last executing test programs: 1m23.888810585s ago: executing program 1 (id=15): setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, &(0x7f0000000040)={0x1f, @none, 0x7}, 0xa) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f00000005c0)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) 1m22.457699758s ago: executing program 1 (id=20): unshare(0x60060200) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x48) unshare(0x60060200) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x48) (async) 1m21.410956099s ago: executing program 1 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x923004, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r5, &(0x7f0000003300)="ac", 0x1) write(r3, &(0x7f00000002c0)="1f", 0x1) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 1m21.287773866s ago: executing program 1 (id=27): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080), 0x1, 0x451, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x141) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x7970}}], [], 0x6b}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) lseek(r0, 0x9, 0x4) getdents64(r0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82900, 0x0) socket(0x10, 0x803, 0x0) unshare(0x22020600) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x9f, 0x0) write$binfmt_aout(r0, &(0x7f0000000f80)={{0xcc, 0x1, 0x7, 0x275, 0xe3, 0x2e42, 0x29, 0x7}, "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", ['\x00', '\x00', '\x00']}, 0x1320) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"2dd16e7eadb9f32073e08573fa16b46b", 0x0, 0x0, {0x9, 0x8}, {0xffffffff, 0x8001}, 0x9, [0x3, 0xffffffffffffb9bb, 0x7, 0x8, 0x54, 0x0, 0x5, 0x0, 0x1000, 0x3, 0x1, 0x6, 0x54, 0x3, 0x400, 0x5]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000022c0)={{r4}, r6, 0xc, @unused=[0x9, 0x6, 0x2, 0x7], @subvolid=0xc480}) unshare(0x2040400) r7 = getpid() syz_pidfd_open(r7, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r9 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 1m20.947571756s ago: executing program 2 (id=31): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r2, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) bpf$MAP_CREATE(0x0, 0x0, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10003, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@test_dummy_encryption_v1}, {@delalloc}, {@nomblk_io_submit}, {@acl}, {@journal_ioprio}, {@resuid}]}, 0x9, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d801, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @adiantum, 0x1, @auto="6478eddf56330577"}) 1m20.738546838s ago: executing program 1 (id=32): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x7c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_open_dev$vcsu(&(0x7f0000000080), 0x1, 0x800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)='%pB \x00'}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0xfffffffd, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000012, 0x0, 0x7e150a0b, 0x0, 0x5, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x100000, 0xbd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x2, 0x0, 0xa, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2a, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x32, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)='9H', 0x2}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xffffffcf, 0x9, 0x5, 0xa00, 0xffffffffffffffff, 0xa64, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xa}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000380)=0x3) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000080850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x8, 0xcc, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 1m20.310765883s ago: executing program 2 (id=33): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40402, 0x20) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x158) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10, r4, 0x180000000) (async) r5 = epoll_create1(0x80000) (async, rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x3, 0x2, 0x11, 0x3, 0x6c, "318e2ae33034ffd3ee71f1527c7635ebfc345f44f9a1f3a1d72fcbf3ccf2bd6d823f5796d97eed99b7f3d79225d5c611d846313e7aa20d7c9f302c8448dce9bb5a96807bd25010cf65e1cecfda1efe7760dcce5fcd4862443f74933cf2a16f0fcbcc321ff13eced918ac6580"}, 0x75, 0x1) (async) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) recvfrom$inet_nvme(r1, &(0x7f0000000180)=""/140, 0x8c, 0x40000000, &(0x7f0000000240)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x80) (async) lsetxattr$security_evm(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@ng={0x4, 0xa, "0b42c9a0cbcfd4da7e5bd6"}, 0xd, 0x1) (async) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000380)={@multicast2, @multicast2, 0x0}, &(0x7f00000003c0)=0xc) bind$packet(r1, &(0x7f0000000400)={0x11, 0x9, r7, 0x1, 0x7, 0x6, @remote}, 0x14) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xc4, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfe, {0x10}, [@nested={0xa8, 0x29, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x128, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}, @generic="1cbfb12fc0bbb81d21a35b7c1a2dd76a71a03c146bcc42578026e6fbd9cf6fb00958abb2dc49f2e71abb14691f020b4befb50c7bdaf33def16bf63792f7c992e5af6ebffab873052456a9085e65b33a8f4bcc98f8be94622c900faeb613a8aad0793fabf0146e8a1572978d26db8c43966a3bb3ef08b549c8fb1d9bd3fd74f4a1bd082dc1e54b7e2193a0c7b92d356d4", @typed={0x4, 0x14}]}, @typed={0x8, 0x17, 0x0, 0x0, @fd=r1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 32) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000600)=0x2) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000640)=0x2, 0x4) (async) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000680)=0x3) (async) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) close_range(r3, r4, 0x2) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000001900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10100100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000700)={0x11b4, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff01}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x77}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd35b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1068, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "d9176d934ade380e11b8dda12260ad3fee77702e9c5621dd97541df39a5a38b8a07af5a4af9b20a7ec916ea8c2c0e73b05584855d7dd0dc7bc819ea9282e2b8103a06fc10c7889b6834671c43c3163a1134e6a5f2d6bd62ab993b22b295636fcb9d7ed2e8b0b30b7d12e8957c0189c12f083859fbd8b8905c386176a0ed53383a094cb15ceee87b7d5ababeb661ce45f1330503e38ba385a1eb2718cf37d159676f744589b573d3a6ac05f991bcf5264feae1fe6c5a733be865ac9e934f913db451e66c72a5704a6f478c9eb730753fb7102d679f2bd0ad1abb6f409c78d733e577c3b39ea1ebaa2d57eaa78cae9171e54654c7b55f4b25dc65cc4a5371035263b0220286fb1fc100c5c382bc47d8a25f249e076ef81f1b33b04c072f24823b672851b9c32aac2e1c54ad33f71c3959530dbaff0ad772b7ef01ff258daa0da85ee6bb9e63c23eceefd9a752d6e2d7baa1c3a8629f1dfe9b674082d0c9ca7ce2f86327f2bf1ee447917ec715346c05255744359b0e4c15785110f2308e77bf70e5f6c8bf2fc7bef5ff1906553ae761dc089429f385395bcc0adbff39f5ff270d05044e023e6087ce00d9e549770aacb5dfebe271de05e6ba1343797321365bfdbfd3c311fc2c2d7bf17ef21b67b607030d4ec3390157b8af413ef539032436aaa8e70634168310b3a671a55b93c44c95e061d433ba1b7ed2b76893ad2eda2bfc133b4f18473e3b5f645612fe767e88318e010b240b70d3b854a6a71f55647592ab8510d8cb8ff30ada318c29d6d4f319a6cefe67148cf7558ecd8219e76a1a6be22c0832cfbd738e66e98ef24f38d212e7cb4bc8e2243e39b84f0fe77a11d1454c28acdd0072aedfa6e51a9506c49e7bda7f7601c8213ccdbce35df0cad7e78f3d069e8084c0568441780b8e6c8ceb7fd66a7c162cf0a42ace1903a8d82d9f72060f803acb0dd4c3f071f8330d1c394831fbaa30e8ebd333574c0ca7eeda7a68434ececb32811153dcfbe8f584ab077b05f82dcefab4bc89b452f59308caee310c5a002027f9d32609fbfdabaac16a37edadeaf9cfca08c29edd9a6483652da3f564b75de92def158ecd62256a13f06bd6f529bb62ca7a23b500f4a63e17bc3c83646d7dd98bbb32ffe1355e5fda943cb2d8fcb0049c3d1db639821892be08d8916a728d18f02724ad69750eb888dc0fb246f3bd920ad34ff42323d273529b35d319ddd2b401e54eff7bd1bc2f52c42069ea200bd52f9dd28ff2fc39c9890ff5942c29392c645f59126a17450cf4314a9ce7f5a957f7784586409d89286a354a5681f8efe86bcf9404656bda9bbfd84145be722f58b9993c047352b20d89ff31bb69ee695fcd2364a22e613103f40fc1bc78e9dd1748096274df3c677d442bed71cea75d96a9aaab92caa8307a6a96e6c5264d856983c5ee01f935f3aac1ce6f3c2bb0195a4798199c8427017f302afd9fd7e68563dfe802590830836bb611b04faa1725d790467b92a72c6c5c451ab98b56ad7ed5822b0c71e51a387296754d13b90d1333255fe38f5b8525ecdf43f94a659e3ca887d2ee9d4106a3e8d484ef3af15f3afbcd5a47a60711aa50fb941936ee4dd94397ba49e5a68b2720a4f56fb58ac2eb8bc82a68141c1cc31ebca2a6c492934dc623b9de26a4740ebf17601366952ab556cb85df2f1542ecc20a8d2d15a24adb1426a577e3044ce5ec6cf52469e29b8291f78940212f1859869bf5d9a1216ba68a9c9ae047f01f2c18fb833cd85af96e9d6ddc5ada705d98f458b40247edd4d45e4ad468b49663805e09ecacf6556108933e47b65ffa3c330fd40a005ad66c99053d7aff65a92c15ebe9987e4c5ea319167523c4fe420db53e632117a86d7901da8419fade984a25274a7617039b86c578a8b834f86f90b509ecce62eb0eb2ccdd4be7eeb119c0189b1a83495e01c3876a979d61ac0f7660b7e9405be454acb20575e11f58aabd5fb20d38178da46c17550edaaa3b2af4eb01b4e1a838a23ac787c8d5e0919634bf7117953401471fac4dfd4867379bb33c878b27125a5a52bcc03a1b8a0252f7b64f5d305046e3750edd096594e3b4c07c38a08d6f1e99ee60b23fca19331d68d1e286919a05da6a980ad9f5bd5a5f451c204a361024cdf4516615b3629b7809760329a31a9440ddbd301dded8de2060ff30365b225b7884b9b22c6a5c39a2ac39bd0f05b56a493fcc6638922d1dd6da2009ebbb54e7262bba511fe798a43ab97af96a50a2d65fcb0fab853fbcb586c8b49fbe314b4d5110e0493e86ba2e3e633b86d85bfa8eab280d1475658472e82b3f48c6182321348727675299f679ec82d216c9998ff5fb8a74524be173c685071994dcc6c37e2b1331a9800b4c9f456377717702056145b57decd7ac654c16cc119ec500ef99af73c82410ebe5b83e3f9c010c7a5213a9955e7a1a71b181140d48a1d376774e84bcb8a687535b3b7eebe1213e1032e9d1857a38dc97ee255fe0779e853d562c991820cbc4a81c51ce5df433805d9cb54f834b1cfbe4d277de64cb709056b8ccef1be1e3e585b1ed1b065d5c356ab504f70b26b14b7c9b7b41fc22d5b2d8b6d6d5ffba58f128da2d2d02f32b9d2883afe094c9283d7ac218f1d3add3bd6ca890ab24194a8fedf443190726ce7c6b37a0ae59a41e90f4d6b46a61631f80d8b6d0eb442d3a9f74cb2d9efe0728e1345471d45d9d9c8b27983877a1c14547d141ed6efd55087c36b01c00aa2e541ae3ca5ef4f09bda51b503bc200a6d544fd9ed14140292b9c4c65d7f0c3f673c221e6ee15d36ee5fc18297e52e9ef77541686eb6b06b9ac45b39da5c3e73bf55e9fb042baaac11c771318e763069eda602d648d524990d331ebd29745a1f619f23b94e9d4c35661e143befb804fae58f5aa2a7f7080c53753875f7357f84b418b0f09d9c31fdf8fb497a7976bd974f0de994794ee367bd568b54bfa8e413dea9774cde81317dfa944eae73296249234d51ad4d5194320adedb90063a1277e6d776d800e96e6864272958bc14b418476d199ec6b025681bd088ed2e7950942e72254642f000b7aa65dcbc82a207cf07e2d4362b8aad8ebebd7423cbd2e1e29b3ba5eaa791b87ea8da3838ec46d4b539ec9556311b7fd549ca511be3321f6b8135b04a68983c2127082f5939459a4b782d44453fa368749e40e9b7fc747800b5c11ed16e5a3134bdd6b5def05f6348089c1cad692f3edc45a1c2bdd0c3e9a7eb64a818478e9a9285e4df73f940407bbe36a01352fe1104697709f9e41df7a10bf1f9bcb6518c66767df6fa070b32b836879f383f2258fa94804ea4b5f8529ec87d2e2c7e4ac45d9089ee698a1f995bb263e6cd6977a96239cf4c6af03187668cb3aafe629ce4ef5f06c3be17e4aeddf8772e2f94e005504c49bcdb45d72b11747cc7ce93bdbb4c19574d146870757379e14adc1d28efcb00ab8ea6e9bfa4faea951b67d60c2f66b6ec28463cbda69fc658a84e7b52c5c1c938c82c8c054e0b73b657cd06df7523f3dabf37c05da3727b021e671b53dc696bb67cea76d83391645951a8b704010611296881f074163955fda250cecd57963d3a0d75eb010991ac237fe70c5e2fcaa6a756d66a00de470c2b4e952c5b912d5c5aab3ce3057fa7b7d0450ef4a0250f542b0991df02bcef165d5a586376bd172ad1a7c156357ef20e20829353d9ce6ab205c1cd2af6523044db53670192e3d190af4707ede42f0aead61d256ab5ad0f805dfb2c13053c6ce5e75652e57a993864977cbae3876952f6a967bbcbd6edfe4b95c43641f37e7a2f5e01411d8715689294ac0ccd4c94542ce12e295d5ea6ea6f5f49f1d05c08d8484c4258c97a4e3a35927c3e704f258d673d30a937e9cb29f8e2818431401d85689d451e7d2c4780f48cc7eda110e1d1e4a05861671c0b76cf38730f9c7e973b84488f7d335492bfb3955d3454d266b174fbe859f2774c00707562f9bccfc6438e3179b1027c33699507b34a08797c5f7ccc65a72d588cb8357ba3e4728d50e7d4fc1574b26d24c3404de30616471362b0352eb8b2a4ab7aede0b0a810b98d878e2acdebc292a6140c84c3929104ae3da4ece39af59c3569b6602340582e6fdd318af960138bba16868a47df4a1aa6385eefa40ca471d11fb66b8173c6163fafea95e1a6de14c1727e8a4a8a3ea48236e74d7a7f9be1e4b5f2710e361c66a846b803be979106b0d0b9abca4a2367b2958be34aa4e5ae69ad31094094132f2d2e04856cc5993d4a1773b5cdd76b6c5181f2205be8dc287860e84191305e26946bb33f7c658a56d71c224def5ccf317981d0afb0658952cb599bebdb89e1fb622d1a1d4a63bcb84915394891ef0f0acb49f9d60e808077902734543f7397bbfbe7619b3370fb09c1e87eb2661abcb62ec54136a4dc88b36345fcb8dfd37a2c8069605285ed861a4ae8a4fb66abb91a4b39ab0e01da49f26d5ccb635b3d936f5bba68e3820ff696b981c461ad0655d7d617bd7699ee10489b1e41801c16e20709cc95b948177351890be15e2cd7b945184dc06d293570ac8f73883057757080e4d7024ab48c127fb375653988ec1a3b61832cc539294d4e06312ea4d7ed5f5fc4988cd246301f8ee6de34adb4341b8c7213c77c3128ac773b95bd47ec0fcae9d680e00361796ff1910b05944e6e8ce27ac14ce158d9c42131467b7c3fcfa8d809c1de12f879efd78cf0ec181a5bd91788d95a4ab6724d77e231f7caccd32f2c8023d73ee47bacd80894a40c31e094898de087b9fc9a9d06808120e1b1f29953f1b30dd0a3e8312b7326db49ed24a5d0edf55558bc7864d21acb5e17e5136b7f5dd96b24bf04467d5bf2547ebd63b70fbec876ce9aaf68735eeefd68462f93a6cfab13d2fb5c5b351beb6c2486326df579b9f1b471fabc2ecc66eca2064d8146cc96689e58fbc826c08c085bd2e87a2ece89b3f5d5ba1847e979e58889e10a7a18931e16354ca507549ccb768411f7f598238820eeeaa1f09e9d39b6218a5a5b2c6cb9b9131f3d6de9aa1ff7c21ab45d10cdce6a82fd5b44a7838c03ca6ac5252922c4fb78f9d07501eae235b663276b7d95a518c7ee284974ce0a3cac2d7af6359d5eb7104fbf978f65e7c592383f80be82543327c0a41538e0d6453c800728f54110042f86e17422a2cf004e813412e5c252ce363d3afc750f02b6d3df2017fdf8029fbc6930ade74403f006f41e36b957af79a54f8be6a4904693f2551fa2f71063aa4f95b92a6bdd916382f2d5b26c00e1c8bf841fce7b08943bf8005efe5eda1c87a1f80507177152434dbf67dc7077a47a6892ee35738bff53897647c5d9276d3605cc50d1d9addb829edfb8e091d619b80445854015962ce79d7628f1c22decc038624c2afc7ffb668ddacf6298ecc9e2ee93bbbce171ea777d42ab9924230882e6957d1eba1ccd14efe49626b855f80e14b637e6b6309fca1315b2fc03fa77eb58e76d0f17a96bbe70c7a9fd1a0d099fdfbcb6eb2d4cadd3d55d1206019e95c5ac97b245203e7524b3c97281fa322278dde3b822ba9e1efedff7693dd4b3d55b381604c7fd61271d02acf6b8e14842c91209d122dfef0ed0c32610ae6a909693e55217947b589c888496eead838eda5044dc9c39ab8cbf53562c56c76579d195a0e0af82e556527160add13ce3b432c90006ca2fc275894766b92ec5a5ebac538ebf004a27d80abcb73085f69e4ff5f7e56e4fafc0d70611b22276789bb5a905045f8aa12b81cab319fb7b92abb3e25ecaf4910"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "c48e9cdbd5ff7617a12e828ee3d0eed6698af955"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1fdf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x11b4}, 0x1, 0x0, 0x0, 0x44000}, 0x80) (async) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000001940), &(0x7f0000001980)='./file0\x00', 0x8, 0x0) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000019c0)=0x1000, 0x4) statx(r1, &(0x7f0000001a00)='./file0\x00', 0x0, 0x100, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r9) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001b40)=0x0) (async, rerun: 64) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001b80)=0x0) (rerun: 64) kcmp$KCMP_EPOLL_TFD(r10, r11, 0x7, r1, &(0x7f0000001bc0)={r5, r1, 0x2f}) 1m20.310210243s ago: executing program 1 (id=34): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="ed129a93b8cf4746fd3475756f9d20ff09390d3e9feb7567844b444a384054cd563eb0d557f2387292cb22b4c7eb7fd4348f6e6f4f2d523a3f0f383720", 0x3d}], 0x1}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x1e4, 0x1, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x98, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40084}, 0x48040) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x1cb) close(r3) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f0000000200)="7ec08af8d9666da2339bd7505d822e4a695e4d0ffe919cf2b31b08267e34498f841ca7e42b4312997d1b7a866774765d12236805ca9fa49cc4f62cfb2893", &(0x7f0000000240)=""/120}, 0x20) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 1m20.305056443s ago: executing program 32 (id=34): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="ed129a93b8cf4746fd3475756f9d20ff09390d3e9feb7567844b444a384054cd563eb0d557f2387292cb22b4c7eb7fd4348f6e6f4f2d523a3f0f383720", 0x3d}], 0x1}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x1e4, 0x1, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x98, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40084}, 0x48040) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x1cb) close(r3) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f0000000200)="7ec08af8d9666da2339bd7505d822e4a695e4d0ffe919cf2b31b08267e34498f841ca7e42b4312997d1b7a866774765d12236805ca9fa49cc4f62cfb2893", &(0x7f0000000240)=""/120}, 0x20) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 1m20.296097284s ago: executing program 2 (id=36): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x4, 0x38, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) munlockall() mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) (async) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x4, 0x38, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) munlockall() (async) 1m20.178420241s ago: executing program 2 (id=39): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000dc0)={0x124, 0x0, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0xa000}, 0x2004c001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000074f000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x11, 0x80803, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000200), 0xad}, 0x40408c4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x200000, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x108200c, 0x0, 0x1, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)={0x504, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1c, 0xfa, "e13afac1a207e54ddec8c9d2824a4fe59a3d0a19c09f8bb2"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "e31ea159ef83"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "6d59be7a5824"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf9be}, @NL80211_ATTR_FILS_ERP_REALM={0x4c, 0xfa, "18779527a34ebd6c32cd5f128e010c10375213892e7b4e5cae362553b75c543e6cdb74d2ab51af72db7a6e2c52ada5bc1153987cbc3f61e6251d9a410c75f20211e44f63652a2c66"}], @NL80211_ATTR_IE={0x60, 0x2a, [@tim={0x5, 0x19, {0x3, 0x99, 0x2, "f1dd231fd933729b7dcef39c05bb67c4da439a7cfa3c"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0xf, @device_a, 0x5dc, @value=@broadcast, 0x2, 0x10, @device_a, 0x696}}, @mic={0x8c, 0x18, {0x321, "a0e0bca17057", @long="fcbbb710e6ddb370356a4f65b25d6eb9"}}]}, @NL80211_ATTR_IE={0x53, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x3, 0x40}}, @mic={0x8c, 0x18, {0x95c, "398cd131c56b", @long="cec471443fa1942b58231902851d3d39"}}, @gcr_ga={0xbd, 0x6}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x0, 0x0, {0x80000001, 0x198d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x7, 0x7}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x100, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x7f, 0xfa, "e0b23fe986a51466ec595a2de0f970ae761b77719bab354dd480b6eacba88132db709272fe1fae9f37238177eff4f64c4299dfbef9da5e2cd017f47a1c149b22df9973499a3c91911b465af6395fa9b2950c2a867f17e6c9ac0eda1ac6b06ffffae9429e9b2e07b7023119663d5130a616fdd5641cb13bb58dcb04"}], @NL80211_ATTR_IE={0x21d, 0x2a, [@prep={0x83, 0x1f, {{}, 0x3, 0x4, @broadcast, 0x0, @void, 0x0, 0x1, @broadcast, 0x68f}}, @rann={0x7e, 0x15, {{0x1}, 0x8, 0x2, @device_b, 0xffff, 0x8, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mic={0x8c, 0x18, {0x822, "97f7b3365a15", @long="3044b74edaaea9f673f6d875275589e4"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x7, 0x8, @device_a, 0xc, 0x3, 0x1077}}, @fast_bss_trans={0x37, 0xdf, {0x7, 0x7, "8a452f1ea5f560644c65c47a37525d77", "82388e0fc260154a9c8c922b32323fc96146697f15329abb488f080ec6d2136c", "ad718e9709b978f2142a747a94cc5b4ea099b9d9dac82f047ccfa02f85c244b2", [{0x4, 0x9, "9f586e3803a871de77"}, {0x3, 0x14, "62fe52b6bbd48e1fa1be2122322b8070c0816159"}, {0x2, 0x13, "6b807e6d7f438cbe19e011615a64214ad2072b"}, {0x1, 0x1a, "1d82031245403cd93d0ba5d4edeb09e0251bfd4dd1a699890d43"}, {0x4, 0x1, 'F'}, {0x3, 0x12, "eaf146e2fde96685a261590feab592781884"}, {0x4, 0x22, "4e8b258ed9d093e9d659aefaa5876cb87f87beb3d5ebd58e2c389f75887dccc54ae7"}]}}, @tim={0x5, 0xb2, {0x7, 0xe8, 0x7, "beefbc5d7b7418de0715b7b07ca98aa6845256f8884d135ee8f2379a7163c2a090f205670683ed6d3990c594d785aeaa11c2f8c064609891d9c8f0fe1d03727238382c32dd079dae8e97e3c67a5bedc89c69ac998e484cefd47a98f881cce4c18d9a4600793f1d4562cf512d46cb4e656ac10c1a7194751b122bc898b651f0e90401358500a23c3282a64c46850e5fd109fb2be61955b41367bd36c8d14ac67d4460cb8bcc85c9a683b97098dfa8ca"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @cf={0x4, 0x6, {0x8, 0xc, 0x41d, 0xa}}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@chsw_timing={0x68, 0x4, {0x3, 0x5}}, @mesh_id={0x72, 0x6}]}]}, 0x504}, 0x1, 0x0, 0x0, 0x10}, 0x54) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) 1m19.465429602s ago: executing program 2 (id=47): io_setup(0x83, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0x0, 0x2]}}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1182, 0x9b) r5 = inotify_init() r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0xd302) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1453, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) ftruncate(0xffffffffffffffff, 0x2000009) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r10 = eventfd2(0x5, 0x1) fcntl$F_SET_FILE_RW_HINT(r10, 0x40e, &(0x7f0000000000)=0x3) 1m19.043059547s ago: executing program 2 (id=49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa0040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0xa002) ioctl$BLKPBSZGET(r2, 0x127b, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 1m19.038532067s ago: executing program 33 (id=49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa0040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0xa002) ioctl$BLKPBSZGET(r2, 0x127b, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) 14.477853427s ago: executing program 5 (id=234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000000000000007112099fffffff0095000000000000009f9e77be48a88544b84488096d1f6ff1a43d5a447439547ef25ac324be3f7a3dbe47f2c1c5a98760a0235dbdd0f26d9cfb88d800a614313037ae41427fa27d262aaffdd884bb3b927cf3249297c02ff14fbbb7b1814b44299296e94946e2644162c6b89bb78c6d3cb29097f25ba8a07f7afbc6864a9a6c1dcb8a13411b1b33945cca2255f2f2782517034b723c708a6290915e118d4606fb10"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 14.454294228s ago: executing program 5 (id=235): r0 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) timerfd_create(0x2, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="c50f29bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x5, 0x2, 0xfffffff7}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0xe, 0xc18, 0x5932}}}}}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000340)="09000000e71414ffec007e7bfbc0fd3d8ee6e0c55ff7bbb2f7", 0x19, 0x48011, &(0x7f0000000100)={0x11, 0x7, r7, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, &(0x7f0000000040)={0x2c, 0x17, 0x0, 0x36, r8}, 0x10) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x16f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xe3b}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts={{0x18, 0x29, 0x32, {0x2e}}}], 0x18}}], 0x2, 0x0) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000001c0)=0xf) (async) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$TCFLSH(r10, 0x400455c8, 0x4) 13.855268793s ago: executing program 5 (id=240): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080), 0x1, 0x451, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x141) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) lseek(r0, 0x9, 0x4) getdents64(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x82900, 0x0) socket(0x10, 0x803, 0x0) unshare(0x2040400) r1 = getpid() syz_pidfd_open(r1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x600000000000000, 0x0, 0x4000}, 0x0) 13.756563518s ago: executing program 5 (id=241): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080), 0x1, 0x451, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x141) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x7970}}], [], 0x6b}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) lseek(r0, 0x9, 0x4) getdents64(r0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82900, 0x0) socket(0x10, 0x803, 0x0) unshare(0x22020600) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x9f, 0x0) write$binfmt_aout(r0, &(0x7f0000000f80)={{0xcc, 0x1, 0x7, 0x275, 0xe3, 0x2e42, 0x29, 0x7}, "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", ['\x00', '\x00', '\x00']}, 0x1320) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"2dd16e7eadb9f32073e08573fa16b46b", 0x0, 0x0, {0x9, 0x8}, {0xffffffff, 0x8001}, 0x9, [0x3, 0xffffffffffffb9bb, 0x7, 0x8, 0x54, 0x0, 0x5, 0x0, 0x1000, 0x3, 0x1, 0x6, 0x54, 0x3, 0x400, 0x5]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000022c0)={{r4}, r6, 0xc, @unused=[0x9, 0x6, 0x2, 0x7], @subvolid=0xc480}) unshare(0x2040400) r7 = getpid() syz_pidfd_open(r7, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 13.588584908s ago: executing program 5 (id=242): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="280000002d000100000000000000000008000c00", @ANYRES32=0x0, @ANYBLOB="1000008008006500", @ANYRES64, @ANYBLOB="722b26bf5f13750c8f3e7a17710a6faf4b4f914c456e0593e5c09f02d0ed5ca68fad493e82a6f93e04733373"], 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) io_setup(0x82, &(0x7f0000000240)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) inotify_init1(0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1000, r1, &(0x7f0000000040)="e02792f8bbf1f9f753e40e48ae5ec4a431b856f07f507d4e395a20742a4e9a2b9e5efa9b356c4a92931a4ffea754ecf22a8b89cb5669a3cf03b446407735bd364ebdfd388905fe40dc8f12d3f2172590e4a622e3a6b17b50e529c6b5d8c47f71fe527aacc055bb72e0a8097d9af14155d5037e0653f7692683c628ccf29bb5d893755e1d505c25fab396019dd7842ef7cf980084fcce", 0x96, 0x6, 0x0, 0x0, r1}]) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x87, 0xa7, 0x0, 0x40, 0x3f0, 0x307, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0x17, 0x0, 0x2, 0x44, 0xb1, 0xb6, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xfe}}]}}]}}]}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x39) fcntl$getflags(r2, 0x40a) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0xffffffff, @loopback, 0x3}, 0x1c) sendmsg(r2, &(0x7f0000000140)={0x0, 0x50, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 13.010958972s ago: executing program 5 (id=245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000030000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) 12.603925025s ago: executing program 34 (id=245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000030000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) 4.295387349s ago: executing program 7 (id=311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00>@,', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e2000000006ff02000000000000000000000000000100000000200002000a004e2300000000fc0000000000000000000000000000000e0000000d0001007564703a73797a3200000000"], 0x6c}}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x923004, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000004000000a68d00002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r6}, 0x20) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xaa5f248a237e25c8, 0x0, &(0x7f00000010c0)=0xffffffffffffff05) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x9, 0x200200000006, 0x3, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000006, 0x8000000000005, 0x800840064], 0xdddd1000, 0x547d1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) 4.161714127s ago: executing program 7 (id=312): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') lseek(r0, 0x8001, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) pipe2(0x0, 0x5e9a320a34750cf) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x18, 0x8, 0x40, 0x40, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000580), 0x1000, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r7, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 3.093723259s ago: executing program 7 (id=314): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf0500000000000f3d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 2.991719895s ago: executing program 6 (id=316): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080), 0x1, 0x451, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x141) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) lseek(r0, 0x9, 0x4) getdents64(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x82900, 0x0) socket(0x10, 0x803, 0x0) unshare(0x2040400) r1 = getpid() syz_pidfd_open(r1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x1800}, 0x0) 2.991541635s ago: executing program 4 (id=317): getgroups(0x2, &(0x7f00000026c0)=[0x0, 0x0]) setresgid(r0, 0x0, r0) setreuid(0x0, 0xee01) setgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000006111aaff00000000182a0000", @ANYRES32=0x1, @ANYBLOB="00000000ff0301001830001f1a00000000262000000000000000950000000400"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 2.91514622s ago: executing program 4 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 2.523744663s ago: executing program 0 (id=319): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf6700cddf000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d00000021000000008a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe320fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6420ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6ad62934782cc308e936d7637e07c201282bbbed84a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbefc18f77700372471609e2c443e84ee5e9a5178f90512df04f3a0909c96632ae20c68c62b06e9fdc2977dfef1ced97b70263fc81c30f1354b319fe9d59d3101c4ee7375ff8673de5caff9e6ee73ccae77d1bf8f22330e8840af1ded6d5be627f7f87d5b12a2d6317825d77bef85313f541dcc4ff13f413db34d5da05648590a1685031e6955d4352bf0b7efd0b0a1e636b8aa4963d9f67de5ba91d501418bbeaac09bdd1059f3c3159e5900"/2282], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.474898815s ago: executing program 6 (id=320): r0 = syz_open_dev$evdev(&(0x7f00000005c0), 0x7, 0x4000) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000600)=[0xe, 0xffffdefb]) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x39, '\x00', r2}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRESOCT], 0x44}}, 0x4000000) close(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000700000000000000df250000000065738ee808e1405fa0afdca9040000008825dd04f12ae114798068c046c755aa08eb7532306aa1e06d4eebff7a521265c1b88e403eb980d80a5d79fda4a8c7854d83b3594bc1155f4cccaf8c6176f66f6e5a", @ANYRES32=r2, @ANYBLOB="570da800a65a0200"], 0x20}}, 0x2000e844) socket$packet(0x11, 0x2, 0x300) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08dd52f373953f89643d", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES64=r3], 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000580)="36f465ec0f64580f66b8010000000f01c1b878008ed80f07b89d008ee866b9100000400f3266b91e0900000f32260f21ba", 0x31}], 0x1, 0x37, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000640)={0x6, 0x0, [{0x80000019, 0x7fffffff, 0x5, 0x1b}, {0x40000000, 0x7, 0x77, 0x401, 0x2}, {0x40000001, 0x800, 0x8, 0x9, 0xf6}, {0xa456374fd2e90f36, 0xfffffffb, 0xfff, 0x29, 0x2}, {0x7, 0xe, 0xc9ec, 0x2, 0x7f}, {0x40000001, 0xc28, 0x9, 0x0, 0x80000000}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000340), 0x2000000006, 0x2002) write$evdev(r8, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) 2.474735975s ago: executing program 0 (id=321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5006}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}}, 0x40) syz_extract_tcp_res(&(0x7f0000000080), 0x3, 0x6) write$tun(r1, &(0x7f0000000400)={@void, @val={0x1, 0x83, 0x8, 0xe055, 0x19, 0xc}, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x6, 0x0, 0x3}, {0x8100, 0x4, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x8, 0x6, "15ee22", 0x14, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x2, 0x0, 0x690b}}}}}}}}, 0x5c) 2.242777759s ago: executing program 6 (id=322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1000001, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX], 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) write(r2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10c00, &(0x7f0000000100)=ANY=[], 0x3, 0x150f, &(0x7f0000000780)="$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") r5 = syz_open_dev$vcsn(&(0x7f0000000100), 0x4000000000000000, 0x40040) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x2, 0x4}, 0xc) rmdir(&(0x7f0000001d80)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x535b01, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40086610, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x17, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, [@ldst={0x3, 0x2, 0x4, 0x4, 0x4, 0x50, 0x4}, @call={0x85, 0x0, 0x0, 0x86}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x1, 0x0, 0xb, 0x3, 0x4, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x5d, &(0x7f0000000500)=""/93, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x34, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x10000}, 0xc) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f00000034c0)={0x2020}, 0xcac) r12 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) timer_create(0x8, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r13, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}}, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x200004, &(0x7f00000003c0)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x7f}}]}) r14 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, &(0x7f0000000040)={0xc, r12, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x3, 0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001000000000000001040000185800000f0000000000000000000000b7080000000000007b8af8ff00000000b7080000ff0f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000001811b8ba", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018240000", @ANYRES32=r7, @ANYBLOB="000000000200000018410000ffffffff0000000000000000dd60a0ff01000000850000002d000000183000000100000000000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x52, &(0x7f0000000300)=""/82, 0x40f00, 0x10, '\x00', 0x0, @sched_cls=0x2f, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x7, 0x6}, 0x10, 0xffffffffffffffff, r8, 0x3, &(0x7f0000000700)=[r9, r10, r11, r4], &(0x7f0000000740)=[{0x3, 0x4, 0x6, 0xa}, {0x2, 0x5, 0xc, 0xa}, {0x2, 0x4, 0x1, 0x3}], 0x10, 0x1ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.2256263s ago: executing program 0 (id=323): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r5, 0x5) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'pimreg1\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x0, 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'gretap0\x00', 0x600}) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.143039715s ago: executing program 7 (id=324): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000200000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) 1.830083023s ago: executing program 4 (id=325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0xffffffffffffff80, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e24, 0x4ffff, @loopback, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c6accc9a5675b5f006e4a74657200000000000000000000000500000000000000200000000000000003004025cf96f2"], &(0x7f0000000bc0)=0x2c) 1.820303223s ago: executing program 7 (id=326): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000711209008300000095000000000000009f9e77be48a88544b84488096d1f6ff1a43d5a447439547ef25ac324be3f7a3dbe47f2c1c5a98760a0235dbdd0f26d9cfb88d800a614313037ae41427fa27d262aaffdd884bb3b927cf3249297c02ff14fbbb7b1814b44299296e94946e2644162c6b89bb78c6d3cb29097f25ba8a07f7afbc6864a9a6c1dcb8a13411b1b33945cca2255f2f2782517034b723c708a6290915e118d4606fb10"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.770945447s ago: executing program 4 (id=327): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'xfrm0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r4 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)="98"}) (fail_nth: 1) 1.770489677s ago: executing program 7 (id=328): timer_create(0x6, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect$uac1(0x2, 0x9d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@feature_unit={0x7, 0x24, 0x6, 0x0, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x101, 0x6, 0x8, 0x1000, 0x4, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x0, 0x9, {0x7, 0x25, 0x1, 0x2, 0xff, 0xc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x7, 0x3, "0000040000b400e924"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xc, 0x1006}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xc, 0x0, 0x9, {0x7, 0x25, 0x1, 0x3, 0x2, 0x81}}}}}}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=@ng={0x4, 0x8, "bf8b080f3caf26dc3ae70e8238"}, 0xf, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x2, 0x7fff0000}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f00005b6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.71814526s ago: executing program 6 (id=330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000001100000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) 1.446760795s ago: executing program 4 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 1.296769444s ago: executing program 6 (id=332): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000080)='./file0\x00', 0x1a00048, &(0x7f0000000180)={[{@shortname_win95}, {@uni_xlateno}, {@rodir}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@usefree}, {@rodir}, {@utf8no}, {@shortname_mixed}, {@utf8no}, {@shortname_win95}]}, 0x3, 0x350, &(0x7f0000000900)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000740)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@shortname_win95}, {@rodir}, {@utf8no}, {@shortname_winnt}, {@shortname_win95}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8}, {@numtail}, {@rodir}, {@shortname_lower}, {@utf8no}, {@rodir}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@utf8}, {@shortname_win95}]}, 0x1, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.276949765s ago: executing program 0 (id=334): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080), 0x1, 0x451, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x141) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) lseek(r0, 0x9, 0x4) getdents64(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x82900, 0x0) socket(0x10, 0x803, 0x0) unshare(0x2040400) r1 = getpid() syz_pidfd_open(r1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x600) 950.859664ms ago: executing program 0 (id=335): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r5, 0x5) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'pimreg1\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x0, 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'gretap0\x00', 0x600}) syz_open_dev$tty1(0xc, 0x4, 0x1) 855.65278ms ago: executing program 6 (id=336): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r5, 0x5) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x0, 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'gretap0\x00', 0x600}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r6, 0x5608) 640.310262ms ago: executing program 3 (id=337): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000200000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) 515.00508ms ago: executing program 3 (id=338): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001002bbd70001000ff03ac1414bb000000000000000000000000fe8004000000000000000000000000aa00000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500000000000000002b0000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa00000000000000000000000000000000320000000a000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000002b00"], 0x23c}}, 0x0) 514.71132ms ago: executing program 3 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0100000004000000060000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002a40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r2, 0x5, &(0x7f0000000180)=0xfc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd66}}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) r5 = syz_open_dev$evdev(&(0x7f0000000400), 0x38c4, 0x343300) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000480)=""/204) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000011100100180012800e00010069703665727370616e000000040002800a00010000000000000000009d88f37de6eb49d7b70514970444249d56f2e6792b1fb253a0879e38901246b763c2a9312a6efb499ae3bfa0fc34ee35da5cb912f8ce59bfa9990ca953a448d5f709178abc9727de159cc6e7f13d04e9398e9e0ebfb6a389bd7bd3e6dd8fdac09c0d970746"], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="4801000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r8], 0x148}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 514.50404ms ago: executing program 3 (id=340): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/19, 0x13, 0x1, 0x7}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}], 0x20, 0x40044}}], 0x1, 0x4) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x800, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x28000, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize}], [{@context={'context', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, r7}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'lazytime'}}, {@obj_user={'obj_user', 0x3d, ',(\xdc'}}, {@permit_directio}]}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000000c0)={[{@abort}, {@noblock_validity}, {@discard}, {@errors_remount}, {@journal_path={'journal_path', 0x3d, './file0'}, 0x0}, {@jqfmt_vfsold}, {@mblk_io_submit}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xffffffffffffffff}}, {@usrjquota}, {@journal_async_commit}, {@journal_async_commit}, {@dax}, {@jqfmt_vfsv1}, {}, {@noquota}, {@lazytime}], [{@obj_role={'obj_role', 0x3d, 'q\xd2\xf1\x86\x02\xe0E(\xf8N\xab\x03xuq\xddx\xc1\xff\xacp\x7f\xf4\xa8\xed\xb5\xa9\xb6\xdb\x1b\xce\xdd\'\x03~6\xcb&3\x13h\x97\xcb[Ay\x95I\xf2\xdf\xdd\xff\xff\xff\xff\xff\xff\xff\xff\x1fK0\tJ\x00\x98J\x80\x16I5n}\x18\'PN\xdb\t\xfc\xd6\x0f\xad\x17\xe0\xc7\xee+\xb2\x18\x02\x00\x00\x00\x00\x00\x00\x00\xa3'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}], 0x2c}, 0x1, 0x50a, &(0x7f0000000e40)="$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") 206.167057ms ago: executing program 4 (id=341): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000183d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 108.015363ms ago: executing program 3 (id=342): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000007a00480000000000180000000000000000000000000000009500000000000000d50a0000000000009500060000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) 46.597776ms ago: executing program 3 (id=343): syz_mount_image$erofs(&(0x7f0000000440), &(0x7f0000000180)='./file0\x00', 0x10410, &(0x7f0000000480)=ANY=[], 0x1, 0x1ed, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000005c0)={0x1dcc, 0x10100002000001, 0x0, 0x5}) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r3, 0x0, 0x0, 0xffffffc0, 0x10000) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async, rerun: 64) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1182, 0x9b) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x400017e) ftruncate(r7, 0x2000009) write(r6, &(0x7f0000004200)='t', 0x1) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x316, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x28, 0x90, 0x1a, 0x8, 0xaf0, 0x6050, 0x3b92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x304, 0x1, 0x10, 0x76, 0xe0, 0x88, [{{0x9, 0x4, 0xde, 0x7, 0x7, 0x5f, 0xe, 0x7e, 0x40, [@uac_as, @uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x80, 0x3, 0x80, 0x9, "80cd"}, @as_header={0x7, 0x24, 0x1, 0x20, 0x10, 0x5}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x6721, 0x9, "b272823d7560e0"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xfc, 0x2, 0x3, 0x7, "87"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4, 0x4, 0x4, 0x8, "565eeb7d201b"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x4, 0x45, 0x80, "e3fcf78ec4a0cd"}]}], [{{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x3, 0x9, 0x40}}, {{0x9, 0x5, 0xc, 0x0, 0x208, 0xa7, 0x1, 0x81, [@generic={0xd1, 0xf, "31a532b15c8195b4e0158f5d89925334853f400f398640868ecb12092060f2aee61ba2036690703f7c2054d07a687774664e794ffb91431e6e2e6046d62f603caa494dade1c351173c139989c98eae62f81a68a99932896ce196075e525c03cd7232fca01c1b837f3194a4c97f7cd972fa4a9137ac01bb0cdeed52b00f2dc63ab4c0cce222c71af71199e72e0c12eea50a16fa08e627404f199f4e1a2b75f5e1a6e11f308c3d5003db011b0b1ec7931a1de172c279905e29f3350221f5065602baf71b53330cbca90cf7a540b361d0"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x4bc0}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x1, 0x3, 0xc, [@generic={0x7f, 0xe, "9ae8344b8ae56bab0ea6e679f615221ea7861622569f4bacf4ba12d66b25ae1eafbbaf3d4fcdd156a462aa107d192560af03de463105a2edabddcf13a2e3169bc86a6713c0c316cb801cd45c55689d22461c995f14ae358b5fbbfb0d8539edb5143ab0238e967ceb4ec390cbbb4529c41ba9ab8973f39115756dadfef6"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfff9}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xd, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x4f, 0xff, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xf, 0x7, 0x0, [@generic={0xf9, 0x19, "1830d304aee7e502eb3c63b29f64a1bf3c6486b8936e00b4fe2f0651c9313eccd0f884ff40371f50973cd3c9cfec9c95182aa3331d64eba6912b6ec2e33603c21b7475a5d28f84d78d1e7a1d3d432cc542de13e0d4271dd3bf0a02c3f10fedf96fbdf181cfc68638c1f28dbdb9e5078f0e070aeb670e8ed36db05c8dcd446c23843a7fe8d67b9c85e15fb44e88f0edeb74442961798cef823b35a3823853f38d46411dc73e07f613a48638f7b33b937f5e139441fcc567d840465d17ffdb497fb2cbc376812de6ea80a0ef093126dd2f75d14a9c268d40dfbfba0366a37e8801992ef3e2b506ebe75354ee5ddf9308896b62cea02bd12d"}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x8, 0x3, 0x8, 0xff, 0x7}, 0x3e, &(0x7f0000000200)={0x5, 0xf, 0x3e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x9, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa5, 0xd5, 0x81, 0x2, 0x84}, @ss_container_id={0x14, 0x10, 0x4, 0xc5, "185fba7a550c2f81074c50e25a94165b"}, @ssp_cap={0x10, 0x10, 0xa, 0xd, 0x1, 0x0, 0xff08, 0x7, [0xff0000]}, @ptm_cap={0x3}]}, 0xa, [{0x94, &(0x7f0000000300)=@string={0x94, 0x3, "7391a696fa47df4ea9ad496cc7ef45d36d0b9d99cf3c9bb57d1f23ea6e935ee1b7403dbce5a390a42bd90233b0291fcafb15b4f9188831373d8e9d018d5f4c753a00388cce5d91f9bdbd8ba98d30eb497e9d778bbf836b5d05e21b6c573cd4ff8c3afd9d98eea987fbee17def850a9ab5ea921a3278386748077a50207bdde3e7fe1d0f518fa5c350c65e868e1f2c2143d8c"}}, {0x91, &(0x7f0000000940)=@string={0x91, 0x3, "5f12f222a41ff767e0da1598b3eb40d85e31f561de097b64a77031f40be2d36ff02fe27add6c4bbdd8041fad836f922d7724ce34041cedb2b74a9d864b4d902fc13f6ba1799667df2a177b951acb9356d3a4626d5bb54fb5cd8046a59a92bdb8a48b58fccb4bccbae2213f69dd7888c80ce394c2b9a783f5a690608b1554ebc9af152fe50a5e54acfeb9749aaca0d9"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x451}}, {0x2f, &(0x7f0000000480)=@string={0x2f, 0x3, "6577a7bbe900293d42e9aac42c10d93731e185c82e8d7ecdeb25d001b4d12f30c5279e85111dd69e54c567236d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x180a}}, {0xf5, &(0x7f0000000a00)=@string={0xf5, 0x3, "987ee859dbd23bd897747120ac01c15664bc0a2481bd07e369240cdc123bf74c3bbdd04fa2a746153f50e9dcc53140434a343a56755eb9a7bae73dfb1da9d0cf40c94ef9428713f8a68212695e191edb8459acfbd8174f073859e63b4c7ac41a0be62ba2eb1b64109da62b80da101d716b06e85dc8a1892e4d89958236e5c461e958056c966172f8a505d405b41b7d87e4d6846b38d0684a75525c3e968ce980aa1b959c55610ab69745d5f31500f78a7a20ba7f8bfebb158acf571a9ec98e96d3848514640ea441acd3c9615f8b5ef4b18037428a4b5583761175fe6099bdc9910becb155176fc487c6ad3ace7d4a21981e75"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x180a}}]}) (async) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1c, 0xa01, 0x0, 0x0, {0x4}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="04000000"]}]}, 0x1c}}, 0x0) (async) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) (async, rerun: 32) mknod(&(0x7f0000000000)='./bus\x00', 0x10, 0x79) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x2, 0x4000, 0x2000, &(0x7f0000ff8000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x1f, &(0x7f0000000000)=[@cr4={0x1, 0x340061}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=344): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002d000100000000000000000008000c00", @ANYRES32=0x0, @ANYBLOB="1000008008006500", @ANYRES32=0x0, @ANYBLOB="722b26bf5f13750c8f3e7a17710a6faf4b4f914c456e0593e5c09f02d0ed5ca68fad493e82a6f93e04733373"], 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0xffffffff, @loopback, 0x3}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r7, r9, 0x16, 0x0, @void}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0xf0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0xf}, {0xffff, 0x9}, {0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9fff8fef50000000000a2"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0xff, 0x9, 0x5}, {0x12, 0x2, 0x200, 0x401, 0x8001, 0x1404}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x4, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fff, 0xc}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4800) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000140)={0x0, 0x1, 0x8, r4, 0x2}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r13}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r13}, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r11, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): EV_CHANGE): vlan0: link becomes ready [ 21.890411][ T299] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.892154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.922116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.930443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.938570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.946944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.963223][ T276] device veth1_macvtap entered promiscuous mode [ 21.970901][ T275] device veth1_macvtap entered promiscuous mode [ 21.980752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.989858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.011055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.021303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.029960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.043128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.051730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.060581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.078556][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.087339][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.096026][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.107681][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.116829][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.125571][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.144117][ T309] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 22.274810][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.282235][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.329797][ T314] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 22.331826][ T334] netlink: 124 bytes leftover after parsing attributes in process `syz.3.9'. [ 22.356817][ T314] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 22.379060][ T314] F2FS-fs (loop2): invalid crc value [ 22.426050][ T314] F2FS-fs (loop2): Found nat_bits in checkpoint [ 22.471963][ T314] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 22.479023][ T314] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 22.575599][ T353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 22.585972][ T353] device vlan2 entered promiscuous mode [ 22.591724][ T353] device dummy0 entered promiscuous mode [ 23.626808][ T297] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.799926][ T363] mmap: syz.4.16 (363): VmData 17448960 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 23.862198][ T371] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 23.893092][ T371] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.17: invalid block [ 23.909171][ T371] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.17: invalid indirect mapped block 4294967295 (level 1) [ 23.909866][ T379] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.19: ea_inode with extended attributes [ 23.936709][ T371] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.17: invalid indirect mapped block 4294967295 (level 1) [ 23.950784][ T379] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.19: error while reading EA inode 11 err=-117 [ 23.963122][ T379] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2820: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 23.976182][ T379] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.19: ea_inode with extended attributes [ 23.989196][ T379] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.19: error while reading EA inode 11 err=-117 [ 23.989333][ T371] EXT4-fs (loop0): 2 truncates cleaned up [ 24.002421][ T379] EXT4-fs (loop4): 1 orphan inode deleted [ 24.013278][ T379] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,discard,prjquota,lazytime,init_itable=0x000000000000ffff,,errors=continue [ 24.030635][ T371] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000001007,dioread_nolock,bsdgroups,,errors=continue [ 24.060490][ T24] kauditd_printk_skb: 68 callbacks suppressed [ 24.060520][ T24] audit: type=1400 audit(1769483712.509:142): avc: denied { read } for pid=377 comm="syz.4.19" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 24.092530][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 24.100709][ T297] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.122143][ T297] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 24.130858][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 24.142513][ T297] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 24.152657][ T297] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 24.160979][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 24.163299][ T24] audit: type=1400 audit(1769483712.539:143): avc: denied { open } for pid=377 comm="syz.4.19" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 24.187921][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 24.194741][ T24] audit: type=1400 audit(1769483712.539:144): avc: denied { read write } for pid=382 comm="syz.1.20" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 24.226392][ T24] audit: type=1400 audit(1769483712.539:145): avc: denied { open } for pid=382 comm="syz.1.20" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 24.250788][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 24.259104][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 24.268842][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 24.278044][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 24.280144][ T24] audit: type=1400 audit(1769483712.539:146): avc: denied { ioctl } for pid=382 comm="syz.1.20" path="/dev/fuse" dev="devtmpfs" ino=90 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 24.310716][ T24] audit: type=1400 audit(1769483712.599:147): avc: denied { ioctl } for pid=377 comm="syz.4.19" path="/dev/usbmon0" dev="devtmpfs" ino=154 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 24.335841][ T24] audit: type=1400 audit(1769483712.739:148): avc: denied { relabelfrom } for pid=357 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 24.357304][ T24] audit: type=1400 audit(1769483712.739:149): avc: denied { relabelto } for pid=357 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 24.379831][ T297] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.389332][ T297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.398166][ T297] usb 4-1: Product: syz [ 24.402756][ T297] usb 4-1: Manufacturer: syz [ 24.407470][ T297] usb 4-1: SerialNumber: syz [ 24.407499][ T394] ====================================================== [ 24.407499][ T394] WARNING: the mand mount option is being deprecated and [ 24.407499][ T394] will be removed in v5.15! [ 24.407499][ T394] ====================================================== [ 24.458379][ T24] audit: type=1400 audit(1769483712.899:150): avc: denied { read write } for pid=395 comm="syz.2.23" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 24.482518][ T297] cdc_mbim 4-1:1.0: skipping garbage [ 24.492785][ T24] audit: type=1400 audit(1769483712.939:151): avc: denied { open } for pid=395 comm="syz.2.23" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 24.683880][ T347] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 24.816886][ T389] F2FS-fs (loop0): Test dummy encryption mode enabled [ 24.824754][ T389] F2FS-fs (loop0): invalid crc value [ 24.832934][ T389] F2FS-fs (loop0): Found nat_bits in checkpoint [ 24.854802][ T389] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 24.884996][ T389] netlink: 'syz.0.21': attribute type 5 has an invalid length. [ 24.920130][ T280] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.109134][ T415] Zero length message leads to an empty skb [ 25.298220][ T419] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.315951][ T280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.336631][ T280] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 25.341618][ T419] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 25.350219][ T280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.357110][ T419] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.27: inode has both inline data and extents flags [ 25.364044][ T347] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 25.378508][ T419] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.27: couldn't read orphan inode 15 (err -117) [ 25.387205][ T280] usb 5-1: config 0 descriptor?? [ 25.396740][ T419] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 25.436211][ T419] EXT4-fs error (device loop1): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.1.27: path /5/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 25.446198][ T431] tipc: Enabling of bearer rejected, failed to enable media [ 25.755347][ T275] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /5/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 25.777723][ T297] cdc_mbim 4-1:1.0: bind() failure [ 25.778006][ T275] EXT4-fs error (device loop1): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 25.783946][ T297] cdc_ncm 4-1:1.1: bind() failure [ 25.803163][ T275] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /5/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 25.829482][ T275] EXT4-fs error (device loop1): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 25.831325][ T437] EXT4-fs (loop2): Test dummy encryption mode enabled [ 25.850522][ T275] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /5/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 25.875234][ T437] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 25.883249][ T275] EXT4-fs error (device loop1): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 25.905466][ T275] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /5/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 25.905950][ T437] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 25.927160][ T275] EXT4-fs error (device loop1): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 25.935373][ T437] System zones: 0-5 [ 25.955394][ T275] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /5/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 25.959427][ T437] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,journal_ioprio=0x0000000000000002,test_dummy_encryption=v1,delalloc,nomblk_io_submit,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue [ 26.020944][ T280] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 26.029302][ T437] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 26.035054][ T280] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input4 [ 26.039403][ T437] capability: warning: `syz.2.31' uses deprecated v2 capabilities in a way that may be insecure [ 26.063753][ T5] usb 4-1: USB disconnect, device number 2 [ 26.113023][ T280] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 26.249630][ T456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61316 sclass=netlink_route_socket pid=456 comm=syz.0.37 [ 26.322979][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.330879][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.338698][ T457] device bridge_slave_0 entered promiscuous mode [ 26.345757][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.353036][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.360843][ T457] device bridge_slave_1 entered promiscuous mode [ 26.378887][ T467] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 26.387981][ T467] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.388411][ T472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 26.409453][ T472] device vlan2 entered promiscuous mode [ 26.415224][ T472] device dummy0 entered promiscuous mode [ 26.529434][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.536780][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.544167][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.551222][ T457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.583747][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.598818][ T479] incfs: Can't find or create .index dir in . [ 26.611007][ T392] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.633910][ T392] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.648878][ T479] incfs: mount failed -28 [ 26.655498][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.664784][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.673450][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.680645][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.698569][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.707102][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.715563][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.722946][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.731425][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.739744][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.861604][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.885906][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.011961][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.026724][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.036323][ T279] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /8/file1/lost+found: directory fails checksum at offset 1024 [ 27.054635][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.055592][ T279] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /8/file1/lost+found: directory fails checksum at offset 8192 [ 27.064930][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.077935][ T279] EXT4-fs error (device loop2): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 27.099443][ T279] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /8/file1/lost+found: directory fails checksum at offset 1024 [ 27.099869][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.116398][ T279] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /8/file1/lost+found: directory fails checksum at offset 8192 [ 27.137790][ T279] EXT4-fs error (device loop2): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 27.142027][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.151030][ T279] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /8/file1/lost+found: directory fails checksum at offset 1024 [ 27.165095][ T457] device veth0_vlan entered promiscuous mode [ 27.180876][ T112] device bridge_slave_1 left promiscuous mode [ 27.187162][ T279] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /8/file1/lost+found: directory fails checksum at offset 8192 [ 27.187168][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.209283][ T112] device bridge_slave_0 left promiscuous mode [ 27.216114][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.216146][ T279] EXT4-fs error (device loop2): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 27.252976][ T279] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /8/file1/lost+found: directory fails checksum at offset 1024 [ 27.317952][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.326612][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.335872][ T457] device veth1_macvtap entered promiscuous mode [ 27.348823][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.356799][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.365725][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.386310][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.394703][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.419165][ T501] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 27.434566][ T501] device syz_tun entered promiscuous mode [ 27.441097][ T501] device syz_tun left promiscuous mode [ 27.459906][ T504] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 27.532091][ T280] usb 5-1: USB disconnect, device number 2 [ 27.565778][ T508] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.572992][ T508] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.580898][ T508] device bridge_slave_0 entered promiscuous mode [ 27.592528][ T508] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.600546][ T508] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.608174][ T508] device bridge_slave_1 entered promiscuous mode [ 27.706826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.707054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.710497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.710689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.710805][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.710812][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.710915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.711072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.711209][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.711215][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.711692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.716009][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.716210][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.717062][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.717255][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.729313][ T508] device veth0_vlan entered promiscuous mode [ 27.752551][ T508] device veth1_macvtap entered promiscuous mode [ 27.799776][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.800214][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.801098][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.809314][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.810248][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.811166][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.811808][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.812477][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.813083][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.813682][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.815280][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.815999][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.027110][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.073192][ T538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.50'. [ 28.131525][ T541] xt_hashlimit: size too large, truncated to 1048576 [ 28.143057][ T538] device vlan2 entered promiscuous mode [ 28.190318][ T538] device dummy0 entered promiscuous mode [ 28.400351][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.411845][ T5] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 28.422149][ T5] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 28.432209][ T5] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 28.480970][ T524] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 28.493085][ T112] device bridge_slave_1 left promiscuous mode [ 28.499342][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.507920][ T112] device bridge_slave_0 left promiscuous mode [ 28.516372][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.526862][ T112] device veth1_macvtap left promiscuous mode [ 28.533230][ T112] device veth0_vlan left promiscuous mode [ 28.610250][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.619537][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.627550][ T5] usb 1-1: Product: syz [ 28.631865][ T5] usb 1-1: Manufacturer: syz [ 28.636743][ T5] usb 1-1: SerialNumber: syz [ 28.680633][ T5] cdc_mbim 1-1:1.0: skipping garbage [ 28.850202][ T524] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 28.860204][ T524] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 28.881106][ T515] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.020213][ T524] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 29.029576][ T524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.037777][ T524] usb 6-1: Product: syz [ 29.042052][ T524] usb 6-1: Manufacturer: syz [ 29.046634][ T524] usb 6-1: SerialNumber: syz [ 29.053379][ T524] usb 6-1: config 0 descriptor?? [ 29.070210][ T543] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 29.077303][ T543] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 29.292662][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 29.292671][ T24] audit: type=1400 audit(1769483717.739:202): avc: denied { create } for pid=542 comm="syz.5.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 29.300495][ T543] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 29.318241][ T24] audit: type=1400 audit(1769483717.739:203): avc: denied { listen } for pid=542 comm="syz.5.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 29.324924][ T543] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 29.550644][ T515] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.780200][ T5] cdc_mbim 1-1:1.0: bind() failure [ 29.800192][ T524] Error reading MAC address [ 29.805508][ T5] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 29.830244][ T5] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 29.839457][ T5] usb 1-1: USB disconnect, device number 2 [ 30.136429][ T555] udc-core: couldn't find an available UDC or it's busy [ 30.143494][ T555] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 31.516926][ T5] usb 6-1: USB disconnect, device number 2 [ 58.951759][ T563] binder: 558:563 ioctl c0306201 0 returned -14 [ 58.953441][ T24] audit: type=1400 audit(1769483747.399:204): avc: denied { read } for pid=558 comm="syz.6.64" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.987915][ T24] audit: type=1400 audit(1769483747.399:205): avc: denied { open } for pid=558 comm="syz.6.64" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.011854][ T24] audit: type=1400 audit(1769483747.399:206): avc: denied { ioctl } for pid=558 comm="syz.6.64" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.051788][ T570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.100377][ T570] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 59.196234][ T577] loop0: p1 p2 < > p4 < > [ 59.204367][ T577] loop0: partition table partially beyond EOD, truncated [ 59.211782][ T577] loop0: p1 start 16384 is beyond EOD, truncated [ 59.218132][ T577] loop0: p2 start 16777353 is beyond EOD, truncated [ 59.343386][ T576] F2FS-fs (loop5): Found nat_bits in checkpoint [ 59.365007][ T576] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 59.372778][ T24] audit: type=1400 audit(1769483747.819:207): avc: denied { mount } for pid=574 comm="syz.5.68" name="/" dev="loop5" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.411853][ T570] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 59.507596][ T583] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 59.517629][ T567] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.517681][ T583] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 59.531059][ T24] audit: type=1400 audit(1769483747.979:208): avc: denied { create } for pid=565 comm="syz.3.65" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 59.542446][ T570] EXT4-fs error (device loop3): ext4_get_first_dir_block:3708: inode #12: comm syz.3.65: Directory block failed checksum [ 59.595093][ T567] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.66: Parent and EA inode have the same ino 15 [ 59.608161][ T567] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.66: Parent and EA inode have the same ino 15 [ 59.616184][ T570] EXT4-fs error (device loop3): __ext4_find_entry:1668: inode #12: comm syz.3.65: checksumming directory block 0 [ 59.620553][ T567] EXT4-fs (loop4): 1 orphan inode deleted [ 59.638155][ T567] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,data_err=ignore,sysvgroups,,errors=continue [ 59.638190][ T570] EXT4-fs error (device loop3): ext4_readdir:223: inode #12: comm syz.3.65: path /9/file0/file0: directory fails checksum at offset 0 [ 59.706586][ T24] audit: type=1400 audit(1769483748.149:209): avc: denied { append } for pid=574 comm="syz.5.68" path="/6/file0/memory.events.local" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.736213][ T572] udevd[572]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 59.750293][ T567] EXT4-fs (loop4): shut down requested (1) [ 59.761861][ T24] audit: type=1400 audit(1769483748.209:210): avc: denied { listen } for pid=565 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.797678][ T567] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 59.813475][ T24] audit: type=1400 audit(1769483748.219:211): avc: denied { map } for pid=574 comm="syz.5.68" path="/6/file0/memory.events.local" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.837760][ T24] audit: type=1400 audit(1769483748.239:212): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 59.861999][ T567] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 59.871045][ T567] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 59.880013][ T24] audit: type=1400 audit(1769483748.239:213): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.901553][ T567] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 59.918433][ T576] attempt to access beyond end of device [ 59.918433][ T576] loop5: rw=2049, want=81920, limit=40427 [ 59.932923][ T601] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 59.938105][ T602] process 'syz.3.71' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 59.958514][ T576] attempt to access beyond end of device [ 59.958514][ T576] loop5: rw=2049, want=53248, limit=40427 [ 59.982157][ T576] attempt to access beyond end of device [ 59.982157][ T576] loop5: rw=2049, want=60808, limit=40427 [ 60.034871][ T583] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 60.058675][ T583] FAT-fs (loop6): Filesystem has been set read-only [ 60.087068][ T574] attempt to access beyond end of device [ 60.087068][ T574] loop5: rw=524288, want=78080, limit=40427 [ 60.099648][ T576] attempt to access beyond end of device [ 60.099648][ T576] loop5: rw=0, want=77840, limit=40427 [ 60.111041][ T576] attempt to access beyond end of device [ 60.111041][ T576] loop5: rw=0, want=77840, limit=40427 [ 60.122294][ T576] attempt to access beyond end of device [ 60.122294][ T576] loop5: rw=0, want=77840, limit=40427 [ 60.133615][ T576] attempt to access beyond end of device [ 60.133615][ T576] loop5: rw=0, want=77840, limit=40427 [ 60.179836][ T605] FAT-fs (loop3): Directory bread(block 64) failed [ 60.182937][ T583] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 60.186789][ T605] FAT-fs (loop3): Directory bread(block 65) failed [ 60.220337][ T605] FAT-fs (loop3): Directory bread(block 66) failed [ 60.230237][ T605] FAT-fs (loop3): Directory bread(block 67) failed [ 60.247216][ T605] FAT-fs (loop3): Directory bread(block 68) failed [ 60.287635][ T583] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 60.298124][ T605] FAT-fs (loop3): Directory bread(block 69) failed [ 60.304932][ T605] FAT-fs (loop3): Directory bread(block 70) failed [ 60.311943][ T605] FAT-fs (loop3): Directory bread(block 71) failed [ 60.318641][ T605] FAT-fs (loop3): Directory bread(block 72) failed [ 60.326809][ T605] FAT-fs (loop3): Directory bread(block 73) failed [ 60.420192][ T369] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.703584][ T618] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.710756][ T618] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.76: bg 0: block 248: padding at end of block bitmap is not set [ 60.725394][ T618] EXT4-fs error (device loop3): ext4_acquire_dquot:6225: comm syz.3.76: Failed to acquire dquot type 1 [ 60.737137][ T618] EXT4-fs (loop3): 1 truncate cleaned up [ 60.743262][ T618] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 60.775448][ T618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 60.784412][ T618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.800140][ T369] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.811232][ T369] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 60.911533][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.100872][ T369] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.129026][ T369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.137430][ T369] usb 6-1: Product: syz [ 61.141761][ T369] usb 6-1: Manufacturer: syz [ 61.146577][ T369] usb 6-1: SerialNumber: syz [ 62.123435][ T25] usb 7-1: device descriptor read/64, error -71 [ 62.130650][ T369] cdc_mbim 6-1:1.0: skipping garbage [ 62.144707][ T457] attempt to access beyond end of device [ 62.144707][ T457] loop5: rw=2049, want=45112, limit=40427 [ 62.170188][ T369] cdc_mbim 6-1:1.0: bind() failure [ 62.176406][ T369] cdc_ncm 6-1:1.1: bind() failure [ 62.182505][ T369] usb 6-1: USB disconnect, device number 3 [ 62.521273][ T643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.80'. [ 62.532071][ T643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.80'. [ 62.780189][ T25] usb 7-1: device descriptor read/64, error -71 [ 62.908790][ T653] xt_hashlimit: size too large, truncated to 1048576 [ 63.040130][ T369] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 63.060095][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.142515][ T662] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.153392][ T662] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.89: inode has both inline data and extents flags [ 63.168544][ T662] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.89: couldn't read orphan inode 15 (err -117) [ 63.180751][ T662] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 63.218746][ T662] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.89: bg 0: block 256: padding at end of block bitmap is not set [ 63.420316][ T25] usb 7-1: device descriptor read/64, error -71 [ 63.435151][ T662] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 63.505854][ T673] EXT4-fs error (device loop4): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.4.89: path /16/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 63.620487][ T369] usb 4-1: config 0 has no interfaces? [ 63.626304][ T369] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 63.723222][ T369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.902743][ T369] usb 4-1: config 0 descriptor?? [ 64.416441][ T687] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.445349][ T687] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 64.521796][ T687] 9pnet: Insufficient options for proto=fd [ 64.542667][ T369] usb 4-1: USB disconnect, device number 3 [ 64.583762][ T687] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 64.599140][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 64.599149][ T24] audit: type=1400 audit(1769483753.039:224): avc: denied { getopt } for pid=686 comm="syz.4.94" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.649529][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 64.659453][ T687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63252 sclass=netlink_route_socket pid=687 comm=syz.4.94 [ 64.668332][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.683401][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.691751][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.691814][ T702] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 64.700478][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.716891][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.726120][ T524] ip6_tunnel: ; xmit: Local address not yet configured! [ 64.734029][ T702] EXT4-fs error (device loop0): ext4_orphan_get:1421: comm syz.0.98: bad orphan inode 15 [ 64.744501][ T702] ext4_test_bit(bit=14, block=4) = 1 [ 64.749867][ T702] is_bad_inode(inode)=0 [ 64.755162][ T702] NEXT_ORPHAN(inode)=0 [ 64.759958][ T702] max_ino=32 [ 64.774584][ T702] i_nlink=1 [ 64.778141][ T702] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000100,max_dir_size_kb=0x0000000000000007,,errors=continue [ 64.824172][ T710] binder: 709:710 unknown command 25363 [ 64.829767][ T710] binder: 709:710 ioctl c0306201 200000000080 returned -22 [ 64.840116][ T24] audit: type=1326 audit(1769483753.289:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c17f01eb9 code=0x7ffc0000 [ 64.863498][ T24] audit: type=1326 audit(1769483753.289:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c17f01eb9 code=0x7ffc0000 [ 64.915085][ T24] audit: type=1326 audit(1769483753.359:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c17f01eb9 code=0x7ffc0000 [ 64.941381][ T24] audit: type=1326 audit(1769483753.359:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c17f01eb9 code=0x7ffc0000 [ 64.990117][ T24] audit: type=1326 audit(1769483753.389:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4c17f01eb9 code=0x7ffc0000 [ 65.033730][ T24] audit: type=1326 audit(1769483753.389:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c17f01eb9 code=0x7ffc0000 [ 65.065161][ T24] audit: type=1326 audit(1769483753.389:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c17f01eb9 code=0x7ffc0000 [ 65.089707][ T24] audit: type=1326 audit(1769483753.389:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c17f01eb9 code=0x7ffc0000 [ 65.115243][ T717] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 65.117274][ T24] audit: type=1326 audit(1769483753.389:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c17f01eb9 code=0x7ffc0000 [ 65.148749][ T369] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.160190][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.375715][ T717] EXT4-fs (loop5): #clusters per group too big: 20480 [ 65.390157][ T369] usb 5-1: Using ep0 maxpacket: 16 [ 65.510863][ T369] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.521287][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.543474][ T369] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.645689][ T25] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 65.934997][ T369] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.944138][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.953835][ T369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.962520][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.971207][ T25] usb 7-1: Product: syz [ 65.975734][ T25] usb 7-1: Manufacturer: syz [ 65.991649][ T369] usb 5-1: Product: syz [ 65.995931][ T369] usb 5-1: Manufacturer: syz [ 66.005198][ T729] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.010099][ T25] usb 7-1: SerialNumber: syz [ 66.019938][ T369] usb 5-1: SerialNumber: syz [ 66.042966][ T733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.107'. [ 66.071334][ T25] cdc_mbim 7-1:1.0: skipping garbage [ 66.083116][ T729] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.106: inode has both inline data and extents flags [ 66.096769][ T729] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.106: couldn't read orphan inode 15 (err -117) [ 66.108769][ T729] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 66.125452][ T729] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.106: bg 0: block 256: padding at end of block bitmap is not set [ 66.140413][ T729] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 66.149723][ T729] EXT4-fs error (device loop3): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.3.106: path /17/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 66.241407][ T733] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.107: Invalid inode bitmap blk 4 in block_group 0 [ 66.254615][ T733] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,nolazytime,usrquota,noload,minixdf,lazytime,,errors=continue [ 66.277718][ T712] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 66.364760][ T739] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 66.570255][ T369] usb 5-1: 0:2 : does not exist [ 66.580268][ T369] usb 5-1: USB disconnect, device number 3 [ 67.690602][ T712] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 67.935267][ T25] cdc_mbim 7-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 67.943016][ T25] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 68.247242][ T25] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 68.368761][ T25] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 86:ae:f2:87:44:7a [ 68.497615][ T25] usb 7-1: USB disconnect, device number 4 [ 68.503994][ T25] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 68.539507][ T771] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 68.880105][ C0] ip6_tunnel: ; xmit: Local address not yet configured! [ 69.957155][ T799] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 70.390200][ T24] kauditd_printk_skb: 22226 callbacks suppressed [ 70.390210][ T24] audit: type=1400 audit(1769483758.789:22460): avc: denied { read write } for pid=798 comm="syz.6.122" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.730128][ T24] audit: type=1400 audit(1769483759.129:22461): avc: denied { write } for pid=823 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.791839][ T24] audit: type=1400 audit(1769483759.199:22462): avc: denied { read } for pid=823 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.837364][ T112] EXT4-fs error (device loop6): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 70.852464][ T112] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 70.866275][ T112] EXT4-fs (loop6): This should not happen!! Data will be lost [ 70.866275][ T112] [ 71.105193][ T815] F2FS-fs (loop0): invalid crc value [ 71.118532][ T815] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.118776][ T112] EXT4-fs (loop6): Total free blocks count 0 [ 71.131290][ T112] EXT4-fs (loop6): Free/Dirty block details [ 71.137337][ T112] EXT4-fs (loop6): free_blocks=2415919504 [ 71.143210][ T112] EXT4-fs (loop6): dirty_blocks=16 [ 71.148528][ T112] EXT4-fs (loop6): Block reservation details [ 71.156241][ T112] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 71.163473][ T815] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 71.163872][ T112] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 71.193490][ T112] EXT4-fs (loop6): This should not happen!! Data will be lost [ 71.193490][ T112] [ 71.298906][ T843] EXT4-fs (loop6): Ignoring removed orlov option [ 71.306125][ T843] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 71.316959][ T846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 71.338295][ T843] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 71.392104][ T24] audit: type=1400 audit(1769483759.839:22463): avc: denied { mounton } for pid=842 comm="syz.6.132" path="/8/file1/file0/bus" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.415343][ T24] audit: type=1400 audit(1769483759.839:22464): avc: denied { read } for pid=842 comm="syz.6.132" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 71.437831][ T24] audit: type=1400 audit(1769483759.879:22465): avc: denied { mounton } for pid=842 comm="syz.6.132" path="/file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.470232][ T24] audit: type=1400 audit(1769483759.909:22466): avc: denied { unlink } for pid=508 comm="syz-executor" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 71.511826][ T24] audit: type=1400 audit(1769483759.939:22467): avc: denied { unmount } for pid=508 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 71.752483][ T24] audit: type=1400 audit(1769483760.179:22468): avc: denied { watch watch_reads } for pid=855 comm="syz.5.136" path="/27" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.831303][ T860] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.842406][ T860] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.137: inode has both inline data and extents flags [ 71.855926][ T860] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.137: couldn't read orphan inode 15 (err -117) [ 71.868062][ T860] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 71.879106][ T860] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.137: bg 0: block 256: padding at end of block bitmap is not set [ 71.893592][ T860] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 71.902877][ T860] EXT4-fs error (device loop4): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.4.137: path /25/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 73.020087][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.093230][ T24] audit: type=1400 audit(1769483761.539:22469): avc: denied { create } for pid=887 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.340269][ T878] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.380514][ T25] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 73.409463][ T25] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 73.438693][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.449289][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 73.466089][ T25] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 73.488071][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.500283][ T25] usb 6-1: config 0 descriptor?? [ 73.540604][ T25] usb-storage 6-1:0.0: USB Mass Storage device detected [ 73.552581][ T25] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 73.590099][ T878] usb 7-1: Using ep0 maxpacket: 16 [ 73.710166][ T878] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 73.721211][ T878] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.731106][ T878] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.748653][ T25] usb 6-1: USB disconnect, device number 4 [ 73.970760][ T878] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.169550][ T878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.187081][ T878] usb 7-1: Product: syz [ 74.200095][ T878] usb 7-1: Manufacturer: syz [ 74.204809][ T878] usb 7-1: SerialNumber: syz [ 74.351979][ T112] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 74.361864][ T112] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.690229][ T878] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 74.920119][ T5] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.460284][ T878] usb 7-1: 2:1: cannot get freq at ep 0x82 [ 75.601303][ T878] usb 7-1: USB disconnect, device number 5 [ 75.980050][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 75.980060][ T24] audit: type=1400 audit(1769483764.419:22472): avc: denied { ioctl } for pid=929 comm="syz.4.155" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.130146][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.141385][ T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 76.387867][ T24] audit: type=1400 audit(1769483764.829:22473): avc: denied { setattr } for pid=942 comm="syz.6.159" name="PACKET" dev="sockfs" ino=17864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.420336][ T15] Bluetooth: hci0: command 0x1003 tx timeout [ 76.426534][ T919] Bluetooth: hci0: sending frame failed (-49) [ 76.560174][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.569301][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.577433][ T5] usb 6-1: Product: syz [ 76.581655][ T5] usb 6-1: Manufacturer: syz [ 76.586228][ T5] usb 6-1: SerialNumber: syz [ 76.630738][ T5] cdc_mbim 6-1:1.0: skipping garbage [ 76.831295][ T922] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.985593][ T945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 76.995457][ T945] device vlan2 entered promiscuous mode [ 77.001113][ T945] device dummy0 entered promiscuous mode [ 77.115561][ T947] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 77.123611][ T947] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 77.132756][ T947] F2FS-fs (loop4): invalid crc value [ 77.139408][ T947] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.161638][ T947] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 77.168790][ T947] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 77.309109][ T958] binder: 957:958 ioctl c0306201 0 returned -14 [ 77.520103][ C0] ip6_tunnel: ; xmit: Local address not yet configured! [ 77.527260][ T922] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.148702][ T5] cdc_mbim 6-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 78.193263][ T5] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 78.211792][ T964] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 78.226226][ T964] EXT4-fs error (device loop6): ext4_orphan_get:1395: inode #15: comm syz.6.166: inode has both inline data and extents flags [ 78.239930][ T5] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 78.240629][ T964] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.166: couldn't read orphan inode 15 (err -117) [ 78.252021][ T5] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 26:4e:9d:bb:b2:2a [ 78.258708][ T964] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 78.285793][ T964] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.166: bg 0: block 256: padding at end of block bitmap is not set [ 78.302301][ T24] audit: type=1400 audit(1769483766.749:22474): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.305490][ T964] EXT4-fs error (device loop6) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 78.340446][ T968] EXT4-fs error (device loop6): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.6.166: path /19/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 78.341717][ T24] audit: type=1400 audit(1769483766.749:22475): avc: denied { read } for pid=134 comm="dhcpcd" name="n16" dev="tmpfs" ino=1667 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.384044][ T24] audit: type=1400 audit(1769483766.749:22476): avc: denied { open } for pid=134 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1667 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.408651][ T24] audit: type=1400 audit(1769483766.749:22477): avc: denied { getattr } for pid=134 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1667 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.441101][ T24] audit: type=1400 audit(1769483766.829:22478): avc: denied { read } for pid=970 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.460157][ T15] usb 6-1: USB disconnect, device number 5 [ 78.466176][ T24] audit: type=1400 audit(1769483766.829:22479): avc: denied { open } for pid=970 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.470632][ T15] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 78.495423][ T24] audit: type=1400 audit(1769483766.829:22480): avc: denied { getattr } for pid=970 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.539029][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 78.546483][ T919] Bluetooth: hci0: sending frame failed (-49) [ 78.568933][ T24] audit: type=1400 audit(1769483767.009:22481): avc: denied { write } for pid=969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.654311][ T988] Illegal XDP return value 4294967282, expect packet loss! [ 79.020652][ T962] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 79.030633][ T962] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 79.039618][ T962] F2FS-fs (loop4): invalid crc value [ 79.046645][ T962] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.067860][ T962] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 79.075057][ T962] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 79.098924][ T962] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 79.119463][ T962] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 79.129759][ T962] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 79.139602][ T962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.165'. [ 79.250477][ T1011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.172'. [ 79.260950][ T1011] device vlan2 entered promiscuous mode [ 79.266524][ T1011] device dummy0 entered promiscuous mode [ 79.625458][ T1015] overlayfs: missing 'lowerdir' [ 79.802747][ T1021] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(12288) [ 79.816896][ T1021] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 79.830143][ T1021] F2FS-fs (loop6): fault_injection options not supported [ 79.861282][ T1015] cgroup: syz.4.171 (1015) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 79.877948][ T1015] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 79.958825][ T1025] binder: 1024:1025 ioctl c0306201 0 returned -14 [ 80.026933][ T1027] netlink: 20 bytes leftover after parsing attributes in process `syz.6.174'. [ 81.127388][ T15] Bluetooth: hci0: command 0x1009 tx timeout [ 81.170043][ C1] sched: RT throttling activated [ 81.211376][ T1045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.230594][ T1045] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.180: inode has both inline data and extents flags [ 81.243935][ T1045] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.180: couldn't read orphan inode 15 (err -117) [ 81.255960][ T1045] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 81.266877][ T1045] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.180: bg 0: block 256: padding at end of block bitmap is not set [ 81.271516][ T1048] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 81.293212][ T1045] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 81.302872][ T1048] EXT4-fs error (device loop5): ext4_orphan_get:1395: inode #15: comm syz.5.182: inode has both inline data and extents flags [ 81.316463][ T1048] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.182: couldn't read orphan inode 15 (err -117) [ 81.328571][ T1045] EXT4-fs error (device loop3): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.3.180: path /27/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 81.351608][ T1048] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 81.383574][ T1048] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.182: bg 0: block 256: padding at end of block bitmap is not set [ 81.398343][ T1048] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 81.410367][ T1048] EXT4-fs error (device loop5): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.5.182: path /35/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 81.440129][ T15] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.601835][ T1053] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.602915][ T1033] F2FS-fs (loop6): Test dummy encryption mode enabled [ 81.622388][ T1033] F2FS-fs (loop6): invalid crc value [ 81.628117][ T1053] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.183: inode has both inline data and extents flags [ 81.641854][ T1053] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.183: couldn't read orphan inode 15 (err -117) [ 81.644594][ T1033] F2FS-fs (loop6): Found nat_bits in checkpoint [ 81.654534][ T1053] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 81.680335][ T1053] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.183: bg 0: block 256: padding at end of block bitmap is not set [ 81.687146][ T1033] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 81.695263][ T1053] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 81.701945][ T1033] F2FS-fs (loop6): Start checkpoint disabled! [ 81.710109][ T524] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 81.717474][ T1033] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 81.727429][ T1053] EXT4-fs error (device loop3): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.3.183: path /28/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 81.759170][ T1053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.183'. [ 81.810288][ T15] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.821808][ T15] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 82.140171][ T524] usb 6-1: Using ep0 maxpacket: 32 [ 82.190206][ T15] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.199427][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.207617][ T15] usb 5-1: Product: syz [ 82.212037][ T15] usb 5-1: Manufacturer: syz [ 82.216632][ T15] usb 5-1: SerialNumber: syz [ 82.260190][ T524] usb 6-1: config 1 interface 0 has no altsetting 0 [ 82.267846][ T15] cdc_mbim 5-1:1.0: skipping garbage [ 82.430150][ T5] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 82.461900][ T1044] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.670143][ T5] usb 7-1: Using ep0 maxpacket: 16 [ 82.758348][ T1044] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 82.765802][ T1044] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 82.774335][ T1044] F2FS-fs (loop4): fault_type options not supported [ 82.781894][ T1044] F2FS-fs (loop4): invalid crc value [ 82.789872][ T1044] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 82.810176][ T5] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.810738][ T1044] F2FS-fs (loop4): Start checkpoint disabled! [ 82.826966][ T1044] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 82.834037][ T1044] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 82.842550][ T1072] EXT4-fs (loop3): Ignoring removed orlov option [ 82.868530][ T1072] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nobarrier,auto_da_alloc=0x0000000000000052,norecovery,,errors=continue [ 82.872754][ T1044] attempt to access beyond end of device [ 82.872754][ T1044] loop4: rw=2049, want=53264, limit=40427 [ 83.239988][ T5] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 83.249227][ T5] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.257589][ T5] usb 7-1: Product: syz [ 83.261797][ T5] usb 7-1: Manufacturer: syz [ 83.266604][ T5] usb 7-1: SerialNumber: syz [ 83.272149][ T5] usb 7-1: config 0 descriptor?? [ 83.310630][ T5] dm9601: probe of 7-1:0.0 failed with error -22 [ 83.317118][ T5] sr9700: probe of 7-1:0.0 failed with error -22 [ 83.410398][ T1044] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.430157][ T15] cdc_mbim 5-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 83.437821][ T15] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 83.517525][ T5] usb 7-1: USB disconnect, device number 6 [ 83.640793][ T15] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 83.648014][ T15] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 5e:f7:73:b4:02:c3 [ 83.722349][ T134] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 83.846709][ T5] usb 5-1: USB disconnect, device number 4 [ 83.859808][ T5] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 84.545515][ T9] attempt to access beyond end of device [ 84.545515][ T9] loop4: rw=2049, want=45104, limit=40427 [ 85.017843][ T15] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.059976][ T1135] binder: 1134:1135 ioctl c0306201 0 returned -14 [ 85.090224][ T524] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.40 [ 85.099878][ T524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.107906][ T524] usb 6-1: Product: syz [ 85.220399][ T53] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.338648][ T524] usb 6-1: can't set config #1, error -71 [ 85.345600][ T524] usb 6-1: USB disconnect, device number 6 [ 85.480087][ T15] usb 4-1: device descriptor read/64, error -71 [ 85.620173][ T53] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.631254][ T53] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 85.641414][ T53] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 85.651312][ T53] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 85.820154][ T53] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.829314][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.852823][ T53] usb 1-1: Product: syz [ 85.861145][ T53] usb 1-1: Manufacturer: syz [ 85.880135][ T53] usb 1-1: SerialNumber: syz [ 85.898683][ T15] usb 4-1: device descriptor read/64, error -71 [ 85.909052][ T1143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.197'. [ 85.920942][ T53] cdc_mbim 1-1:1.0: skipping garbage [ 85.921859][ T1145] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.930943][ T1143] netlink: 48 bytes leftover after parsing attributes in process `syz.6.197'. [ 86.155259][ T1129] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.164300][ T1145] EXT4-fs error (device loop5): ext4_orphan_get:1395: inode #15: comm syz.5.198: inode has both inline data and extents flags [ 86.177719][ T1145] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.198: couldn't read orphan inode 15 (err -117) [ 86.186943][ T1143] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 86.186943][ T1143] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 86.186943][ T1143] [ 86.190064][ T1145] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 86.217030][ T1143] EXT4-fs (loop6): bad geometry: first data block is 0 with a 1k block and cluster size [ 86.244262][ T1145] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.198: bg 0: block 256: padding at end of block bitmap is not set [ 86.259206][ T1145] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 86.268809][ T1145] EXT4-fs error (device loop5): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.5.198: path /37/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 86.310241][ T15] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.355012][ T1154] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 86.365864][ T1154] EXT4-fs error (device loop5): ext4_orphan_get:1395: inode #15: comm syz.5.199: inode has both inline data and extents flags [ 86.379494][ T1154] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.199: couldn't read orphan inode 15 (err -117) [ 86.391599][ T1154] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 86.402490][ T1154] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.199: bg 0: block 256: padding at end of block bitmap is not set [ 86.418185][ T1154] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 86.431944][ T1154] EXT4-fs error (device loop5): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.5.199: path /38/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 86.630126][ T53] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 86.636404][ T53] cdc_mbim 1-1:1.0: bind() failure [ 86.642840][ T53] cdc_ncm 1-1:1.1: bind() failure [ 86.656097][ T53] usb 1-1: USB disconnect, device number 3 [ 86.748206][ T1164] netlink: 68 bytes leftover after parsing attributes in process `syz.4.203'. [ 86.820130][ T15] usb 4-1: device descriptor read/64, error -71 [ 88.025418][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 88.058459][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.058665][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.058861][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.059043][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.059235][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.202922][ T1193] FAULT_INJECTION: forcing a failure. [ 88.202922][ T1193] name failslab, interval 1, probability 0, space 0, times 1 [ 88.202940][ T1193] CPU: 0 PID: 1193 Comm: syz.5.212 Not tainted syzkaller #0 [ 88.202945][ T1193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.202951][ T1193] Call Trace: [ 88.202968][ T1193] __dump_stack+0x21/0x24 [ 88.202976][ T1193] dump_stack_lvl+0x1a7/0x208 [ 88.202985][ T1193] ? thaw_kernel_threads+0x220/0x220 [ 88.202994][ T1193] ? show_regs_print_info+0x18/0x18 [ 88.203003][ T1193] ? ip6_pol_route+0xd2a/0x1170 [ 88.203011][ T1193] dump_stack+0x15/0x1c [ 88.203018][ T1193] should_fail+0x3c1/0x510 [ 88.203028][ T1193] ? __alloc_skb+0x9e/0x520 [ 88.203037][ T1193] __should_failslab+0xa4/0xe0 [ 88.203046][ T1193] should_failslab+0x9/0x20 [ 88.203055][ T1193] kmem_cache_alloc+0x3d/0x2d0 [ 88.203064][ T1193] ? ip6_pol_route_output+0x51/0x80 [ 88.203075][ T1193] __alloc_skb+0x9e/0x520 [ 88.203083][ T1193] ? fib6_lookup+0x2c0/0x2c0 [ 88.203092][ T1193] __ip6_append_data+0x2644/0x37d0 [ 88.203100][ T1193] ? proc_tid_base_lookup+0x2b/0x30 [ 88.203108][ T1193] ? path_openat+0x1140/0x31c0 [ 88.203121][ T1193] ? _raw_spin_lock_bh+0x94/0xf0 [ 88.203130][ T1193] ? ip6_setup_cork+0x1230/0x1230 [ 88.203137][ T1193] ? __kasan_check_read+0x11/0x20 [ 88.203145][ T1193] ? lock_sock_nested+0x21c/0x2a0 [ 88.203153][ T1193] ip6_append_data+0x1c0/0x300 [ 88.203161][ T1193] ? rawv6_send_hdrinc+0x1000/0x1000 [ 88.203169][ T1193] ? rawv6_send_hdrinc+0x1000/0x1000 [ 88.203177][ T1193] rawv6_sendmsg+0x1185/0x16f0 [ 88.203187][ T1193] ? compat_rawv6_ioctl+0x10/0x10 [ 88.203199][ T1193] ? selinux_socket_sendmsg+0x22f/0x340 [ 88.203216][ T1193] ? path_openat+0x2970/0x31c0 [ 88.203225][ T1193] ? kasan_set_track+0x5b/0x70 [ 88.203233][ T1193] ? kasan_set_free_info+0x23/0x40 [ 88.203242][ T1193] ? inet_send_prepare+0x60/0x4c0 [ 88.203250][ T1193] ? slab_free_freelist_hook+0xc5/0x190 [ 88.203262][ T1193] inet_sendmsg+0xa5/0xc0 [ 88.203271][ T1193] ? inet_send_prepare+0x4c0/0x4c0 [ 88.203278][ T1193] ____sys_sendmsg+0x5b7/0x8f0 [ 88.203287][ T1193] ? __sys_sendmsg_sock+0x40/0x40 [ 88.203298][ T1193] ? import_iovec+0x7c/0xb0 [ 88.203306][ T1193] ___sys_sendmsg+0x236/0x2e0 [ 88.203315][ T1193] ? __sys_sendmsg+0x280/0x280 [ 88.203323][ T1193] ? rw_verify_area+0x1c0/0x360 [ 88.203335][ T1193] ? __fdget+0x1a1/0x230 [ 88.203342][ T1193] __x64_sys_sendmsg+0x1f9/0x2c0 [ 88.203350][ T1193] ? fput+0x1a/0x20 [ 88.203357][ T1193] ? ___sys_sendmsg+0x2e0/0x2e0 [ 88.203368][ T1193] ? debug_smp_processor_id+0x17/0x20 [ 88.203380][ T1193] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 88.203387][ T1193] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 88.203394][ T1193] do_syscall_64+0x31/0x40 [ 88.203402][ T1193] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.203410][ T1193] RIP: 0033:0x7fb4225beeb9 [ 88.203419][ T1193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.203425][ T1193] RSP: 002b:00007fb42101b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.203437][ T1193] RAX: ffffffffffffffda RBX: 00007fb422839fa0 RCX: 00007fb4225beeb9 [ 88.203442][ T1193] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 88.203448][ T1193] RBP: 00007fb42101b090 R08: 0000000000000000 R09: 0000000000000000 [ 88.203453][ T1193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.203459][ T1193] R13: 00007fb42283a038 R14: 00007fb422839fa0 R15: 00007fffc484a5b8 [ 88.626341][ T1202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.214'. [ 88.706180][ T1204] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.935236][ T1204] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro, [ 88.973229][ T1211] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.217: invalid indirect mapped block 256 (level 2) [ 88.986992][ T1211] EXT4-fs (loop4): 2 truncates cleaned up [ 88.992782][ T1211] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue [ 89.044519][ T1211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 89.053530][ T366] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 89.082619][ T1221] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue [ 89.490364][ T366] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 89.546757][ T366] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.572325][ T366] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.643820][ T366] usb 6-1: New USB device found, idVendor=056a, idProduct=0047, bcdDevice= 0.00 [ 89.658871][ T366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.751329][ T366] usb 6-1: config 0 descriptor?? [ 89.840325][ T1207] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.131349][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 90.131360][ T24] audit: type=1400 audit(1769483778.579:22490): avc: denied { read } for pid=1233 comm="syz.4.222" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.160978][ T15] usb 4-1: device descriptor read/64, error -71 [ 90.168229][ T24] audit: type=1400 audit(1769483778.589:22491): avc: denied { open } for pid=1233 comm="syz.4.222" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.203919][ T24] audit: type=1326 audit(1769483778.649:22492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b6adeb9 code=0x7ffc0000 [ 90.240547][ T24] audit: type=1326 audit(1769483778.649:22493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b6adeb9 code=0x7ffc0000 [ 90.263037][ T1236] netlink: 44 bytes leftover after parsing attributes in process `syz.6.224'. [ 90.268790][ T24] audit: type=1326 audit(1769483778.679:22494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f0e2b6adeb9 code=0x7ffc0000 [ 90.297433][ T15] usb usb4-port1: attempt power cycle [ 90.302955][ T1236] netlink: 43 bytes leftover after parsing attributes in process `syz.6.224'. [ 90.312891][ T1236] netlink: 'syz.6.224': attribute type 6 has an invalid length. [ 90.325308][ T1236] netlink: 'syz.6.224': attribute type 5 has an invalid length. [ 90.337715][ T24] audit: type=1326 audit(1769483778.679:22495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b6adeb9 code=0x7ffc0000 [ 90.365569][ T1236] netlink: 43 bytes leftover after parsing attributes in process `syz.6.224'. [ 90.378931][ T24] audit: type=1326 audit(1769483778.679:22496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b6adeb9 code=0x7ffc0000 [ 90.406876][ T24] audit: type=1326 audit(1769483778.679:22497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f0e2b6adeb9 code=0x7ffc0000 [ 90.435224][ T1207] udc-core: couldn't find an available UDC or it's busy [ 90.450145][ T1207] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.457788][ T24] audit: type=1400 audit(1769483778.679:22498): avc: denied { setattr } for pid=1233 comm="syz.4.222" name="" dev="pipefs" ino=18283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 90.500653][ T24] audit: type=1326 audit(1769483778.679:22499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b6adeb9 code=0x7ffc0000 [ 90.950326][ T366] usbhid 6-1:0.0: can't add hid device: -71 [ 90.957078][ T366] usbhid: probe of 6-1:0.0 failed with error -71 [ 91.011423][ T15] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 91.021661][ T366] usb 6-1: USB disconnect, device number 7 [ 91.260176][ T15] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.271582][ T15] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 91.282122][ T15] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.296633][ T15] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 91.612257][ T1262] FAULT_INJECTION: forcing a failure. [ 91.612257][ T1262] name failslab, interval 1, probability 0, space 0, times 0 [ 91.626001][ T1262] CPU: 1 PID: 1262 Comm: syz.5.231 Not tainted syzkaller #0 [ 91.633414][ T1262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.643564][ T1262] Call Trace: [ 91.646845][ T1262] __dump_stack+0x21/0x24 [ 91.651211][ T1262] dump_stack_lvl+0x1a7/0x208 [ 91.655856][ T1262] ? thaw_kernel_threads+0x220/0x220 [ 91.661114][ T1262] ? show_regs_print_info+0x18/0x18 [ 91.666282][ T1262] dump_stack+0x15/0x1c [ 91.670409][ T1262] should_fail+0x3c1/0x510 [ 91.674826][ T1262] ? __ip6_append_data+0x2644/0x37d0 [ 91.680109][ T1262] __should_failslab+0xa4/0xe0 [ 91.684872][ T1262] should_failslab+0x9/0x20 [ 91.689386][ T1262] __kmalloc_track_caller+0x5f/0x320 [ 91.694778][ T1262] ? kmem_cache_alloc+0x162/0x2d0 [ 91.699810][ T1262] ? ip6_pol_route_output+0x51/0x80 [ 91.705002][ T1262] ? __alloc_skb+0x9e/0x520 [ 91.709500][ T1262] ? __ip6_append_data+0x2644/0x37d0 [ 91.714772][ T1262] __alloc_skb+0xdc/0x520 [ 91.719098][ T1262] __ip6_append_data+0x2644/0x37d0 [ 91.724289][ T1262] ? proc_tid_base_lookup+0x2b/0x30 [ 91.729482][ T1262] ? path_openat+0x1140/0x31c0 [ 91.734248][ T1262] ? _raw_spin_lock_bh+0x94/0xf0 [ 91.739174][ T1262] ? ip6_setup_cork+0x1230/0x1230 [ 91.744256][ T1262] ? __kasan_check_read+0x11/0x20 [ 91.749339][ T1262] ? lock_sock_nested+0x21c/0x2a0 [ 91.754337][ T1262] ip6_append_data+0x1c0/0x300 [ 91.759088][ T1262] ? rawv6_send_hdrinc+0x1000/0x1000 [ 91.764369][ T1262] ? rawv6_send_hdrinc+0x1000/0x1000 [ 91.769629][ T1262] rawv6_sendmsg+0x1185/0x16f0 [ 91.774366][ T1262] ? compat_rawv6_ioctl+0x10/0x10 [ 91.779469][ T1262] ? selinux_socket_sendmsg+0x22f/0x340 [ 91.785115][ T1262] ? path_openat+0x2970/0x31c0 [ 91.789866][ T1262] ? kasan_set_track+0x5b/0x70 [ 91.794660][ T1262] ? kasan_set_free_info+0x23/0x40 [ 91.799782][ T1262] ? inet_send_prepare+0x60/0x4c0 [ 91.804896][ T1262] ? slab_free_freelist_hook+0xc5/0x190 [ 91.810539][ T1262] inet_sendmsg+0xa5/0xc0 [ 91.814868][ T1262] ? inet_send_prepare+0x4c0/0x4c0 [ 91.819982][ T1262] ____sys_sendmsg+0x5b7/0x8f0 [ 91.824822][ T1262] ? __sys_sendmsg_sock+0x40/0x40 [ 91.829833][ T1262] ? import_iovec+0x7c/0xb0 [ 91.834320][ T1262] ___sys_sendmsg+0x236/0x2e0 [ 91.838990][ T1262] ? __sys_sendmsg+0x280/0x280 [ 91.843735][ T1262] ? rw_verify_area+0x1c0/0x360 [ 91.848578][ T1262] ? __fdget+0x1a1/0x230 [ 91.852819][ T1262] __x64_sys_sendmsg+0x1f9/0x2c0 [ 91.857743][ T1262] ? __kasan_check_write+0x14/0x20 [ 91.862837][ T1262] ? ___sys_sendmsg+0x2e0/0x2e0 [ 91.867673][ T1262] ? __kasan_check_read+0x11/0x20 [ 91.872683][ T1262] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 91.878471][ T1262] do_syscall_64+0x31/0x40 [ 91.882968][ T1262] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 91.888846][ T1262] RIP: 0033:0x7fb4225beeb9 [ 91.893255][ T1262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.912981][ T1262] RSP: 002b:00007fb42101b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.921595][ T1262] RAX: ffffffffffffffda RBX: 00007fb422839fa0 RCX: 00007fb4225beeb9 [ 91.929570][ T1262] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 91.937540][ T1262] RBP: 00007fb42101b090 R08: 0000000000000000 R09: 0000000000000000 [ 91.945506][ T1262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.953577][ T1262] R13: 00007fb42283a038 R14: 00007fb422839fa0 R15: 00007fffc484a5b8 [ 91.962701][ T366] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 91.963282][ T15] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.979956][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.987997][ T15] usb 4-1: Product: syz [ 91.992352][ T15] usb 4-1: Manufacturer: syz [ 91.996965][ T15] usb 4-1: SerialNumber: syz [ 92.060227][ T15] usb 4-1: can't set config #1, error -71 [ 92.483404][ T15] usb 4-1: USB disconnect, device number 6 [ 92.620864][ T1288] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.634485][ T1288] EXT4-fs error (device loop5): ext4_orphan_get:1395: inode #15: comm syz.5.240: inode has both inline data and extents flags [ 92.648280][ T1288] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.240: couldn't read orphan inode 15 (err -117) [ 92.660306][ T1288] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 92.676055][ T1288] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.240: bg 0: block 256: padding at end of block bitmap is not set [ 92.690724][ T1288] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 92.700038][ T1288] EXT4-fs error (device loop5): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.5.240: path /47/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 92.750176][ T366] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 92.764400][ T366] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 92.800956][ T1293] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.812997][ T1293] EXT4-fs error (device loop5): ext4_orphan_get:1395: inode #15: comm syz.5.241: inode has both inline data and extents flags [ 92.827078][ T1293] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.241: couldn't read orphan inode 15 (err -117) [ 92.839453][ T1293] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 92.859781][ T1293] EXT4-fs error (device loop5): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.5.241: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 92.870156][ T15] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 92.895942][ T457] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /48/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 92.917906][ T457] EXT4-fs error (device loop5): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 92.937967][ T457] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /48/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 92.960435][ T457] EXT4-fs error (device loop5): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 92.970233][ T366] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 92.981599][ T457] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /48/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 92.989864][ T366] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.019192][ T366] usb 7-1: Product: syz [ 93.023411][ T366] usb 7-1: Manufacturer: syz [ 93.028084][ T366] usb 7-1: SerialNumber: syz [ 93.034012][ T457] EXT4-fs error (device loop5): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 93.054821][ T366] usb 7-1: config 0 descriptor?? [ 93.060326][ T457] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /48/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 93.070166][ T1258] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.081924][ T457] EXT4-fs error (device loop5): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 93.088946][ T1258] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.108917][ T457] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /48/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 93.371364][ T1256] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.389513][ T1256] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.906724][ T15] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.926174][ T15] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 93.960148][ T366] Error reading MAC address [ 93.972953][ T1311] FAULT_INJECTION: forcing a failure. [ 93.972953][ T1311] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 93.990093][ T366] usb 7-1: USB disconnect, device number 7 [ 93.997464][ T1311] CPU: 0 PID: 1311 Comm: syz.0.248 Not tainted syzkaller #0 [ 94.004758][ T1311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.014896][ T1311] Call Trace: [ 94.018192][ T1311] __dump_stack+0x21/0x24 [ 94.022670][ T1311] dump_stack_lvl+0x1a7/0x208 [ 94.027437][ T1311] ? show_regs_print_info+0x18/0x18 [ 94.032727][ T1311] dump_stack+0x15/0x1c [ 94.036997][ T1311] should_fail+0x3c1/0x510 [ 94.041506][ T1311] should_fail_alloc_page+0x4f/0x60 [ 94.046714][ T1311] __alloc_pages_nodemask+0x119/0x620 [ 94.052086][ T1311] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 94.057638][ T1311] ? ip_generic_getfrag+0x197/0x280 [ 94.058096][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.062826][ T1311] ? ip_do_fragment+0x2090/0x2090 [ 94.062835][ T1311] ? __ip6_append_data+0x2644/0x37d0 [ 94.062847][ T1311] ? __kmalloc_track_caller+0x17e/0x320 [ 94.062857][ T1311] skb_page_frag_refill+0x1fe/0x3c0 [ 94.062873][ T1311] sk_page_frag_refill+0x4e/0x220 [ 94.069985][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.074918][ T1311] __ip6_append_data+0x15bb/0x37d0 [ 94.074928][ T1311] ? proc_tid_base_lookup+0x2b/0x30 [ 94.074944][ T1311] ? path_openat+0x1140/0x31c0 [ 94.081443][ T1309] device bridge_slave_0 entered promiscuous mode [ 94.085806][ T1311] ? _raw_spin_lock_bh+0x94/0xf0 [ 94.091975][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.096084][ T1311] ? ip6_setup_cork+0x1230/0x1230 [ 94.103447][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.108266][ T1311] ? __kasan_check_read+0x11/0x20 [ 94.114058][ T1309] device bridge_slave_1 entered promiscuous mode [ 94.118205][ T1311] ? lock_sock_nested+0x21c/0x2a0 [ 94.164876][ T1311] ip6_append_data+0x1c0/0x300 [ 94.167348][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.169649][ T1311] ? rawv6_send_hdrinc+0x1000/0x1000 [ 94.176774][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.181983][ T1311] ? rawv6_send_hdrinc+0x1000/0x1000 [ 94.181993][ T1311] rawv6_sendmsg+0x1185/0x16f0 [ 94.182007][ T1311] ? compat_rawv6_ioctl+0x10/0x10 [ 94.189468][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.194714][ T1311] ? selinux_socket_sendmsg+0x22f/0x340 [ 94.194729][ T1311] ? path_openat+0x2970/0x31c0 [ 94.199458][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.204451][ T1311] ? kasan_set_track+0x5b/0x70 [ 94.204459][ T1311] ? kasan_set_free_info+0x23/0x40 [ 94.204474][ T1311] ? inet_send_prepare+0x60/0x4c0 [ 94.242451][ T1309] device veth0_vlan entered promiscuous mode [ 94.243972][ T1311] ? slab_free_freelist_hook+0xc5/0x190 [ 94.255560][ T1311] inet_sendmsg+0xa5/0xc0 [ 94.256770][ T1309] device veth1_macvtap entered promiscuous mode [ 94.259977][ T1311] ? inet_send_prepare+0x4c0/0x4c0 [ 94.271374][ T1311] ____sys_sendmsg+0x5b7/0x8f0 [ 94.276134][ T1311] ? __sys_sendmsg_sock+0x40/0x40 [ 94.281227][ T1311] ? import_iovec+0x7c/0xb0 [ 94.285719][ T1311] ___sys_sendmsg+0x236/0x2e0 [ 94.290471][ T1311] ? __sys_sendmsg+0x280/0x280 [ 94.295216][ T1311] ? rw_verify_area+0x1c0/0x360 [ 94.300051][ T1311] ? __fdget+0x1a1/0x230 [ 94.304286][ T1311] __x64_sys_sendmsg+0x1f9/0x2c0 [ 94.309196][ T1311] ? fput+0x1a/0x20 [ 94.313419][ T1311] ? ___sys_sendmsg+0x2e0/0x2e0 [ 94.318244][ T1311] ? debug_smp_processor_id+0x17/0x20 [ 94.323592][ T1311] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 94.329641][ T1311] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 94.335332][ T1311] do_syscall_64+0x31/0x40 [ 94.339723][ T1311] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 94.345692][ T1311] RIP: 0033:0x7f4c17f01eb9 [ 94.350109][ T1311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.369969][ T1311] RSP: 002b:00007f4c1695e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.378534][ T1311] RAX: ffffffffffffffda RBX: 00007f4c1817cfa0 RCX: 00007f4c17f01eb9 [ 94.386485][ T1311] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 94.394432][ T1311] RBP: 00007f4c1695e090 R08: 0000000000000000 R09: 0000000000000000 [ 94.402514][ T1311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.410463][ T1311] R13: 00007f4c1817d038 R14: 00007f4c1817cfa0 R15: 00007fffe4f9b1b8 [ 94.511426][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.519145][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.527404][ T15] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.527914][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.536452][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.536460][ T15] usb 4-1: Product: syz [ 94.536474][ T15] usb 4-1: Manufacturer: syz [ 94.561796][ T15] usb 4-1: SerialNumber: syz [ 94.571580][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.606142][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.696721][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.720731][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.756673][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.795598][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.836248][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.871912][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.960689][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.065906][ T1329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 95.249347][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 95.249367][ T24] audit: type=1400 audit(1769483783.689:22535): avc: denied { mounton } for pid=1309 comm="syz-executor" path="/root/syzkaller.pKFAaQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 95.463393][ T15] usb 4-1: can't set config #1, error -71 [ 95.471341][ T15] usb 4-1: USB disconnect, device number 7 [ 95.480020][ T1343] binder: 1342:1343 ioctl c0306201 0 returned -14 [ 95.759361][ T1343] binder: 1342:1343 ioctl c0306201 0 returned -14 [ 95.839856][ T1353] FAULT_INJECTION: forcing a failure. [ 95.839856][ T1353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.854061][ T1353] CPU: 1 PID: 1353 Comm: syz.3.262 Not tainted syzkaller #0 [ 95.861595][ T1353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.871648][ T1353] Call Trace: [ 95.874914][ T1353] __dump_stack+0x21/0x24 [ 95.879316][ T1353] dump_stack_lvl+0x1a7/0x208 [ 95.883996][ T1353] ? show_regs_print_info+0x18/0x18 [ 95.889175][ T1353] dump_stack+0x15/0x1c [ 95.893305][ T1353] should_fail+0x3c1/0x510 [ 95.897867][ T1353] should_fail_alloc_page+0x4f/0x60 [ 95.903036][ T1353] __alloc_pages_nodemask+0x119/0x620 [ 95.908565][ T1353] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 95.914094][ T1353] ? ip_generic_getfrag+0x197/0x280 [ 95.919433][ T1353] ? ip_do_fragment+0x2090/0x2090 [ 95.924441][ T1353] ? __ip6_append_data+0x2644/0x37d0 [ 95.929797][ T1353] ? __kmalloc_track_caller+0x17e/0x320 [ 95.935412][ T1353] skb_page_frag_refill+0x1fe/0x3c0 [ 95.940597][ T1353] sk_page_frag_refill+0x4e/0x220 [ 95.945687][ T1353] __ip6_append_data+0x15bb/0x37d0 [ 95.950779][ T1353] ? proc_tid_base_lookup+0x2b/0x30 [ 95.955972][ T1353] ? path_openat+0x1140/0x31c0 [ 95.961215][ T1353] ? ip6_setup_cork+0x1230/0x1230 [ 95.966231][ T1353] ? __kasan_check_read+0x11/0x20 [ 95.971426][ T1353] ? lock_sock_nested+0x21c/0x2a0 [ 95.976437][ T1353] ip6_append_data+0x1c0/0x300 [ 95.981263][ T1353] ? rawv6_send_hdrinc+0x1000/0x1000 [ 95.986521][ T1353] ? rawv6_send_hdrinc+0x1000/0x1000 [ 95.991777][ T1353] rawv6_sendmsg+0x1185/0x16f0 [ 95.996513][ T1353] ? compat_rawv6_ioctl+0x10/0x10 [ 96.001513][ T1353] ? selinux_socket_sendmsg+0x22f/0x340 [ 96.007037][ T1353] ? path_openat+0x2970/0x31c0 [ 96.011798][ T1353] ? kasan_set_track+0x5b/0x70 [ 96.016560][ T1353] ? kasan_set_free_info+0x23/0x40 [ 96.021731][ T1353] ? inet_send_prepare+0x60/0x4c0 [ 96.026724][ T1353] ? slab_free_freelist_hook+0xc5/0x190 [ 96.032240][ T1353] inet_sendmsg+0xa5/0xc0 [ 96.036537][ T1353] ? inet_send_prepare+0x4c0/0x4c0 [ 96.041615][ T1353] ____sys_sendmsg+0x5b7/0x8f0 [ 96.046344][ T1353] ? __sys_sendmsg_sock+0x40/0x40 [ 96.051429][ T1353] ? import_iovec+0x7c/0xb0 [ 96.055988][ T1353] ___sys_sendmsg+0x236/0x2e0 [ 96.060636][ T1353] ? __sys_sendmsg+0x280/0x280 [ 96.065371][ T1353] ? rw_verify_area+0x1c0/0x360 [ 96.070207][ T1353] ? __fdget+0x1a1/0x230 [ 96.074796][ T1353] __x64_sys_sendmsg+0x1f9/0x2c0 [ 96.079982][ T1353] ? fput+0x1a/0x20 [ 96.083777][ T1353] ? ___sys_sendmsg+0x2e0/0x2e0 [ 96.088608][ T1353] ? debug_smp_processor_id+0x17/0x20 [ 96.093972][ T1353] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 96.100027][ T1353] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 96.105657][ T1353] do_syscall_64+0x31/0x40 [ 96.110084][ T1353] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 96.115951][ T1353] RIP: 0033:0x7fa5ec158eb9 [ 96.120349][ T1353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.140051][ T1353] RSP: 002b:00007fa5eabb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.148654][ T1353] RAX: ffffffffffffffda RBX: 00007fa5ec3d3fa0 RCX: 00007fa5ec158eb9 [ 96.156807][ T1353] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 96.164777][ T1353] RBP: 00007fa5eabb5090 R08: 0000000000000000 R09: 0000000000000000 [ 96.172837][ T1353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.180923][ T1353] R13: 00007fa5ec3d4038 R14: 00007fa5ec3d3fa0 R15: 00007fff63cf9ab8 [ 96.190646][ T366] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 96.227569][ T24] audit: type=1400 audit(1769483784.669:22536): avc: denied { append } for pid=1359 comm="syz.3.264" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.228639][ T1360] usb usb1: usbfs: process 1360 (syz.3.264) did not claim interface 0 before use [ 96.391393][ T1368] FAT-fs (loop6): Directory bread(block 64) failed [ 96.398066][ T1368] FAT-fs (loop6): Directory bread(block 65) failed [ 96.405121][ T1368] FAT-fs (loop6): Directory bread(block 66) failed [ 96.412031][ T1368] FAT-fs (loop6): Directory bread(block 67) failed [ 96.418805][ T1368] FAT-fs (loop6): Directory bread(block 68) failed [ 96.425862][ T1368] FAT-fs (loop6): Directory bread(block 69) failed [ 96.433176][ T1368] FAT-fs (loop6): Directory bread(block 70) failed [ 96.439979][ T1368] FAT-fs (loop6): Directory bread(block 71) failed [ 96.447215][ T1368] FAT-fs (loop6): Directory bread(block 72) failed [ 96.453962][ T1368] FAT-fs (loop6): Directory bread(block 73) failed [ 96.642450][ T369] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 96.784308][ T1368] xt_bpf: check failed: parse error [ 96.820438][ T366] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.839617][ T366] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 96.852898][ T366] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.864396][ T366] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 96.882688][ T9] device bridge_slave_1 left promiscuous mode [ 96.895551][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.906227][ T9] device bridge_slave_0 left promiscuous mode [ 96.926660][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.939088][ T9] device veth1_macvtap left promiscuous mode [ 96.946165][ T9] device veth0_vlan left promiscuous mode [ 97.020553][ T369] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 97.030502][ T366] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.104613][ T369] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.117909][ T366] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.232402][ T366] usb 8-1: Product: syz [ 97.236596][ T366] usb 8-1: Manufacturer: syz [ 97.244241][ T369] usb 4-1: config 0 has no interface number 0 [ 97.250907][ T366] usb 8-1: SerialNumber: syz [ 97.290684][ T366] cdc_mbim 8-1:1.0: skipping garbage [ 97.338740][ T1377] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.359059][ T1377] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.270: inode has both inline data and extents flags [ 97.373778][ T1377] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.270: couldn't read orphan inode 15 (err -117) [ 97.401963][ T1377] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 97.411882][ T369] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 97.467378][ T369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.494157][ T1341] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.506250][ T1377] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.270: bg 0: block 256: padding at end of block bitmap is not set [ 97.520604][ T369] usb 4-1: Product: syz [ 97.522205][ T1377] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 97.524772][ T369] usb 4-1: Manufacturer: syz [ 97.524780][ T369] usb 4-1: SerialNumber: syz [ 97.527562][ T369] usb 4-1: config 0 descriptor?? [ 97.538907][ T1377] EXT4-fs error (device loop0): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.0.270: path /43/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 97.646969][ T24] audit: type=1400 audit(1769483786.089:22537): avc: denied { bind } for pid=1389 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.666976][ T1391] netlink: 'syz.4.273': attribute type 4 has an invalid length. [ 97.676363][ T1390] netlink: 'syz.4.273': attribute type 4 has an invalid length. [ 97.684426][ T1391] netlink: 'syz.4.273': attribute type 4 has an invalid length. [ 97.692188][ T1391] netlink: 5 bytes leftover after parsing attributes in process `syz.4.273'. [ 97.701902][ T1392] netlink: 'syz.4.273': attribute type 4 has an invalid length. [ 97.709598][ T1392] netlink: 5 bytes leftover after parsing attributes in process `syz.4.273'. [ 97.790512][ T5] usb 4-1: USB disconnect, device number 8 [ 97.800897][ T1400] FAULT_INJECTION: forcing a failure. [ 97.800897][ T1400] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.814334][ T1400] CPU: 0 PID: 1400 Comm: syz.4.277 Not tainted syzkaller #0 [ 97.821711][ T1400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.831743][ T1400] Call Trace: [ 97.835140][ T1400] __dump_stack+0x21/0x24 [ 97.839455][ T1400] dump_stack_lvl+0x1a7/0x208 [ 97.844112][ T1400] ? thaw_kernel_threads+0x220/0x220 [ 97.849382][ T1400] ? vsnprintf+0x189c/0x1990 [ 97.854082][ T1400] ? show_regs_print_info+0x18/0x18 [ 97.859484][ T1400] dump_stack+0x15/0x1c [ 97.863722][ T1400] should_fail+0x3c1/0x510 [ 97.868144][ T1400] should_fail_usercopy+0x1a/0x20 [ 97.873255][ T1400] _copy_to_user+0x20/0x90 [ 97.877678][ T1400] simple_read_from_buffer+0xe9/0x160 [ 97.883081][ T1400] proc_fail_nth_read+0x1a6/0x220 [ 97.888195][ T1400] ? proc_fault_inject_write+0x310/0x310 [ 97.893828][ T1400] ? rw_verify_area+0x1c0/0x360 [ 97.898681][ T1400] ? proc_fault_inject_write+0x310/0x310 [ 97.904309][ T1400] vfs_read+0x209/0xa60 [ 97.908465][ T1400] ? kernel_read+0x70/0x70 [ 97.912888][ T1400] ? __kasan_check_write+0x14/0x20 [ 97.918011][ T1400] ? mutex_lock+0x92/0xf0 [ 97.922325][ T1400] ? mutex_trylock+0xa0/0xa0 [ 97.926889][ T1400] ? __fget_files+0x2c4/0x320 [ 97.931545][ T1400] ? __fdget_pos+0x2d2/0x380 [ 97.936112][ T1400] ? ksys_read+0x71/0x250 [ 97.940420][ T1400] ksys_read+0x149/0x250 [ 97.944810][ T1400] ? vfs_write+0xdc0/0xdc0 [ 97.949213][ T1400] ? debug_smp_processor_id+0x17/0x20 [ 97.954581][ T1400] __x64_sys_read+0x7b/0x90 [ 97.959077][ T1400] do_syscall_64+0x31/0x40 [ 97.963476][ T1400] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 97.969438][ T1400] RIP: 0033:0x7f0e2b66e78e [ 97.973832][ T1400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.993431][ T1400] RSP: 002b:00007f0e2a109fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.001959][ T1400] RAX: ffffffffffffffda RBX: 00007f0e2a10a6c0 RCX: 00007f0e2b66e78e [ 98.010096][ T1400] RDX: 000000000000000f RSI: 00007f0e2a10a0a0 RDI: 0000000000000004 [ 98.018136][ T1400] RBP: 00007f0e2a10a090 R08: 0000000000000000 R09: 0000000000000000 [ 98.026355][ T1400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.034420][ T1400] R13: 00007f0e2b929038 R14: 00007f0e2b928fa0 R15: 00007ffcfc3a01d8 [ 98.430297][ T1341] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.746079][ T366] cdc_mbim 8-1:1.0: bind() failure [ 98.770143][ T366] cdc_ncm: probe of 8-1:1.1 failed with error -71 [ 98.799661][ T1423] binder: 1422:1423 ioctl c0306201 0 returned -14 [ 98.800675][ T366] cdc_mbim: probe of 8-1:1.1 failed with error -71 [ 99.729361][ T366] usb 8-1: USB disconnect, device number 2 [ 99.848272][ T1432] fuse: Bad value for 'fd' [ 100.140234][ T1444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 100.200256][ T15] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 100.240210][ T366] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 100.570095][ T15] usb 4-1: Using ep0 maxpacket: 32 [ 100.690218][ T366] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 100.703001][ T366] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 100.703202][ T1454] SELinux: duplicate or incompatible mount options [ 100.715790][ T15] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 100.722814][ T366] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.748165][ T366] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.791236][ T366] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 100.800752][ T366] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.809523][ T366] usb 8-1: config 0 descriptor?? [ 100.821679][ T24] audit: type=1400 audit(1769483789.269:22538): avc: denied { execute } for pid=1458 comm="syz.6.296" name="file1" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.844684][ T24] audit: type=1400 audit(1769483789.269:22539): avc: denied { execute_no_trans } for pid=1458 comm="syz.6.296" path="/50/file1" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.893116][ T366] usb-storage 8-1:0.0: USB Mass Storage device detected [ 101.088899][ T1469] binder: 1465:1469 ioctl c0306201 0 returned -14 [ 101.111687][ T1432] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 101.299277][ T366] usb-storage 8-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 101.366060][ T1472] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.395859][ T24] audit: type=1400 audit(1769483789.839:22540): avc: denied { remount } for pid=1431 comm="syz.7.286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 101.432612][ T1432] overlayfs: failed to resolve './bus': -2 [ 101.469867][ T366] usb 8-1: USB disconnect, device number 3 [ 101.496149][ T1472] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.299: inode has both inline data and extents flags [ 101.650307][ T1472] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.299: couldn't read orphan inode 15 (err -117) [ 101.680269][ T1472] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 101.714235][ T1472] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.299: bg 0: block 256: padding at end of block bitmap is not set [ 101.745131][ T1472] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 101.754689][ T1472] EXT4-fs error (device loop4): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.4.299: path /74/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 101.777083][ T15] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.786467][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.794544][ T15] usb 4-1: Product: syz [ 101.798785][ T15] usb 4-1: Manufacturer: syz [ 101.803523][ T15] usb 4-1: SerialNumber: syz [ 101.805523][ T1477] EXT4-fs (loop0): Ignoring removed oldalloc option [ 101.819014][ T1477] EXT4-fs (loop0): Ignoring removed orlov option [ 101.821352][ T1482] IPv6: Can't replace route, no match found [ 101.825434][ T1477] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 102.052032][ T1438] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 102.228856][ T24] audit: type=1400 audit(1769483790.669:22541): avc: denied { create } for pid=1507 comm="syz.7.311" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.280112][ T24] audit: type=1400 audit(1769483790.669:22542): avc: denied { setattr } for pid=1507 comm="syz.7.311" name="file1" dev="overlay" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.378290][ T24] audit: type=1400 audit(1769483790.669:22543): avc: denied { rename } for pid=1507 comm="syz.7.311" name="#9" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.453641][ T24] audit: type=1400 audit(1769483790.669:22544): avc: denied { link } for pid=1507 comm="syz.7.311" name="00fb210001407ce2409df1464fb21aadd93e57d35977a865fa2a00000000000000" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.889426][ T24] audit: type=1400 audit(1769483790.669:22545): avc: denied { name_bind } for pid=1507 comm="syz.7.311" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 103.287065][ T1518] binder: 1517:1518 ioctl c0306201 0 returned -14 [ 103.430146][ T1438] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.472963][ T24] audit: type=1400 audit(1769483791.919:22546): avc: denied { remount } for pid=1476 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.520160][ T15] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 103.536986][ T15] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 103.544830][ T15] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 103.544870][ T1527] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 103.597439][ T1527] EXT4-fs error (device loop6): ext4_orphan_get:1395: inode #15: comm syz.6.316: inode has both inline data and extents flags [ 103.611053][ T15] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 103.618859][ T15] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 103.661908][ T1527] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.316: couldn't read orphan inode 15 (err -117) [ 103.700211][ T1527] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 103.723287][ T1527] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.316: bg 0: block 256: padding at end of block bitmap is not set [ 103.738341][ T1527] EXT4-fs error (device loop6) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 103.751252][ T1527] EXT4-fs error (device loop6): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.6.316: path /61/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 103.984264][ T878] usb 4-1: USB disconnect, device number 9 [ 103.990500][ T878] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 104.015259][ T1554] fuse: Unknown parameter 'ÝRós•?‰d' [ 104.033755][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 104.054354][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.076095][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 104.102309][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.119189][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.135672][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.154775][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.170500][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.628192][ T1577] exFAT-fs (loop6): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 104.668521][ T24] audit: type=1400 audit(1769483793.109:22547): avc: denied { associate } for pid=1576 comm="syz.6.322" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 104.692454][ T1577] exFAT-fs (loop6): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 104.705065][ T1589] binder: 1588:1589 ioctl c0306201 0 returned -14 [ 104.712171][ T1577] exFAT-fs (loop6): Filesystem has been set read-only [ 104.733483][ T1589] FAULT_INJECTION: forcing a failure. [ 104.733483][ T1589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.766238][ T1589] CPU: 0 PID: 1589 Comm: syz.4.327 Not tainted syzkaller #0 [ 104.773636][ T1589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.784218][ T1589] Call Trace: [ 104.787528][ T1589] __dump_stack+0x21/0x24 [ 104.791933][ T1589] dump_stack_lvl+0x1a7/0x208 [ 104.796630][ T1589] ? show_regs_print_info+0x18/0x18 [ 104.801833][ T1589] ? hrtimer_start_range_ns+0x9db/0xaf0 [ 104.807553][ T1589] dump_stack+0x15/0x1c [ 104.811704][ T1589] should_fail+0x3c1/0x510 [ 104.816114][ T1589] should_fail_usercopy+0x1a/0x20 [ 104.821143][ T1589] copy_fpstate_to_sigframe+0x898/0xbb0 [ 104.826701][ T1589] ? fpregs_set+0x5d0/0x5d0 [ 104.831291][ T1589] ? _raw_spin_unlock_irq+0x4e/0x70 [ 104.836611][ T1589] ? get_signal+0x1238/0x12e0 [ 104.841299][ T1589] ? fpu__alloc_mathframe+0x88/0x150 [ 104.846589][ T1589] arch_do_signal_or_restart+0x616/0x11d0 [ 104.852394][ T1589] ? __kasan_check_write+0x14/0x20 [ 104.857615][ T1589] ? mutex_lock+0x92/0xf0 [ 104.861946][ T1589] ? mutex_trylock+0xa0/0xa0 [ 104.866540][ T1589] ? __fget_files+0x2c4/0x320 [ 104.871223][ T1589] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 104.876861][ T1589] ? fput_many+0x15a/0x1a0 [ 104.881277][ T1589] ? __ia32_sys_read+0x90/0x90 [ 104.886028][ T1589] exit_to_user_mode_loop+0xa2/0xe0 [ 104.891291][ T1589] exit_to_user_mode_prepare+0x76/0xa0 [ 104.896725][ T1589] syscall_exit_to_user_mode+0x1d/0x40 [ 104.902174][ T1589] do_syscall_64+0x3d/0x40 [ 104.906667][ T1589] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 104.912710][ T1589] RIP: 0033:0x7f0e2b66e78e [ 104.917113][ T1589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.936704][ T1589] RSP: 002b:00007f0e2a109fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.945098][ T1589] RAX: 0000000000000001 RBX: 00007f0e2a10a6c0 RCX: 00007f0e2b66e78e [ 104.953058][ T1589] RDX: 0000000000000001 RSI: 00007f0e2a10a090 RDI: 0000000000000007 [ 104.961005][ T1589] RBP: 00007f0e2a10a090 R08: 0000000000000000 R09: 0000000000000000 [ 104.968959][ T1589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.976926][ T1589] R13: 00007f0e2b929038 R14: 00007f0e2b928fa0 R15: 00007ffcfc3a01d8 [ 105.056407][ T1595] FAT-fs (loop3): Directory bread(block 64) failed [ 105.063012][ T1595] FAT-fs (loop3): Directory bread(block 65) failed [ 105.069536][ T1595] FAT-fs (loop3): Directory bread(block 66) failed [ 105.076081][ T1595] FAT-fs (loop3): Directory bread(block 67) failed [ 105.082613][ T1595] FAT-fs (loop3): Directory bread(block 68) failed [ 105.089275][ T1595] FAT-fs (loop3): Directory bread(block 69) failed [ 105.095858][ T1595] FAT-fs (loop3): Directory bread(block 70) failed [ 105.102552][ T1595] FAT-fs (loop3): Directory bread(block 71) failed [ 105.109165][ T1595] FAT-fs (loop3): Directory bread(block 72) failed [ 105.116286][ T1595] FAT-fs (loop3): Directory bread(block 73) failed [ 105.150783][ T1591] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 105.158653][ T1591] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 105.167775][ T1591] F2FS-fs (loop7): invalid crc value [ 105.216610][ T1591] F2FS-fs (loop7): Found nat_bits in checkpoint [ 105.255627][ T1591] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 105.262853][ T1591] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 105.330725][ T1608] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.342985][ T1608] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.334: inode has both inline data and extents flags [ 105.356679][ T1608] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.334: couldn't read orphan inode 15 (err -117) [ 105.369357][ T1608] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 105.385443][ T1608] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.334: bg 0: block 256: padding at end of block bitmap is not set [ 105.400250][ T1608] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 105.409918][ T1608] EXT4-fs error (device loop0): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.0.334: path /54/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 105.429837][ T1610] FAT-fs (loop6): Directory bread(block 64) failed [ 105.438370][ T1610] FAT-fs (loop6): Directory bread(block 65) failed [ 105.445574][ T1610] FAT-fs (loop6): Directory bread(block 66) failed [ 105.456372][ T1617] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.460152][ T1610] FAT-fs (loop6): Directory bread(block 67) failed [ 105.466367][ T1617] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 105.487259][ T1610] FAT-fs (loop6): Directory bread(block 68) failed [ 105.493879][ T1610] FAT-fs (loop6): Directory bread(block 69) failed [ 105.500698][ T1610] FAT-fs (loop6): Directory bread(block 70) failed [ 105.507365][ T1610] FAT-fs (loop6): Directory bread(block 71) failed [ 105.514066][ T1610] FAT-fs (loop6): Directory bread(block 72) failed [ 105.520983][ T1610] FAT-fs (loop6): Directory bread(block 73) failed [ 105.593270][ T1617] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 105.602118][ T1617] FAT-fs (loop3): Filesystem has been set read-only [ 105.618865][ T1617] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 105.643091][ T1617] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 105.883421][ T362] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 105.942187][ T1632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 105.952422][ T1632] device vlan2 entered promiscuous mode [ 105.958048][ T1632] device dummy0 entered promiscuous mode [ 106.206241][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 106.206252][ T24] audit: type=1400 audit(1769483794.649:22549): avc: denied { set_context_mgr } for pid=1633 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 106.233750][ T1635] binder: 1633:1635 unknown command 0 [ 106.245430][ T1635] binder: 1633:1635 ioctl c0306201 200000000080 returned -22 [ 106.262055][ T1635] binder: 1633:1635 ioctl c0306201 2000000003c0 returned -14 [ 106.295460][ T1635] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 106.380145][ T362] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 106.389307][ T362] usb 8-1: config 1 has no interface number 1 [ 106.400229][ T362] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 106.512093][ T1645] erofs: (device loop3): mounted with root inode @ nid 36. [ 106.521191][ T1645] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 106.529599][ T1645] BUG: scheduling while atomic: syz.3.343/1645/0x00000002 [ 106.536844][ T1645] Modules linked in: [ 106.540789][ T1645] Preemption disabled at: [ 106.540810][ T1645] [] z_erofs_reload_indexes+0x318/0x450 [ 106.552497][ T1645] CPU: 1 PID: 1645 Comm: syz.3.343 Not tainted syzkaller #0 [ 106.559782][ T1645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.569828][ T1645] Call Trace: [ 106.573202][ T1645] __dump_stack+0x21/0x24 [ 106.577608][ T1645] dump_stack_lvl+0x1a7/0x208 [ 106.582298][ T1645] ? z_erofs_reload_indexes+0x318/0x450 [ 106.588146][ T1645] ? show_regs_print_info+0x18/0x18 [ 106.593430][ T1645] ? slab_free_freelist_hook+0xc5/0x190 [ 106.598960][ T1645] ? z_erofs_reload_indexes+0x318/0x450 [ 106.604495][ T1645] dump_stack+0x15/0x1c [ 106.608658][ T1645] __schedule_bug+0x183/0x240 [ 106.613309][ T1645] ? __migrate_task+0x190/0x190 [ 106.618135][ T1645] ? putname+0xfe/0x150 [ 106.622266][ T1645] __schedule+0xc45/0x1320 [ 106.626754][ T1645] ? do_sys_open+0xe0/0xe0 [ 106.631211][ T1645] ? __sched_text_start+0x8/0x8 [ 106.636133][ T1645] ? switch_fpu_return+0x19c/0x330 [ 106.641253][ T1645] ? fpu__clear_all+0x20/0x20 [ 106.646081][ T1645] schedule+0x13c/0x1d0 [ 106.650318][ T1645] exit_to_user_mode_loop+0x4b/0xe0 [ 106.655491][ T1645] exit_to_user_mode_prepare+0x76/0xa0 [ 106.661015][ T1645] syscall_exit_to_user_mode+0x1d/0x40 [ 106.666471][ T1645] do_syscall_64+0x3d/0x40 [ 106.670879][ T1645] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 106.676747][ T1645] RIP: 0033:0x7fa5ec158eb9 [ 106.681140][ T1645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.701169][ T1645] RSP: 002b:00007fa5eabb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.709558][ T1645] RAX: ffffffffffffff8b RBX: 00007fa5ec3d3fa0 RCX: 00007fa5ec158eb9 [ 106.717518][ T1645] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 106.725559][ T1645] RBP: 00007fa5ec1c6c1f R08: 0000000000000000 R09: 0000000000000000 [ 106.733504][ T1645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.741449][ T1645] R13: 00007fa5ec3d4038 R14: 00007fa5ec3d3fa0 R15: 00007fff63cf9ab8 [ 106.752495][ T1649] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 106.760860][ T1649] BUG: scheduling while atomic: syz.3.343/1649/0x00000002 [ 106.768001][ T1649] Modules linked in: [ 106.771960][ T1649] Preemption disabled at: [ 106.771985][ T1649] [] z_erofs_reload_indexes+0x318/0x450 [ 106.783682][ T1649] CPU: 1 PID: 1649 Comm: syz.3.343 Tainted: G W syzkaller #0 [ 106.783694][ T1649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.802526][ T1649] Call Trace: [ 106.805903][ T1649] __dump_stack+0x21/0x24 [ 106.810226][ T1649] dump_stack_lvl+0x1a7/0x208 [ 106.814888][ T1649] ? z_erofs_reload_indexes+0x318/0x450 [ 106.820430][ T1649] ? show_regs_print_info+0x18/0x18 [ 106.825611][ T1649] ? slab_free_freelist_hook+0xc5/0x190 [ 106.831135][ T1649] ? z_erofs_reload_indexes+0x318/0x450 [ 106.836726][ T1649] dump_stack+0x15/0x1c [ 106.840954][ T1649] __schedule_bug+0x183/0x240 [ 106.845614][ T1649] ? __migrate_task+0x190/0x190 [ 106.850450][ T1649] ? putname+0xfe/0x150 [ 106.854598][ T1649] __schedule+0xc45/0x1320 [ 106.859003][ T1649] ? do_sys_open+0xe0/0xe0 [ 106.863414][ T1649] ? __sched_text_start+0x8/0x8 [ 106.868272][ T1649] ? switch_fpu_return+0x19c/0x330 [ 106.873373][ T1649] ? fpu__clear_all+0x20/0x20 [ 106.878162][ T1649] ? __fdget+0x1b3/0x230 [ 106.882407][ T1649] schedule+0x13c/0x1d0 [ 106.886545][ T1649] exit_to_user_mode_loop+0x4b/0xe0 [ 106.891867][ T1649] exit_to_user_mode_prepare+0x76/0xa0 [ 106.897405][ T1649] syscall_exit_to_user_mode+0x1d/0x40 [ 106.902926][ T1649] do_syscall_64+0x3d/0x40 [ 106.907347][ T1649] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 106.913215][ T1649] RIP: 0033:0x7fa5ec158eb9 [ 106.917609][ T1649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.937216][ T1649] RSP: 002b:00007fa5eab94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.945606][ T1649] RAX: ffffffffffffff8b RBX: 00007fa5ec3d4090 RCX: 00007fa5ec158eb9 [ 106.953565][ T1649] RDX: 00000000001c1182 RSI: 0000200000004400 RDI: ffffffffffffff9c [ 106.961619][ T1649] RBP: 00007fa5ec1c6c1f R08: 0000000000000000 R09: 0000000000000000 [ 106.969578][ T1649] R10: 000000000000009b R11: 0000000000000246 R12: 0000000000000000 [ 106.977612][ T1649] R13: 00007fa5ec3d4128 R14: 00007fa5ec3d4090 R15: 00007fff63cf9ab8 [ 106.989411][ T1651] sch_tbf: burst 19408 is lower than device lo mtu (65550) ! [ 107.020174][ T362] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.030159][ T362] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.042357][ T362] usb 8-1: Product: syz [ 107.046531][ T362] usb 8-1: Manufacturer: syz [ 107.051258][ T362] usb 8-1: SerialNumber: syz [ 107.550194][ T362] usb 8-1: 2:1 : unknown format tag 0x1006 is detected. processed as MPEG. [ 107.559442][ T362] usb 8-1: found format II with max.bitrate = 3, frame size=7 [ 107.566999][ T362] usb 8-1: 2:1 : unknown format tag 0x1006 is detected. processed as MPEG. [ 107.575691][ T362] usb 8-1: found format II with max.bitrate = 3, frame size=7 [ 107.620151][ T362] usb 8-1: 2:130: cannot set enable PITCH [ 107.640148][ T362] usb 8-1: 2:1: cannot set freq 11796480 to ep 0x82 [ 107.662474][ T362] usb 8-1: USB disconnect, device number 4 [ 107.870523][ T573] udevd[573]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory