id=431): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x0, 0x400, 0x4e22, 0x0, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x6e6bba, 0x2, 0x1, 0x0, 0x3}, {{@in6=@mcast1}, 0xa, @in6=@mcast2}}, 0xe8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x6], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x8, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x84}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100e8ffffff00000000100000002000018008000100", @ANYRES32=r12, @ANYBLOB="14000200776731"], 0x34}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x80, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.522536261s ago: executing program 5 (id=439): r0 = socket(0x10, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2020) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@noflush_merge}, {@adaptive_mode}, {@block_mode}, {@alloc_mode_reuse}, {@test_dummy_encryption}, {@disable_roll_forward}, {@discard}, {@nouser_xattr}, {@noheap}, {}, {@fsync_mode_strict}, {@age_extent_cache}, {@nocheckpoint_merge}, {@resgid={'resgid', 0x3d, r1}}]}, 0x1, 0x552b, &(0x7f0000005a40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) r7 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r7, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e1, &(0x7f0000000640)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) readahead(r8, 0x6, 0x1000009) 5.645214339s ago: executing program 1 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000840)=0x60, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="b805000000b9007000000f01d9400f073e66410f20548f69109a88a90900008f6878c19a030000000065f3460fc7344f0f06450f0b0f01cfc4c17c1120", 0x3d}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200), 0x1, 0x257, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) dup(0xffffffffffffffff) 5.316881553s ago: executing program 1 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fde2ffff489f19980000000000000000000092a28e94", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000400), &(0x7f00000004c0)=r7}, 0x20) getrlimit(0xa, &(0x7f0000000540)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r8], 0x48) 4.294822997s ago: executing program 1 (id=448): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb654, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x0, "d81a"}, @global=@item_012={0x1, 0x1, 0x1, "93"}]}}, 0x0}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xc00, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) read$FUSE(r0, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r7, r8, 0x1000) 3.928213332s ago: executing program 4 (id=450): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f07ebbeee, 0x13, 0xffffffffffffffff, 0xf0e0d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r4}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) socket$can_bcm(0x1d, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_targets\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/255, 0xff, 0x2, 0x9}, @fda={0x66646185, 0x2, 0x0, 0x18}, @fd}, &(0x7f00000003c0)={0x0, 0x28, 0x48}}}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) epoll_create1(0x80000) 3.783879028s ago: executing program 5 (id=451): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.763141609s ago: executing program 2 (id=452): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x6, 0x282f5c36, 0x80000000, 0x9, 0x4, "0a6fbcc1be52fbd9aa52ee9cbeff1b719dfb3e", 0x4, 0x6}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)=""/98, 0x62) 3.693901422s ago: executing program 4 (id=453): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_lock_buffer_stall\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x3dd5c3846c51b0d9, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0xfffffffc) prlimit64(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)) copy_file_range(r2, &(0x7f0000000140)=0xdf, r1, &(0x7f0000000180)=0xc9, 0x8, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setitimer(0x90ffa5e3052d0b81, &(0x7f0000000200)={{r3, r4/1000+10000}}, &(0x7f0000000240)) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="267b22d7732388dfdf50c9983bfbf5d99f9a022a84e7fffc567ad4c4c7ac3580be0f989695d9a000ee5539dad148509ed87a62", 0x33}, {&(0x7f00000002c0)="d08f42c4fd4310d00852d4106aa8d816105689b842d6aad4ef592b621b194c25b3f57e88562da30f63712bafa1dce640566d74540c2ad81db0e75e5a7936dfadd91207ed39258ea69a52d72d0ea165616d415e3d545b1bc8a59f6113ee5c49c9bbd195d2ba19c03133c9f6841dbc40d81afd5effad5c8c76a5ca2f50febe5241d3c65ca168ff920fc330b17af9138b56296737c6dd71076c564830e22104b60afb639ae02c3c5f128c83a1dcb8aff422e4c851a0f79a464cb2cb3fdb3905da0ef6e7bbaa7992191e063a95f63e9bbdeadeb70bcb06aa9b1b68", 0xd9}], 0x2, 0x0) symlinkat(&(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') r5 = open(&(0x7f0000000480)='./file0\x00', 0x20c002, 0x1a8) clock_nanosleep(0x5, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x0, 0x2c, 0x7d, &(0x7f0000000540)="131f223784f747fffe0bd7db3d0a5fe9e2ad2cc044fd12c55bf067fe651e54bb148d6410d862ee517575d680", &(0x7f0000000580)=""/125, 0x6, 0x0, 0x65, 0x2b, &(0x7f0000000600)="9676eb3e5bbc92301f679f5491ac7c5f0460c972b4835034ab58356af0744005f1691394814279dd78521e54d5a16ec568102bca721717ddb0dac06cc490d120c82d265754ac41857b2d89075d4e2ba56d49c33612db950e2a6deb49b81ff9342addb464bc", &(0x7f0000000680)="2aa752dd4c028af648b4b04cf2ce01b55565abd260948e92a6ea343bcfb006ab08a889e93725bb6549216f", 0x0, 0x0, 0x6}, 0x50) connect$unix(r5, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x7, 0x0, 0x5, 0x7, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x66, 0x0, 0x2, 0x0, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x14, 0xb9, 0x3, 0x6, [{@rand_addr=0x64010101, 0x7}, {@multicast2, 0x5}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c00)={r5, 0x20, &(0x7f0000000bc0)={&(0x7f0000000a40)=""/231, 0xe7, 0x0, &(0x7f0000000b40)=""/119, 0x77}}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x1f, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @generic={0xb3, 0x8, 0xe, 0xfff3, 0x6734773b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d40)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000d80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000dc0)={0x2, 0x1, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000e00)=[r5, r5, r5, r5, r5, r5], &(0x7f0000000e40)=[{0x2, 0x2, 0x4, 0x2}, {0x3, 0x8}, {0x4, 0x2, 0x0, 0x6}, {0x4, 0x2, 0x9, 0x5}, {0x2, 0x3, 0xb, 0x3}, {0x4, 0x3, 0xd, 0xc}, {0x1, 0x4, 0x1, 0x8}], 0x10, 0xf4}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1c, 0x6, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x8c}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd8f}]}, &(0x7f0000000800)='GPL\x00', 0x4, 0xba, &(0x7f0000000840)=""/186, 0x40f00, 0x52, '\x00', r6, @fallback=0x11, r5, 0x8, &(0x7f00000009c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0xd, 0x9, 0xfffffffb}, 0x10, r7, r8, 0x1, &(0x7f0000001000)=[r5, r9, r5, r5], &(0x7f0000001040)=[{0x1, 0x1, 0x4, 0xb}], 0x10, 0xfff}, 0x94) fsetxattr$security_selinux(r0, &(0x7f0000001140), &(0x7f0000001180)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x1) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), r5) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x7c, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) ioctl$BTRFS_IOC_INO_PATHS(r9, 0xc0389423, &(0x7f0000001380)={0x10000, 0x10, [0x8, 0x80000000, 0x10, 0x8000], &(0x7f0000001340)=[0x0, 0x0]}) connect$pppl2tp(r5, &(0x7f00000013c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @remote}, 0x0, 0x3, 0x2, 0x1}}, 0x26) fcntl$addseals(r9, 0x409, 0x9) accept4$unix(r5, &(0x7f0000001400), &(0x7f0000001480)=0x6e, 0x800) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000001500)={0x8, 0x28, [0x6, 0x200, 0x3, 0x81], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sched_setscheduler(0x0, 0x2, &(0x7f00000017c0)=0x80) 3.692622462s ago: executing program 4 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b005800000000f4640900"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000d80)="bc14", 0x2}], 0x1, 0x0, 0x0, 0x4000010}, 0x20004011) recvmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=""/240, 0xf0}], 0x1}, 0x2) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0xa10480, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}}}}]}, 0x4c}}, 0x0) fsync(r4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x10, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff3b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6f}, 0x94) lseek(r7, 0xfffffffffffffff5, 0x1) write$uinput_user_dev(r7, &(0x7f00000001c0)={'syz0\x00', {0x6, 0x8, 0x7, 0x2}, 0x55, [0xc, 0x8000, 0x44f, 0x7, 0x200, 0x6, 0x3ff, 0x0, 0x2, 0x6, 0xb, 0x2, 0x120, 0x3ff, 0x0, 0x9e9, 0x0, 0x6, 0x0, 0x703, 0x5, 0x1cb, 0x200, 0xa, 0x1, 0x1, 0xfa, 0xfff, 0x5, 0x42, 0x99b, 0xfffffff8, 0x9, 0x5, 0x40, 0x100, 0x6, 0x5, 0x19, 0xffff, 0x2, 0x6, 0xfffffffc, 0x499d, 0x7, 0x7, 0xb37, 0x3c2, 0xffff0034, 0xea59, 0x0, 0x81, 0x9, 0xd, 0x4, 0xa6, 0x0, 0x9, 0x6, 0xb655, 0x400, 0x7fffffff, 0x804f, 0x40], [0x1, 0x9, 0x4, 0x2, 0x0, 0x8, 0x8, 0x5eb90905, 0x200, 0x5430, 0x7, 0x4, 0x3, 0x100, 0x200, 0x8, 0x7fffffff, 0x824, 0x7, 0x7, 0x4, 0x8, 0x7, 0x6, 0x7, 0x4, 0x8000, 0xb, 0x0, 0x8ccb, 0x7, 0x0, 0x7, 0x3, 0x21b9, 0x3, 0x6, 0x8, 0x80000001, 0x7, 0x200, 0x3a6, 0x4, 0x3, 0xbc93, 0x10000, 0xd90c, 0x4, 0x9d, 0x0, 0x1, 0x800000, 0x7, 0x4, 0x1, 0x12000, 0x7, 0x0, 0x8, 0x6, 0x4, 0xffffffff, 0x7, 0x7], [0xf, 0x5, 0x4, 0x4, 0x7, 0x2, 0x7, 0xffffffff, 0x5, 0x9, 0x0, 0xb, 0x401, 0xffff, 0x4b9a686e, 0x2, 0x0, 0xfffffc01, 0xad5, 0x0, 0xfffffffc, 0xfff, 0xe, 0x80000000, 0x401, 0xf, 0x4, 0x5, 0xffffffff, 0x5, 0x7f22, 0x1ff, 0xfd, 0x4, 0x7, 0x5, 0x4, 0x76d, 0x0, 0x4, 0x2, 0xf144, 0x0, 0x401, 0x0, 0x8, 0x6, 0x0, 0x401, 0x8, 0xd, 0x7, 0x1, 0xd, 0x7, 0x5, 0x5bc3, 0x5, 0x1dd6, 0x6, 0x7f, 0x1, 0x4, 0x5], [0x4, 0x56, 0x400, 0x5, 0x81, 0x0, 0x46, 0x19, 0x4, 0x6, 0x86, 0x5, 0x5, 0x400, 0x4, 0x0, 0x100, 0x7, 0x200, 0x4, 0x50000000, 0x2cbd, 0x2, 0x6, 0x1, 0x7, 0x6, 0xffffffff, 0x5, 0x1, 0x8d0, 0xb, 0xb, 0x5, 0xa, 0x8, 0x0, 0x7, 0x1, 0x52afa79f, 0x6, 0x2, 0x1, 0xb0e, 0x6, 0x5c28, 0x5, 0x8, 0x6, 0x3ff, 0x5, 0x4c, 0x9672, 0x2, 0x1, 0x8, 0x6, 0x2, 0xbc85, 0x4, 0xaa81, 0x7, 0x100, 0x3]}, 0x45c) r10 = open(&(0x7f0000000080)='./file2\x00', 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000c8f140a0aad331ff6754"], 0x48) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r10, 0xf50f, 0x0) 3.368308536s ago: executing program 4 (id=455): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="0300000000000000c61e994400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"], 0x80}}, 0x0) (async) creat(&(0x7f00000000c0)='./bus\x00', 0x182) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000500)={[0xfffffffffffffe01, 0x6, 0x1, 0x8000008, 0x3a8, 0x400002000006, 0x30000, 0x1, 0x1, 0x80000000, 0x80000000, 0x6, 0xf5b, 0x10000000000000cf, 0x10000], 0x1001, 0xf40}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000380)="0fc72d36262e36660f382a1e00a00f01c22e3ef3a56665660f6abbf600d9edba6100ec66b9800000c00f326635008000000f30bad104b004ee66b9820500000f32", 0x41}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x800) 3.163903765s ago: executing program 4 (id=456): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000700008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0xa7, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb5, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r5 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='1,(e\x00', &(0x7f00000000c0)='./file0\x00', r6) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/58, 0x0, 0x70000}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f00000002c0)={0x1, r8}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) socket$can_bcm(0x1d, 0x2, 0x2) 2.841251319s ago: executing program 2 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r5, &(0x7f0000001f40)=[{0x0}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {&(0x7f0000000c00)=""/146, 0x92}, {0x0}, {0x0, 0x195}], 0x7) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000180)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2.5812328s ago: executing program 4 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f01000000000000000000090581"], 0x0) 2.414912497s ago: executing program 1 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x8000000000003) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r5 = socket(0x1, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) connect$unix(r8, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 1.570514543s ago: executing program 2 (id=460): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setreuid(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8001, 0x0, 0x81, 0xffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0}, 0x90) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x400000000000) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r0, 0x20, &(0x7f0000000500)={&(0x7f0000000440)=""/93, 0x5d, 0x0, &(0x7f00000004c0)=""/21, 0x15}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x2}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000005c0)={r2, 0x3, 0x10000, 0xff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x8e, &(0x7f0000000340)=""/142, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x32, r3, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x10, 0x77d7}, 0x10, r4, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[r3, r5, r6, r10, r3, r0], &(0x7f0000000700)=[{0x1, 0x42, 0x0, 0xa}, {0x1, 0x2}, {0x4, 0x4, 0x9, 0x6}, {0x3, 0x1, 0x4, 0x2}, {0x2, 0x1, 0x10}, {0x2, 0x4, 0x6, 0x1}, {0x3, 0x4, 0xa, 0x8}, {0x2, 0x5, 0xc}, {0x0, 0x5, 0xf, 0xc}], 0x10, 0x100}, 0x94) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 1.360897372s ago: executing program 2 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fde2ffff489f19980000000000000000000092a28e94", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000400), &(0x7f00000004c0)=r7}, 0x20) getrlimit(0xa, &(0x7f0000000540)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r8], 0x48) 1.070007655s ago: executing program 1 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x738c8b53}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x2d891dc90fe8a01, 0x19, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x7, 0x0, 0x3, 0xfaa, 0xfffffffc, 0x4, 0x4}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000940)={r10, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x10) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r12, 0x2, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r11, &(0x7f0000000380)="a3", 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0xd10c3191701f7560, 0x453, r11, 0x0, 0x0, 0x1}]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r10, 0x2, 0x6, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xe, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x57f6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xfffffff9}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0xe, 0xa, 0x8, 0xfffffffffffffff4}, @exit]}, &(0x7f0000000640)='syzkaller\x00', 0x6, 0xed, &(0x7f0000000680)=""/237, 0x41100, 0x50, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x9, 0xf, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x1, r8, r0, r7], 0x0, 0x10, 0x426}, 0x94) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000b80)={r10, 0x1, 0x6, @remote}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffed7) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r13}, 0xc) syz_read_part_table(0x5c0, &(0x7f0000000000)="$eJzs089LrFUYAOD3+zS+excxEkGLu7mgtLKEcVELZxEyDrNJEYsWrYNZVCC0MBhGRtdW/0BhGoQbaT9LcQQxGFfiMmYdJG2GFl+MfqO5iOiCivI8i/nxvuc95z2cc4JHLYnf8zxPIiLPno+CR/9VdbD77PL7o73qQv3l0gfLK8OZurfmjYjhhFlEGhG/FPHF7Cpbz8q97eP5i72Jk8nT7tROWuQ7acR6RHz+227p39f/K7/yanvm6divHGYbm3metyqNs1qzP/vZO9UX31S/+O69H+daH78190lxsTrpna1f2thcrW2tjTfOLh9FEpGP7uegPHpK08nturG7aYd7dn3+rYioNfs/vNk+bw8+fPvnr2am3zg/aH1bnPufyUN3CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPHX7lcNIR39qzf5sO6ovBnmhFGMR8WVEdNJnd7T+8+JXpXFWa/aneu//9Gu++Mf3r7/7Wrc3KB8V2enkpk2ejv3KYWljc7W2tVZpjNeawzM+bw+SiJj5+h/D8uwBewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHpfqQv3lUrq8EpHEpxExn07sDuN5dpVPLj/HrscvFvF6Vu5tH89f7E2cTJ52p3aWingnjViPSNLrivymePxetsT/8HcAAAD//0CNhOk=") 382.778584ms ago: executing program 2 (id=463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2031c10, &(0x7f0000000340), 0xff, 0x261, &(0x7f0000001240)="$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") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2031c10, &(0x7f0000000340), 0xff, 0x261, &(0x7f0000001240)="$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") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) (async) sendmsg$key(r2, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0_vlan\x00', &(0x7f0000000880)=@ethtool_coalesce={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x536, 0x0, 0x2}}) 74.216107ms ago: executing program 5 (id=464): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x1) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x20, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r6, 0x18000000000002a0, 0xeff, 0x7, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) quotactl$Q_GETQUOTA(0x0, &(0x7f0000000040)=@nullb, r7, &(0x7f0000000180)) 952.41µs ago: executing program 2 (id=465): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80800) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) close_range(r0, r0, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) r4 = syz_usb_connect$uac1(0x6, 0x109, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x3, 0x1, 0x6, 0x10, 0x42, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe2, 0x9}, [@extension_unit={0x9, 0x24, 0x8, 0x1, 0x4b, 0xd0, "03dc"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x3, 0x0, 0x7f, 0xbf, 0x6}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0xc}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x97, 0x3, "8d03"}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x10, 0x64, "186862a0"}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0xff, "655f53cf6cf2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x8, 0x5, 'C', 'w'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9d, 0x1, 0xf7, 0xd, "ae52ae83b1e1bd13"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0xf800, 0x3, "2d4ee048"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x7, 0x1002}, @as_header={0x7, 0x24, 0x1, 0xe9, 0x47, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0xb1, 0x34, {0x7, 0x25, 0x1, 0x82, 0xd, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x7f, 0xfc, 0xb, '[e', "cb"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x100, 0x1, "91d693c5eed30c4c"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1, 0x5, 0x4, "e62983e56b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9f, 0x60, 0x18, {0x7, 0x25, 0x1, 0x0, 0x4, 0x8}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x1, 0x3, 0xf7, 0xff, 0x9f}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3b, "f4cb9cdf08ccab0fcd31caa704066bcf"}]}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x441}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000480)={0x14, &(0x7f0000000400)={0x20, 0x31, 0x27, {0x27, 0x21, "e026e6ac8cd94ccf6c7ac2b4e5d7a24265277d64f4f40302438719f1749e095cd67f85c3ba"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)={0x0, 0x18, 0x29, "10037a0821ecbda7b4ee13ae32f493e740adc52d4b5afd797252e4c252f7c4400f269bddb4e77f847c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x41}, &(0x7f0000000580)={0x20, 0x81, 0x3, "d365f9"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, '_'}, &(0x7f0000000600)={0x20, 0x83, 0x2, "cd68"}, &(0x7f0000000640)={0x20, 0x84, 0x3, "9499e8"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "25f8f6"}}) fstat(r3, &(0x7f0000000740)) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0xc0, 0x2, [{{0x9, 0x4, 0x0, 0xf0, 0x2, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x68, 0xa7, 0xba}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x201, 0x12, 0x8, 0x4c, 0x40, 0xe9}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x6, [{0xc3, &(0x7f0000000880)=@string={0xc3, 0x3, "94a9461b16048663869f7188d604d42b7e896c15624c8fb2533034ea5674343bf593c7a72918883d485890e2431eb61fd747c28b4d87a82fe984e9c1dcf00e11aa2306647eb762413527cd26f724a519ef65272175dc018fa3c062888a4202a2fb35368eafd23f41bd5eeff6539b4256f1571a8b2951fc8d3b040bb5db88f2525ab89a2b1eb6ea38dd7f2c9d7a38de4a9678f1ce0eb07554cf0e2033453869b35dac93f52f63c5ada108bbd9cb7e35703f939ef8bc5db087bc51a9683232fbea06"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x44f}}, {0xd7, &(0x7f0000000a00)=@string={0xd7, 0x3, "a7b2cb19c66abe8548d3d48daa41765838b1246c898bc5b92724aaa18500379f747e11dfbff9089ea6add0ca062684dc1fb7bac56629a8e642cddc645a0be7d084ae665d466ed7593dbd68fdeb81b758d53b81dc0e43982bd277507ef29930ea96caeab13179b1e661ecb8c3a37ad9737f03cae771d9160081ad197c7f44d0486bb77481326a6222e474dae637544ce3f90e6223a22fdafdbddcfbdd26c5f4f3fa769dd56e1cf6a5dd74731b4818c8a7febd8bcdd5e048dde09131aeedebe4314c8e8ba3891abeabe80706428b72e37e2d405255d5"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_connect(0x5, 0x5ed, &(0x7f0000000c00)={{0x12, 0x1, 0x110, 0x52, 0x6b, 0xf0, 0x8, 0x856, 0xbc02, 0x9002, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5db, 0x2, 0x6, 0x2, 0x60, 0x6, [{{0x9, 0x4, 0x75, 0x6, 0x4, 0x2e, 0x1e, 0x75, 0xf5, [], [{{0x9, 0x5, 0xf, 0x10, 0x10, 0xf6, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8}]}}, {{0x9, 0x5, 0x5, 0x1c, 0x3ff, 0xff, 0x9, 0x3, [@generic={0x5b, 0x11, "5130191c58bc9a238f2613b674868721922a3b1f608b334b4533fcbf64319ebc8240c0970feb95ca45ede4bf418bd1e02bac5c7ad80ba0a31d54e4782dad2ab7fd3f3d360e2df1e8ea39214f5ee5c4cb1e33c6acf2162a8adc"}]}}, {{0x9, 0x5, 0xc, 0xe, 0x200, 0x8, 0x7, 0x6}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0xa, 0x7, 0x4}}]}}, {{0x9, 0x4, 0xc3, 0x3, 0xe, 0x6a, 0x97, 0xaa, 0xc, [@generic={0x7d, 0x4, "10944513c9a0ba3e95f4e533ca924f105000c4c268bfcb862e1989adfdb9a21bfcbac32f5ec8564e7923c7d8800a89b5b7ce72e79f66e472c6cadf0269bd12489112b96531c90fb3f4793769356d213286379243ca4906ee8684d4c09fc49dd6723fe535a41593e08efe33b60c12bfe6deb839018490df7aa30a4c"}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x0, 0x8, 0x4}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x0, 0xff, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x4, 0x81, 0x1, [@generic={0x53, 0x42, "b4e1e2cfa32eb1baee36bdef89443afb8cf5e29c766720c451e205f6af4a080cce8285c9035ccadbb7d5b10cf82919bfc8cd9ce7c05cb088e087e34deac8b862638afcef380efc50387de07bc853ae6bd1"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x2, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}, @generic={0x57, 0xa, "196fdcf90e99748985c4141386cf9b7728afd3d6fce30055945a7efcb0f46b4bb81573a743fc60053231631b8ce27a5bd91add60572d74f39cb6e3cd5d00db56af415deec42c33b5d10fcb9e7c5eec622286ac1a87"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x7, 0x9, 0x5, [@generic={0x33, 0xc, "44908f806e7520dbdd2f45d8ff0c3956b348d3b51775d6fbdf557a8dd4e6ceb98d006cd3ac4218ded671887f13d10b22e3"}, @generic={0xd8, 0xb, "feda592bafecb2fcae3529a830aa9681d8b0b2d298d52e854079cb9b8b1b0ddfaa378fca15aa0dd023e02d65a3403573d5d3d667666e5f17d3ff06127e33689ddf6aaa0588b037fc91711581f50b67460d6383817443d311d382974f2eea771b8607d83b6227272221873f6630104093cad6f106224f20aad8d59fe434b47f6652ea1ff9e56e0ddc626eef43acac9f9bdf8da2299155d165dd280ad7165395921e20f9484c754900f45495aca110bc43210637198da9856fcff5663070d5d2c467859a00eb705b9581668aee5824ca21d4b4836e1014"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x9, 0x79, 0x8, [@generic={0x64, 0x9, "5ed3693b91942b813089c3d00f7ab804a763c9afffd6295e04effd1fcc10999e23c98ffa4062e5dfecf909ddcb4c3ec1c08c0633f9c665fc07e1cfb7a9dd3bc269b86f4dcf8733b0f9d8f5b55d874037206533ad62528cefd2437e0dab0ecb3013aa"}, @generic={0x8d, 0xb, "cf8217e64ddaa683f611495f78609f020308b9de7b125d662986b41a2e3b65611dd93f903b1428432a51a290367677e179e916aca6397ea6c35008bdf4896add46a34f6d1735ac8efcf256e5e9d286b869a93271ac346cd1d90d1570aadb04297463e164411e7d7cf94243e8d060c7b2c9a57b3b9f26faee91e3c53d88ebdbbbf71c545adb9c20439165c6"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x3, 0x5, 0xbc}}, {{0x9, 0x5, 0x4, 0x3c7d873d4836c305, 0x20, 0xf6, 0x5, 0x5c, [@generic={0x49, 0xe, "2b933c4d60ed01b2536568db8d11d088b3ad4ae9cb4158f16acddc7c6e2a66e3993f127a90e29a154f3b24fcebaeb7418fa3e0c67ce3190baa0d2e64525b9e24c6f711354d0cbb"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x1, 0xda, 0x33, [@generic={0xa5, 0x31, "b49c02273894dbcfc70c012c758ec6889d3c85ca5f1a7e070b59c61e99b97304760a5dd7fb5d361b82b0a30ea81760cb94099c76deb051c433cfb6f675511ad77eb39d17233896a36614e5930d70eaecf9bd1a8cdddb0f36d8d27bc70b99e2f5dd773be5dccfef71a361cbe020fe3cccf35fcc802fa7e76e1fa04e2c140cb98bbf1f6225b1d89cb61fcc3d7bb7728518f0fd5bffd14dfcab22cd9e4b644ec2a9713546"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x65, 0xcc1d}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x6, 0xb2, 0xf1}}, {{0x9, 0x5, 0x4b3dd16899ef7db8, 0xa, 0x200, 0x81, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb7, 0x3}, @generic={0x7a, 0xf, "dca12f20339614bf92dea70d5cced878358562dc34e38b168c7181e4ce7d4d385375f3d734ee186fe6c83b1549a00c22f853562577ed1fe02d1f0d445b89e27a881f9988b90de2c3c4e2bc913b24fa7c451661ae5049fb4c79ca75cdd52ec285405b4970580ec318784835d16af3a74face085adb146eaef"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x9, 0x98, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8d, 0xef}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x7, 0xfb, 0xc}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x7f, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x10, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2}]}}]}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x310, 0x6, 0x3, 0xdb, 0x8, 0x6}, 0x60, &(0x7f0000001240)={0x5, 0xf, 0x60, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x4b, 0x40, 0x81, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb4, 0x0, 0x8, 0x200, 0x8}, @generic={0x13, 0x10, 0x1, "42c1540be6aae8225f3a87981e53f324"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0xff, 0x8, 0xff01, 0x40}, @ssp_cap={0x1c, 0x10, 0xa, 0x8b, 0x4, 0x0, 0xff00, 0x7, [0xff000f, 0xf, 0xcf, 0xf]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x3, 0xf6, 0x3, 0x5}]}, 0x4, [{0x66, &(0x7f00000012c0)=@string={0x66, 0x3, "1c0ad69e510de28b18720993b62cf34932468fb666d8ba3f72dd9852884d14f2e49956a2116333a3e9e0499628b6989745ad98d4fea7a6dd17c0608cd4033d157d4f0b10e4b5aca09f0cf7ff4f4c52d998cf9961a33060b7f99b873200be076b6c95fb32"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x101b}}, {0xcd, &(0x7f0000001380)=@string={0xcd, 0x3, "0d09e1da65c979ac7740d4f8fd5b7007e6d9f14ece0ef825515302b1d1a6df740f8b6a91bc3163f6910eec3b8128d59b3228e1e4fd4c1bd2231c812bdb789a7c68e11e38f45ec830ae8f3166f6756dbfa9225c97837ba2d20d81bbf370070b83eb6b8b99d78cac06d3b26e737c3dd037af39f97d3cb64f4e1ebdce752b6456f4d45cf4031ab13899e04a64c77e003a638f4248a6b9b12cb1d844bac6e9e5a1fd6215504ae54241b5204ec7fc97b4cf08d2c9e95ee7539b6950189b5d7b43197ab0abc150d73ab4201e1d07"}}, {0xa3, &(0x7f0000001480)=@string={0xa3, 0x3, "f0a5558ede3919225f18ea05d69cbb92df65a0cdaf7ec817f8507835b722b28904fb30f37d4b5c116e40c48d2b1b48d94e14b0cd27c6a7670832d7900b0d737cebe9b5f9c72da9be6e9e6b681bc230ef8878a18dc53cdfc3df509ae20591137c4a4c95b69ec373244b9cf59724a3881022cb4735d721a8dda200d365daed6d2b150d747dbdf9865d2421dfdb90136ce6296616a636d8bba8b3861ed3121f0f6574"}}]}) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffd000/0x3000)=nil) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8400004}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000016c0)) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000001700)={{0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, {0xa, 0x4e22, 0x0, @private2, 0x7}, 0x0, {[0x10001, 0xe, 0x8, 0x7, 0x7, 0x2d, 0x5, 0x574]}}, 0x5c) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001780)={{0x12, 0x1, 0x40, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x2a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xce4a3936c37877f1, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x7f, 0x0, 0x1, {0x22, 0xbc4}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4}}}}}]}}]}}, &(0x7f0000001a40)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x201, 0x40, 0x80, 0x78, 0x20, 0x9f}, 0x4d, &(0x7f0000001800)={0x5, 0xf, 0x4d, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x4, 0x7, 0x9, 0xa6}, @ssp_cap={0x14, 0x10, 0xa, 0xba, 0x2, 0x5, 0xff00, 0x1, [0xff00ff, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0x9b, 0x2, 0x5, 0xf00, 0xf, [0x50, 0x1f80]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x9, 0x8, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x9, 0x8, 0x0, 0x9}]}, 0x3, [{0x97, &(0x7f0000001880)=@string={0x97, 0x3, "c21bc5c23d45ee3d291200cdefee98346ecf67eb880c19f1cb67256a6349a54c755276e859b1c24592467400b7f39fe30d96a2367054076dcde7589ebb66c936c0f3a517c2860f7fe4a716847d5fe65563c12736de34c9af5a48549cc1c4d6f250c298f5f9ef9ac905ed20d145a19bbe2496562eceae948af5588537acc43af2077fdd76f2ed46c12e373a483fed61ebdc352bf2c2"}}, {0xaf, &(0x7f0000001940)=@string={0xaf, 0x3, "300dd8014efd5cd7ee15e9a7c287fb1f70c4eef9fadb656646f933f2c94ecc0a6043e6c7004cb40e15b9347bac1c809350440793964d2802d2863c02490658bfe9645fb1353c87111530387764614b02099ef297b8c5d661464d8bcde30f2d3facc10896460112a4b5d24adfb1b5d3ec2e5b8a543e41d719dcfa87b11f229c221a8aacbd1493d50692e12080f4f338020c22085d638283766dc8a87367a7f9c14381fc6d2b8f5dff2ac12650d1"}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x100c}}]}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001a80)=0x0) prlimit64(r5, 0x2, &(0x7f0000001ac0)={0x1, 0x9}, &(0x7f0000001b00)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000001b40)={0xfffffffe, 0x1}, 0x8) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000001b80)=0x27, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002300)={'batadv0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001bc0)="a82ca3e402b486b8061bbf49856f0d611d027da7cd7407c85136ef254aafdd0a441fd2239ff7df66ddb98f30b712f0afcd4410bf796a63d920ab1d061fcd99c7c3ab3b7b1a313e9685e68e4095ed1158d474326ece60ce7a9873e7b249ec44fcf3201ca2822b48641c459cea1b41450b71a3fa2af820bf12bf9921ea6711930a1ce2c98eb420de93046810eb6d082cabe6ec184d66d62714adc65c38344b65ad080113d7a1e3f3e1816098b60dbc32f4430d9e73d1ebc5097f1f67733c4b9564dddf50f55da981f237aba9f42b02135324730834800ff0d30568a2f4b7dd7ea1e6e11b2390e5910e698eeda3869ebe0de060f62771013a70", 0xf8}, {&(0x7f0000001cc0)="8cbe87095f3ffe6d679e56acf5e07baf0c11a8456d829e85291cae79c1ab0d9a9dbf775d53224c39b8f00d6269b32d6b1a180d9f5203b3de023077f92e643a917d45a1b9b337c963818468635eb58511640053c0631690b69cbf00f83fe339f5a3f9c9", 0x63}, {&(0x7f0000001d40)="550882b3d6f364c7c075ba3986ee8d034be00506e2dd7da0a357b21a53b8aa6cbda603c8ebb877d796fb6838f2de77194a21764fbcb62495170dc5bdb8e7dd61bad946a9f02a665585e03832bbfd84cfa4232e624ea1087557672b972e3d26e77c10ab95d949288c0295d53ce4bffc0cd7a19477", 0x74}, {&(0x7f0000001dc0)="8294abd3b55252e501487b4126df78f41478dab01475a756a1beb51028d93384d7b8b122c962f000452ec77da3d534e4852561556f5f1f5568c15b5ff5f1aa4908327141cc5d5feb8d5e80d9b3267d2170fbadb59452de5ac73057a1ea18218e96307d2ba45b3ea500d6881f79caadb6cf58021f970a17b1327e96748bde89ba786b68ebfbd94b6890b974b85145b9ff5aa2837a13072a87c0f2fdd5f7ba9e449bb6e6c069169133add56f80fc", 0xad}, {&(0x7f0000001e80)="372fd30ec50a0386ee7d7d1f6d2cc5d822f59d1b35d2baa22355c63ba78e533c0b2358a2b2cf10bc529328a8a6776ac3d93d372a2577b8f1a4eb46a659aab3bd4d1241826cdd3aafcae1a609cc54eb08c2aeedfce7d0efdbded56555b456ed1b16928018dbe1fe38d21a96e1184df426bb70b00efc7a23b057b49657f41cbbb4e5706fbfdefb56340de4a1996968deb403ec989da105c3fc35b9b7b80877e4e2f5b1269d44dfb1835f959201e9a3fa838a12f0659213f3c53be3", 0xba}], 0x5, &(0x7f0000001fc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x9f, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xf, 0x87, [@rand_addr=0x64010101, @private=0xa010102, @rand_addr=0x64010102]}, @rr={0x7, 0x7, 0x45, [@multicast2]}, @rr={0x7, 0x13, 0x7e, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local]}, @ssrr={0x89, 0x2b, 0x94, [@loopback, @multicast1, @multicast1, @loopback, @multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x27}, @remote, @local, @local]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @rand_addr=0x64010100}}}], 0x118}}, {{&(0x7f0000002100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000002140)="fafef3547ae3f8a69524300b4c9b06ed1c213db11e903772b2916ab699c2d4826001cfd4d64d2e121f246677a084dbef96c5b3cbdad7b9e062980efc64c304db3a699583f1f37cc1ba00fd43cea69c66ba63ae4dcd74a2cf5598c0fb26885420c6f6d2180bffdc257581db9ca86943d8f22cd42c87ee95b7e5ec7860baabd495cfca227d2b9c940504e8ba82f032765a0cad686b6fab516ba5ade405f7e74424c730f1b9e6c78bdf118b02e6c61f5577b95ec58aa79242caf69f27daf97bda5997a34d770f300e961cdf", 0xca}, {&(0x7f0000002240)="1061874147b290ac05ee33d2f15f8334b48967d9aa7625ea90529bba5defb83bd84cf7aa686b5deb3bf24366a786a78bc60a0de28011f31a5408b73c068e86e3c6ce5a82eba3de9b213da3595372424dce08e428cbec1f57275c8c5ebb5319a396a9a5713be0a4392c0284", 0x6b}], 0x2, &(0x7f0000002340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @loopback}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@cipso={0x86, 0x5a, 0x3, [{0x0, 0x8, "c245ad238975"}, {0x2, 0x4, 'hv'}, {0x0, 0x5, "0505d1"}, {0x4, 0x11, "7b7117eab88ee58d1fe090a01b92c3"}, {0x4, 0xf, "1d1a3c6c4ab4e4774821fd1368"}, {0x2, 0x2}, {0x2, 0xa, "fde44880e627304e"}, {0x0, 0x2}, {0x5, 0x7, "12d947422d"}, {0x6, 0xe, "109d1d876edd33269b67926c"}]}, @generic={0x86, 0x6, "7e5477e2"}]}}}], 0xe0}}], 0x2, 0x8020) r8 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000024c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x90, 0x81, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x3a9, 0x2, 0x1, {0x22, 0xe4f}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6c, 0xf6, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x2, 0x2}}]}}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002500)={0xa, 0x6, 0x250, 0xb8, 0x1, 0xa, 0x10, 0x9}, 0x11d, &(0x7f0000002540)={0x5, 0xf, 0x11d, 0x4, [@generic={0xf3, 0x10, 0x2, "ecca02f0def94bbb67c8eed13c14d761a2e4b603175175f142b131c5ea1758419ee9bab8a3912d86dd0f75722b3816cee190afcb29af281c8243685000a1f30543d7913b6e32387716024837cacae8dfa29c198cef810c58f6eedfdbb82a11cfd62ebe1c7c652b2fe8cc90107ed8e2f522ec5761d73f48da95e97cc130d858d74b1ce232a515862af9255b446da58d40dc963759ca3949a517b7f6eac1a520d0da5c6ab547d030efc800119da36ca61af8b67fb3374bf03264cb190db7c43c59d12fdb83d561b469c6d0725a22138009a322317f3dc2263e124e0dd4fa641168323fe0e74f4ef5978560698a18a7ad05"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "0a5bc999bd1707ec08af98d14b5fbc1c"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xa, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x4, 0x9}]}, 0x1, [{0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x441}}]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002700)={'veth0_macvtap\x00', 0x10}) syz_usb_control_io(r8, &(0x7f0000002940)={0x2c, &(0x7f0000002740)={0x20, 0x4, 0x9, {0x9, 0x21, "65fd4b53603630"}}, &(0x7f0000002780)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "190e047a870dfb6cec6f30beeeab739d26bb95754243330d98d75882dfd537f94bd369d9ee39c528236c2ed949ffcf49a0c206de82f48448f671a53e0973a5021fbfd2610c59a501622d5188fb32241d49c06e498358cf13bafc5b97d770d5c33845b0643b5bf61767a28cc751eba34d95452e5da4fcc926a03fdc0b4413483c278dc041b403ec6f8473a253f471ae0ac50784bf4bbc2ed42e79e687afde5cb53fecdddc0e61ac4b246283802878ea11d68088e7d7587a299939926548fc8e4c8cb742d85dc5959be5b06ff13660830437ec3d2bb80ebedde81edc9bc2a23df298756cae975985461e8024aba7c410"}}, &(0x7f0000002880)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "b76124cff638f2dbcf3492832963d5a9"}]}}, &(0x7f00000028c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x4, 0x80, "b8f603a8", "10e00e23"}}, &(0x7f0000002900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x62, 0x60, 0xbc, 0x7, 0x5, 0xf, 0x5}}}, &(0x7f0000002dc0)={0x84, &(0x7f0000002980)={0x20, 0x5, 0x71, "5309703a2cf2135f0982c8381641c93c64b1b259709f7a9e85010ece5e8d4d6d72bc7da9fffb762dd4ec9127b2dd7f78ea2d40f3a740f78ca435503b9d815a1731ca8039a18a5a21ff26f4a5a1d4089a2fe8ffd8716b1a9e34a0be9a31367de439e01d51b667d835ccf0ff8a03c4aa0df6"}, &(0x7f0000002a00)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000002a40)={0x0, 0x8, 0x1, 0x90}, &(0x7f0000002a80)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000002ac0)={0x20, 0x0, 0x8, {0x400, 0x10, [0x0]}}, &(0x7f0000002b00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000002b40)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000002b80)={0x40, 0xb, 0x2, 'n)'}, &(0x7f0000002bc0)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000002c00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000002c40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000002c80)={0x40, 0x19, 0x2, "30a9"}, &(0x7f0000002cc0)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000002d00)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000002d40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000002d80)={0x40, 0x21, 0x1, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000005240)=[{&(0x7f0000002e80)=""/29, 0x1d}, {&(0x7f0000002ec0)=""/19, 0x13}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/164, 0xa4}, {&(0x7f0000003fc0)=""/128, 0x80}, {&(0x7f0000004040)=""/133, 0x85}, {&(0x7f0000004100)=""/32, 0x20}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/214, 0xd6}], 0x9) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000005300)=0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x2010, r2, 0xeae2f000) write(r3, &(0x7f0000005340)="5131a5987e8c267c8c3c4e1340a7eb0eb3f112e0f10138ab7970f2214588d5a676954b076027f98869878776627f130cd5fff3903f660e08bd55322883f37f832ff0065e1399013e9eb84813", 0x4c) dup3(r6, r2, 0x80000) 510.35µs ago: executing program 1 (id=466): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = creat(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000200)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@block_validity}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffc37, &(0x7f0000000080)={&(0x7f0000000900)=@updsa={0x144, 0x1a, 0xffffffffffffffff, 0x4070bd28, 0x3, {{@in=@private=0xa010101, @in6=@mcast2, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x20, 0xa0, 0x11}, {@in=@multicast1, 0x84d4, 0x6c}, @in=@broadcast, {0x100000000, 0x0, 0x3d0c, 0xfffffffffffffffd, 0x7ff, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0x0, 0x0, 0xfffffffffffffffc, 0xa3}, {0x936d, 0x3d49, 0x4000}, 0x3, 0x3503, 0xa, 0x1, 0x4, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x3e}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000000000000000000000097f70a07442b4c000000185500000500000d000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom(r2, &(0x7f0000000000)=""/43, 0x2b, 0x2000, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x1, 0x2}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000280)=0xfc, 0x4) connect$pppl2tp(r7, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) fcntl$dupfd(r8, 0x406, r8) (async) r9 = fcntl$dupfd(r8, 0x406, r8) read$FUSE(r9, &(0x7f0000003d80)={0x2020}, 0xfffffd59) 0s ago: executing program 5 (id=467): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000940)=ANY=[], 0x361, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080)=r3, 0x12) arch_prctl$ARCH_GET_GS(0x1004, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x840041, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) kernel console output (not intermixed with test programs): 613270][ T28] audit: type=1400 audit(1764570348.769:194): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.639942][ T341] usb 5-1: device descriptor read/64, error -32 [ 46.673922][ T60] usb 2-1: config 0 interface 0 altsetting 36 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 46.687957][ T60] usb 2-1: config 0 interface 0 altsetting 36 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 46.801952][ T60] usb 2-1: config 0 interface 0 has no altsetting 0 [ 46.809109][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 46.818941][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.827746][ T28] audit: type=1400 audit(1764570349.009:195): avc: denied { write } for pid=753 comm="syz.2.95" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 46.828187][ T60] usb 2-1: config 0 descriptor?? [ 46.856923][ T724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 46.930866][ T757] netlink: 'syz.4.96': attribute type 12 has an invalid length. [ 47.118163][ T724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.238451][ T724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.421016][ T724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.640580][ T397] usb 5-1: USB disconnect, device number 5 [ 47.652848][ T724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.728674][ T762] loop2: detected capacity change from 0 to 512 [ 47.793362][ T762] FAT-fs (loop2): Unrecognized mount option "smackfsroot=g." or missing value [ 47.847960][ T28] audit: type=1400 audit(1764570350.019:196): avc: denied { read } for pid=764 comm="syz.3.98" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.910210][ T28] audit: type=1400 audit(1764570350.049:197): avc: denied { open } for pid=764 comm="syz.3.98" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.940687][ T28] audit: type=1400 audit(1764570350.049:198): avc: denied { ioctl } for pid=764 comm="syz.3.98" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.972938][ T60] usbhid 2-1:0.0: can't add hid device: -71 [ 47.992909][ T60] usbhid: probe of 2-1:0.0 failed with error -71 [ 48.019846][ T60] usb 2-1: USB disconnect, device number 4 [ 48.042668][ T780] loop0: detected capacity change from 0 to 128 [ 48.043456][ T777] loop2: detected capacity change from 0 to 128 [ 48.049678][ T772] device bridge0 entered promiscuous mode [ 48.061486][ T772] device macsec1 entered promiscuous mode [ 48.068155][ T772] bridge0: port 3(macsec1) entered blocking state [ 48.074721][ T772] bridge0: port 3(macsec1) entered disabled state [ 48.084178][ T780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.093494][ T772] device bridge0 left promiscuous mode [ 48.094562][ T780] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.102447][ T777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.118401][ T777] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.135310][ T780] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.103: bad entry in directory: inode out of bounds - offset=0, inode=134217730, rec_len=12, size=1024 fake=1 [ 48.173238][ T784] device pim6reg1 entered promiscuous mode [ 48.182613][ T285] EXT4-fs (loop2): unmounting filesystem. [ 48.189159][ T283] EXT4-fs (loop0): unmounting filesystem. [ 48.299584][ T28] audit: type=1400 audit(1764570350.449:199): avc: denied { read } for pid=792 comm="syz.4.107" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.322480][ T28] audit: type=1400 audit(1764570350.449:200): avc: denied { open } for pid=792 comm="syz.4.107" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.350148][ T28] audit: type=1400 audit(1764570350.449:201): avc: denied { ioctl } for pid=792 comm="syz.4.107" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.492830][ T341] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 48.521557][ T799] loop4: detected capacity change from 0 to 512 [ 48.664080][ T802] syz.3.109[802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.664175][ T802] syz.3.109[802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.677910][ T802] loop3: detected capacity change from 0 to 256 [ 48.713940][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.725121][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.736008][ T799] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.745390][ T799] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.756173][ T341] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 48.782277][ T799] binder: 792:799 ioctl c0306201 200000000080 returned -14 [ 48.790361][ T805] loop1: detected capacity change from 0 to 2048 [ 48.796801][ T341] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 48.807195][ T341] usb 1-1: Manufacturer: syz [ 48.815817][ T341] usb 1-1: config 0 descriptor?? [ 48.848471][ T805] loop1: p2 p3 p7 [ 48.972836][ T60] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 49.154269][ T60] usb 4-1: unable to get BOS descriptor or descriptor too short [ 49.165116][ T60] usb 4-1: not running at top speed; connect to a high speed hub [ 49.178323][ T60] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 49.187638][ T60] usb 4-1: config 1 has no interface number 1 [ 49.193929][ T60] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 49.208523][ T60] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.218235][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.242816][ T60] usb 4-1: Product: syz [ 49.247142][ T60] usb 4-1: Manufacturer: syz [ 49.251786][ T60] usb 4-1: SerialNumber: syz [ 49.265555][ T341] usbhid 1-1:0.0: can't add hid device: -71 [ 49.271612][ T341] usbhid: probe of 1-1:0.0 failed with error -71 [ 49.289738][ T341] usb 1-1: USB disconnect, device number 6 [ 49.536803][ T284] EXT4-fs (loop4): unmounting filesystem. [ 49.883523][ T822] cgroup: Unknown subsys name 'rdma' [ 50.103643][ T831] loop0: detected capacity change from 0 to 128 [ 50.136039][ T831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 50.142846][ T341] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 50.159026][ T831] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.204450][ T831] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.116: bad entry in directory: inode out of bounds - offset=0, inode=134217730, rec_len=12, size=1024 fake=1 [ 50.255346][ T283] EXT4-fs (loop0): unmounting filesystem. [ 50.382807][ T341] usb 3-1: Using ep0 maxpacket: 16 [ 50.390271][ T341] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 50.409000][ T341] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 50.419502][ T341] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1023 [ 50.429852][ T341] usb 3-1: config 1 interface 0 has no altsetting 0 [ 50.440713][ T341] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.449954][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.458058][ T341] usb 3-1: Product: syz [ 50.462340][ T341] usb 3-1: Manufacturer: ⦏쳩幚傋䱴눙枍 [ 50.469175][ T341] usb 3-1: SerialNumber: syz [ 50.475625][ T818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.482935][ T818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.712826][ T341] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 50.739343][ T341] usb 3-1: USB disconnect, device number 3 [ 51.154057][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 51.154445][ T28] audit: type=1400 audit(1764570353.329:214): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.182041][ T28] audit: type=1400 audit(1764570353.329:215): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 51.414308][ T857] loop1: detected capacity change from 0 to 512 [ 51.477657][ T857] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 51.503863][ T857] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.541462][ T857] binder: 848:857 ioctl c0306201 200000000080 returned -14 [ 51.565764][ T60] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 51.590843][ T847] syz.2.119 (847) used greatest stack depth: 18848 bytes left [ 51.639605][ T28] audit: type=1400 audit(1764570353.809:216): avc: denied { name_bind } for pid=873 comm="syz.2.125" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 51.655439][ T60] usb 4-1: USB disconnect, device number 7 [ 51.671074][ T28] audit: type=1400 audit(1764570353.839:217): avc: denied { node_bind } for pid=873 comm="syz.2.125" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 51.718368][ T878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=878 comm=syz.2.125 [ 51.736179][ T878] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 51.763111][ T28] audit: type=1400 audit(1764570353.939:218): avc: denied { bind } for pid=875 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.806268][ T28] audit: type=1400 audit(1764570353.939:219): avc: denied { setopt } for pid=875 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.170153][ T892] xt_TPROXY: Can be used only with -p tcp or -p udp [ 52.505037][ T28] audit: type=1400 audit(1764570354.679:220): avc: denied { ioctl } for pid=898 comm="syz.2.131" path="socket:[17905]" dev="sockfs" ino=17905 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.512907][ T345] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.656910][ T901] loop3: detected capacity change from 0 to 512 [ 52.715068][ T286] EXT4-fs (loop1): unmounting filesystem. [ 52.736865][ T345] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 52.750322][ T345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.773183][ T345] usb 5-1: config 0 descriptor?? [ 52.975628][ T341] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 53.165309][ T341] usb 3-1: not running at top speed; connect to a high speed hub [ 53.184668][ T341] usb 3-1: config 1 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.209422][ T341] usb 3-1: config 1 interface 0 has no altsetting 0 [ 53.218073][ T341] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a51, bcdDevice= 0.40 [ 53.227671][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.235912][ T341] usb 3-1: Product: 健掶퇅⠢硚깚咧䦶આ㕇灁쏑ᅄ踑ᱜ‰ឭ晓ﺪ玙དⳞ仺癳좵꾆䟱淒㳇踒棄틵㳰⚐끏챙Ҙᚸ﵅뚂ᙴᓡ줇鲁誘舗㘔랰▒秤܎﹕겅뷓熟煃臞ᘺݱퟲꑭࢶၟ喰좷㔈祻崯혛∷䭪涫꾁ᬫ㴊鿨鮹屾퓆竳샜皙ᚰ㸫橳刞䂻騌虿얽宣஗床췩瀙稼坡⤻缄ᦩ憪犩谤✷浱졦悴≞ [ 53.271164][ T341] usb 3-1: Manufacturer: 䗼淪袑ޚ⏉벫杼張⏫鯤ﰮ紿ᛯ㙑ӳ氫ƅ侙悱肄곧륫䉏ꁊ졤⡓渇ࡒ枊떅쇿늓嫤桪濾碼舻拊┮雕Ạ弅놈ᆅ憡ၺ籄탢ꎰ蜾뗱껠쳠햗㋵㾯ᚬ뛵穪ᐊ등爂琻 [ 53.302799][ T341] usb 3-1: SerialNumber: 〉 [ 53.614848][ T917] loop3: detected capacity change from 0 to 128 [ 53.692825][ T917] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.701613][ T917] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.721839][ T899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.733516][ T917] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.3.136: bad entry in directory: inode out of bounds - offset=0, inode=134217730, rec_len=12, size=1024 fake=1 [ 53.742969][ T899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.765058][ T287] EXT4-fs (loop3): unmounting filesystem. [ 53.812850][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 53.886028][ T345] usb 5-1: Cannot set autoneg [ 53.893958][ T345] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -32 [ 53.914714][ T341] usbhid 3-1:1.0: can't add hid device: -71 [ 53.920702][ T341] usbhid: probe of 3-1:1.0 failed with error -71 [ 53.927554][ T28] audit: type=1400 audit(1764570356.109:221): avc: denied { ioctl } for pid=924 comm="syz.3.138" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17946 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.943901][ T341] usb 3-1: USB disconnect, device number 4 [ 53.982802][ T28] audit: type=1400 audit(1764570356.139:222): avc: denied { create } for pid=924 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 54.111664][ T897] loop4: detected capacity change from 0 to 40427 [ 54.139633][ T897] F2FS-fs (loop4): invalid crc value [ 54.171427][ T897] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.171608][ T937] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 54.213699][ T897] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 54.248188][ T345] usb 5-1: USB disconnect, device number 6 [ 54.277785][ T928] loop3: detected capacity change from 0 to 40427 [ 54.286261][ T928] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 54.293940][ T928] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 54.302217][ T928] F2FS-fs (loop3): Encrypt feature is off [ 54.484017][ T943] loop1: detected capacity change from 0 to 32768 [ 54.587773][ T28] audit: type=1400 audit(1764570356.759:223): avc: denied { mounton } for pid=935 comm="syz.1.141" path="/proc/92/task" dev="proc" ino=17975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 54.621288][ T943] loop1: p1 p3 < > [ 54.671056][ T953] loop1: detected capacity change from 0 to 256 [ 54.733016][ T361] udevd[361]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 54.744289][ T334] udevd[334]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 54.782409][ T949] loop3: detected capacity change from 0 to 16 [ 54.799968][ T949] erofs: (device loop3): mounted with root inode @ nid 36. [ 54.822871][ T345] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 54.989444][ T949] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 55.131771][ T949] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 55.154308][ T957] loop2: detected capacity change from 0 to 512 [ 55.237071][ T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 55.264490][ T957] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.291293][ T957] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.302933][ T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.319040][ T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.335095][ T345] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.362500][ T345] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.373740][ T957] binder: 950:957 ioctl c0306201 200000000080 returned -14 [ 55.401573][ T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.434566][ T345] usb 1-1: config 0 descriptor?? [ 55.540547][ T972] loop4: detected capacity change from 0 to 128 [ 55.592908][ T972] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.611810][ T972] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.623965][ T972] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.148: bad entry in directory: inode out of bounds - offset=0, inode=134217730, rec_len=12, size=1024 fake=1 [ 55.712088][ T284] EXT4-fs (loop4): unmounting filesystem. [ 55.764906][ T981] netlink: 276 bytes leftover after parsing attributes in process `syz.4.150'. [ 55.862281][ T345] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 55.865944][ T983] netlink: 44 bytes leftover after parsing attributes in process `syz.1.151'. [ 55.884081][ T345] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 55.889241][ T983] netlink: 51 bytes leftover after parsing attributes in process `syz.1.151'. [ 55.952516][ T983] netlink: 'syz.1.151': attribute type 4 has an invalid length. [ 56.026135][ T990] netlink: 'syz.4.152': attribute type 29 has an invalid length. [ 56.270305][ T995] loop4: detected capacity change from 0 to 32768 [ 56.323726][ T995] loop4: p1 p2 p3 < p5 p6 p7 > [ 56.336249][ T995] loop4: p2 size 16775168 extends beyond EOD, truncated [ 56.350686][ T995] loop4: p5 start 4294970168 is beyond EOD, truncated [ 56.456553][ T285] EXT4-fs (loop2): unmounting filesystem. [ 56.473753][ T345] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 56.507630][ T362] udevd[362]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 56.508490][ T340] udevd[340]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 56.517726][ T339] udevd[339]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 56.528906][ T361] udevd[361]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 56.546269][ T334] udevd[334]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 56.560124][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 56.560154][ T28] audit: type=1400 audit(1764570358.729:227): avc: denied { create } for pid=1005 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.693889][ T345] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 56.714495][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.731734][ T345] usb 4-1: config 0 descriptor?? [ 56.742275][ T294] usb 1-1: USB disconnect, device number 7 [ 57.172808][ T6] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 57.223028][ T1017] loop0: detected capacity change from 0 to 128 [ 57.240213][ T1017] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 57.252404][ T1017] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.294398][ T1020] loop4: detected capacity change from 0 to 128 [ 57.312389][ T1020] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 57.322289][ T1020] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.339809][ T1020] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.161: bad entry in directory: inode out of bounds - offset=0, inode=134217730, rec_len=12, size=1024 fake=1 [ 57.344994][ T283] EXT4-fs (loop0): unmounting filesystem. [ 57.365359][ T6] usb 2-1: device descriptor read/64, error -71 [ 57.381932][ T284] EXT4-fs (loop4): unmounting filesystem. [ 57.397608][ T28] audit: type=1400 audit(1764570359.569:228): avc: denied { bind } for pid=1024 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.419906][ T1023] loop0: detected capacity change from 0 to 256 [ 57.421960][ T28] audit: type=1400 audit(1764570359.599:229): avc: denied { name_bind } for pid=1024 comm="syz.4.163" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 57.448221][ T28] audit: type=1400 audit(1764570359.599:230): avc: denied { node_bind } for pid=1024 comm="syz.4.163" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 57.515804][ T1034] binder: 1033:1034 ioctl c0306201 2000000003c0 returned -22 [ 57.523139][ T28] audit: type=1400 audit(1764570359.599:231): avc: denied { block_suspend } for pid=1024 comm="syz.4.163" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.544701][ T28] audit: type=1400 audit(1764570359.689:232): avc: denied { write } for pid=1033 comm="syz.2.165" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.568687][ T28] audit: type=1400 audit(1764570359.739:233): avc: denied { read write } for pid=1022 comm="syz.0.162" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.594883][ T28] audit: type=1400 audit(1764570359.739:234): avc: denied { open } for pid=1022 comm="syz.0.162" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.620641][ T28] audit: type=1400 audit(1764570359.739:235): avc: denied { ioctl } for pid=1022 comm="syz.0.162" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.653221][ T6] usb 2-1: device descriptor read/64, error -71 [ 57.680721][ T1045] loop2: detected capacity change from 0 to 512 [ 57.682863][ T28] audit: type=1400 audit(1764570359.849:236): avc: denied { name_bind } for pid=1038 comm="syz.2.168" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 57.709453][ T1045] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 57.719945][ T1045] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 57.729730][ T1045] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 57.751691][ T1045] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 57.759729][ T1045] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01d, mo2=0100] [ 57.768063][ T1045] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.775060][ T1045] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.168: bg 0: block 34: padding at end of block bitmap is not set [ 57.831901][ T345] usb 4-1: Cannot set autoneg [ 57.836773][ T345] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 57.851227][ T1045] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.168: Failed to acquire dquot type 1 [ 57.871577][ T1045] EXT4-fs (loop2): 1 truncate cleaned up [ 57.877524][ T1045] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.886928][ T1045] EXT4-fs (loop2): unmounting filesystem. [ 57.932827][ T6] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 57.973528][ T1052] loop0: detected capacity change from 0 to 40427 [ 57.988570][ T1052] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 58.007122][ T1052] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 58.015670][ T1052] F2FS-fs (loop0): Encrypt feature is off [ 58.031549][ T1001] loop3: detected capacity change from 0 to 40427 [ 58.057824][ T1001] F2FS-fs (loop3): invalid crc value [ 58.084951][ T1001] F2FS-fs (loop3): Found nat_bits in checkpoint [ 58.122884][ T6] usb 2-1: device descriptor read/64, error -71 [ 58.163393][ T1001] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 58.188597][ T345] usb 4-1: USB disconnect, device number 8 [ 58.348228][ T1065] loop0: detected capacity change from 0 to 16 [ 58.364253][ T1065] erofs: (device loop0): mounted with root inode @ nid 36. [ 58.372332][ T1065] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 58.381508][ T1065] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 58.391022][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 58.392935][ T6] usb 2-1: device descriptor read/64, error -71 [ 58.532878][ T6] usb usb2-port1: attempt power cycle [ 58.565782][ T1072] loop2: detected capacity change from 0 to 128 [ 58.577160][ T1072] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.586210][ T1072] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.630270][ T285] EXT4-fs (loop2): unmounting filesystem. [ 58.660300][ T1076] loop2: detected capacity change from 0 to 128 [ 58.676158][ T1076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.684925][ T1076] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.700328][ T1076] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.2.174: bad entry in directory: inode out of bounds - offset=0, inode=134217730, rec_len=12, size=1024 fake=1 [ 58.762431][ T285] EXT4-fs (loop2): unmounting filesystem. [ 58.942846][ T6] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 58.993844][ T6] usb 2-1: device descriptor read/8, error -71 [ 58.999195][ T1094] loop4: detected capacity change from 0 to 128 [ 59.143815][ T6] usb 2-1: device descriptor read/8, error -71 [ 59.206323][ T1098] loop4: detected capacity change from 0 to 512 [ 59.228698][ T1098] EXT4-fs: Ignoring removed oldalloc option [ 59.246553][ T1098] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.259797][ T1098] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.286403][ T1098] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2819: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 59.308541][ T1098] EXT4-fs (loop4): 1 truncate cleaned up [ 59.314501][ T1098] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.413046][ T6] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 59.453881][ T6] usb 2-1: device descriptor read/8, error -71 [ 59.463416][ T284] EXT4-fs (loop4): unmounting filesystem. [ 59.509343][ T1113] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 59.604016][ T6] usb 2-1: device descriptor read/8, error -71 [ 59.825948][ T1113] loop4: detected capacity change from 0 to 40427 [ 59.843897][ T1113] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 59.852010][ T1113] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 59.872082][ T1113] F2FS-fs (loop4): invalid crc value [ 59.885492][ T1113] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.943004][ T6] usb usb2-port1: unable to enumerate USB device [ 59.947522][ T1121] loop1: detected capacity change from 0 to 2048 [ 59.991057][ T1113] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 59.998263][ T1113] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 60.004211][ T1121] loop1: p1 < > p3 [ 60.020351][ T1121] loop1: p3 size 54016 extends beyond EOD, truncated [ 60.083697][ T286] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 60.083907][ T361] I/O error, dev loop1, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 60.127544][ T361] I/O error, dev loop1, sector 136 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.139689][ T1126] SELinux: Context : is not valid (left unmapped). [ 60.148183][ T361] Buffer I/O error on dev loop1p3, logical block 1, async page read [ 60.193382][ T334] udevd[334]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 60.197169][ T1129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.187'. [ 60.205631][ T361] udevd[361]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 60.242790][ T341] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 60.504759][ T341] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 60.521307][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.542352][ T341] usb 3-1: config 0 descriptor?? [ 60.553940][ T1148] xt_hashlimit: size too large, truncated to 1048576 [ 60.607201][ T1149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=1149 comm=syz.0.193 [ 60.676222][ T1140] loop4: detected capacity change from 0 to 40427 [ 60.692175][ T1140] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 60.703124][ T1150] overlayfs: upper fs does not support tmpfile. [ 60.711770][ T1140] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 60.720268][ T1140] F2FS-fs (loop4): Encrypt feature is off [ 60.772811][ T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 60.942064][ T1152] loop4: detected capacity change from 0 to 16 [ 60.962692][ T1152] erofs: (device loop4): mounted with root inode @ nid 36. [ 60.962802][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 60.975380][ T1152] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 60.984737][ T1152] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 60.989449][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.005375][ T46] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 61.016130][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.025930][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 61.038949][ T6] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 61.093730][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.106299][ T6] usb 2-1: config 0 descriptor?? [ 61.335489][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 61.343299][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 61.363547][ T6] usb 2-1: USB disconnect, device number 9 [ 61.556582][ T341] usb 3-1: Cannot set autoneg [ 61.561390][ T341] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -32 [ 61.735862][ T1123] loop2: detected capacity change from 0 to 40427 [ 61.760278][ T1123] F2FS-fs (loop2): invalid crc value [ 61.779505][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 61.779520][ T28] audit: type=1326 audit(1764570363.949:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099b58f749 code=0x7ffc0000 [ 61.814586][ T1123] F2FS-fs (loop2): Found nat_bits in checkpoint [ 61.822923][ T6] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 61.866205][ T28] audit: type=1326 audit(1764570363.989:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f099b58f749 code=0x7ffc0000 [ 61.896913][ T1123] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 61.897712][ T28] audit: type=1326 audit(1764570363.989:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099b58f749 code=0x7ffc0000 [ 61.952502][ T28] audit: type=1326 audit(1764570363.989:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099b58f749 code=0x7ffc0000 [ 61.964377][ T371] usb 3-1: USB disconnect, device number 5 [ 62.012862][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 62.019755][ T28] audit: type=1326 audit(1764570363.989:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099b58f749 code=0x7ffc0000 [ 62.023588][ T6] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 62.067789][ T1189] loop3: detected capacity change from 0 to 2048 [ 62.077758][ T1174] loop0: detected capacity change from 0 to 8192 [ 62.084277][ T6] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 62.102871][ T6] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 62.116853][ T1174] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffff" or missing value [ 62.126292][ T28] audit: type=1326 audit(1764570363.989:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f099b58f749 code=0x7ffc0000 [ 62.146715][ T1189] ext4: Unknown parameter 'mask' [ 62.151596][ T6] usb 2-1: config 250 has no interface number 0 [ 62.176072][ T6] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 62.203599][ T1194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'. [ 62.208267][ T6] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 62.242523][ T1194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.203'. [ 62.280759][ T1195] overlayfs: overlapping lowerdir path [ 62.294909][ T6] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 62.912145][ T6] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 62.936973][ T28] audit: type=1326 audit(1764570363.989:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099b58f749 code=0x7ffc0000 [ 62.944519][ T6] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 62.960304][ T28] audit: type=1326 audit(1764570363.989:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f099b591667 code=0x7ffc0000 [ 63.000630][ T28] audit: type=1326 audit(1764570363.989:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f099b5915dc code=0x7ffc0000 [ 63.020473][ T6] usb 2-1: config 250 interface 228 has no altsetting 0 [ 63.032163][ T1198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 63.032178][ T28] audit: type=1326 audit(1764570363.989:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f099b591514 code=0x7ffc0000 [ 63.065259][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 63.075306][ T6] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 63.083681][ T6] usb 2-1: Product: syz [ 63.088071][ T6] usb 2-1: SerialNumber: syz [ 63.099340][ T6] hub 2-1:250.228: bad descriptor, ignoring hub [ 63.118913][ T6] hub: probe of 2-1:250.228 failed with error -5 [ 63.300147][ T1171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.309653][ T6] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 63.325528][ T1171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.380964][ T1171] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 63.483117][ T1201] loop0: detected capacity change from 0 to 40427 [ 63.503236][ T1201] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 63.526656][ T1201] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.542507][ T1201] F2FS-fs (loop0): invalid crc value [ 63.578810][ T1201] F2FS-fs (loop0): Mismatch valid blocks 0 vs. 2 [ 63.586788][ T1201] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 63.784407][ T1201] loop0: detected capacity change from 0 to 128 [ 64.184677][ T1225] loop3: detected capacity change from 0 to 128 [ 64.201574][ T1225] FAT-fs (loop3): Unrecognized mount option "0000000000000000000000000000000000000000000T0Dވ֔WЯdD b1K0xffffffffffffffff" or missing value [ 64.224568][ T1225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 64.264488][ T1223] loop0: detected capacity change from 0 to 40427 [ 64.279598][ T1223] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 64.294903][ T1223] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 64.303884][ T1223] F2FS-fs (loop0): Encrypt feature is off [ 64.500383][ T1241] loop1: detected capacity change from 0 to 512 [ 64.526314][ T1241] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 64.535953][ T1241] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 64.542819][ T345] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 64.551700][ T1241] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #13: comm syz.1.214: iget: bad i_size value: 12154757448730 [ 64.569152][ T1244] loop0: detected capacity change from 0 to 16 [ 64.576203][ T1241] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.214: couldn't read orphan inode 13 (err -117) [ 64.588533][ T1244] erofs: (device loop0): mounted with root inode @ nid 36. [ 64.593261][ T6] usb 2-1: USB disconnect, device number 10 [ 64.602936][ T1241] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.619846][ T1244] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 64.621693][ T6] usblp0: removed [ 64.628907][ T1244] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 64.644335][ T46] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 64.732794][ T756] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 64.753841][ T345] usb 4-1: config 1 has an invalid descriptor of length 40, skipping remainder of the config [ 64.768318][ T345] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.786015][ T345] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.796980][ T345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.814778][ T345] usb 4-1: Product: syz [ 64.819138][ T345] usb 4-1: Manufacturer: syz [ 64.823994][ T345] usb 4-1: SerialNumber: syz [ 64.913983][ T756] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.940575][ T756] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.952805][ T756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.960814][ T756] usb 3-1: Product: syz [ 64.965117][ T756] usb 3-1: Manufacturer: syz [ 64.969740][ T756] usb 3-1: SerialNumber: syz [ 64.997297][ T286] EXT4-fs (loop1): unmounting filesystem. [ 65.038138][ T345] usb 4-1: 0:2 : does not exist [ 65.057452][ T345] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 65.084486][ T345] usb 4-1: USB disconnect, device number 9 [ 65.118033][ T1250] syz.1.215[1250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.118109][ T1250] syz.1.215[1250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.225175][ T1249] netlink: 60 bytes leftover after parsing attributes in process `syz.1.215'. [ 65.299946][ T1250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.215'. [ 65.527710][ T1268] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 65.534810][ T1268] tmpfs: Unknown parameter 'grpquota' [ 65.803668][ T60] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 65.883001][ T380] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 65.992986][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 65.999600][ T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.009805][ T60] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 66.019543][ T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.029723][ T60] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 66.038883][ T756] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 66.047567][ T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.057846][ T756] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 66.068792][ T60] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 66.078949][ T380] usb 5-1: config 0 has an invalid interface number: 135 but max is 0 [ 66.091806][ T380] usb 5-1: config 0 has no interface number 0 [ 66.098794][ T380] usb 5-1: config 0 interface 135 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 66.110375][ T380] usb 5-1: New USB device found, idVendor=0079, idProduct=be44, bcdDevice=39.b9 [ 66.119560][ T380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.127704][ T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.138369][ T60] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 66.147710][ T380] usb 5-1: config 0 descriptor?? [ 66.157166][ T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.167446][ T60] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 66.242719][ T1237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.213'. [ 66.254605][ T1237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1237 comm=syz.2.213 [ 66.269315][ T371] usb 3-1: USB disconnect, device number 6 [ 66.276534][ T371] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 66.498433][ T1311] fuse: Bad value for 'fd' [ 66.505346][ T1311] loop0: detected capacity change from 0 to 256 [ 66.515711][ T1311] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 66.612461][ T1313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 66.621462][ T1313] netlink: 'syz.3.224': attribute type 2 has an invalid length. [ 66.787407][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 66.787428][ T28] audit: type=1400 audit(1764570368.769:324): avc: denied { mounton } for pid=1308 comm="syz.3.224" path="/46/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 66.906936][ T1313] loop3: detected capacity change from 0 to 40427 [ 66.953535][ T361] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 67.029782][ T28] audit: type=1400 audit(1764570369.199:325): avc: denied { create } for pid=1317 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.122840][ T371] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 67.167818][ T380] usb 5-1: USB disconnect, device number 7 [ 67.302820][ T371] usb 1-1: Using ep0 maxpacket: 16 [ 67.309193][ T371] usb 1-1: config index 0 descriptor too short (expected 46642, got 72) [ 67.330404][ T371] usb 1-1: config 173 has too many interfaces: 131, using maximum allowed: 32 [ 67.348221][ T371] usb 1-1: config 173 contains an unexpected descriptor of type 0x1, skipping [ 67.357530][ T371] usb 1-1: config 173 has an invalid descriptor of length 0, skipping remainder of the config [ 67.370175][ T371] usb 1-1: config 173 has 0 interfaces, different from the descriptor's value: 131 [ 67.391200][ T371] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 67.406298][ T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.419886][ T371] usb 1-1: Product: syz [ 67.427401][ T371] usb 1-1: Manufacturer: syz [ 67.434621][ T371] usb 1-1: SerialNumber: syz [ 67.480757][ T1329] loop4: detected capacity change from 0 to 40427 [ 67.503603][ T1329] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 67.511138][ T1329] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 67.527695][ T1329] F2FS-fs (loop4): Encrypt feature is off [ 67.528612][ T1333] loop2: detected capacity change from 0 to 128 [ 67.563404][ T1333] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.573030][ T1333] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.620138][ T1333] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.2.232: bad entry in directory: inode out of bounds - offset=0, inode=134217730, rec_len=12, size=1024 fake=1 [ 67.642812][ T294] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 67.650390][ T1316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.664628][ T1316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.674308][ T285] EXT4-fs (loop2): unmounting filesystem. [ 67.674515][ T1316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.691746][ T1316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.703577][ T1316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.713732][ T1316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.723500][ T1316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.733429][ T1316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.742550][ T1316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.751213][ T1316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.765925][ T371] usb 1-1: USB disconnect, device number 8 [ 67.833848][ T294] usb 4-1: config 1 interface 0 has no altsetting 0 [ 67.844511][ T294] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 67.858686][ T1340] loop4: detected capacity change from 0 to 16 [ 67.862793][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.875993][ T294] usb 4-1: Product: syz [ 67.876290][ T1340] erofs: (device loop4): mounted with root inode @ nid 36. [ 67.880253][ T294] usb 4-1: Manufacturer: syz [ 67.900337][ T294] usb 4-1: SerialNumber: syz [ 67.919491][ T1340] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 67.928843][ T1340] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 67.938280][ T46] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 68.042871][ T60] usb 2-1: string descriptor 0 read error: -71 [ 68.049269][ T60] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=e2.32 [ 68.069669][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.084966][ T60] usb 2-1: rejected 5 configurations due to insufficient available bus power [ 68.105796][ T60] usb 2-1: no configuration chosen from 5 choices [ 68.113462][ T1342] loop1: detected capacity change from 0 to 128 [ 68.123325][ T60] usb 2-1: USB disconnect, device number 11 [ 68.162454][ T28] audit: type=1400 audit(1764570370.329:326): avc: denied { bind } for pid=1341 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.183414][ T28] audit: type=1400 audit(1764570370.359:327): avc: denied { write } for pid=1341 comm="syz.1.234" path="socket:[20496]" dev="sockfs" ino=20496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.311669][ T28] audit: type=1400 audit(1764570370.479:328): avc: denied { map } for pid=1330 comm="syz.3.231" path="socket:[19560]" dev="sockfs" ino=19560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.336540][ T294] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 68.369121][ T294] usb 4-1: USB disconnect, device number 10 [ 68.385023][ T1342] syz.1.234: attempt to access beyond end of device [ 68.385023][ T1342] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 68.401416][ T294] usblp0: removed [ 68.402948][ T1342] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 68.867099][ T28] audit: type=1400 audit(1764570371.039:329): avc: denied { listen } for pid=1347 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.004066][ T6] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 69.041853][ T1366] loop4: detected capacity change from 0 to 256 [ 69.423315][ T1369] netlink: 'syz.3.240': attribute type 16 has an invalid length. [ 69.570072][ T1369] netlink: 15942 bytes leftover after parsing attributes in process `syz.3.240'. [ 69.766668][ T1368] loop3: detected capacity change from 0 to 256 [ 69.800943][ T1368] exfat: Unknown parameter 'sr‘J|' [ 69.839267][ T28] audit: type=1400 audit(1764570372.009:330): avc: denied { execute_no_trans } for pid=1372 comm="syz.0.241" path="/46/file0" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.882255][ T1373] device sit0 entered promiscuous mode [ 69.909107][ T1376] loop2: detected capacity change from 0 to 128 [ 69.924821][ T1373] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 69.959483][ T1376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.963134][ T1373] netlink: 1 bytes leftover after parsing attributes in process `syz.0.241'. [ 69.975573][ T1376] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.998037][ T1376] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.2.242: bad entry in directory: inode out of bounds - offset=0, inode=134217730, rec_len=12, size=1024 fake=1 [ 70.000517][ T28] audit: type=1326 audit(1764570372.169:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1378 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099b58f749 code=0x7ffc0000 [ 70.053393][ T28] audit: type=1326 audit(1764570372.169:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1378 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099b58f749 code=0x7ffc0000 [ 70.083750][ T285] EXT4-fs (loop2): unmounting filesystem. [ 70.090008][ T28] audit: type=1326 audit(1764570372.209:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1378 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f099b58f749 code=0x7ffc0000 [ 70.136118][ T1383] loop2: detected capacity change from 0 to 512 [ 70.143711][ T1383] journal_path: Lookup failure for './file0' [ 70.150075][ T6] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.158642][ T1383] EXT4-fs: error: could not find journal device path [ 70.158904][ T6] usb 2-1: config 79 has too many interfaces: 199, using maximum allowed: 32 [ 70.779340][ T6] usb 2-1: config 79 has an invalid descriptor of length 0, skipping remainder of the config [ 70.789862][ T6] usb 2-1: config 79 has 0 interfaces, different from the descriptor's value: 199 [ 70.811741][ T1386] loop2: detected capacity change from 0 to 128 [ 70.812984][ T6] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 70.827573][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.836828][ T1386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.843070][ T371] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 70.849847][ T1386] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.886060][ T341] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 70.913499][ T285] EXT4-fs (loop2): unmounting filesystem. [ 71.033923][ T371] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 71.043476][ T1352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.051986][ T1352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.060151][ T371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.114409][ T341] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 71.253818][ T1393] binder: 1388:1393 ioctl c0306201 200000000040 returned -22 [ 71.261857][ T1393] binder: 1388:1393 ioctl c0306201 200000000640 returned -22 [ 71.274633][ T1352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.296474][ T1352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.311260][ T341] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.348087][ T1352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.375867][ T341] usb 4-1: config 0 interface 0 has no altsetting 0 [ 71.379451][ T371] usb 5-1: config 0 descriptor?? [ 71.393367][ T1352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.401385][ T341] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 71.411537][ T1352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.420106][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.428867][ T1352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.438990][ T341] usb 4-1: config 0 descriptor?? [ 71.445305][ T1352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.455834][ T1352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.496545][ T1392] loop0: detected capacity change from 0 to 40427 [ 71.507509][ T1392] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 71.515557][ T1392] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 71.524960][ T1392] F2FS-fs (loop0): invalid crc value [ 71.532170][ T1392] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.571515][ T1392] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 71.578661][ T1392] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 71.663308][ T341] usbhid 4-1:0.0: can't add hid device: -71 [ 71.669288][ T341] usbhid: probe of 4-1:0.0 failed with error -71 [ 71.676630][ T341] usb 4-1: USB disconnect, device number 11 [ 71.893743][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 71.893770][ T28] audit: type=1400 audit(1764570374.059:372): avc: denied { unlink } for pid=1391 comm="syz.0.248" name="#18" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.209381][ T1404] loop2: detected capacity change from 0 to 40427 [ 72.224093][ T1404] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 72.240821][ T1404] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 72.249448][ T1404] F2FS-fs (loop2): Encrypt feature is off [ 72.544420][ T1413] netlink: 32 bytes leftover after parsing attributes in process `syz.3.251'. [ 72.788884][ T28] audit: type=1400 audit(1764570374.699:373): avc: denied { map } for pid=1410 comm="syz.3.251" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.819019][ T28] audit: type=1400 audit(1764570374.699:374): avc: denied { read write } for pid=1410 comm="syz.3.251" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.845729][ T28] audit: type=1400 audit(1764570375.029:375): avc: denied { remove_name } for pid=283 comm="syz-executor" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.869965][ T28] audit: type=1400 audit(1764570375.029:376): avc: denied { rmdir } for pid=283 comm="syz-executor" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.892906][ T6] usb 2-1: string descriptor 0 read error: -71 [ 72.913550][ T6] usb 2-1: USB disconnect, device number 12 [ 73.038269][ T371] usb 5-1: Cannot set autoneg [ 73.043263][ T371] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -61 [ 73.107705][ T1421] loop2: detected capacity change from 0 to 16 [ 73.140253][ T1421] erofs: (device loop2): mounted with root inode @ nid 36. [ 73.163409][ T1421] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 73.172486][ T1421] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 73.409536][ T47] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 74.484244][ T1434] loop3: detected capacity change from 0 to 128 [ 74.675400][ T1436] loop1: detected capacity change from 0 to 256 [ 74.685765][ T28] audit: type=1326 audit(1764570376.759:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1430 comm="syz.1.256" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f191978f749 code=0x0 [ 74.841155][ T1434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.861399][ T1434] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.868712][ T1381] loop4: detected capacity change from 0 to 40427 [ 74.892951][ T1381] F2FS-fs (loop4): invalid crc value [ 74.920163][ T1381] F2FS-fs (loop4): Found nat_bits in checkpoint [ 74.942822][ T1434] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 74.972052][ T1434] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 75.039228][ T60] usb 5-1: USB disconnect, device number 8 [ 75.081281][ T28] audit: type=1400 audit(1764570377.249:378): avc: denied { read } for pid=1444 comm="syz.0.258" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.109063][ T287] EXT4-fs (loop3): unmounting filesystem. [ 75.168716][ T28] audit: type=1400 audit(1764570377.339:379): avc: denied { write } for pid=1444 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.547534][ T28] audit: type=1400 audit(1764570377.499:380): avc: denied { create } for pid=1446 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.900587][ T28] audit: type=1400 audit(1764570377.499:381): avc: denied { connect } for pid=1446 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.107234][ T1455] fuse: Bad value for 'fd' [ 76.334410][ T1464] loop3: detected capacity change from 0 to 512 [ 76.355080][ T1460] loop0: detected capacity change from 0 to 512 [ 76.370433][ T1464] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.263: inode has both inline data and extents flags [ 76.383959][ T1464] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.263: couldn't read orphan inode 15 (err -117) [ 76.396064][ T1464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.414807][ T1464] overlayfs: workdir and upperdir must be separate subtrees [ 76.426889][ T1462] loop1: detected capacity change from 0 to 512 [ 76.527813][ T1460] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.261: invalid indirect mapped block 10 (level 1) [ 76.551373][ T1451] loop4: detected capacity change from 0 to 40427 [ 76.558707][ T1451] F2FS-fs (loop4): fault_injection options not supported [ 76.566595][ T1460] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.261: invalid indirect mapped block 8 (level 1) [ 76.580676][ T1451] F2FS-fs (loop4): invalid crc value [ 76.586373][ T1460] EXT4-fs (loop0): 1 truncate cleaned up [ 76.599433][ T1460] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.689966][ T1451] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.707364][ T1477] loop2: detected capacity change from 0 to 512 [ 76.778142][ T1451] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.830840][ T1481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.262'. [ 77.964478][ T287] EXT4-fs (loop3): unmounting filesystem. [ 77.970416][ T1477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.992940][ T1477] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.055576][ T283] EXT4-fs (loop0): unmounting filesystem. [ 78.061868][ T1451] syz.4.257: attempt to access beyond end of device [ 78.061868][ T1451] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 78.121514][ T1451] capability: warning: `syz.4.257' uses 32-bit capabilities (legacy support in use) [ 78.178502][ T284] syz-executor: attempt to access beyond end of device [ 78.178502][ T284] loop4: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 78.233934][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 78.233951][ T28] audit: type=1400 audit(1764570380.409:389): avc: denied { read } for pid=1483 comm="syz.3.266" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.289152][ T28] audit: type=1400 audit(1764570380.449:390): avc: denied { ioctl } for pid=1483 comm="syz.3.266" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.508368][ T1507] netlink: 44 bytes leftover after parsing attributes in process `syz.4.270'. [ 78.522940][ T1507] netlink: 51 bytes leftover after parsing attributes in process `syz.4.270'. [ 78.532805][ T1507] netlink: 'syz.4.270': attribute type 4 has an invalid length. [ 78.688362][ T28] audit: type=1400 audit(1764570380.819:391): avc: denied { nlmsg_write } for pid=1503 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.157346][ T285] EXT4-fs (loop2): unmounting filesystem. [ 79.225445][ T28] audit: type=1400 audit(1764570381.399:392): avc: denied { append } for pid=1519 comm="syz.3.273" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.251783][ T1522] loop2: detected capacity change from 0 to 128 [ 79.282902][ T1522] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.292557][ T1522] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.359157][ T1522] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.2.274: bad entry in directory: inode out of bounds - offset=0, inode=134217730, rec_len=12, size=1024 fake=1 [ 79.406107][ T285] EXT4-fs (loop2): unmounting filesystem. [ 79.522786][ T1530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.275'. [ 79.941681][ T1531] loop1: detected capacity change from 0 to 512 [ 79.955641][ T1531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.225881][ T1531] EXT4-fs: Mount option(s) incompatible with ext2 [ 80.278324][ T28] audit: type=1400 audit(1764570382.449:393): avc: denied { read } for pid=1519 comm="syz.3.273" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 80.303289][ T28] audit: type=1400 audit(1764570382.449:394): avc: denied { open } for pid=1519 comm="syz.3.273" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 80.614549][ T1541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.766211][ T28] audit: type=1400 audit(1764570382.709:395): avc: denied { mounton } for pid=1534 comm="syz.4.278" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.809471][ T28] audit: type=1400 audit(1764570382.839:396): avc: denied { write } for pid=1537 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.953723][ T1557] loop1: detected capacity change from 0 to 512 [ 80.973083][ T1557] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.983369][ T1557] EXT4-fs (loop1): Test dummy encryption mode enabled [ 80.991569][ T1557] EXT4-fs (loop1): orphan cleanup on readonly fs [ 80.998305][ T1557] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.284: inode #13: comm syz.1.284: iget: illegal inode # [ 81.012207][ T1557] EXT4-fs (loop1): Remounting filesystem read-only [ 81.019031][ T1557] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.284: couldn't read orphan inode 13 (err -117) [ 81.031296][ T1557] EXT4-fs (loop1): Remounting filesystem read-only [ 81.038066][ T1557] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.113142][ T286] EXT4-fs (loop1): unmounting filesystem. [ 81.159668][ T1565] loop0: detected capacity change from 0 to 512 [ 81.176511][ T1555] loop3: detected capacity change from 0 to 40427 [ 81.203794][ T1555] F2FS-fs (loop3): invalid crc value [ 81.257036][ T1555] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.311224][ T1565] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.322904][ T1565] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.358374][ T1555] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.432345][ T1565] binder: 1551:1565 ioctl c0306201 200000000080 returned -14 [ 82.300614][ T287] syz-executor: attempt to access beyond end of device [ 82.300614][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.670770][ T1599] loop4: detected capacity change from 0 to 40427 [ 82.691344][ T1599] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 82.702760][ T1599] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 82.721445][ T1599] F2FS-fs (loop4): invalid crc value [ 82.753393][ T28] audit: type=1400 audit(1764570384.929:397): avc: denied { write } for pid=1619 comm="syz.3.292" name="file2" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.776900][ T1599] F2FS-fs (loop4): Found nat_bits in checkpoint [ 82.778707][ T28] audit: type=1400 audit(1764570384.949:398): avc: denied { open } for pid=1619 comm="syz.3.292" path="/58/file2" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.815617][ T1625] loop3: detected capacity change from 0 to 128 [ 82.844623][ T1625] syz.3.298: attempt to access beyond end of device [ 82.844623][ T1625] loop3: rw=2049, sector=153, nr_sectors = 9 limit=128 [ 82.850419][ T1599] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 82.865678][ T1599] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 82.873321][ T1510] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 82.895618][ T1625] syz.3.298: attempt to access beyond end of device [ 82.895618][ T1625] loop3: rw=2049, sector=169, nr_sectors = 872 limit=128 [ 82.925209][ T1624] syz.3.298: attempt to access beyond end of device [ 82.925209][ T1624] loop3: rw=524288, sector=169, nr_sectors = 256 limit=128 [ 82.944903][ T1624] syz.3.298: attempt to access beyond end of device [ 82.944903][ T1624] loop3: rw=0, sector=169, nr_sectors = 8 limit=128 [ 82.958526][ T1624] syz.3.298: attempt to access beyond end of device [ 82.958526][ T1624] loop3: rw=0, sector=169, nr_sectors = 8 limit=128 [ 82.972118][ T1625] syz.3.298: attempt to access beyond end of device [ 82.972118][ T1625] loop3: rw=0, sector=169, nr_sectors = 8 limit=128 [ 82.985608][ T1625] syz.3.298: attempt to access beyond end of device [ 82.985608][ T1625] loop3: rw=0, sector=169, nr_sectors = 8 limit=128 [ 82.999533][ T1624] Buffer I/O error on dev loop3, logical block 169, async page read [ 83.007784][ T1624] Buffer I/O error on dev loop3, logical block 170, async page read [ 83.016028][ T1624] Buffer I/O error on dev loop3, logical block 171, async page read [ 83.024537][ T1624] Buffer I/O error on dev loop3, logical block 172, async page read [ 83.032608][ T1624] Buffer I/O error on dev loop3, logical block 173, async page read [ 83.053736][ T1624] Buffer I/O error on dev loop3, logical block 174, async page read [ 83.061795][ T1624] Buffer I/O error on dev loop3, logical block 175, async page read [ 83.070271][ T1624] bio_check_eod: 9 callbacks suppressed [ 83.070286][ T1624] syz.3.298: attempt to access beyond end of device [ 83.070286][ T1624] loop3: rw=0, sector=176, nr_sectors = 1 limit=128 [ 83.070667][ T283] EXT4-fs (loop0): unmounting filesystem. [ 83.076110][ T1624] Buffer I/O error on dev loop3, logical block 176, async page read [ 83.095374][ T1510] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.105923][ T1624] syz.3.298: attempt to access beyond end of device [ 83.105923][ T1624] loop3: rw=0, sector=169, nr_sectors = 1 limit=128 [ 83.123911][ T1624] Buffer I/O error on dev loop3, logical block 169, async page read [ 83.129161][ T1510] usb 3-1: not running at top speed; connect to a high speed hub [ 83.135428][ T1624] syz.3.298: attempt to access beyond end of device [ 83.135428][ T1624] loop3: rw=0, sector=170, nr_sectors = 1 limit=128 [ 83.154121][ T1510] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.168059][ T1510] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.177609][ T1624] Buffer I/O error on dev loop3, logical block 170, async page read [ 83.186149][ T1624] syz.3.298: attempt to access beyond end of device [ 83.186149][ T1624] loop3: rw=0, sector=171, nr_sectors = 1 limit=128 [ 83.203688][ T1510] usb 3-1: string descriptor 0 read error: -22 [ 83.245257][ T1510] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.254456][ T1624] syz.3.298: attempt to access beyond end of device [ 83.254456][ T1624] loop3: rw=0, sector=172, nr_sectors = 1 limit=128 [ 83.254491][ T1624] syz.3.298: attempt to access beyond end of device [ 83.254491][ T1624] loop3: rw=0, sector=173, nr_sectors = 1 limit=128 [ 83.254519][ T1624] syz.3.298: attempt to access beyond end of device [ 83.254519][ T1624] loop3: rw=0, sector=174, nr_sectors = 1 limit=128 [ 83.254546][ T1624] syz.3.298: attempt to access beyond end of device [ 83.254546][ T1624] loop3: rw=0, sector=175, nr_sectors = 1 limit=128 [ 83.254573][ T1624] syz.3.298: attempt to access beyond end of device [ 83.254573][ T1624] loop3: rw=0, sector=176, nr_sectors = 1 limit=128 [ 83.254614][ T1624] syz.3.298: attempt to access beyond end of device [ 83.254614][ T1624] loop3: rw=0, sector=169, nr_sectors = 1 limit=128 [ 83.335388][ T1510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.351192][ T1510] usb 3-1: 0:2 : does not exist [ 83.359275][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 83.359290][ T28] audit: type=1400 audit(1764570385.529:400): avc: denied { connect } for pid=1640 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.387579][ T28] audit: type=1400 audit(1764570385.529:401): avc: denied { write } for pid=1640 comm="syz.0.301" path="socket:[21200]" dev="sockfs" ino=21200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.421101][ T28] audit: type=1400 audit(1764570385.589:402): avc: denied { mount } for pid=1652 comm="syz.3.304" name="/" dev="configfs" ino=14616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 83.444147][ T28] audit: type=1400 audit(1764570385.589:403): avc: denied { search } for pid=1652 comm="syz.3.304" name="/" dev="configfs" ino=14616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.532961][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 88.066424][ T1675] loop2: detected capacity change from 0 to 128 [ 88.127254][ T1675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.139432][ T1675] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.173935][ T1679] loop3: detected capacity change from 0 to 128 [ 88.196564][ T1679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.210001][ T1679] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.267703][ T285] EXT4-fs (loop2): unmounting filesystem. [ 88.312799][ T397] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 88.339048][ T287] EXT4-fs (loop3): unmounting filesystem. [ 88.429164][ T1510] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 88.452657][ T1510] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 88.472325][ T1685] loop0: detected capacity change from 0 to 1024 [ 88.478254][ T1510] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 88.478990][ T397] usb 5-1: device descriptor read/64, error -71 [ 88.497176][ T1510] usb 3-1: USB disconnect, device number 7 [ 88.553015][ T1685] ext4: Unknown parameter 'hash' [ 88.561920][ T1693] loop3: detected capacity change from 0 to 128 [ 88.591190][ T1689] loop2: detected capacity change from 0 to 512 [ 88.659273][ T28] audit: type=1400 audit(1764570390.829:404): avc: denied { write } for pid=1684 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.691707][ T28] audit: type=1400 audit(1764570390.859:405): avc: denied { read } for pid=1684 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.712061][ T1689] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 88.732571][ T1685] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 88.754515][ T1689] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.778287][ T28] audit: type=1400 audit(1764570390.899:406): avc: denied { map } for pid=1684 comm="syz.0.312" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 88.785584][ T334] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.846740][ T1708] loop0: detected capacity change from 0 to 1024 [ 88.852253][ T1689] binder: 1681:1689 ioctl c0306201 200000000080 returned -14 [ 88.893631][ T1708] EXT4-fs: Ignoring removed orlov option [ 88.960973][ T1708] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 88.978001][ T1721] loop3: detected capacity change from 0 to 512 [ 89.003927][ T1721] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.319: inode has both inline data and extents flags [ 89.018373][ T1721] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.319: couldn't read orphan inode 15 (err -117) [ 89.030559][ T1721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.332357][ T28] audit: type=1326 audit(1764570391.399:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1720 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e698f749 code=0x7ffc0000 [ 89.441934][ T283] EXT4-fs (loop0): unmounting filesystem. [ 89.447804][ T28] audit: type=1326 audit(1764570391.399:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1720 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e698f749 code=0x7ffc0000 [ 89.481674][ T28] audit: type=1326 audit(1764570391.399:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1720 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03e698f749 code=0x7ffc0000 [ 89.505072][ T397] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 89.505386][ T28] audit: type=1326 audit(1764570391.399:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1720 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e698f749 code=0x7ffc0000 [ 89.536413][ T28] audit: type=1326 audit(1764570391.399:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1720 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e698f749 code=0x7ffc0000 [ 89.560675][ T28] audit: type=1326 audit(1764570391.399:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1720 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03e698f749 code=0x7ffc0000 [ 89.584540][ T28] audit: type=1326 audit(1764570391.399:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1720 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e698f749 code=0x7ffc0000 [ 89.677889][ T1727] loop1: detected capacity change from 0 to 16 [ 89.684591][ T1727] erofs: Unknown parameter 'GPL' [ 89.690130][ T1727] overlayfs: unrecognized mount option "audit" or missing value [ 89.712774][ T397] usb 5-1: Invalid ep0 maxpacket: 64 [ 89.718240][ T397] usb usb5-port1: attempt power cycle [ 89.851878][ T287] EXT4-fs (loop3): unmounting filesystem. [ 89.883450][ T1510] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 89.979549][ T285] EXT4-fs (loop2): unmounting filesystem. [ 89.996347][ T1740] loop2: detected capacity change from 0 to 512 [ 90.003876][ T1740] EXT4-fs: Ignoring removed i_version option [ 90.016323][ T1740] EXT4-fs (loop2): 1 truncate cleaned up [ 90.022109][ T1740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.038302][ T285] EXT4-fs (loop2): unmounting filesystem. [ 90.058190][ T1746] netlink: 96 bytes leftover after parsing attributes in process `syz.2.326'. [ 90.078711][ T1748] xt_TCPMSS: Only works on TCP SYN packets [ 90.089078][ T1510] usb 1-1: config index 0 descriptor too short (expected 30046, got 82) [ 90.095625][ T1748] loop2: detected capacity change from 0 to 16 [ 90.103912][ T1510] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 90.111275][ T1748] erofs: (device loop2): mounted with root inode @ nid 36. [ 90.112013][ T1510] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.130753][ T1748] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 90.132565][ T1510] usb 1-1: config 0 has no interface number 0 [ 90.142173][ T397] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 90.153627][ T1748] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 90.155058][ T1510] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 90.165259][ T1748] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 90.172260][ T1510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.181985][ T1748] bio_check_eod: 40 callbacks suppressed [ 90.182003][ T1748] syz.2.327: attempt to access beyond end of device [ 90.182003][ T1748] loop2: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 90.189058][ T1750] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 90.194676][ T1748] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 90.215745][ T1510] usb 1-1: Product: syz [ 90.220172][ T397] usb 5-1: Invalid ep0 maxpacket: 64 [ 90.225151][ T1510] usb 1-1: Manufacturer: syz [ 90.240140][ T1748] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 90.244018][ T1510] usb 1-1: SerialNumber: syz [ 90.248937][ T1748] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 90.262605][ T1510] usb 1-1: config 0 descriptor?? [ 90.267967][ T1748] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 90.268906][ T1750] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 90.292214][ T1510] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 90.299520][ T1510] usb 1-1: No valid video chain found. [ 90.382818][ T397] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 90.413767][ T397] usb 5-1: Invalid ep0 maxpacket: 64 [ 90.419438][ T397] usb usb5-port1: unable to enumerate USB device [ 90.482213][ T1510] usb 1-1: USB disconnect, device number 9 [ 90.542799][ T380] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 90.672807][ T345] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 90.723911][ T380] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 90.732126][ T380] usb 2-1: config 0 has no interface number 0 [ 90.738417][ T380] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 90.751003][ T380] usb 2-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=85.fd [ 90.760116][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.768197][ T380] usb 2-1: Product: syz [ 90.772374][ T380] usb 2-1: Manufacturer: syz [ 90.776999][ T380] usb 2-1: SerialNumber: syz [ 90.782255][ T380] usb 2-1: config 0 descriptor?? [ 90.788252][ T380] usb 2-1: Found UVC 0.00 device syz (05e3:0505) [ 90.794659][ T380] usb 2-1: No valid video chain found. [ 90.854224][ T345] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 90.863393][ T345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.871986][ T345] usb 3-1: config 0 descriptor?? [ 90.995580][ T380] usb 2-1: USB disconnect, device number 13 [ 91.029690][ T1776] device ip6_vti0 entered promiscuous mode [ 91.234566][ T1780] loop0: detected capacity change from 0 to 512 [ 91.264546][ T1780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.273748][ T1780] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.298389][ T1780] binder: 1777:1780 ioctl c0306201 200000000080 returned -14 [ 91.704745][ T1789] 9pnet: p9_errstr2errno: server reported unknown error @cF S000000000000000000000040000000000000000000000000000000000000004 [ 91.885504][ T345] usb 3-1: Cannot set autoneg [ 91.890322][ T345] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -61 [ 92.033815][ T1791] loop4: detected capacity change from 0 to 4096 [ 92.040972][ T1791] EXT4-fs (loop4): Test dummy encryption mode enabled [ 92.060487][ T1791] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.071176][ T1791] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 92.455300][ T284] EXT4-fs (loop4): unmounting filesystem. [ 92.582081][ T1771] loop2: detected capacity change from 0 to 40427 [ 92.612867][ T1804] overlayfs: failed to resolve './bus': -2 [ 92.618841][ T1771] F2FS-fs (loop2): invalid crc value [ 92.635828][ T1771] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.680125][ T1771] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.722257][ T60] usb 3-1: USB disconnect, device number 8 [ 92.748397][ T283] EXT4-fs (loop0): unmounting filesystem. [ 93.027950][ T1816] loop0: detected capacity change from 0 to 40427 [ 93.036662][ T1816] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 93.043924][ T1816] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.052516][ T1816] F2FS-fs (loop0): fault_injection options not supported [ 93.058332][ T1828] loop3: detected capacity change from 0 to 512 [ 93.060208][ T1816] F2FS-fs (loop0): fault_type options not supported [ 93.079527][ T1816] F2FS-fs (loop0): invalid crc value [ 93.092246][ T1828] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.107574][ T1816] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.113369][ T1828] ext4 filesystem being mounted at /70 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.134700][ T287] EXT4-fs (loop3): unmounting filesystem. [ 93.153263][ T1837] tmpfs: Bad value for 'nr_inodes' [ 93.202345][ T1816] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 93.218155][ T1816] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.291547][ T283] syz-executor: attempt to access beyond end of device [ 93.291547][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.394133][ T1852] loop2: detected capacity change from 0 to 4096 [ 93.418995][ T1852] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.446852][ T1852] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 93.455504][ T1852] System zones: 0-5 [ 93.460847][ T1852] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.310436][ T285] EXT4-fs (loop2): unmounting filesystem. [ 94.492819][ T345] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 94.495406][ T60] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 94.682813][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 94.684296][ T345] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 94.689284][ T60] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.697418][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.705363][ T60] usb 4-1: config 0 has no interface number 0 [ 94.718430][ T345] usb 2-1: config 0 descriptor?? [ 94.719472][ T60] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.735171][ T60] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.744950][ T60] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 94.754049][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.762890][ T60] usb 4-1: config 0 descriptor?? [ 95.209638][ T1882] loop2: detected capacity change from 0 to 1024 [ 95.222400][ T1882] EXT4-fs: Ignoring removed bh option [ 95.229291][ T1882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.237425][ T1882] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 95.247776][ T1882] EXT4-fs (loop2): unable to read superblock [ 95.299416][ T1882] netlink: 36 bytes leftover after parsing attributes in process `syz.2.359'. [ 95.369708][ T1867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.387324][ T1867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.451748][ T1888] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.458523][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.524292][ T1893] loop3: detected capacity change from 0 to 512 [ 95.645672][ T1893] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.655749][ T1893] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.782634][ T345] usb 2-1: Cannot set autoneg [ 95.787573][ T345] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -61 [ 96.145860][ T1869] loop1: detected capacity change from 0 to 40427 [ 96.204019][ T1869] F2FS-fs (loop1): invalid crc value [ 96.252422][ T1869] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.264696][ T1904] loop2: detected capacity change from 0 to 128 [ 96.292863][ T1904] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 96.311678][ T1904] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.315905][ T1869] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.398367][ T285] EXT4-fs (loop2): unmounting filesystem. [ 96.407337][ T1510] usb 2-1: USB disconnect, device number 14 [ 96.553431][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 96.553449][ T28] audit: type=1400 audit(1764570398.729:463): avc: denied { write } for pid=1908 comm="syz.2.364" path="socket:[21964]" dev="sockfs" ino=21964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.004365][ T28] audit: type=1400 audit(1764570399.179:464): avc: denied { ioctl } for pid=1915 comm="syz.1.366" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.195680][ T60] uclogic 0003:28BD:0071.0007: failed retrieving string descriptor #100: -71 [ 97.206575][ T60] uclogic 0003:28BD:0071.0007: failed retrieving pen parameters: -71 [ 97.207109][ T287] EXT4-fs (loop3): unmounting filesystem. [ 97.214904][ T60] uclogic 0003:28BD:0071.0007: pen probing failed: -71 [ 97.227487][ T60] uclogic 0003:28BD:0071.0007: failed probing parameters: -71 [ 97.235004][ T60] uclogic: probe of 0003:28BD:0071.0007 failed with error -71 [ 97.244657][ T60] usb 4-1: USB disconnect, device number 12 [ 97.263329][ T1923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.368'. [ 97.342867][ T341] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 97.459184][ T1938] loop4: detected capacity change from 0 to 2048 [ 97.476522][ T1938] loop4: p2 < > p4 [ 97.481325][ T1938] loop4: p4 size 262144 extends beyond EOD, truncated [ 97.490661][ T1930] loop3: detected capacity change from 0 to 40427 [ 97.497313][ T1892] Bluetooth: hci0: command 0x1003 tx timeout [ 97.498016][ T1938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.373'. [ 97.503434][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.518271][ T28] audit: type=1400 audit(1764570399.679:465): avc: denied { write } for pid=1937 comm="syz.4.373" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.530685][ T1930] F2FS-fs (loop3): fault_type options not supported [ 97.553369][ T341] usb 2-1: Using ep0 maxpacket: 16 [ 97.563654][ T341] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 97.565948][ T1930] F2FS-fs (loop3): Unrecognized mount option "fault" or missing value [ 97.595611][ T28] audit: type=1400 audit(1764570399.769:466): avc: denied { bind } for pid=1937 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.628712][ T1941] loop2: detected capacity change from 0 to 1024 [ 97.636152][ T341] usb 2-1: config 0 has no interface number 0 [ 97.668199][ T341] usb 2-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 97.680772][ T1943] loop0: detected capacity change from 0 to 128 [ 97.693186][ T1941] EXT4-fs: Ignoring removed orlov option [ 97.724773][ T341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.724927][ T1941] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.861582][ T1943] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 97.870531][ T341] usb 2-1: Product: syz [ 97.874808][ T341] usb 2-1: Manufacturer: syz [ 97.879514][ T341] usb 2-1: SerialNumber: syz [ 97.893681][ T1943] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.657497][ T341] usb 2-1: config 0 descriptor?? [ 98.665797][ T341] usb 2-1: bad CDC descriptors [ 98.679240][ T28] audit: type=1400 audit(1764570400.849:467): avc: denied { setattr } for pid=1939 comm="syz.2.374" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.940089][ T28] audit: type=1400 audit(1764570400.889:468): avc: denied { rename } for pid=1939 comm="syz.2.374" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.996647][ T28] audit: type=1400 audit(1764570400.889:469): avc: denied { unlink } for pid=1939 comm="syz.2.374" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.035374][ T1961] overlayfs: failed to resolve './file1': -2 [ 99.044774][ T285] EXT4-fs (loop2): unmounting filesystem. [ 99.190899][ T1966] netlink: 64 bytes leftover after parsing attributes in process `syz.4.377'. [ 99.252225][ T1966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 99.367255][ T283] EXT4-fs (loop0): unmounting filesystem. [ 99.735310][ T28] audit: type=1400 audit(1764570401.909:470): avc: denied { read } for pid=1984 comm="syz.4.383" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 99.781781][ T28] audit: type=1400 audit(1764570401.909:471): avc: denied { open } for pid=1984 comm="syz.4.383" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 99.903581][ T1996] loop0: detected capacity change from 0 to 40427 [ 99.924648][ T1996] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 99.955061][ T1996] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 99.978904][ T1996] F2FS-fs (loop0): invalid crc value [ 100.017213][ T1996] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.039947][ T2000] loop2: detected capacity change from 0 to 128 [ 100.070796][ T2000] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.086090][ T2000] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.115018][ T2000] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.2.387: bad entry in directory: inode out of bounds - offset=0, inode=134217730, rec_len=12, size=1024 fake=1 [ 100.158648][ T285] EXT4-fs (loop2): unmounting filesystem. [ 100.189527][ T1996] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 100.211146][ T28] audit: type=1400 audit(1764570402.379:472): avc: denied { create } for pid=2003 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 100.217008][ T1996] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.252323][ T2007] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 100.618732][ T1510] usb 2-1: USB disconnect, device number 15 [ 100.738988][ T2014] sch_tbf: burst 240 is lower than device lo mtu (1294) ! [ 100.861558][ T283] syz-executor: attempt to access beyond end of device [ 100.861558][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.902871][ T371] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 101.022863][ T1510] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 101.105310][ T371] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 101.119050][ T371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.143572][ T371] usb 3-1: config 0 descriptor?? [ 101.203878][ T1510] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 101.219874][ T1510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.229624][ T1510] usb 2-1: config 0 descriptor?? [ 101.500384][ T2045] input: syz0 as /devices/virtual/input/input11 [ 101.507314][ T2045] input: failed to attach handler leds to device input11, error: -6 [ 101.574300][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 101.574323][ T28] audit: type=1400 audit(1764570403.749:477): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1098 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.678766][ T28] audit: type=1400 audit(1764570403.779:478): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1098 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.705560][ T28] audit: type=1400 audit(1764570403.779:479): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1098 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.745875][ T2043] device wireguard0 entered promiscuous mode [ 101.936800][ T28] audit: type=1400 audit(1764570404.109:480): avc: denied { read } for pid=2048 comm="syz.4.400" name="/" dev="configfs" ino=14616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.958973][ T28] audit: type=1400 audit(1764570404.109:481): avc: denied { open } for pid=2048 comm="syz.4.400" path="/" dev="configfs" ino=14616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.418829][ T1510] usb 2-1: Cannot set autoneg [ 102.423694][ T1510] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -61 [ 102.487614][ T2067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.405'. [ 102.609116][ T2011] loop2: detected capacity change from 0 to 40427 [ 102.628264][ T2011] F2FS-fs (loop2): invalid crc value [ 102.677686][ T2011] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.738438][ T2011] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 102.800525][ T371] usb 3-1: Cannot set autoneg [ 102.807690][ T371] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 102.820284][ T371] usb 3-1: USB disconnect, device number 9 [ 102.842883][ T341] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 102.857430][ T2009] loop1: detected capacity change from 0 to 40427 [ 102.868582][ T2009] F2FS-fs (loop1): invalid crc value [ 102.884272][ T2009] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.943443][ T2009] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.961828][ T2084] loop4: detected capacity change from 0 to 128 [ 102.979775][ T19] usb 2-1: USB disconnect, device number 16 [ 102.987947][ T2084] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.998460][ T2084] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.043194][ T284] EXT4-fs (loop4): unmounting filesystem. [ 103.054220][ T341] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.070667][ T2089] bridge: RTM_NEWNEIGH with invalid ether address [ 103.078909][ T341] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 103.088373][ T341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.096504][ T341] usb 1-1: Product: syz [ 103.100833][ T341] usb 1-1: Manufacturer: syz [ 103.105508][ T341] usb 1-1: SerialNumber: syz [ 103.110731][ T341] usb 1-1: config 0 descriptor?? [ 103.362373][ T341] usb 1-1: bad CDC descriptors [ 103.367863][ T341] usb 1-1: unsupported MDLM descriptors [ 103.372930][ T1510] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 103.381765][ T341] usb 1-1: USB disconnect, device number 10 [ 103.516432][ T2114] loop0: detected capacity change from 0 to 512 [ 103.543495][ T2114] EXT4-fs: Mount option(s) incompatible with ext3 [ 103.572779][ T1510] usb 5-1: Using ep0 maxpacket: 32 [ 103.579564][ T1510] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.595134][ T1510] usb 5-1: config 40 has an invalid interface number: 144 but max is 0 [ 103.612816][ T1510] usb 5-1: config 40 has no interface number 0 [ 103.629203][ T1510] usb 5-1: config 40 interface 144 has no altsetting 0 [ 103.640656][ T2114] 9pnet_fd: Insufficient options for proto=fd [ 103.651421][ T1510] usb 5-1: string descriptor 0 read error: -22 [ 103.658215][ T1510] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=6e.65 [ 103.668394][ T1510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.679245][ T28] audit: type=1400 audit(1764570405.849:482): avc: denied { unlink } for pid=2113 comm="syz.0.416" name="#26" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.709163][ T1510] usbhid 5-1:40.144: couldn't find an input interrupt endpoint [ 103.754081][ T2126] loop1: detected capacity change from 0 to 4096 [ 103.765014][ T2126] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.777589][ T2126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 103.787841][ T2126] Quota error (device loop1): do_check_range: Getting block 198 out of range 1-5 [ 103.797129][ T2126] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 103.807062][ T2126] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.417: Failed to acquire dquot type 0 [ 103.824740][ T286] EXT4-fs (loop1): unmounting filesystem. [ 103.912072][ T2089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'. [ 103.923984][ T60] usb 5-1: USB disconnect, device number 13 [ 104.004418][ T380] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 104.810049][ T380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.828785][ T380] usb 1-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 104.838198][ T380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.892116][ T380] usb 1-1: config 0 descriptor?? [ 105.052252][ T28] audit: type=1400 audit(1764570407.219:483): avc: denied { setattr } for pid=2152 comm="syz.4.425" name="XDP" dev="sockfs" ino=23203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.080989][ T2155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.426'. [ 105.100417][ T2158] loop0: detected capacity change from 0 to 128 [ 105.107566][ T2158] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 105.133728][ T1510] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 105.725377][ T380] usbhid 1-1:0.0: can't add hid device: -71 [ 105.742843][ T380] usbhid: probe of 1-1:0.0 failed with error -71 [ 105.751715][ T380] usb 1-1: USB disconnect, device number 11 [ 105.812906][ T19] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 105.842868][ T1510] usb 3-1: Using ep0 maxpacket: 32 [ 105.849383][ T28] audit: type=1400 audit(1764570408.019:484): avc: denied { mounton } for pid=2169 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 105.852265][ T1510] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 105.879071][ T1510] usb 3-1: config 2 has no interface number 0 [ 105.885253][ T1510] usb 3-1: config 2 interface 88 has no altsetting 0 [ 105.894507][ T1510] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 105.903990][ T1510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.912006][ T1510] usb 3-1: Product: syz [ 105.916416][ T1510] usb 3-1: Manufacturer: syz [ 105.921040][ T1510] usb 3-1: SerialNumber: syz [ 105.967259][ T19] usb 2-1: device descriptor read/64, error -71 [ 105.974612][ T2169] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.981720][ T2169] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.990308][ T2169] device bridge_slave_0 entered promiscuous mode [ 105.998715][ T2169] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.005816][ T2169] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.013447][ T2169] device bridge_slave_1 entered promiscuous mode [ 106.085432][ T2169] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.092498][ T2169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.099832][ T2169] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.106901][ T2169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.202060][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.210648][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.218644][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.243052][ T19] usb 2-1: device descriptor read/64, error -71 [ 106.250022][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.259250][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.266326][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.274445][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.283865][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.290919][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.329578][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.344319][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.407860][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.443920][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.455533][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.463910][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.477400][ T10] device bridge_slave_1 left promiscuous mode [ 106.483818][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.494140][ T10] device bridge_slave_0 left promiscuous mode [ 106.500537][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.512990][ T10] device veth1_macvtap left promiscuous mode [ 106.519304][ T10] device veth0_vlan left promiscuous mode [ 106.525295][ T19] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 106.538666][ T2149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.555141][ T2149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.682977][ T19] usb 2-1: device descriptor read/64, error -71 [ 106.910306][ T2149] loop2: detected capacity change from 0 to 40427 [ 106.924930][ T2149] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 106.943147][ T2149] F2FS-fs (loop2): Unrecognized mount option "errors=remount-ro" or missing value [ 106.951365][ T2169] device veth0_vlan entered promiscuous mode [ 106.965935][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.975382][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.022929][ T19] usb 2-1: device descriptor read/64, error -71 [ 107.055921][ T2169] device veth1_macvtap entered promiscuous mode [ 107.068577][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.076734][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.085205][ T1510] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 107.088486][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.096340][ T1510] asix: probe of 3-1:2.88 failed with error -71 [ 107.204578][ T2190] loop4: detected capacity change from 0 to 1024 [ 107.213444][ T2190] ext4: Unknown parameter 'subj_role' [ 107.252922][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 107.252989][ T28] audit: type=1400 audit(1764570409.419:486): avc: denied { mount } for pid=2169 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.320284][ T28] audit: type=1400 audit(1764570409.419:487): avc: denied { mounton } for pid=2169 comm="syz-executor" path="/root/syzkaller.Dksntu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 108.367943][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.398332][ T19] usb usb2-port1: attempt power cycle [ 108.406163][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.409771][ T1510] usb 3-1: USB disconnect, device number 10 [ 108.451553][ T361] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.659192][ T2206] syz.1.436[2206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.675071][ T2221] loop1: detected capacity change from 0 to 128 [ 109.695582][ T2214] loop5: detected capacity change from 0 to 40427 [ 109.713904][ T2214] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 109.722978][ T2214] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 109.732883][ T2214] F2FS-fs (loop5): Encrypt feature is off [ 109.741773][ T2221] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.759140][ T2221] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.780933][ T2230] syz.2.442[2230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.781009][ T2230] syz.2.442[2230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.790226][ T2221] FAULT_INJECTION: forcing a failure. [ 109.790226][ T2221] name failslab, interval 1, probability 0, space 0, times 1 [ 109.822857][ T2221] CPU: 0 PID: 2221 Comm: syz.1.441 Not tainted syzkaller #0 [ 109.830187][ T2221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.840291][ T2221] Call Trace: [ 109.843587][ T2221] [ 109.846548][ T2221] __dump_stack+0x21/0x24 [ 109.850898][ T2221] dump_stack_lvl+0xee/0x150 [ 109.855512][ T2221] ? __cfi_dump_stack_lvl+0x8/0x8 [ 109.860575][ T2221] dump_stack+0x15/0x24 [ 109.864762][ T2221] should_fail_ex+0x3d4/0x520 [ 109.869473][ T2221] __should_failslab+0xac/0xf0 [ 109.874259][ T2221] ? ext4_readdir+0x4ac/0x3c10 [ 109.879040][ T2221] should_failslab+0x9/0x20 [ 109.883644][ T2221] __kmem_cache_alloc_node+0x3d/0x2c0 [ 109.889050][ T2221] ? ext4_readdir+0x4ac/0x3c10 [ 109.893836][ T2221] kmalloc_trace+0x29/0xb0 [ 109.898274][ T2221] ext4_readdir+0x4ac/0x3c10 [ 109.902887][ T2221] ? kstrtouint_from_user+0xf7/0x150 [ 109.908206][ T2221] ? __cfi_ext4_readdir+0x10/0x10 [ 109.913278][ T2221] ? __kasan_check_write+0x14/0x20 [ 109.918419][ T2221] ? rwsem_read_trylock+0x29a/0x620 [ 109.923664][ T2221] ? security_file_permission+0x8a/0xb0 [ 109.929225][ T2221] ? downgrade_write+0x350/0x350 [ 109.934168][ T2221] ? avc_policy_seqno+0x1b/0x70 [ 109.939058][ T2221] ? down_read_killable+0xb6/0x100 [ 109.944179][ T2221] ? __cfi_down_read_killable+0x10/0x10 [ 109.949738][ T2221] ? fsnotify_perm+0x269/0x5b0 [ 109.954513][ T2221] ? security_file_permission+0x94/0xb0 [ 109.960064][ T2221] iterate_dir+0x271/0x610 [ 109.964481][ T2221] ? __cfi_ext4_readdir+0x10/0x10 [ 109.969506][ T2221] __se_sys_getdents+0xe5/0x240 [ 109.974359][ T2221] ? fput+0x154/0x1a0 [ 109.978343][ T2221] ? __x64_sys_getdents+0x90/0x90 [ 109.983459][ T2221] ? ksys_write+0x1eb/0x240 [ 109.988049][ T2221] ? __cfi_filldir+0x10/0x10 [ 109.992645][ T2221] ? __cfi_ksys_write+0x10/0x10 [ 109.997493][ T2221] ? debug_smp_processor_id+0x17/0x20 [ 110.002874][ T2221] __x64_sys_getdents+0x7b/0x90 [ 110.007753][ T2221] x64_sys_call+0x212/0x9a0 [ 110.012283][ T2221] do_syscall_64+0x4c/0xa0 [ 110.016707][ T2221] ? clear_bhb_loop+0x30/0x80 [ 110.021411][ T2221] ? clear_bhb_loop+0x30/0x80 [ 110.026096][ T2221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.032009][ T2221] RIP: 0033:0x7f191978f749 [ 110.036443][ T2221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.056073][ T2221] RSP: 002b:00007f191a5b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 110.064580][ T2221] RAX: ffffffffffffffda RBX: 00007f19199e5fa0 RCX: 00007f191978f749 [ 110.072549][ T2221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 110.080531][ T2221] RBP: 00007f191a5b0090 R08: 0000000000000000 R09: 0000000000000000 [ 110.088522][ T2221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.096505][ T2221] R13: 00007f19199e6038 R14: 00007f19199e5fa0 R15: 00007ffe676ec788 [ 110.104492][ T2221] [ 110.177578][ T286] EXT4-fs (loop1): unmounting filesystem. [ 110.191448][ T2237] loop5: detected capacity change from 0 to 16 [ 110.204336][ T2237] erofs: (device loop5): mounted with root inode @ nid 36. [ 110.220884][ T2237] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 110.231550][ T2237] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 110.243204][ T46] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 110.264911][ T2240] loop1: detected capacity change from 0 to 128 [ 110.312500][ T2240] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.323123][ T2240] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.552613][ T286] EXT4-fs (loop1): unmounting filesystem. [ 110.980039][ T2252] syz.2.447 uses obsolete (PF_INET,SOCK_PACKET) [ 110.992077][ T28] audit: type=1400 audit(1764570413.159:488): avc: denied { getopt } for pid=2251 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.594886][ T28] audit: type=1400 audit(1764570413.769:489): avc: denied { create } for pid=2243 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.852864][ T341] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 111.896507][ T2260] kvm [2259]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 111.912984][ T2260] kvm [2259]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 112.192770][ T341] usb 2-1: Using ep0 maxpacket: 16 [ 112.199264][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.210546][ T341] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.223846][ T341] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 112.233148][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.243365][ T341] usb 2-1: config 0 descriptor?? [ 112.305945][ T2276] loop5: detected capacity change from 0 to 512 [ 112.313333][ T2274] loop4: detected capacity change from 0 to 40427 [ 112.337270][ T2274] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 112.357967][ T2274] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 112.369800][ T2276] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 112.379266][ T2276] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.391854][ T2274] F2FS-fs (loop4): Found nat_bits in checkpoint [ 112.434146][ T2274] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 112.442307][ T2274] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 112.488826][ T284] syz-executor: attempt to access beyond end of device [ 112.488826][ T284] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.654792][ T341] thrustmaster 0003:044F:B654.0008: hidraw0: USB HID v0.00 Device [HID 044f:b654] on usb-dummy_hcd.1-1/input0 [ 112.670385][ T341] thrustmaster 0003:044F:B654.0008: no inputs found [ 112.679585][ T2283] loop4: detected capacity change from 0 to 512 [ 112.860713][ T28] audit: type=1400 audit(1764570415.029:490): avc: denied { setattr } for pid=2256 comm="syz.1.448" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.883804][ T397] usb 2-1: USB disconnect, device number 20 [ 113.706912][ T397] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 114.349887][ T28] audit: type=1326 audit(1764570416.519:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf3d8f749 code=0x7ffc0000 [ 114.404431][ T397] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 114.445396][ T28] audit: type=1326 audit(1764570416.539:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf3d8f749 code=0x7ffc0000 [ 114.495732][ T397] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 114.507061][ T397] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.517105][ T397] usb 5-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 114.531448][ T397] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.561065][ T397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.579335][ T397] usb 5-1: SerialNumber: syz [ 114.594623][ T28] audit: type=1326 audit(1764570416.539:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7efdf3d8f749 code=0x7ffc0000 [ 114.741584][ T28] audit: type=1326 audit(1764570416.539:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf3d8f749 code=0x7ffc0000 [ 114.873221][ T2314] device veth0_to_hsr entered promiscuous mode [ 114.903941][ T397] rndis_host: probe of 5-1:253.0 failed with error -22 [ 114.984028][ T397] usb 5-1: USB disconnect, device number 14 [ 115.031435][ T28] audit: type=1326 audit(1764570416.539:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf3d8f749 code=0x7ffc0000 [ 115.447677][ T28] audit: type=1326 audit(1764570416.539:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7efdf3d8f749 code=0x7ffc0000 [ 115.490981][ T2312] loop1: detected capacity change from 0 to 2048 [ 115.519346][ T28] audit: type=1326 audit(1764570416.539:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf3d8f749 code=0x7ffc0000 [ 115.544752][ T2319] loop2: detected capacity change from 0 to 128 [ 115.557447][ T28] audit: type=1326 audit(1764570416.539:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf3d8f749 code=0x7ffc0000 [ 115.582657][ T28] audit: type=1326 audit(1764570416.539:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdf3d8f749 code=0x7ffc0000 [ 115.607379][ T361] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.628196][ T2317] device veth0_to_hsr left promiscuous mode [ 115.783393][ T2169] EXT4-fs (loop5): unmounting filesystem. [ 115.866566][ T2328] loop1: detected capacity change from 0 to 512 [ 115.885051][ T2331] loop5: detected capacity change from 0 to 1024 [ 115.888396][ T2328] EXT4-fs (loop1): failed to initialize system zone (-117) [ 115.899069][ T2328] EXT4-fs (loop1): mount failed [ 115.907561][ T2331] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 115.924558][ T2331] ================================================================== [ 115.932662][ T2331] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0 [ 115.940425][ T2331] Read of size 18446744073709551588 at addr ffff8881219c5840 by task syz.5.467/2331 [ 115.949599][ T2335] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.467: Allocating blocks 497-513 which overlap fs metadata [ 115.949854][ T2331] [ 115.949861][ T2331] CPU: 1 PID: 2331 Comm: syz.5.467 Not tainted syzkaller #0 [ 115.964917][ T2335] EXT4-fs (loop5): pa ffff8881175e2690: logic 128, phys. 385, len 8 [ 115.965904][ T2331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.973290][ T2335] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4876: group 0, [ 115.981152][ T2331] Call Trace: [ 115.981161][ T2331] [ 115.981170][ T2331] __dump_stack+0x21/0x24 [ 115.991262][ T2335] free 0, pa_free 1 [ 115.999639][ T2331] dump_stack_lvl+0xee/0x150 [ 116.018668][ T2331] ? __cfi_dump_stack_lvl+0x8/0x8 [ 116.023732][ T2331] ? ext4_xattr_block_set+0x9dc/0x3270 [ 116.029242][ T2331] ? __vfs_setxattr+0x3f2/0x440 [ 116.034124][ T2331] ? ext4_xattr_set_entry+0x979/0x21d0 [ 116.039606][ T2331] print_address_description+0x71/0x200 [ 116.045170][ T2331] print_report+0x4a/0x60 [ 116.049523][ T2331] kasan_report+0x122/0x150 [ 116.054051][ T2331] ? ext4_xattr_set_entry+0x979/0x21d0 [ 116.059538][ T2331] ? ext4_xattr_set_entry+0x979/0x21d0 [ 116.065022][ T2331] kasan_check_range+0x280/0x290 [ 116.069984][ T2331] memmove+0x2d/0x70 [ 116.073906][ T2331] ext4_xattr_set_entry+0x979/0x21d0 [ 116.079220][ T2331] ext4_xattr_block_set+0xada/0x3270 [ 116.084651][ T2331] ? dquot_free_inode+0x75f/0x940 [ 116.089675][ T2331] ? __kasan_check_write+0x14/0x20 [ 116.094778][ T2331] ? iput+0x620/0x670 [ 116.098777][ T2331] ? ext4_xattr_block_find+0x310/0x310 [ 116.104240][ T2331] ext4_xattr_set_handle+0xbd5/0x12b0 [ 116.109631][ T2331] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 116.115449][ T2331] ? __kasan_check_read+0x11/0x20 [ 116.120465][ T2331] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 116.126090][ T2331] ext4_xattr_set+0x22a/0x320 [ 116.130764][ T2331] ? ns_capable+0x8c/0xf0 [ 116.135084][ T2331] ? __cfi_ext4_xattr_set+0x10/0x10 [ 116.140283][ T2331] ? selinux_inode_setxattr+0x5aa/0xba0 [ 116.145829][ T2331] ext4_xattr_security_set+0x3c/0x50 [ 116.151109][ T2331] ? __cfi_ext4_xattr_security_set+0x10/0x10 [ 116.157080][ T2331] __vfs_setxattr+0x3f2/0x440 [ 116.161777][ T2331] __vfs_setxattr_noperm+0x12a/0x5e0 [ 116.167077][ T2331] __vfs_setxattr_locked+0x212/0x230 [ 116.172365][ T2331] vfs_setxattr+0x168/0x2f0 [ 116.176869][ T2331] ? __cfi_vfs_setxattr+0x10/0x10 [ 116.181894][ T2331] ? copy_user_enhanced_fast_string+0xa/0x40 [ 116.187875][ T2331] setxattr+0x2b2/0x2d0 [ 116.192032][ T2331] ? path_setxattr+0x280/0x280 [ 116.196818][ T2331] ? __mnt_want_write+0x1e6/0x260 [ 116.201844][ T2331] ? mnt_want_write+0x220/0x300 [ 116.206712][ T2331] path_setxattr+0x142/0x280 [ 116.211305][ T2331] ? simple_xattr_list_add+0x120/0x120 [ 116.216760][ T2331] ? __kasan_check_write+0x14/0x20 [ 116.221885][ T2331] ? fpregs_restore_userregs+0x128/0x260 [ 116.227514][ T2331] __x64_sys_setxattr+0xc5/0xe0 [ 116.232364][ T2331] x64_sys_call+0x633/0x9a0 [ 116.236864][ T2331] do_syscall_64+0x4c/0xa0 [ 116.241281][ T2331] ? clear_bhb_loop+0x30/0x80 [ 116.245962][ T2331] ? clear_bhb_loop+0x30/0x80 [ 116.250666][ T2331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.256563][ T2331] RIP: 0033:0x7f102b78f749 [ 116.260979][ T2331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.280688][ T2331] RSP: 002b:00007f102c6b8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 116.289114][ T2331] RAX: ffffffffffffffda RBX: 00007f102b9e5fa0 RCX: 00007f102b78f749 [ 116.297109][ T2331] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 116.305081][ T2331] RBP: 00007f102b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 116.313052][ T2331] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 116.321021][ T2331] R13: 00007f102b9e6038 R14: 00007f102b9e5fa0 R15: 00007ffd753dfe48 [ 116.328994][ T2331] [ 116.332012][ T2331] [ 116.334434][ T2331] Allocated by task 2331: [ 116.338746][ T2331] kasan_set_track+0x4b/0x70 [ 116.343334][ T2331] kasan_save_alloc_info+0x25/0x30 [ 116.348448][ T2331] __kasan_kmalloc+0x95/0xb0 [ 116.353033][ T2331] __kmalloc_node_track_caller+0xb1/0x1e0 [ 116.358757][ T2331] kmemdup+0x2b/0x60 [ 116.362671][ T2331] ext4_xattr_block_set+0x9dc/0x3270 [ 116.367965][ T2331] ext4_xattr_set_handle+0xbd5/0x12b0 [ 116.373351][ T2331] ext4_xattr_set+0x22a/0x320 [ 116.378122][ T2331] ext4_xattr_security_set+0x3c/0x50 [ 116.383405][ T2331] __vfs_setxattr+0x3f2/0x440 [ 116.388109][ T2331] __vfs_setxattr_noperm+0x12a/0x5e0 [ 116.393398][ T2331] __vfs_setxattr_locked+0x212/0x230 [ 116.398706][ T2331] vfs_setxattr+0x168/0x2f0 [ 116.403237][ T2331] setxattr+0x2b2/0x2d0 [ 116.407575][ T2331] path_setxattr+0x142/0x280 [ 116.412167][ T2331] __x64_sys_setxattr+0xc5/0xe0 [ 116.417033][ T2331] x64_sys_call+0x633/0x9a0 [ 116.421561][ T2331] do_syscall_64+0x4c/0xa0 [ 116.426001][ T2331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.431997][ T2331] [ 116.434319][ T2331] Last potentially related work creation: [ 116.440024][ T2331] kasan_save_stack+0x3a/0x60 [ 116.444703][ T2331] __kasan_record_aux_stack+0xb6/0xc0 [ 116.450078][ T2331] kasan_record_aux_stack_noalloc+0xb/0x10 [ 116.455888][ T2331] kvfree_call_rcu+0x95/0x7a0 [ 116.460582][ T2331] drop_sysctl_table+0x2ef/0x410 [ 116.465527][ T2331] unregister_sysctl_table+0x75/0x120 [ 116.470905][ T2331] unregister_net_sysctl_table+0x15/0x20 [ 116.476531][ T2331] neigh_sysctl_unregister+0x78/0x90 [ 116.481821][ T2331] inetdev_event+0x860/0x10e0 [ 116.486500][ T2331] raw_notifier_call_chain+0xa1/0x110 [ 116.491919][ T2331] unregister_netdevice_many+0xf8f/0x1820 [ 116.497648][ T2331] vti6_exit_batch_net+0x26a/0x2b0 [ 116.502788][ T2331] cleanup_net+0x62d/0xb00 [ 116.507207][ T2331] process_one_work+0x71f/0xc40 [ 116.512053][ T2331] worker_thread+0xa29/0x11f0 [ 116.516729][ T2331] kthread+0x281/0x320 [ 116.520796][ T2331] ret_from_fork+0x1f/0x30 [ 116.525213][ T2331] [ 116.527535][ T2331] The buggy address belongs to the object at ffff8881219c5800 [ 116.527535][ T2331] which belongs to the cache kmalloc-1k of size 1024 [ 116.541586][ T2331] The buggy address is located 64 bytes inside of [ 116.541586][ T2331] 1024-byte region [ffff8881219c5800, ffff8881219c5c00) [ 116.554863][ T2331] [ 116.557188][ T2331] The buggy address belongs to the physical page: [ 116.563638][ T2331] page:ffffea0004867000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1219c0 [ 116.573908][ T2331] head:ffffea0004867000 order:3 compound_mapcount:0 compound_pincount:0 [ 116.582255][ T2331] flags: 0x4000000000010200(slab|head|zone=1) [ 116.588373][ T2331] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043080 [ 116.596954][ T2331] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 116.605570][ T2331] page dumped because: kasan: bad access detected [ 116.611983][ T2331] page_owner tracks the page as allocated [ 116.617690][ T2331] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 284, tgid 284 (syz-executor), ts 24015350007, free_ts 23798019102 [ 116.638882][ T2331] post_alloc_hook+0x1f5/0x210 [ 116.643680][ T2331] prep_new_page+0x1c/0x110 [ 116.648215][ T2331] get_page_from_freelist+0x2c7b/0x2cf0 [ 116.653788][ T2331] __alloc_pages+0x1c3/0x450 [ 116.658408][ T2331] alloc_slab_page+0x6e/0xf0 [ 116.663032][ T2331] new_slab+0x98/0x3d0 [ 116.667135][ T2331] ___slab_alloc+0x6bd/0xb20 [ 116.671750][ T2331] __slab_alloc+0x5e/0xa0 [ 116.676109][ T2331] __kmem_cache_alloc_node+0x203/0x2c0 [ 116.681593][ T2331] __kmalloc_node_track_caller+0xa0/0x1e0 [ 116.687343][ T2331] __alloc_skb+0x236/0x4b0 [ 116.691780][ T2331] alloc_uevent_skb+0x85/0x240 [ 116.696571][ T2331] kobject_uevent_net_broadcast+0x1b4/0x5b0 [ 116.702497][ T2331] kobject_uevent_env+0x54f/0x730 [ 116.707542][ T2331] kobject_uevent+0x1d/0x30 [ 116.712072][ T2331] netdev_queue_update_kobjects+0x22c/0x470 [ 116.717986][ T2331] page last free stack trace: [ 116.722647][ T2331] free_unref_page_prepare+0x742/0x750 [ 116.728105][ T2331] free_unref_page+0x8f/0x530 [ 116.732785][ T2331] free_compound_page+0x99/0xd0 [ 116.737728][ T2331] destroy_large_folio+0x68/0xa0 [ 116.742665][ T2331] __folio_put+0xd1/0xe0 [ 116.746910][ T2331] skb_release_data+0x47f/0x890 [ 116.751754][ T2331] napi_consume_skb+0x13d/0x2c0 [ 116.756601][ T2331] net_rx_action+0x393/0xaa0 [ 116.761189][ T2331] handle_softirqs+0x1d7/0x600 [ 116.765956][ T2331] __irq_exit_rcu+0x52/0xf0 [ 116.770480][ T2331] irq_exit_rcu+0x9/0x10 [ 116.774748][ T2331] common_interrupt+0xbe/0xe0 [ 116.779449][ T2331] asm_common_interrupt+0x27/0x40 [ 116.784503][ T2331] [ 116.786838][ T2331] Memory state around the buggy address: [ 116.792476][ T2331] ffff8881219c5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 116.800557][ T2331] ffff8881219c5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 116.808633][ T2331] >ffff8881219c5800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.816703][ T2331] ^ [ 116.822864][ T2331] ffff8881219c5880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.830935][ T2331] ffff8881219c5900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.839003][ T2331] ================================================================== [ 116.850865][ T2331] Disabling lock debugging due to kernel taint [ 116.858580][ T2339] tipc: Started in network mode [ 116.863582][ T2339] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 116.872619][ T2339] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 116.880751][ T2339] tipc: Enabled bearer , priority 10 [ 117.422839][ T60] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 117.430970][ T2169] EXT4-fs (loop5): unmounting filesystem. [ 117.582804][ T380] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 117.612785][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 117.619102][ T60] usb 3-1: config 1 interface 0 altsetting 240 bulk endpoint 0x1 has invalid maxpacket 16 [ 117.629096][ T60] usb 3-1: config 1 interface 0 altsetting 240 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.642089][ T60] usb 3-1: config 1 interface 0 has no altsetting 0 [ 117.650104][ T60] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 117.659272][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.667463][ T60] usb 3-1: Product: я [ 117.671543][ T60] usb 3-1: Manufacturer: ᰉ [ 117.676170][ T60] usb 3-1: SerialNumber: 늧᧋櫆薾퍈跔䆪塶넸氤讉맅␧ꆪ…鼷繴樂鸈궦쫐☆뜟얺⥦쵂擜୚탧꺄嵦湆姗봽ﵨ臫墷㯕䌎⮘矒繐駲쪖뇪礱쎸窣珙Ϳ궁簙䑿䣐띫腴樲≢瓤吷໹⍢⾢﷚씦盺햝ᱮꗶ瓝᭳ᡈꟈ뷾춋釠긱㇤蹌ꎋ᪉ꮾߨ䈆犋绣䀭啒 [ 117.707042][ T2324] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 117.762793][ T380] usb 2-1: Using ep0 maxpacket: 8 [ 117.769092][ T380] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 117.778210][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.786912][ T380] usb 2-1: config 0 descriptor?? [ 117.792686][ T380] ums-jumpshot 2-1:0.0: USB Mass Storage device detected [ 117.800667][ T380] ums-jumpshot 2-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 117.915227][ T2324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.923787][ T2324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.932319][ T2324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.941113][ T2324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.950268][ T2324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.958808][ T2324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.969946][ T60] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 240 proto 1 vid 0x04B8 pid 0x0202 [ 117.983937][ T60] usb 3-1: USB disconnect, device number 11 [ 117.990600][ T60] usblp0: removed [ 117.996991][ T380] tipc: Node number set to 1 [ 118.001752][ T380] usb 2-1: USB disconnect, device number 21