last executing test programs: 1m36.217363867s ago: executing program 32 (id=29): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000000c0)=""/58, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r4, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000000d40)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a80)="3532e45a2a47b082daed2070cfb7486d610cbf2c61047b598bfe9cd45d4f49e6dc94c3258897ce5d1c79245647804c273df7b1f3a090a6db8597d29d858b3192fe623f600cb431634f4182a8b945a95d3c65a8a15745fac45de5b1988172b0e1e7b06a4f3127d260c9dd68402b1c9fbc5f8f1642170dbad52b1c5c43c486a4a957b356916878cd74336ee8f570470acfc47c4fecf1dc4fa15e34231cd2416c365555ac8d16494170df8159af76b077cdea7582961b8b53c94f63f69b2cd2ddd0e70342cb024c085d413f58279cd1f023f6a70bba2764028cd6bd76b24c0cf74de2deb2d78ba54e70e6510c9829ad154fe7b664167f69328b471490a5c0d2b89e1db10f4037369650b57d71894ac4b336cf720de90040d1099bf5a7fdaf560345372f0d896c786fbd34f0257f18b6c8106d21acd12ab2db03dd15fef1d25da97788cd180c6b6d58b33822bf9839ff2ada5f6e2c8a2d1038292cc05b4a5e63fcbde50a915cd851d1c370b3c9be47ce4dc6e5fed05781c3c921c840738783256f861d1ccb710dc593a98a3e416c89abf2cc2eb19c99d5c3ae3341f7c8c14de7c7e997f008ac48eba6d94c828938685ca421ae4e90a9b45a4e5f1b4ace27816746826627b1829208efdd2c46f82b8259a8a3dbf412e5006cff9cf9778c337a0aab9f215edbfb6d1d0b1f9bac9c995a199074abd14f44fd9039983c703335e2451a8d0662655529ccdbf9b0773868c7686817ef845d611704feec78f492b8e55b4d5a2f58629a0a414d91592a68b9e976e563e390a3abada2a39d882059c4d81b67389561a98cf15eceb764642d42a64bfbda38c336ce45d0c2250c5f0c43c956d1dd9313174d312b02a6d15ecaa436f26153ab5dc10c88270e91b4295aa92458ee4f21e59aed97bb07d04cad7ecf0f6c02b3a118415ddcc7f7bb3df02f6e12a94e0626fd75c3a08206f745034f409260f14340d6a89bba185d", 0x2b7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="608013", 0x3}], 0x1}}], 0x4, 0x2400c0a2) 1m34.960993028s ago: executing program 33 (id=44): add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000540)="3d1b8f87ddde1daf782c3bd6cf6f80398f2dcaec44f7e5986ca332a58f9dc51e24d6d4c5477aa7ecb9e8ddca02590e555e4ebe2d02f2c2e9d588bc151173d8a23dec60f26121c7bc4bbd7d9ce88a1c51a4593759ba959d32c6d99e81359cf5973a3d2e8dbc1476373e056771620f91ab3b1a9b4bb7f66d03a47701d245d626e977736b9c4501bc8f8ecafb6edae11d816bef9d2c350c3500c8402be7a574c47e1aa5613cc4d266c30b1e6252025716f6620837b8c1f07446e14a0057beeaac070f7814fc2596e7db95f0545a48cb651f86ed608c5ef89a7c4fc6c5813c69a9d25a", 0xe1, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000740)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x62, 0x38, 0x37, 0x36, 0x31, 0x30, 0x38, 0x31, 0x65, 0x65, 0x30, 0x36, 0x37, 0x66, 0x31, 0x63]}, &(0x7f00000007c0)={0x0, "2d3636fe0df787a49ea25ae4e356f9deaab0a5ec553e65d48d0204b41616c4a186e94575741d67497da7cc94ca86cb63f825f3fcf126d9c3d9a86c4d7f24f447", 0x36}, 0x48, r0) add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x33, 0x30, 0x36, 0x30, 0x30, 0x37, 0x30, 0x37, 0x30, 0x30, 0x30, 0x35, 0x37, 0x30, 0x2, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 1m34.654154165s ago: executing program 34 (id=48): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100037040100"/20, @ANYRES32=r2, @ANYBLOB="83000500012c0000180012800e00010069703665727370616e00000004000280e04ed9bdd367"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f0f3000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000003e75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2726f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfda047bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded527a0bfe5504eb355cb0000000000000073be27152effbed9ed6a4e8f9c55a2ff11245f2c20856d491b80d749cf8917dbe01cc6c7b747923621bb16efb2025d19a1a27b0348135e32e442da8f26e05283ece8ad92c77f8141c7a2037380f28c9c638ee0151f4620b9b64185db0321a4e809a5438cdef28f7adac1735a50006fbae20d0930b55f0081db6fa0d14024cefa1611ef384de38787324bfb9f79a1e164c8fe80a2d9e4199960"], &(0x7f0000000100)='GPL\x00'}, 0x27) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m33.700976908s ago: executing program 35 (id=58): socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) socket(0x1, 0x803, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r3 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r3}, &(0x7f00000001c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) 1m31.994805339s ago: executing program 36 (id=64): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000048c0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004880)={&(0x7f0000004840)=@getchain={0x34, 0x66, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff1}, {0xfff2, 0xfff3}, {0xfff1, 0xb}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40850}, 0x40) 1m30.540695295s ago: executing program 37 (id=72): socket(0x2, 0x80802, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/58, 0x3a) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r3, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000d40)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a80)="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", 0x2b7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="608013", 0x3}], 0x1}}], 0x4, 0x2400c0a2) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x306}], 0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1m26.342590036s ago: executing program 38 (id=86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x6, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite6\x00') ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='\x00') r2 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x2, 0x5, 0x106, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x7000000) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a40)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005400e50129bd7000fdffffff07000000", @ANYRES32=r7, @ANYBLOB="1c1002a71a3cf320eaca05920d6c4c7f810986d8d9de4354cfadd41c052d5650b21ac1d0da0067c77d25b0faffffff3464e42f2d0154fea5dab4cba88a8b10b073f9a4667f6cf3980b416880a26e249f8756940fa5dc90602e91bc5f505395a0717e27495776c103279e16347260566e1375b089302424790f6f3ab1", @ANYRES32=r7, @ANYBLOB="0100ffffe000000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r8 = socket(0x1e, 0x2, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0x104) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r8, &(0x7f0000000200), 0x0, 0x40002122, 0x0) sendmsg$tipc(r8, &(0x7f0000000100)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x41}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8891}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4005080) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@multicast, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x16, 0x1c, 0x64, 0x0, 0xfb, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x16, 0x0, 0x0, @local}}}}}, 0x0) 1m22.182747796s ago: executing program 39 (id=103): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0x3, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpid() ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f00000000c0), 0x4001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) io_setup(0x77b, &(0x7f00000017c0)=0x0) io_destroy(r7) io_setup(0x2278, 0x0) io_cancel(r7, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r2, 0x7fffeffffffffffe, 0x1) read$FUSE(r8, &(0x7f0000000340)={0x2020}, 0x2020) write$UHID_INPUT(r4, &(0x7f0000002380)={0x18, {"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", 0x1000}}, 0x1006) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, 0xffffffffffffffff, 0x0) 1m18.352243759s ago: executing program 40 (id=119): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)}, 0x17) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="2e000000010000", 0x7) pread64(r0, &(0x7f00000001c0)=""/1, 0x1, 0x3) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1e0001c, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x3, 0x27b, &(0x7f00000008c0)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_opts(r6, 0x29, 0x2, 0x0, &(0x7f0000000740)) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000e00)=0x0) getresuid(&(0x7f0000000e40)=0x0, &(0x7f0000000e80), &(0x7f0000000ec0)) read$FUSE(r3, &(0x7f0000000f00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = syz_open_dev$vcsu(&(0x7f0000004640), 0x6, 0x30002) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005040)={0x6, 0x10, &(0x7f0000004d80)=@raw=[@ldst={0x3, 0x2, 0x1, 0x7, 0x5, 0xfffffffffffffff4}, @jmp={0x5, 0x0, 0x0, 0x5, 0x2, 0x6, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x51}], &(0x7f0000004e00)='syzkaller\x00', 0x0, 0xc1, &(0x7f0000004e40)=""/193, 0x41100, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004f40)={0x2, 0x8, 0x8, 0xffff1755}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000004f80)=[0x1, 0x1, 0xffffffffffffffff, 0x1, r1, 0x1, 0x1], &(0x7f0000004fc0)=[{0x3, 0x5, 0xb, 0x8}, {0x2, 0x3, 0x9, 0x8}, {0x5, 0x1, 0xb}, {0x5, 0x3, 0xf, 0xa}, {0x0, 0x4, 0x1, 0x6}], 0x10, 0x4}, 0x94) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000052c0)=@bpf_ext={0x1c, 0x17, &(0x7f0000005100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x358, 0x0, 0x0, 0x0, 0x2}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd013}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0x5, 0x4, 0x8, 0x40}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @exit]}, &(0x7f00000051c0)='GPL\x00', 0x800, 0xf, &(0x7f0000005200)=""/15, 0x41100, 0x9d6166a3d1958ac8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000005240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000005280)={0x3, 0x9, 0x80000000, 0xd70a}, 0x10, 0xd01, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @value=r2}, 0x94) sendmmsg$unix(r7, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000640)="5790e25ddd9a901a8af72a178eb0a4a8242f9b1345f6c04e83f7b07f5ebc6f689692a1608f3c545c34bdb3fc1e3733ea2eb3f88ce05de8735e3257cc5714334146ccc6d5319b3527b5330dccc1a023dd084489bd3bfb927629844944b899e6df212b3f585dd8a8542b96d059fda5d4f2798f1dce6f127335bdf86fbea66d054d58b86da0e89f315d758c41a29b2699b5ba94011c44e7497e2846b4e03358b46914c8699d848a8749c84f7f1b5e24f7bc45bca37de5fd5303d2a9597d4056504d4a68e5fefbcd8b6574a2740034bc5a387e5d691b8a0589ff7c01112131e9d9a4022514447f9d08a7f140bf94a3", 0xed}, {&(0x7f0000000780)="88f0c56cbffa7ad2abd3da956a92ce20ac80db30e553f1069f925a2a6629a71e89661e1c42a17d0a9c34253bed17cf6930b38c3cb18a3579e96c", 0x3a}, {&(0x7f00000007c0)="208f5c61db6e30597c8a4f756f3de3840ef8a4b0bc1a18e095c459e24165cf79ef4fd204f231e914a5c1d7bf3e6a6cca22a7fbff620e9766c4c3c9c8a3773f67178dc5b68a414a81def300a78aec3eccaf4d22d96ed2e9a772293b14e14bcd7041d4c104154a99600bde8a27d90736aea8a3e4efe82185b064b3a44dda8e2680fb4e5d5a9951835fa7bef8c1e2f9c25ee9d3cfa63263b4ead9d9c75fd7a23e91b121060b6a221a41add8c059542907b35f4f9ecaaea199fba4d37d11046552cc422c4a6d08935f9e3b46e9cbe6f8c9acc0659a", 0xd3}, {&(0x7f0000000d00)="1a92d56eadffc8264d6a07afb62907d729ac91898ee4dd8f11480bce6c3cd9464f777f92679e5e1f7ecc486d758387ce83ae04c227546f1ef9959ca372d784b188d3acc159ef70e2a085c3329c79c4a77a5e21b6b8b57ff55227f0dda662e74f0f84a5c04bcfea56f81c6fcacb2a9a75538e271346c17823d5fcd680235757ead086d63a27be5a870b", 0x89}], 0x4, &(0x7f0000002f40)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x801}}, {{&(0x7f0000002f80)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, &(0x7f0000003100)=[{&(0x7f0000003000)}, {&(0x7f0000003040)="0933cccbe6814522fbc4c6e599aa81ab4013d7a6", 0x14}, {&(0x7f0000003080)="840f384b0256eea47caa5615ba6f18e5d94057584567a4ba54f91f0e06d2f737f6fd3158de", 0x25}, {&(0x7f00000030c0)}], 0x4, 0x0, 0x0, 0x20000001}}, {{&(0x7f0000003140)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, &(0x7f00000045c0)=[{&(0x7f00000031c0)="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", 0x1000}, {&(0x7f00000041c0)="ddb11215448eb57ec18d7fda5ea7653562b3c9cd3baffdcb6e663d8fa3f22611233e44338dccda", 0x27}, {&(0x7f0000004200)="db0954ece1522095293c7bfd4f3e6b08c6066e82c5ead68f9bb20f219b51dc14a04b3bd9da4a73def4186a09cfbf3a8d0f8eba5d7107ec07a6344ac8e4ff7384ae59b594174e60da28236698049c41c9e49d61345fabfe5006d318d031ce8b180eb5f3a7039ad282171e23721391ebe6b5d6cd1ea89cb980cf4ca5b41667b19c8a5e8489d806638dad6f3e16ab38d866e59c1d122fc36b05e4a3339e2e140cb09f7002417fde1392ee1ac885b62f488ebf7f024e60e9bb03765c10efc54e4c91a5046de13dec4c9f707e", 0xca}, {&(0x7f0000004300)="3c3b95f8cacd03c81a9f4c89ebe80fcd2e774d392b4b2176a8ffe25793d80e510265421412fa645f9b687252ae632dd476919145c18dfe95fd7cb32cee6b605ae0afbfc802ad348b4003ed9376d14c25e1913e25392162c8ea2659bf1e254b771c9cf88537d5b6a0bb96c0d1f61056eafd0bc4b06e2de5823762db9b1fd40e2e4b653957458bca9ee9b67266546e0e8231414e27f9566ab74be64e2e051f8f3c5cc0c3a426888d16d2719e9d0a7bead829a5d60986b43a19ceee3395d9115f", 0xbf}, {&(0x7f00000043c0)="ae0e94f1d22c7f3cd5a1135a620f37edd97429f195f2224a135a7ce05de165cc75020e1771b90fc5e3315247843a1626619398355ec7a0f19e3bc3118cc5e0cd0d0c2c2065f88950743ebb069a8e69ccbbfed7797e7cd9334cb8b76971cb4197b277151a1b98ca15e8b734201b95b17ef67ac8cbc1f172be0e860e8ad46af72fe26c05d18957b513950a3c91aaf9742a8d0bd19895493d8b4e0af5cda92fb8a58eb889872f8aa69c386f04addbca38a91bd3e3de3aec026f5f8d0ca50d2258634853536153f7a675a60f29ecaf66b8164043ab316c1dbe7fdfaee151be4ced390754967c1b548edb82013d27bbe0197160", 0xf1}, {&(0x7f00000044c0)="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", 0xff}], 0x6, &(0x7f0000004680)=[@rights={{0x2c, 0x1, 0x1, [r6, r4, r0, r5, r5, r4, r11]}}], 0x30, 0x4040000}}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f00000046c0)="cd40169d273fa0570603896eec302200b483cbed7d292fe77d409d84bcfc0562eb9bd0ace8b4b69afc4074ece5248bec5d63e278a831b8113ddfe0eac03f43db49b1dcca8dfa3994d04937fd534ef4453aeb10a9bf908e574b04f3ec713ed3d6aadbdecd9b4cb1f87c23c32ff0c495010640df98c618933f1abbe1b9b3ef08fbd158503ae23542cca364d1dc6f597df5d51f43c8ee724027ec63a8b05c26f586fa8f39b09463fbd198c5a471b39657addc6aa9ac640964de252582bbb9a383b0db862afb386fb607232a", 0xca}, {&(0x7f00000047c0)}, {&(0x7f0000004800)="c9a583eba2b3579f4e0252d78199e4da761f83a28fced68f01d48156aaff2bbb85e5a00dd249f19aa1ec55895705ed4b17ffac8671b7aea10a24631cc948f3bf46e995a579aa40dd7ec1e4a2e04c400200175b549ee3e037fbc8eab03b7162c94711dcd6827e1d973cf2a0e535852c501666846fd20d29c1be9cde31eb91b6193a9af3ce3ddee2ade1e275a47a2d79e9fa55f79c3b9c92e31ca51b19e94e76348d88d55fee5c38926fa4173aad493126b7ffab3bafc4fb1011cc8e4789654725e5799a3819fa252d223beaa9cea67cf64c7019f025f276bfe0c3ae85f09a9b729d263ae626cace92", 0xe8}, {&(0x7f0000004900)="5bf9897d3294ebe04d02e91d8531760cb7c5ddfa5d853c3512844da9a80dbe0204352426e993c77e0d74957f9eb24de082523fc7b222b4f5d71751dcc7c97b58354153090c0e7c36146774de6b23e87b6b013748de2bd4accd32830d2ecf81c34148288969b88bef108d144c67661d9961b3d7e42499a037c99d2140a696f910a188a395f471ae6f80b8f4335a850d33648fd56bbfdfdd595c6f92c58fd7ec2b1fd0145c835a50381b0dde35e9b06a5161d49d2e2d6dc54375c66a831023b929d716efb162cf5d35be14a4f635d3e491fc5f39368e899a77546c68d639f0f2b64f87cc4090d7c24427", 0xe9}, {&(0x7f0000004a00)="f67759383df7c2ebb7e15d19d980b349c1c3d4b01fc4c471464e7cf4d633d8c24ab59217da208f8a84727484a765952837401230c0a7ced8cbb5d6771748c6194c0dde9a725db319fc09d7906c80b4bd6c025afd3da848c6c2425c658a3a1322758d6dec0ccb9801e577b7289b1dcb520490a6a4350e85e7236455cfe43de88b31592db009ae2e11530e3c7791c4e4", 0x8f}, {&(0x7f0000004ac0)="b9f51bfb98b15b431c43c69774b0417a1750bba0b45f1ada12bc41caa98ed446da968b6a7d2082bf8c64ca131d34d0b43b09f567c3d3a36df0f5b1c54ebcb4aa940c32ae159f2e44c81ae258a6a17ed80e6a654878b8f874ac34b83c313b332773c9c7828c894cf50e0a", 0x6a}, {&(0x7f0000004b40)="2994d6ce23a1e13ee67a2bca908206150071d9ecfdb36b71ace60cd9fa557512966567deee996e3af8ffcf23dce2326b6a31efccccc42351b542831eaf346c61a63903cf5ab925eef3be454f0e90126ef43c88f8886919daa9666c23c7b55ff7749e2fb0e0eed844bb64e97c428b5409a5f15d77c9e69549cb96d158052b853a50837b9d5d6a1208e36d5f9a685431e69198ef5c31", 0x95}, {&(0x7f0000004c00)="17a41a8d4aec27438367e84a3b475bc34ad41039f45b18743c79bcd34c910ea9c06d96112623b5a915b2bdc24598c2b25c4c576b5a964e214c0351787c521df12d8b2f5c0083c511b622d244f6c009933939cf7b91b803984d3878e9aff308dd6d2aa6e32dedac708cc1405ad8599cee4b692a4e6a79dc2725018102eef4b53dc241cb63e59e603cfeb1db2b4dd251999e19ac504ec0bff822b91f91b604891f9dc85d05e2f08629a03e1681c92bfe59e03fdcfb721c9d429b962bba1fe186657fca808a7741e4a1646b95c0367f2b04918bc385", 0xd4}], 0x8, &(0x7f0000005380)=[@rights={{0x20, 0x1, 0x1, [r5, r12, r13, r1]}}], 0x20, 0x6000404}}], 0x4, 0x80) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000600)={0x1, 0x1, 0x13, 0x15, 0xfd, &(0x7f0000000200)}) r14 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0) r15 = fsmount(r14, 0x1, 0x0) fchdir(r15) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x5000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 1m14.512140142s ago: executing program 41 (id=141): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000001100)={&(0x7f0000001080)='vfat\x00', &(0x7f00000010c0)='sysfs\x00', 0x8}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m10.952494857s ago: executing program 42 (id=164): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000100003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) 1m8.37351656s ago: executing program 43 (id=169): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000001e00050126bd7000fd10000000000000", @ANYRES32=0x0, @ANYBLOB="0180000000380000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r12, &(0x7f00000009c0)='1', 0x47f, 0xf, 0x0, 0x0, r12}]) 1m5.519762739s ago: executing program 44 (id=181): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xb0, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'vxcan1\x00'}]}]}, 0xb0}, 0x1, 0xffffffea}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000080)=0x81) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f1, &(0x7f0000001200)="$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") io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0x709f, 0x8, 0x2, 0xeb}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x5, 0x6, {0xfffffffa, 0x8, 0xfffffff9}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) r4 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87a0, 0x800, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x5, 0xfffffff7}}], 0x1, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x801100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m5.073969569s ago: executing program 6 (id=187): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xb0, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'vxcan1\x00'}]}]}, 0xb0}, 0x1, 0xffffffea}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000080)=0x81) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f1, &(0x7f0000001200)="$eJzs3c9rHGUfAPDvzGbzo837pn15EVsUAx5akKZJLVY9tfVgDwULehDx0NAkNXT7gyYFWwum4EFBQcSrSC/+GdK7NxHUm/9AFal4UMnK7M62283uNqTJTpr5fGB2nx+TfZ5vJk/mmdk82QBKazJ7SCP2RcTZJGKirW48mpWT+X73fr95LtuSqNff/C2JJC9r7b+aP+/OHpKI0Yj4/mTE/ypr2126fuPCbK3e9GHE4eWLVw4vXb9xaPHi7Pn58/OXZo68fPTY9CszR2c2Jc5WXKdOv/HMZx+999LCD7VDSRyPt6ofzEVHHJtlMiZjNQ8xy9eTZvlQRBzLEl2+L0+aHRBCqVXyn8dqRDwVE1Fp5JomYvHTQjsHbKl6JaIOlFRi/ENJteYBrWv7zuvgkUJmJYNz90TzAmht/EPNeyMx2rg22nUvabsyat7b2LMJ7Wdt/HNz/1fZFj3uQwxtQju9rNxqxrI2/qTRtz2N2iz+9KFr/TQipiNiOO/fa4/Rh/Z7JFtxH6afLP54en3xtx+HLP7j+XNWfnKD7U925AcdPwDldOdEfiJfyXIPzn/Z2bg1/4ku85/xLueujSj6/Nd7/tc634825j1pxzwsiYgz3V+y2lnwyyenvujVfvv8L9uy9ltzwUG4eytif0f8H2fB5vOfLP6ky/HPdjm7zjZe//HXU73qio6/fjviQI/5b0uW6vP+5OGFxdr8dPOxaxvffvfuN73a74y/WsDx39Vn/t/r+GdlV9bbyJnbF3tVjfc//g+NpeH8+f3Z5eWrMxHDyelmQdpWfqR/V1r7tF4ji//g893Hf7/4x1q/MtfhytsX7vWqe8yf/9X6OnfsJYt/boPH//P8+/Aof75z7dledf3iX89rAwAAAAAAAA+kjfdgk3TqfjpNp6aaa3j/H7vS2uWl5RcWLl+7NBdxsPH3kNW09U73RDOfZPmZ/O9hW/kjHfkXI2JvRHxZGWvkp85drs0VHTwAAAAAAAAAAAAAAAAAAABsE7vz9f+r9fpoRNT/qDTX/wMlsZUfMAdsb8Y/lFdj/KdF9wIogvM/lFeX8V8poh/A4Dn/Q3kZ/1Bexj+U11CPNLDzGfNQXsY/AAAAAOxIe5+783MSESuvjjW2zHBeVy20Z8BWM8ahvKzzgfK6/9a/5f9QOuua//9VH4mIen3ruwMUIOlW2Jgc1HM9vvBO168EAAAAAAAAAAAAALbAgX3W/0NZWfYH5fUY6//96wB4wvnX/1BervGBR63iH+1VYf0/AAAAAAAAAAAAAAzMeGNL0ql8LfB4pOnUVMR/ImJPVJOFxdr8dET8NyJ+qlRHsvxM0Z0GAAAAAAAAAAAAAAAAAACAHWbp+o0Ls7Xa/NX2xN9rSnZ2ovUpqNulP+2JSAbf6FhEbIfYN5hI++8z1FaSRKxkR77wPjcTUVzrI50lBf9iAgAAAAAAAAAAAAAAAACAEmpbe9zd/q8H3CMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGLwHn/+/dYmiYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnkz/BgAA//8dnzo8") io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0x709f, 0x8, 0x2, 0xeb}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x5, 0x6, {0xfffffffa, 0x8, 0xfffffff9}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) r4 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87a0, 0x800, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x5, 0xfffffff7}}], 0x1, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x801100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m4.275220759s ago: executing program 6 (id=189): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xb0, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'vxcan1\x00'}]}]}, 0xb0}, 0x1, 0xffffffea}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000080)=0x81) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f1, &(0x7f0000001200)="$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") r3 = io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0x709f, 0x8, 0x2, 0xeb}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x5, 0x6, {0xfffffffa, 0x8, 0xfffffff9}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) r5 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) close_range(r5, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87a0, 0x800, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x5, 0xfffffff7}}], 0x1, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x801100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x400}}) 1m3.227631564s ago: executing program 6 (id=194): socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB="331801007f31ffffffffffff86dd6003136c00188700fe880000000000000000000000000101fe8000400000000000000000000000aa3b08"], 0x0) 1m3.025322339s ago: executing program 45 (id=194): socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB="331801007f31ffffffffffff86dd6003136c00188700fe880000000000000000000000000101fe8000400000000000000000000000aa3b08"], 0x0) 1m0.393273412s ago: executing program 46 (id=203): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xb0, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'vxcan1\x00'}]}]}, 0xb0}, 0x1, 0xffffffea}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000080)=0x81) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f1, &(0x7f0000001200)="$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") r3 = io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0x709f, 0x8, 0x2, 0xeb}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x5, 0x6, {0xfffffffa, 0x8, 0xfffffff9}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) r5 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) close_range(r5, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87a0, 0x800, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x5, 0xfffffff7}}], 0x1, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x801100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x400}}) 52.802806556s ago: executing program 47 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x2c) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1c5, &(0x7f0000000340)="$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") syz_io_uring_setup(0x3e3, &(0x7f00000020c0)={0x0, 0xe138, 0x2, 0x1200001, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000002080)=0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_modify_offsets$generic(r0, r1, 0x2c, 0x10000) futex(&(0x7f0000000040), 0x5, 0x1, 0x0, &(0x7f0000000140)=0x4, 0xc4fffffd) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x3, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 50.621107168s ago: executing program 48 (id=286): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) 45.742177406s ago: executing program 8 (id=314): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2180, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETLE(r1, 0x400454dc, 0x0) syz_read_part_table(0x5e3, &(0x7f0000001100)="$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") ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r4, 0xc0107520, 0x7000, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 45.13842302s ago: executing program 8 (id=319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x6, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite6\x00') ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='\x00') openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x2, 0x5, 0x106, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x7000000) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a40)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005400e50129bd7000fdffffff07000000", @ANYRES32=r6, @ANYBLOB="1c1002a71a3cf320eaca05920d6c4c7f810986d8d9de4354cfadd41c052d5650b21ac1d0da0067c77d25b0faffffff3464e42f2d0154fea5dab4cba88a8b10b073f9a4667f6cf3980b416880a26e249f8756940fa5dc90602e91bc5f505395a0717e27495776c103279e16347260566e1375b089302424790f6f3ab1", @ANYRES32=r6, @ANYBLOB="0100ffffe000000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) socket(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0) 44.958691835s ago: executing program 8 (id=323): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x150, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x11}, 0x4, 0xb6e, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2c}, {@in=@loopback=0x7f0000c1, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x1f000000, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0xd43}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "66d38547aa140d000000000000000086cae9fb4f"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2094) 44.646117163s ago: executing program 8 (id=324): pipe(&(0x7f0000000140)={0xffffffffffffffff}) unshare(0x400) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00f5dab88a480000000000000000000000000000000000000052f6566759a3e191e3aab8898d096c9fa6c00f476a2fc1eb10e05f50d2509c84d1e18d711a16a61c57dc07865e47383423687e57370fd19728616dbda92f4b954785d91d965e03c446e301b546e55e39841db9827e11", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x19, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000b708500000000000007b8af8ff00000000b7080000ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x10, 0x6, 0x10001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8080c61) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_evm(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$setpipe(r0, 0x407, 0x0) 43.701342535s ago: executing program 8 (id=333): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000300000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x400c000) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000180)=ANY=[], 0xf5, 0x2e5, &(0x7f0000000540)="$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") 43.038442511s ago: executing program 8 (id=340): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a40)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 42.903225944s ago: executing program 49 (id=340): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a40)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 36.490058779s ago: executing program 5 (id=390): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000000)={0x80002014}) capset(&(0x7f0000000040)={0x20071026}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x77540947ad9a168d}) 36.411502171s ago: executing program 5 (id=391): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") symlink(0x0, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006d"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5a"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 34.640962534s ago: executing program 5 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) read(0xffffffffffffffff, &(0x7f0000000180), 0x100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/53, 0x0, 0xdddd1000}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x4008af03, &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000200081dc28bd700003000000020000000000bd1e758c5f"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40804) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010003904ff0b00000100000000000000", @ANYRES32=0x0, @ANYBLOB="01980000131300001c001280090001006970"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000084) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac002700", @ANYRES16=0x0, @ANYBLOB="01002cbd7000f9dbdf2518000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b009c07000006001600080000000500120001000000060011000500000008000b0040000000080001007063690011000200303030303a30303a31302e300000000008000300fdffffff08000b00070000000600160004000000050012000100000006001100fdff000008000b0006000000"], 0xac}, 0x1, 0x0, 0x0, 0x4008000}, 0x44) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="702300001d"], 0x2370}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) 33.744504666s ago: executing program 5 (id=415): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xb0, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'vxcan1\x00'}]}]}, 0xb0}, 0x1, 0xffffffea}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000080)=0x81) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f1, &(0x7f0000001200)="$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") io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0x709f, 0x8, 0x2, 0xeb}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x5, 0x6, {0xfffffffa, 0x8, 0xfffffff9}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) r4 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87a0, 0x800, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x5, 0xfffffff7}}], 0x1, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x801100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 33.413980974s ago: executing program 5 (id=417): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x2000, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 33.257238627s ago: executing program 5 (id=418): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x360, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)={0x1, 0x0, [{0x0, 0x2a, &(0x7f0000000100)=""/42}]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x7, 0x7, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9, 0x4}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xfd, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x27, 0xc5, 0x0, 0x0, 0x9, 0x3, 0x3, 0x3}, {0xeeef0000, 0x33331000, 0xb, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0x8080000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3f, 0x2}, {0xb000, 0x0, 0x9, 0x5, 0x2, 0x1, 0x1, 0x80, 0x10, 0xff, 0x6, 0xc0}, {0x1eeed1001, 0xeeee0000, 0x3, 0x1, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x50000, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0x9df8ffdb, 0x0, 0x0, 0x110, 0xd, 0xf801, 0x3000, [0x80000004, 0x0, 0x10004, 0xfffffffffffdffff]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect$uac2(0x5, 0x90, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1033, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x5, 0x30, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1e, 0x7}, [@effect_unit={0x9, 0x24, 0x7, 0x4, 0x2, 0x2, [0x1]}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 33.195902429s ago: executing program 50 (id=418): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x360, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)={0x1, 0x0, [{0x0, 0x2a, &(0x7f0000000100)=""/42}]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x7, 0x7, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9, 0x4}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xfd, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x27, 0xc5, 0x0, 0x0, 0x9, 0x3, 0x3, 0x3}, {0xeeef0000, 0x33331000, 0xb, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0x8080000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3f, 0x2}, {0xb000, 0x0, 0x9, 0x5, 0x2, 0x1, 0x1, 0x80, 0x10, 0xff, 0x6, 0xc0}, {0x1eeed1001, 0xeeee0000, 0x3, 0x1, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x50000, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0x9df8ffdb, 0x0, 0x0, 0x110, 0xd, 0xf801, 0x3000, [0x80000004, 0x0, 0x10004, 0xfffffffffffdffff]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect$uac2(0x5, 0x90, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1033, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x5, 0x30, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1e, 0x7}, [@effect_unit={0x9, 0x24, 0x7, 0x4, 0x2, 0x2, [0x1]}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 30.041889605s ago: executing program 6 (id=420): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xb0, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'vxcan1\x00'}]}]}, 0xb0}, 0x1, 0xffffffea}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000080)=0x81) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f1, &(0x7f0000001200)="$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") io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0x709f, 0x8, 0x2, 0xeb}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x5, 0x6, {0xfffffffa, 0x8, 0xfffffff9}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) r4 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87a0, 0x800, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x5, 0xfffffff7}}], 0x1, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x801100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 28.731951276s ago: executing program 6 (id=445): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0xa57, &(0x7f0000000140)={0x0, 0x5a5f, 0x800, 0x3, 0x133}) r2 = io_uring_setup(0x4f73, &(0x7f00000000c0)={0x0, 0xec19, 0x40, 0x1000000, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)='}', 0x1, 0xffffffffffffffff) r3 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x110, r1, 0xec776000) r4 = inotify_init1(0x80000) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r4) read$FUSE(r6, &(0x7f0000002980)={0x2020}, 0x2020) inotify_rm_watch(r6, 0x0) r7 = getuid() keyctl$get_persistent(0x16, r7, r3) r8 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x31, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x36, 0x63, 0x0, 0x32]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r5, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x24000894}, 0x2400c054) 28.436843864s ago: executing program 6 (id=452): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009000202100202000009058202"], 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000280)=@udp, 0x1}, 0x20) setgid(0xee00) r2 = syz_clone(0x804000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r3 = getpid() kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000480)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'fuse\x00'}}]}) r5 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2a, 0xfff}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x100, 0x2, 0x6, 0x2, 0x8002, 0x7, 0x10, 0x2}, @processing_unit={0xd, 0x24, 0x9, 0x2, 0x2, [0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xd, 0xb, {0xa, 0x25, 0x25, 0x401, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x2, 0xff, 0x0, {0xa, 0x25, 0x25, 0x5, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYBLOB="7ea51297031e5083655f50fa6612807bb02e7eb56d70140c9c081f91033d21f67e704df654", @ANYRESDEC, @ANYRESDEC=r4, @ANYRESHEX=r4, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) unlinkat(r4, &(0x7f00000001c0)='./file0/file1\x00', 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0xd4083cabea7a85c) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000001090224000100037021090400000203000300092104000e01222600090300000400000000"], 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 28.301336937s ago: executing program 51 (id=452): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009000202100202000009058202"], 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000280)=@udp, 0x1}, 0x20) setgid(0xee00) r2 = syz_clone(0x804000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r3 = getpid() kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000480)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'fuse\x00'}}]}) r5 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2a, 0xfff}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x100, 0x2, 0x6, 0x2, 0x8002, 0x7, 0x10, 0x2}, @processing_unit={0xd, 0x24, 0x9, 0x2, 0x2, [0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xd, 0xb, {0xa, 0x25, 0x25, 0x401, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x2, 0xff, 0x0, {0xa, 0x25, 0x25, 0x5, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYBLOB="7ea51297031e5083655f50fa6612807bb02e7eb56d70140c9c081f91033d21f67e704df654", @ANYRESDEC, @ANYRESDEC=r4, @ANYRESHEX=r4, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) unlinkat(r4, &(0x7f00000001c0)='./file0/file1\x00', 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0xd4083cabea7a85c) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000001090224000100037021090400000203000300092104000e01222600090300000400000000"], 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 26.216950907s ago: executing program 0 (id=466): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)=@newsa={0x138, 0x1a, 0x633, 0x70bd25, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x4e23, 0x8001, 0x0, 0x0, 0x0, 0x3c}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in=@empty, {0x323, 0x1, 0x7, 0xfffffffffffffffd, 0xc, 0x92be, 0x6}, {0x0, 0x40000, 0x0, 0xffffffffffffffff}, {0xfffffffb, 0x3, 0xca09}, 0x70bd25, 0x3502, 0x2, 0x3, 0x0, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x44000840}, 0x2000000000000000) 26.211620667s ago: executing program 0 (id=467): socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020"], 0x0, 0x3c}, 0x28) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x20440, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005140)={0x64, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x3c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 26.047901541s ago: executing program 0 (id=468): ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, &(0x7f0000000000)) (async) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002680)={[{@fat=@gid}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8}, {@uni_xlateno}, {@numtail}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@utf8no}]}, 0x7c, 0x2c1, &(0x7f0000001240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 25.946298744s ago: executing program 0 (id=469): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xb0, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'vxcan1\x00'}]}]}, 0xb0}, 0x1, 0xffffffea}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000080)=0x81) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f1, &(0x7f0000001200)="$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") io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0x709f, 0x8, 0x2, 0xeb}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x5, 0x6, {0xfffffffa, 0x8, 0xfffffff9}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) r4 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87a0, 0x800, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x5, 0xfffffff7}}], 0x1, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x801100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 25.468142896s ago: executing program 0 (id=477): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) 25.170079722s ago: executing program 0 (id=480): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000001c0), 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) 25.049428196s ago: executing program 52 (id=480): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000001c0), 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) 12.478414659s ago: executing program 1 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x98) write(r0, &(0x7f0000000240)='9', 0x1) 12.478159329s ago: executing program 1 (id=644): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x7ffffffc}], 0x1, 0x2040, 0x0) 12.477941959s ago: executing program 1 (id=645): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) 11.59443801s ago: executing program 1 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x100) 11.59404509s ago: executing program 1 (id=653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x7f, 0xe, 0x4, 0x0, 0x100000001, 0xe4, 0x2, 0x8, 0x2, 0x2, 0xee01, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x0, 0x3, 0x20000000009, 0x2, 0x1fc, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xdec1, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x8, 0x101, 0x80, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0xd, 0xa, 0x8, 0x80000000000a8, 0x1, 0x2000000000000007, 0x2fffffffffffffff, 0x38c, 0x20008, 0x8, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xed6, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x80000000000, 0x9, 0x0, 0x7, 0x100, 0x7fff, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x40075, 0xf, 0x10000, 0xe, 0x3, 0x3, 0x4, 0xfffffffffffffffb, 0x0, 0x0, 0xa, 0x40000001, 0xb, 0x8000000000000001, 0xfff, 0x20000080, 0x3, 0xd, 0x4, 0x9, 0xfffd, 0x3, 0x50, 0x1, 0x2, 0x80007, 0xea7, 0x1e17]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x28}) 11.563052071s ago: executing program 1 (id=654): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x800000) pwrite64(r0, &(0x7f0000000100)="0000004200000000010000000008", 0xe, 0x1be) pwrite64(r0, &(0x7f0000000110)="55aa", 0x2, 0x1fe) pwrite64(r0, 0x0, 0x0, 0xc00) pwrite64(r0, 0x0, 0x0, 0x1e8000) pwrite64(r0, 0x0, 0x0, 0x100200) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 11.439439534s ago: executing program 53 (id=654): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x800000) pwrite64(r0, &(0x7f0000000100)="0000004200000000010000000008", 0xe, 0x1be) pwrite64(r0, &(0x7f0000000110)="55aa", 0x2, 0x1fe) pwrite64(r0, 0x0, 0x0, 0xc00) pwrite64(r0, 0x0, 0x0, 0x1e8000) pwrite64(r0, 0x0, 0x0, 0x100200) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 8.241294001s ago: executing program 2 (id=731): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x9, "da5a5d14"}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x0, '\x00\x00\x00I'}, @main=@item_4={0x3, 0x0, 0x8, "0c1d55ac"}, @global=@item_4={0x3, 0x1, 0x2, "1c6b00c3"}, @global=@item_012={0x2, 0x1, 0x1, "058e"}, @local=@item_4={0x3, 0x2, 0x4, "007f0064"}, @main=@item_4={0x3, 0x0, 0x8, "e89af7ff"}]}}, 0x0}, 0x0) 6.543047733s ago: executing program 2 (id=771): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) 6.528453503s ago: executing program 2 (id=772): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x881, 0x0, 0x0, 0x0, {0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0xfa13, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) 6.470464874s ago: executing program 2 (id=773): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f0000000040)='F', 0x1, 0x4) 5.150502656s ago: executing program 2 (id=805): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) 3.880441797s ago: executing program 3 (id=815): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x1000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x9, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000f40)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.504324084s ago: executing program 2 (id=822): r0 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) 1.450020675s ago: executing program 3 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debugfs/kvm/halt_poll_fail_ns\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0\n', 0x2) 1.449718285s ago: executing program 3 (id=825): setns(0xc9, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000e944ec1a"], &(0x7f0000000180)=0x28) 1.447758595s ago: executing program 3 (id=826): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0xffffffff, 0x0, 0xffffffffffffffff}], 0x1, 0xbff, 0x1e, 0x0, 0x48, 0x6f}) 1.344078158s ago: executing program 3 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x21, {0x0, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x7, 0x7, 0x5, 0x4, 0x854a, 0xe, 0x0, 0x5, 0x80000000, 0x7d0, 0x60, 0x4, 0x2, 0x94, 0x3}}, 0xa0) 1.25768852s ago: executing program 3 (id=830): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c40)={0x4c, 0x0, &(0x7f0000000ac0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000740)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x49d3, 0x0, 0x0, 0x2, 0x36}}, &(0x7f00000007c0)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40045b0a, &(0x7f0000000000)={0x2, 0xfffffffe, 0x7, 0xff, 0x1}) write$char_usb(r1, &(0x7f0000000840)='3', 0x1) 1.013986266s ago: executing program 4 (id=840): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.009202856s ago: executing program 4 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/del1\x00', 0x42, 0x1ff) 890.420949ms ago: executing program 4 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x6}}]}) 889.796769ms ago: executing program 4 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) 832.41865ms ago: executing program 4 (id=847): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x41) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) read(r2, &(0x7f0000004000), 0x2000) 760.530452ms ago: executing program 9 (id=848): recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006640)=""/126, 0x7e}], 0x5}, 0x9a9}], 0x1, 0x40000021, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x2, 0xe9b, 0x100, 0xd, 0x7f, 0x44233, 0x200, 0x80, 0x941, 0x8001, 0x6, 0x4, 0x4, 0x20000, 0xb], 0x4, 0x84340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 693.522873ms ago: executing program 4 (id=849): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 692.634824ms ago: executing program 9 (id=850): socket$inet6(0xa, 0x80002, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006400)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0}}], 0x1, 0x4) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 692.195024ms ago: executing program 9 (id=851): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) 669.185724ms ago: executing program 9 (id=852): r0 = syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0xdc, 0xe6, 0x1b, 0x20, 0x17ef, 0x720c, 0xd2e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x80, 0x0, 0x0, "", [{{0x9, 0x4, 0x72, 0x4, 0x0, 0x19, 0x19, 0xc6, 0x1}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r2, &(0x7f0000000080)=""/11, 0xb, 0x2) 107.337078ms ago: executing program 7 (id=855): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 107.077168ms ago: executing program 7 (id=856): r0 = socket$inet(0x2, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851b", 0x6}], 0x1}}], 0x1, 0x2090) 106.869218ms ago: executing program 7 (id=857): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='+192.168.1.1', 0xc) 50.336469ms ago: executing program 7 (id=858): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 49.995709ms ago: executing program 9 (id=859): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bab000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x490, 0x0, 0xffffffff}]}) 49.880839ms ago: executing program 9 (id=860): write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="442000f100680000ff119078e0000002ffffffff44183d5074716f1200000004000000070000000348e82c858647000000030006d70331ca000b30fa7e123451821f970207a5eb9be8a5070f1582c9607422abe61cebe2000d001c8511dfb86b91a5d4cb050dab02eb497cf94d5c26bf9f440c30"], 0xf1) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) 13.57565ms ago: executing program 7 (id=861): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) 0s ago: executing program 7 (id=862): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file8\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, 0x0, 0x0) close(r0) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g9\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g9/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0x1d6b\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g9/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0x0104\x00', 0x7) close(r2) mkdir(&(0x7f0000000340)='./config/usb_gadget/g9/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g9/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1234567890\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g9/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='Manufacturer\x00', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g9/strings/0x409/product\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='Product\x00', 0x8) close(r5) mkdir(&(0x7f0000000500)='./config/usb_gadget/g9/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000540)='./config/usb_gadget/g9/configs/c.1/strings/0x409\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g9/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='Conf 1\x00', 0x7) close(r6) mkdir(&(0x7f0000000600)='./config/usb_gadget/g9/functions/mass_storage.usb8\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g9/functions/mass_storage.usb8/lun.0/file\x00', 0x1, 0x0) write(r7, 0x0, 0x0) close(r7) symlink(0x0, &(0x7f0000000700)='./config/usb_gadget/g9/configs/c.1/mass_storage.usb8\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g9/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000780)='dummy_udc.0', 0xb) close(r8) kernel console output (not intermixed with test programs): 8][ T899] EXT4-fs (loop7): unmounting filesystem. [ 72.530709][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.546412][ T1198] device veth0_vlan entered promiscuous mode [ 72.553558][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.569666][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.577902][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.597252][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.607081][ T1198] device veth1_macvtap entered promiscuous mode [ 72.635612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.653964][ T1235] netlink: 28 bytes leftover after parsing attributes in process `syz.9.272'. [ 72.657497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.696554][ T1237] FAULT_INJECTION: forcing a failure. [ 72.696554][ T1237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.710207][ T1237] CPU: 1 PID: 1237 Comm: syz.0.259 Not tainted syzkaller #0 [ 72.717556][ T1237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.727643][ T1237] Call Trace: [ 72.730952][ T1237] [ 72.733911][ T1237] __dump_stack+0x21/0x24 [ 72.738309][ T1237] dump_stack_lvl+0x110/0x170 [ 72.743035][ T1237] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.748105][ T1237] dump_stack+0x15/0x24 [ 72.752304][ T1237] should_fail_ex+0x3bf/0x510 [ 72.753631][ T28] audit: type=1326 audit(1837372314.626:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1238 comm="syz.7.273" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe19ab9e0d9 code=0x0 [ 72.757007][ T1237] should_fail+0xb/0x10 [ 72.757029][ T1237] should_fail_usercopy+0x1a/0x20 [ 72.757050][ T1237] _copy_to_user+0x1e/0x90 [ 72.794607][ T1237] simple_read_from_buffer+0xe9/0x160 [ 72.800026][ T1237] proc_fail_nth_read+0x1a6/0x220 [ 72.805061][ T1237] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 72.810649][ T1237] ? security_file_permission+0x94/0xb0 [ 72.816241][ T1237] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 72.821833][ T1237] vfs_read+0x286/0x930 [ 72.826025][ T1237] ? __cfi_vfs_read+0x10/0x10 [ 72.830824][ T1237] ? __kasan_check_write+0x14/0x20 [ 72.835990][ T1237] ? mutex_lock+0x93/0x1b0 [ 72.840450][ T1237] ? __cfi_mutex_lock+0x10/0x10 [ 72.845341][ T1237] ? __fdget_pos+0x2cd/0x380 [ 72.849964][ T1237] ? ksys_read+0x70/0x260 [ 72.854324][ T1237] ksys_read+0x14a/0x260 [ 72.858701][ T1237] ? __cfi_ksys_read+0x10/0x10 [ 72.863499][ T1237] ? debug_smp_processor_id+0x17/0x20 [ 72.868918][ T1237] __x64_sys_read+0x7b/0x90 [ 72.873461][ T1237] x64_sys_call+0x2f/0x9a0 [ 72.877917][ T1237] do_syscall_64+0x4c/0xa0 [ 72.882403][ T1237] ? clear_bhb_loop+0x30/0x80 [ 72.887113][ T1237] ? clear_bhb_loop+0x30/0x80 [ 72.891824][ T1237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.897758][ T1237] RIP: 0033:0x7efe8e35e90e [ 72.902203][ T1237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.921842][ T1237] RSP: 002b:00007efe8f2b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.930301][ T1237] RAX: ffffffffffffffda RBX: 00007efe8f2ba6c0 RCX: 00007efe8e35e90e [ 72.938310][ T1237] RDX: 000000000000000f RSI: 00007efe8f2ba0a0 RDI: 0000000000000003 [ 72.946316][ T1237] RBP: 00007efe8f2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 72.954316][ T1237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.962312][ T1237] R13: 00007efe8e626038 R14: 00007efe8e625fa0 R15: 00007ffce6864d18 [ 72.970319][ T1237] [ 73.103984][ T28] audit: type=1400 audit(1837372315.016:267): avc: denied { mount } for pid=1256 comm="syz.0.280" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.151720][ T28] audit: type=1400 audit(1837372315.066:268): avc: denied { unmount } for pid=1198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.196449][ T28] audit: type=1326 audit(1837372315.116:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1222 comm="syz.2.268" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3d39e0d9 code=0x7fc00000 [ 73.252561][ T1261] loop2: detected capacity change from 0 to 1024 [ 73.276671][ T295] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 73.284615][ T1261] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 73.293430][ T1261] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.300458][ T1261] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 73.310434][ T1261] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 73.325070][ T1261] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 73.332784][ T1261] EXT4-fs (loop2): 1 truncate cleaned up [ 73.338681][ T1261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.370579][ T1261] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.378226][ T1261] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 73.411576][ T1259] loop0: detected capacity change from 0 to 40427 [ 73.429193][ T1259] F2FS-fs (loop0): invalid crc value [ 73.444774][ T1259] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.467267][ T295] usb 10-1: unable to get BOS descriptor or descriptor too short [ 73.477538][ T295] usb 10-1: not running at top speed; connect to a high speed hub [ 73.495418][ T295] usb 10-1: config 174 has no interfaces? [ 73.497165][ T1259] F2FS-fs (loop0): Start checkpoint disabled! [ 73.508296][ T1259] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 73.510117][ T295] usb 10-1: New USB device found, idVendor=0af0, idProduct=6501, bcdDevice=5c.e7 [ 73.516820][ T1259] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 73.540580][ T295] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.558085][ T295] usb 10-1: Product: syz [ 73.566552][ T295] usb 10-1: Manufacturer: syz [ 73.586732][ T295] usb 10-1: SerialNumber: syz [ 73.594986][ T996] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /10/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 73.643416][ T996] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 73.655505][ T996] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 73.727279][ T996] EXT4-fs (loop2): unmounting filesystem. [ 73.751955][ T591] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 73.780683][ T591] usb 9-1: USB disconnect, device number 3 [ 73.809652][ T295] usb 10-1: USB disconnect, device number 4 [ 73.945916][ T39] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 73.988343][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.995448][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.003158][ T1275] device bridge_slave_0 entered promiscuous mode [ 74.011749][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.019071][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.026910][ T1275] device bridge_slave_1 entered promiscuous mode [ 74.060692][ T43] kworker/u4:2: attempt to access beyond end of device [ 74.060692][ T43] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 74.107992][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.115119][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.122472][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.129559][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.138528][ T39] usb 8-1: not running at top speed; connect to a high speed hub [ 74.156455][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.166913][ T39] usb 8-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 74.176329][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.196430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.199482][ T39] usb 8-1: Found UVC 1.00 device (046d:0825) [ 74.210913][ T39] usb 8-1: No streaming interface found for terminal 2. [ 74.220031][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.230538][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.244301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.253287][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.260411][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.271727][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.280028][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.287127][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.297525][ T8] device bridge_slave_1 left promiscuous mode [ 74.304361][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.312067][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.321731][ T8] device veth1_macvtap left promiscuous mode [ 74.340794][ T1283] FAULT_INJECTION: forcing a failure. [ 74.340794][ T1283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.347190][ T8] device veth0_vlan left promiscuous mode [ 74.354217][ T1283] CPU: 0 PID: 1283 Comm: syz.9.290 Not tainted syzkaller #0 [ 74.366919][ T1283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.377034][ T1283] Call Trace: [ 74.380335][ T1283] [ 74.383286][ T1283] __dump_stack+0x21/0x24 [ 74.387648][ T1283] dump_stack_lvl+0x110/0x170 [ 74.392332][ T1283] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.397376][ T1283] dump_stack+0x15/0x24 [ 74.401569][ T1283] should_fail_ex+0x3bf/0x510 [ 74.406298][ T1283] should_fail+0xb/0x10 [ 74.410504][ T1283] should_fail_usercopy+0x1a/0x20 [ 74.415018][ T1268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.415558][ T1283] _copy_from_user+0x1e/0xc0 [ 74.428373][ T1268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.428496][ T1283] iovec_from_user+0x1aa/0x2e0 [ 74.440998][ T1283] __import_iovec+0x6d/0x460 [ 74.441028][ T1283] ? kstrtoull+0x137/0x1d0 [ 74.450067][ T1283] import_iovec+0x7c/0xb0 [ 74.454444][ T1283] ___sys_sendmsg+0x252/0x360 [ 74.454478][ T1283] ? __sys_sendmsg+0x290/0x290 [ 74.454505][ T1283] ? __kasan_check_write+0x14/0x20 [ 74.469091][ T1283] ? proc_fail_nth_write+0x180/0x200 [ 74.469127][ T1283] ? vfs_write+0xa51/0xd00 [ 74.478890][ T1283] ? __fdget+0x19c/0x220 [ 74.478921][ T1283] __x64_sys_sendmsg+0x20d/0x2e0 [ 74.478949][ T1283] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 74.478980][ T1283] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 74.479008][ T1283] x64_sys_call+0x171/0x9a0 [ 74.479033][ T1283] do_syscall_64+0x4c/0xa0 [ 74.479058][ T1283] ? clear_bhb_loop+0x30/0x80 [ 74.479077][ T1283] ? clear_bhb_loop+0x30/0x80 [ 74.479096][ T1283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.479178][ T1283] RIP: 0033:0x7fdc2719e0d9 [ 74.479194][ T1283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.479229][ T1283] RSP: 002b:00007fdc27f9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.479250][ T1283] RAX: ffffffffffffffda RBX: 00007fdc27425fa0 RCX: 00007fdc2719e0d9 [ 74.479266][ T1283] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 74.479279][ T1283] RBP: 00007fdc27f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.479301][ T1283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.479314][ T1283] R13: 00007fdc27426038 R14: 00007fdc27425fa0 R15: 00007ffc655e9808 [ 74.479334][ T1283] [ 74.625231][ T547] usb 8-1: USB disconnect, device number 3 [ 74.681220][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.698422][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.717763][ T1290] loop0: detected capacity change from 0 to 256 [ 74.720183][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.739327][ T1275] device veth0_vlan entered promiscuous mode [ 74.746539][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.755657][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.763806][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.781398][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.792219][ T1275] device veth1_macvtap entered promiscuous mode [ 74.804330][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.812840][ T294] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 74.826137][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.488148][ T1299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.293'. [ 75.506137][ T1301] loop7: detected capacity change from 0 to 256 [ 75.928190][ T294] usb 10-1: unable to get BOS descriptor or descriptor too short [ 75.977580][ T294] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.990515][ T294] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 75.991772][ T1307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.295'. [ 76.011742][ T294] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.035143][ T294] usb 10-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 76.054786][ T294] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.066185][ T294] usb 10-1: Product: syz [ 76.070916][ T294] usb 10-1: Manufacturer: syz [ 76.076323][ T294] usb 10-1: SerialNumber: syz [ 76.303310][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 76.303326][ T28] audit: type=1400 audit(1837372318.216:277): avc: denied { append } for pid=1312 comm="syz.0.298" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.352927][ T1288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.388526][ T1288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.495999][ T1317] loop0: detected capacity change from 0 to 512 [ 76.540318][ T1317] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.553851][ T1317] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.905929][ T1325] FAULT_INJECTION: forcing a failure. [ 76.905929][ T1325] name failslab, interval 1, probability 0, space 0, times 0 [ 76.918642][ T1325] CPU: 1 PID: 1325 Comm: syz.8.302 Not tainted syzkaller #0 [ 76.920777][ T294] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 76.925955][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.925969][ T1325] Call Trace: [ 76.925975][ T1325] [ 76.925982][ T1325] __dump_stack+0x21/0x24 [ 76.946912][ T294] snd-usb-audio: probe of 10-1:1.1 failed with error -22 [ 76.949441][ T1325] dump_stack_lvl+0x110/0x170 [ 76.965486][ T1325] ? __cfi_dump_stack_lvl+0x8/0x8 [ 76.970553][ T1325] ? __cfi_fib_rules_lookup+0x10/0x10 [ 76.975972][ T1325] dump_stack+0x15/0x24 [ 76.980158][ T1325] should_fail_ex+0x3bf/0x510 [ 76.984874][ T1325] ? __inet_hash_connect+0x7ce/0x1fd0 [ 76.990330][ T1325] __should_failslab+0xac/0xf0 [ 76.995134][ T1325] should_failslab+0x9/0x20 [ 76.995240][ T294] snd-usb-audio: probe of 10-1:1.2 failed with error -22 [ 76.999700][ T1325] kmem_cache_alloc+0x3b/0x320 [ 76.999730][ T1325] __inet_hash_connect+0x7ce/0x1fd0 [ 76.999761][ T1325] ? __cfi___inet_check_established+0x10/0x10 [ 77.022842][ T1325] ? siphash_2u64+0x25/0x2a0 [ 77.027468][ T1325] ? __cfi___inet_hash_connect+0x10/0x10 [ 77.033141][ T1325] ? secure_ipv4_port_ephemeral+0xcd/0x170 [ 77.034311][ T294] usb 10-1: USB disconnect, device number 5 [ 77.039037][ T1325] ? __cfi_secure_ipv4_port_ephemeral+0x10/0x10 [ 77.051216][ T1325] inet_hash_connect+0xb6/0x140 [ 77.056138][ T1325] tcp_v4_connect+0xb91/0x1760 [ 77.060942][ T1325] ? __cfi_tcp_v4_connect+0x10/0x10 [ 77.066180][ T1325] ? __kasan_check_write+0x14/0x20 [ 77.071330][ T1325] ? _raw_spin_lock_bh+0x94/0xf0 [ 77.076297][ T1325] __inet_stream_connect+0x267/0xe80 [ 77.081617][ T1325] ? __local_bh_enable_ip+0x58/0x80 [ 77.086846][ T1325] ? _raw_spin_unlock_bh+0x50/0x60 [ 77.091987][ T1325] ? lock_sock_nested+0x212/0x290 [ 77.097063][ T1325] ? __cfi___inet_stream_connect+0x10/0x10 [ 77.102900][ T1325] ? vfs_write+0xa51/0xd00 [ 77.107350][ T1325] inet_stream_connect+0x62/0xa0 [ 77.112317][ T1325] ? __cfi_inet_stream_connect+0x10/0x10 [ 77.117989][ T1325] __sys_connect+0x3da/0x460 [ 77.122632][ T1325] ? __cfi___sys_connect+0x10/0x10 [ 77.127769][ T1325] ? __kasan_check_write+0x14/0x20 [ 77.132921][ T1325] ? debug_smp_processor_id+0x17/0x20 [ 77.138321][ T1325] __x64_sys_connect+0x7a/0x90 [ 77.143128][ T1325] x64_sys_call+0x88d/0x9a0 [ 77.147680][ T1325] do_syscall_64+0x4c/0xa0 [ 77.152132][ T1325] ? clear_bhb_loop+0x30/0x80 [ 77.156836][ T1325] ? clear_bhb_loop+0x30/0x80 [ 77.161550][ T1325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.167500][ T1325] RIP: 0033:0x7f327a99e0d9 [ 77.171943][ T1325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.191586][ T1325] RSP: 002b:00007f327b830028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 77.200067][ T1325] RAX: ffffffffffffffda RBX: 00007f327ac25fa0 RCX: 00007f327a99e0d9 [ 77.208095][ T1325] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 77.216090][ T1325] RBP: 00007f327b830090 R08: 0000000000000000 R09: 0000000000000000 [ 77.224086][ T1325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.232096][ T1325] R13: 00007f327ac26038 R14: 00007f327ac25fa0 R15: 00007fffd5de0908 [ 77.240111][ T1325] [ 77.248797][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.261451][ T507] udevd[507]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.437074][ T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.451029][ T1328] loop9: detected capacity change from 0 to 40427 [ 77.465503][ T1328] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 77.465995][ T39] usb 1-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 77.499415][ T1328] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 77.505973][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.516472][ T1328] F2FS-fs (loop9): Image doesn't support compression [ 77.533485][ T1328] F2FS-fs (loop9): Image doesn't support compression [ 77.558596][ T1328] F2FS-fs (loop9): invalid crc value [ 77.576972][ T1328] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 77.599602][ T1338] netlink: 32 bytes leftover after parsing attributes in process `syz.4.307'. [ 77.646690][ T1328] F2FS-fs (loop9): Start checkpoint disabled! [ 77.663423][ T1328] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 77.686236][ T1328] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 77.693448][ T1328] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 77.711717][ T1336] loop8: detected capacity change from 0 to 40427 [ 77.740180][ T1336] F2FS-fs (loop8): invalid crc value [ 77.811240][ T1335] loop7: detected capacity change from 0 to 40427 [ 77.845233][ T1335] F2FS-fs (loop7): heap/no_heap options were deprecated [ 77.856392][ T1336] F2FS-fs (loop8): Found nat_bits in checkpoint [ 77.875947][ T1335] F2FS-fs (loop7): invalid crc value [ 77.886841][ T1335] F2FS-fs (loop7): Found nat_bits in checkpoint [ 78.128930][ T1352] syz.9.304: attempt to access beyond end of device [ 78.128930][ T1352] loop9: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 78.146391][ T1352] syz.9.304: attempt to access beyond end of device [ 78.146391][ T1352] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 78.458086][ T1335] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 78.466461][ T39] wacom 0003:056A:00B1.0003: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 78.478642][ T39] wacom 0003:056A:00B1.0003: hidraw0: USB HID v1.11 Device [HID 056a:00b1] on usb-dummy_hcd.0-1/input0 [ 78.499193][ T28] audit: type=1400 audit(1837372320.416:278): avc: denied { ioctl } for pid=1333 comm="syz.7.306" path="socket:[23392]" dev="sockfs" ino=23392 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.527886][ T39] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:00B1.0003/input/input7 [ 78.540621][ T1336] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 78.597577][ T1358] loop4: detected capacity change from 0 to 256 [ 78.647287][ T1358] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 78.681126][ C0] usb 1-1: input irq status -75 received [ 78.683347][ T318] kworker/u4:4: attempt to access beyond end of device [ 78.683347][ T318] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 78.701988][ T1343] f2fs_ckpt-7:8: attempt to access beyond end of device [ 78.701988][ T1343] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 78.719508][ T28] audit: type=1400 audit(1837372320.636:279): avc: denied { mounton } for pid=1357 comm="syz.4.312" path=2F372FE91F7189591E9233614B2F66696C6530 dev="loop4" ino=1048679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.825844][ T591] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 78.876976][ T1370] loop9: detected capacity change from 0 to 256 [ 78.888031][ T547] usb 1-1: USB disconnect, device number 2 [ 78.899218][ T1371] loop4: detected capacity change from 0 to 512 [ 78.983688][ T1371] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.995231][ T1371] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.001774][ T1375] loop8: detected capacity change from 0 to 2048 [ 79.021171][ T1371] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 79.036827][ T1371] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 79.050040][ T1375] loop8: p2 p3 < > p4 < p5 > [ 79.054763][ T1375] loop8: partition table partially beyond EOD, truncated [ 79.063318][ T1371] EXT4-fs (loop4): This should not happen!! Data will be lost [ 79.063318][ T1371] [ 79.070090][ T1375] loop8: p3 start 4225 is beyond EOD, truncated [ 79.073837][ T591] usb 8-1: Using ep0 maxpacket: 16 [ 79.086314][ T1371] EXT4-fs (loop4): Total free blocks count 0 [ 79.103948][ T591] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 79.117849][ T1371] EXT4-fs (loop4): Free/Dirty block details [ 79.125841][ T591] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.139202][ T1371] EXT4-fs (loop4): free_blocks=65280 [ 79.146279][ T591] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.160566][ T591] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 79.162582][ T1371] EXT4-fs (loop4): dirty_blocks=3 [ 79.184807][ T591] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 79.193195][ T1371] EXT4-fs (loop4): Block reservation details [ 79.202844][ T591] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.207666][ T1371] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 79.220286][ T591] usb 8-1: config 0 descriptor?? [ 79.250593][ T308] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 28 [ 79.295476][ T1382] loop4: detected capacity change from 0 to 2048 [ 79.352917][ T1382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.414381][ T1198] EXT4-fs (loop0): unmounting filesystem. [ 79.430511][ T1275] EXT4-fs (loop4): unmounting filesystem. [ 79.454622][ T1386] netlink: 32 bytes leftover after parsing attributes in process `syz.8.319'. [ 79.468771][ T1388] loop0: detected capacity change from 0 to 512 [ 79.488394][ T28] audit: type=1400 audit(1837372321.406:280): avc: denied { ioctl } for pid=1389 comm="syz.4.321" path="socket:[23909]" dev="sockfs" ino=23909 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.513403][ T1388] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.549651][ T1388] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 79.566427][ T1388] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.578842][ T1388] EXT4-fs (loop0): 1 truncate cleaned up [ 79.584630][ T1388] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.715080][ T1388] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 79.739709][ T1394] loop4: detected capacity change from 0 to 512 [ 79.766406][ T1394] EXT4-fs: Ignoring removed i_version option [ 79.791668][ T1394] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.837048][ T1198] EXT4-fs (loop0): unmounting filesystem. [ 79.860804][ T1394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.885937][ T1394] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.951467][ T1394] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.4.322: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 79.956104][ T28] audit: type=1400 audit(1837372321.866:281): avc: denied { rename } for pid=1393 comm="syz.4.322" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 80.005830][ T28] audit: type=1400 audit(1837372321.866:282): avc: denied { unlink } for pid=1393 comm="syz.4.322" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.045923][ T1394] EXT4-fs (loop4): Remounting filesystem read-only [ 80.052995][ T1394] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 80.082936][ T1394] EXT4-fs (loop4): Remounting filesystem read-only [ 80.090017][ T28] audit: type=1400 audit(1837372322.006:283): avc: denied { mounton } for pid=1393 comm="syz.4.322" path="/13/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.114308][ T1406] 9pnet: p9_errstr2errno: server reported unknown error @cD†üB€|˜ÿÿÿÿ [ 80.133258][ T1394] EXT4-fs warning (device loop4): ext4_rename_delete:3778: inode #12: comm syz.4.322: Deleting old file: nlink 2, error=-117 [ 80.195265][ T1400] loop8: detected capacity change from 0 to 40427 [ 80.227676][ T1275] EXT4-fs (loop4): unmounting filesystem. [ 80.243123][ T1400] F2FS-fs (loop8): invalid crc value [ 80.277889][ T1400] F2FS-fs (loop8): Found nat_bits in checkpoint [ 80.378767][ T28] audit: type=1400 audit(1837372322.296:284): avc: denied { execute } for pid=1413 comm="syz.4.328" path="/16/cgroup.kill" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.423597][ T1400] F2FS-fs (loop8): Start checkpoint disabled! [ 80.437227][ T1400] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 80.455924][ T1400] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 80.468200][ T1335] syz.7.306: attempt to access beyond end of device [ 80.468200][ T1335] loop7: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 80.492391][ T1404] loop0: detected capacity change from 0 to 40427 [ 80.516336][ T1335] syz.7.306 uses obsolete (PF_INET,SOCK_PACKET) [ 80.523832][ T1404] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 80.538190][ T591] hid (null): global environment stack underflow [ 80.546274][ T1404] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 80.559319][ T591] kye 0003:0458:5013.0004: unknown main item tag 0x6 [ 80.564504][ T1404] F2FS-fs (loop0): Image doesn't support compression [ 80.574673][ T1404] F2FS-fs (loop0): Image doesn't support compression [ 80.592641][ T591] kye 0003:0458:5013.0004: global environment stack underflow [ 80.594473][ T1404] F2FS-fs (loop0): invalid crc value [ 80.603774][ T1419] loop4: detected capacity change from 0 to 128 [ 80.619918][ T1400] syz.8.324: attempt to access beyond end of device [ 80.619918][ T1400] loop8: rw=2049, sector=77824, nr_sectors = 2056 limit=40427 [ 80.622151][ T591] kye 0003:0458:5013.0004: item 0 0 1 11 parsing failed [ 80.637093][ T1404] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 80.682618][ T591] kye 0003:0458:5013.0004: parse failed [ 80.688337][ T591] kye: probe of 0003:0458:5013.0004 failed with error -22 [ 80.733724][ T1404] F2FS-fs (loop0): Start checkpoint disabled! [ 80.742352][ T1404] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 80.756305][ T525] usb 8-1: USB disconnect, device number 4 [ 80.773304][ T1033] syz-executor: attempt to access beyond end of device [ 80.773304][ T1033] loop8: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 80.793426][ T1033] syz-executor: attempt to access beyond end of device [ 80.793426][ T1033] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 80.817153][ T1427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.334'. [ 80.826433][ T1404] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 80.833506][ T1404] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 80.871817][ T43] kworker/u4:2: attempt to access beyond end of device [ 80.871817][ T43] loop8: rw=1, sector=45096, nr_sectors = 24 limit=40427 [ 80.909057][ T43] kworker/u4:2: attempt to access beyond end of device [ 80.909057][ T43] loop8: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 80.956469][ T28] audit: type=1400 audit(1837372322.846:285): avc: denied { override_creds } for pid=1430 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.468129][ T28] audit: type=1400 audit(1837372323.386:286): avc: denied { setopt } for pid=1438 comm="syz.9.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.506101][ T28] audit: type=1400 audit(1837372323.406:287): avc: denied { read } for pid=1438 comm="syz.9.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.702246][ T28] audit: type=1400 audit(1837372323.616:288): avc: denied { audit_read } for pid=1438 comm="syz.9.338" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.743572][ T28] audit: type=1400 audit(1837372323.646:289): avc: denied { bind } for pid=1442 comm="syz.7.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.798297][ T28] audit: type=1400 audit(1837372323.716:290): avc: denied { read write } for pid=1448 comm="syz.0.342" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.873159][ T28] audit: type=1400 audit(1837372323.716:291): avc: denied { open } for pid=1448 comm="syz.0.342" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.930511][ T1450] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.944074][ T1450] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.957072][ T28] audit: type=1400 audit(1837372323.876:292): avc: denied { ioctl } for pid=1448 comm="syz.0.342" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.988119][ T1450] device bridge_slave_0 entered promiscuous mode [ 82.005090][ T1450] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.022634][ T1450] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.034297][ T1450] device bridge_slave_1 entered promiscuous mode [ 82.044445][ T1460] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.053515][ T1460] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.062623][ T1460] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.071738][ T1460] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.080738][ T1460] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.089756][ T1460] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.098808][ T1460] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.107905][ T1460] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.116904][ T1460] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.125900][ T1460] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.137943][ T1461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.345'. [ 82.225852][ T43] device bridge_slave_1 left promiscuous mode [ 82.232072][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.240064][ T43] device bridge_slave_0 left promiscuous mode [ 82.252718][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.282800][ T28] audit: type=1400 audit(1837372324.196:293): avc: denied { read } for pid=1462 comm="syz.7.346" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.312585][ T43] device veth1_macvtap left promiscuous mode [ 82.318957][ T43] device veth0_vlan left promiscuous mode [ 82.325237][ T28] audit: type=1400 audit(1837372324.196:294): avc: denied { open } for pid=1462 comm="syz.7.346" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.401109][ T1469] syz.9.347 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 82.413720][ T28] audit: type=1400 audit(1837372324.226:295): avc: denied { name_bind } for pid=1462 comm="syz.7.346" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 82.471530][ T1436] F2FS-fs (loop4): Test dummy encryption mode enabled [ 82.485646][ T1436] F2FS-fs (loop4): invalid crc value [ 82.492780][ T1436] F2FS-fs (loop4): Found nat_bits in checkpoint [ 82.540345][ T1436] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 82.572725][ T1469] fuse: Bad value for 'fd' [ 82.789090][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.803956][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.827535][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.846671][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.864155][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.871292][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.895287][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.912890][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.947089][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.954199][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.009697][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.027381][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.044809][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.070846][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.100316][ T1450] device veth0_vlan entered promiscuous mode [ 83.119441][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.133399][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.149766][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.183683][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.209166][ T1450] device veth1_macvtap entered promiscuous mode [ 83.234083][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.257983][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.342097][ T1490] EXT4-fs: Ignoring removed i_version option [ 83.370847][ T1490] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.409712][ T1490] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 83.431333][ T1490] EXT4-fs (loop5): orphan cleanup on readonly fs [ 83.453464][ T1490] EXT4-fs (loop5): 1 truncate cleaned up [ 83.471652][ T1490] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 83.543356][ T1450] EXT4-fs (loop5): unmounting filesystem. [ 83.653062][ T1493] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.660412][ T1493] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.319116][ T1509] set_capacity_and_notify: 4 callbacks suppressed [ 84.319136][ T1509] loop9: detected capacity change from 0 to 128 [ 84.535137][ T1517] loop5: detected capacity change from 0 to 128 [ 84.552656][ T1517] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 84.560699][ T1517] System zones: 1-3, 19-19, 35-36 [ 84.575488][ T1517] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 84.592022][ T1517] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.665645][ T1526] netem: change failed [ 84.693768][ T1513] loop0: detected capacity change from 0 to 40427 [ 84.725182][ T1528] loop9: detected capacity change from 0 to 512 [ 84.742641][ T1513] F2FS-fs (loop0): invalid crc value [ 84.758965][ T1528] EXT4-fs: Mount option(s) incompatible with ext3 [ 84.772368][ T1513] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.783893][ T1528] loop9: detected capacity change from 0 to 1024 [ 84.791047][ T1528] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 84.801027][ T1528] EXT4-fs error (device loop9): ext4_get_journal_inode:5749: inode #32: comm syz.9.365: iget: special inode unallocated [ 84.813963][ T1528] EXT4-fs (loop9): no journal found [ 84.819234][ T1528] EXT4-fs (loop9): can't get journal size [ 84.835869][ T1528] EXT4-fs (loop9): filesystem is read-only [ 84.841747][ T1528] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 84.850774][ T1528] EXT4-fs (loop9): unmounting filesystem. [ 84.933784][ T1513] F2FS-fs (loop0): Start checkpoint disabled! [ 84.950586][ T1513] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 84.966472][ T1513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 85.033271][ T1537] capability: warning: `syz.9.365' uses 32-bit capabilities (legacy support in use) [ 85.311650][ T1450] EXT4-fs (loop5): unmounting filesystem. [ 85.756492][ T1542] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 85.857479][ T1541] device gretap1 entered promiscuous mode [ 86.217511][ T1513] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 86.305931][ T308] bio_check_eod: 4 callbacks suppressed [ 86.305951][ T308] kworker/u4:3: attempt to access beyond end of device [ 86.305951][ T308] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 86.361143][ T308] kworker/u4:3: attempt to access beyond end of device [ 86.361143][ T308] loop0: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 86.495245][ T1550] loop9: detected capacity change from 0 to 40427 [ 86.505939][ T1550] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 86.513205][ T1550] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 86.521599][ T1550] F2FS-fs (loop9): Image doesn't support compression [ 86.528340][ T1550] F2FS-fs (loop9): Image doesn't support compression [ 86.535526][ T1550] F2FS-fs (loop9): invalid crc value [ 86.541743][ T1550] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 86.573298][ T1550] F2FS-fs (loop9): Start checkpoint disabled! [ 86.586487][ T1550] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 86.636160][ T1550] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 86.643259][ T1550] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 86.659120][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 86.659136][ T28] audit: type=1400 audit(1837372328.576:365): avc: denied { write } for pid=1548 comm="syz.9.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.721892][ T1544] loop5: detected capacity change from 0 to 40427 [ 86.757522][ T28] audit: type=1400 audit(1837372328.576:364): avc: denied { write } for pid=1548 comm="syz.9.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.783221][ T1544] F2FS-fs (loop5): invalid crc value [ 86.844533][ T1544] F2FS-fs (loop5): Found nat_bits in checkpoint [ 86.860073][ T1556] loop7: detected capacity change from 0 to 40427 [ 86.868656][ T8] kworker/u4:0: attempt to access beyond end of device [ 86.868656][ T8] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.956205][ T28] audit: type=1400 audit(1837372328.876:366): avc: denied { write } for pid=1569 comm="syz.0.379" name="dev" dev="proc" ino=4026532421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 87.005079][ T1544] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 87.008063][ T1556] kvm [1555]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0xc1) = 0xe50000000401 [ 87.052149][ T1556] kvm [1555]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0xc2) = 0xe50000000401 [ 87.068719][ T1556] kvm [1555]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x11e) = 0xe50000000401 [ 87.086684][ T1556] kvm [1555]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x186) = 0xe50000000401 [ 87.096083][ T1556] kvm [1555]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x187) = 0xe50000000401 [ 87.134743][ T1556] kvm [1555]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x1d9) = 0xe50000000401 [ 87.187363][ T1563] f2fs_ckpt-7:5: attempt to access beyond end of device [ 87.187363][ T1563] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.209012][ T1576] loop9: detected capacity change from 0 to 256 [ 87.321469][ T1570] loop0: detected capacity change from 0 to 40427 [ 87.337580][ T1570] F2FS-fs (loop0): invalid crc value [ 87.362384][ T1570] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.439067][ T1570] F2FS-fs (loop0): Start checkpoint disabled! [ 87.453634][ T1570] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 87.493381][ T1570] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 87.667855][ T1588] F2FS-fs (loop7): invalid crc value [ 87.684115][ T1588] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 87.719460][ T1588] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 87.766739][ T899] syz-executor: attempt to access beyond end of device [ 87.766739][ T899] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.814540][ T43] kworker/u4:2: attempt to access beyond end of device [ 87.814540][ T43] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 87.828835][ T43] kworker/u4:2: attempt to access beyond end of device [ 87.828835][ T43] loop0: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 87.896069][ T28] audit: type=1400 audit(1837372329.816:367): avc: denied { nlmsg_read } for pid=1595 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.896082][ T1596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 88.034106][ T28] audit: type=1400 audit(1837372329.946:368): avc: denied { block_suspend } for pid=1599 comm="syz.5.390" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.112215][ T1606] EXT4-fs: Ignoring removed oldalloc option [ 88.132124][ T28] audit: type=1400 audit(1837372330.046:369): avc: denied { create } for pid=1607 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.152277][ T1606] EXT4-fs (loop5): Test dummy encryption mode enabled [ 88.198933][ T1606] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 88.208171][ T28] audit: type=1326 audit(1837372330.096:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.0.392" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe8e39e0d9 code=0x0 [ 88.254273][ T1621] netlink: 'syz.4.394': attribute type 12 has an invalid length. [ 88.286893][ T1621] netlink: 'syz.4.394': attribute type 29 has an invalid length. [ 88.294928][ T1621] netlink: 148 bytes leftover after parsing attributes in process `syz.4.394'. [ 88.304663][ T1621] netlink: 'syz.4.394': attribute type 3 has an invalid length. [ 88.335136][ T1629] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.355261][ T1629] EXT4-fs (loop7): warning: maximal mount count reached, running e2fsck is recommended [ 88.383907][ T28] audit: type=1400 audit(1837372330.296:371): avc: denied { create } for pid=1631 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 88.398277][ T1629] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.396: inode #15: comm syz.7.396: iget: illegal inode # [ 88.444990][ T1629] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.396: couldn't read orphan inode 15 (err -117) [ 88.476225][ T1629] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 88.528502][ T591] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 88.530679][ T1629] EXT4-fs error (device loop7): ext4_lookup:1858: comm syz.7.396: inode #15: comm syz.7.396: iget: illegal inode # [ 88.647728][ T899] EXT4-fs (loop7): unmounting filesystem. [ 88.682117][ T28] audit: type=1400 audit(1837372330.596:372): avc: denied { mount } for pid=1637 comm="syz.7.399" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 88.705685][ T1638] devpts: called with bogus options [ 88.725833][ T591] usb 6-1: Using ep0 maxpacket: 16 [ 88.732359][ T591] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 88.749986][ T591] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.765198][ T28] audit: type=1400 audit(1837372330.626:373): avc: denied { remount } for pid=1637 comm="syz.7.399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 88.851186][ T591] usb 6-1: config 1 has no interface number 0 [ 88.857375][ T591] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.870507][ T591] usb 6-1: config 1 interface 105 has no altsetting 0 [ 88.886891][ T591] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 88.901281][ T591] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 88.916911][ T591] usb 6-1: Product: syz [ 88.926020][ T591] usb 6-1: Manufacturer: syz [ 88.930736][ T591] usb 6-1: SerialNumber: syz [ 89.145915][ T591] aqc111: probe of 6-1:1.105 failed with error -22 [ 89.245919][ T1305] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 89.332783][ T1646] set_capacity_and_notify: 4 callbacks suppressed [ 89.332803][ T1646] loop4: detected capacity change from 0 to 128 [ 89.348039][ T39] usb 6-1: USB disconnect, device number 6 [ 89.405665][ T1646] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.428410][ T1646] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.447145][ T1305] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.458270][ T1305] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.471776][ T1305] usb 8-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 89.485823][ T1305] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.494621][ T1305] usb 8-1: config 0 descriptor?? [ 89.518564][ T1646] netlink: 'syz.4.402': attribute type 12 has an invalid length. [ 89.812815][ T1667] loop9: detected capacity change from 0 to 128 [ 89.821531][ T1667] FAT-fs (loop9): Unrecognized mount option "0000000000000000000000318446744073709551615" or missing value [ 89.831150][ T1669] loop0: detected capacity change from 0 to 512 [ 89.838596][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.864422][ T1450] EXT4-fs (loop5): unmounting filesystem. [ 89.867617][ T551] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.935097][ T1671] netlink: 128 bytes leftover after parsing attributes in process `syz.9.412'. [ 89.944314][ T1671] netlink: 20 bytes leftover after parsing attributes in process `syz.9.412'. [ 89.953480][ T1671] netlink: 20 bytes leftover after parsing attributes in process `syz.9.412'. [ 89.982141][ T1676] tipc: Started in network mode [ 89.987346][ T1676] tipc: Node identity ac14140f, cluster identity 4711 [ 89.994334][ T1676] tipc: New replicast peer: 172.30.0.10 [ 90.000713][ T1676] tipc: Enabled bearer , priority 10 [ 90.010756][ T1676] netlink: 12 bytes leftover after parsing attributes in process `syz.9.414'. [ 90.019966][ T1676] bridge_slave_0: default FDB implementation only supports local addresses [ 90.057242][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 90.076243][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 90.089401][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.102680][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.111975][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.123459][ T1678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.413'. [ 90.135485][ T1678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.413'. [ 90.144958][ T1678] netlink: 9028 bytes leftover after parsing attributes in process `syz.5.413'. [ 90.200278][ T39] usb 5-1: config 0 descriptor?? [ 90.215412][ T1646] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 90.793121][ T1686] loop5: detected capacity change from 0 to 1024 [ 90.817881][ T1686] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 90.826712][ T1686] EXT4-fs (loop5): orphan cleanup on readonly fs [ 90.834963][ T1686] EXT4-fs warning (device loop5): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 90.851331][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 90.857648][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 90.864074][ T1686] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 90.876446][ T1686] EXT4-fs (loop5): 1 truncate cleaned up [ 90.882191][ T1686] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 90.890693][ T39] usb 5-1: USB disconnect, device number 4 [ 90.913294][ T1686] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.920949][ T1686] net_ratelimit: 3319 callbacks suppressed [ 90.920967][ T1686] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 91.089273][ T1450] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /11/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 91.110010][ T1450] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 91.122793][ T1450] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 91.126001][ T525] tipc: Node number set to 2886997007 [ 91.232399][ T1692] EXT4-fs (loop5): unmounting filesystem. [ 91.391369][ T1275] EXT4-fs (loop4): unmounting filesystem. [ 91.411920][ T1700] loop4: detected capacity change from 0 to 256 [ 91.503650][ T1701] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.511065][ T1701] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.519085][ T1701] device bridge_slave_0 entered promiscuous mode [ 91.528412][ T1701] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.535553][ T1701] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.543202][ T1701] device bridge_slave_1 entered promiscuous mode [ 91.901143][ T1701] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.908284][ T1701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.915591][ T1701] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.922676][ T1701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.101067][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.393975][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.435627][ T8] device bridge_slave_1 left promiscuous mode [ 92.448883][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.476916][ T1716] loop7: detected capacity change from 0 to 512 [ 92.483539][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.514131][ T8] device veth1_macvtap left promiscuous mode [ 92.536059][ T8] device veth0_vlan left promiscuous mode [ 92.644058][ T326] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.646514][ T1305] usbhid 8-1:0.0: can't add hid device: -71 [ 92.665978][ T1305] usbhid: probe of 8-1:0.0 failed with error -71 [ 92.673325][ T1305] usb 8-1: USB disconnect, device number 5 [ 92.777407][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 92.777423][ T28] audit: type=1326 audit(1837372334.696:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.4.429" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f769339e0d9 code=0x0 [ 92.816719][ T1724] netlink: 9028 bytes leftover after parsing attributes in process `syz.0.427'. [ 93.099035][ T1719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 93.122610][ T1720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 93.574345][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.604725][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.775245][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.806056][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.834570][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.841698][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.869506][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.900693][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.919702][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.926847][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.965607][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.990025][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.015598][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.027639][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.063938][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.096706][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.111377][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.126435][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.145892][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.156599][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.175165][ T1701] device veth0_vlan entered promiscuous mode [ 94.213315][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.226621][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.246585][ T1701] device veth1_macvtap entered promiscuous mode [ 94.261434][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.354191][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.404102][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.436328][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.474830][ T1752] loop6: detected capacity change from 0 to 1024 [ 94.495035][ T1752] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 94.527134][ T1752] EXT4-fs (loop6): orphan cleanup on readonly fs [ 94.542808][ T1752] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 94.578447][ T1752] EXT4-fs warning (device loop6): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 94.630113][ T1752] EXT4-fs (loop6): Cannot turn on quotas: error -5 [ 94.649824][ T1759] loop0: detected capacity change from 0 to 256 [ 94.657204][ T1752] EXT4-fs (loop6): 1 truncate cleaned up [ 94.669114][ T1752] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 94.728074][ T1752] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.740859][ T1752] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 94.987078][ T28] audit: type=1400 audit(1837372336.906:377): avc: denied { mount } for pid=1767 comm="syz.7.441" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 95.425138][ T1766] netlink: 8 bytes leftover after parsing attributes in process `syz.9.440'. [ 95.586650][ T1772] loop4: detected capacity change from 0 to 16 [ 95.630406][ T1772] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 95.665831][ T1773] netlink: 12 bytes leftover after parsing attributes in process `syz.9.440'. [ 95.674998][ T1772] erofs: (device loop4): mounted with root inode @ nid 36. [ 95.706459][ T1772] erofs: (device loop4): init_inode_xattrs: xattr_isize 12 of nid 36 is not supported yet [ 95.719002][ T1766] netlink: 9028 bytes leftover after parsing attributes in process `syz.9.440'. [ 95.737639][ T28] audit: type=1400 audit(1837372337.656:378): avc: denied { ioctl } for pid=1778 comm="syz.7.444" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.763254][ T1779] binder: 1778:1779 ioctl c0306201 200000000080 returned -14 [ 95.771812][ T1701] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /0/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 95.791857][ T1772] SELinux: (dev loop4, type erofs) has no security xattr handler [ 95.845402][ T1701] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 95.916215][ T1701] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 95.990922][ T1790] loop7: detected capacity change from 0 to 512 [ 96.028371][ T1777] EXT4-fs (loop6): unmounting filesystem. [ 96.031441][ T1792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14297 sclass=netlink_route_socket pid=1792 comm=syz.0.450 [ 96.086129][ T326] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.271432][ T1799] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.290462][ T1799] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.392422][ T28] audit: type=1400 audit(1837372338.306:379): avc: denied { ioctl } for pid=1808 comm="syz.0.458" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.464864][ T28] audit: type=1400 audit(1837372338.356:380): avc: denied { search } for pid=1808 comm="syz.0.458" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 96.495470][ T28] audit: type=1400 audit(1837372338.356:381): avc: denied { write } for pid=1808 comm="syz.0.458" name="enable" dev="tracefs" ino=1481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 96.553882][ T1807] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.570303][ T1807] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.578344][ T1807] device bridge_slave_0 entered promiscuous mode [ 96.585654][ T1807] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.592871][ T1807] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.600558][ T1807] device bridge_slave_1 entered promiscuous mode [ 96.663492][ T318] device bridge_slave_1 left promiscuous mode [ 96.670443][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.680804][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.698379][ T318] device veth1_macvtap left promiscuous mode [ 96.709708][ T318] device veth0_vlan left promiscuous mode [ 97.832200][ T28] audit: type=1400 audit(1837372339.746:382): avc: denied { ioctl } for pid=1827 comm="syz.0.463" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26811 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.878159][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.906338][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.921769][ T1794] loop4: detected capacity change from 0 to 131072 [ 97.937907][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.956183][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.967686][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.974786][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.987068][ T326] I/O error, dev loop4, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.023055][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.034041][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.044387][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.051508][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.073836][ T1838] netlink: 8 bytes leftover after parsing attributes in process `syz.9.465'. [ 98.086848][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.094930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.104467][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.126248][ T1807] device veth0_vlan entered promiscuous mode [ 98.140948][ T1807] device veth1_macvtap entered promiscuous mode [ 98.148144][ T1840] netlink: 12 bytes leftover after parsing attributes in process `syz.9.465'. [ 98.158599][ T1838] netlink: 9028 bytes leftover after parsing attributes in process `syz.9.465'. [ 98.174463][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.186331][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.203661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.220032][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.249358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.278115][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.310442][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.321516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.330863][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.463546][ T1850] loop0: detected capacity change from 0 to 256 [ 98.524898][ T1794] loop4: detected capacity change from 0 to 1024 [ 98.569975][ T1794] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.579256][ T1852] loop0: detected capacity change from 0 to 1024 [ 98.631036][ T1852] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 98.644889][ T1852] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.661053][ T1852] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 98.680080][ T1852] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 98.694934][ T1852] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 98.710222][ T1852] EXT4-fs (loop0): 1 truncate cleaned up [ 98.717416][ T1852] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.738174][ T1852] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.777653][ T1857] fuse: Bad value for 'rootmode' [ 98.855825][ T547] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 98.872726][ T1865] loop7: detected capacity change from 0 to 256 [ 99.035300][ T1198] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /56/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 99.047515][ T547] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.058882][ T1198] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 99.078483][ T1198] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 99.079841][ T547] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.128713][ T547] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 99.147159][ T547] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 99.164870][ T547] usb 5-1: Product: syz [ 99.173324][ T547] usb 5-1: Manufacturer: syz [ 99.191464][ T547] hub 5-1:4.0: USB hub found [ 99.252842][ T1872] EXT4-fs (loop0): unmounting filesystem. [ 99.274638][ T1879] netlink: 8952 bytes leftover after parsing attributes in process `syz.1.479'. [ 99.307484][ T1879] netlink: 13 bytes leftover after parsing attributes in process `syz.1.479'. [ 99.329109][ T28] audit: type=1400 audit(1837372341.246:383): avc: denied { read } for pid=1878 comm="syz.1.479" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 99.361094][ T28] audit: type=1400 audit(1837372341.266:384): avc: denied { watch watch_reads } for pid=1878 comm="syz.1.479" path="/1/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 99.390446][ T547] hub 5-1:4.0: 1 port detected [ 99.580648][ T28] audit: type=1400 audit(1837372341.496:385): avc: denied { getopt } for pid=1882 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.658513][ T547] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 99.664918][ T547] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 99.675269][ T43] device bridge_slave_1 left promiscuous mode [ 99.683684][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.698937][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.736368][ T547] usb 5-1: USB disconnect, device number 5 [ 99.789926][ T1887] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.799831][ T1887] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.807596][ T1887] device bridge_slave_0 entered promiscuous mode [ 99.815001][ T1887] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.822133][ T1887] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.829786][ T1887] device bridge_slave_1 entered promiscuous mode [ 99.899071][ T1887] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.906212][ T1887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.913523][ T1887] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.920618][ T1887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.969189][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.978547][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.986648][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.010785][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.019353][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.026468][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.034717][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.049932][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.054866][ T28] audit: type=1400 audit(1837372341.966:386): avc: denied { create } for pid=1895 comm="syz.7.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.057133][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.085533][ T28] audit: type=1400 audit(1837372341.996:387): avc: denied { setopt } for pid=1895 comm="syz.7.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.107376][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.115711][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.133935][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.148321][ T1887] device veth0_vlan entered promiscuous mode [ 100.154759][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.163056][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.179466][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.187158][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.194732][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.203426][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.212502][ T1887] device veth1_macvtap entered promiscuous mode [ 100.225939][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.234340][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.240130][ T1275] EXT4-fs (loop4): unmounting filesystem. [ 100.244930][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.267267][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.284596][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.324390][ T1905] loop3: detected capacity change from 0 to 512 [ 100.333514][ T1907] loop1: detected capacity change from 0 to 256 [ 100.345849][ T1305] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 100.450530][ T1905] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.469773][ T1905] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.515889][ T1305] usb 8-1: device descriptor read/64, error -71 [ 100.516223][ T1912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 100.653033][ T1912] netlink: 9028 bytes leftover after parsing attributes in process `syz.4.488'. [ 100.660708][ T1918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.488'. [ 100.835904][ T591] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.027898][ T591] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.072521][ T591] usb 4-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 101.146772][ T591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.728705][ T591] wacom 0003:056A:00B1.0005: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 101.746985][ T591] wacom 0003:056A:00B1.0005: hidraw0: USB HID v1.11 Device [HID 056a:00b1] on usb-dummy_hcd.3-1/input0 [ 101.775824][ T1305] usb 8-1: device descriptor read/64, error -71 [ 101.792698][ T1923] loop4: detected capacity change from 0 to 1024 [ 101.799402][ T591] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:00B1.0005/input/input11 [ 101.840662][ T1923] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 101.856435][ T1923] EXT4-fs (loop4): orphan cleanup on readonly fs [ 101.886587][ T1923] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 101.895455][ T1923] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 101.910449][ T1923] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 101.919556][ T1923] EXT4-fs (loop4): 1 truncate cleaned up [ 101.925394][ T1923] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.942899][ T1923] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.950834][ T1923] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 101.980325][ T1275] EXT4-fs (loop4): unmounting filesystem. [ 101.987284][ C1] usb 4-1: input irq status -75 received [ 102.045871][ T1305] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 102.189641][ T591] usb 4-1: USB disconnect, device number 2 [ 102.205832][ T1305] usb 8-1: device descriptor read/64, error -71 [ 102.241155][ T1939] loop4: detected capacity change from 0 to 40427 [ 102.265845][ T1939] F2FS-fs (loop4): invalid crc value [ 102.298304][ T1939] F2FS-fs (loop4): Found nat_bits in checkpoint [ 102.352210][ T1939] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 102.391014][ T1942] f2fs_ckpt-7:4: attempt to access beyond end of device [ 102.391014][ T1942] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.485826][ T1305] usb 8-1: device descriptor read/64, error -71 [ 102.632731][ T1956] netlink: 8 bytes leftover after parsing attributes in process `syz.9.502'. [ 102.645907][ T1305] usb usb8-port1: attempt power cycle [ 102.702737][ T1937] loop1: detected capacity change from 0 to 131072 [ 102.716623][ T1887] EXT4-fs (loop3): unmounting filesystem. [ 102.733456][ T1937] F2FS-fs (loop1): Test dummy encryption mode enabled [ 102.740522][ T1959] netlink: 12 bytes leftover after parsing attributes in process `syz.9.502'. [ 102.761466][ T1937] F2FS-fs (loop1): invalid crc value [ 102.771234][ T1956] netlink: 9028 bytes leftover after parsing attributes in process `syz.9.502'. [ 103.099290][ T1937] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.459601][ T1937] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.468083][ T1968] loop3: detected capacity change from 0 to 1024 [ 103.645936][ T1968] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 103.683754][ T1968] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.715712][ T1968] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 103.766509][ T1968] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 103.824228][ T1968] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 103.855915][ T1968] EXT4-fs (loop3): 1 truncate cleaned up [ 103.881952][ T1968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.969659][ T28] audit: type=1400 audit(1837372345.886:388): avc: denied { cmd } for pid=1984 comm="syz.7.512" path="/dev/ublk-control" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 103.997513][ T1988] loop4: detected capacity change from 0 to 256 [ 104.002102][ T28] audit: type=1400 audit(1837372345.906:389): avc: denied { write } for pid=1984 comm="syz.7.512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 104.029320][ T1968] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.050249][ T28] audit: type=1400 audit(1837372345.906:390): avc: denied { append } for pid=1984 comm="syz.7.512" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.096479][ T1968] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 104.171722][ T1887] EXT4-fs (loop3): unmounting filesystem. [ 104.283255][ T2003] loop1: detected capacity change from 0 to 512 [ 104.303577][ T2001] kvm: MONITOR instruction emulated as NOP! [ 104.835827][ T547] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.015815][ T547] usb 4-1: Using ep0 maxpacket: 8 [ 105.023506][ T547] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 105.032968][ T547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.041581][ T547] usb 4-1: Product: syz [ 105.046089][ T547] usb 4-1: Manufacturer: syz [ 105.050750][ T547] usb 4-1: SerialNumber: syz [ 105.059965][ T547] usb 4-1: config 0 descriptor?? [ 105.065912][ T1305] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 105.247141][ T1305] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 105.259449][ T1305] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 105.271183][ T1305] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.285819][ T1305] usb 8-1: Product: syz [ 105.290040][ T1305] usb 8-1: Manufacturer: syz [ 105.294665][ T1305] usb 8-1: SerialNumber: syz [ 105.308279][ T1305] usb 8-1: config 0 descriptor?? [ 105.316004][ T2026] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 105.482424][ T2038] process 'syz.4.532' launched './file1' with NULL argv: empty string added [ 105.491614][ T28] audit: type=1400 audit(1837372347.406:391): avc: denied { execute_no_trans } for pid=2037 comm="syz.4.532" path="/57/file0/file1" dev="overlay" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.523754][ T28] audit: type=1400 audit(1837372347.436:392): avc: denied { map } for pid=2039 comm="syz.4.533" path="/58/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=12881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 105.551633][ T295] usb 8-1: USB disconnect, device number 9 [ 105.596870][ T2046] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 105.607570][ T2046] kvm: pic: non byte read [ 105.612226][ T2046] kvm: pic: level sensitive irq not supported [ 105.612284][ T2046] kvm: pic: non byte read [ 105.622896][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.630898][ T2046] kvm: pic: level sensitive irq not supported [ 105.630994][ T2046] kvm: pic: non byte read [ 105.641905][ T2046] kvm: pic: level sensitive irq not supported [ 105.641980][ T2046] kvm: pic: non byte read [ 105.805830][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 105.811989][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.822301][ T39] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.831337][ T39] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.842752][ T39] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 105.851981][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.860069][ T39] usb 2-1: Product: syz [ 105.864305][ T39] usb 2-1: Manufacturer: syz [ 105.868985][ T39] usb 2-1: SerialNumber: syz [ 106.025855][ T591] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.205845][ T591] usb 5-1: Using ep0 maxpacket: 16 [ 106.212180][ T591] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 106.220548][ T591] usb 5-1: config 0 has no interface number 0 [ 106.226862][ T591] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 106.236950][ T591] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 106.248465][ T591] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 106.257583][ T591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.265594][ T591] usb 5-1: Product: syz [ 106.269835][ T591] usb 5-1: Manufacturer: syz [ 106.274471][ T591] usb 5-1: SerialNumber: syz [ 106.280040][ T591] usb 5-1: config 0 descriptor?? [ 106.285286][ T2051] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 106.292615][ T2051] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 106.405826][ T1305] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 106.479684][ T39] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 106.488411][ T39] usb 2-1: clock source 0 is not valid, cannot use [ 106.495384][ T39] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 106.502628][ T2051] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 106.510809][ T2051] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 106.585855][ T1305] usb 8-1: Using ep0 maxpacket: 16 [ 106.592300][ T1305] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 106.601491][ T1305] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.610338][ T1305] usb 8-1: config 0 descriptor?? [ 106.616950][ T1305] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 106.704844][ T294] usb 2-1: USB disconnect, device number 3 [ 106.719334][ T591] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 106.793612][ T318] tipc: Subscription rejected, illegal request [ 106.817423][ T1305] usb 8-1: Detected FT232B [ 106.905309][ T2079] fuse: Bad value for 'fd' [ 107.018039][ T1305] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 107.025195][ T1305] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 107.033008][ T1305] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 107.042631][ T1305] usb 8-1: USB disconnect, device number 10 [ 107.049772][ T1305] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 107.059461][ T1305] ftdi_sio 8-1:0.0: device disconnected [ 107.247718][ T28] audit: type=1400 audit(1837372349.166:393): avc: denied { checkpoint_restore } for pid=2089 comm="syz.1.553" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.575951][ T295] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 107.591364][ T39] usb 4-1: USB disconnect, device number 3 [ 107.627439][ T28] audit: type=1400 audit(1837372349.546:394): avc: denied { ioctl } for pid=2106 comm="syz.7.561" path="socket:[27671]" dev="sockfs" ino=27671 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.692569][ T28] audit: type=1400 audit(1837372349.606:395): avc: denied { search } for pid=2112 comm="syz.3.563" name="/" dev="configfs" ino=14212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.741557][ T28] audit: type=1400 audit(1837372349.636:396): avc: denied { unmount } for pid=1887 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 107.786781][ T295] usb 2-1: config 0 interface 0 altsetting 239 endpoint 0x81 has invalid maxpacket 59718, setting to 64 [ 107.802338][ T295] usb 2-1: config 0 interface 0 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.815709][ T295] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.823030][ T295] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 107.832344][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.857595][ T295] usb 2-1: config 0 descriptor?? [ 107.862918][ T2096] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 107.930974][ T591] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 107.931148][ T2127] binder_alloc: 2126: pid 2126 spamming oneway? 1 buffers allocated for a total size of 4096 [ 107.955695][ T591] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 107.976065][ T591] asix: probe of 5-1:0.34 failed with error -71 [ 107.997208][ T591] usb 5-1: USB disconnect, device number 6 [ 108.036806][ T2135] tipc: Enabling of bearer rejected, failed to enable media [ 108.072326][ T2137] loop8: detected capacity change from 0 to 7 [ 108.147810][ T1305] smpboot: CPU 1 is now offline [ 108.166688][ T2148] x86: Booting SMP configuration: [ 108.175841][ T2148] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 108.291350][ T295] hid (null): global environment stack underflow [ 108.301010][ T295] wacom 0003:056A:0010.0006: unknown main item tag 0x4 [ 108.309413][ T295] wacom 0003:056A:0010.0006: unknown main item tag 0xd [ 108.316629][ T295] wacom 0003:056A:0010.0006: unknown main item tag 0x0 [ 108.323577][ T295] wacom 0003:056A:0010.0006: global environment stack underflow [ 108.331272][ T295] wacom 0003:056A:0010.0006: item 0 4 1 11 parsing failed [ 108.339135][ T295] wacom 0003:056A:0010.0006: parse failed [ 108.344912][ T295] wacom: probe of 0003:056A:0010.0006 failed with error -22 [ 108.451951][ T2177] overlayfs: failed to clone upperpath [ 108.493614][ T547] usb 2-1: USB disconnect, device number 4 [ 108.501438][ T2159] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 108.506634][ T294] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 108.678989][ T2198] overlayfs: failed to clone upperpath [ 108.697347][ T294] usb 8-1: unable to get BOS descriptor or descriptor too short [ 108.706425][ T294] usb 8-1: config 247 has an invalid interface number: 20 but max is 0 [ 108.714764][ T294] usb 8-1: config 247 has no interface number 0 [ 108.721565][ T294] usb 8-1: config 247 interface 20 has no altsetting 0 [ 108.730955][ T294] usb 8-1: string descriptor 0 read error: -22 [ 108.737322][ T294] usb 8-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 108.746492][ T294] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.915835][ T295] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 108.961809][ T39] usb 8-1: USB disconnect, device number 11 [ 109.106949][ T295] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.121183][ T295] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 109.153293][ T295] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.162647][ T295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.170775][ T295] usb 5-1: Product: syz [ 109.175207][ T295] usb 5-1: Manufacturer: syz [ 109.183789][ T295] usb 5-1: SerialNumber: syz [ 109.202503][ T295] cdc_mbim 5-1:1.0: skipping garbage [ 109.401759][ T2193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 109.464239][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 109.464256][ T28] audit: type=1400 audit(1837372351.376:406): avc: denied { mount } for pid=2223 comm="syz.3.610" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 109.511290][ T28] audit: type=1400 audit(1837372351.426:407): avc: denied { unmount } for pid=1887 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 109.565933][ T294] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 109.747012][ T294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.758130][ T294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.767936][ T294] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.780784][ T294] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 109.789873][ T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.798900][ T294] usb 2-1: config 0 descriptor?? [ 109.965795][ T39] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 110.010294][ T2193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 110.019733][ T295] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 110.027438][ T295] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 110.148424][ T39] usb 8-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 110.157622][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.165642][ T39] usb 8-1: Product: syz [ 110.169883][ T39] usb 8-1: Manufacturer: syz [ 110.174515][ T39] usb 8-1: SerialNumber: syz [ 110.207889][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x2 [ 110.214861][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.221871][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.228320][ T295] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 110.228893][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x6 [ 110.241351][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.243712][ T295] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 110.248288][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.261194][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.268123][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.273371][ T295] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 8a:09:d3:aa:09:fa [ 110.275034][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.292418][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.299398][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.306319][ T28] audit: type=1400 audit(1837372352.216:408): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 110.329331][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.336447][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.343358][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.350488][ T28] audit: type=1400 audit(1837372352.226:409): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.371901][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.379067][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.389603][ T28] audit: type=1400 audit(1837372352.226:410): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=5347 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.417878][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.424818][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.432006][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.439124][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.442976][ T295] usb 5-1: USB disconnect, device number 7 [ 110.447165][ T28] audit: type=1400 audit(1837372352.236:411): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5347 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.464622][ T295] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 110.479748][ T294] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 110.490952][ T294] acrux 0003:1A34:0802.0007: item fetching failed at offset 37/41 [ 110.499177][ T294] acrux 0003:1A34:0802.0007: parse failed [ 110.504951][ T294] acrux: probe of 0003:1A34:0802.0007 failed with error -22 [ 110.505649][ T28] audit: type=1400 audit(1837372352.236:412): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5347 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.535642][ T294] usb 2-1: USB disconnect, device number 5 [ 110.554595][ T547] usb 8-1: USB disconnect, device number 12 [ 110.556722][ T28] audit: type=1400 audit(1837372352.426:413): avc: denied { read } for pid=2271 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.590435][ T28] audit: type=1400 audit(1837372352.426:414): avc: denied { open } for pid=2271 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.629526][ T28] audit: type=1400 audit(1837372352.426:415): avc: denied { getattr } for pid=2271 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.305861][ T525] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 111.515988][ T525] usb 5-1: Using ep0 maxpacket: 8 [ 111.522463][ T525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.533854][ T525] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.543310][ T525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.552971][ T525] usb 5-1: config 0 descriptor?? [ 112.076058][ T39] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 112.114043][ T417] usb 5-1: USB disconnect, device number 8 [ 112.268901][ T39] usb 8-1: unable to get BOS descriptor or descriptor too short [ 112.280128][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.290655][ T39] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.306233][ T39] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 112.317809][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.331031][ T39] usb 8-1: Product: syz [ 112.336891][ T39] usb 8-1: Manufacturer: syz [ 112.344800][ T39] usb 8-1: SerialNumber: syz [ 112.364498][ T39] usb 8-1: selecting invalid altsetting 1 [ 112.375017][ T39] usb 8-1: unit 6 not found! [ 112.765885][ T525] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.957054][ T525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.975807][ T525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.000326][ T525] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.027610][ T525] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.045790][ T525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.066807][ T525] usb 4-1: config 0 descriptor?? [ 113.166734][ T39] usb 8-1: 2:0: failed to get current value for ch 0 (-71) [ 113.187796][ T39] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 113.213776][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 113.229962][ T39] usb 8-1: USB disconnect, device number 13 [ 113.278810][ T2375] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.286072][ T2375] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.293542][ T2375] device bridge_slave_0 entered promiscuous mode [ 113.302844][ T2375] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.310043][ T2375] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.317829][ T2375] device bridge_slave_1 entered promiscuous mode [ 113.381295][ T2375] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.388423][ T2375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.395777][ T2375] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.402839][ T2375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.433027][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.441154][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.449193][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.460902][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.469717][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.476818][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.488016][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.495591][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.496908][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.503985][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.511954][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.519305][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.525554][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.534034][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.547810][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.555249][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.562968][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.570755][ T8] device bridge_slave_1 left promiscuous mode [ 113.576972][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.577000][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.584409][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.598970][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.599412][ T8] device bridge_slave_0 left promiscuous mode [ 113.606705][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.613707][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.620141][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.634595][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.642110][ T525] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 113.642787][ T8] device veth1_macvtap left promiscuous mode [ 113.650183][ T525] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 113.656791][ T8] device veth0_vlan left promiscuous mode [ 113.670258][ T525] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 113.762482][ T39] usb 4-1: USB disconnect, device number 4 [ 113.869253][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.886060][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.912780][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.929303][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.940988][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.951830][ T2398] tmpfs: Unknown parameter 'usrquota' [ 113.953262][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.975020][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.993520][ T2375] device veth0_vlan entered promiscuous mode [ 114.024706][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.042298][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.058183][ T2375] device veth1_macvtap entered promiscuous mode [ 114.081424][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.090450][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.124256][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.148418][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.175442][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.307200][ T2429] device syzkaller0 entered promiscuous mode [ 114.582523][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 114.582538][ T28] audit: type=1400 audit(1837372612.495:431): avc: denied { mounton } for pid=2450 comm="syz.7.681" path="/94/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 114.807046][ T28] audit: type=1400 audit(1837372612.725:432): avc: denied { bind } for pid=2472 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.827783][ T28] audit: type=1400 audit(1837372612.725:433): avc: denied { setopt } for pid=2472 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.955922][ T547] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 115.136997][ T547] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.148063][ T547] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.157943][ T547] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.170866][ T547] usb 8-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 115.179981][ T547] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.188834][ T547] usb 8-1: config 0 descriptor?? [ 115.604064][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.612530][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.620994][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.628689][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.636067][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.643425][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.650921][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.658303][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.666447][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.673770][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.681157][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.688815][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.696180][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.703516][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.710885][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.718466][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.725961][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.733330][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.740854][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.748586][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.758628][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.766319][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.773695][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.783272][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.790929][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.798555][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.806202][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.813597][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.821388][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.829160][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.837334][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.844730][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.853719][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.861246][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.869151][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.877943][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.885630][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.893305][ T547] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 115.902850][ T547] gt683r_led 0003:1770:FF00.0009: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.7-1/input0 [ 115.921509][ T547] usb 8-1: USB disconnect, device number 14 [ 115.932728][ T525] gt683r_led 0003:1770:FF00.0009: failed to send set report request: -19 [ 115.971653][ T2512] fido_id[2512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 116.152101][ T28] audit: type=1400 audit(1837372614.065:434): avc: denied { create } for pid=2543 comm="syz.9.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.190791][ T2497] syz.2.705 (2497) used greatest stack depth: 20640 bytes left [ 116.240373][ T28] audit: type=1400 audit(1837372614.155:435): avc: denied { create } for pid=2557 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 116.281905][ T28] audit: type=1400 audit(1837372614.155:436): avc: denied { sys_admin } for pid=2557 comm="syz.4.730" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 116.304476][ T2563] tmpfs: Unknown parameter 'quota' [ 116.535818][ T525] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.605822][ T547] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 116.742728][ T2575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2575 comm=syz.9.737 [ 116.755906][ T525] usb 3-1: Using ep0 maxpacket: 16 [ 116.762286][ T525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.773993][ T525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.784111][ T525] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.797174][ T525] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.806646][ T525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.815887][ T547] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.830623][ T525] usb 3-1: config 0 descriptor?? [ 116.835708][ T547] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.847803][ T547] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.857719][ T547] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.858582][ T2581] overlayfs: failed to clone upperpath [ 116.870944][ T547] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.886107][ T547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.899621][ T547] usb 5-1: config 0 descriptor?? [ 116.955805][ T591] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 117.010239][ T28] audit: type=1400 audit(1837372614.925:437): avc: denied { name_bind } for pid=2601 comm="syz.9.750" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 117.145814][ T591] usb 8-1: Using ep0 maxpacket: 32 [ 117.152271][ T591] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 117.162665][ T591] usb 8-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 117.174267][ T591] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 117.195611][ T591] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 117.210251][ T591] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.218475][ T591] usb 8-1: Product: syz [ 117.224293][ T591] usb 8-1: Manufacturer: syz [ 117.229392][ T591] usb 8-1: SerialNumber: syz [ 117.250425][ T525] microsoft 0003:045E:07DA.000A: item 0 4 0 8 parsing failed [ 117.258102][ T525] microsoft 0003:045E:07DA.000A: parse failed [ 117.264367][ T525] microsoft: probe of 0003:045E:07DA.000A failed with error -22 [ 117.310692][ T547] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 117.320722][ T547] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 117.451856][ T547] usb 3-1: USB disconnect, device number 4 [ 117.577126][ T295] usb 5-1: USB disconnect, device number 9 [ 117.625839][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.805825][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 117.812077][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.822255][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.832608][ T39] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.841730][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.849760][ T39] usb 4-1: Product: syz [ 117.853924][ T39] usb 4-1: Manufacturer: syz [ 117.858563][ T39] usb 4-1: SerialNumber: syz [ 118.066440][ T39] usb 4-1: 0:2 : does not exist [ 118.073316][ T39] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 118.094479][ T39] usb 4-1: USB disconnect, device number 5 [ 118.116230][ T28] audit: type=1400 audit(1837372616.035:438): avc: denied { write } for pid=2655 comm="syz.4.775" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 118.118112][ T2656] dummy_hcd dummy_hcd.0: remove, state 1 [ 118.144592][ T2656] usb usb1: USB disconnect, device number 1 [ 118.153080][ T2656] dummy_hcd dummy_hcd.0: stopped [ 118.158435][ T2656] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 118.255870][ T547] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 118.306195][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.446940][ T547] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 118.454442][ T547] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 118.465232][ T547] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 118.477926][ T547] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 118.485444][ T547] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 118.496209][ T547] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 118.507575][ T547] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 118.515022][ T547] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 118.525859][ T547] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 118.538765][ T547] usb 3-1: string descriptor 0 read error: -22 [ 118.545018][ T547] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 118.554098][ T547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.783660][ T39] usb 3-1: USB disconnect, device number 5 [ 118.838115][ T28] audit: type=1400 audit(1837372616.755:439): avc: denied { read write } for pid=2681 comm="syz.3.786" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.862798][ T28] audit: type=1400 audit(1837372616.755:440): avc: denied { open } for pid=2681 comm="syz.3.786" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.946120][ T547] logitech-hidpp-device 0003:046D:C082.000C: Device not connected [ 119.405853][ T295] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 119.565815][ T591] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 119.575818][ T547] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.586861][ T295] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.598076][ T295] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.609034][ T295] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 119.618194][ T295] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 119.626626][ T295] usb 4-1: Product: syz [ 119.630848][ T295] usb 4-1: Manufacturer: syz [ 119.637212][ T295] hub 4-1:4.0: USB hub found [ 119.712000][ T417] usb 8-1: USB disconnect, device number 15 [ 119.747392][ T591] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 119.756609][ T591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.765263][ T591] usb 5-1: config 0 descriptor?? [ 119.767231][ T547] usb 3-1: Using ep0 maxpacket: 16 [ 119.777734][ T547] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.788955][ T547] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.797232][ T547] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 119.806451][ T547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.814463][ T547] usb 3-1: Product: syz [ 119.819130][ T547] usb 3-1: Manufacturer: syz [ 119.823761][ T547] usb 3-1: SerialNumber: syz [ 119.829458][ T547] usb 3-1: config 0 descriptor?? [ 119.838386][ T295] hub 4-1:4.0: 1 port detected [ 120.038984][ T547] usb 3-1: USB disconnect, device number 6 [ 120.045042][ T295] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 120.052433][ T507] udevd[507]: setting mode of /dev/bus/usb/003/006 to 020664 failed: No such file or directory [ 120.062888][ T295] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 120.063154][ T507] udevd[507]: setting owner of /dev/bus/usb/003/006 to uid=0, gid=0 failed: No such file or directory [ 120.106125][ T295] usb 4-1: USB disconnect, device number 6 [ 120.115911][ T417] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 120.295802][ T417] usb 8-1: Using ep0 maxpacket: 8 [ 120.303271][ T417] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 120.312541][ T417] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.320824][ T417] usb 8-1: Product: syz [ 120.325031][ T417] usb 8-1: Manufacturer: syz [ 120.329704][ T417] usb 8-1: SerialNumber: syz [ 120.335363][ T417] usb 8-1: config 0 descriptor?? [ 120.562228][ T2742] device syzkaller0 entered promiscuous mode [ 120.605812][ T547] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 120.797105][ T547] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 120.808191][ T547] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 120.819052][ T547] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.827029][ T547] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 120.836146][ T547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.844136][ T547] usb 3-1: Product: syz [ 120.848342][ T547] usb 3-1: Manufacturer: syz [ 120.852956][ T547] usb 3-1: SerialNumber: syz [ 120.858229][ T547] usb 3-1: config 0 descriptor?? [ 120.863461][ T2723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.895826][ T417] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 121.086890][ T417] usb 4-1: config 0 has no interfaces? [ 121.092410][ T417] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.101611][ T417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.110607][ T417] usb 4-1: config 0 descriptor?? [ 121.319210][ T417] usb 4-1: USB disconnect, device number 7 [ 121.885821][ T417] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.065830][ T417] usb 4-1: Using ep0 maxpacket: 8 [ 122.073551][ T417] usb 4-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 122.082728][ T417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.090783][ T417] usb 4-1: Product: syz [ 122.095005][ T417] usb 4-1: Manufacturer: syz [ 122.099648][ T417] usb 4-1: SerialNumber: syz [ 122.314038][ T525] usb 5-1: USB disconnect, device number 10 [ 122.484462][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 122.484478][ T28] audit: type=1326 audit(1837372620.395:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.4.816" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769339e0d9 code=0x7fc00000 [ 122.515804][ T28] audit: type=1326 audit(1837372620.395:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.4.816" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f769339e0d9 code=0x7fc00000 [ 122.542212][ T417] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 122.553158][ T417] usb 4-1: USB disconnect, device number 8 [ 122.741543][ T295] usb 8-1: USB disconnect, device number 16 [ 122.756436][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.989830][ T295] usb 3-1: USB disconnect, device number 7 [ 123.163841][ T28] audit: type=1326 audit(1837372621.075:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.4.816" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769339e0d9 code=0x7fc00000 [ 123.192670][ T28] audit: type=1326 audit(1837372621.075:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.4.816" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f769339e0d9 code=0x7fc00000 [ 123.218255][ T28] audit: type=1326 audit(1837372621.075:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.4.816" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769339e0d9 code=0x7fc00000 [ 123.262877][ T2791] loop0: detected capacity change from 0 to 8 [ 123.268667][ T28] audit: type=1326 audit(1837372621.075:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.4.816" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769339e0d9 code=0x7fc00000 [ 123.308022][ T28] audit: type=1326 audit(1837372621.075:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.4.816" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769339e0d9 code=0x7fc00000 [ 123.333628][ T28] audit: type=1326 audit(1837372621.075:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2752 comm="syz.4.816" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769339e0d9 code=0x7fc00000 [ 123.425870][ T295] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 123.494380][ T28] audit: type=1326 audit(1837372621.405:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2814 comm="syz.9.841" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2719e0d9 code=0x7ffc0000 [ 123.524354][ T28] audit: type=1326 audit(1837372621.405:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2814 comm="syz.9.841" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2719e0d9 code=0x7ffc0000 [ 123.535403][ T547] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 123.623091][ T295] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 123.638376][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.662647][ T295] usb 3-1: Product: syz [ 123.677472][ T295] usb 3-1: Manufacturer: syz [ 123.686018][ T295] usb 3-1: SerialNumber: syz [ 123.785849][ T547] usb 4-1: Using ep0 maxpacket: 8 [ 123.792258][ T547] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 123.811237][ T547] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 123.833706][ T547] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.847299][ T547] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 123.859022][ T547] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 123.869310][ T547] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.884669][ T547] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.893929][ T547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.045818][ T295] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.235894][ T295] usb 5-1: Using ep0 maxpacket: 32 [ 124.242241][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.253413][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.263349][ T295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 124.276779][ T295] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 124.285876][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.297545][ T295] usb 5-1: config 0 descriptor?? [ 124.466919][ T2859] binder: 2788:2859 ioctl c0306201 0 returned -14 [ 124.511653][ T2863] Mass Storage Function, version: 2009/09/11 [ 124.517901][ T2863] LUN: removable file: (no medium) [ 124.524139][ T2863] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 124.535887][ T2863] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 124.544343][ T2863] CPU: 0 PID: 2863 Comm: syz.7.862 Not tainted syzkaller #0 [ 124.551676][ T2863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.561756][ T2863] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 124.567784][ T2863] Code: 94 c0 4d 8d b4 c6 e0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5e 8f 6a fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 45 8f 6a fe 41 be 68 11 00 00 4d [ 124.587414][ T2863] RSP: 0018:ffffc9000daaf738 EFLAGS: 00010246 [ 124.593537][ T2863] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 124.601529][ T2863] RDX: ffff88810b86d100 RSI: 0000000000000003 RDI: 0000000000000005 [ 124.609560][ T2863] RBP: ffffc9000daaf758 R08: ffff8881001b0067 R09: 1ffff1102003600c [ 124.617583][ T2863] R10: 0000000000000000 R11: ffffed102003600d R12: dffffc0000000000 [ 124.625586][ T2863] R13: ffff88811cc56468 R14: ffff88810d86d170 R15: 0000000000000000 [ 124.633594][ T2863] FS: 00007fe19bb0a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 124.642566][ T2863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.649188][ T2863] CR2: 0000000000000000 CR3: 00000001103ff000 CR4: 00000000003506b0 [ 124.657186][ T2863] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000 [ 124.665190][ T2863] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 124.673200][ T2863] Call Trace: [ 124.676499][ T2863] [ 124.679453][ T2863] ? __cfi_dummy_set_selfpowered+0x10/0x10 [ 124.685285][ T2863] usb_gadget_set_selfpowered+0x7a/0x190 [ 124.690957][ T2863] composite_dev_prepare+0x2e7/0x310 [ 124.696290][ T2863] configfs_composite_bind+0xb4/0x13b0 [ 124.701795][ T2863] ? mutex_unlock+0x8f/0x230 [ 124.706435][ T2863] ? __cfi_mutex_unlock+0x10/0x10 [ 124.711499][ T2863] ? __kasan_check_write+0x14/0x20 [ 124.716653][ T2863] ? kernfs_put+0x44f/0x480 [ 124.721181][ T2863] ? __cfi_configfs_composite_bind+0x10/0x10 [ 124.727211][ T2863] gadget_bind_driver+0x2eb/0x990 [ 124.732283][ T2863] ? sysfs_create_link+0x68/0x80 [ 124.733896][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.737267][ T2863] ? __cfi_gadget_bind_driver+0x10/0x10 [ 124.737307][ T2863] really_probe+0x2d7/0x9a0 [ 124.744572][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.749566][ T2863] ? __kasan_check_write+0x14/0x20 [ 124.749602][ T2863] __driver_probe_device+0x193/0x270 [ 124.749631][ T2863] driver_probe_device+0x54/0x3e0 [ 124.749659][ T2863] __driver_attach+0x41a/0x5d0 [ 124.762981][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.765971][ T2863] bus_for_each_dev+0x18c/0x200 [ 124.766012][ T2863] ? __cfi__raw_spin_lock+0x10/0x10 [ 124.772417][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.776350][ T2863] ? __cfi___driver_attach+0x10/0x10 [ 124.776383][ T2863] ? __cfi_bus_for_each_dev+0x10/0x10 [ 124.781922][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.787836][ T2863] ? _raw_spin_unlock+0x4c/0x70 [ 124.787869][ T2863] ? klist_add_tail+0x1e5/0x220 [ 124.787897][ T2863] driver_attach+0x42/0x50 [ 124.793920][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.797957][ T2863] bus_add_driver+0x322/0x560 [ 124.797997][ T2863] driver_register+0x335/0x440 [ 124.805910][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.809978][ T2863] usb_gadget_register_driver_owner+0xf8/0x270 [ 124.815963][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.822040][ T2863] gadget_dev_desc_UDC_store+0x220/0x340 [ 124.828188][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.831757][ T2863] configfs_write_iter+0x323/0x410 [ 124.836855][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.842860][ T2863] ? __cfi_gadget_dev_desc_UDC_store+0x10/0x10 [ 124.842893][ T2863] vfs_write+0x5ef/0xd00 [ 124.848673][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.852347][ T2863] ? __cfi_vfs_write+0x10/0x10 [ 124.860297][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.865233][ T2863] ? __cfi_mutex_lock+0x10/0x10 [ 124.865277][ T2863] ? __fdget_pos+0x2cd/0x380 [ 124.873380][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.877612][ T2863] ? ksys_write+0x70/0x260 [ 124.877644][ T2863] ksys_write+0x14a/0x260 [ 124.877666][ T2863] ? __cfi_ksys_write+0x10/0x10 [ 124.877686][ T2863] ? fpregs_restore_userregs+0x128/0x260 [ 124.877714][ T2863] __x64_sys_write+0x7b/0x90 [ 124.877735][ T2863] x64_sys_call+0x27b/0x9a0 [ 124.877758][ T2863] do_syscall_64+0x4c/0xa0 [ 124.877785][ T2863] ? clear_bhb_loop+0x30/0x80 [ 124.877804][ T2863] ? clear_bhb_loop+0x30/0x80 [ 124.877825][ T2863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.877856][ T2863] RIP: 0033:0x7fe19ab9e0d9 [ 124.877874][ T2863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.877894][ T2863] RSP: 002b:00007fe19bb0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.877918][ T2863] RAX: ffffffffffffffda RBX: 00007fe19ae25fa0 RCX: 00007fe19ab9e0d9 [ 124.877935][ T2863] RDX: 000000000000000b RSI: 0000200000000780 RDI: 0000000000000003 [ 124.877950][ T2863] RBP: 00007fe19ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 124.877964][ T2863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.877979][ T2863] R13: 00007fe19ae26038 R14: 00007fe19ae25fa0 R15: 00007ffc3d429f38 [ 124.878000][ T2863] [ 124.878030][ T2863] Modules linked in: [ 124.888097][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.889805][ T2863] [ 124.896159][ T2863] ---[ end trace 0000000000000000 ]--- [ 124.898145][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.902764][ T2863] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 124.908074][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.913650][ T2863] Code: 94 c0 4d 8d b4 c6 e0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5e 8f 6a fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 45 8f 6a fe 41 be 68 11 00 00 4d [ 124.913672][ T2863] RSP: 0018:ffffc9000daaf738 EFLAGS: 00010246 [ 124.927748][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.930123][ T2863] [ 124.935104][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.941458][ T2863] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 124.947095][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.950192][ T2863] RDX: ffff88810b86d100 RSI: 0000000000000003 RDI: 0000000000000005 [ 124.955221][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.961718][ T2863] RBP: ffffc9000daaf758 R08: ffff8881001b0067 R09: 1ffff1102003600c [ 124.966420][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.970666][ T2863] R10: 0000000000000000 R11: ffffed102003600d R12: dffffc0000000000 [ 124.974650][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.979737][ T2863] R13: ffff88811cc56468 R14: ffff88810d86d170 R15: 0000000000000000 [ 124.984652][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 124.990602][ T2863] FS: 00007fe19bb0a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 124.994804][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 125.014825][ T2863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.022683][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 125.055383][ T2863] CR2: 00007f936fdd6d58 CR3: 00000001103ff000 CR4: 00000000003506b0 [ 125.062705][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 125.066093][ T2863] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000 [ 125.070459][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 125.084923][ T2863] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 125.091599][ T295] kye 0003:0458:5011.000D: unknown main item tag 0x0 [ 125.097256][ T2863] Kernel panic - not syncing: Fatal exception [ 125.104195][ T2863] Kernel Offset: disabled [ 125.301631][ T2863] Rebooting in 86400 seconds..