last executing test programs: 1m31.051841359s ago: executing program 3 (id=4): r0 = socket$can_raw(0x1d, 0x3, 0x1) epoll_create(0x4) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES64=r1], 0x0) syz_open_procfs(0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x6, 0x8}]}, 0xc, 0x2) 1m29.590440655s ago: executing program 3 (id=11): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) open(&(0x7f0000000080)='./bus\x00', 0x400151042, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000080)={{0x5c, @multicast2, 0x4e24, 0x800002, 'nq\x00', 0x0, 0x3, 0x10003}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffd, 0x2000, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) unshare(0x400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0a00fef8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b570ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198010000000000008050d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d18165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0144587734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbf8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5e18b10cce8de33693"], &(0x7f0000000280)='GPL\x00'}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008ecf, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'roPtcontext\x06z\xb6\x7f\x81\xe7I\x99/\xe8K*\x84\x91\xe2\xc3N\xd6!\xb3\xfe\xb2\xb13\x80,\xba\xd6$\xf9\x8bGu\x96h\xc3a\xe3+\xb8\xfe\xb1\xe0W\xc7\xb4V\x9f\xd1\x91I4\xec\xa2\xfcP\xdeZ\x00\xb4\xa9 \xf0\xb8n\x92&&\"\f\xcd\xf7{\xc5\xfe\xa9z\xa1\xbaQ\xfd\xfe#\xaf\xe3G\xb3Dv\x80k\xb9K\xe2\xfep\xee\xeeuH{\'\a\x9b{\b\xbb\xa8\xda`\x16\x88\xc7\xa8k\xf7<\xcbK_\xa9\x03\x1b\x0fx\'\xd1U\xe9\xad\x0e\xd7\x04\xd1\xaa\xad\xa3F\x12\xb1\x99\t}!\xf3\x84kti\x1bdH!\xa5\x876\x87\x9c\xc9ou\xf6c\xdau`\b\x9b\xdc\xb8\xc8;\t\xa5R\xe1\xdd\xa0\xa8\xe8\x86G+H\xa9G\xa5\xc5\x1d\xce3\xden\xfd\xdc\xb8\x82\xba\x1eX\xe5\x11\xb2\rttN\x15\xe9\x90\xbfS\x1e01\x13J\x13'}}]}, 0x0, 0x4e6, &(0x7f0000000cc0)="$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") 1m29.398118171s ago: executing program 3 (id=12): prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x101, 0x4e21, 0x1, 0x2, 0x0, 0xa0, 0x3c, 0x0, 0xffffffffffffffff}, {0x8, 0x4d80000, 0x2, 0x6, 0x2, 0x1, 0x9, 0x8}, {0x8000, 0x3, 0xaf68}, 0x4, 0x6e6bb0, 0x1, 0x0, 0x3}, {{@in=@private=0xa010100, 0x4d2, 0x2b}, 0x2, @in=@broadcast, 0x3505, 0x1, 0x1, 0x0, 0x400, 0x691, 0x9}}, 0xe8) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_SET_TSC(0x1a, 0x0) prctl$PR_GET_SECCOMP(0x15) 1m29.397799131s ago: executing program 3 (id=13): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1, 0x6, 0x0, 0xf, 0xbfffffffffffff85}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r3 = dup(r2) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") ioctl$PTP_EXTTS_REQUEST2(r3, 0x40383d0c, &(0x7f0000000040)={0x8}) ustat(0xe0a8, &(0x7f0000000100)) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) syz_clone3(&(0x7f0000000380)={0x1181700, &(0x7f0000000000), 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) pread64(r1, &(0x7f00000031c0)=""/212, 0xd4, 0x7fffffff) 1m29.263053725s ago: executing program 3 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000002000000310a000008"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$getown(r0, 0x9) r3 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000004c80)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004cc0)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000004dc0)=0xe8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000050c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x100000) r9 = syz_clone(0x4000100, &(0x7f0000005100)="aa4451ce5808f367d1fd", 0xa, &(0x7f0000005140), &(0x7f0000005180), &(0x7f00000051c0)="0e55d2f8b29f7f83c4bc7192e90753244ca949d321577c9dbb17449c97dcd074f856fd76970aba5bcc1e4559d1a15a87d26b78b28df20b03a90ff83f8f79059e374e1acb5726b0a5965add911bfe46f719f90a09b084d3dda8915e34368ba4deb4dd66e1b62c04a3cd2f9d5a10220daea197000777cce6e3") r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000040)={r11, 0x1, 0x4, @local}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x401, 0xfffffffe, 0x0, 0xffffffff, 0x1a0}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0xffffff61, 0x1000}}]}]}}}]}, 0x64}}, 0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r15, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000000)={r11, 0x1, 0x0, @local}, 0x10) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000000c0)={r11, 0x1, 0x6}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005240)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000005340)=0xe8) r17 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) r18 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r18, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r17, r19, r20) read$FUSE(0xffffffffffffffff, &(0x7f0000005380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000073c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@loopback}}, &(0x7f00000074c0)=0xe8) ioctl$XFS_IOC_GETBMAPX(r7, 0xc0205838, &(0x7f0000000000)={0x7fffffff, 0x6, 0x6, 0x8, 0x6, 0x3f, 0xc}) newfstatat(0xffffffffffffff9c, &(0x7f0000007500)='./file0\x00', &(0x7f0000007540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmsg$netlink(r1, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)={0x1178, 0x15, 0x20, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0xbd, 0x0, 0x0, @u32=0x3ff}, @generic="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", @nested={0xa8, 0x10d, 0x0, 0x1, [@generic="726a67982125ba5635c11d93a59e33563378734c62f6e28a45bf50b5a098da53e4b4c5ff1f2e35afb40497ca7a0fdd0a2bd639f535ff84799a871ccf9ef258dab44a208f4e9b2f5db691f0a023b9f853108f470fb0691b842fc261505f5edef0e603858d6b1b5639c5217d20e9937f96d7e101a9cbf76a2c5315631e7d672ef788a05268f28c4b3b902379a326e102fe9c99c4218fee49f31419dcf8cdb160a28a220aef"]}, @generic="abfcb2aff5571581de7b2d5ccc4338723b231d595b4fa5b844e154eb8e0521dc67276ed2fdc562f63fa09096328dc06954e6bb", @nested={0x10, 0x82, 0x0, 0x1, [@nested={0x4, 0xe7}, @typed={0x8, 0xee, 0x0, 0x0, @fd=r0}]}, @generic="c4dfb9a4296fd8fc7167390421891804bc08d81fddbf3f786d959478283b09cc6d8cc395c2d9b74f292db1035f5bc8416370a24531af7f5c9ff808d85f2b68e1ff9f266ba7a6fe696cdae8d1d37aea7c7ce44dd592617b3737089105d99781a3f920c014261b3c50df5b0615628eafcb60f9e0"]}, 0x1178}, {&(0x7f0000007680)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08004f000a01010000ffff00000000dede5bc02700"], 0x247c}, {&(0x7f0000003940)={0x320, 0x34, 0x4, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x108, 0x0, 0x0, @u32=0x800}, @generic="ca37e504b310177f467f2e6327a0d385b6ce3d1e485a0cd71b6a60ae35e9dc5423baf744c7888461d1fbb762ba79f291f02e4830920c0904de27ebe95317e86bf59d0859c2771d84ec39774784a050088a2b558e303a55a05f85a5ab9cb9f0c404909860f71ccd345eaecd101bacb1", @typed={0xfd, 0x47, 0x0, 0x0, @binary="534dd84dd13e352eaa48fb0400bddb0177bb202f109ff160398264cded4ded4e443efeff111c5916aca05308b7f23fa9666607ea1afe4d9847bd9052f3406445276f96081cfaa8ee4a2d8df25853b41ac8f1d8c163ceb4b9de3cf7d284682b7d41f31bcd74cb8d17a98c459a29217c08c39b78f13e3e81be5ad6bf60896f22cdbdec90f0f2f9e40e3c0c6054ee9ca55e71b3b49c2b246af92111ca774e688ace9ef34fe23c35b038a1babd0124939dc0f6d054b4dc33dddd77848503e84b6b8d4a0029b884533b38c0b4f72fa23d554fc2e1665356abebedc12b2e1d70a319a01a2f38117efba65204ea2e06cb235b8703d8a7f4a749163c95"}, @typed={0x4, 0xd4}, @generic="45669cb2dfc21dc1a2fa5f8a0e2790f8e354083ba4cb727067f9141a8251b7263ca6e9cc19529dacbcf3640c82ca4e79291b853a65ebfdc7859b6d850d61e916032446ce51c275d0bdcca7466791baaa94295334fe49aacd41d1853b85e09dc41eae63e5e8ae17cce033d1ce5fab7da650b78375b51d6f900ca8fb074110b739129c65868bd9ea79e02298c2752de0c248e94d959a9b16fa87c5bc2b2eddd6dd", @generic="f335a50ed8eab974d19b1cf85792cd168b748df1d4d11fb9141e48ea69f3287298b933e11da569725b715ced226ca19a8aee87a1ac7237f83aee7bc9829e9923af266644a81ddbd7fe67472ac1f9a7e77726910f45f4befc5d48e9b03319df3ec41a02ff0779021f74c7badc078b23a110bfc2bc262ac8b029f6bc485df42bf5991e3b9f7fbf448e6796de2a48af41c00837d6343a3e6ae08b195567a2c1b9be05ee05db261afc011e106b7f3d9f7e423df108e7cd887618b73d87564b1e8fa2a046458acbe2cc6415a33568c40b2c206719face216a2f4b9f50264304f6535c5c75a04e484159603d66250b732ff91d96e9da"]}, 0x320}, {&(0x7f0000004e00)=ANY=[@ANYBLOB="040100002500020028bd7000fddbdf2508008580040055800700f60028400000230042800400da807e22f20e50b1993e352a58cd4fb74150e54fc124938d3d0fdaf8240008003600", @ANYRES32=r4, @ANYBLOB="b5000d800e4b038678083914000401fc0000000000000000000000000000010400ff800800a200", @ANYRES32=r5, @ANYBLOB="080046007f00000168d3e4aedf6e9f503c0f9775c76f585eab21070f09f62fd94b487e572f7725e16ff3235217a6188761b100ef450ecc0998634b0d67838ac46f6ee9f3881dd895c91ce4ba84ff9c6c1be8fccc7a6ccc3647f8debfb2e6a182acb3c6890270a3e6f9f25895ede7dbf4c6950006448ea96241db080012000000000004003f8004005180000000"], 0x104}, {&(0x7f0000004f40)=ANY=[@ANYBLOB="b4000000400002002abd7000fcdbdf25a400858088adbe55b9d50b0af9b1cb93927f8eaebe8e2889f7db87e497e8454cf0e4bc35f4517811f7b655c5db7353dc49820b387535535e7dc591a40be62bfc3010eef1e4f5f55b5523d1406025de817bc7229982d0e5cdefda1e8ddb8dd9b3b877402b339720c7467e852469d720f776bc2c0c52c08867bbdb804c6dde20575e099b2a039396adb7a9cdc965014624d9f332bf49093f99e68ca20061c2454ffdbd27de"], 0xb4}], 0x5, &(0x7f00000075c0)=[@rights={{0x30, 0x1, 0x1, [r0, r6, r0, r0, r8, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r16, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}], 0x70, 0x20008000}, 0x40000) 1m28.859661778s ago: executing program 0 (id=17): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x88) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file7\x00', 0x40, &(0x7f0000000080)={[{@i_version}, {@errors_remount}, {@nobarrier}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x507, &(0x7f0000001300)="$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") 1m28.47598095s ago: executing program 3 (id=18): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000000c0)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf258300000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000580000000900118004000580c63c660f0100000000000000301cf599447971afb018a858adf068"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="b0fd574e", @ANYRES16=r2, @ANYBLOB="000125bd7000fcdbdf257300000008000300", @ANYRES32=r4, @ANYBLOB="0800ef00010000000800ef00080000000800ef00040000000800ef00020000000500ee000c000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000140)={0x2000000000000150, &(0x7f00000000c0)}, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m28.438509901s ago: executing program 32 (id=18): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000000c0)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf258300000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000580000000900118004000580c63c660f0100000000000000301cf599447971afb018a858adf068"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="b0fd574e", @ANYRES16=r2, @ANYBLOB="000125bd7000fcdbdf257300000008000300", @ANYRES32=r4, @ANYBLOB="0800ef00010000000800ef00080000000800ef00040000000800ef00020000000500ee000c000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000140)={0x2000000000000150, &(0x7f00000000c0)}, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m27.536093119s ago: executing program 0 (id=22): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) syz_usb_connect$uac3(0x5, 0xc0, &(0x7f0000003a80)=ANY=[@ANYBLOB="1201000300000040410e00304000010203010902ae000301043020080b0100010130bd0904000000010130000a2401004a00070000000a240c040586a50fafdc1124100704000a000793e757fd05221747142402050001060203000000faffe9000700070007240c04027a3b0a240504fc5c701e59810904010000010230000904010101010230000905010908000215090a25250400000008060009040200000102300009040201010102300009058209f9972882cdce9f696520007d04a10a252510000000030500"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x20, &(0x7f0000000000)=ANY=[@ANYBLOB="2003240d8057fb87ba88f1f13c9b1d39a8fdb5ed5ac6d814e63eea48"]}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x183b}}]}) r0 = syz_mount_image$f2fs(&(0x7f00000105c0), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00e2edcea6", @ANYRES16], 0x41, 0x105cf, &(0x7f0000010600)="$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") rename(&(0x7f0000000200)='./bus\x00', &(0x7f00000001c0)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@nobarrier}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000300)='r', 0x1, 0xdecc) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fstat(r3, &(0x7f0000000600)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000180)={0x7}) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000a40)={{r0}, 0x0, 0xa, @inherit={0x68, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000400000000000000ff000000000000008a0000000000000022000000000000000d000000000000000100000000000059fc2b8b949b4f620090f2ffffffffffff07000000000000006d2800000000000007000000000000007f00000000000000"]}, @subvolid=0x7}) 1m24.189395425s ago: executing program 0 (id=35): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x40, 0x80}, &(0x7f0000000340)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000024c0), 0x28042, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000280)=""/239, 0xef}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x8) readv(r2, &(0x7f00000019c0)=[{&(0x7f00000005c0)=""/184, 0xb8}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x40) 1m23.089180779s ago: executing program 0 (id=43): r0 = syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000600)=ANY=[], 0x2, 0x1511, &(0x7f00000031c0)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 1m22.943189535s ago: executing program 0 (id=45): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$TCSBRKP(r4, 0x5425, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000020c0)={[], [], 0x2f}) userfaultfd(0x80001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1f, 0x48, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xed78, 0x28, @mcast1, @mcast2, 0x40, 0x10, 0xa, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000002100)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r9, 0x29, 0x7, 0x5, 0x3, 0x12, @empty, @private0, 0x8000, 0x10, 0x9, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1m22.822738008s ago: executing program 0 (id=47): socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000080)='./file0\x00', 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0xffffffffffffff38) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40100, 0x1c6) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80008, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}, 0x200cc8d0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000400)={&(0x7f0000000200)=""/184, 0xb8}) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1m22.709813962s ago: executing program 33 (id=47): socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000080)='./file0\x00', 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0xffffffffffffff38) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40100, 0x1c6) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80008, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}, 0x200cc8d0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000400)={&(0x7f0000000200)=""/184, 0xb8}) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 54.756679644s ago: executing program 6 (id=181): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "010001", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x2, 0x0, 0x1, 0x0, [@local]}]}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000"], 0x164}}, 0x0) 53.761276585s ago: executing program 6 (id=183): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000440)=""/197, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x19}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000001"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x51]}}, 0x0, 0x40}, 0x28) 53.316887569s ago: executing program 6 (id=185): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @link_local, @dev={0xac, 0x14, 0x14, 0x28}, @link_local, @multicast2}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @link_local, @dev={0xac, 0x14, 0x14, 0x28}, @link_local, @multicast2}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESDEC=r0, @ANYBLOB="2dffff000100006b9b399e4ab366"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESDEC=r0, @ANYBLOB="2dffff000100006b9b399e4ab366"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000280)=0xffff7fff, 0xfffffffffffffdce) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)="4fc751bc29379eb9ae8b44d309ae6ab8ec649d7425b1e0d3654c7a690556ea58709982720875613d02b32a1085a6e8362a2d41f82bc18f840cc1ffcbed357fa6a6cf3b8972fd109bd15d3adf593f6538222dedff97", 0x55}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {&(0x7f00000035c0)=""/44, 0x2c}], 0x2}, 0x1}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) (async) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) (async) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00004ff000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='8%\x00'/14, @ANYRES32=0x0, @ANYRESHEX=r3], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 53.151473904s ago: executing program 6 (id=189): r0 = syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x5, 0x1512, &(0x7f0000000740)="$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") symlink(&(0x7f000000a900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) rename(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fstatfs(r0, &(0x7f0000000380)=""/130) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000440)={0x200000, 0x200003, 0x0, 0x0, 0x20000003}) syz_open_procfs(r1, &(0x7f0000000200)='smaps_rollup\x00') 52.688320859s ago: executing program 6 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r1, @ANYBLOB="010008000000fbdbdf251e00000008000940d66d0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x20001880) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001c00010029bd7000fedbdf250a020000", @ANYRES32=r2, @ANYBLOB="0000420305000c00010000000800010000000000070000000500010004000000040002"], 0x90}, 0x1, 0x0, 0x0, 0xc051}, 0x44040) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x80) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x80) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/6, 0x6}, {0x0, 0x56}], 0x2, 0x0, 0x5245) 52.3330661s ago: executing program 6 (id=197): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r3 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) exit(0x5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) vmsplice(r4, 0x0, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r6, 0x400, 0x1) unlink(&(0x7f0000000280)='./file1\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xde, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r7, 0x4) creat(&(0x7f0000000140)='./file0\x00', 0x160) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x148) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x78e22799f4a46f40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r0, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x44000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 52.32122556s ago: executing program 34 (id=197): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r3 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) exit(0x5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) vmsplice(r4, 0x0, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r6, 0x400, 0x1) unlink(&(0x7f0000000280)='./file1\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xde, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r7, 0x4) creat(&(0x7f0000000140)='./file0\x00', 0x160) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x148) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x78e22799f4a46f40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r0, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x44000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 7.638696099s ago: executing program 2 (id=467): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000002240)=[{&(0x7f0000000300)="d08d6674b2", 0x5}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x1c) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) 7.63777625s ago: executing program 2 (id=468): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c636865636b3d7374726963742c0096e8ebd7fd4a0c18b4405479ded33eb3c9c9c5ce0efe5d24adeefcaca652d828746b71132e4cdc3d7ea7e2fcd80565ded216d20bee3f8be3c983f68f3ba5b37fb556d39b42950be73dfa257e11db6e4b7687a7b1478e9bf85bcc0e678d22aaec29a7fcd61b9196ba6714b4d4e9830fc5a5c66ecd20e0dfd46936e581e4fc477cf17e03c2493346a16ba70486728b2fb936f5991ea4"], 0x11, 0x31c, &(0x7f0000000840)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 7.364834628s ago: executing program 4 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000200)=[@ioring_restriction_sqe_op={0x1, 0x3}, @ioring_restriction_register_op={0x0, 0x22}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1f}, @ioring_restriction_register_op={0x0, 0x11}], 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00f24605000000020000000700000002000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000003f00b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r6}, 0xc) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 6.015047171s ago: executing program 1 (id=470): mlock(&(0x7f000021c000/0x4000)=nil, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0xf0) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00002db000/0x2000)=nil, 0x2000}, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f000021c000/0x2000)=nil) 6.014551541s ago: executing program 4 (id=471): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd27, 0x25dfdbfd, 0x2, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4045}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000740)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x4, {0x9, 0x6, "9eccdc", 0x273, 0x6c, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @remote, [], "73ee99d2d629e569"}}}}}}}, 0x0) setreuid(0xee00, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @void, @value=0x0}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) ptrace(0x10, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r7, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x97, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x9388f9e71c2b7086, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x1, 0x1, 0x40, 0x40, 0x2, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "a315"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x8, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x7fff, 0xff7f, 0xae, 0xd, 0xfffe, 0x5}, @dmm={0x7, 0x24, 0x14, 0x7, 0xa86}, @country_functional={0xc, 0x24, 0x7, 0x2, 0xfff7, [0x1, 0x3da, 0x1]}, @country_functional={0x12, 0x24, 0x7, 0x8, 0xf264, [0xfff8, 0x1a2, 0x5, 0x5, 0x1, 0x8]}, @country_functional={0x10, 0x24, 0x7, 0xb, 0x0, [0x8, 0xfff, 0x6, 0x0, 0x3]}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x4, 0x7f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x6, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0xf8, 0x32}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x9, 0x9, 0x1, 0x40, 0x5}, 0x52, &(0x7f0000000380)={0x5, 0xf, 0x52, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x1, 0xa}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x1b7, 0x0, 0x73, [0xc000, 0xc030, 0x3f00, 0x3f0f, 0xff3f0f, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d2d18dea2b67101d41b389d902fae886"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xd0, 0x9, 0x4, 0x4, 0xb0}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40b}}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000ac0)={"29fa567a5944d23f49075491e485d0d6", 0x0, 0x0, {0x8, 0x9c17}, {0x2, 0x3}, 0x8000, [0xa2, 0x8000, 0x8, 0x40, 0x0, 0x1, 0xffffffff, 0x1, 0x5, 0xffffffffffffffff, 0x4, 0x6, 0x5, 0xf6, 0x0, 0x9]}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 6.014048111s ago: executing program 2 (id=472): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (fail_nth: 11) 5.965547413s ago: executing program 2 (id=474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xa, 0x40, 0x3, 0x41}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="8800000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="9379010000000000140012800b0001006d61637365630000040002804c002b8008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080003000100000008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="cafd1943", @ANYRES32, @ANYBLOB="0800030008000000080003000500000008000a00", @ANYRES32=r2, @ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x1003, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x0}, 0x20) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xe2482, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'wg0\x00', 0x2}) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x68500, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000000100), &(0x7f0000000180)=r11}, 0x20) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000200)={0x38, 0x5f, 0x1, 0x70bd2a, 0x0, {}, [@typed={0x24, 0x2, 0x0, 0x0, @str='\xd8&\xfc,FG\x87\x8c\xa2A\xa3\xc6\x94\x90\r\xa0J\xf9G\x8d\xf5\xd1u\xb1o\xe9\x1a\xb5\t\xfb\xca\xb4'}]}, 0x38}}, 0x4000800) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) 5.607920164s ago: executing program 1 (id=475): r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_GET_FP_MODE(0x4) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000002000000310a000008"], 0x50) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES8=r1, @ANYBLOB="9ec76037270cdec03d00aa9d0d36ba4e8d322954a7ded012b412de3a47aaf85ed606643a871c8891e93623856f9b25d4f89c16c2526dd98adbbb22393eb988ec79e71372a1db3a75c8fa33000000001ed8af23be6ef29e1b893d773f3ddf704031b34c98c6b9"], 0x0) r2 = signalfd(r1, &(0x7f0000000000), 0x8) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000280)={0x1a, 0x4, 0xfffffffffffffffa, 0x8, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) close(0x3) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ptrace(0x8, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x408b, &(0x7f00000040c0)="$eJzszz9Kw3AYBuC3TTSxSEFXB3Fzkrp5BC/QC3QTHBw8QNXbFA/g5AE8iCB4ApdKYmyV4KYo8jxDePP9+cEXft3TKo3Wxaskm8njFzt3s9udlE26GU+SOkl5MW5by1aG+0kmx9kY1cNsJ7nsvzJdfPctAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAX3VSdOF5Xaubz0PStopP40UySOZJZnvLKsn9ede5Ll7OunhwlOR0t/ubNxsr73m6+IlrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/q/yQBzlM9RbrZKs/XL2yO4c2AAJRDED7BeQrRiAh7MFybMOUBIG/5Ox7pqKizVJfnrmvvaqTY/u7TrKObT6zpwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICXHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHcFAAD//7xFGSI=") r11 = syz_open_procfs(r10, &(0x7f0000000100)='smaps\x00') read(r11, &(0x7f0000000140)=""/70, 0x46) bind$inet(r6, &(0x7f0000000280)={0x27, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711827000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000500)=""/152, 0x98, 0x0, &(0x7f00000005c0)=""/165, 0xa5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x25, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x0, 0x3, 0x2, 0x3, 0x50, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0x9, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x26}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x3, 0xfb, &(0x7f0000000340)=""/251, 0x41000, 0x8, '\x00', r3, @fallback=0x2d, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0xe, 0x1, 0x9}, 0x10, r12, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000700)=[{0x0, 0x1, 0xa, 0xa}, {0x1, 0x3, 0x3, 0x6}, {0x4, 0x5, 0x1, 0xa}, {0x0, 0x2, 0xa, 0xa}, {0x2, 0x1, 0xe, 0xb}, {0x3, 0x3, 0xa, 0xb}, {0x4, 0x5, 0xf, 0xc}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0xffffffff}, 0x94) 5.135586439s ago: executing program 7 (id=476): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000780)="120000001200e7ef007b462ea95ce8197900", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f00000009c0)=""/4101, 0x1005}, {&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f0000001c00)=""/248, 0xf8}, {&(0x7f0000000580)=""/64, 0x40}, {&(0x7f00000008c0)=""/216, 0xd8}, {&(0x7f0000000500)=""/93, 0x5d}], 0x9}, 0x5e}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xfffb}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x2000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x29}) close(0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = fcntl$dupfd(r6, 0x0, r5) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r7) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000001ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001b00)={0x7c, r8, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x1}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400, {0xd6a3, 0x1c00, 0xffff, 0xffc5}}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xe, 0xed21, 0xaa83, 0x4, 0x7, 0x4, 0x1, 0xff, 0xc, 0x40, 0x7, 0x3800, 0x10, 0x0, 0x4, 0x27a]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x0, 0x1, 0x4, 0x0, {0x2, 0x80, 0x0, 0x3f7, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0xfc}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4044000) bind$inet(r0, &(0x7f0000000280)={0x27, 0x4e21, @multicast2}, 0x10) clock_nanosleep(0x6, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000007c0)) syslog(0x4, 0x0, 0x0) 5.014756462s ago: executing program 5 (id=479): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000002240)=[{&(0x7f0000000300)="d08d6674b2", 0x5}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x1c) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) 5.005733403s ago: executing program 5 (id=480): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c636865636b3d7374726963742c0096e8ebd7fd4a0c18b4405479ded33eb3c9c9c5ce0efe5d24adeefcaca652d828746b71132e4cdc3d7ea7e2fcd80565ded216d20bee3f8be3c983f68f3ba5b37fb556d39b42950be73dfa257e11db6e4b7687a7b1478e9bf85bcc0e678d22aaec29a7fcd61b9196ba6714b4d4e9830fc5a5c66ecd20e0dfd46936e581e4fc477cf17e03c2493346a16ba70486728b2fb936f5991ea4"], 0x11, 0x31c, &(0x7f0000000840)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000019c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181242, 0xd5c7b21faa1a110b) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x11828, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) r4 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f0000000340)=ANY=[], 0x0, 0x2c6, &(0x7f0000000840)="$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") unshare(0x22020600) unshare(0x10000100) fstatfs(r4, 0x0) 4.947900095s ago: executing program 7 (id=481): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x20048808) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) epoll_create1(0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000001980)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x20, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x75, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x8, 0x10, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x9, 0xe, {0x7, 0x25, 0x1, 0xc, 0x0, 0x99}}}}}}}}]}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) shutdown(r0, 0x1) llistxattr(0x0, 0x0, 0x0) 4.395379332s ago: executing program 2 (id=482): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="00220f000000540b8a50f8209501758483"], 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000300)={0x40, 0x7, 0x11, "d8cdc7697d3c1e2bd17261be2743c2dd6f"}, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x2f3, &(0x7f0000000300)="$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") ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) 3.995733615s ago: executing program 5 (id=483): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c636865636b3d7374726963742c0096e8ebd7fd4a0c18b4405479ded33eb3c9c9c5ce0efe5d24adeefcaca652d828746b71132e4cdc3d7ea7e2fcd80565ded216d20bee3f8be3c983f68f3ba5b37fb556d39b42950be73dfa257e11db6e4b7687a7b1478e9bf85bcc0e678d22aaec29a7fcd61b9196ba6714b4d4e9830fc5a5c66ecd20e0dfd46936e581e4fc477cf17e03c2493346a16ba70486728b2fb936f5991ea4"], 0x11, 0x31c, &(0x7f0000000840)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 3.591670168s ago: executing program 5 (id=484): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x8, 'veth0_virt_wifi\x00', {'bond0\x00'}, 0x40}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001b0001000000000010000000ac1e0001000000000000000000000000ac1414bb0000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffffffffff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000900000000000000800000000000e50000000000000000000400000000000000000000030000000044000500ff010000000000000000000000000001fffffffd3300000000000000ff020000000000000000000000070000000000000001040000000000bb0a000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20004850}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004) 2.88922006s ago: executing program 4 (id=485): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c636865636b3d7374726963742c0096e8ebd7fd4a0c18b4405479ded33eb3c9c9c5ce0efe5d24adeefcaca652d828746b71132e4cdc3d7ea7e2fcd80565ded216d20bee3f8be3c983f68f3ba5b37fb556d39b42950be73dfa257e11db6e4b7687a7b1478e9bf85bcc0e678d22aaec29a7fcd61b9196ba6714b4d4e9830fc5a5c66ecd20e0dfd46936e581e4fc477cf17e03c2493346a16ba70486728b2fb936f5991ea4"], 0x11, 0x31c, &(0x7f0000000840)="$eJzs3U9rXFUYB+A3aZNIJL1ZiKAgHnSjm0sSv4CDtCAGlNhIdSHcmhsd5nYmzB0qU0W7c+vnKC7dCeIXyMa9O3fZuOyiODK55l+dohTibdPngZnzzpz5cc9lOMPZDO/Bje9v9XbrfLcYxfzbKeYjYv5+xOph1ZhrnuaaV4tx2t14M7vx2ysffvzJe53NzatbKV3rXH9rI6V05dWfv/z6h9d+GT3/0Y9XflqK/dVPD/7Y+H3/xf2XDv68/kW3Tt069QejVKSbg8GouFmVaadb9/KUPqjKoi5Tt1+XwzPzu9Vgb2+civ7OyvLesKzrVPTHqVeO02iQRsNxKj4vuv2U53laWQ7+zfa9ra2i0/YqOF/DYaeYbt6lf8xs32tlQQBAq/7z+X/6/mHt/H9xOP8/C6bn/8W/9+9Zzv8AAAAAAAAAAAAAAPA0uD+ZZJPJJDsaH37MiCy0sEzOyWN8/1wgp/6491xE9d3t7dvbzdjMd3ajG1WUsRZZPIiYHGvqa+9uXl1Lh1Zj5da3TX46XjqbX48sVmfn15t8OptfiOXT+Y3I4oXZ+Y2Z+cV44/VT+Tyy+PWzGEQVOzHNnuS/WU/pnfc3H8ovHX4OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGdDno7N7N+f54+ab/LH/fXXIosHs/vzr83sz385Xr7c7r0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJF6fKdXVFU5VFyg4qtLbVx94Ym4d8VJcbTLHyfe7u8SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtOGk6XfbKwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBN9fhOr6iqcniOxaOuPdcMd//H2wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHji/RUAAP//wEslnw==") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000019c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181242, 0xd5c7b21faa1a110b) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x11828, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) r4 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f0000000340)=ANY=[], 0x0, 0x2c6, &(0x7f0000000840)="$eJzs3c9KK1ccB/Bv7s2/ezcR2lXpYqBQupKrbxCKBWmgYAnUrgxVaTEiRBDaRXXXd+nj9DH6ArVQSKkTY2JTreh1NH4+EOZHznxnzklCJglnJjsfHx7sHh3vb3/we9rtIvXkLH8myau8zsS0SGppZtZZAIDnZmtr0K26D7xfo1F30EjS+ldLv1FJhwAAAAAAAAAAALi3hfP/z5OVmfn/tcnylfn/ALAUzP9ffqNRd/B28vltXv/XSjoEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOR8PO6Mb7hV3T8A4OHd5/j/x7j0eL0FAB7C/PG/dpb4/g8Ay+587lhfi9//AWD5fb397ZfdXm9jqyjayeEvJ/2Tfrks27v7+SHD7OVdOvkrGU+V9Rf13sa74sJKdg5PJ/nTk9ZkB5f5tXSysiC/2dtYK/PFXL7fyNvZ/a+nkw8X59cX5pv57JOZ/Go6+e27HGWY3fyTvcr/vFYUn3/Vu5ZvXawHAAAAAAAAAAAAAAAAAAAAj2G1mJo/f7//umxf/a/2JI3JRm66PsDm9PoA186vr+ejeqVDBwAAAAAAAAAAAAAAAAAAgCfj+MefDgbD4d5IcXPxaWtRU23+njcP+6hePklVj/1uRTu3rfPmf26wmScwnGdfjDvlq+iO8YrekAAAAAAAAAAAAAAAAAAA4AW7Ouk3aVbdGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoyNX//9+5+Ob7chO3rlz1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICX4e8AAAD//+TX3yY=") unshare(0x22020600) unshare(0x10000100) fstatfs(r4, 0x0) connect$inet6(r3, 0x0, 0x0) 2.622826298s ago: executing program 5 (id=486): r0 = socket(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_deladdrlabel={0x50, 0x49, 0x2, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x20, 0x0, 0x0, 0xc}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x50}}, 0x4000000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="c50f29bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb, 0x5b}}}}, ["", "", "", "", "", ""]}, 0x20}}, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000342000/0x2000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000665000/0x1000)=nil, 0x1000}, 0x3}) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1235, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x8, 0xc0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x18, [], [{{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0xac, 0x2, {0x4}}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0xa1, 0x7, 0x7, {0x4}}}]}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 1.721321516s ago: executing program 1 (id=487): r0 = socket$pptp(0x18, 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'veth0_virt_wifi\x00', {'bond0\x00'}, 0x40}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001b0001000000000010000000ac1e0001000000000000000000000000ac1414bb0000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffffffffff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000900000000000000800000000000e50000000000000000000400000000000000000000030000000044000500ff010000000000000000000000000001fffffffd3300000000000000ff020000000000000000000000070000000000000001040000000000bb0a000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20004850}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004) 1.626460539s ago: executing program 4 (id=488): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000020000"], 0x50) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000177000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="06"], 0x0) 841.010005ms ago: executing program 1 (id=489): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104200000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a00fe00000000730300000000000ab5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 786.385306ms ago: executing program 1 (id=490): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000002240)=[{0x0}, {&(0x7f0000000300)="d08d6674b2", 0x5}], 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x1c) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) 785.786826ms ago: executing program 1 (id=491): syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12011b0017c7d9105b044d0216270102030109022200010000000009046a0000aad1fc080a2401ec6a"], 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'veth0_virt_wifi\x00', {'bond0\x00'}, 0x40}) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2, &(0x7f0000000040), 0x7, 0x4eb, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="12d46a00000000c60600001c001280090001007866726d000000000c0002800800020092000000e9ad7842b823bca25e40ecf99ebced83262e178450f6797f47a607e152959b46c967652ee2356cddb600f3d056baee2ae497f392177afea070965227416e8a677ed284dc0d41af8a482c8bae5e300323780dba8e23e1666364cf725518bb1188a17f411fab54da9fed0222db64096982bb0797865ff237d68c2c6fbb3010e09cc27d2af2d9bb00"], 0x3c}}, 0x0) 538.694824ms ago: executing program 7 (id=492): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x207, 0x81, 0x4, 0x1c0}, {0x3, 0x8, 0x4, 0x2357}]}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x0, r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) 535.541734ms ago: executing program 2 (id=493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1100"/12, @ANYRES32, @ANYBLOB="2731cebb1df9a51fe8d75ba8b345a095ba7169597fcae698566deca3", @ANYRES64=0x0], 0x20) r2 = syz_socket_connect_nvme_tcp() ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x3, 'macsec0\x00', {0x9}, 0x5}) r3 = socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect(0x3, 0x164, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX=r3, @ANYBLOB="d6e1cf17bb2e1cf3c42847e9256793d3825f1b64f70bbda2b11aeff631b94174ca5aff47c9159fd897b42e39156850b32bc9c6d2128767d5becf600f00ff7ca87272ae07376c074babca0cdd6148a3318d7c5a01aed1018c64055fc2"], 0x0) socket(0x15, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, 0x0, 0x0) 473.252966ms ago: executing program 7 (id=494): r0 = socket(0x21, 0x803, 0x8000000) r1 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) gettid() timer_create(0x5, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r2, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f0000000140)={0x77359400}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000a80)="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", 0xfb}, {&(0x7f0000000b80)="3e9ad69e094942fede151f0a7e92fd1941e24dac8a12d34e94d03de96c9c7a195d0321471ee59355be06bf8d26dfa42576f791a91c30a425df0bf3ecd4cc6903b554330c5befb0b92968337e8c1a568f7c20b6b83f746b2be02e1212e1d655a269cb3ed92e1373260b80a39acf018bb27666bb1ed2f3d516c43bdaca44c3833ab2cfff73813a438901b84b35b02e72ccca588e80e95563b6117f803038959b163929e9ca380709b781b082c9a09ad661827e81121a82e077f9f63fd3791e960e70319770111a85da1cac53f90b00e8694713dc8832dc9b196983374777c2c199790b2915e7a2d5b623a437fb71a1a3d6f161a7", 0xf3}, {&(0x7f0000000c80)="3a1eed506219303111e446412dcbaf8b14f7fa32cd4e3d2f96970c1efd77429be13f9e2aad70e1df6abad4f5ca9cfdbd3c99fc2eff4c47494c1ab89295c220628196fdb58ec9b0c1a637d1", 0x4b}, {&(0x7f0000000e00)="b706bbc2449ab7cc70384a10c8a53522a0a048c5d2a6d311692c91798b2adddc24eb5bf00d008433818cdea577a4d4a2c8ab59f76058e61b27514038a5b95f9648203283ce7d4cefb8ea2614a2e557a8b46e2151b32db13e0035923fb10221c663580a3f80158107a29640ec338d94dfda14428b1a597892c0e3d85111a493876e118a053237c9130168c8ddf2d3ced84759656be419dd5715a73a1d17ccc7b38411bafd8e221234392ca27acd", 0xad}, {&(0x7f0000000ec0)="81ccdef45d3151e8e238cbde3aa00e5666cd4e22c20defccdb7e15f46dfd4ab75feaf8d49a820fe4e7d27eb17c586496ca2fe9e978d99a053caef8076238b8255d50361661979c15c86db0503266e4d9c0e68db9e6b9e0ce6eeadd73b88408fb7a936f6748b82691b7d32c88ab9e433e6be39e26dbf2b051a46746d25cd8d668eef839efc04aeaf0cffca63ba998ecf3875c0017fe1fe60cfbcc76b63036627bc6ec46128e", 0xa5}, {&(0x7f0000000f80)="bb21eedb68d6f2b29864284bb9e6ac3d5956c50f6068bb603bcf84eb6e922763", 0x20}], 0x6}}], 0x5, 0x4000084) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) listen(r4, 0x5) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@private0, @private2={0xfc, 0x2, '\x00', 0x2f}, @remote, 0x4, 0x0, 0x9, 0x0, 0x7, 0x200}) write(r0, &(0x7f0000000000)="1c0600000000000000584707f9f4ffffff000000230000001ff80000", 0x1c) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/143, 0x36, 0x8f, 0x0, 0x45f4, 0x10000}, 0x28) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x2010, r3, 0x1eee9000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x0, 0x81, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xb2, &(0x7f0000000180)=""/178, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, r5, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xd, 0x2, 0x2}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r7], 0x0, 0x10, 0x3}, 0x94) 472.805466ms ago: executing program 7 (id=495): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@noauto_da_alloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x80}}, {@abort}]}, 0x1, 0xbc1, &(0x7f00000025c0)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000051) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6) (async, rerun: 32) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x198) getdents(r1, 0x0, 0x58) (async) getdents(r1, 0x0, 0x0) 382.547979ms ago: executing program 7 (id=496): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x0, r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) (fail_nth: 4) 287.342612ms ago: executing program 4 (id=497): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) (async) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x4b, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\x00x', 0x15, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x84}], "220600d5802c71ee49eff5fbf7"}}}}}, 0x0) (async) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801000, 0x100, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x80}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0xfffffffd}}], 0x1, &(0x7f0000001000)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x183000, 0x0) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 3.09174ms ago: executing program 4 (id=498): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x3, 0x4, @thr={&(0x7f00000006c0)="b7bf9dfd62a1b3c176fdce4101f8b55ac0eab3ae53d114ed51edb1919a1e7066b41f37380a34cf77b7cc8cb65c893a95b4d49197d6e69c281dfebcdc06bc1ec59285787d82714d8bd112fc70a724839d9b1e912ab85beb4804b57b1d2b6c5c8dd7e05baee6416741992812be60346e835339e3ccc8a5fa69119b4dbcb38b76d09d01000000801ce70608ccbeae6934b90c9435f41a424ca00615201ed38d5e038f175d2735c1b934e7f22795c9a150d00a400bf225dc8a5c5a1e18b324bacbd71ea7358563b3709f720f67b9642e36", &(0x7f00000003c0)="15c608e556f90873e02497ea4fdcc3f18ff59093ed997d06e796318dca7031dd05ff75ccc3c388f22a08c06f8d6e87ff1dfc79875bb8ed5a720b4fe4373223f6b1d9008402fb13dc72f691fd95a1a0933d92686802f3ae876ac806dbc9f7aeeabcf1755ba7a4b51646b98d887021fd4301a4bbe8979865a674336384598981ab8c6987da88f4208b9fee324b36e178db3d8e676ae6bb931336d1ba33a9b8696ebc8cd5662bbb450be4690e6b1492131334298836aa932d9834199dc0381fdfb8"}}, &(0x7f0000044000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) unshare(0x40000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000002180)={'raw\x00', 0x2, [{}, {}]}, 0x48) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="26b347e31b000000000000000000000000000400f648c507d78308ad27f69fbcf06294bdf59699b3dd1643fee7a3880875e493c9514abc3ae17696b92f5f091601880b083775ede599e5e01b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000000c0)=r6) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0x8000000, 0x101000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000140)={0xf000, 0x3000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000080)) unshare(0x60040480) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) 0s ago: executing program 5 (id=499): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@user_xattr}, {@stripe={'stripe', 0x3d, 0x5dee}}, {@debug}, {@errors_remount}, {@user_xattr}, {@bh}, {@init_itable}]}, 0xdc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000400)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0xb9, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000aa09000001000020646c507a000000002020207b00000007410000f8ffffffccceb57b08000000b70300000000000000181100"/67, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = socket(0x10, 0x803, 0x0) write(r6, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r6, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r7, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) fcntl$dupfd(r5, 0x0, r4) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$inet(r0, &(0x7f0000000280)={0x27, 0x4e21, @multicast2}, 0x10) kernel console output (not intermixed with test programs): 2 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.165908][ T340] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 55.212121][ T332] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 55.222309][ T332] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 55.295866][ T390] usb 2-1: Using ep0 maxpacket: 32 [ 55.306653][ T390] usb 2-1: config 1 interface 1 altsetting 3 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 55.317849][ T390] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 55.329056][ T390] usb 2-1: config 1 interface 1 has no altsetting 1 [ 55.346235][ T340] usb 6-1: device descriptor read/64, error -71 [ 55.353773][ T390] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 55.363024][ T390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.371078][ T390] usb 2-1: Product: syz [ 55.375311][ T390] usb 2-1: Manufacturer: syz [ 55.380051][ T390] usb 2-1: SerialNumber: syz [ 55.535897][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 55.594956][ T390] usb 2-1: 1:3 : UAC_AS_GENERAL descriptor not found [ 55.602337][ T390] usb 2-1: unit 4 not found! [ 55.615957][ T340] usb 6-1: device descriptor read/64, error -71 [ 55.619489][ T390] usb 2-1: USB disconnect, device number 5 [ 55.715934][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 55.722732][ T60] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 55.731105][ T60] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 55.741528][ T60] usb 5-1: config 0 has no interface number 0 [ 55.745981][ T340] usb usb6-port1: attempt power cycle [ 55.762907][ T60] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 55.772143][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.780618][ T60] usb 5-1: Product: syz [ 55.784902][ T60] usb 5-1: Manufacturer: syz [ 55.789541][ T60] usb 5-1: SerialNumber: syz [ 55.795243][ T60] usb 5-1: config 0 descriptor?? [ 55.826614][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.828336][ T842] loop6: detected capacity change from 0 to 256 [ 55.849553][ T842] FAT-fs (loop6): Unrecognized mount option "?" or missing value [ 55.908849][ T879] loop2: detected capacity change from 0 to 128 [ 55.915529][ T879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.921009][ T316] udevd[316]: incorrect ext4 checksum on /dev/loop2 [ 55.929325][ T879] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 55.934883][ T316] udevd[316]: incorrect ext4 checksum on /dev/loop2 [ 56.003575][ T390] usb 5-1: USB disconnect, device number 7 [ 56.037879][ T884] loop2: detected capacity change from 0 to 4096 [ 56.050135][ T884] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 56.100237][ T287] EXT4-fs (loop1): unmounting filesystem. [ 56.192174][ T340] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 56.237229][ T340] usb 6-1: device descriptor read/8, error -71 [ 56.355388][ T28] audit: type=1400 audit(1779218200.958:470): avc: denied { unlink } for pid=889 comm="syz.1.164" name="#1" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.497092][ T340] usb 6-1: device descriptor read/8, error -71 [ 56.536019][ T307] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 56.615957][ T19] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 56.718133][ T897] loop4: detected capacity change from 0 to 16 [ 56.727201][ T897] erofs: (device loop4): mounted with root inode @ nid 36. [ 56.788310][ T340] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 56.804367][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 56.826688][ T307] usb 3-1: not running at top speed; connect to a high speed hub [ 56.870754][ T340] usb 6-1: device descriptor read/8, error -71 [ 56.888632][ T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.901994][ T307] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 56.931703][ T307] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 56.947089][ T307] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.146052][ T340] usb 6-1: device descriptor read/8, error -71 [ 57.154131][ T307] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 57.188519][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.197928][ T307] usb 3-1: Product: syz [ 57.202136][ T307] usb 3-1: Manufacturer: syz [ 57.212339][ T909] loop5: detected capacity change from 0 to 512 [ 57.214517][ T307] usb 3-1: SerialNumber: syz [ 57.266331][ T340] usb usb6-port1: unable to enumerate USB device [ 57.302919][ T316] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.566457][ T884] device bridge0 entered promiscuous mode [ 57.605891][ T862] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 363: padding at end of block bitmap is not set [ 57.710937][ T884] netlink: 60 bytes leftover after parsing attributes in process `syz.2.162'. [ 57.850959][ T28] audit: type=1400 audit(1779218202.488:471): avc: denied { write } for pid=939 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.010414][ T941] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 58.867470][ T315] usb 7-1: USB disconnect, device number 4 [ 58.874368][ T307] usb 3-1: unit 4 not found! [ 59.643038][ T307] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 59.651695][ T307] usb 3-1: USB disconnect, device number 5 [ 59.887412][ T950] loop6: detected capacity change from 0 to 256 [ 59.897473][ T950] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 60.674190][ T950] netlink: 24 bytes leftover after parsing attributes in process `syz.6.181'. [ 60.907828][ T291] EXT4-fs (loop2): unmounting filesystem. [ 60.917328][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.993380][ T952] xt_hashlimit: size too large, truncated to 1048576 [ 61.196093][ T954] loop1: detected capacity change from 0 to 40427 [ 61.205369][ T340] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 61.214573][ T954] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 61.222956][ T954] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 61.232912][ T954] F2FS-fs (loop1): Unrecognized mount option "Background_gc=sync" or missing value [ 61.339083][ T963] loop5: detected capacity change from 0 to 1024 [ 61.405047][ T963] EXT4-fs (loop5): INFO: recovery required on readonly filesystem [ 61.426760][ T28] audit: type=1400 audit(1779218206.058:472): avc: denied { ioctl } for pid=967 comm="syz.2.188" path="socket:[18261]" dev="sockfs" ino=18261 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.463461][ T972] loop6: detected capacity change from 0 to 256 [ 61.471527][ T963] EXT4-fs (loop5): write access will be enabled during recovery [ 61.524100][ T972] exfat: Deprecated parameter 'namecase' [ 61.531478][ T963] JBD2: no valid journal superblock found [ 61.555317][ T972] exfat: Deprecated parameter 'namecase' [ 61.562214][ T963] EXT4-fs (loop5): error loading journal [ 61.568296][ T28] audit: type=1400 audit(1779218206.178:473): avc: denied { read write } for pid=974 comm="syz.4.191" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.611384][ T972] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8300b014, utbl_chksum : 0xe619d30d) [ 61.653963][ T28] audit: type=1400 audit(1779218206.178:474): avc: denied { open } for pid=974 comm="syz.4.191" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.695681][ T487] exFAT-fs (loop6): invalid start cluster (4278190088) [ 61.712854][ T28] audit: type=1400 audit(1779218206.318:475): avc: denied { mounton } for pid=968 comm="syz.6.189" path="/proc/74/task" dev="proc" ino=18288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 61.949662][ T28] audit: type=1400 audit(1779218206.318:476): avc: denied { unlink } for pid=487 comm="syz-executor" name="file0" dev="loop6" ino=1048636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.988670][ T316] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.186814][ T315] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 62.333184][ T28] audit: type=1400 audit(1779218206.959:477): avc: denied { getopt } for pid=987 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.375098][ T315] usb 3-1: Using ep0 maxpacket: 16 [ 62.392112][ T315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.426865][ T315] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.450192][ T315] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.477608][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.495110][ T315] usb 3-1: Product: syz [ 62.520304][ T1013] loop5: detected capacity change from 0 to 512 [ 62.535495][ T315] usb 3-1: Manufacturer: syz [ 62.540448][ T315] usb 3-1: SerialNumber: syz [ 62.595173][ T1013] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 62.606109][ T1013] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 62.626699][ T1013] EXT4-fs (loop5): group descriptors corrupted! [ 62.756931][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.764558][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.774314][ T1017] device bridge_slave_0 entered promiscuous mode [ 62.784119][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.791934][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.801916][ T1017] device bridge_slave_1 entered promiscuous mode [ 62.875196][ T37] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 63.108862][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.145416][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.203264][ T37] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.275653][ T37] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.315082][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.846434][ T315] usb 3-1: 0:2 : does not exist [ 63.915745][ T37] usb 2-1: config 0 descriptor?? [ 63.986160][ T1013] loop5: detected capacity change from 0 to 16 [ 63.995196][ T759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.111896][ T1027] loop2: detected capacity change from 0 to 16 [ 64.176367][ T1027] erofs: (device loop2): mounted with root inode @ nid 36. [ 64.274779][ T759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.365111][ T28] audit: type=1400 audit(1779218208.979:478): avc: denied { mount } for pid=1028 comm="syz.4.209" name="/" dev="ramfs" ino=19156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 64.395162][ T315] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 64.410477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.431013][ T315] usb 3-1: USB disconnect, device number 6 [ 64.440118][ T1013] erofs: Unknown parameter './cgroup.net/syz1' [ 64.470234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.485964][ T1029] loop4: detected capacity change from 0 to 256 [ 64.493846][ T28] audit: type=1400 audit(1779218209.119:479): avc: denied { mounton } for pid=1028 comm="syz.4.209" path="/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=18329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 64.589322][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.596478][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.605123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.624638][ T37] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 64.631666][ T28] audit: type=1400 audit(1779218209.259:480): avc: denied { map } for pid=1038 comm="syz.2.213" path="socket:[18348]" dev="sockfs" ino=18348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 64.633122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.655977][ T1039] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 64.679616][ T37] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 64.705536][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.713593][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.721808][ T1039] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 64.728487][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.798439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.805466][ T1039] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 64.807280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.834999][ T1039] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 64.846414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.855000][ T1039] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 64.855229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.875046][ T1039] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 64.885049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.904936][ T1039] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 64.924894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.924928][ T1039] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 64.933434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.954275][ T1039] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 64.970140][ T1039] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 64.981943][ T1017] device veth0_vlan entered promiscuous mode [ 64.989391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.998408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.007255][ T394] device bridge_slave_1 left promiscuous mode [ 65.013494][ T394] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.031173][ T394] device bridge_slave_0 left promiscuous mode [ 65.054808][ T394] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.066006][ T394] device veth1_macvtap left promiscuous mode [ 65.084809][ T394] device veth0_vlan left promiscuous mode [ 65.266445][ C1] plantronics 0003:047F:FFFF.0004: hid_field_extract() called with n (132) > 32! (syz.2.215) [ 65.284269][ T1017] device veth1_macvtap entered promiscuous mode [ 65.299168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.312813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.325989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.487371][ T396] usb 2-1: USB disconnect, device number 6 [ 65.519006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.697298][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.731281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.750117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.765811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.782627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.810319][ T28] audit: type=1400 audit(1779218210.439:481): avc: denied { mounton } for pid=1017 comm="syz-executor" path="/root/syzkaller.zdgfRH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.860253][ T1029] loop4: detected capacity change from 0 to 131072 [ 65.873495][ T1029] F2FS-fs (loop4): Test dummy encryption mode enabled [ 65.888247][ T1029] F2FS-fs (loop4): invalid crc value [ 65.935743][ T1029] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.032142][ T1029] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.424674][ T1042] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 66.528535][ T1075] loop5: detected capacity change from 0 to 512 [ 66.536856][ T1075] ext4: Unknown parameter 'measure' [ 66.614548][ T1042] usb 3-1: Using ep0 maxpacket: 16 [ 66.620819][ T1042] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.639657][ T1075] loop5: detected capacity change from 0 to 2048 [ 66.646317][ T1042] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.667392][ T1075] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 66.676336][ T1075] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.680285][ T1042] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.695981][ T1042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.704037][ T1042] usb 3-1: Product: syz [ 66.709710][ T1042] usb 3-1: Manufacturer: syz [ 66.714332][ T1042] usb 3-1: SerialNumber: syz [ 66.750863][ T372] EXT4-fs (loop5): unmounting filesystem. [ 66.957776][ T1093] loop4: detected capacity change from 0 to 16 [ 68.161859][ T1093] erofs: (device loop4): mounted with root inode @ nid 36. [ 68.177642][ T1089] netlink: 60 bytes leftover after parsing attributes in process `syz.4.222'. [ 68.228824][ T1042] usb 3-1: 0:2 : does not exist [ 68.236404][ T1042] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 68.253155][ T1042] usb 3-1: USB disconnect, device number 7 [ 69.041069][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.447608][ T307] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 70.028139][ T1117] loop1: detected capacity change from 0 to 16 [ 70.035340][ T1042] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 70.043691][ T1117] erofs: (device loop1): mounted with root inode @ nid 36. [ 70.271528][ T1042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.273892][ T1123] loop4: detected capacity change from 0 to 1024 [ 70.293156][ T1042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.309975][ T1123] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.325703][ T1042] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.334126][ T307] usb 6-1: Using ep0 maxpacket: 16 [ 70.338913][ T1042] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.353237][ T1042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.353681][ T1123] EXT4-fs (loop4): can't mount with commit=2, fs mounted w/o journal [ 70.368186][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 70.368201][ T28] audit: type=1400 audit(1779218215.000:483): avc: denied { sqpoll } for pid=1128 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.373386][ T307] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.376932][ T1042] usb 8-1: config 0 descriptor?? [ 70.395283][ T307] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.421375][ T307] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.433167][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.441255][ T307] usb 6-1: Product: syz [ 70.445907][ T307] usb 6-1: Manufacturer: syz [ 70.464033][ T307] usb 6-1: SerialNumber: syz [ 70.483116][ T1123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.236'. [ 70.514081][ T332] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 70.679132][ T307] usb 6-1: 0:2 : does not exist [ 70.687366][ T307] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 70.700651][ T1142] loop1: detected capacity change from 0 to 16 [ 70.711483][ T1142] erofs: (device loop1): mounted with root inode @ nid 36. [ 70.720036][ T1142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.242'. [ 70.798500][ T332] usb 3-1: not running at top speed; connect to a high speed hub [ 70.816737][ T332] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 70.829196][ T1042] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 70.835217][ T332] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.840706][ T1042] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 70.852025][ T332] usb 3-1: config 1 interface 0 has no altsetting 0 [ 70.875334][ T307] usb 6-1: USB disconnect, device number 10 [ 70.899955][ T332] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 70.909154][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.173436][ T332] usb 3-1: Product: syz [ 71.177732][ T332] usb 3-1: Manufacturer: syz [ 71.182384][ T332] usb 3-1: SerialNumber: syz [ 71.188082][ T1121] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 71.401127][ T332] usb 3-1: USB disconnect, device number 8 [ 71.536206][ T1155] loop1: detected capacity change from 0 to 512 [ 71.747808][ T390] usb 8-1: USB disconnect, device number 2 [ 72.400215][ T1171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.254'. [ 72.573199][ T1176] loop4: detected capacity change from 0 to 16 [ 72.582320][ T1176] erofs: (device loop4): mounted with root inode @ nid 36. [ 72.837062][ T307] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 74.031666][ T1186] loop7: detected capacity change from 0 to 16 [ 74.074306][ T1186] erofs: (device loop7): mounted with root inode @ nid 36. [ 74.082404][ T1186] netlink: 60 bytes leftover after parsing attributes in process `syz.7.256'. [ 74.165177][ T28] audit: type=1400 audit(1779218218.790:484): avc: denied { setattr } for pid=1189 comm="syz.4.258" name="fdinfo" dev="proc" ino=19586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 74.253528][ T307] usb 6-1: Using ep0 maxpacket: 16 [ 74.255264][ T1195] loop4: detected capacity change from 0 to 512 [ 74.265722][ T307] usb 6-1: device descriptor read/all, error -71 [ 74.271152][ T1195] EXT4-fs: Ignoring removed bh option [ 74.334211][ T1195] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.260: bad orphan inode 14 [ 74.355171][ T1188] loop1: detected capacity change from 0 to 40427 [ 74.360927][ T1195] ext4_test_bit(bit=13, block=18) = 1 [ 74.364164][ T332] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 74.367370][ T1195] is_bad_inode(inode)=0 [ 74.382993][ T1188] F2FS-fs (loop1): fault_injection options not supported [ 74.385768][ T1195] NEXT_ORPHAN(inode)=0 [ 74.394468][ T1195] max_ino=32 [ 74.398037][ T1195] i_nlink=1 [ 74.401633][ T1195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.406421][ T1188] F2FS-fs (loop1): fault_type options not supported [ 74.415860][ T1195] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.441064][ T1188] F2FS-fs (loop1): invalid crc value [ 74.473285][ T1188] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.501117][ T288] EXT4-fs (loop4): unmounting filesystem. [ 74.537686][ T1188] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 74.554214][ T1188] syz.1.259: attempt to access beyond end of device [ 74.554214][ T1188] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 74.563550][ T332] usb 3-1: Using ep0 maxpacket: 16 [ 74.642368][ T1224] loop5: detected capacity change from 0 to 512 [ 75.529490][ T1225] loop4: detected capacity change from 0 to 16 [ 75.539937][ T1042] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 75.575999][ T1225] erofs: (device loop4): mounted with root inode @ nid 36. [ 75.628788][ T287] syz-executor: attempt to access beyond end of device [ 75.628788][ T287] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 75.760822][ T332] usb 3-1: device descriptor read/all, error -71 [ 75.774884][ T1042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.848438][ T1042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.863551][ T1042] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.877903][ T1042] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.887519][ T1042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.897025][ T1042] usb 8-1: config 0 descriptor?? [ 76.243433][ T1238] loop5: detected capacity change from 0 to 16 [ 76.254806][ T1238] erofs: (device loop5): mounted with root inode @ nid 36. [ 76.342657][ T1237] netlink: 60 bytes leftover after parsing attributes in process `syz.5.272'. [ 76.444013][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.487924][ T1263] FAULT_INJECTION: forcing a failure. [ 76.487924][ T1263] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 76.501375][ T1263] CPU: 1 PID: 1263 Comm: syz.1.281 Not tainted syzkaller #0 [ 76.508704][ T1263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.518773][ T1263] Call Trace: [ 76.522077][ T1263] [ 76.525099][ T1263] __dump_stack+0x21/0x24 [ 76.529429][ T1263] dump_stack_lvl+0x110/0x170 [ 76.534134][ T1263] ? __cfi_dump_stack_lvl+0x8/0x8 [ 76.539199][ T1263] ? next_uptodate_page+0x863/0x890 [ 76.544638][ T1263] dump_stack+0x15/0x24 [ 76.548820][ T1263] should_fail_ex+0x3d4/0x520 [ 76.553505][ T1263] should_fail_alloc_page+0x61/0x90 [ 76.558704][ T1263] prepare_alloc_pages+0x148/0x600 [ 76.563823][ T1263] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 76.569019][ T1263] ? __cfi_filemap_map_pages+0x10/0x10 [ 76.574484][ T1263] __alloc_pages+0x15b/0x610 [ 76.579165][ T1263] ? __cfi___alloc_pages+0x10/0x10 [ 76.584273][ T1263] ? do_fault+0x1c97/0x1ee0 [ 76.588833][ T1263] __folio_alloc+0x12/0x40 [ 76.593251][ T1263] handle_mm_fault+0x1972/0x26c0 [ 76.598216][ T1263] ? __cfi_handle_mm_fault+0x10/0x10 [ 76.603583][ T1263] ? lock_vma_under_rcu+0x400/0x4f0 [ 76.609278][ T1263] ? __kasan_check_write+0x14/0x20 [ 76.614394][ T1263] ? fput+0x154/0x1a0 [ 76.618375][ T1263] do_user_addr_fault+0x905/0x1050 [ 76.623499][ T1263] exc_page_fault+0x51/0xb0 [ 76.627999][ T1263] asm_exc_page_fault+0x27/0x30 [ 76.632842][ T1263] RIP: 0033:0x7f6882c5e60b [ 76.637248][ T1263] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 76.657190][ T1263] RSP: 002b:00007f6883d16fa0 EFLAGS: 00010206 [ 76.663255][ T1263] RAX: 0000000000000000 RBX: 00007f6883015fa0 RCX: 0000000000000000 [ 76.671367][ T1263] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000000c0 [ 76.679465][ T1263] RBP: 00007f6883d18090 R08: 0000000000000000 R09: 0000000000000000 [ 76.687530][ T1263] R10: 00002000000000c0 R11: 0000000000000000 R12: 0000000000000001 [ 76.695512][ T1263] R13: 00007f6883016038 R14: 00007f6883015fa0 R15: 00007ffcdf410778 [ 76.703944][ T1263] [ 76.744515][ T1042] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 76.748834][ T1263] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 76.759915][ T332] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 76.827358][ T28] audit: type=1326 audit(1779218221.461:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.1.285" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6882d9ce59 code=0x0 [ 76.829344][ T1042] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 76.989932][ T1275] loop4: detected capacity change from 0 to 512 [ 77.057869][ T1274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.285'. [ 77.585998][ T1042] usb 8-1: USB disconnect, device number 3 [ 77.854973][ T1287] loop1: detected capacity change from 0 to 16 [ 77.863198][ T1287] erofs: (device loop1): mounted with root inode @ nid 36. [ 77.883585][ T332] usb 3-1: Using ep0 maxpacket: 16 [ 77.893404][ T332] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.197320][ T1182] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 78.205119][ T332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.224733][ T28] audit: type=1400 audit(1779218222.861:486): avc: denied { override_creds } for pid=1293 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.252540][ T332] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.272925][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.282439][ T332] usb 3-1: Product: syz [ 78.286825][ T332] usb 3-1: Manufacturer: syz [ 78.292233][ T332] usb 3-1: SerialNumber: syz [ 78.832173][ T1245] mmap: syz.2.274 (1245): VmData 167485440 exceed data ulimit 1023. Update limits or use boot option ignore_rlimit_data. [ 78.852921][ T1182] usb 6-1: Using ep0 maxpacket: 16 [ 78.859426][ T1307] loop1: detected capacity change from 0 to 16 [ 78.866988][ T1307] erofs: (device loop1): mounted with root inode @ nid 36. [ 78.882092][ T1304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.293'. [ 78.894935][ T332] usb 3-1: 0:2 : does not exist [ 78.902690][ T1182] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.916576][ T1182] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.933485][ T332] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 78.941741][ T1182] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.951271][ T1182] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.959638][ T1182] usb 6-1: Product: syz [ 78.964385][ T1182] usb 6-1: Manufacturer: syz [ 78.969191][ T1182] usb 6-1: SerialNumber: syz [ 78.976685][ T332] usb 3-1: USB disconnect, device number 10 [ 79.125654][ T1309] FAULT_INJECTION: forcing a failure. [ 79.125654][ T1309] name failslab, interval 1, probability 0, space 0, times 1 [ 79.158766][ T1309] CPU: 1 PID: 1309 Comm: syz.1.295 Not tainted syzkaller #0 [ 79.166136][ T1309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.176221][ T1309] Call Trace: [ 79.179526][ T1309] [ 79.182485][ T1309] __dump_stack+0x21/0x24 [ 79.186869][ T1309] dump_stack_lvl+0x110/0x170 [ 79.191578][ T1309] ? __cfi_dump_stack_lvl+0x8/0x8 [ 79.196630][ T1309] ? avc_has_perm+0x163/0x250 [ 79.198085][ T1182] usb 6-1: 0:2 : does not exist [ 79.201339][ T1309] dump_stack+0x15/0x24 [ 79.201370][ T1309] should_fail_ex+0x3d4/0x520 [ 79.213683][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.215069][ T1309] __should_failslab+0xac/0xf0 [ 79.233180][ T1182] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 79.235439][ T1309] should_failslab+0x9/0x20 [ 79.247169][ T1309] slab_pre_alloc_hook+0x30/0x1e0 [ 79.252231][ T1309] kmem_cache_alloc_lru+0x49/0x280 [ 79.257382][ T1309] ? sock_alloc_inode+0x28/0xc0 [ 79.262277][ T1309] sock_alloc_inode+0x28/0xc0 [ 79.266995][ T1309] ? __cfi_sock_alloc_inode+0x10/0x10 [ 79.272424][ T1309] new_inode_pseudo+0x70/0x1f0 [ 79.277225][ T1309] __sock_create+0x12c/0x7c0 [ 79.281865][ T1309] __sys_socket+0xcd/0x1a0 [ 79.286320][ T1309] __x64_sys_socket+0x7a/0x90 [ 79.291025][ T1309] x64_sys_call+0x449/0x9a0 [ 79.291896][ T1294] loop4: detected capacity change from 0 to 131072 [ 79.295557][ T1309] do_syscall_64+0x4c/0xa0 [ 79.295594][ T1309] ? clear_bhb_loop+0x30/0x80 [ 79.295626][ T1309] ? clear_bhb_loop+0x30/0x80 [ 79.310665][ T1294] F2FS-fs (loop4): Test dummy encryption mode enabled [ 79.311228][ T1309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.328671][ T1309] RIP: 0033:0x7f6882d9e6c7 [ 79.330056][ T1294] F2FS-fs (loop4): invalid crc value [ 79.333114][ T1309] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.333136][ T1309] RSP: 002b:00007f6883d16f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 79.333158][ T1309] RAX: ffffffffffffffda RBX: 00007f6883015fa0 RCX: 00007f6882d9e6c7 [ 79.333171][ T1309] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 79.333183][ T1309] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 79.333195][ T1309] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 79.343992][ T1182] usb 6-1: USB disconnect, device number 13 [ 79.358099][ T1309] R13: 00007f6883016038 R14: 00007f6883015fa0 R15: 00007ffcdf410778 [ 79.358125][ T1309] [ 79.381349][ T1309] net_ratelimit: 63 callbacks suppressed [ 79.381365][ T1309] socket: no more sockets [ 79.401910][ T1294] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.408395][ T1316] loop7: detected capacity change from 0 to 512 [ 79.458068][ T1316] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 79.465493][ T1294] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 79.467268][ T1316] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.501504][ T28] audit: type=1400 audit(1779218224.131:487): avc: denied { getopt } for pid=1314 comm="syz.7.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.509982][ T1316] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.297: iget: bad i_size value: 2533274857506816 [ 79.541129][ T1316] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.297: iget: bad i_size value: 2533274857506816 [ 79.566311][ T1017] EXT4-fs (loop7): unmounting filesystem. [ 79.738940][ T1340] loop1: detected capacity change from 0 to 512 [ 80.614710][ T1342] loop7: detected capacity change from 0 to 16 [ 80.622172][ T60] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 80.630785][ T1342] erofs: (device loop7): mounted with root inode @ nid 36. [ 80.882880][ T390] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 80.929522][ T1358] FAULT_INJECTION: forcing a failure. [ 80.929522][ T1358] name failslab, interval 1, probability 0, space 0, times 0 [ 80.942241][ T1358] CPU: 0 PID: 1358 Comm: syz.5.312 Not tainted syzkaller #0 [ 80.943058][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 80.949563][ T1358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.955809][ T60] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 80.964689][ T1358] Call Trace: [ 80.964701][ T1358] [ 80.964708][ T1358] __dump_stack+0x21/0x24 [ 80.964736][ T1358] dump_stack_lvl+0x110/0x170 [ 80.964755][ T1358] ? __cfi_dump_stack_lvl+0x8/0x8 [ 80.974535][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.977073][ T1358] dump_stack+0x15/0x24 [ 80.977100][ T1358] should_fail_ex+0x3d4/0x520 [ 80.977118][ T1358] ? security_inode_alloc+0x33/0x120 [ 80.984466][ T60] usb 5-1: config 0 descriptor?? [ 80.989078][ T1358] __should_failslab+0xac/0xf0 [ 81.026007][ T1358] should_failslab+0x9/0x20 [ 81.030622][ T1358] kmem_cache_alloc+0x3b/0x330 [ 81.035410][ T1358] security_inode_alloc+0x33/0x120 [ 81.040554][ T1358] inode_init_always+0x6fc/0x960 [ 81.045516][ T1358] new_inode_pseudo+0xa2/0x1f0 [ 81.050310][ T1358] __sock_create+0x12c/0x7c0 [ 81.054924][ T1358] __sys_socket+0xcd/0x1a0 [ 81.059354][ T1358] __x64_sys_socket+0x7a/0x90 [ 81.064043][ T1358] x64_sys_call+0x449/0x9a0 [ 81.068563][ T1358] do_syscall_64+0x4c/0xa0 [ 81.073000][ T1358] ? clear_bhb_loop+0x30/0x80 [ 81.077697][ T1358] ? clear_bhb_loop+0x30/0x80 [ 81.082483][ T1358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.088494][ T1358] RIP: 0033:0x7f4ca979e6c7 [ 81.092943][ T1358] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.112747][ T1358] RSP: 002b:00007f4caa5a6f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 81.121194][ T1358] RAX: ffffffffffffffda RBX: 00007f4ca9a15fa0 RCX: 00007f4ca979e6c7 [ 81.129181][ T1358] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 81.137165][ T1358] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 81.145155][ T1358] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 81.149917][ T1360] loop7: detected capacity change from 0 to 16 [ 81.153144][ T1358] R13: 00007f4ca9a16038 R14: 00007f4ca9a15fa0 R15: 00007ffdc8cf1878 [ 81.153167][ T1358] [ 81.274150][ T390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.287051][ T1358] socket: no more sockets [ 81.373204][ T390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.538774][ T390] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.560885][ T28] audit: type=1400 audit(1779218226.181:488): avc: denied { connect } for pid=1363 comm="syz.5.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.583272][ T390] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.592347][ T390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.612503][ T28] audit: type=1400 audit(1779218226.181:489): avc: denied { write } for pid=1363 comm="syz.5.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.652610][ T390] usb 3-1: config 0 descriptor?? [ 81.665507][ T316] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.684280][ T1359] netlink: 60 bytes leftover after parsing attributes in process `syz.7.306'. [ 81.695251][ T60] usb 5-1: USB disconnect, device number 8 [ 81.897865][ T1376] loop1: detected capacity change from 0 to 512 [ 82.494969][ T390] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 82.531925][ T390] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 82.774074][ T1332] loop2: detected capacity change from 0 to 256 [ 82.802220][ T1332] FAT-fs (loop2): Unrecognized mount option "?" or missing value [ 82.822318][ T390] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 82.865111][ T316] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.927556][ T1385] capability: warning: `syz.1.322' uses 32-bit capabilities (legacy support in use) [ 82.990045][ T28] audit: type=1400 audit(1779218227.621:490): avc: denied { setattr } for pid=1384 comm="syz.1.322" name="NETLINK" dev="sockfs" ino=20043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.002294][ T1182] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 83.043249][ T28] audit: type=1400 audit(1779218227.671:491): avc: denied { getopt } for pid=1384 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.064516][ T390] usb 8-1: Using ep0 maxpacket: 16 [ 83.073471][ T390] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.083756][ T390] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.102453][ T390] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.111632][ T390] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.119695][ T390] usb 8-1: Product: syz [ 83.121543][ T1375] loop4: detected capacity change from 0 to 131072 [ 83.123953][ T390] usb 8-1: Manufacturer: syz [ 83.131369][ T1375] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 83.139771][ T390] usb 8-1: SerialNumber: syz [ 83.143628][ T1375] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 83.156814][ T1375] F2FS-fs (loop4): invalid crc value [ 83.164206][ T1375] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.172346][ T1182] usb 6-1: device descriptor read/64, error -71 [ 83.204282][ T1375] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 83.211415][ T1375] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 83.230612][ T28] audit: type=1400 audit(1779218227.861:492): avc: denied { ioctl } for pid=1374 comm="syz.4.314" path="/56/file2/file1" dev="loop4" ino=7 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.257679][ T288] F2FS-fs (loop4): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:1407713280 [ 83.332324][ T60] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 83.358841][ T390] usb 8-1: 0:2 : does not exist [ 83.366828][ T390] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 83.382690][ T390] usb 8-1: USB disconnect, device number 4 [ 83.442325][ T1182] usb 6-1: device descriptor read/64, error -71 [ 83.524539][ T60] usb 2-1: not running at top speed; connect to a high speed hub [ 83.541463][ T1395] loop4: detected capacity change from 0 to 16 [ 83.553902][ T60] usb 2-1: config 7 has an invalid interface number: 28 but max is 1 [ 83.562804][ T60] usb 2-1: config 7 has an invalid interface number: 29 but max is 1 [ 83.571133][ T60] usb 2-1: config 7 has no interface number 0 [ 83.578687][ T60] usb 2-1: config 7 has no interface number 1 [ 83.585551][ T60] usb 2-1: config 7 interface 28 altsetting 127 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 83.605292][ T60] usb 2-1: config 7 interface 28 altsetting 127 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 83.617456][ T60] usb 2-1: config 7 interface 28 altsetting 127 has an invalid endpoint with address 0x0, skipping [ 83.629702][ T1395] erofs: (device loop4): mounted with root inode @ nid 36. [ 83.705149][ T60] usb 2-1: config 7 interface 29 altsetting 7 has an invalid endpoint with address 0x26, skipping [ 83.716604][ T60] usb 2-1: config 7 interface 29 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 83.727569][ T60] usb 2-1: config 7 interface 29 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 83.745205][ T60] usb 2-1: config 7 interface 29 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 83.756519][ T60] usb 2-1: config 7 interface 29 altsetting 7 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 83.765846][ T1397] FAULT_INJECTION: forcing a failure. [ 83.765846][ T1397] name failslab, interval 1, probability 0, space 0, times 0 [ 83.777450][ T60] usb 2-1: config 7 interface 29 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 83.780624][ T1397] CPU: 0 PID: 1397 Comm: syz.4.324 Not tainted syzkaller #0 [ 83.790737][ T60] usb 2-1: config 7 interface 29 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 83.797983][ T1397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.797998][ T1397] Call Trace: [ 83.798004][ T1397] [ 83.798010][ T1397] __dump_stack+0x21/0x24 [ 83.798037][ T1397] dump_stack_lvl+0x110/0x170 [ 83.808662][ T60] usb 2-1: config 7 interface 29 altsetting 7 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 83.818717][ T1397] ? __cfi_dump_stack_lvl+0x8/0x8 [ 83.818760][ T1397] dump_stack+0x15/0x24 [ 83.818779][ T1397] should_fail_ex+0x3d4/0x520 [ 83.822091][ T60] usb 2-1: config 7 interface 29 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 83.825030][ T1397] __should_failslab+0xac/0xf0 [ 83.829392][ T60] usb 2-1: config 7 interface 29 altsetting 7 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 83.834045][ T1397] ? sk_prot_alloc+0xed/0x320 [ 83.834069][ T1397] should_failslab+0x9/0x20 [ 83.834087][ T1397] __kmem_cache_alloc_node+0x3d/0x2c0 [ 83.834111][ T1397] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 83.834131][ T1397] ? sk_prot_alloc+0xed/0x320 [ 83.834149][ T1397] __kmalloc+0xa1/0x1e0 [ 83.834166][ T1397] sk_prot_alloc+0xed/0x320 [ 83.834183][ T1397] sk_alloc+0x3b/0x460 [ 83.834201][ T1397] netlink_create+0x3c2/0x640 [ 83.834219][ T1397] ? __cfi_genl_bind+0x10/0x10 [ 83.846283][ T60] usb 2-1: config 7 interface 28 has no altsetting 0 [ 83.850109][ T1397] __sock_create+0x39e/0x7c0 [ 83.854496][ T60] usb 2-1: config 7 interface 29 has no altsetting 0 [ 83.858944][ T1397] __sys_socket+0xcd/0x1a0 [ 83.858967][ T1397] __x64_sys_socket+0x7a/0x90 [ 83.962258][ T1397] x64_sys_call+0x449/0x9a0 [ 83.966779][ T1397] do_syscall_64+0x4c/0xa0 [ 83.971200][ T1397] ? clear_bhb_loop+0x30/0x80 [ 83.975885][ T1397] ? clear_bhb_loop+0x30/0x80 [ 83.980569][ T1397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.986554][ T1397] RIP: 0033:0x7f5dead9e6c7 [ 83.990967][ T1397] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.010657][ T1397] RSP: 002b:00007f5debc7ef98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 84.019074][ T1397] RAX: ffffffffffffffda RBX: 00007f5deb015fa0 RCX: 00007f5dead9e6c7 [ 84.027141][ T1397] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 84.035281][ T1397] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 84.043258][ T1397] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 84.051224][ T1397] R13: 00007f5deb016038 R14: 00007f5deb015fa0 R15: 00007ffe99742c28 [ 84.059196][ T1397] [ 84.071746][ T60] usb 2-1: New USB device found, idVendor=0bda, idProduct=819a, bcdDevice=b1.9f [ 84.090669][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.109437][ T60] usb 2-1: Product: syz [ 84.121143][ T60] usb 2-1: Manufacturer: syz [ 84.128758][ T60] usb 2-1: SerialNumber: syz [ 84.132136][ T1182] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 84.133702][ T1042] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 84.788633][ T1422] loop4: detected capacity change from 0 to 16 [ 85.550862][ T1425] loop2: detected capacity change from 0 to 512 [ 85.610386][ T1422] erofs: (device loop4): mounted with root inode @ nid 36. [ 85.628242][ T1420] netlink: 60 bytes leftover after parsing attributes in process `syz.4.330'. [ 85.637813][ T1182] usb 6-1: device descriptor read/64, error -71 [ 85.850314][ T1428] loop7: detected capacity change from 0 to 512 [ 85.876228][ T1428] EXT4-fs: Ignoring removed oldalloc option [ 85.928196][ T1428] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 86.273848][ T1017] EXT4-fs (loop7): unmounting filesystem. [ 86.374446][ T1439] loop4: detected capacity change from 0 to 16 [ 86.384777][ T1439] erofs: (device loop4): mounted with root inode @ nid 36. [ 86.740006][ T60] usb 2-1: USB disconnect, device number 7 [ 86.768131][ T1447] FAULT_INJECTION: forcing a failure. [ 86.768131][ T1447] name failslab, interval 1, probability 0, space 0, times 0 [ 86.791790][ T325] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 86.811781][ T1447] CPU: 0 PID: 1447 Comm: syz.1.341 Not tainted syzkaller #0 [ 86.811803][ T1042] usb 3-1: device descriptor read/64, error -71 [ 86.825362][ T1447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 86.835435][ T1447] Call Trace: [ 86.838727][ T1447] [ 86.841671][ T1447] __dump_stack+0x21/0x24 [ 86.846029][ T1447] dump_stack_lvl+0x110/0x170 [ 86.850725][ T1447] ? __cfi_dump_stack_lvl+0x8/0x8 [ 86.855849][ T1447] dump_stack+0x15/0x24 [ 86.860018][ T1447] should_fail_ex+0x3d4/0x520 [ 86.864706][ T1447] __should_failslab+0xac/0xf0 [ 86.869489][ T1447] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 86.875225][ T1447] should_failslab+0x9/0x20 [ 86.879785][ T1447] __kmem_cache_alloc_node+0x3d/0x2c0 [ 86.885176][ T1447] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 86.890910][ T1447] kmalloc_trace+0x29/0xb0 [ 86.895332][ T1447] selinux_sk_alloc_security+0x7e/0x1a0 [ 86.900897][ T1447] security_sk_alloc+0x83/0xb0 [ 86.905676][ T1447] sk_prot_alloc+0x108/0x320 [ 86.910277][ T1447] sk_alloc+0x3b/0x460 [ 86.914363][ T1447] netlink_create+0x3c2/0x640 [ 86.919084][ T1447] ? __cfi_genl_bind+0x10/0x10 [ 86.923877][ T1447] __sock_create+0x39e/0x7c0 [ 86.928499][ T1447] __sys_socket+0xcd/0x1a0 [ 86.932937][ T1447] __x64_sys_socket+0x7a/0x90 [ 86.937630][ T1447] x64_sys_call+0x449/0x9a0 [ 86.942156][ T1447] do_syscall_64+0x4c/0xa0 [ 86.946591][ T1447] ? clear_bhb_loop+0x30/0x80 [ 86.951289][ T1447] ? clear_bhb_loop+0x30/0x80 [ 86.955990][ T1447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.961934][ T1447] RIP: 0033:0x7f6882d9e6c7 [ 86.966377][ T1447] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.986020][ T1447] RSP: 002b:00007f6883d16f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 86.994470][ T1447] RAX: ffffffffffffffda RBX: 00007f6883015fa0 RCX: 00007f6882d9e6c7 [ 87.002474][ T1447] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 87.010477][ T1447] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 87.018738][ T1447] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 87.026744][ T1447] R13: 00007f6883016038 R14: 00007f6883015fa0 R15: 00007ffcdf410778 [ 87.034748][ T1447] [ 87.041783][ T325] usb 8-1: Using ep0 maxpacket: 16 [ 87.055684][ T1455] loop4: detected capacity change from 0 to 1024 [ 87.064141][ T325] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.075642][ T325] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.122114][ T1455] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.148154][ T325] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.157597][ T325] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.166075][ T325] usb 8-1: Product: syz [ 87.170324][ T325] usb 8-1: Manufacturer: syz [ 87.175222][ T325] usb 8-1: SerialNumber: syz [ 87.183001][ T1455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.267489][ T1463] loop1: detected capacity change from 0 to 16 [ 87.313840][ T1463] erofs: (device loop1): mounted with root inode @ nid 36. [ 87.327539][ T1463] netlink: 60 bytes leftover after parsing attributes in process `syz.1.346'. [ 87.407558][ T325] usb 8-1: 0:2 : does not exist [ 87.437109][ T325] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 87.483074][ T288] EXT4-fs (loop4): unmounting filesystem. [ 87.486677][ T1436] loop5: detected capacity change from 0 to 131072 [ 87.498949][ T325] usb 8-1: USB disconnect, device number 5 [ 87.508119][ T1436] F2FS-fs (loop5): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 87.524633][ T1436] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 87.535632][ T1436] F2FS-fs (loop5): invalid crc value [ 87.543899][ T1436] F2FS-fs (loop5): Found nat_bits in checkpoint [ 87.582837][ T1436] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 87.589982][ T1436] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 87.623274][ T372] F2FS-fs (loop5): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:1407713280 [ 87.746061][ T1433] FAT-fs (loop2): Unrecognized mount option "?" or missing value [ 87.762952][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.781693][ T332] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 87.795401][ T6] usb 3-1: USB disconnect, device number 11 [ 87.895016][ T1475] set_capacity_and_notify: 1 callbacks suppressed [ 87.895038][ T1475] loop5: detected capacity change from 0 to 512 [ 87.992122][ T332] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.000418][ T332] usb 5-1: not running at top speed; connect to a high speed hub [ 88.020425][ T332] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.031335][ T332] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 88.040784][ T332] usb 5-1: config 1 interface 1 has no altsetting 0 [ 88.050117][ T332] usb 5-1: string descriptor 0 read error: -22 [ 88.056886][ T332] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 88.066188][ T332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.077109][ T332] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 88.089597][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.401969][ T1484] FAULT_INJECTION: forcing a failure. [ 88.401969][ T1484] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.415119][ T1484] CPU: 0 PID: 1484 Comm: syz.1.351 Not tainted syzkaller #0 [ 88.422422][ T1484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.432525][ T1484] Call Trace: [ 88.435815][ T1484] [ 88.438759][ T1484] __dump_stack+0x21/0x24 [ 88.443109][ T1484] dump_stack_lvl+0x110/0x170 [ 88.447805][ T1484] ? __cfi_dump_stack_lvl+0x8/0x8 [ 88.452858][ T1484] ? _parse_integer+0x2a/0x40 [ 88.457562][ T1484] dump_stack+0x15/0x24 [ 88.461759][ T1484] should_fail_ex+0x3d4/0x520 [ 88.466454][ T1484] should_fail+0xb/0x10 [ 88.470621][ T1484] should_fail_usercopy+0x1a/0x20 [ 88.475658][ T1484] _copy_from_user+0x1e/0xc0 [ 88.480268][ T1484] ___sys_sendmsg+0x1c3/0x360 [ 88.484962][ T1484] ? __sys_sendmsg+0x290/0x290 [ 88.489742][ T1484] ? asm_sysvec_call_function_single+0x1b/0x20 [ 88.495923][ T1484] ? vfs_write+0xa2c/0xce0 [ 88.500360][ T1484] ? __fdget+0x19c/0x220 [ 88.504658][ T1484] __x64_sys_sendmsg+0x205/0x2d0 [ 88.509612][ T1484] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 88.515090][ T1484] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 88.521178][ T1484] x64_sys_call+0x171/0x9a0 [ 88.525696][ T1484] do_syscall_64+0x4c/0xa0 [ 88.530130][ T1484] ? clear_bhb_loop+0x30/0x80 [ 88.534826][ T1484] ? clear_bhb_loop+0x30/0x80 [ 88.539527][ T1484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.545446][ T1484] RIP: 0033:0x7f6882d9ce59 [ 88.549879][ T1484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.569506][ T1484] RSP: 002b:00007f6883cd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.577954][ T1484] RAX: ffffffffffffffda RBX: 00007f6883016180 RCX: 00007f6882d9ce59 [ 88.585960][ T1484] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008 [ 88.593950][ T1484] RBP: 00007f6883cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 88.601967][ T1484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.609957][ T1484] R13: 00007f6883016218 R14: 00007f6883016180 R15: 00007ffcdf410778 [ 88.617951][ T1484] [ 89.818775][ T1489] loop1: detected capacity change from 0 to 128 [ 89.825524][ T1489] EXT4-fs: Ignoring removed nobh option [ 89.859412][ T1489] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.868792][ T1497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.356'. [ 89.873905][ T1489] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.904665][ T1489] syz.1.353 uses obsolete (PF_INET,SOCK_PACKET) [ 89.922510][ T1504] loop2: detected capacity change from 0 to 512 [ 89.935798][ T1504] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.958228][ T287] EXT4-fs (loop1): unmounting filesystem. [ 89.966763][ T1504] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.976007][ T1504] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.012722][ T1508] loop7: detected capacity change from 0 to 16 [ 90.021457][ T1508] erofs: (device loop7): mounted with root inode @ nid 36. [ 90.133282][ T1504] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.359: iget: bad i_size value: 2533274857506816 [ 90.284563][ T291] EXT4-fs (loop2): unmounting filesystem. [ 90.358124][ T1518] FAULT_INJECTION: forcing a failure. [ 90.358124][ T1518] name failslab, interval 1, probability 0, space 0, times 0 [ 90.370948][ T1518] CPU: 0 PID: 1518 Comm: syz.7.363 Not tainted syzkaller #0 [ 90.378249][ T1518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.388289][ T1518] Call Trace: [ 90.391555][ T1518] [ 90.394479][ T1518] __dump_stack+0x21/0x24 [ 90.398799][ T1518] dump_stack_lvl+0x110/0x170 [ 90.403498][ T1518] ? __cfi_dump_stack_lvl+0x8/0x8 [ 90.408539][ T1518] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 90.413987][ T1518] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 90.419870][ T1518] dump_stack+0x15/0x24 [ 90.424017][ T1518] should_fail_ex+0x3d4/0x520 [ 90.428685][ T1518] __should_failslab+0xac/0xf0 [ 90.433443][ T1518] should_failslab+0x9/0x20 [ 90.437933][ T1518] slab_pre_alloc_hook+0x30/0x1e0 [ 90.442950][ T1518] ? __sys_socket+0xcd/0x1a0 [ 90.447526][ T1518] ? x64_sys_call+0x449/0x9a0 [ 90.452191][ T1518] kmem_cache_alloc_lru+0x49/0x280 [ 90.457294][ T1518] ? __d_alloc+0x34/0x6c0 [ 90.461631][ T1518] ? expand_files+0xd0/0x6b0 [ 90.466214][ T1518] __d_alloc+0x34/0x6c0 [ 90.470375][ T1518] d_alloc_pseudo+0x1d/0x70 [ 90.474874][ T1518] alloc_file_pseudo+0xe0/0x200 [ 90.479729][ T1518] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 90.485187][ T1518] ? _raw_spin_unlock+0x4c/0x70 [ 90.490040][ T1518] ? alloc_fd+0x4e6/0x590 [ 90.494383][ T1518] sock_alloc_file+0xba/0x270 [ 90.499053][ T1518] __sys_socket+0x135/0x1a0 [ 90.503554][ T1518] __x64_sys_socket+0x7a/0x90 [ 90.508272][ T1518] x64_sys_call+0x449/0x9a0 [ 90.512785][ T1518] do_syscall_64+0x4c/0xa0 [ 90.517200][ T1518] ? clear_bhb_loop+0x30/0x80 [ 90.521872][ T1518] ? clear_bhb_loop+0x30/0x80 [ 90.522944][ T1519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'. [ 90.526552][ T1518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.537283][ T1519] device vlan2 entered promiscuous mode [ 90.541327][ T1518] RIP: 0033:0x7fb805d9e6c7 [ 90.541350][ T1518] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.541365][ T1518] RSP: 002b:00007fb806bb0f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 90.546991][ T1519] device dummy0 entered promiscuous mode [ 90.551326][ T1518] RAX: ffffffffffffffda RBX: 00007fb806015fa0 RCX: 00007fb805d9e6c7 [ 90.551343][ T1518] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 90.551354][ T1518] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 90.609165][ T1518] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 90.617132][ T1518] R13: 00007fb806016038 R14: 00007fb806015fa0 R15: 00007fff602f4c98 [ 90.625104][ T1518] [ 90.629997][ T6] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 90.686523][ T1522] loop1: detected capacity change from 0 to 16 [ 90.696422][ T1522] erofs: (device loop1): mounted with root inode @ nid 36. [ 90.709073][ T1522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.360'. [ 91.069460][ T1531] loop7: detected capacity change from 0 to 512 [ 91.111283][ T1182] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 91.141168][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 91.150360][ T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.160967][ T6] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.176963][ T6] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.186527][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.195023][ T6] usb 6-1: Product: syz [ 91.199272][ T6] usb 6-1: Manufacturer: syz [ 91.204208][ T6] usb 6-1: SerialNumber: syz [ 91.291214][ T1182] usb 3-1: Using ep0 maxpacket: 16 [ 91.349381][ T1539] FAULT_INJECTION: forcing a failure. [ 91.349381][ T1539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.362658][ T1539] CPU: 1 PID: 1539 Comm: syz.1.369 Not tainted syzkaller #0 [ 91.369991][ T1539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.380236][ T1539] Call Trace: [ 91.383527][ T1539] [ 91.386469][ T1539] __dump_stack+0x21/0x24 [ 91.390833][ T1539] dump_stack_lvl+0x110/0x170 [ 91.395545][ T1539] ? __cfi_dump_stack_lvl+0x8/0x8 [ 91.400598][ T1539] ? __kasan_check_read+0x11/0x20 [ 91.405647][ T1539] ? preempt_schedule_irq+0xca/0x120 [ 91.410955][ T1539] dump_stack+0x15/0x24 [ 91.415122][ T1539] should_fail_ex+0x3d4/0x520 [ 91.419828][ T1539] should_fail+0xb/0x10 [ 91.423994][ T1539] should_fail_usercopy+0x1a/0x20 [ 91.429027][ T1539] _copy_from_user+0x1e/0xc0 [ 91.433636][ T1539] iovec_from_user+0x1aa/0x2e0 [ 91.438411][ T1539] __import_iovec+0x71/0x470 [ 91.443098][ T1539] import_iovec+0x7c/0xb0 [ 91.447449][ T1539] ___sys_sendmsg+0x252/0x360 [ 91.452168][ T1539] ? __sys_sendmsg+0x290/0x290 [ 91.456952][ T1539] ? __kasan_check_write+0x14/0x20 [ 91.462085][ T1539] ? proc_fail_nth_write+0x180/0x200 [ 91.467297][ T6] usb 6-1: 0:2 : does not exist [ 91.467491][ T1539] ? vfs_write+0xa2c/0xce0 [ 91.473913][ T1182] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.476792][ T1539] ? __fdget+0x19c/0x220 [ 91.487158][ T1182] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.491193][ T1539] __x64_sys_sendmsg+0x205/0x2d0 [ 91.491220][ T1539] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 91.491244][ T1539] ? __kasan_check_write+0x14/0x20 [ 91.502655][ T6] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 91.505018][ T1539] ? fpregs_restore_userregs+0x128/0x260 [ 91.511354][ T1182] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.515586][ T1539] ? switch_fpu_return+0xe/0x10 [ 91.523091][ T1182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.528442][ T1539] x64_sys_call+0x171/0x9a0 [ 91.528474][ T1539] do_syscall_64+0x4c/0xa0 [ 91.528494][ T1539] ? clear_bhb_loop+0x30/0x80 [ 91.538330][ T1182] usb 3-1: Product: syz [ 91.542488][ T1539] ? clear_bhb_loop+0x30/0x80 [ 91.542531][ T1539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.551107][ T1182] usb 3-1: Manufacturer: syz [ 91.555083][ T1539] RIP: 0033:0x7f6882d9ce59 [ 91.555106][ T1539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.555122][ T1539] RSP: 002b:00007f6883cd6028 EFLAGS: 00000246 [ 91.559731][ T1182] usb 3-1: SerialNumber: syz [ 91.564283][ T1539] ORIG_RAX: 000000000000002e [ 91.564294][ T1539] RAX: ffffffffffffffda RBX: 00007f6883016180 RCX: 00007f6882d9ce59 [ 91.564307][ T1539] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008 [ 91.564320][ T1539] RBP: 00007f6883cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 91.564331][ T1539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.564343][ T1539] R13: 00007f6883016218 R14: 00007f6883016180 R15: 00007ffcdf410778 [ 91.564359][ T1539] [ 91.668607][ T6] usb 6-1: USB disconnect, device number 16 [ 91.879888][ T1182] usb 3-1: 0:2 : does not exist [ 91.890300][ T1182] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 91.904626][ T396] usb 5-1: USB disconnect, device number 9 [ 91.919715][ T1182] usb 3-1: USB disconnect, device number 12 [ 92.486527][ T1552] netlink: 24 bytes leftover after parsing attributes in process `syz.5.373'. [ 92.566167][ T332] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 92.566435][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.611403][ T1556] loop1: detected capacity change from 0 to 16 [ 92.620023][ T1556] erofs: (device loop1): mounted with root inode @ nid 36. [ 92.643665][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 92.962020][ T332] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.973450][ T332] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.983242][ T332] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.040264][ T332] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.069894][ T332] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.096604][ T332] usb 8-1: config 0 descriptor?? [ 93.126890][ T1573] FAULT_INJECTION: forcing a failure. [ 93.126890][ T1573] name failslab, interval 1, probability 0, space 0, times 0 [ 93.199796][ T1575] loop2: detected capacity change from 0 to 16 [ 93.220998][ T1573] CPU: 1 PID: 1573 Comm: syz.4.382 Not tainted syzkaller #0 [ 93.228334][ T1573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 93.238407][ T1573] Call Trace: [ 93.241698][ T1573] [ 93.244636][ T1573] __dump_stack+0x21/0x24 [ 93.248989][ T1573] dump_stack_lvl+0x110/0x170 [ 93.253679][ T1573] ? __cfi_dump_stack_lvl+0x8/0x8 [ 93.258719][ T1573] dump_stack+0x15/0x24 [ 93.262886][ T1573] should_fail_ex+0x3d4/0x520 [ 93.267571][ T1573] ? __alloc_file+0x28/0x2a0 [ 93.272191][ T1573] __should_failslab+0xac/0xf0 [ 93.276998][ T1573] should_failslab+0x9/0x20 [ 93.281522][ T1573] kmem_cache_alloc+0x3b/0x330 [ 93.286311][ T1573] ? __cfi__raw_spin_lock+0x10/0x10 [ 93.291528][ T1573] __alloc_file+0x28/0x2a0 [ 93.295966][ T1573] alloc_empty_file+0x97/0x180 [ 93.300836][ T1573] alloc_file+0x59/0x640 [ 93.305093][ T1573] alloc_file_pseudo+0x180/0x200 [ 93.310053][ T1573] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 93.315545][ T1573] ? _raw_spin_unlock+0x4c/0x70 [ 93.320435][ T1573] ? alloc_fd+0x4e6/0x590 [ 93.324786][ T1573] sock_alloc_file+0xba/0x270 [ 93.329492][ T1573] __sys_socket+0x135/0x1a0 [ 93.334016][ T1573] __x64_sys_socket+0x7a/0x90 [ 93.338707][ T1573] x64_sys_call+0x449/0x9a0 [ 93.343319][ T1573] do_syscall_64+0x4c/0xa0 [ 93.347835][ T1573] ? clear_bhb_loop+0x30/0x80 [ 93.352531][ T1573] ? clear_bhb_loop+0x30/0x80 [ 93.357231][ T1573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.363160][ T1573] RIP: 0033:0x7f5dead9e6c7 [ 93.367601][ T1573] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.387588][ T1573] RSP: 002b:00007f5debc7ef98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 93.396048][ T1573] RAX: ffffffffffffffda RBX: 00007f5deb015fa0 RCX: 00007f5dead9e6c7 [ 93.404141][ T1573] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 93.412141][ T1573] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 93.420139][ T1573] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 93.428127][ T1573] R13: 00007f5deb016038 R14: 00007f5deb015fa0 R15: 00007ffe99742c28 [ 93.436115][ T1573] [ 93.439427][ T1575] erofs: (device loop2): mounted with root inode @ nid 36. [ 93.442627][ T1576] loop1: detected capacity change from 0 to 512 [ 93.461437][ T1574] netlink: 60 bytes leftover after parsing attributes in process `syz.2.378'. [ 93.554292][ T332] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 93.564117][ T332] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 93.760807][ T6] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 93.822092][ T1541] loop7: detected capacity change from 0 to 256 [ 93.836144][ T1541] FAT-fs (loop7): Unrecognized mount option "?" or missing value [ 93.874392][ T1586] IPv6: sit1: Disabled Multicast RS [ 93.941887][ T6] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 93.953536][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.964945][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.974782][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 94.110520][ T1595] FAULT_INJECTION: forcing a failure. [ 94.110520][ T1595] name failslab, interval 1, probability 0, space 0, times 0 [ 94.123337][ T1595] CPU: 1 PID: 1595 Comm: syz.2.387 Not tainted syzkaller #0 [ 94.130649][ T1595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 94.140759][ T1595] Call Trace: [ 94.144050][ T1595] [ 94.146990][ T1595] __dump_stack+0x21/0x24 [ 94.151356][ T1595] dump_stack_lvl+0x110/0x170 [ 94.156048][ T1595] ? __cfi_dump_stack_lvl+0x8/0x8 [ 94.161098][ T1595] ? __local_bh_enable_ip+0x6a/0x80 [ 94.166312][ T1595] ? release_sock+0x169/0x1c0 [ 94.171009][ T1595] dump_stack+0x15/0x24 [ 94.175181][ T1595] should_fail_ex+0x3d4/0x520 [ 94.179867][ T1595] __should_failslab+0xac/0xf0 [ 94.184759][ T1595] should_failslab+0x9/0x20 [ 94.189274][ T1595] kmem_cache_alloc_node+0x42/0x340 [ 94.194497][ T1595] ? __alloc_skb+0xea/0x4b0 [ 94.199024][ T1595] __alloc_skb+0xea/0x4b0 [ 94.203355][ T1595] ? netlink_autobind+0x168/0x1a0 [ 94.208479][ T1595] netlink_sendmsg+0x635/0xbd0 [ 94.213274][ T1595] ? __cfi_netlink_sendmsg+0x10/0x10 [ 94.218577][ T1595] ? security_socket_sendmsg+0x93/0xb0 [ 94.224138][ T1595] ? __cfi_netlink_sendmsg+0x10/0x10 [ 94.229427][ T1595] ____sys_sendmsg+0x5cc/0x990 [ 94.234216][ T1595] ? __sys_sendmsg_sock+0x40/0x40 [ 94.239246][ T1595] ? import_iovec+0x7c/0xb0 [ 94.243760][ T1595] ___sys_sendmsg+0x2a2/0x360 [ 94.248442][ T1595] ? __sys_sendmsg+0x290/0x290 [ 94.253210][ T1595] ? __kasan_check_write+0x14/0x20 [ 94.258337][ T1595] ? proc_fail_nth_write+0x180/0x200 [ 94.263627][ T1595] ? vfs_write+0xa2c/0xce0 [ 94.268050][ T1595] ? __fdget+0x19c/0x220 [ 94.272293][ T1595] __x64_sys_sendmsg+0x205/0x2d0 [ 94.277231][ T1595] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 94.282696][ T1595] ? __kasan_check_write+0x14/0x20 [ 94.287809][ T1595] ? fpregs_restore_userregs+0x128/0x260 [ 94.293444][ T1595] ? switch_fpu_return+0xe/0x10 [ 94.298302][ T1595] x64_sys_call+0x171/0x9a0 [ 94.302811][ T1595] do_syscall_64+0x4c/0xa0 [ 94.307253][ T1595] ? clear_bhb_loop+0x30/0x80 [ 94.311941][ T1595] ? clear_bhb_loop+0x30/0x80 [ 94.316628][ T1595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.322524][ T1595] RIP: 0033:0x7f8634b9ce59 [ 94.326969][ T1595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.346614][ T1595] RSP: 002b:00007f8635ad2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.355057][ T1595] RAX: ffffffffffffffda RBX: 00007f8634e16180 RCX: 00007f8634b9ce59 [ 94.363038][ T1595] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008 [ 94.371010][ T1595] RBP: 00007f8635ad2090 R08: 0000000000000000 R09: 0000000000000000 [ 94.378992][ T1595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.387075][ T1595] R13: 00007f8634e16218 R14: 00007f8634e16180 R15: 00007ffd21d2b598 [ 94.395062][ T1595] [ 94.674897][ T6] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 94.684058][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.692730][ T6] usb 5-1: config 0 descriptor?? [ 94.856799][ T28] audit: type=1400 audit(1779218239.493:493): avc: denied { read } for pid=1600 comm="syz.1.390" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.863907][ T1601] loop1: detected capacity change from 0 to 1024 [ 94.880799][ T28] audit: type=1400 audit(1779218239.493:494): avc: denied { open } for pid=1600 comm="syz.1.390" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.889560][ T1601] EXT4-fs: Ignoring removed oldalloc option [ 94.916505][ T28] audit: type=1400 audit(1779218239.493:495): avc: denied { ioctl } for pid=1600 comm="syz.1.390" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.917354][ T1601] EXT4-fs: Ignoring removed oldalloc option [ 94.947930][ T1601] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.962406][ T1601] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.986157][ T1601] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 96.533593][ T1621] loop5: detected capacity change from 0 to 512 [ 96.553232][ T1621] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 96.861157][ T1182] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 96.871031][ T6] holtek_kbd 0003:04D9:A055.0009: hidraw1: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.4-1/input0 [ 96.883829][ T6] usb 5-1: USB disconnect, device number 10 [ 96.900023][ T1621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 97.558179][ T1619] loop4: detected capacity change from 0 to 16 [ 97.588741][ T1621] System zones: 1-12 [ 97.602988][ T1619] erofs: (device loop4): mounted with root inode @ nid 36. [ 97.636663][ T287] EXT4-fs (loop1): unmounting filesystem. [ 97.666829][ T1621] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.676465][ T1631] FAULT_INJECTION: forcing a failure. [ 97.676465][ T1631] name failslab, interval 1, probability 0, space 0, times 0 [ 97.690118][ T1627] fido_id[1627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 97.707949][ T1621] EXT4-fs (loop5): 1 truncate cleaned up [ 97.710956][ T1631] CPU: 0 PID: 1631 Comm: syz.4.400 Not tainted syzkaller #0 [ 97.714944][ T1621] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 97.720906][ T1631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.720920][ T1631] Call Trace: [ 97.720926][ T1631] [ 97.720932][ T1631] __dump_stack+0x21/0x24 [ 97.749958][ T1631] dump_stack_lvl+0x110/0x170 [ 97.754678][ T1631] ? __cfi_dump_stack_lvl+0x8/0x8 [ 97.759749][ T1631] dump_stack+0x15/0x24 [ 97.763986][ T1631] should_fail_ex+0x3d4/0x520 [ 97.768699][ T1631] ? security_file_alloc+0x33/0x130 [ 97.773935][ T1631] __should_failslab+0xac/0xf0 [ 97.778742][ T1631] should_failslab+0x9/0x20 [ 97.783284][ T1631] kmem_cache_alloc+0x3b/0x330 [ 97.788077][ T1631] ? __alloc_file+0x28/0x2a0 [ 97.792667][ T1631] security_file_alloc+0x33/0x130 [ 97.797730][ T1631] __alloc_file+0xb5/0x2a0 [ 97.802141][ T1631] alloc_empty_file+0x97/0x180 [ 97.806900][ T1631] alloc_file+0x59/0x640 [ 97.811142][ T1631] alloc_file_pseudo+0x180/0x200 [ 97.816078][ T1631] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 97.821535][ T1631] ? _raw_spin_unlock+0x4c/0x70 [ 97.826377][ T1631] ? alloc_fd+0x4e6/0x590 [ 97.830697][ T1631] sock_alloc_file+0xba/0x270 [ 97.835380][ T1631] __sys_socket+0x135/0x1a0 [ 97.839907][ T1631] __x64_sys_socket+0x7a/0x90 [ 97.844615][ T1631] x64_sys_call+0x449/0x9a0 [ 97.849125][ T1631] do_syscall_64+0x4c/0xa0 [ 97.853595][ T1631] ? clear_bhb_loop+0x30/0x80 [ 97.858281][ T1631] ? clear_bhb_loop+0x30/0x80 [ 97.862959][ T1631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.868848][ T1631] RIP: 0033:0x7f5dead9e6c7 [ 97.873258][ T1631] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.892948][ T1631] RSP: 002b:00007f5debc7ef98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 97.901355][ T1631] RAX: ffffffffffffffda RBX: 00007f5deb015fa0 RCX: 00007f5dead9e6c7 [ 97.909323][ T1631] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 97.917288][ T1631] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 97.925268][ T1631] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 97.933240][ T1631] R13: 00007f5deb016038 R14: 00007f5deb015fa0 R15: 00007ffe99742c28 [ 97.941387][ T1631] [ 97.944881][ T1182] usb 3-1: Using ep0 maxpacket: 16 [ 97.953828][ T1182] usb 3-1: device descriptor read/all, error -71 [ 98.064549][ T1638] loop7: detected capacity change from 0 to 512 [ 98.070996][ T1042] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 98.134645][ T1641] loop1: detected capacity change from 0 to 16 [ 98.147705][ T1641] erofs: (device loop1): mounted with root inode @ nid 36. [ 98.155880][ T1641] netlink: 60 bytes leftover after parsing attributes in process `syz.1.397'. [ 98.170539][ T396] usb 8-1: USB disconnect, device number 6 [ 98.300178][ T1042] usb 6-1: Using ep0 maxpacket: 16 [ 98.307499][ T1042] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 98.317091][ T1042] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 98.327849][ T1042] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 98.338390][ T1042] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 98.349118][ T1042] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 98.359617][ T1042] usb 6-1: config 1 interface 0 has no altsetting 0 [ 98.366831][ T1042] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 98.411344][ T1042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.552233][ T6] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 98.553920][ T1042] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 98.951102][ T1042] scsi host1: usb-storage 6-1:1.0 [ 99.614855][ T1042] usb 6-1: USB disconnect, device number 17 [ 99.625243][ T28] audit: type=1400 audit(1779218244.264:496): avc: denied { listen } for pid=1668 comm="syz.7.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.652383][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.655148][ T372] EXT4-fs (loop5): unmounting filesystem. [ 99.666701][ T1674] FAULT_INJECTION: forcing a failure. [ 99.666701][ T1674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.686621][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.696625][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.709750][ T1674] CPU: 0 PID: 1674 Comm: syz.7.413 Not tainted syzkaller #0 [ 99.716463][ T1679] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 99.717102][ T1674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.734626][ T1674] Call Trace: [ 99.737919][ T1674] [ 99.740865][ T1674] __dump_stack+0x21/0x24 [ 99.745216][ T1674] dump_stack_lvl+0x110/0x170 [ 99.749956][ T1674] ? __cfi_dump_stack_lvl+0x8/0x8 [ 99.755012][ T1674] ? __seccomp_filter+0x47f/0x1af0 [ 99.760139][ T1674] dump_stack+0x15/0x24 [ 99.764310][ T1674] should_fail_ex+0x3d4/0x520 [ 99.769089][ T1674] should_fail+0xb/0x10 [ 99.773253][ T1674] should_fail_usercopy+0x1a/0x20 [ 99.778295][ T1674] _copy_from_user+0x1e/0xc0 [ 99.782904][ T1674] __sys_bind+0x1fb/0x460 [ 99.787244][ T1674] ? __cfi___sys_bind+0x10/0x10 [ 99.792109][ T1674] ? __secure_computing+0xea/0x290 [ 99.797236][ T1674] __x64_sys_bind+0x7a/0x90 [ 99.801781][ T1674] x64_sys_call+0x70c/0x9a0 [ 99.806314][ T1674] do_syscall_64+0x4c/0xa0 [ 99.810780][ T1674] ? clear_bhb_loop+0x30/0x80 [ 99.815472][ T1674] ? clear_bhb_loop+0x30/0x80 [ 99.820152][ T1674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.826139][ T1674] RIP: 0033:0x7fb805d9ce59 [ 99.830564][ T1674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.850257][ T1674] RSP: 002b:00007fb806bb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 99.858670][ T1674] RAX: ffffffffffffffda RBX: 00007fb806015fa0 RCX: 00007fb805d9ce59 [ 99.866641][ T1674] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 99.874612][ T1674] RBP: 00007fb806bb2090 R08: 0000000000000000 R09: 0000000000000000 [ 99.882580][ T1674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.890638][ T1674] R13: 00007fb806016038 R14: 00007fb806015fa0 R15: 00007fff602f4c98 [ 99.898622][ T1674] [ 99.911466][ T6] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.920788][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.938631][ T6] usb 5-1: config 0 descriptor?? [ 99.945216][ T1682] loop5: detected capacity change from 0 to 16 [ 99.977027][ T1679] loop2: detected capacity change from 0 to 40427 [ 99.980092][ T1682] erofs: (device loop5): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 99.984589][ T1679] F2FS-fs (loop2): fault_injection options not supported [ 100.002163][ T1679] F2FS-fs (loop2): fault_type options not supported [ 100.016439][ T1679] F2FS-fs (loop2): invalid crc value [ 100.051112][ T1679] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.081672][ T390] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 100.120677][ T1679] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.137075][ T1679] syz.2.416: attempt to access beyond end of device [ 100.137075][ T1679] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.155704][ T1689] loop7: detected capacity change from 0 to 512 [ 100.267681][ T1682] loop5: detected capacity change from 0 to 40427 [ 100.278208][ T1682] F2FS-fs (loop5): Corrupted extension count (327717 + 1 > 64) [ 100.285997][ T1682] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 100.294810][ T1682] F2FS-fs (loop5): invalid crc value [ 100.299916][ T390] usb 2-1: Using ep0 maxpacket: 16 [ 100.306941][ T390] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.307316][ T1682] F2FS-fs (loop5): Found nat_bits in checkpoint [ 100.317276][ T390] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.341115][ T390] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.350469][ T390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.353420][ T1682] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 100.358512][ T390] usb 2-1: Product: syz [ 100.365641][ T1682] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 100.370203][ T390] usb 2-1: Manufacturer: syz [ 100.378713][ T6] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 100.382461][ T390] usb 2-1: SerialNumber: syz [ 100.399907][ T6] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 100.532647][ T1682] syz.5.414: attempt to access beyond end of device [ 100.532647][ T1682] loop5: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 100.558317][ T1682] syz.5.414: attempt to access beyond end of device [ 100.558317][ T1682] loop5: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 100.614460][ T390] usb 2-1: 0:2 : does not exist [ 100.623505][ T390] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 100.626160][ T1682] syz.5.414: attempt to access beyond end of device [ 100.626160][ T1682] loop5: rw=2049, sector=57344, nr_sectors = 20480 limit=40427 [ 100.653866][ T390] usb 2-1: USB disconnect, device number 8 [ 100.661196][ T1682] syz.5.414: attempt to access beyond end of device [ 100.661196][ T1682] loop5: rw=2049, sector=81920, nr_sectors = 3800 limit=40427 [ 100.743393][ T372] syz-executor: attempt to access beyond end of device [ 100.743393][ T372] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.972440][ T1702] loop2: detected capacity change from 0 to 16 [ 101.249537][ T1704] loop5: detected capacity change from 0 to 16 [ 101.257329][ T1702] erofs: (device loop2): mounted with root inode @ nid 36. [ 101.265241][ T1704] erofs: (device loop5): mounted with root inode @ nid 36. [ 101.272903][ T1699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.419'. [ 101.338099][ T1705] loop4: detected capacity change from 0 to 256 [ 101.416632][ T1705] FAT-fs (loop4): Unrecognized mount option "?" or missing value [ 101.686953][ T1709] FAULT_INJECTION: forcing a failure. [ 101.686953][ T1709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.766657][ T1709] CPU: 0 PID: 1709 Comm: syz.2.423 Not tainted syzkaller #0 [ 101.774028][ T1709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.784110][ T1709] Call Trace: [ 101.787587][ T1709] [ 101.790540][ T1709] __dump_stack+0x21/0x24 [ 101.794990][ T1709] dump_stack_lvl+0x110/0x170 [ 101.799963][ T1709] ? __cfi_dump_stack_lvl+0x8/0x8 [ 101.805031][ T1709] dump_stack+0x15/0x24 [ 101.809217][ T1709] should_fail_ex+0x3d4/0x520 [ 101.813924][ T1709] should_fail+0xb/0x10 [ 101.818105][ T1709] should_fail_usercopy+0x1a/0x20 [ 101.823158][ T1709] _copy_from_user+0x1e/0xc0 [ 101.827808][ T1709] __sys_sendto+0x30b/0x660 [ 101.832344][ T1709] ? __cfi___sys_sendto+0x10/0x10 [ 101.837501][ T1709] ? __secure_computing+0xea/0x290 [ 101.842658][ T1709] __x64_sys_sendto+0xe5/0x100 [ 101.847452][ T1709] x64_sys_call+0x83/0x9a0 [ 101.851899][ T1709] do_syscall_64+0x4c/0xa0 [ 101.856340][ T1709] ? clear_bhb_loop+0x30/0x80 [ 101.861053][ T1709] ? clear_bhb_loop+0x30/0x80 [ 101.865744][ T1709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.871653][ T1709] RIP: 0033:0x7f8634b5d68e [ 101.876067][ T1709] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.895674][ T1709] RSP: 002b:00007f8635b12e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 101.904259][ T1709] RAX: ffffffffffffffda RBX: 00007f8635b146c0 RCX: 00007f8634b5d68e [ 101.912229][ T1709] RDX: 0000000000000020 RSI: 00007f8635b13000 RDI: 0000000000000004 [ 101.920200][ T1709] RBP: 0000000000000000 R08: 00007f8635b12f04 R09: 000000000000000c [ 101.928165][ T1709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 101.936131][ T1709] R13: 00007f8635b12f58 R14: 00007f8635b13000 R15: 0000000000000000 [ 101.944107][ T1709] [ 101.951785][ T1726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1726 comm=syz.7.429 [ 102.289685][ T1732] FAULT_INJECTION: forcing a failure. [ 102.289685][ T1732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.302856][ T1732] CPU: 1 PID: 1732 Comm: syz.4.427 Not tainted syzkaller #0 [ 102.310165][ T1732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.320234][ T1732] Call Trace: [ 102.323520][ T1732] [ 102.326456][ T1732] __dump_stack+0x21/0x24 [ 102.330808][ T1732] dump_stack_lvl+0x110/0x170 [ 102.335501][ T1732] ? __cfi_dump_stack_lvl+0x8/0x8 [ 102.340542][ T1732] dump_stack+0x15/0x24 [ 102.344717][ T1732] should_fail_ex+0x3d4/0x520 [ 102.349412][ T1732] should_fail+0xb/0x10 [ 102.353583][ T1732] should_fail_usercopy+0x1a/0x20 [ 102.358622][ T1732] copyin+0x20/0xa0 [ 102.362446][ T1732] _copy_from_iter+0x3e2/0x1010 [ 102.367337][ T1732] ? __cfi__copy_from_iter+0x10/0x10 [ 102.372652][ T1732] ? __kasan_check_write+0x14/0x20 [ 102.377789][ T1732] ? __build_skb_around+0x24f/0x470 [ 102.381997][ T1723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1723 comm=syz.5.428 [ 102.383017][ T1732] ? __check_object_size+0x45a/0x600 [ 102.383045][ T1732] netlink_sendmsg+0x73b/0xbd0 [ 102.400104][ T1729] loop1: detected capacity change from 0 to 256 [ 102.400550][ T1732] ? __cfi_netlink_sendmsg+0x10/0x10 [ 102.416871][ T1732] ? security_socket_sendmsg+0x93/0xb0 [ 102.422384][ T1732] ? __cfi_netlink_sendmsg+0x10/0x10 [ 102.427789][ T1732] ____sys_sendmsg+0x5cc/0x990 [ 102.432612][ T1732] ? __sys_sendmsg_sock+0x40/0x40 [ 102.437674][ T1732] ? import_iovec+0x7c/0xb0 [ 102.442211][ T1732] ___sys_sendmsg+0x2a2/0x360 [ 102.446923][ T1732] ? __sys_sendmsg+0x290/0x290 [ 102.451739][ T1732] ? __kasan_check_write+0x14/0x20 [ 102.456880][ T1732] ? proc_fail_nth_write+0x180/0x200 [ 102.462206][ T1732] ? vfs_write+0xa2c/0xce0 [ 102.466666][ T1732] ? __fdget+0x19c/0x220 [ 102.470929][ T1732] __x64_sys_sendmsg+0x205/0x2d0 [ 102.475875][ T1732] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 102.481423][ T1732] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 102.487589][ T1732] x64_sys_call+0x171/0x9a0 [ 102.492102][ T1732] do_syscall_64+0x4c/0xa0 [ 102.496519][ T1732] ? clear_bhb_loop+0x30/0x80 [ 102.501208][ T1732] ? clear_bhb_loop+0x30/0x80 [ 102.505888][ T1732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.511785][ T1732] RIP: 0033:0x7f5dead9ce59 [ 102.516208][ T1732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.535923][ T1732] RSP: 002b:00007f5debc3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.544354][ T1732] RAX: ffffffffffffffda RBX: 00007f5deb016180 RCX: 00007f5dead9ce59 [ 102.552326][ T1732] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008 [ 102.560297][ T1732] RBP: 00007f5debc3e090 R08: 0000000000000000 R09: 0000000000000000 [ 102.568355][ T1732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.576322][ T1732] R13: 00007f5deb016218 R14: 00007f5deb016180 R15: 00007ffe99742c28 [ 102.584295][ T1732] [ 102.690400][ T316] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.701862][ T28] audit: type=1400 audit(1779218247.344:497): avc: denied { read } for pid=1727 comm="syz.1.430" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.725185][ T1736] loop2: detected capacity change from 0 to 512 [ 102.840163][ T1744] loop1: detected capacity change from 0 to 16 [ 102.850587][ T1744] erofs: (device loop1): mounted with root inode @ nid 36. [ 102.858585][ T1744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.433'. [ 102.960740][ T1751] FAULT_INJECTION: forcing a failure. [ 102.960740][ T1751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.986315][ T1751] CPU: 1 PID: 1751 Comm: syz.1.436 Not tainted syzkaller #0 [ 102.993649][ T1751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.004072][ T1751] Call Trace: [ 103.007370][ T1751] [ 103.010308][ T1751] __dump_stack+0x21/0x24 [ 103.014746][ T1751] dump_stack_lvl+0x110/0x170 [ 103.019435][ T1751] ? __cfi_dump_stack_lvl+0x8/0x8 [ 103.024478][ T1751] dump_stack+0x15/0x24 [ 103.028669][ T1751] should_fail_ex+0x3d4/0x520 [ 103.033371][ T1751] should_fail+0xb/0x10 [ 103.037560][ T1751] should_fail_usercopy+0x1a/0x20 [ 103.042626][ T1751] _copy_to_user+0x1e/0x90 [ 103.047087][ T1751] simple_read_from_buffer+0xe9/0x160 [ 103.052499][ T1751] proc_fail_nth_read+0x1a6/0x220 [ 103.057575][ T1751] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 103.063154][ T1751] ? security_file_permission+0x94/0xb0 [ 103.068744][ T1751] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 103.074325][ T1751] vfs_read+0x27a/0x910 [ 103.078515][ T1751] ? __cfi_vfs_read+0x10/0x10 [ 103.083235][ T1751] ? __kasan_check_write+0x14/0x20 [ 103.088376][ T1751] ? mutex_lock+0x93/0x1b0 [ 103.092822][ T1751] ? __cfi_mutex_lock+0x10/0x10 [ 103.097703][ T1751] ? __fdget_pos+0x2cd/0x380 [ 103.102317][ T1751] ? ksys_read+0x71/0x250 [ 103.106727][ T1751] ksys_read+0x149/0x250 [ 103.111004][ T1751] ? __cfi_ksys_read+0x10/0x10 [ 103.115879][ T1751] ? __secure_computing+0xea/0x290 [ 103.121022][ T1751] __x64_sys_read+0x7b/0x90 [ 103.125557][ T1751] x64_sys_call+0x2f/0x9a0 [ 103.130020][ T1751] do_syscall_64+0x4c/0xa0 [ 103.134467][ T1751] ? clear_bhb_loop+0x30/0x80 [ 103.139179][ T1751] ? clear_bhb_loop+0x30/0x80 [ 103.143907][ T1751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.149847][ T1751] RIP: 0033:0x7f6882d5d68e [ 103.154290][ T1751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.173934][ T1751] RSP: 002b:00007f6883d17fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.179586][ T340] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 103.182466][ T1751] RAX: ffffffffffffffda RBX: 00007f6883d186c0 RCX: 00007f6882d5d68e [ 103.198249][ T1751] RDX: 000000000000000f RSI: 00007f6883d180a0 RDI: 0000000000000005 [ 103.206260][ T1751] RBP: 00007f6883d18090 R08: 0000000000000000 R09: 0000000000000000 [ 103.209866][ T340] usb 5-1: device reset changed ep0 maxpacket size! [ 103.214254][ T1751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.214268][ T1751] R13: 00007f6883016038 R14: 00007f6883015fa0 R15: 00007ffcdf410778 [ 103.229705][ T6] usb 5-1: USB disconnect, device number 11 [ 103.236795][ T1751] [ 103.400958][ T1761] FAT-fs (loop2): Unrecognized mount option "tots" or missing value [ 103.441052][ T28] audit: type=1400 audit(1779218248.084:498): avc: denied { create } for pid=1752 comm="syz.7.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 103.469597][ T6] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 103.649461][ T1042] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 103.679453][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 103.685797][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.715377][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.742003][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.769513][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.794860][ T6] usb 5-1: Product: syz [ 103.806649][ T6] usb 5-1: Manufacturer: syz [ 103.820431][ T6] usb 5-1: SerialNumber: syz [ 103.840570][ T1042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.861131][ T1042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.882482][ T1042] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.895607][ T390] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 103.923975][ T1042] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.943236][ T1042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.960329][ T1042] usb 2-1: config 0 descriptor?? [ 104.007778][ T1772] FAULT_INJECTION: forcing a failure. [ 104.007778][ T1772] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 104.041420][ T6] usb 5-1: 0:2 : does not exist [ 104.050773][ T6] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 104.052813][ T1772] CPU: 1 PID: 1772 Comm: syz.5.443 Not tainted syzkaller #0 [ 104.065407][ T1772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.075482][ T1772] Call Trace: [ 104.078785][ T1772] [ 104.081731][ T1772] __dump_stack+0x21/0x24 [ 104.086085][ T1772] dump_stack_lvl+0x110/0x170 [ 104.090776][ T1772] ? __cfi_dump_stack_lvl+0x8/0x8 [ 104.095817][ T1772] ? next_uptodate_page+0x863/0x890 [ 104.101038][ T1772] dump_stack+0x15/0x24 [ 104.105212][ T1772] should_fail_ex+0x3d4/0x520 [ 104.109905][ T1772] should_fail_alloc_page+0x61/0x90 [ 104.111301][ T6] usb 5-1: USB disconnect, device number 12 [ 104.115125][ T1772] prepare_alloc_pages+0x148/0x600 [ 104.126152][ T1772] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 104.131379][ T1772] ? __cfi_filemap_map_pages+0x10/0x10 [ 104.136873][ T1772] __alloc_pages+0x15b/0x610 [ 104.141487][ T1772] ? __cfi___alloc_pages+0x10/0x10 [ 104.146626][ T1772] ? do_fault+0x1c97/0x1ee0 [ 104.151162][ T1772] __folio_alloc+0x12/0x40 [ 104.155606][ T1772] handle_mm_fault+0x1972/0x26c0 [ 104.160561][ T1772] ? __cfi_handle_mm_fault+0x10/0x10 [ 104.165860][ T1772] ? lock_vma_under_rcu+0x400/0x4f0 [ 104.171071][ T1772] ? __kasan_check_write+0x14/0x20 [ 104.176197][ T1772] ? fput+0x154/0x1a0 [ 104.180198][ T1772] do_user_addr_fault+0x905/0x1050 [ 104.185338][ T1772] exc_page_fault+0x51/0xb0 [ 104.189862][ T1772] asm_exc_page_fault+0x27/0x30 [ 104.194733][ T1772] RIP: 0033:0x7f4ca965e60b [ 104.199159][ T1772] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 104.218782][ T1772] RSP: 002b:00007f4caa5a6fa0 EFLAGS: 00010206 [ 104.224865][ T1772] RAX: 0000000000000000 RBX: 00007f4ca9a15fa0 RCX: 0000000000000000 [ 104.232848][ T1772] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00002000000000c0 [ 104.240834][ T1772] RBP: 00007f4caa5a8090 R08: 0000000000000000 R09: 0000000000000000 [ 104.248825][ T1772] R10: 00002000000000c0 R11: 0000000000000000 R12: 0000000000000001 [ 104.256808][ T1772] R13: 00007f4ca9a16038 R14: 00007f4ca9a15fa0 R15: 00007ffdc8cf1878 [ 104.264806][ T1772] [ 104.277589][ T390] usb 3-1: Using ep0 maxpacket: 16 [ 104.284346][ T390] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.309348][ T390] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.330185][ T390] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.349343][ T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.358470][ T390] usb 3-1: Product: syz [ 104.365963][ T390] usb 3-1: Manufacturer: syz [ 104.370793][ T390] usb 3-1: SerialNumber: syz [ 104.375990][ T1772] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 104.425196][ T1774] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 104.434364][ T1774] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.459945][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.515025][ T1042] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 104.527264][ T1777] erofs: (device loop5): mounted with root inode @ nid 36. [ 104.535460][ T1777] netlink: 60 bytes leftover after parsing attributes in process `syz.5.446'. [ 104.575742][ T1042] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 104.590043][ T28] audit: type=1400 audit(1779218249.234:499): avc: denied { setattr } for pid=1773 comm="syz.7.445" path="/49/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.618232][ T390] usb 3-1: 0:2 : does not exist [ 104.624585][ T1774] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 104.659092][ T390] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 104.667672][ T1774] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 105.857322][ T1774] EXT4-fs (loop7): This should not happen!! Data will be lost [ 105.857322][ T1774] [ 105.867109][ T28] audit: type=1400 audit(1779218250.495:500): avc: denied { cmd } for pid=1773 comm="syz.7.445" path="/dev/ublk-control" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 105.867192][ T1774] EXT4-fs (loop7): Total free blocks count 0 [ 105.896541][ T1774] EXT4-fs (loop7): Free/Dirty block details [ 105.902718][ T1793] set_capacity_and_notify: 4 callbacks suppressed [ 105.902735][ T1793] loop4: detected capacity change from 0 to 512 [ 105.916116][ T1794] loop5: detected capacity change from 0 to 16 [ 105.923206][ T1794] erofs: (device loop5): mounted with root inode @ nid 36. [ 105.962877][ T1774] EXT4-fs (loop7): free_blocks=65280 [ 105.968293][ T1774] EXT4-fs (loop7): dirty_blocks=33 [ 105.973663][ T1774] EXT4-fs (loop7): Block reservation details [ 105.988214][ T1774] EXT4-fs (loop7): i_reserved_data_blocks=33 [ 106.030133][ T1800] FAULT_INJECTION: forcing a failure. [ 106.030133][ T1800] name failslab, interval 1, probability 0, space 0, times 0 [ 106.042985][ T1800] CPU: 0 PID: 1800 Comm: syz.5.452 Not tainted syzkaller #0 [ 106.050295][ T1800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.060367][ T1800] Call Trace: [ 106.063661][ T1800] [ 106.066602][ T1800] __dump_stack+0x21/0x24 [ 106.070952][ T1800] dump_stack_lvl+0x110/0x170 [ 106.075643][ T1800] ? __cfi_dump_stack_lvl+0x8/0x8 [ 106.080684][ T1800] ? __local_bh_enable_ip+0x58/0x80 [ 106.085896][ T1800] ? release_sock+0x169/0x1c0 [ 106.090599][ T1800] dump_stack+0x15/0x24 [ 106.094778][ T1800] should_fail_ex+0x3d4/0x520 [ 106.099509][ T1800] __should_failslab+0xac/0xf0 [ 106.104299][ T1800] should_failslab+0x9/0x20 [ 106.108815][ T1800] kmem_cache_alloc_node+0x42/0x340 [ 106.114036][ T1800] ? __alloc_skb+0xea/0x4b0 [ 106.118561][ T1800] __alloc_skb+0xea/0x4b0 [ 106.122905][ T1800] ? netlink_autobind+0x168/0x1a0 [ 106.127947][ T1800] netlink_sendmsg+0x635/0xbd0 [ 106.132724][ T1800] ? cgroup_rstat_updated+0xf5/0x360 [ 106.138027][ T1800] ? __cfi_netlink_sendmsg+0x10/0x10 [ 106.143329][ T1800] ? security_socket_sendmsg+0x93/0xb0 [ 106.148806][ T1800] __sys_sendto+0x4ac/0x660 [ 106.153326][ T1800] ? __cfi___sys_sendto+0x10/0x10 [ 106.158384][ T1800] ? __secure_computing+0xea/0x290 [ 106.163599][ T1800] __x64_sys_sendto+0xe5/0x100 [ 106.168376][ T1800] x64_sys_call+0x83/0x9a0 [ 106.172815][ T1800] do_syscall_64+0x4c/0xa0 [ 106.177251][ T1800] ? clear_bhb_loop+0x30/0x80 [ 106.181950][ T1800] ? clear_bhb_loop+0x30/0x80 [ 106.186648][ T1800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.192559][ T1800] RIP: 0033:0x7f4ca975d68e [ 106.197002][ T1800] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.216629][ T1800] RSP: 002b:00007f4caa5a6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 106.225074][ T1800] RAX: ffffffffffffffda RBX: 00007f4caa5a86c0 RCX: 00007f4ca975d68e [ 106.233063][ T1800] RDX: 0000000000000020 RSI: 00007f4caa5a7000 RDI: 0000000000000004 [ 106.241056][ T1800] RBP: 0000000000000000 R08: 00007f4caa5a6f04 R09: 000000000000000c [ 106.249038][ T1800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 106.257020][ T1800] R13: 00007f4caa5a6f58 R14: 00007f4caa5a7000 R15: 0000000000000000 [ 106.265011][ T1800] [ 106.285799][ T1017] EXT4-fs (loop7): unmounting filesystem. [ 106.310744][ T1758] loop1: detected capacity change from 0 to 256 [ 106.321029][ T1758] FAT-fs (loop1): Unrecognized mount option "?" or missing value [ 106.342718][ T28] audit: type=1400 audit(1779218250.945:501): avc: denied { ioctl } for pid=1801 comm="syz.5.454" path="socket:[22747]" dev="sockfs" ino=22747 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.361221][ T1804] loop5: detected capacity change from 0 to 2048 [ 106.437721][ T390] usb 3-1: USB disconnect, device number 15 [ 106.443427][ T1804] EXT4-fs (loop5): invalid inodes per group: 1 [ 106.443427][ T1804] [ 106.446891][ T28] audit: type=1400 audit(1779218251.065:502): avc: denied { mounton } for pid=1803 comm="syz.5.455" path="/syzcgroup/unified/syz5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 106.461716][ T1811] loop7: detected capacity change from 0 to 512 [ 106.569635][ T28] audit: type=1400 audit(1779218251.205:503): avc: denied { remount } for pid=1809 comm="syz.7.457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.599123][ T332] usb 2-1: USB disconnect, device number 9 [ 106.652466][ T1814] loop2: detected capacity change from 0 to 16 [ 106.660377][ T1814] erofs: (device loop2): mounted with root inode @ nid 36. [ 106.668498][ T1814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.458'. [ 106.677520][ T28] audit: type=1400 audit(1779218251.305:504): avc: denied { append } for pid=1821 comm="syz.7.461" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 106.749837][ T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.755569][ T1831] FAULT_INJECTION: forcing a failure. [ 106.755569][ T1831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.778814][ T1831] CPU: 1 PID: 1831 Comm: syz.2.464 Not tainted syzkaller #0 [ 106.786131][ T1831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.796286][ T1831] Call Trace: [ 106.799566][ T1831] [ 106.802523][ T1831] __dump_stack+0x21/0x24 [ 106.806880][ T1831] dump_stack_lvl+0x110/0x170 [ 106.811561][ T1831] ? __cfi_dump_stack_lvl+0x8/0x8 [ 106.816665][ T1831] dump_stack+0x15/0x24 [ 106.820814][ T1831] should_fail_ex+0x3d4/0x520 [ 106.825486][ T1831] should_fail+0xb/0x10 [ 106.829638][ T1831] should_fail_usercopy+0x1a/0x20 [ 106.834661][ T1831] _copy_from_user+0x1e/0xc0 [ 106.839244][ T1831] __sys_sendto+0x30b/0x660 [ 106.843759][ T1831] ? __cfi___sys_sendto+0x10/0x10 [ 106.848794][ T1831] ? __secure_computing+0xea/0x290 [ 106.853907][ T1831] __x64_sys_sendto+0xe5/0x100 [ 106.858663][ T1831] x64_sys_call+0x83/0x9a0 [ 106.863090][ T1831] do_syscall_64+0x4c/0xa0 [ 106.867526][ T1831] ? clear_bhb_loop+0x30/0x80 [ 106.872227][ T1831] ? clear_bhb_loop+0x30/0x80 [ 106.876909][ T1831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.882798][ T1831] RIP: 0033:0x7f8634b5d68e [ 106.887221][ T1831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.906829][ T1831] RSP: 002b:00007f8635b12e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 106.915242][ T1831] RAX: ffffffffffffffda RBX: 00007f8635b146c0 RCX: 00007f8634b5d68e [ 106.923216][ T1831] RDX: 0000000000000020 RSI: 00007f8635b13000 RDI: 0000000000000003 [ 106.931185][ T1831] RBP: 0000000000000000 R08: 00007f8635b12f04 R09: 000000000000000c [ 106.939856][ T1831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 106.947853][ T1831] R13: 00007f8635b12f58 R14: 00007f8635b13000 R15: 0000000000000000 [ 106.955852][ T1831] [ 107.029002][ T6] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 107.098717][ T1842] loop2: detected capacity change from 0 to 512 [ 107.232100][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 107.243318][ T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.254282][ T6] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.280081][ T6] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.567365][ T1844] loop4: detected capacity change from 0 to 16 [ 108.573681][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.577913][ T1844] erofs: (device loop4): mounted with root inode @ nid 36. [ 108.633564][ T28] audit: type=1400 audit(1779218253.275:505): avc: denied { append } for pid=1846 comm="syz.1.470" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.666478][ T6] usb 6-1: Product: syz [ 108.681841][ T1856] loop4: detected capacity change from 0 to 512 [ 108.703073][ T6] usb 6-1: Manufacturer: syz [ 108.707782][ T6] usb 6-1: SerialNumber: syz [ 108.719390][ T1855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 108.729296][ T28] audit: type=1400 audit(1779218253.355:506): avc: denied { write } for pid=1854 comm="syz.2.474" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 108.754016][ T28] audit: type=1400 audit(1779218253.355:507): avc: denied { bind } for pid=1854 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.778509][ T1856] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.778935][ T28] audit: type=1400 audit(1779218253.355:508): avc: denied { setopt } for pid=1854 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.799919][ T1856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 108.817488][ T1856] System zones: 1-12 [ 108.877440][ T1861] loop7: detected capacity change from 0 to 16 [ 108.888470][ T1861] erofs: (device loop7): mounted with root inode @ nid 36. [ 108.896732][ T1861] netlink: 60 bytes leftover after parsing attributes in process `syz.7.473'. [ 108.944472][ T1856] EXT4-fs (loop4): 1 truncate cleaned up [ 108.951353][ T1856] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.978245][ T6] usb 6-1: 0:2 : does not exist [ 108.994763][ T6] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 108.995799][ T28] audit: type=1400 audit(1779218253.635:509): avc: denied { relabelto } for pid=1847 comm="syz.4.471" name="rdma.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 109.015752][ T6] usb 6-1: USB disconnect, device number 18 [ 109.108796][ T60] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 109.288697][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 109.295132][ T60] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 109.303380][ T60] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.313555][ T390] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 109.321363][ T60] usb 3-1: config 0 has no interface number 0 [ 109.329004][ T60] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 109.338081][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.346114][ T60] usb 3-1: Product: syz [ 109.348669][ T332] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 109.350326][ T60] usb 3-1: Manufacturer: syz [ 109.362489][ T60] usb 3-1: SerialNumber: syz [ 109.367938][ T60] usb 3-1: config 0 descriptor?? [ 109.373857][ T60] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 109.380252][ T60] usb 3-1: No valid video chain found. [ 109.468699][ T390] usb 5-1: device descriptor read/64, error -71 [ 109.507182][ T332] usb 2-1: device descriptor read/64, error -71 [ 109.534360][ T1865] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 109.545480][ T28] audit: type=1400 audit(1779218254.185:510): avc: denied { create } for pid=1864 comm="syz.5.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 109.566654][ T372] EXT4-fs (loop5): unmounting filesystem. [ 109.578816][ T6] usb 3-1: USB disconnect, device number 16 [ 109.579378][ T28] audit: type=1400 audit(1779218254.185:511): avc: denied { write } for pid=1864 comm="syz.5.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 109.768706][ T390] usb 5-1: device descriptor read/64, error -71 [ 110.098640][ T390] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 110.268590][ T390] usb 5-1: device descriptor read/64, error -71 [ 110.598564][ T390] usb 5-1: device descriptor read/64, error -71 [ 110.622488][ T332] usb 2-1: device descriptor read/64, error -71 [ 110.908462][ T332] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 110.978444][ T6] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 111.015745][ T390] usb usb5-port1: attempt power cycle [ 111.058595][ T332] usb 2-1: device descriptor read/64, error -71 [ 111.179474][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.190422][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.200571][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.260853][ T1890] netlink: 60 bytes leftover after parsing attributes in process `syz.5.484'. [ 111.410126][ T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.419280][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.428566][ T6] usb 3-1: config 0 descriptor?? [ 111.445783][ T390] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 111.479605][ T390] usb 5-1: device descriptor read/8, error -71 [ 111.578517][ T332] usb 2-1: device descriptor read/64, error -71 [ 111.628891][ T390] usb 5-1: device descriptor read/8, error -71 [ 111.679745][ T288] EXT4-fs (loop4): unmounting filesystem. [ 111.698467][ T332] usb usb2-port1: attempt power cycle [ 111.886205][ T1894] set_capacity_and_notify: 3 callbacks suppressed [ 111.886224][ T1894] loop4: detected capacity change from 0 to 512 [ 112.508060][ T1883] loop2: detected capacity change from 0 to 256 [ 112.860984][ T6] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 112.872528][ T6] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 112.876479][ T1883] FAT-fs (loop2): Unrecognized mount option "?" or missing value [ 112.889181][ T1898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.903632][ T1898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.990581][ T332] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 113.117916][ T1907] loop1: detected capacity change from 0 to 16 [ 113.125117][ T1907] erofs: (device loop1): mounted with root inode @ nid 36. [ 113.133192][ T1907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.487'. [ 113.288356][ T1288] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 113.438114][ T332] usb 2-1: device not accepting address 12, error -71 [ 113.448128][ T390] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 113.468128][ T1288] usb 6-1: Using ep0 maxpacket: 32 [ 113.474847][ T1288] usb 6-1: unable to get BOS descriptor or descriptor too short [ 113.483602][ T1288] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 113.488484][ T390] usb 5-1: Using ep0 maxpacket: 16 [ 113.493548][ T1288] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 161, changing to 11 [ 113.499856][ T390] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.511392][ T1288] usb 6-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 113.520493][ T390] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.529645][ T1288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.546583][ T1288] usb 6-1: Product: syz [ 113.548263][ T390] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.550847][ T1288] usb 6-1: Manufacturer: syz [ 113.560143][ T390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.564782][ T1288] usb 6-1: SerialNumber: syz [ 113.572925][ T390] usb 5-1: Product: syz [ 113.581706][ T390] usb 5-1: Manufacturer: syz [ 113.581985][ T1897] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 113.586358][ T390] usb 5-1: SerialNumber: syz [ 113.809660][ T390] usb 5-1: 0:2 : does not exist [ 113.818234][ T390] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 113.834066][ T390] usb 5-1: USB disconnect, device number 16 [ 113.854224][ T1288] usb 6-1: USB disconnect, device number 19 [ 114.072993][ T60] usb 3-1: USB disconnect, device number 17 [ 114.079425][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.120555][ T28] audit: type=1400 audit(1779218258.766:512): avc: denied { create } for pid=1918 comm="syz.7.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.155302][ T1921] loop7: detected capacity change from 0 to 4096 [ 114.162758][ T1921] EXT4-fs (loop7): Test dummy encryption mode enabled [ 114.170284][ T1921] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a843c018, mo2=0102] [ 114.178821][ T1921] System zones: 0-5 [ 114.183591][ T1921] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 114.253416][ T1017] EXT4-fs (loop7): unmounting filesystem. [ 114.270067][ T1927] FAULT_INJECTION: forcing a failure. [ 114.270067][ T1927] name failslab, interval 1, probability 0, space 0, times 0 [ 114.282907][ T1927] CPU: 1 PID: 1927 Comm: syz.7.496 Not tainted syzkaller #0 [ 114.290224][ T1927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.300270][ T1927] Call Trace: [ 114.303535][ T1927] [ 114.306453][ T1927] __dump_stack+0x21/0x24 [ 114.310790][ T1927] dump_stack_lvl+0x110/0x170 [ 114.315480][ T1927] ? __cfi_dump_stack_lvl+0x8/0x8 [ 114.320596][ T1927] ? get_page_from_freelist+0x2d12/0x2d80 [ 114.326333][ T1927] dump_stack+0x15/0x24 [ 114.330526][ T1927] should_fail_ex+0x3d4/0x520 [ 114.335238][ T1927] ? mas_alloc_nodes+0x2d8/0x850 [ 114.337992][ T332] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 114.340201][ T1927] __should_failslab+0xac/0xf0 [ 114.352530][ T1927] should_failslab+0x9/0x20 [ 114.357070][ T1927] kmem_cache_alloc+0x3b/0x330 [ 114.361961][ T1927] mas_alloc_nodes+0x2d8/0x850 [ 114.366756][ T1927] mas_preallocate+0xe13/0x1440 [ 114.371636][ T1927] ? __cfi_mas_preallocate+0x10/0x10 [ 114.376936][ T1927] ? rwsem_write_trylock+0x136/0x300 [ 114.382225][ T1927] vma_expand+0x3b7/0xa10 [ 114.386572][ T1927] mmap_region+0xf61/0x21f0 [ 114.389473][ T332] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 114.391088][ T1927] ? __cfi_mmap_region+0x10/0x10 [ 114.399330][ T332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.404171][ T1927] ? cap_mmap_addr+0x165/0x2e0 [ 114.414781][ T332] usb 2-1: config 0 has no interface number 0 [ 114.418979][ T1927] ? get_unmapped_area+0x313/0x380 [ 114.419009][ T1927] do_mmap+0x856/0xdd0 [ 114.419033][ T1927] ? __cfi_do_mmap+0x10/0x10 [ 114.426891][ T332] usb 2-1: New USB device found, idVendor=045b, idProduct=024d, bcdDevice=27.16 [ 114.430202][ T1927] vm_mmap_pgoff+0x224/0x410 [ 114.430227][ T1927] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 114.430246][ T1927] ? up_read+0x56/0x1d0 [ 114.434586][ T332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.438974][ T1927] ksys_mmap_pgoff+0xf6/0x1d0 [ 114.439000][ T1927] ? __secure_computing+0xea/0x290 [ 114.439021][ T1927] __x64_sys_mmap+0xfa/0x110 [ 114.448322][ T332] usb 2-1: Product: syz [ 114.452618][ T1927] x64_sys_call+0x8fd/0x9a0 [ 114.458178][ T332] usb 2-1: Manufacturer: syz [ 114.462055][ T1927] do_syscall_64+0x4c/0xa0 [ 114.470177][ T332] usb 2-1: SerialNumber: syz [ 114.474774][ T1927] ? clear_bhb_loop+0x30/0x80 [ 114.483245][ T332] usb 2-1: config 0 descriptor?? [ 114.484451][ T1927] ? clear_bhb_loop+0x30/0x80 [ 114.521300][ T1927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.527219][ T1927] RIP: 0033:0x7fb805d9cbc2 [ 114.531643][ T1927] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 114.551334][ T1927] RSP: 002b:00007fb806bb0d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 114.559771][ T1927] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb805d9cbc2 [ 114.567834][ T1927] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 114.575817][ T1927] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 114.583787][ T1927] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 114.591761][ T1927] R13: 0000000000001000 R14: 0000000000000022 R15: 00007fb805e504db [ 114.599743][ T1927] [ 114.604563][ T1927] ------------[ cut here ]------------ [ 114.610142][ T1927] kernel BUG at mm/mmap.c:2854! [ 114.615692][ T1927] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 114.621781][ T1927] CPU: 0 PID: 1927 Comm: syz.7.496 Not tainted syzkaller #0 [ 114.629167][ T1927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.639239][ T1927] RIP: 0010:mmap_region+0x2098/0x21f0 [ 114.644652][ T1927] Code: 80 c1 03 38 c1 0f 8c 01 fa ff ff 4c 89 ff 49 89 d5 e8 ac 47 09 00 4c 89 ea e9 ee f9 ff ff e8 cf ab c3 ff 0f 0b e8 c8 ab c3 ff <0f> 0b 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 e6 ff ff 4c 89 e7 [ 114.648645][ T1936] loop5: detected capacity change from 0 to 1024 [ 114.664287][ T1927] RSP: 0018:ffffc90009667a40 EFLAGS: 00010293 [ 114.664315][ T1927] RAX: ffffffff81adca88 RBX: 00007fb8047f8000 RCX: ffff888115b73cc0 [ 114.664329][ T1927] RDX: 0000000000000000 RSI: 00007fb8047f7fff RDI: 00007fb8047f8000 [ 114.664341][ T1927] RBP: ffffc90009667c30 R08: ffff888115b73cc0 R09: 0000000000000003 [ 114.664353][ T1927] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff920012ccf60 [ 114.664364][ T1927] R13: 0000000000000070 R14: 00007fb8047f8000 R15: 00007fb8047f7fff [ 114.664376][ T1927] FS: 00007fb806bb26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 114.664392][ T1927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.664404][ T1927] CR2: 00002000000bd038 CR3: 000000011c41f000 CR4: 00000000003506b0 [ 114.664422][ T1927] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.664432][ T1927] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.664444][ T1927] Call Trace: [ 114.664450][ T1927] [ 114.673001][ T1936] EXT4-fs: Ignoring removed bh option [ 114.676843][ T1927] ? __cfi_mmap_region+0x10/0x10 [ 114.772529][ T1927] ? cap_mmap_addr+0x165/0x2e0 [ 114.777300][ T1927] ? get_unmapped_area+0x313/0x380 [ 114.782415][ T1927] do_mmap+0x856/0xdd0 [ 114.786487][ T1927] ? __cfi_do_mmap+0x10/0x10 [ 114.791081][ T1927] vm_mmap_pgoff+0x224/0x410 [ 114.795671][ T1927] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 114.800782][ T1927] ? up_read+0x56/0x1d0 [ 114.805126][ T1927] ksys_mmap_pgoff+0xf6/0x1d0 [ 114.809814][ T1927] ? __secure_computing+0xea/0x290 [ 114.814927][ T1927] __x64_sys_mmap+0xfa/0x110 [ 114.819517][ T1927] x64_sys_call+0x8fd/0x9a0 [ 114.824031][ T1927] do_syscall_64+0x4c/0xa0 [ 114.828447][ T1927] ? clear_bhb_loop+0x30/0x80 [ 114.833212][ T1927] ? clear_bhb_loop+0x30/0x80 [ 114.837891][ T1927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.843873][ T1927] RIP: 0033:0x7fb805d9cbc2 [ 114.848286][ T1927] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 114.868065][ T1927] RSP: 002b:00007fb806bb0d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 114.876480][ T1927] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb805d9cbc2 [ 114.884450][ T1927] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 114.892420][ T1927] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 114.900391][ T1927] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 114.908358][ T1927] R13: 0000000000001000 R14: 0000000000000022 R15: 00007fb805e504db [ 114.916330][ T1927] [ 114.919355][ T1927] Modules linked in: [ 114.924253][ T1927] ---[ end trace 0000000000000000 ]--- [ 114.931438][ T1913] loop1: detected capacity change from 0 to 512 [ 114.939044][ T1927] RIP: 0010:mmap_region+0x2098/0x21f0 [ 114.944511][ T1927] Code: 80 c1 03 38 c1 0f 8c 01 fa ff ff 4c 89 ff 49 89 d5 e8 ac 47 09 00 4c 89 ea e9 ee f9 ff ff e8 cf ab c3 ff 0f 0b e8 c8 ab c3 ff <0f> 0b 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 e6 ff ff 4c 89 e7 [ 114.965327][ T1913] EXT4-fs error (device loop1): ext4_iget_extra_inode:4754: inode #15: comm syz.1.491: corrupted in-inode xattr [ 114.968069][ T1927] RSP: 0018:ffffc90009667a40 EFLAGS: 00010293 [ 114.978253][ T1936] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 114.984006][ T1927] RAX: ffffffff81adca88 RBX: 00007fb8047f8000 RCX: ffff888115b73cc0 [ 114.992227][ T60] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 115.000256][ T1927] RDX: 0000000000000000 RSI: 00007fb8047f7fff RDI: 00007fb8047f8000 [ 115.008103][ T1913] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.491: couldn't read orphan inode 15 (err -117) [ 115.015931][ T1927] RBP: ffffc90009667c30 R08: ffff888115b73cc0 R09: 0000000000000003 [ 115.028203][ T1913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.035803][ T1936] System zones: 0-1, 3-12 [ 115.058299][ T1927] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff920012ccf60 [ 115.062478][ T1936] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 115.066397][ T1927] R13: 0000000000000070 R14: 00007fb8047f8000 R15: 00007fb8047f7fff [ 115.082940][ T1927] FS: 00007fb806bb26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 115.126058][ T1927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.133027][ T1927] CR2: 00007f558ca70000 CR3: 000000011c41f000 CR4: 00000000003526a0 [ 115.144469][ T1927] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.154099][ T1927] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.165095][ T1927] Kernel panic - not syncing: Fatal exception [ 115.171330][ T1927] Kernel Offset: disabled [ 115.175746][ T1927] Rebooting in 86400 seconds..