last executing test programs: 3m27.2795935s ago: executing program 32 (id=502): syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x4e23, 0x1, 0x64, 0x0, @wg=@response={0x220, 0x6400, 0x0, "576d00000000000042c43acceaa8acfffffe006400", "0bb10000085b2e00", {"bb3b2195c4bef1f000", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 3m13.660224424s ago: executing program 33 (id=599): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5b4}], 0x1, 0x0, 0x6000, 0x2c}, 0x44004) 2m59.607535088s ago: executing program 5 (id=746): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004044) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'batadv0\x00', 'gre0\x00'}, 0x0, 0x128, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x3, 0x0, 0x7, 0x3ff}, {0x4}}}, @common=@inet=@tos={{0x28}, {0x3, 0x9}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xfffd, 0x2, 0x0, 0x0, "1ca8cb60a1d8235bc6c25bb4f87a3bc0fd5f5508e8f4a9bf65cddc9b23c9d87a29a94942b3e6a6c9b05899bf3ac6b3d190bc8430552eeddb62273b536c87cd50"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x120, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x0, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xa, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2b8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x5}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x40}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x4, 0x0, 0x2004cb, 0x1, 0x0, 0xfffffffffffffff8, 0xc547, 0x8, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902"], 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f00000002c0)={0x6, 0x0, [{0x293, 0xd, 0x401, [0x13, 0x3, 0x1ff, 0x7, 0xb148, 0xfff, 0xfffffffc, 0x9]}, {0xffff0001, 0x200, 0x613c, [0xfff, 0x8000, 0xd2f6, 0x5, 0xffff, 0x81, 0xffff]}, {0x9, 0x100, 0xfffffe11, [0x2, 0x4, 0x80000000, 0x0, 0x9, 0x9, 0x7d, 0x7e79]}, {0x8, 0x7, 0x4, [0x1, 0x7f, 0x3, 0x7, 0x9, 0x8, 0x8, 0xb]}, {0x3, 0xff, 0x6, [0x3, 0x0, 0x6, 0x9, 0x3, 0x3, 0x0, 0x81]}, {0x6, 0x7fffffff, 0x101, [0x885a, 0x8, 0x2, 0xfffffffb, 0x8, 0x0, 0x1000000, 0x7]}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m57.957376008s ago: executing program 5 (id=753): socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b2388a8", @ANYRES16=0x0, @ANYRES64=r0], 0xffdd) 2m57.945866499s ago: executing program 5 (id=756): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c8010000100001000000000800000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000080ff00000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000400000000000000000000000000000a0001060000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000a0026bd700025bd7000050000000c000f00070000000000000008002800040000004e0001"], 0x1c8}}, 0x20000000) 2m57.851611471s ago: executing program 5 (id=757): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x82001, 0x59) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$P9_ROPEN(r0, &(0x7f0000000080)={0x5e, 0x71, 0x2, {{0x4, 0x4, 0x2}, 0x4}}, 0x18) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) r3 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c000100feffff7fa100000008000500", @ANYRES32=r7], 0x50}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 2m57.300514754s ago: executing program 5 (id=759): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800783afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030055004023493b87aafaffffffffffffff23732472eefa45ad96569269748e254c1e4a8a8b3f0ab0c430d3be275084dbaf736b41e5af1803000100e90106ffffaf64000000a20001fe906d26efe3"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01002000000c0000000c000000026013000000000000800000000000000000"], 0x0, 0x26}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="3861f690", @ANYRES16=r3, @ANYBLOB="5953fcfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900317400004e00000010001d800c00008005"], 0x38}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ecf2dba1371f375, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@mcast2, {0x0, 0x0, 0x2, 0x1, 0x10000000, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x5, 0x7}, {0x40000, 0xfffffffd, 0x101}, 0x70bd2d, 0xfffffffe, 0xa, 0x4, 0x0, 0x70}, [@algo_crypt={0x48, 0x2, {{'ctr-camellia-asm\x00'}}}]}, 0x138}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) chmod(&(0x7f0000000040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x108) ptrace$getenv(0x4201, r5, 0x8, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r6 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r6, 0x0, 0x0, 0x8800000) r7 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0xc6244a827d8cfb40) preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 2m56.631720091s ago: executing program 5 (id=763): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000025007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m56.631524711s ago: executing program 34 (id=763): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000025007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m37.470231011s ago: executing program 3 (id=943): syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x4e23, 0x1, 0x64, 0x0, @wg=@response={0x220, 0x6400, 0x0, "576d00000000000042c43acceaa8acfffffe006400", "0bb10000085b2e00", {"bb3b2195c4bef1f000", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 2m37.409710802s ago: executing program 3 (id=944): socket$nl_route(0x10, 0x3, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/66, 0xfffffffffffffee0}, {&(0x7f0000006180)=""/136, 0x88}], 0x2, &(0x7f0000008640), 0x0, 0x0) clock_settime(0x3, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) 2m37.355526333s ago: executing program 3 (id=945): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000027c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x88001, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x4}}, {}, {@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x8000000000000001}}], [{@smackfsroot={'smackfsroot', 0x3d, '.'}}, {@uid_eq={'uid', 0x3d, r1}}, {@flag='rw'}, {@subj_user={'subj_user', 0x3d, '@\x84#{'}}, {@seclabel}, {@obj_role={'obj_role', 0x3d, '-\'.'}}]}}, 0x1, 0x0, &(0x7f0000000400)="778515ce1c4e17ee565c24dd5c3e78390170c72499e4ba5f494fc4d5f18005205a5afe4348b4d69940e8a2b8091756cf5140115606303e5f546f25c122333e140343b38a7a8e861d1a0e690b") (async) r3 = syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000100)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x10fff}}, {@norecovery}, {@resgid={'resgid', 0x3d, r2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@usrquota}, {@errors_remount}, {@nolazytime}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x1, 0x465, &(0x7f0000000f00)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') (async) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000004800)) read$FUSE(r4, &(0x7f0000000840)={0x2020}, 0x2020) 2m37.259135016s ago: executing program 3 (id=947): getpid() r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@grpjquota}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000780)="6b727862e8", 0x5, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file1\x00', 0x4008, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYRES16=r0], 0x81, 0x302, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0x0) 2m37.006623132s ago: executing program 3 (id=948): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800783afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030055004023493b87aafaffffffffffffff23732472eefa45ad96569269748e254c1e4a8a8b3f0ab0c430d3be275084dbaf736b41e5af1803000100e90106ffffaf64000000a20001fe906d26efe3"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01002000000c0000000c000000026013000000000000800000000000000000"], 0x0, 0x26}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="3861f690", @ANYRES16=r3, @ANYBLOB="5953fcfffffffddbdf256b00000008000300", @ANYBLOB="0c009900317400004e00000010001d800c0000800500060028000000"], 0x38}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ecf2dba1371f375, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@mcast2, {0x0, 0x0, 0x2, 0x1, 0x10000000, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x5, 0x7}, {0x40000, 0xfffffffd, 0x101}, 0x70bd2d, 0xfffffffe, 0xa, 0x4, 0x0, 0x70}, [@algo_crypt={0x48, 0x2, {{'ctr-camellia-asm\x00'}}}]}, 0x138}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) chmod(&(0x7f0000000040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x108) ptrace$getenv(0x4201, r5, 0x8, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=") r6 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r6, 0x0, 0x0, 0x8800000) r7 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0xc6244a827d8cfb40) preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 2m36.950590883s ago: executing program 3 (id=949): socket(0x400000000010, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m36.912816114s ago: executing program 35 (id=949): socket(0x400000000010, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m19.052987332s ago: executing program 7 (id=1165): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x42, 0x0) poll(&(0x7f0000002980)=[{0xffffffffffffffff, 0x240}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x70c2}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x4400}, {r0, 0xc}, {0xffffffffffffffff, 0x1000}, {}], 0x8, 0x6) 2m19.021572252s ago: executing program 7 (id=1166): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af24, 0x0) 2m18.931639765s ago: executing program 7 (id=1167): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000a1000000c3ba0000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) 2m18.931337335s ago: executing program 7 (id=1168): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x36, &(0x7f00000002c0)={@remote, @remote, @void, {@ipv4={0x86dd, @tcp={{0x5, 0x4, 0x0, 0x0, 0xfffffe58, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) ioprio_set$pid(0x2, r1, 0x4004) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1204000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x2, 0x2bc, &(0x7f0000000980)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") r2 = creat(&(0x7f0000000080)='./bus\x00', 0x27) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1, &(0x7f00000001c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xc9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xff96, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000, 0x2000}]) 2m18.6998401s ago: executing program 7 (id=1174): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000007700)=[{{&(0x7f00000037c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000003800)="8da0d87bff4ba891a03c9746290fbd598d28fa733fff268ac78e8b98c0d5a0c375cf705d8fd2c2e2d01965bacc6d2f7cff580c07eefeaebe3d1a7839c36f9861ebd3172905f19f90141c98fd0797bee832a40d618c40750dc5a64b2e70fb56622227311173e5d0b6c48e6ed8d5919d6d6f05c1cd493f093483ca9dd681b1e1d3e163d8bbae2e77df9ab136", 0x8b}, {&(0x7f00000038c0)="238d2be79c4277eef0485cd22f969a458418f20876eedc58469449fd6e88a2968a6870a3bf944ae70bc86c4da4dea911d090de12cd4399a3d8efca971620ec1a0a3e761a603439954323d53a4f631eeb587a6e6725e7ddaca335e84b661a078c8b799a9be7e4fd394d9b908a3872a9e8d573e5cdb525462d41d4a3ef1c0e088c00d13f38b87c566a19d44211c7d1e7898858006746208beb64a0f1b594186ea5b32607ab05af642c2a7299ae34b5eddb1c335cf3cbaeac4d7b1d360dddf754c653f62b6d09b236588de3682a9bd46f5ac54956bb81a5b7c29e31ed27685dd35fb1f3f055bb43444ce88dfe83ac7f8f0f0d49", 0xf2}], 0x2, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @multicast1}}}], 0x60}}, {{&(0x7f0000003a80)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000003ac0)="fc70ddfc8012ce5021b79507007f0ccbd0b6988cc443ec7a83316e9c542a79dc298e7159ecb0999c6ceba1df0d2101cf2eeea1768ebc10e367f815524a173043ad5058b822a0459d14298e55d019d9544de9f1cab5e6884f57f7fd4a6f2831b50f21c0ad84e396", 0x67}, {&(0x7f0000003b40)='Z', 0x1}, {&(0x7f0000003b80)="6e60f4b46a65189d2f80f305fbf3ceb4873d06c35735710e074c43e2dc1f2a856f6f44ce98718137a06abae0cd93d54f6672c9c452e09603e809fddeea2e1fff70c4e42cb35371502fc0a5dd4c65c079bf2933732226c260b34a16062eb9a6643d79edbf8b0da250ef180800220f2653e30d3d3053671a721a7a487e37b9a052b5a946cfce1fd470c372f21dbf9455e32c605cec1287313c312d0b21e87198f24f1ef99add4c0242df188f2beb18d19d558e7db189", 0xb5}, {&(0x7f0000003c40)="ff9ba8fa11084d8b8b4ace4c1b9d4189f2118b5c34fdb13db89b15b207937f04abed3bae8c5e50b89fd3d938b9c95ce2348f8420f1faa375f883661e7acfdd822922f330e7c7e286481dcf1a5f37c8e517d00edd242fc961198d4b4d2fd8cd3d840d2d973ae43f34cf8eca923cf2d059f20586907e6da963f819571a417d3e365de798fcb47183f15e6ffec99691184f7f3e7317b32c40e7d0584e6d", 0x9c}], 0x4, &(0x7f0000003d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0x1, [@local, @broadcast, @empty, @remote, @rand_addr=0x64010102, @multicast1, @multicast1, @private=0xa010101, @local, @loopback]}, @ra={0x94, 0x4}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x1, 0x7, "07e420342c"}, {0x7, 0x6, "80f8f8e4"}]}]}}}], 0xd8}}, {{&(0x7f0000003e40)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000043c0)=[{&(0x7f0000003e80)="7c7fff273b9ac4590bccfba09e4f4c7abc12b33929fb20e9b910d5991f9b43b6353adb2b3256461927f179af40c839ffab3e13cafdac5361cc3bf25c6271ab41734be7628183bcafbc3251ca31477becc4bd95de21eb0543ea84fb6f777cdf224a5f9216f6072e14e54f8683b7450348e5f763c786b4de95462499b4a66d91bf771a74afc81a40cda6c5e2af47c50cb8d29e51ea3864c0a7fd4cf2a29397f1261b0b37da1453fa5460a34dd74a5ff9ed7a741fa2d8b97b3316f2a8", 0xbb}, {&(0x7f0000003f40)="fd2671bd82bd2d222fbd05819f54000b52b660", 0x13}, {&(0x7f0000003f80)="15bb5881f610267be7", 0x9}, {&(0x7f0000003fc0)="35a2639037967ca7ad554c33be609fba148671234454329f715d19a629aa1fd460135686e03c5d7b071e1c7698816c00da51efc2992eb883ed60af2800fb3b5e02ee4ee566351c085a510325b819362103377cbb43c2813132f88fce3ebe7ac3789bda1266a6a7646919c67da730bec7deb4d5d9730ddff0ad6e6f096647fa828044c140cb5d9991a23a3d9a4350b499eba641c6a57b27200e89c47e061e647d18c2798de979e4c55d29aae2d27687f1f63fff8b7fd7f864fd6f27fc3c93133c919fdcd5f766fcfa8b3c81c1315d292e18ec652adf9be379c1090645f1a1793b6a", 0xe1}, {&(0x7f00000040c0)="8970b530a49ae406f375dd93b78a0d02fca139e2ea456870ac4f78d86b1a43e7c4c2c5d6bf1265b7a9b55a0d0b086a73a9afd7f56f1530665e136992a216f46fbfabd750f88e6163dffd3b465334377ad7b313bf1beb5a449c9b8e8625b5a6053dcebf0831a91eef27c0091b60e0dbce5be029cbef50977604e7201a42", 0x7d}, {&(0x7f0000004140)="edbf24b9f7f514fcbdbfb773a7e400cef0a9f4252f2a09011ad8eb3b46dedb10743867ebbca80f0e59b2c2b794347deb3beb4653a277d45c368707ead3c7d1741ceb954e1287380447401d0fbb2b8c773a3ddab1004f850c547db8fb3ddea2810e3c87b5974e3a5944b880d7f9267dfdc1fca9e67f87acf93e1180748daa025c310eafc9c8488dbe8bf4e95e32ce8031316706fc543e4e8b74853554ae2c39d51d3c6edfa8cdf4b036b9074b76bc047c4c846ac323b2b4f84f9bdc751943e27fc7a3033798bded7a", 0xc8}, {&(0x7f0000004240)}, {&(0x7f0000004280)="b8cd283bdeee43a112d877dc23ac04d6f2659c06711840bb405a4fee52ee129bbebcc1954fb618582405639aa13fbec4711364d788d7203c8356d6a4a135a1b35ba81d205f9516109b3da6dc931786fe6ae10b4e24fc444ca1a18286d8c68c36a0753f2cbc554b6bd010099510c4a5e21ae42157f4a1a4a69d8d766da80a21508315379d1dc747a15677c2c10496aa963df21de1a244cbc7cc2c3d134596af12b7168fee2c34230758a0a03e3a011bbb66495a5b8e4b21bc22f049f3aa6c1bcf70a7", 0xc2}, {&(0x7f0000004380)="bd528cc794dcef710120ac5b6aaa162d6325fe202001fc762c94adb7b9ad15a16c4fd0ca31444af598eb5291fce2", 0x2e}], 0x9, &(0x7f0000004480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @remote}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x3c, 0xffffffffffffffff, [{0x5, 0xf, "054e5570db3711d9ee06d6e95c"}, {0x2, 0xd, "bd085583837e866c0fc87d"}, {0x5, 0x11, "28371ac33cccf7ed51a2e169403743"}, {0x0, 0x9, "582378747b3ae1"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0xc, 0x2c, 0x3, 0x8, [{@remote, 0x1000}]}, @ssrr={0x89, 0x23, 0xd3, [@broadcast, @rand_addr=0x64010100, @broadcast, @empty, @multicast2, @broadcast, @loopback, @private=0xa010102]}, @timestamp_addr={0x44, 0x2c, 0x52, 0x1, 0x1, [{@broadcast, 0x2}, {@local, 0x176b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xdd}, {@multicast2, 0x2de0}, {@rand_addr=0x64010102}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}], 0x148}}], 0x3, 0x0) 2m18.507030595s ago: executing program 7 (id=1176): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x42, 0x0) poll(&(0x7f0000002980)=[{0xffffffffffffffff, 0x240}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x70c2}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x4400}, {r0, 0xc}, {0xffffffffffffffff, 0x1000}, {}], 0x8, 0x6) 2m18.461875666s ago: executing program 36 (id=1176): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x42, 0x0) poll(&(0x7f0000002980)=[{0xffffffffffffffff, 0x240}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x70c2}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x4400}, {r0, 0xc}, {0xffffffffffffffff, 0x1000}, {}], 0x8, 0x6) 1m43.659495849s ago: executing program 4 (id=1560): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x6b) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='N-N:N/8'], 0x6a) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c808) syz_read_part_table(0x408c, &(0x7f00000040c0)="$eJzszz9KM0EYBvBnkmzYL3yFgmAXBC+gF8gJbIN9TmAhtoKSiwg2QbC2EDyF11nZJOYfKQOK/H7FzjzvO+8sE35WWSydfO52jtabanHk23MnmbwcJzn7l+nbstrbc/vFZap+XfI/yW26G53xVfuZHfAlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA79ZPmqa5b7els9Xp9e5eN2K9PTcp85FVfuimGg1LTlbF050/teWPpJqH8eygrwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/qbuVuqvt9d126wz2Hf6Zrk+nedxNCyp19dM35OmafNgPvDF/hxSAQACQRRciaIdNYhDCFIicKdPzsg1+/7880g92ifrtrYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8NiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhyQAAAAAAj6/7odgQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDBQAA//9DvhbP") 1m43.108938932s ago: executing program 4 (id=1563): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x280000, 0x0) close_range(0xffffffffffffffff, r0, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) clock_gettime(0x7, &(0x7f0000000700)) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000140)) r5 = socket$inet6(0xa, 0x3, 0x3c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1m42.895216568s ago: executing program 4 (id=1564): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000600)={[{@utf8}, {@dmask={'dmask', 0x3d, 0x2}}, {}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@namecase}, {@discard}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x169b43, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x2, &(0x7f00000000c0)=0xa) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) fcntl$lock(r7, 0x5, &(0x7f0000000040)={0x1, 0x0, 0x7fff, 0xfffffffffffffff0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x3, 0xc) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r10, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001300)={r10, 0x20, &(0x7f00000012c0)={&(0x7f0000000240)=""/126, 0x7e, 0x0, &(0x7f00000002c0)=""/4096, 0x1000}}, 0x10) recvmmsg(r8, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60000, 0x1, 0x13, r11, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000028c0)={{{@in=@local, @in=@private}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f00000029c0)=0xe8) 1m42.598595465s ago: executing program 4 (id=1571): syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x80404, &(0x7f0000000600)={[{@noacl}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@data_ordered}, {@quota}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x100000, 0xfffffffd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0xc19f5c5d6071718f) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0x2, r3, 0x0) keyctl$instantiate(0xc, r3, &(0x7f0000000400)=ANY=[@ANYBLOB='load Dcryptfs trusted:+\' 000000000000000<2767 105eb4\x00'], 0x35, 0xfffffffffffffffe) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r4 = socket(0x22, 0x1, 0x0) sendmmsg(r4, &(0x7f0000000b80)=[{{&(0x7f00000006c0)=@generic={0x27, "33e646e04b8fc3c6ac08fa57fcaf86d43aa50d4df3db81bd44452e9cb62e75b2183d77a5ccc2c1fd731599483c15f38634fbe7c3e0271ed303025d23dc1b57c9d9dcfdde9bfddfc1ac7b517a4f20817bb6f0de3e6afbf435eccc11f9a7e877fa2012e45773f5f2043bdeea644a66fb6ffdfc22f8d5e651ebdb2afcaf6731"}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000780)="1c1b363ce52f02532255bf4400b079053a55d37236c2a77340c72dd089aead886ba38e74a920835b94c9e89ffd8c26dca5f46b146c59d7428f02000000bf951a69e8047f99ea279aa82653c7bb3c78dddd81f2c0b3f32f77977213fa0b46b298173154ee5c811ec77b2363c70ac2da79555d12d8b61e406cd74880f4b487cc4a59563cc1b7e3ea73aa27101c76bae7b73c7276e33e3841dba5204990e8c2f9d5ae89", 0xa2}, {&(0x7f0000000840)="4d4343e0605cbf4940ef3fe7bd9d63012e1b0057878fa23957419eb4", 0x1c}, {&(0x7f0000000880)="baf076a50bae6bd29cc69b7117de53f67c6ad14a7b2559b94b91de0a0a97f39c1e933e019b879055e81cd69bc0467ce9684c277c4ce9bc38789ac3542b32e4f95473388a201d9225e28932569b053793fad76a915222aea565adc8c7658445f3281ed24a3c2367658c52bf1479a39fa60d02c27b61cb27089ebcc2e476eea5480053366f8197fe3e66923f3f7b07cc0687bb5f74cac2cbe7abc85a227e297884f3433b2c2c2c575889412db4dd1022759ebc691d5b375dd9e8c02f7ff560", 0xbe}, {&(0x7f0000000940)="089cb76d9e9b2486fed93a1f82a9c77de54232f079334621f156aa4095af4fac88090e3e6e8e73980226393555a17234e270a850dff1416aedf35540c553d21f53ba08cf72d248afd03da4198752d3b2ac145a535413f906820d7bbda6a219a3846429462aab2df3f09e2cfee619b0e163c2dab7c9fd436e25947c6883077a5d7de570b961dd436c738186355250b8fc57d05b673b745bffbf8710f198e4f8407629e4e072a32a5b558b073161797adff530ccf1259b61869e3717886f96a3e2ebec26c5c8c797059adf", 0xca}, {&(0x7f0000000a40)="3f90232a50e6d6b283a4c1bf355c5bb144b2368a0f82c98af49f5ae18b0296bef1a6547cf1e80597cfe6cc3362b10f71da0a159c4990fa002bc8ee541a06c184e78f49dbc832d1d6879fa420e900d5c8a9fc8e3922ba10cdfa2607d5", 0x5c}], 0x5}}], 0x1, 0x20000000) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x840, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000000c0)=0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x10) pwrite64(r8, &(0x7f0000000140)="12", 0x1, 0x8080c61) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r11, 0x4000000000000, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000b637d0efb1ae9f1fdd51f4aa5d9b0983597183fb3abf02edefb870de2a1b4f15399f418eacfa84e10e4d11c39206eb08743ba23ac69be5ceba6bfdf72ed9a75b2a3e9c0e034f34db12993e3fd5c00dec18ec9f7a88f35db2364c67ea0000000000000000", @ANYRES16=r10, @ANYBLOB="000328bd7000fedbdf250100000008000300040000000800020003000000080003000000000008000400ffffffff0800030007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x85cfd5c09dc28f30) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r10, @ANYBLOB="020029bd7000fcdbdf25070000000800030002000000080004006009000034000180080003000a010100060005004e230000080003000a010102080003007f0000010800060004000000050002000200000008000200070000000800040005000000080004000900000024000680080006000a00000008000700", @ANYRES32=r1, @ANYBLOB="050002000000230008000300e0000001400001801400040000000000000000000000000000000000050002002c00000008000700", @ANYRES32=r1, @ANYBLOB="05000200c4000000050002007f00000008000700", @ANYRES32=r1, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$NL80211_CMD_FLUSH_PMKSA(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000225bd7000fedbdf2536000000"], 0x14}, 0x1, 0x0, 0x0, 0x40088d0}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) 1m42.273424273s ago: executing program 4 (id=1582): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff0000004c7b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m41.631868619s ago: executing program 4 (id=1590): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000380)=r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x152ae}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000000240)="043bf6f8", 0x4}], 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) mkdir(&(0x7f0000000040)='proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='proc_mnt/1/root/proc\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='proc_mnt\x00', 0xa) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801d}, 0x4) 1m41.61289908s ago: executing program 37 (id=1590): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000380)=r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x152ae}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000000240)="043bf6f8", 0x4}], 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) mkdir(&(0x7f0000000040)='proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='proc_mnt/1/root/proc\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='proc_mnt\x00', 0xa) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801d}, 0x4) 7.73867612s ago: executing program 2 (id=2756): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000010300)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRES8, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa28624f375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbabba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbd"], 0x1, 0x11f0, &(0x7f0000001b00)="$eJzs209rY1UYB+C3mdR2MrZT/43ObDzoRjcXZxauZlOkBZmAMjMRZgThDk01JCYhN4tkcDHgzpWfQ1y6E8Qv0G/hrgiim3FjpE1a2xq1BZtYfJ7NfcnvnNxz4CZwQt7d219+2twusu28H6WFhSh3FyM9TZGiFJdi7Em8+fnmL1/ce/Dwznq1unE3pc31+zffTimtvvrdh599/dr3/SsffLP67VLsrH20+9OtH3au7Vzf/e3+J40iNYrU7vRTnh51Ov38UauethpFM0vp/VY9L+qp0S7qvWP5dqvT7Q5T3t5aqXR79aJIeXuYmvVh6ndSvzdM+cd5o52yLEsrleCk0Wg0Ou3Y2ldP90b/Wjmcevl2Ja7Es7ESq3E11uK5eD5eiBfjpbgWL8crcf1M7w8AAAAAAAAAAAAAAAAAAACcxn7/f4xGi/HMfmf/5dD/DwAAAAAAAAAAAAAAAAAAALOm/x8AAAAAAAAAAAAAAAAAAADmT/8/AAAAAAAAAAAAAAAAAAAAzN+9Bw/vrFerG3dTWo748cmgNqiNr+N8893qxltp39ofs34eDGqXDvOb4zwdz5eiMslvTc2X443Xx/le9s571aN5KWo3Yuv8tw8AAAD/C1k6NPV8n2V/lY+rI78PnDjfl+NGedodlyfX0dXz2A9nUwwfN/NWq94rhosHxeN/uSjHaQcvTFZ1LstQXPBiafJ07L1yUP8nFnakKMc/jCn93fQpn8q5FbP/LmL2/vzsAQAAAAAAAAAAcBHM4u+EJ+9Zms9WAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5nB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE4BAAD//z4uiDQ=") syz_mount_image$exfat(0x0, &(0x7f0000000040)='.\x02\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) 7.531760885s ago: executing program 2 (id=2761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) fcntl$addseals(r1, 0x409, 0x20) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_TDX_CAPABILITIES(r3, 0xc008aeba, 0x0) 7.459246107s ago: executing program 2 (id=2762): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@noquota}, {@user_xattr}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000ac0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fchmodat(r0, &(0x7f0000000140)='./file0\x00', 0x4) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000b00000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, r1, 0x0, 0xa0028000}, 0x38) 7.287250321s ago: executing program 2 (id=2767): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210081, &(0x7f0000000140), 0xfd, 0x2a9, &(0x7f0000000500)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x280002, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe) mlockall(0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x10000) munlockall() r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r4, 0x0, 0x0) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write(r5, 0x0, 0x0) 6.431439852s ago: executing program 2 (id=2773): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000ffffffb00000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x3f) 6.044736451s ago: executing program 2 (id=2779): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa00000000000000000100fa851000000600000018000000", @ANYRES32, @ANYBLOB="00000021000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 6.023906902s ago: executing program 38 (id=2779): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa00000000000000000100fa851000000600000018000000", @ANYRES32, @ANYBLOB="00000021000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 4.140261709s ago: executing program 6 (id=2801): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x2400c004) pwrite64(r0, 0x0, 0x0, 0x7) 4.000749241s ago: executing program 6 (id=2802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x479edb6fe225580a}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x70, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="840000001e00010000000000fcdbdf25ff010000000000000000000000000001000004a59b006c00020000000000000000000000000000017f0000000235000010000a002c"], 0x84}}, 0x24000058) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYRES16=r4, @ANYRES32=r4]) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) inotify_init1(0x800) r5 = socket$netlink(0x10, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r6, &(0x7f0000000e40)=[{&(0x7f00000004c0)=""/65, 0x41}], 0x1, 0x1, 0xffffff7c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r2) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000001800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001640)={0x16c, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_TESTDATA={0x5, 0x45, "c8"}, @NL80211_ATTR_TESTDATA={0xe0, 0x45, "61cf5c6969f80bcb4d58c55145ab5646ec9b778a83302698be0129eb29e24fde36db4cb1d20468e71e2b89ca78af1678e305defe6fa3e192ae16d9e6aea3347adcae172e05b57070f5079eeaeba90d300ea41dff92ef97eb0e93a5c273ce99a93caf3d0279edfc3ec14ccc68577d63045fdd4ccb7890df1c3e107baf1bd3189d89971790bc7fd6c4a3b432e5f4f21e8742497b341ef85895794ea44c934420612d21146eb001f5b69b453386deb1b2baaf9e2d553cfabda4562a0ae653697422927af4def62a824fbc5e143fd6b11b8a14dda294f5bc5ba0d5ac142c"}, @NL80211_ATTR_TESTDATA={0x64, 0x45, "f171c61361d4160ef91c656dba1b36fbee4ae4515eb4a18e7934549115ed83e3188dcf8fe62a859a065d97d2c39697ccbde86b7490e1b776ba80643e300ce20c0714f722cf631176417b5d9fcc16505ce8a1c70326f1f3c49376a2de60caa58f"}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc004}, 0x45) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x71, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="400b280000002802c26313852642f68a162e25c52793cb9cfc792c3cbdeace918d0fb74237cc4b44b72fb0688881"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x27) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) 2.729755653s ago: executing program 8 (id=2815): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x7) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, &(0x7f00000004c0)=0x5) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) close(r4) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@grpjquota}]}, 0x1, 0x603, &(0x7f0000000700)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000001640)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f6d616363656e746575726f2c73686f7200000000500000006e6e742c636f6465706167653d3835372c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c696f63686172736a743d6d5063726f6d616e6961702c756ee95f786c6574653d312c73686f72746e616d653d6c6f7765722c636f6465706167653d3935302c73686f72746e616d653d6d697865df675d6407eedf7f642c726f6469722c696f636861727365743d63703835302c726f646972"], 0x81, 0x2a6, &(0x7f0000000180)="$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") getsockopt$nfc_llcp(r0, 0x118, 0x3, 0x0, 0x0) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="241ee706000500a3"}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x8031, 0xffffffffffffffff, 0x23497000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xea60}) 2.391632731s ago: executing program 9 (id=2818): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0xf00}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.164789957s ago: executing program 9 (id=2820): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x989680}}, 0x0) exit(0xffff) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) exit(0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) syncfs(r1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x4002, &(0x7f0000000000), 0x26, 0x758, &(0x7f0000000ac0)="$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") (async, rerun: 64) chdir(&(0x7f0000000040)='./file0\x00') (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x5, 0x12, 0xf1, 0x400000000050, 0x12, 0x5, 0x0, 0x1d497c23, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0xb, 0x1000000000, 0x2d, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x1, 0x3, 0x0, 0xfffffffffffffffd], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x3, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0xdddd1000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x2, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xe000, 0xf, 0x3, 0x16, 0x3, 0xab, 0x8, 0x80, 0x8, 0xf7, 0x97}, {0x2000, 0xa000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x8080000, 0x3000, 0xc, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x10, 0x2, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xac, 0x81}, {0x4000}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x0, 0x3, 0x8]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) poll(&(0x7f0000000500)=[{r5, 0x412}], 0x1, 0x81) (async) signalfd4(r5, &(0x7f0000000000), 0x8, 0x800) (async) ioctl$TIOCCONS(r5, 0x541d) (async) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000000c0)={0x8, 0x6}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (rerun: 32) 1.848964585s ago: executing program 8 (id=2823): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x2400c004) pwrite64(r0, 0x0, 0x0, 0x7) 1.790907926s ago: executing program 9 (id=2825): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESHEX=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x18001) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)="2faf9e28", 0x4}], 0x2) sync() sync() r5 = openat$random(0xffffffffffffff9c, &(0x7f0000001280), 0x20080, 0x0) ioctl$RNDCLEARPOOL(r5, 0x5206, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 1.584865391s ago: executing program 6 (id=2826): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESHEX=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x18001) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)="2faf9e28", 0x4}], 0x2) sync() sync() r5 = openat$random(0xffffffffffffff9c, &(0x7f0000001280), 0x20080, 0x0) ioctl$RNDCLEARPOOL(r5, 0x5206, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 1.575952251s ago: executing program 8 (id=2827): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) 1.443520955s ago: executing program 9 (id=2829): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x70000) 1.431753995s ago: executing program 9 (id=2830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac00000000010904000000000000f9ff0a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000001200000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c0002800500010000000000080007"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001200)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010002000000000000000200000a40000000180a010200000000000000000000000908000740000000000c00054000000000000000010c00054000000000000000050900010073797a310000000020000000120a01020000000000000000000000060900010073797a3000000000140000001100010000000000000000000800000a52fdbe2bfc7b4192c8fce5f53e010427091bdcae8135b09b41b3efd53380ca11ff0290411d274d7253bbec2211404e909305c5a61c44b1b80f721e93943c6900bef03d87aca67fe6b9216de5b2631234dc61f3afb250e4764bebd040cfa928b1272cfd059bd89452f6eeea0608eafd288af20af77347eb210cf98c01f6ca735f50282c89c6b3cf"], 0x88}, 0x1, 0x0, 0x0, 0x2800}, 0x44040) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) flock(r2, 0x2) close(0x3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) write$UHID_INPUT(r1, &(0x7f00000013c0)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35910d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff8603d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a5b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0xae2}}, 0x1006) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200040c4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000001040)={&(0x7f0000001140)=ANY=[@ANYBLOB="020300030a0000002cbd7000fcdbdf250100090000000000020013000d00000025bd70000000000002000100000000000700070c00000000030005006c00000000004e20ac1e0101000000000000000072be1e901c55c414e8b59c0c9500c70f82c0bb98"], 0x50}, 0x1, 0x7}, 0x0) 1.398847205s ago: executing program 9 (id=2831): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200)) syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000203512128040000101010109200009040000000101200009240105000515007f0c24030505030901082ffb05090401000001022000090401010101022000090501091000001008082501000603ff7f090402000001022000090402010101022000090582094000090401082501010006f7ff00"/135], 0x0) (async) syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000203512128040000101010109200009040000000101200009240105000515007f0c24030505030901082ffb05090401000001022000090401010101022000090501091000001008082501000603ff7f090402000001022000090402010101022000090582094000090401082501010006f7ff00"/135], 0x0) timer_delete(r0) 1.19696213s ago: executing program 6 (id=2835): openat$kvm(0xffffffffffffff9c, 0x0, 0x1a1740, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000001a0001002dbd700003dcdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4040000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000480)={{0x1000, 0xdddd1000, 0x4, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x3000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x80, 0x7, 0x2, 0xdb}, {0x60000, 0x100000, 0xc, 0x7, 0xb1, 0x9, 0x21, 0x81, 0x80, 0xff, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x70000, 0x1000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) 865.589429ms ago: executing program 6 (id=2836): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff480000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 759.111381ms ago: executing program 6 (id=2837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x479edb6fe225580a}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x70, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="840000001e00010000000000fcdbdf25ff010000000000000000000000000001000004a59b006c00020000000000000000000000000000017f0000000235000010000a002c"], 0x84}}, 0x24000058) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYRES16=r4, @ANYRES32=r4]) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000004c0)={[0x1000, 0x0, 0x4cfc, 0x7, 0x0, 0x101, 0x2, 0x7f, 0x2, 0x17d, 0x9, 0x5, 0x4, 0x3, 0x5, 0xfffffff6, 0xffffff3e, 0x3ff, 0x8001, 0xfffff801, 0xc, 0xd, 0x0, 0xfff, 0xb05, 0x7, 0x8, 0x5, 0x8, 0x7, 0x2000, 0x2a13, 0x3, 0x0, 0x7ff, 0x3, 0xd, 0x1, 0xc6b, 0x6e13, 0x0, 0x1, 0x8, 0x1, 0x5, 0x0, 0x7ff, 0x5, 0x7f, 0x100, 0x4, 0xffffffff, 0x3, 0x0, 0xffffffff, 0x5, 0x5fd, 0x4, 0x8001, 0xfffff801, 0x9, 0x0, 0x1ff, 0x2a, 0xfffffff8, 0x3, 0x1ea, 0x100000, 0x3, 0x7, 0x3, 0x3, 0x5, 0xa, 0xf686, 0x2fc4, 0x4, 0x990e, 0x0, 0x7, 0x2, 0x800, 0x9, 0x5, 0x1, 0x7, 0xe94, 0xa4, 0x7, 0xff, 0x6, 0x5, 0x10000, 0x9, 0xdec, 0x6, 0x81, 0xf94, 0x9, 0x2, 0x2, 0x411, 0x0, 0xffffffff, 0xfff, 0x3, 0xd, 0xf89, 0x4, 0x7, 0x7, 0xfffffc00, 0x9cf, 0xb, 0xffff, 0x1ff, 0x3, 0x4, 0x1000, 0x2, 0x5, 0x5, 0x1, 0x5, 0xfffffffe, 0xfa19, 0x2, 0x3, 0x60000, 0x8, 0xfffffff7, 0x93c5, 0xff, 0x81, 0x5, 0x7, 0x6, 0x3, 0x1d, 0x4, 0x40, 0x9, 0x834e, 0x4, 0x100, 0x8, 0x6, 0xc1, 0x3, 0x9, 0x6, 0xbc1, 0x9, 0x3, 0x9, 0x6, 0x2, 0x64, 0x9, 0xfffffff8, 0x6, 0x2, 0x100, 0x8, 0x22, 0x80000000, 0x1, 0xffffffff, 0x66, 0x9, 0x1, 0x6, 0x4, 0x0, 0x0, 0x10001, 0xffffffff, 0x3ff, 0x8, 0x6, 0x9, 0x7f, 0x5, 0x10000, 0x3, 0x92ac, 0x5, 0x59, 0x80000001, 0x8, 0x1, 0x8, 0x3f, 0x7f, 0x10001, 0xfffffff3, 0x2, 0x8, 0xffffffff, 0xd, 0xe6b, 0xc0000000, 0x6, 0xd6b2, 0x458, 0x9, 0xb34, 0x3f89a588, 0x9, 0x81, 0xb, 0xa, 0xfff, 0x2, 0x7f, 0xffffff5b, 0x8, 0x4, 0x3, 0x800, 0xffffffa3, 0x1, 0x9, 0x7, 0x3, 0x6, 0x43e86eef, 0x1, 0x1, 0x1, 0x4, 0xe, 0x6, 0x6, 0x6, 0x3, 0x0, 0x9, 0x7, 0x80000001, 0x4, 0x129, 0x4b, 0x5, 0xa4, 0x8001, 0x101, 0x101, 0x4, 0x3, 0x10001, 0x4, 0x8, 0x1, 0x9, 0x5, 0x1, 0x4, 0x2, 0x48a4, 0x2, 0x8, 0x87a, 0x3, 0x1a6, 0x0, 0x7fffffff, 0x6, 0x91, 0x0, 0x2, 0x9, 0x7, 0x3, 0xc4e1, 0x1a8, 0xe9b, 0x3, 0x2, 0x3, 0x0, 0x8000, 0x3, 0x3, 0x4, 0x8, 0xfffffaa8, 0x4, 0xaf9, 0x1, 0x7, 0x401, 0x80000000, 0xfffffff8, 0xc7bb, 0x0, 0x0, 0xfa77, 0x828, 0x7, 0x8, 0xd, 0x7, 0x1000, 0xff, 0x2, 0x8, 0x2, 0x44927759, 0x1ff, 0x693, 0x9, 0x6, 0x1, 0x3, 0x10, 0x4, 0x4f8e, 0x5, 0x6, 0x2, 0x7, 0x9, 0x9, 0x1, 0x10001, 0x2, 0x5, 0x1, 0x6, 0x8, 0x8e0, 0xffff66e7, 0x5, 0x4, 0x1, 0x3, 0x2, 0xfff, 0x3, 0x6, 0x8000, 0x6, 0x0, 0x6, 0x2, 0x8000, 0x7, 0x0, 0x3, 0x11e5, 0x10, 0x2, 0x4, 0x9, 0x7, 0x7, 0x0, 0x6, 0xffff, 0x2, 0x2, 0x400, 0x7, 0x1, 0x6, 0x7ff, 0x9, 0x1, 0x6, 0xfffffffd, 0x80, 0x2, 0x2, 0xc, 0x5, 0xfffffff7, 0x0, 0xabd, 0x401, 0x8, 0xff, 0x2, 0xffffffff, 0x56fff9ee, 0x9, 0xffffffff, 0xf28, 0x9, 0x80000001, 0x89f8, 0x5, 0x1a7, 0xffff1feb, 0x4201, 0x3, 0x7, 0xfffffffd, 0x9, 0xfffffff8, 0x8, 0x697, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x1, 0xc, 0x1, 0x9, 0x7f, 0x58, 0x53, 0x9, 0x7, 0x4, 0x4, 0x9, 0xc000, 0xab7, 0x2, 0xc7, 0x5, 0x9bc, 0xfffffffb, 0xf, 0xfff, 0xb7, 0x8, 0x9, 0x6, 0x4c94, 0x1, 0x4, 0x9, 0x928, 0x6, 0x9, 0x0, 0x1ff, 0x8001, 0x0, 0x2, 0x100, 0x3, 0x9, 0x5, 0x2, 0xb, 0x0, 0x3b4, 0x9, 0x10, 0xfffffffb, 0x4, 0x10000000, 0x7, 0x2, 0x3, 0x9, 0x6, 0x431, 0x1, 0x1, 0x3, 0x1, 0x5, 0x5, 0x2, 0x10001, 0x2, 0xc98e, 0x2, 0x412f, 0x9, 0x6, 0x7, 0xaf, 0x1, 0xffffffff, 0x7, 0x7, 0xe97b, 0x8001, 0x0, 0x6, 0xc, 0x9, 0x3, 0x9, 0x3, 0x81, 0x1, 0x4, 0x4, 0x8, 0x3, 0x100, 0xaa, 0x78, 0xe8b, 0x2, 0x3, 0x5, 0x0, 0xfffff001, 0x4, 0x0, 0x9, 0x81, 0x6, 0xe, 0x2, 0x4, 0x4, 0x4, 0x6efe, 0xffff, 0x8, 0x8, 0x5, 0x1ff, 0x808, 0x6, 0xfffffffd, 0xffffffff, 0x8, 0x0, 0x5, 0xc3a, 0x7, 0x8b74, 0x8, 0x2, 0xf, 0x2, 0x0, 0xfffffeff, 0x3, 0xe0, 0xa883, 0x7, 0x4, 0x5, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffff801, 0x2, 0xd, 0xa7, 0x1, 0x9, 0x1, 0xbef000, 0x2, 0x2e4, 0x3, 0x3, 0x9, 0x2, 0x7fffffff, 0x8f7, 0x1, 0x6, 0x80, 0x7, 0x7552, 0x40, 0x400, 0x4c, 0x5, 0x7, 0x2, 0x0, 0x5, 0x100, 0x9, 0xc, 0x1, 0x1000, 0x6, 0xe24e, 0xfffffffc, 0x2, 0x3, 0x8e6, 0xfffffe75, 0x3, 0x7ff, 0xfff, 0x2, 0x0, 0x8, 0x2, 0x6, 0x2, 0x80, 0x3, 0xffff04bc, 0x100, 0xffffff81, 0x9, 0xb111, 0x44d, 0x0, 0x8, 0xfff, 0x3, 0x4, 0x1, 0x6, 0x7, 0x8, 0x7, 0x418, 0x6, 0x6, 0x7fff, 0x3, 0xa4e8, 0x6397, 0x8, 0x1, 0x2, 0x6, 0x200, 0x6, 0xfffffbff, 0x401, 0x6, 0x8001, 0x101, 0x49, 0xfffffff7, 0x7a, 0x80000001, 0x8001, 0x5, 0x9, 0xffffffff, 0x4, 0x0, 0x400, 0x3, 0xa, 0x8, 0x1, 0x7f, 0x8, 0x6, 0xd, 0x9, 0x4, 0x8, 0xfffffffc, 0x4, 0x2, 0x0, 0x0, 0x5, 0xc, 0x8, 0x3, 0x6, 0x40, 0x7, 0x4, 0xd, 0x7, 0x1000, 0x1, 0x9, 0x401, 0x4, 0x9, 0x8000, 0x8, 0x10001, 0x7fff, 0x6193, 0x4, 0x2, 0x5, 0x1, 0x5, 0x6, 0x7, 0x5, 0x1, 0x1, 0x956d, 0xb, 0x3, 0x7, 0x7fff, 0xffffffff, 0xc, 0xfffffab8, 0x200, 0x200, 0x101, 0x1, 0x5, 0x8, 0x0, 0x5, 0x1, 0x4, 0x1, 0x575, 0x9, 0x6, 0x2c, 0x3ff, 0xa5d, 0x1, 0x6, 0x10, 0x0, 0x8, 0x5, 0x5, 0x0, 0x1, 0x8, 0xfffffffb, 0xed, 0x4, 0xa51, 0x2, 0x400, 0x8, 0x7, 0x4000007, 0x6, 0x7, 0x7, 0x5, 0x34a, 0xbd9, 0x1, 0x3, 0x7, 0x1, 0x9, 0x6, 0x0, 0x4, 0x14000000, 0xfffeffff, 0x1, 0x3, 0xff, 0x7, 0x1, 0x10000, 0xfffff1f8, 0x7fff, 0x1cb, 0x5, 0x8, 0x3, 0x0, 0x87, 0x1c, 0xf6, 0x1, 0x9, 0x0, 0x8, 0x7, 0x3, 0x4, 0x6, 0xe, 0x8, 0x10, 0x9, 0x7, 0xa0000, 0x5, 0x2, 0x2, 0x0, 0x9, 0x1, 0x753, 0x6, 0x80000000, 0x1, 0x4, 0xf3, 0xdc2, 0x4, 0x7, 0x5f2, 0x3, 0x401, 0x36, 0x0, 0xcb, 0x6, 0x2, 0x6, 0x7, 0x6, 0x1, 0x3, 0x3, 0xace4, 0x55922de9, 0xe0fb, 0x9, 0x2, 0x9, 0x7, 0x6, 0x7f, 0xffff, 0xa8d3, 0x1, 0x100, 0xffff, 0x8001, 0x8, 0x0, 0x0, 0x3, 0x6, 0x6, 0x54, 0x2, 0x7d24, 0x6, 0x3, 0x6b2, 0x9, 0x0, 0xe, 0xfffffffc, 0xa337, 0x4, 0xfffffff8, 0xd02, 0x2, 0x4, 0x6a74443b, 0x3, 0x1, 0xed, 0x9, 0x2, 0x0, 0x4, 0x7, 0x7b, 0x5, 0x4, 0x0, 0xe, 0x8, 0x0, 0x7, 0xb830, 0x10000, 0x3, 0x9ae, 0x7, 0x80, 0x7fffffff, 0x2, 0x2cb, 0x0, 0xffffffff, 0x9, 0x3, 0x7, 0x7, 0x2, 0xffffffff, 0xfa7, 0x6a87, 0x400, 0x4, 0x9a00000, 0x9, 0xfff, 0x8, 0x2, 0x3ee, 0x5, 0x3, 0x7f, 0x80000000, 0xe239, 0x200, 0x1, 0xfffffffa, 0xfcd9, 0x9, 0x9, 0x8, 0x7, 0x6, 0x10001, 0x8, 0x6, 0x2, 0x3, 0x80000001, 0x0, 0x76e3, 0x8, 0xcab, 0x1, 0x7, 0x80000000, 0x4, 0x80000001, 0x10, 0x10001, 0x40000000, 0x2, 0x1, 0x4, 0x3, 0x7, 0x5, 0x8, 0x4, 0x7, 0x3, 0x7, 0x2, 0x0, 0x0, 0x101, 0x2, 0x40, 0x3, 0x5, 0xd9, 0x7fffffff, 0x2, 0x4, 0xdb, 0xc, 0x5, 0xd7e, 0x7fff, 0x5, 0x7fff, 0x400, 0x5, 0x8001, 0x2, 0x4, 0x5, 0x2, 0x0, 0xc28, 0x3, 0x7, 0xffff0000, 0x79a, 0xde3e, 0xff, 0xffff0000, 0x101, 0xfffffff7, 0x1ff, 0xfffffffe, 0x2, 0x4, 0x7fff, 0x4, 0x6, 0x1, 0x8, 0x1, 0x8000, 0xfffffff8, 0x200, 0x9c7, 0x3, 0xfffffff7, 0x7fff, 0x100, 0x8118, 0x6, 0x9, 0xff8, 0x2, 0x40, 0xcc, 0x8, 0xefc, 0x10000, 0x7, 0x3, 0x800, 0x2, 0x300000, 0xb, 0x5, 0x80000000, 0x40000, 0x9, 0xfffff801, 0x401, 0x37e, 0x5, 0x8, 0x5, 0xfffffffa, 0x5, 0x51b3, 0x8, 0x9]}) inotify_init1(0x800) r5 = socket$netlink(0x10, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f0000000e40)=[{&(0x7f00000004c0)=""/65, 0x41}], 0x1, 0x1, 0xffffff7c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r2) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000001800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001640)={0x16c, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_TESTDATA={0x5, 0x45, "c8"}, @NL80211_ATTR_TESTDATA={0xe0, 0x45, "61cf5c6969f80bcb4d58c55145ab5646ec9b778a83302698be0129eb29e24fde36db4cb1d20468e71e2b89ca78af1678e305defe6fa3e192ae16d9e6aea3347adcae172e05b57070f5079eeaeba90d300ea41dff92ef97eb0e93a5c273ce99a93caf3d0279edfc3ec14ccc68577d63045fdd4ccb7890df1c3e107baf1bd3189d89971790bc7fd6c4a3b432e5f4f21e8742497b341ef85895794ea44c934420612d21146eb001f5b69b453386deb1b2baaf9e2d553cfabda4562a0ae653697422927af4def62a824fbc5e143fd6b11b8a14dda294f5bc5ba0d5ac142c"}, @NL80211_ATTR_TESTDATA={0x64, 0x45, "f171c61361d4160ef91c656dba1b36fbee4ae4515eb4a18e7934549115ed83e3188dcf8fe62a859a065d97d2c39697ccbde86b7490e1b776ba80643e300ce20c0714f722cf631176417b5d9fcc16505ce8a1c70326f1f3c49376a2de60caa58f"}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc004}, 0x45) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x71, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="400b280000002802c26313852642f68a162e25c52793cb9cfc792c3cbdeace918d0fb74237cc4b44b72fb0688881"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x27) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) 611.440605ms ago: executing program 8 (id=2840): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000900)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0xc0) ftruncate(r2, 0x2007ffb) (async) sendfile(r2, r2, 0x0, 0x1000000201005) r3 = socket$packet(0x11, 0x3, 0x300) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8000}, 0xfffffffffffffed8) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x4, 0xfffffffd, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000240)={0x7, &(0x7f0000000080)=[{0x2, 0x80, 0x3, 0x1}, {0x5, 0x1, 0x2, 0x3}, {0x4, 0x3, 0x6, 0x1}, {0x9, 0x40, 0x10, 0x200}, {0x4, 0x0, 0x4, 0x100}, {0xd, 0x4, 0x6, 0x7b}, {0x4, 0x5, 0x9, 0x8df6}]}, 0x10) (async) syz_emit_ethernet(0x11, &(0x7f0000000000)=ANY=[@ANYRES64=r4], 0x0) (async) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 595.157105ms ago: executing program 8 (id=2841): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa00000000000000000100fa851000000600000018000000", @ANYRES32, @ANYBLOB="00f90000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 594.915365ms ago: executing program 8 (id=2842): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x10200003, 0x801, 0x4, 0x7}) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000180)={0x2, 0x40, 0x0, 0x3ffd, 0x9, "8352ce011773757348ebe9ee00"}) syz_usb_connect$uac3(0x3, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xa4e, 0x2040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x7, 0xc0, 0x5, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x22, 0x3ffffffc}, [@output_terminal={0x13, 0x24, 0x3, 0x2, 0x306, 0x84, 0x5, 0x7, 0x10001, 0x8, 0x40, 0x2}, @selector_unit={0x5, 0x24, 0xc, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x10, 0xa, {0xa, 0x25, 0x25, 0x0, 0x7, 0x9f59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x1, {0xa, 0x25, 0x25, 0xfffffff8, 0x6, 0x6}}}}}}}}]}}, 0x0) 359.183461ms ago: executing program 0 (id=2848): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x31, 0x829, 0x70bd2a, 0x0, {}, [{0x78, 0x1, [@m_nat={0x74, 0x1c, 0x0, 0x0, {{0x8}, {0x4}, {0x4c, 0x6, "ef72dc58d0fa8f1d3e9102163343a67dd6de16f01067c77784096b1fcf2872e985e5035c6529c19bb22aa4925908215a9c17ef02b550d2d9343a75dba073ca4c94128d281db316ec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x8c}}, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006160fcff00000000bf91000000000000b7020000020000008500000000000000b7000000000000001500000000000000057430bd290dcb8429e92085ba2c7345047dfc9e307ec05405d881c2beb78be012379ba3ea4308c0b6a8ac01dc"], &(0x7f0000000100)='GPL\x00', 0x2, 0x103, &(0x7f0000000140)=""/259}, 0x7d) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r5, r4, 0x0, 0xfffffffc) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x800000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x202a488, 0x0, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c436792f472909f40c7648c701722e8feddbc81a5d178c6d67d0d2df0c0dabc2993f3134099c2ef91d439ed92ba97b99bf8a575c99b620b12653a8de69f250e7fa75899c08069bbc2cf9c93bb1af02c60f5", @ANYRES16=r8, @ANYBLOB="0106000000000000000009000000240004800c00078008000500020010001300010062726f6164636173742d6c696e6b0000"], 0x38}}, 0x0) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000000), 0x220000c, &(0x7f0000001680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') r9 = socket$nl_audit(0x10, 0x3, 0x9) writev(r9, &(0x7f0000000840)=[{&(0x7f00000005c0)="73435985ffd3e794df2d37e24960b435", 0x10}], 0x1) (async) syz_mount_image$fuse(0x0, 0x0, 0x1a42028, 0x0, 0x1, 0x0, 0x0) (async) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x0) lseek(r10, 0x101, 0x1) (async) getdents64(r10, 0x0, 0x0) write(r6, &(0x7f0000000100)='1', 0x1) (async) syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800510000200100000040119078640101010a010101830304000000400000089078"], 0x0) (async) sendfile(r0, r1, 0x0, 0x9) (async) ioctl$TCXONC(r0, 0x540a, 0x0) 303.680112ms ago: executing program 0 (id=2849): r0 = socket$netlink(0x10, 0x3, 0xb) sendto(r0, &(0x7f0000000700)="120000001200e7ef00bf80ac521253c18c51", 0x12, 0x0, 0x0, 0x0) 294.166243ms ago: executing program 0 (id=2850): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000002100)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee4, 0x10010, r1, 0x9edb6000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) r2 = open(&(0x7f0000000000)='./file1\x00', 0x20041, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000000224effffffff", 0x58}], 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x10000, 0x81) unlinkat(0xffffffffffffff9c, 0x0, 0x227) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x132d, 0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0x0, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xf1d02b40ce2dc9c4, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0x0, 0x6, 'batadv_slave_0\x00', 'pim6reg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xff, 0x10, 0x5, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1004, 0x103, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x391}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@remote, @loopback, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 'veth0_to_team\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) mmap$binder(&(0x7f0000c4e000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x7fffffffffffffff) 241.562664ms ago: executing program 1 (id=2852): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x4) r3 = dup(r1) ioctl$KVM_TDX_CAPABILITIES(r3, 0xc008aeba, 0x0) 195.530385ms ago: executing program 0 (id=2853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000016020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000014bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 194.637395ms ago: executing program 0 (id=2854): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES64, @ANYRESHEX=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x18001) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)="2faf9e28", 0x4}], 0x2) sync() sync() r5 = openat$random(0xffffffffffffff9c, &(0x7f0000001280), 0x20080, 0x0) ioctl$RNDCLEARPOOL(r5, 0x5206, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 194.389525ms ago: executing program 1 (id=2855): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007910000000000050c3ba0000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) 125.370067ms ago: executing program 1 (id=2856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x5cd00, 0xa4) openat$incfs(r2, &(0x7f0000000300)='.pending_reads\x00', 0x40200, 0x61) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e00)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0xf8, 0x228, 0xf8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x5, 0x3}, {0x3, 0x0, 0x2}, 0xb, 0xff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x0, 0x2, 0x1, 0x5, 0x1], 0x1, 0x7}, {0x1, [0x4, 0x7, 0x4, 0x5, 0x0, 0x3], 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xfffffffd, 0x9e9, 0x6f9, 0xdc8, 0x8, 0x2c, 0x7, 0x1]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffff7, 0x0, 0x7}) mlockall(0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xf46bd000) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38000000550001002cbd7000fedbdf2507000000", @ANYRES32=r6, @ANYBLOB="140001005b"], 0x38}, 0x1, 0x0, 0x0, 0x2200c010}, 0x40080c0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="0f07c461fbf055cc66b81f008ee00f20d835080000000f22d8f30f2c24d0660f38805ba2c744240051000000c7442402bda958a1ff2c24f30f20190f00db2626f30f01ea", 0x44}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 125.183227ms ago: executing program 1 (id=2857): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff4c0000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 125.063167ms ago: executing program 1 (id=2858): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x700}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 124.340367ms ago: executing program 1 (id=2859): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x800804, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x552c, &(0x7f0000007880)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=@newlink={0x40, 0x10, 0x421, 0x70b925, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140001", @ANYRES64=r2, @ANYRES32, @ANYRESHEX=r2], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r4, &(0x7f0000000740)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t ', @ANYRES8], 0x27) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRES64=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0xfb, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000580)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x77, 0x2143040, 0x7f7f, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000002080)="cf6dcad1f5c5c712407a3f1d491539b627c8255f86be020a4f0ff8851dc6d8ab33ec6d10e619ed910e4811af9ee1581a1d0687020937fa7005f26bab6e9591923f5c1086ecd154e9bfbec5afd856afe3429448161089fab21bc7b9ab5158aa219761d845b8307b1fc87605dbaa4cf80fc74737d4d4cfc68fe06c16b87b759a91a368c70b2e05ee4acf0f9111df10f30c4e16b7ee3d1cf380273ab8e6ca382e06022f539c0c4e62b1ad827ff576249375b2231e47038c67b3353242c81baaf90b3645ed12504a4ccf4b0e6419804399f9fe7f60df022a12405093264d225e8003061dd690cd169f922da3507717ade8bfa8ae2c45eccd32e14ffc4e11ae939e90fceb53e0bde3916d9e4e36d1de07fbbdd2dbc24145e1e7bc8f3423f4c3426406fa499a6de404e6827db35840a726a1582be4457f0ce0cde1c414e2f497ff8ff4cb606962f6acac00230b2cbce10b09d2f6b33b9f4efb3839a222c4bc5bb3e552056f8c2b7bc84ab62434bcc61f64b74367a9ec857ec7f5a09ab6b16667bdc846434d22dd95f7b8a47a1246a39d135de1ffc2946cf36034ef8d753b7d692aa00c91fc1636c0be309ef4bf345918a386e76edc3680ee574528bf3369741c9104bd77e61aa72d8b82162bb150d4232e21c8c9453d89467f9e00fd5148bee49da206fbe6357bbc31b111e68f0b95c37063a6c5401a094819e28a2104c37db5624fe075d0b2cc50f7140f4f49396b43d14f93ab9f9649e2dc694cea520cc068a3869a3ea4ec599a995f69d936dd62e2b81499f3ed4879d25b90aff3eae74b28ae35f18f0b457a5af35e2ede43786958b127ef76723d6ffe0e7e3346d5a9f0aabcc0d93fc085316516ef79b3e2400ed2946a0d1b2ace13ea7ed39ac51cb9d98cf70feb30d5bad39f6b5903e8ab654f48bfd7e54dcb502b158f68bd96e6beb4392fa59d3e1048803e4749f3ad522414d3180de3a0da1227bfbb704b66ae6a85b1c2c51e484622eeb169760e9ec50e14c014a0cc05aebbee77f31b62834169cb49bec0c43090506c8f34ca6e108e6328ced7a9f11cb3d57398b0b1d84c9e75d5cdf17766d619dc2658aacb900ca0f93aa248d702039417b558b8ab4a41921154153cdc86d999b2e7932eabb55a4e6c8c03029c851a9e84ef84acd9affdff84ffc063bb1ab6c97e169071edbe524462fef9116edd9fbb5032478cd5ad2b2c5527fdf64223dbc952fb528f7b1d817ca787f8a57992b40202ca124cd27eadd6d70351379a6456b697b317d101514d1d5d61002e4f3bcf7555c6b36c4c1d18cba0fd4fd7b3a246b72d47d7c1908cc9c3a29fbf43019b5179b0975d7680ec15720f7fc8b96b13522d058ef009719580227489ea68062cc735cca0b6a60a10c44f2b75d2895be41a278c50e62f979674c9e507dfa7a0c087c4fd43ccc32357e34c0bcc526fe43bed33e99632c84ea59780f78e7954d8e5430c9acb7d9dd28ac3761515cba6064fe81d3b4541dacfd6fb916735833704a5cb1723f867322fa806a20d5029a608986b5019402035bebf3e099547702409815bd1d3c63072fb0fc216c2186048f1e4ae5288a12a5c9b25f7649899f84c8aedc3721334d7bcdb656f8e3c0f2b7e40b837a15c9d6472b6acb58a39babc65d08e529f2f690ea780f43c35698610351fde4615efafba129b2b619135f8af77c7291483262c5555f4d66173b34c5c7f1c415cd6ab15ae4cef34cf5680e11332c6863d2140f00cc3a337b23afb0080fa54360282086b0c0faaf2bc2a9f7335a96fa8af6a52a1e04eed2e7c337d1e378545ded0d0453b8a16b6d0a90860dfe560528515005ba852a314b4540206a8513e73212c65fb4b35f4ac7050d18bd62a6c720cfda30cb2385d3d5217655db1f344fc34361b83b22d31a040366acbdc28d397254b41c3b1f0d20e0a5db4df6338e78ae09b38f82c71fb0208afbb506461384bf578c607e05ad5a6ddb708b9add5d4d363877659a663827136b4dc1b4012c7035a56bb91e14a3d22b3ac3989f91d78808758d1b5bfdbfc66d3389e3362987e13bf9a9747373c90c0c658b7b832eff19aa2f3667f79bcd073765308fbabf2d612d0445fa1be6280cb9d0ba759d218ae971d3dd5d458c10d14f154109bfb2fd03523ac5748bcd8582dc3be5c28ef4be94cb55fdcb12a6271dbb7f11fd33d61382096588167a2b20b02cc43b88729985073a5b21b8e4bb2c43894d7c88bf111576b3b56f905b1f23f0570c07b475d5f86508c3489f4f2e2d0f3b11bfd6c3c58930483f9345f4f755089848c42361d4b0c0e855935d7f6793f78a68b554358b810cdcdec350376c94486c67fc5d11c0a68873312b40b49bb29aca16e1f3e3ce4da7a9e7aaa6ec1d9932b78d9c12c45e61b5f6faa6ffcb21608fc61bc4180f91d26f9db592c98e532d60c28e9fab794ab8a62c21122397193d8b5b72bf050b07f79df5e14069b56359835e3048f182629328e4a72a1fd0530182c802744611637e93deabc6c3ee30041025026be97ac314eaf7b399b0702cf73848e54f355d766121361398609078057473c2aa46b2fbd7e7a7d6d039615eea23fd223c49a9b5b5fd7b0c6f30c9b0e55fbebced3c90ceb668e6dbd5e6511c19d32c29b5fef7d06cf2ffff7872bd541d0fe70e5991ba3c19e72d5533e6fe9652c21338ced211c7d9e912486b4de29998ef4cca892fe94972b31fa33e781386b75b5d6980a9bfb887d7485d71f6744a6f87bc407ccd03281e10eb1bafd5d9bf279d362e2a49e54187e40abb06e21ed8425135a169ba5b8e1a806951352580ae135dfbbe3395e18ccf67fdb891903934739b56dc0e49e258552dc66d46eadfed9a7ceeabf20d02aee2c8ce4060382474252ccd9bab03d7e8eb77195bb712c19e066153bef5a212f2a450d4a1280d243928f3add450c2544c800b507c8b8ffc5d7f3cd9a4526505d05d04fbfdd0fc1f996ba3f4a797c96b24af37c15859b4bcda9234750fb6acef8dc20893ac5051b3d6aee60f01fc34e3b6753848fdca9b18e461c87f08fb8d67ddce234ca56bbe021f468f964ec1416ba6df0434440140090edd222cb9534830fec026788f43899737771e67552df68fb81d90aa90fcc1149149aaa96c1730829c6856407e5194dd2ec7cfe5fa419c2ea6127039ae188649b2cfccb9faf59f45dc9af76f3cb17c8224e68fb5f81b4556980542a928f9563bebcf3db248cff2183fffff15710432f8691041fa8aceb65b6454e9c375402b599503fb4881a3baa5ba58893cac154575ef0ec8efe35a6eeccb98d081f6d4cf2661b484765ce95bca5bda75fc90e630e355d0dd6d22a5d4c7990931ac160da14f211c33b668edb93cd9c87de3881c47e4b0fab746d0e931600478c9cc2e3cc08eab1ee7cb4e3749ab44e7ab4be15e5b031e58d59b294fbe794fb5760a2ceedd1cfc4343b1c2886b0721945a109384cb00fe6e9bdf09e5e406e757a6f24e659495a11a93382d5425d6fcab1d002303aa1531a120b8f30dd17cac7385bb8455503b2ff0daf8b4dc5353f88f34c894fc0b2fd2920c97432aded8b89fba9a9db4c4f3498043f936a1cb0dee7f5d902b1f6d909b637b8e2f05d31a2640eb1ac556ede22006466014d4a407e3486f94ca676ef39be6399ca24bff48b03ab1da71d1a5e3994d0a8723894bfbbc33969923970df3a9fd0b5084a6cbb41f79a0d3338bb61e7dc2cf795f2fa883aa61d7820c4e2215744dd9cf517cc5921850d1d9aaaaede5fb125e663c830c2414655d6af43a90f9b79eccbc2c009b963b503827c7614ab8824b3289ed8e559ed644a163db18fe66789037eb599be39fb66955a27a4831a59322d39b95b6d571d8fffb5352a0297b449719a5246247ec4c24f40b5ace1c8e76fa1029a47065af4adfc03b2732677f81bf9729ba06380a330cb388c9e4f50a0cf4ceb5ea8b6bdda8df0839de274c0c7a57f7a9173d21832b7f19ee8cfc340eea461ce7956f986f828c91697c5a241cb9efec40a1a0f34a2a63821dbd50a111b368a034823191dbd3b7a9fe8bee53cada1902f2a278efe3f10eecbf8279c2f9b2e7bf542076bf0bb41e9f21e766741f3ecfbd5a38158b1ce884255cc227a7b7196f966b631c228fea918d8dfee020dcf4c40231c0ab6fd7ccf4e7444fb360f2be3c1519a577dae770a14cd90df85490995fa8553fb255ee9807e0c7617c582f82ac56a0d902c8cd58244cddcec23cf2a05a79b474c716d9ea92bc28b0132ec48a3c5257dc7e1d9cc3f760d559b5c12ad75c95497962f9a564b0d9ed29f44f63b2c56169b2151d699e8d2d570d94f5f37898d3d8abde9253354fd146af62ccfd171d9014fd4d142e2e390f3ce2370165a01aff0fe566ec44e3084815cecc85540d84d8a11d0504fbd95f2c2709b87083b3cfffe36f611a4a6b9e4237a350d1ad4b1e0239946d86ce535e9f07def01a5e6d2e65ee59f380e55c9f295478c5589425852fd22eec2d6e555828ffb4212b33ad530c38b76254d2baac6bff5f94d3ba19ff4b35cb1c972c0b538e1adb5da70affc99c99c0613bea6111848054b416d26368c90784d845f0507f89fd058381dc7d6c6bb81dae94d11e3a0de778aca82814fec0b63780fb2b4f480da063411cd66356f87e68780448ed0c1f3836a46e536609d672d7cef1cffa0614a4f6286ab7f3fab0baf595b4c3c2e43f979f4f4a89165c24698f71406b4330a333f6c8ee018420b2b47735295043123459fafeb5886fc044a3805b162714a3436f58264c0713a4be82a7550f37f88cd7f61c0ec27d887285da7ecb4eb32963c8205eff6d5bf532b72976c5f0a24d6d4d2bf4030f04a47a15fb4de2631361fe0895aeacd2028401c5c183223647c1e765e6406542eeac4d979e6a493e389a649af7ddb35fadd32cf1edaeaaf0982ae8131084ae4759e2af1dbd007f7ce00900437be6d8d3559210b3011d1fe52e8485cc5c14ad4aab4c03c7dec4302e7f72abb7fcc799899cec17308151a758b810369c4d53c443cb1278709df6336f84fa39e51d208b4507a31e6f06352dbd99d7dadd86215e47ed645a9b89bdce630cf80fc1fe59dc31eae39010a930965b3b0e01096347158d683de6888f3284c1fd47b3e79e0fcc299cd4f519ce067a007ae7ee906d639789fedc850e60a7b4be9dc525e3e58b01f24b065c4b21b9011e74030aba77931bec74698557b4768ae41eeb4caa2f530578bf1f9379fb623a27561bba03c7623400ef975ca2e2d6881e0f96fe1e7f9ec0e8f6aeac30f70f848399c6dc9c4e58bf50aacbe566965b257943f6c9ffe210af0cb488488d67b09164d98f3254cc313f7cf8dab1f2e1ed3a7e4a86ad85707d4fe0e7fe483c7f311912e92bee9b17819b53a39c374cfbadf8c3641bae4177aafacf3394af12310f222dc0a67eba49c1475da8607c25f3ee7b1e1e0961c7d319b32ab549c002b93852af7146f5e74aab020446d9a446582a2bc19a730bafcca463fbe0cf2664e10746ddbf0966ec1e327e1f8fa6bb67e18cf849fa810c938695de5f8df98d3004065c787181f4bd8324c59b18972ac5ca92f96c51b4a63ea130712d70a51c49def99feb37312fa6a52e188de88f5446fa4688514bf96f195bfdae4b248445ef5a37e5c0169c7ee42a8e613e71793486bfb24e37bd0d9f0cfb3db61b45ed731edd5c4bd7b6b133f5f3f51fb3a12e9e43db5a23a4c6c787c803791341f10aa083760413724031ec83d5d5c03e9d3585e6a6c87f51ad4db6d678cae14936c09e24fba69e90fe4c2ebed615e254b1d2a25c12b07c1226c0e9fa9112a49cffc9238d3303d3a9a293c5bdec80545e76b911aec6f956d2122d0ee2bee424aee05e0a25a7ff72e3e1c10f590380f82f1e693fb45b1466cbc7e8ee741ca97775c2ae15c1ad0f4a8221c55e82b4e4ddbbb3d88516fdc26969707143e3175f56b07ea8a7d40660ee346a511e0985c6cde95b573dab7c53cb9d32eb18bdb67147b562dd99124d744703492a89dc8cf387ad17a992a6850ee683953c70547f2c70ac44ddc4563fb0c0c23ac7b806a0172a3a74db45378568306ab3036b5348f96ddec344a899b6058179c070cb5f3a478a02d94dbd836a0e2223194e406c2296ceb6dd39667ce62b4c191889ea052f382b9c051c272480111fe287b84c10cf7512a6dd0a601a1cb41545915925a63bd09f9d77a1bc156a7d822e204029363b3c713c5cbef590efd01c4ffe00b816745a37d83b27ab05c3a0c2d6ff800276f3fe502bb3bd7b60b38d32376246a3384554072fe63ec409a0182d588b839d319c680f830583db3e4f5071eaa066689e9e19539d9a12fefffe223288b77600dabde9b2bea871cc1ea2b3318a9699d736f02490d76c1e457aaf45ce318445ce10625b43059694e996ace387580589f9f37944b799337fa38ef9292d2276e0f659471134aaef911514212553779be2ba00816187465e278ba2d03e66cd633f9a274ce882ae971f2d07cb4fde38bf88327aea83d5303011b0263f24630916b796d532e5437179882b0470dbf8d693bbae4015ef28b3d57b5e3b643068dc1d1921291f4f1280a8183532298dffc2501cd3ff0bfb6b0e61d2a59c596f21b98db4d730e155936e98c95c96ac6231b1232e4ed89ce65311fe66199e113f9f69084c31444ae9f106e909bc070d83c1cffc514189c1e0b6763c2732a227a6229407af592772c2b843fb944896ff61161449b6df045ba618d117d8361733198f0963850df3e077aa538571efe279f9c7e006e2c882f5301706ee2bbbe769164cf7d9597d0142d0052641eb43a9ffe76d978384ea8c10050a80021d3c9177fcb29652b4906081d926ea23e749c9272731aff7fd0c271ac4859a5829c5b406a1c363752fecb1a76b201a0df467efd6ffe6adc0debe36ec6d1fc84ccebfa07cb136bbea0f1ef74983bdfc087e050430f5aa395cd8786b609941fbce55ab90e00000000000000685cab24847d85f8bc7a5784a4367ba06690cf1a88acfeddcb7cc44c9797f4f0e5daf9d301c6e702652268530c22df26d14da8768a8951f26849fa1e20015878cb6332d033531b8128233e61094cfc5dd71ba9af36ba6aa1c37b24805a45c3dd302bbc1dc8e9348f9a47540e14016bd5357e7978092497b800a97425363a42454eb04c32c9ac959fb37eb00ed6e31f81b2aa67d9f4930eb31dc2260151d845f9865d2b3a301ce3bef54a977492039eb908512a083087961f90ee568c5e5c60d6e726dda2c3f31c072979e09d8fd6f2365f65ef46399a183511904226d8ec72805582107ff5951d2e0d5c028d29e940fa068c0ca1c238420e53297c31d68f70fb543f347d91afb5d66ef1e8460a1431b638a6b0ae259f7fe8eb03aae9ef1ea4cfcfbac7e7b20b5c46ea8b0a2e88527bf54fd866362ab6a99e466bb029259f35711bc376b2f70edd738b48451f20ee404938821419ee5eace0171b3fd73d57bf0a723152933ccb84d567e79737b33e334dab955cdc03298215a2943ee493d815af83d48ee808a5e508903cc574ea4b52de645a18b0f43cd6b81a15a7f089cc7596adde2ea693381c7eaa2e246b9cbec98bb4e8ea3db8b47e57ef8d3a2eace3e2dcc083f6625f4e86bdbe2d6c57fa8ae4902ae9964c847eb292998d485d3326a7076360b85365edd5b733876abb5e26943481a52b10a1c95f34aed88568b873ef481798fbafe036d5d580c7437cb1a651e2a89d98d9002d0bf6418a271f9808df4b2ceaa8508e6c1d7d58e96d87f6db011395a0b74cb39e066411fef6c8ce7942ef8d8bb826be0b06ecada10e46f7ac25eb7ab0e3339752c8d0784659d72a287ea9a5e3a699977456695a6f9fe40eb8f7269b414cda403ba94f512c332fcea82f1927a5695ea2eb2ce7380ae74a0672ffe7fd2c4a19715a984d518b5be67543c31e42962b4c030fbdfedc5977b03d85294db2578d6561fdd9e0f9cfaf7eb1609bfab67105b227ec43189e449c4f2f17b8175b3afb0087f70786673353a3913cd03240761b5ff91a1e6510499c1f4152a759b1ca39ace773a1f27a5a88bb94a4201a91addf5c2c8587547e454d186b562cf89a41a02c36765565c3d753a2d8127d3908853f5ccc1c35346f22284573695c5695a520ace2d0cd13c1138b1fb10f74487b9a2c7a5e01195a1629d3e5d567a77a2aaee24d2936c2618c63eb5cdeb64f5592cb38175d416c05588f03b287c6e16329fee69c8294db5b5bbb81499d7ef18ddb93144c897253e8330cea3be31bab73de42284fce239597ab7cd5b68cfba057b01aaab0f0d4191c31b407fd8f9c7f04eaca31e5d240c7910663bde4ad478f134d09dca902e6acdd292f2745c73cecea2204a56d0098c32da73eeee41b348d5826109ccfd2397bb73a25ebb7e95537df71cce504f14c219ec525795d2fd5027cea9810aadc77e1b874f9fc4e33ed7b90a4007bbc341493302e4e2cbca2a8229fd2c3db7faecec2b8805bde9d92a29f6a7096cfc05ed5b678566e6c079dddfcc0b6c17541047beb477c4493a1588be177490db134d69a225aa6848b27494f17c3882ea2ee436ac1e981256ccaa70ba1f7a621385694b62bda8c4f6b04c61d6798afdc9cec019392d1242a35c3382b09aab4999e1b383714622f2ab80f275ecc8ea67694f020466aef6ed5a4535f32df47f0478e00194b44b9003f6dff232bdecbdf2a06da35246dfbc0d40becfdd5ecf971f0f408913bf094282fa2272cc5683604945e3eba52231f131c81b1035dcbb8a4292059ceaf92f36877aa15049bacc544d2c9bee4eb1bd01d76861557e646082f118454c37bbc7d08a311b4668f2777912cf882439b47e7d3c08bfdefe31e3effcbddf9e5bf175fd7c1ae85f6436cd817580970b3d8303e33ea128d222e8adb1de246fd9583c0385fe89bbf9af2cd82a38083069a997175fc7e96096052d55620554bd723b28de9a177b0aa0a5928d3d991c7da85a3513b1fffb8c75b5bc2874491ac6affc2a71ef1d639a90bb4c53624139ab8764f60e7470592608a520dfa0289c3be27e2a8f6525a31830aaf887213285eeb4286509c4904f2f5c6058e29c9c5c7886e107fc8b6411ea86bef63c88c863c7d7be52424a0126b8642d83946792de32c6150e9ce9be9d20eada4b47bd24fda102ee8cbc3a870743ab1839f979076b79cffac7d2234db5b345de7f994110bbb873a7058e5ad2fe9d9f0527a4a7b3799f81a06c9ee25c1a4a6317c3c454e9b9bb03360775184c37897db2e23dda4fc5cfbbdd477f564ad48416224ab75742d8d2375773c34325b36cead158372821e3db81a2dc99fc4293b39b183f1a71afbd4faa5e66a0d457f15424ca9c39969a85226b03b1ba8a98b0655a4581c7849bad2b1e5eb09236284779235ec2c0f44d547705298a9076bd32cdbb0a1169529a4780629e8cc291bbe25d98eaca72e934b7ef3a26d60dcebb509b8122d9d3de366b1c81c01e1a3f2ec0556d4759917612ba175b48f47534e592293e50e66dfbd0e1d0373cb3f58a43f3c32408ceba4c2614ff35b72a2cc03166f9866904f7ec19650edc06ca73ef63fc759094ae06a8405144dc22a0480155057169e59897eded975544a3e26dc0ba673a803fd35e16f6ef4695fc554e0c92fd97d3287f368b06ebb41e7d9a5956ceac39f27a82dda86f981519e31f544d844109d5ed58c159e7aa1805461149c604f262a1dd0c2f072f8f5b9b9bd4542cff3050c85b981dbf1731805fee07a4f92bb1828842f34395b90b76834a624690bfd431185026fd090c8dce10ac30ea68502dc8d2d85f836eb747c9bb8b6d16da1cb692f33b77f80c05b250496f3a880dca37c6514d5b5e2cf90d0b18bc31fd27a2c96110b9aacbe2afce417c415778e58e0b9ace5f209696980cc45e51bc292b3d5c247e2c8fffecd214d927aab0fecd0f50b359df4971944891fbefd40345e7f14e833486c126df0c1839032e64fa59280d699eed79f03acc206d6a5340cc1c5deb4204cb8780830497f23522b89fc503e6a8a01d11e83de680bbaed65fbd970c71e2087213c3ee64280bcc1f616a274c11d01f0d81f084c3873bc871d50395e05f658a75915118b0da8281a310fc905488ae03aa89726d74d6ed6da76d6dffcdafd7b4d2fa4a867e9b42cdf71db56c542ccf1270974f1efcd80f70fd463d2cfc03c8e111f2d1232bf6e228123c316ecb60eb6d8f650e9281381d540b29b520be3f921bd314eff9ca241b69d95e78256f1bfcbfe37a9f094716d36af6e1ce36184bc6a4dfb88320ee186f52db245dd50d8af51f489f792494c14efffdb88faa1d9ad1d633b327b7ff6523bbfdfe4274b856bbca9e2847499923738207a399dffb514bba855b75d12c9c57aa2e58db0000210f5ad375d3b697f3dda96f5f78c13bfd6d01a5050e01a2e55cc2695a3f2193820286a688cc144fb9043e7c6772bf2cbd7bb5a7a57fee1c18dbdfaadfa5be0d1adfa55dd3a8480807708ee6e11d9f9dfc5bc682e104795928e56af800b42c9c07a25237b092ba1e93a525ed5b5b39ad6e02ac6b41e136c904dd4592370c322f5eb595ed30fa00a277928dfc765930af1c2936f5ad2425c411980b5bb012e0e240c7d50f16ba990540a765cc1fef3809a0344ce6d083ab8705378fabe14a2e63e12eaef453273a78a7d3fabff1fe6a9ba07e208740ab8ed6e50abe2a85b649e1d3ec2f3191e010b50a7ddffdfb25e53e196775655a1ae707daafc4e9709927eb961faaeb1be21ddde0fab9665774086c34af3beac362a5cb712b786a5e1c8811ef574c5b269946939ed530c5bf42306016b69957dd57d83c88cc32a366c0aacc964c693fa7e03c1e89832f2076ec03995f1f9b2cde66acdffa3ca33776b61176369c78e87b2eeb0a14d7cbbaa597c0ae8e1014660baf06e22a6fc4974772975b7d7d003e6bc6a4cdf4cd5f2a95dcfc8194d93b273e59baeb350935aef906bdb94d1fd3c0781aa8fcb17f3f68c9afe090ba059acf599d2934481eae73717c4354c8c2b4d425ef7073968624c5d91e46322cc23091c58643316acff626f160b9cb770e0d9595d33cb6f44915d7efb6747973ffbf34119bba44d074472e661095012ad94af00463520deb45a6b6b7b6a173b23aef637e4cc0363d43c5ddb43c81936143f7db63f7f7771a611930f9f82a12f3c59b0f72de98bbc75ad33f1823fa872be154b19f16f0fba01ac3d64d46cbfc1850d1b4b5790cd86633b1880b86fc34a8b9f31100950ea0bda3abf2b037e21ee348418df67cc1d056d74125f9c73b42b104b6ad322ffebfe658dc3c0a06af44d73324b5ae59e2bd99d4782ec053ea07513a271ecf8651b25bc3e026bc88a4aa1513a2b4d4e173c1e21c77302ce64be8331c4d5b6203bbccd96dfbf9debb29a167753e06c55ca88550ec186bd20b3d94f7c2af719bc638cac3f8cc6c80220fd5f4be03bab9bb975e5effa4c5eac098c531590ec5eeaa90faec3630671d9e1a454577b01b73bfea67456ae187f0e61a9292612f428ab8c5780a3803b7dc2ec8221181db3876f2c00", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x78, 0x0, 0x7, {0x6, 0x1, 0x0, {0x4, 0x7fffffffffffffff, 0x408, 0x1fd, 0x3, 0x6d6d, 0x9, 0x200207, 0xe000, 0x601d824b499141fd, 0xcd35, 0xffffffffffffffff, 0x0, 0x4, 0x808003}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004080)="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", 0x2000, &(0x7f0000007200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000061c0)={0x18, 0x0, 0x3de, {0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 0 (id=2860): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x0, 0x0, 0x400}}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x800, r2, 0x0}]) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000000)={r0, 0x0, 0x0, 0x2, 0x8, 0x8}) mkdir(&(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0xc722}, 0x0, 0x6e6bc0}, [@tmpl={0x84, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}]}]}, 0x13c}}, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, 0x0, 0x0) close(r6) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x240000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000700)='dummy_udc.0', 0xb) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000240)={0x20000003, 0xe7, &(0x7f00000000c0)="dff249cda833defbdbe6426c22923dbe538942e58265bf3419de78171a97d0124ea75b87712b6946a7a7ea63b0fa873d2d89371099205c3618a1d48f093d4abfe87a0472ee0ea58276e93e44a8df8ae44bbab253120c2de55d35aeae519523080bda92f5a7c96ec5ee23a90a6a4a7a8722c206e0c6360a6455c3167bcd5ca7ee470ef543a45601a7e58536380c4bc787c28ff940", &(0x7f00000001c0)="e7b86085", 0x94, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) kernel console output (not intermixed with test programs): ig 0 interface 0 has no altsetting 0 [ 234.378245][ T341] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 234.391077][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.407812][ T341] usb 3-1: config 0 descriptor?? [ 234.575686][ T6459] loop8: detected capacity change from 0 to 512 [ 234.646814][ T6459] EXT4-fs (loop8): Ignoring removed oldalloc option [ 234.669654][ T6459] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 234.699437][ T6459] EXT4-fs (loop8): 1 truncate cleaned up [ 234.710407][ T6459] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 234.855997][ T6461] loop9: detected capacity change from 0 to 40427 [ 234.867006][ T6461] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 234.874418][ T6461] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 234.910075][ T6461] F2FS-fs (loop9): invalid crc value [ 234.922899][ T341] koneplus 0003:1E7D:2D51.0024: unknown main item tag 0x0 [ 234.937913][ T341] koneplus 0003:1E7D:2D51.0024: unknown main item tag 0x1 [ 234.941270][ T6461] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 234.956352][ T341] koneplus 0003:1E7D:2D51.0024: item fetching failed at offset 39/40 [ 234.977013][ T341] koneplus 0003:1E7D:2D51.0024: parse failed [ 235.000372][ T341] koneplus: probe of 0003:1E7D:2D51.0024 failed with error -22 [ 235.021093][ T6461] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 235.028171][ T6461] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 235.035858][ T3881] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 235.107792][ T6461] attempt to access beyond end of device [ 235.107792][ T6461] loop9: rw=34817, want=77952, limit=40427 [ 235.123438][ T306] usb 3-1: USB disconnect, device number 19 [ 235.147396][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2117'. [ 235.184158][ T6485] attempt to access beyond end of device [ 235.184158][ T6485] loop9: rw=34817, want=80008, limit=40427 [ 235.186204][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2118'. [ 235.262660][ T6485] tc_dump_action: action bad kind [ 235.309345][ T6495] loop8: detected capacity change from 0 to 512 [ 235.338954][ T6495] EXT4-fs error (device loop8): ext4_orphan_get:1406: inode #15: comm syz.8.2122: inode has both inline data and extents flags [ 235.360841][ T6495] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.2122: couldn't read orphan inode 15 (err -117) [ 235.384311][ T6495] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 235.405568][ T6461] attempt to access beyond end of device [ 235.405568][ T6461] loop9: rw=2049, want=40432, limit=40427 [ 235.440436][ T3881] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 235.455810][ T3881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.468583][ T3881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.478821][ T3881] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 235.590406][ T3881] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 235.599589][ T3881] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 235.608105][ T3881] usb 2-1: Manufacturer: syz [ 235.615925][ T3881] usb 2-1: config 0 descriptor?? [ 235.775129][ T6518] sit: Src spoofed 0.0.0.0/2002:0:64::576d:0 -> 224.0.0.1/::42c4:3acc:eaa8:acff:fffe:64 [ 235.911003][ T6520] loop8: detected capacity change from 0 to 40427 [ 235.927987][ T6520] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 235.937252][ T6520] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 235.948055][ T6520] F2FS-fs (loop8): Found nat_bits in checkpoint [ 235.950491][ T306] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 235.974392][ T6520] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 235.981623][ T6520] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 236.230373][ T306] usb 3-1: device descriptor read/64, error -71 [ 236.250398][ T3881] usbhid 2-1:0.0: can't add hid device: -71 [ 236.264802][ T3881] usbhid: probe of 2-1:0.0 failed with error -71 [ 236.281293][ T3881] usb 2-1: USB disconnect, device number 40 [ 236.451289][ T6558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6558 comm=syz.6.2145 [ 236.689532][ T6566] loop9: detected capacity change from 0 to 1024 [ 236.895463][ T6566] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 236.896373][ T306] usb 3-1: device descriptor read/64, error -71 [ 237.180884][ T306] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 237.310403][ T20] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 237.410357][ T1170] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 237.450486][ T306] usb 3-1: device descriptor read/64, error -71 [ 237.690349][ T341] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 237.710525][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.741463][ T6598] xt_hashlimit: size too large, truncated to 1048576 [ 237.810432][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.820762][ T1170] usb 9-1: not running at top speed; connect to a high speed hub [ 237.828673][ T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 237.837853][ T20] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.851486][ T306] usb 3-1: device descriptor read/64, error -71 [ 237.910478][ T1170] usb 9-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 237.921148][ T1170] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 237.970713][ T306] usb usb3-port1: attempt power cycle [ 238.080411][ T341] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 238.090411][ T20] usb 2-1: string descriptor 0 read error: -22 [ 238.091442][ T341] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.097817][ T1170] usb 9-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 238.108839][ T341] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.117873][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.127946][ T341] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 238.136645][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.157708][ T1170] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.165712][ T1170] usb 9-1: Product: syz [ 238.169880][ T1170] usb 9-1: Manufacturer: syz [ 238.174527][ T1170] usb 9-1: SerialNumber: syz [ 238.220947][ T20] cdc_ncm 2-1:1.0: skipping garbage [ 238.226340][ T20] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 238.233251][ T20] cdc_ncm 2-1:1.0: bind() failure [ 238.241701][ T341] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 238.250910][ T341] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 238.259073][ T341] usb 10-1: Manufacturer: syz [ 238.264445][ T341] usb 10-1: config 0 descriptor?? [ 238.390381][ T306] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 238.502808][ T1170] usb 9-1: USB disconnect, device number 17 [ 238.560466][ T306] usb 3-1: device descriptor read/8, error -71 [ 238.561340][ T341] appleir 0003:05AC:8243.0025: unknown main item tag 0x0 [ 238.574069][ T341] appleir 0003:05AC:8243.0025: No inputs registered, leaving [ 238.584282][ T341] appleir 0003:05AC:8243.0025: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 238.703252][ T6612] tmpfs: Unknown parameter 'nr_iâd®s' [ 238.745687][ T6619] loop2: detected capacity change from 0 to 512 [ 238.757553][ T6619] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.2169: inode has both inline data and extents flags [ 238.771084][ T6619] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.2169: couldn't read orphan inode 15 (err -117) [ 238.783395][ T6619] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 238.804249][ T306] usb 3-1: device descriptor read/8, error -71 [ 238.943332][ T6] usb 2-1: USB disconnect, device number 41 [ 239.263922][ T6630] loop2: detected capacity change from 0 to 1024 [ 239.323421][ T6630] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 239.347036][ T341] usb 10-1: USB disconnect, device number 15 [ 239.378226][ T6640] sit: Src spoofed 0.0.0.0/2002:0:64::576d:0 -> 224.0.0.1/::42c4:3acc:eaa8:acff:fffe:64 [ 239.455834][ T6644] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2175'. [ 239.522184][ T6650] loop9: detected capacity change from 0 to 4096 [ 239.631869][ T6] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 239.740397][ T3881] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 239.794611][ T6650] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 239.927201][ T6655] loop2: detected capacity change from 0 to 512 [ 240.002629][ T6655] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.2180: inode has both inline data and extents flags [ 240.016005][ T3881] usb 9-1: Using ep0 maxpacket: 8 [ 240.020634][ T6655] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.2180: couldn't read orphan inode 15 (err -117) [ 240.033276][ T6655] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 240.119710][ T6659] loop2: detected capacity change from 0 to 512 [ 240.140422][ T3881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 240.147129][ T3881] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 240.156608][ T3881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.162216][ T6659] EXT4-fs (loop2): Ignoring removed orlov option [ 240.167787][ T3881] usb 9-1: config 0 descriptor?? [ 240.177890][ T6659] EXT4-fs (loop2): 1 truncate cleaned up [ 240.183779][ T6659] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,sysvgroups,orlov,noauto_da_alloc,init_itable,discard,journal_ioprio=0x0000000000000004,errors=remount-ro,nodiscard,. Quota mode: none. [ 240.204346][ T750] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 240.310421][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 240.420424][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.430842][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 240.439721][ T6] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.570465][ T750] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.581059][ T750] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.610414][ T306] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 240.660529][ T750] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.661259][ T3881] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 240.670059][ T750] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.686747][ T750] usb 10-1: SerialNumber: syz [ 240.692251][ T3881] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x1 [ 240.699413][ T3881] koneplus 0003:1E7D:2D51.0026: item fetching failed at offset 39/40 [ 240.700511][ T6] usb 2-1: string descriptor 0 read error: -22 [ 240.707819][ T3881] koneplus 0003:1E7D:2D51.0026: parse failed [ 240.714448][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.729032][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.730445][ T3881] koneplus: probe of 0003:1E7D:2D51.0026 failed with error -22 [ 240.781252][ T6] cdc_ncm 2-1:1.0: skipping garbage [ 240.786611][ T6] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 240.793523][ T6] cdc_ncm 2-1:1.0: bind() failure [ 240.866780][ T3881] usb 9-1: USB disconnect, device number 18 [ 240.954362][ T30] audit: type=1400 audit(1787087789.701:778): avc: denied { shutdown } for pid=6649 comm="syz.9.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.011069][ T750] usb 10-1: 0:2 : does not exist [ 241.016341][ T750] usb 10-1: unit 5: unexpected type 0x0b [ 241.022067][ T306] usb 3-1: unable to get BOS descriptor or descriptor too short [ 241.032804][ T750] usb 10-1: USB disconnect, device number 16 [ 241.048311][ T341] usb 2-1: USB disconnect, device number 42 [ 241.100445][ T306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.110719][ T306] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.123746][ T306] usb 3-1: config 1 interface 0 has no altsetting 0 [ 241.292572][ T306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.302014][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.310061][ T306] usb 3-1: Product: syz [ 241.315180][ T306] usb 3-1: Manufacturer: syz [ 241.319802][ T306] usb 3-1: SerialNumber: syz [ 241.437072][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2188'. [ 241.458811][ T30] audit: type=1400 audit(1787087790.201:779): avc: denied { create } for pid=6678 comm="syz.8.2189" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.491083][ T30] audit: type=1400 audit(1787087790.231:780): avc: denied { read } for pid=6678 comm="syz.8.2189" name="file2" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.530016][ T30] audit: type=1400 audit(1787087790.231:781): avc: denied { open } for pid=6678 comm="syz.8.2189" path="/69/file2" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.560233][ T30] audit: type=1400 audit(1787087790.231:782): avc: denied { ioctl } for pid=6678 comm="syz.8.2189" path="/69/file2" dev="tmpfs" ino=386 ioctlcmd=0x1278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.588004][ T30] audit: type=1400 audit(1787087790.231:783): avc: denied { mounton } for pid=6678 comm="syz.8.2189" path="/69/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 241.690727][ T306] cdc_mbim 3-1:1.0: MBIM functional descriptor missing [ 241.698434][ T306] cdc_mbim 3-1:1.0: bind() failure [ 241.708392][ T306] usb 3-1: USB disconnect, device number 24 [ 241.871423][ T6688] loop9: detected capacity change from 0 to 1024 [ 242.069801][ T6688] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 242.227234][ T6692] sit: Src spoofed 0.0.0.0/2002:0:64::576d:0 -> 224.0.0.1/::42c4:3acc:eaa8:acff:fffe:64 [ 242.254576][ T6695] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 242.334712][ T6701] FAULT_INJECTION: forcing a failure. [ 242.334712][ T6701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.347851][ T6701] CPU: 1 PID: 6701 Comm: syz.1.2196 Not tainted syzkaller #0 [ 242.355252][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.365304][ T6701] Call Trace: [ 242.368582][ T6701] [ 242.371529][ T6701] __dump_stack+0x21/0x30 [ 242.375863][ T6701] dump_stack_lvl+0x110/0x170 [ 242.380560][ T6701] ? show_regs_print_info+0x20/0x20 [ 242.385750][ T6701] dump_stack+0x15/0x20 [ 242.389891][ T6701] should_fail+0x3ab/0x500 [ 242.394306][ T6701] should_fail_usercopy+0x1a/0x20 [ 242.399357][ T6701] _copy_to_user+0x20/0x90 [ 242.403789][ T6701] simple_read_from_buffer+0xe9/0x160 [ 242.409166][ T6701] proc_fail_nth_read+0x1a6/0x220 [ 242.414179][ T6701] ? proc_fault_inject_write+0x310/0x310 [ 242.419800][ T6701] ? security_file_permission+0x83/0xa0 [ 242.425344][ T6701] ? proc_fault_inject_write+0x310/0x310 [ 242.430987][ T6701] vfs_read+0x28c/0xc20 [ 242.435153][ T6701] ? kernel_read+0x1f0/0x1f0 [ 242.439763][ T6701] ? __kasan_check_write+0x14/0x20 [ 242.445434][ T6701] ? mutex_lock+0x9b/0x1c0 [ 242.449890][ T6701] ? wait_for_completion_killable_timeout+0x10/0x10 [ 242.456506][ T6701] ? __fget_files+0x2e1/0x340 [ 242.461272][ T6701] ? __fdget_pos+0x2d2/0x380 [ 242.465848][ T6701] ? ksys_read+0x70/0x260 [ 242.470182][ T6701] ksys_read+0x14a/0x260 [ 242.474425][ T6701] ? vfs_write+0xfd0/0xfd0 [ 242.478920][ T6701] ? debug_smp_processor_id+0x17/0x20 [ 242.484350][ T6701] __x64_sys_read+0x7b/0x90 [ 242.488853][ T6701] x64_sys_call+0x96d/0x9a0 [ 242.493352][ T6701] do_syscall_64+0x4c/0xa0 [ 242.497764][ T6701] ? clear_bhb_loop+0x50/0xa0 [ 242.502480][ T6701] ? clear_bhb_loop+0x50/0xa0 [ 242.507170][ T6701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.513053][ T6701] RIP: 0033:0x7f224665a90e [ 242.517457][ T6701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.537228][ T6701] RSP: 002b:00007f22450f2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.545640][ T6701] RAX: ffffffffffffffda RBX: 00007f22450f36c0 RCX: 00007f224665a90e [ 242.553600][ T6701] RDX: 000000000000000f RSI: 00007f22450f30a0 RDI: 0000000000000006 [ 242.561578][ T6701] RBP: 00007f22450f3090 R08: 0000000000000000 R09: 0000000000000000 [ 242.569546][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.577510][ T6701] R13: 00007f2246922038 R14: 00007f2246921fa0 R15: 00007ffd4a36d0c8 [ 242.585475][ T6701] [ 242.625898][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2200'. [ 242.660602][ T30] audit: type=1400 audit(1787087791.411:784): avc: denied { relabelfrom } for pid=6707 comm="syz.2.2197" name="" dev="pipefs" ino=61780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 242.668127][ T6713] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2198'. [ 242.816973][ T6724] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2205'. [ 242.870072][ T30] audit: type=1400 audit(1787087791.611:785): avc: denied { ioctl } for pid=6727 comm="syz.6.2207" path="socket:[61808]" dev="sockfs" ino=61808 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 242.914556][ T6731] overlayfs: './file0' not a directory [ 242.946486][ T30] audit: type=1400 audit(1787087791.691:786): avc: denied { mount } for pid=6730 comm="syz.6.2208" name="/" dev="ramfs" ino=61812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 242.969176][ T30] audit: type=1400 audit(1787087791.691:787): avc: denied { create } for pid=6730 comm="syz.6.2208" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 242.980362][ T750] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 243.120380][ T341] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 243.312604][ T750] usb 10-1: Using ep0 maxpacket: 8 [ 243.406859][ T6726] loop2: detected capacity change from 0 to 131072 [ 243.440373][ T341] usb 2-1: Using ep0 maxpacket: 8 [ 243.450439][ T750] usb 10-1: config 0 interface 0 has no altsetting 0 [ 243.457262][ T750] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 243.462783][ T6726] F2FS-fs (loop2): Invalid log sectors per block(570425347) log sectorsize(9) [ 243.466560][ T750] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.484104][ T6726] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 243.496052][ T750] usb 10-1: config 0 descriptor?? [ 243.498239][ T6726] F2FS-fs (loop2): invalid crc value [ 243.508091][ T6726] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 243.530500][ T6726] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 243.540632][ T6726] F2FS-fs (loop2): Bad quota inode 2:50331648 [ 243.546784][ T6726] F2FS-fs (loop2): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 243.557415][ T6726] F2FS-fs (loop2): Cannot turn on quotas: error -22 [ 243.564214][ T341] usb 2-1: config 0 interface 0 has no altsetting 0 [ 243.565110][ T6726] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 243.571048][ T341] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 243.578326][ T6726] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 243.587266][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.603498][ T341] usb 2-1: config 0 descriptor?? [ 243.620201][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'. [ 243.629799][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2206'. [ 243.780196][ T6741] loop2: detected capacity change from 0 to 512 [ 243.834850][ T6741] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.2210: Unimplemented hash flags: 0x0001 [ 243.846593][ T6741] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2210: Corrupt directory, running e2fsck is recommended [ 243.860571][ T6741] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 243.869082][ T6741] EXT4-fs error (device loop2): ext4_iget_extra_inode:4604: inode #15: comm syz.2.2210: corrupted in-inode xattr [ 243.882487][ T6741] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.2210: couldn't read orphan inode 15 (err -117) [ 243.894996][ T6741] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.min_batch_time=0x0000000000000006,barrier=0x0000000000000008,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 243.896254][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2212'. [ 243.961370][ T6751] loop2: detected capacity change from 0 to 256 [ 243.991750][ T750] koneplus 0003:1E7D:2D51.0027: unknown main item tag 0x0 [ 243.999303][ T750] koneplus 0003:1E7D:2D51.0027: unknown main item tag 0x1 [ 244.007262][ T6751] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 244.007827][ T750] koneplus 0003:1E7D:2D51.0027: item fetching failed at offset 39/40 [ 244.033282][ T750] koneplus 0003:1E7D:2D51.0027: parse failed [ 244.039456][ T750] koneplus: probe of 0003:1E7D:2D51.0027 failed with error -22 [ 244.091543][ T341] koneplus 0003:1E7D:2D51.0028: unknown main item tag 0x0 [ 244.098865][ T341] koneplus 0003:1E7D:2D51.0028: unknown main item tag 0x1 [ 244.106787][ T341] koneplus 0003:1E7D:2D51.0028: item fetching failed at offset 39/40 [ 244.133144][ T341] koneplus 0003:1E7D:2D51.0028: parse failed [ 244.139195][ T341] koneplus: probe of 0003:1E7D:2D51.0028 failed with error -22 [ 244.214427][ T750] usb 10-1: USB disconnect, device number 17 [ 244.230127][ T6763] loop2: detected capacity change from 0 to 512 [ 244.302069][ T6763] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.313053][ T341] usb 2-1: USB disconnect, device number 43 [ 244.794983][ T6775] loop8: detected capacity change from 0 to 1024 [ 245.071048][ T6775] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 245.352662][ T6799] loop9: detected capacity change from 0 to 512 [ 245.364714][ T6798] loop2: detected capacity change from 0 to 512 [ 245.367210][ T6805] device xfrm1 entered promiscuous mode [ 245.395290][ T6808] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2235'. [ 245.468836][ T6799] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.576750][ T6823] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 245.586383][ T6823] 9pnet: Could not find request transport: rdma [ 246.001861][ T3881] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 246.002145][ T750] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 246.250340][ T750] usb 3-1: Using ep0 maxpacket: 16 [ 246.256249][ T6848] loop8: detected capacity change from 0 to 512 [ 246.292632][ T6848] EXT4-fs (loop8): Ignoring removed oldalloc option [ 246.299728][ T6848] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 246.311374][ T6848] EXT4-fs (loop8): 1 truncate cleaned up [ 246.317142][ T6848] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 246.400562][ T750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.414975][ T6851] loop8: detected capacity change from 0 to 512 [ 246.420433][ T3881] usb 10-1: unable to get BOS descriptor or descriptor too short [ 246.421398][ T750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.430361][ T6851] EXT4-fs (loop8): Ignoring removed oldalloc option [ 246.439335][ T750] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 246.458667][ T6851] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 246.461918][ T750] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 246.477742][ T750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.481275][ T6851] EXT4-fs (loop8): 1 truncate cleaned up [ 246.491828][ T6851] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 246.492440][ T750] usb 3-1: config 0 descriptor?? [ 246.530487][ T3881] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.543534][ T3881] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 246.558989][ T6851] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 246.568990][ T3881] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.571014][ T6851] EXT4-fs error (device loop8): ext4_dirty_inode:6108: inode #15: comm syz.8.2250: mark_inode_dirty error [ 246.585167][ T6854] overlayfs: './file0' not a directory [ 246.601047][ T6851] EXT4-fs error (device loop8): ext4_get_max_inline_size:116: inode #15: comm syz.8.2250: can't get inode location 15 [ 246.662829][ T6858] FAULT_INJECTION: forcing a failure. [ 246.662829][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 246.675882][ T6858] CPU: 0 PID: 6858 Comm: syz.8.2253 Not tainted syzkaller #0 [ 246.683288][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.693585][ T6858] Call Trace: [ 246.696876][ T6858] [ 246.699820][ T6858] __dump_stack+0x21/0x30 [ 246.704156][ T6858] dump_stack_lvl+0x110/0x170 [ 246.708825][ T6858] ? show_regs_print_info+0x20/0x20 [ 246.714031][ T6858] dump_stack+0x15/0x20 [ 246.718176][ T6858] should_fail+0x3ab/0x500 [ 246.722596][ T6858] ? alloc_skb_with_frags+0xa8/0x620 [ 246.727893][ T6858] __should_failslab+0xa4/0xe0 [ 246.732659][ T6858] should_failslab+0x9/0x20 [ 246.737160][ T6858] slab_pre_alloc_hook+0x39/0xd0 [ 246.742268][ T6858] ? alloc_skb_with_frags+0xa8/0x620 [ 246.747589][ T6858] ? alloc_skb_with_frags+0xa8/0x620 [ 246.752873][ T6858] __kmalloc_track_caller+0x6c/0x2c0 [ 246.758171][ T6858] ? alloc_skb_with_frags+0xa8/0x620 [ 246.763455][ T6858] ? alloc_skb_with_frags+0xa8/0x620 [ 246.768746][ T6858] __alloc_skb+0x210/0x730 [ 246.773180][ T6858] alloc_skb_with_frags+0xa8/0x620 [ 246.778318][ T6858] sock_alloc_send_pskb+0x87f/0x9a0 [ 246.783549][ T6858] ? sock_kzfree_s+0x60/0x60 [ 246.788219][ T6858] ? iov_iter_advance+0x1f9/0x360 [ 246.793250][ T6858] tun_get_user+0xaa2/0x34c0 [ 246.797924][ T6858] ? slab_free_freelist_hook+0xc2/0x190 [ 246.803644][ T6858] ? __x64_sys_openat+0xb0/0x160 [ 246.808577][ T6858] ? do_syscall_64+0x4c/0xa0 [ 246.813174][ T6858] ? tun_do_read+0x1d70/0x1d70 [ 246.818163][ T6858] ? kstrtouint_from_user+0x1c4/0x220 [ 246.820405][ T3881] usb 10-1: string descriptor 0 read error: -22 [ 246.823535][ T6858] ? kstrtol_from_user+0x2a0/0x2a0 [ 246.823564][ T6858] ? avc_policy_seqno+0x1b/0x70 [ 246.830040][ T3881] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.834921][ T6858] ? selinux_file_permission+0x2aa/0x510 [ 246.834947][ T6858] tun_chr_write_iter+0x1ed/0x2f0 [ 246.834968][ T6858] vfs_write+0x831/0xfd0 [ 246.841713][ T3881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.849233][ T6858] ? file_end_write+0x1b0/0x1b0 [ 246.877287][ T6858] ? __fget_files+0x2e1/0x340 [ 246.882045][ T6858] ? __fdget_pos+0x1f7/0x380 [ 246.886620][ T6858] ? ksys_write+0x70/0x260 [ 246.891037][ T6858] ksys_write+0x14a/0x260 [ 246.892187][ T3881] cdc_ncm 10-1:1.0: skipping garbage [ 246.895380][ T6858] ? __ia32_sys_read+0x90/0x90 [ 246.900857][ T3881] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 246.905435][ T6858] ? debug_smp_processor_id+0x17/0x20 [ 246.913319][ T3881] cdc_ncm 10-1:1.0: bind() failure [ 246.917769][ T6858] __x64_sys_write+0x7b/0x90 [ 246.927483][ T6858] x64_sys_call+0x8ef/0x9a0 [ 246.932116][ T6858] do_syscall_64+0x4c/0xa0 [ 246.936737][ T6858] ? clear_bhb_loop+0x50/0xa0 [ 246.941508][ T6858] ? clear_bhb_loop+0x50/0xa0 [ 246.946173][ T6858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.952055][ T6858] RIP: 0033:0x7f0e791220d9 [ 246.956571][ T6858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.976257][ T6858] RSP: 002b:00007f0e77b7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.984689][ T6858] RAX: ffffffffffffffda RBX: 00007f0e793a9fa0 RCX: 00007f0e791220d9 [ 246.992659][ T6858] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000005 [ 247.000631][ T6858] RBP: 00007f0e77b7b090 R08: 0000000000000000 R09: 0000000000000000 [ 247.008738][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.016929][ T6858] R13: 00007f0e793aa038 R14: 00007f0e793a9fa0 R15: 00007ffdebe8c9f8 [ 247.025006][ T6858] [ 247.141360][ T6868] loop8: detected capacity change from 0 to 8192 [ 247.193055][ T6868] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.294439][ T750] hid-multitouch 0003:045E:9994.0029: unknown main item tag 0x2 [ 247.303217][ T750] hid-multitouch 0003:045E:9994.0029: unknown main item tag 0x0 [ 247.311265][ T750] hid-multitouch 0003:045E:9994.0029: unknown main item tag 0x0 [ 247.319559][ T750] hid-multitouch 0003:045E:9994.0029: unknown main item tag 0x0 [ 247.327520][ T750] hid-multitouch 0003:045E:9994.0029: unknown main item tag 0x0 [ 247.341457][ T750] hid-multitouch 0003:045E:9994.0029: unknown main item tag 0x0 [ 247.349489][ T750] hid-multitouch 0003:045E:9994.0029: unknown main item tag 0x0 [ 247.349608][ T6874] block device autoloading is deprecated and will be removed. [ 247.357397][ T750] hid-multitouch 0003:045E:9994.0029: unknown main item tag 0x0 [ 247.423694][ T750] hid-multitouch 0003:045E:9994.0029: unknown main item tag 0x0 [ 247.440520][ T750] hid-multitouch 0003:045E:9994.0029: unknown main item tag 0x0 [ 247.448604][ T750] hid-multitouch 0003:045E:9994.0029: unknown main item tag 0x0 [ 247.461415][ T750] hid-multitouch 0003:045E:9994.0029: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.2-1/input0 [ 247.626502][ T750] usb 3-1: USB disconnect, device number 25 [ 247.734178][ T306] usb 10-1: USB disconnect, device number 18 [ 247.749705][ T6884] loop8: detected capacity change from 0 to 1024 [ 247.772122][ T6884] EXT4-fs (loop8): Ignoring removed bh option [ 247.778381][ T6884] EXT4-fs (loop8): Ignoring removed bh option [ 248.245489][ T6884] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 248.711730][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 249.147278][ T6920] loop2: detected capacity change from 0 to 512 [ 249.210389][ T20] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 249.260992][ T6920] EXT4-fs (loop2): Ignoring removed oldalloc option [ 249.271043][ T6920] EXT4-fs warning (device loop2): read_mmp_block:115: Error -74 while reading MMP block 17 [ 249.401277][ T6946] netlink: 'syz.2.2283': attribute type 12 has an invalid length. [ 249.423856][ T6946] loop2: detected capacity change from 0 to 256 [ 249.480795][ T6946] FAT-fs (loop2): Unrecognized mount option "subj_role=êk^" or missing value [ 249.490473][ T20] usb 2-1: device descriptor read/64, error -71 [ 249.568345][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2284'. [ 249.621430][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2285'. [ 249.718218][ T6952] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 249.816953][ T6973] fuse: Bad value for 'user_id' [ 249.842166][ T6976] loop9: detected capacity change from 0 to 512 [ 249.886703][ T6976] EXT4-fs (loop9): Ignoring removed oldalloc option [ 249.900339][ T20] usb 2-1: device descriptor read/64, error -71 [ 249.916425][ T6976] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 249.927770][ T6986] binder: 6985:6986 ioctl c0306201 200000000080 returned -14 [ 249.981445][ T6976] EXT4-fs (loop9): 1 truncate cleaned up [ 249.987147][ T6976] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 250.020696][ T6992] netlink: 'syz.2.2301': attribute type 4 has an invalid length. [ 250.068173][ T6991] xt_hashlimit: size too large, truncated to 1048576 [ 250.180340][ T20] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 250.232407][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2303'. [ 250.350355][ T341] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 250.437555][ T7012] input: syz1 as /devices/virtual/input/input18 [ 250.460391][ T20] usb 2-1: device descriptor read/64, error -71 [ 250.730640][ T341] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 16 [ 250.745407][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 250.745425][ T30] audit: type=1326 audit(1787087799.491:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.6.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a52da50d9 code=0x7ffc0000 [ 250.780182][ T30] audit: type=1326 audit(1787087799.491:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.6.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a52da50d9 code=0x7ffc0000 [ 250.805064][ T3881] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 250.812885][ T30] audit: type=1326 audit(1787087799.491:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.6.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a52da50d9 code=0x7ffc0000 [ 250.838264][ T30] audit: type=1326 audit(1787087799.491:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.6.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a52da50d9 code=0x7ffc0000 [ 250.863446][ T30] audit: type=1326 audit(1787087799.491:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.6.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7a52da50d9 code=0x7ffc0000 [ 250.888478][ T20] usb 2-1: device descriptor read/64, error -71 [ 250.895087][ T30] audit: type=1326 audit(1787087799.491:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.6.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a52da50d9 code=0x7ffc0000 [ 250.920404][ T341] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 250.929743][ T30] audit: type=1326 audit(1787087799.491:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.6.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a52da50d9 code=0x7ffc0000 [ 250.939746][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.955410][ T30] audit: type=1326 audit(1787087799.491:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.6.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a52da50d9 code=0x7ffc0000 [ 250.980343][ T341] usb 3-1: Product: syz [ 250.988295][ T30] audit: type=1326 audit(1787087799.491:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.6.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7a52da50d9 code=0x7ffc0000 [ 251.010361][ T341] usb 3-1: Manufacturer: syz [ 251.017364][ T30] audit: type=1326 audit(1787087799.491:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.6.2311" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a52da50d9 code=0x7ffc0000 [ 251.030319][ T341] usb 3-1: SerialNumber: syz [ 251.050410][ T20] usb usb2-port1: attempt power cycle [ 251.051132][ T3881] usb 9-1: Using ep0 maxpacket: 16 [ 251.080426][ T6992] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 251.180407][ T3881] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 251.191531][ T3881] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 251.203021][ T3881] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 251.216532][ T3881] usb 9-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 251.225799][ T3881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.238060][ T3881] usb 9-1: config 0 descriptor?? [ 251.483737][ T20] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 251.494866][ T7049] loop9: detected capacity change from 0 to 512 [ 251.509694][ T7049] EXT4-fs (loop9): Ignoring removed oldalloc option [ 251.517708][ T7049] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 251.529933][ T7049] EXT4-fs (loop9): 1 truncate cleaned up [ 251.536353][ T7049] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 251.620360][ T20] usb 2-1: device descriptor read/8, error -71 [ 251.650438][ T3881] usb 9-1: string descriptor 0 read error: -71 [ 251.750392][ T3881] usbhid 9-1:0.0: can't add hid device: -71 [ 251.757534][ T3881] usbhid: probe of 9-1:0.0 failed with error -71 [ 251.770411][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2328'. [ 251.784287][ T3881] usb 9-1: USB disconnect, device number 19 [ 251.830384][ T20] usb 2-1: device descriptor read/8, error -71 [ 252.366122][ T7060] loop9: detected capacity change from 0 to 131072 [ 252.381276][ T7060] F2FS-fs (loop9): Invalid segment/section count (458783, 24 x 150994945) [ 252.408687][ T7060] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 252.418358][ T7060] F2FS-fs (loop9): invalid crc value [ 252.437203][ T7060] F2FS-fs (loop9): Found nat_bits in checkpoint [ 252.474653][ T7060] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 252.482133][ T7060] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 252.503420][ T7060] F2FS-fs (loop9): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 252.527812][ T7060] F2FS-fs (loop9): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 252.549910][ T7060] F2FS-fs (loop9): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 252.574845][ T7060] F2FS-fs (loop9): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 252.612533][ T7079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7079 comm=syz.8.2336 [ 252.666483][ T7079] loop8: detected capacity change from 0 to 256 [ 252.697666][ T7079] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 252.912247][ T7084] loop8: detected capacity change from 0 to 512 [ 252.982531][ T7084] EXT4-fs (loop8): Ignoring removed oldalloc option [ 253.008539][ T7084] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 253.051133][ T7084] EXT4-fs (loop8): 1 truncate cleaned up [ 253.061046][ T7084] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 253.085250][ T341] usb 3-1: USB disconnect, device number 26 [ 253.186510][ T7104] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2346'. [ 253.215218][ T7112] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2347'. [ 253.490349][ T3879] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 253.590361][ T341] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 253.740353][ T3879] usb 10-1: Using ep0 maxpacket: 8 [ 253.777616][ T7114] loop8: detected capacity change from 0 to 131072 [ 253.784689][ T3881] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 253.840416][ T341] usb 3-1: Using ep0 maxpacket: 8 [ 253.853371][ T7114] F2FS-fs (loop8): Invalid log sectorsize (67108873) [ 253.860461][ T3879] usb 10-1: config 0 interface 0 has no altsetting 0 [ 253.867196][ T3879] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 253.880433][ T7114] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 253.881835][ T3879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.896891][ T7114] F2FS-fs (loop8): invalid crc value [ 253.898034][ T3879] usb 10-1: config 0 descriptor?? [ 253.909583][ T7114] F2FS-fs (loop8): Found nat_bits in checkpoint [ 253.931307][ T7114] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 253.938414][ T7114] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 253.960427][ T341] usb 3-1: config 0 interface 0 has no altsetting 0 [ 253.967086][ T341] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 253.987558][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.997281][ T341] usb 3-1: config 0 descriptor?? [ 254.150594][ T3881] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.184899][ T3881] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.252132][ T3881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.287379][ T3881] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 254.337008][ T3881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.360968][ T3881] usb 2-1: config 0 descriptor?? [ 254.381420][ T3879] koneplus 0003:1E7D:2D51.002A: unknown main item tag 0x0 [ 254.388935][ T3879] koneplus 0003:1E7D:2D51.002A: unknown main item tag 0x1 [ 254.396462][ T3879] koneplus 0003:1E7D:2D51.002A: item fetching failed at offset 39/40 [ 254.406089][ T3879] koneplus 0003:1E7D:2D51.002A: parse failed [ 254.412390][ T3879] koneplus: probe of 0003:1E7D:2D51.002A failed with error -22 [ 254.521007][ T341] koneplus 0003:1E7D:2D51.002B: unknown main item tag 0x0 [ 254.528266][ T341] koneplus 0003:1E7D:2D51.002B: unknown main item tag 0x1 [ 254.535491][ T341] koneplus 0003:1E7D:2D51.002B: item fetching failed at offset 39/40 [ 254.544390][ T341] koneplus 0003:1E7D:2D51.002B: parse failed [ 254.550644][ T341] koneplus: probe of 0003:1E7D:2D51.002B failed with error -22 [ 254.628433][ T7168] loop8: detected capacity change from 0 to 1024 [ 254.802124][ T341] usb 3-1: USB disconnect, device number 27 [ 254.810132][ T7168] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 254.868490][ T3881] hid-multitouch 0003:0EEF:72C4.002C: No inputs registered, leaving [ 254.882159][ T20] usb 10-1: USB disconnect, device number 19 [ 254.992115][ T3881] hid-multitouch 0003:0EEF:72C4.002C: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 255.348184][ T7187] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 255.368705][ T7189] FAULT_INJECTION: forcing a failure. [ 255.368705][ T7189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.382149][ T7189] CPU: 0 PID: 7189 Comm: syz.8.2375 Not tainted syzkaller #0 [ 255.389520][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.399568][ T7189] Call Trace: [ 255.402848][ T7189] [ 255.405777][ T7189] __dump_stack+0x21/0x30 [ 255.410114][ T7189] dump_stack_lvl+0x110/0x170 [ 255.414785][ T7189] ? show_regs_print_info+0x20/0x20 [ 255.419990][ T7189] dump_stack+0x15/0x20 [ 255.424146][ T7189] should_fail+0x3ab/0x500 [ 255.428563][ T7189] should_fail_usercopy+0x1a/0x20 [ 255.433588][ T7189] _copy_to_user+0x20/0x90 [ 255.438001][ T7189] simple_read_from_buffer+0xe9/0x160 [ 255.443375][ T7189] proc_fail_nth_read+0x1a6/0x220 [ 255.448396][ T7189] ? proc_fault_inject_write+0x310/0x310 [ 255.454027][ T7189] ? security_file_permission+0x83/0xa0 [ 255.459568][ T7189] ? proc_fault_inject_write+0x310/0x310 [ 255.465215][ T7189] vfs_read+0x28c/0xc20 [ 255.469367][ T7189] ? kernel_read+0x1f0/0x1f0 [ 255.473950][ T7189] ? __kasan_check_write+0x14/0x20 [ 255.479055][ T7189] ? mutex_lock+0x9b/0x1c0 [ 255.483468][ T7189] ? wait_for_completion_killable_timeout+0x10/0x10 [ 255.490052][ T7189] ? __fget_files+0x2e1/0x340 [ 255.494731][ T7189] ? __fdget_pos+0x2d2/0x380 [ 255.499316][ T7189] ? ksys_read+0x70/0x260 [ 255.503642][ T7189] ksys_read+0x14a/0x260 [ 255.507890][ T7189] ? vfs_write+0xfd0/0xfd0 [ 255.512393][ T7189] ? debug_smp_processor_id+0x17/0x20 [ 255.517852][ T7189] __x64_sys_read+0x7b/0x90 [ 255.522441][ T7189] x64_sys_call+0x96d/0x9a0 [ 255.526947][ T7189] do_syscall_64+0x4c/0xa0 [ 255.531360][ T7189] ? clear_bhb_loop+0x50/0xa0 [ 255.536050][ T7189] ? clear_bhb_loop+0x50/0xa0 [ 255.540729][ T7189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.546617][ T7189] RIP: 0033:0x7f0e790e290e [ 255.551036][ T7189] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 255.570643][ T7189] RSP: 002b:00007f0e77b7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.579371][ T7189] RAX: ffffffffffffffda RBX: 00007f0e77b7b6c0 RCX: 00007f0e790e290e [ 255.587365][ T7189] RDX: 000000000000000f RSI: 00007f0e77b7b0a0 RDI: 0000000000000006 [ 255.595430][ T7189] RBP: 00007f0e77b7b090 R08: 0000000000000000 R09: 0000000000000000 [ 255.603403][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.611371][ T7189] R13: 00007f0e793aa038 R14: 00007f0e793a9fa0 R15: 00007ffdebe8c9f8 [ 255.619342][ T7189] [ 255.739201][ T750] usb 2-1: USB disconnect, device number 48 [ 256.311226][ T7224] loop2: detected capacity change from 0 to 1024 [ 256.500380][ T3881] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 256.561505][ T7224] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 256.763821][ T7194] loop8: detected capacity change from 0 to 131072 [ 256.791787][ T7230] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2387'. [ 256.823187][ T7194] F2FS-fs (loop8): Invalid log sectorsize (67108873) [ 256.833761][ T7194] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 256.847134][ T7194] F2FS-fs (loop8): invalid crc value [ 256.878218][ T7194] F2FS-fs (loop8): Found nat_bits in checkpoint [ 256.889421][ T7232] fuse: Unknown parameter '0x0000000000000006' [ 256.952874][ T7194] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 256.960629][ T7194] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 256.970520][ T3881] usb 10-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 256.988784][ T3881] usb 10-1: config 0 interface 0 has no altsetting 0 [ 256.995899][ T3881] usb 10-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 257.005276][ T3881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.014612][ T3881] usb 10-1: config 0 descriptor?? [ 257.250701][ T7223] UDC core: couldn't find an available UDC or it's busy: -16 [ 257.258144][ T7223] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.290762][ T7223] UDC core: couldn't find an available UDC or it's busy: -16 [ 257.300372][ T7223] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.337978][ T7223] UDC core: couldn't find an available UDC or it's busy: -16 [ 257.355620][ T7223] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.370513][ T7223] UDC core: couldn't find an available UDC or it's busy: -16 [ 257.378595][ T7257] loop8: detected capacity change from 0 to 16 [ 257.390428][ T7223] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.408425][ T7223] UDC core: couldn't find an available UDC or it's busy: -16 [ 257.418389][ T7223] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.580497][ T3881] usbhid 10-1:0.0: can't add hid device: -71 [ 257.609579][ T3881] usbhid: probe of 10-1:0.0 failed with error -71 [ 257.662975][ T7264] loop9: detected capacity change from 0 to 1024 [ 257.721687][ T7257] erofs: (device loop8): mounted with root inode @ nid 36. [ 257.737383][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 257.899561][ T3881] usb 10-1: USB disconnect, device number 20 [ 257.906751][ T7264] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 258.094482][ T7252] loop2: detected capacity change from 0 to 131072 [ 258.151379][ T7252] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 258.158323][ T7252] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 258.167315][ T7252] F2FS-fs (loop2): invalid crc value [ 258.188355][ T7288] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2407'. [ 258.197725][ T7252] F2FS-fs (loop2): Found nat_bits in checkpoint [ 258.221734][ T7252] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 258.229012][ T7252] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 258.387316][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 258.387333][ T30] audit: type=1400 audit(1787087812.129:952): avc: denied { module_load } for pid=7294 comm="syz.9.2411" path="/209/file0" dev="tmpfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 258.387374][ T7295] Invalid ELF header len 1 [ 258.460781][ T7297] loop9: detected capacity change from 0 to 1024 [ 258.490494][ T341] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 258.575717][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2414'. [ 258.760518][ T341] usb 2-1: Using ep0 maxpacket: 8 [ 258.964305][ T7323] loop2: detected capacity change from 0 to 512 [ 259.010616][ T341] usb 2-1: config 0 interface 0 has no altsetting 0 [ 259.017284][ T341] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 259.029274][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.040703][ T3881] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 259.048412][ T7323] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.2420: inode has both inline data and extents flags [ 259.050306][ T341] usb 2-1: config 0 descriptor?? [ 259.067339][ T7323] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.2420: couldn't read orphan inode 15 (err -117) [ 259.079811][ T7323] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 259.097713][ T7323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7323 comm=syz.2.2420 [ 259.187409][ T7327] loop2: detected capacity change from 0 to 2048 [ 259.244969][ T7327] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000004e1e,jqfmt=vfsv0,nouid32,,errors=continue. Quota mode: none. [ 259.280628][ T3881] usb 10-1: Using ep0 maxpacket: 16 [ 259.285023][ T7317] loop8: detected capacity change from 0 to 131072 [ 259.372805][ T7317] F2FS-fs (loop8): Invalid log sectorsize (67108873) [ 259.391371][ T7317] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 259.400242][ T7317] F2FS-fs (loop8): invalid crc value [ 259.407531][ T7317] F2FS-fs (loop8): Found nat_bits in checkpoint [ 259.429326][ T7317] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 259.437085][ T7317] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 259.493374][ T7345] loop2: detected capacity change from 0 to 512 [ 259.543247][ T341] koneplus 0003:1E7D:2D51.002D: unknown main item tag 0x0 [ 259.550468][ T341] koneplus 0003:1E7D:2D51.002D: unknown main item tag 0x1 [ 259.560687][ T3881] usb 10-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 259.570046][ T3881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.586984][ T341] koneplus 0003:1E7D:2D51.002D: item fetching failed at offset 39/40 [ 259.600297][ T7345] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.600374][ T3881] usb 10-1: Product: syz [ 259.619093][ T341] koneplus 0003:1E7D:2D51.002D: parse failed [ 259.625451][ T341] koneplus: probe of 0003:1E7D:2D51.002D failed with error -22 [ 259.633209][ T3881] usb 10-1: Manufacturer: syz [ 259.637916][ T3881] usb 10-1: SerialNumber: syz [ 259.677559][ T7359] xt_limit: Overflow, try lower: 167772/2147483648 [ 259.724988][ T30] audit: type=1400 audit(1787087813.469:953): avc: denied { read } for pid=7360 comm="syz.6.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 259.753118][ T1170] usb 2-1: USB disconnect, device number 49 [ 259.755793][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2426'. [ 259.771693][ T7363] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 259.796376][ T7363] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: writeback. [ 259.823830][ T7371] EXT4-fs (loop8): Mount option "nouser_xattr" will be removed by 3.5 [ 259.823830][ T7371] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 259.823830][ T7371] [ 259.829460][ T7363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2432'. [ 259.845345][ T7371] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.865923][ T7371] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 259.874733][ T7371] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2436: invalid indirect mapped block 2683928664 (level 1) [ 259.889413][ T7371] EXT4-fs (loop8): Remounting filesystem read-only [ 259.896337][ T7371] EXT4-fs (loop8): 1 truncate cleaned up [ 259.902240][ T7371] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.grpjquota=,jqfmt=vfsold,jqfmt=vfsv0,nouser_xattr,inode_readahead_blks=0x0000000000000800,errors=remount-ro,,. Quota mode: writeback. [ 260.545633][ T7380] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 260.750855][ T3881] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 260.771018][ T3881] usb 10-1: 2:1: All rates were zero [ 260.825633][ T3881] usb 10-1: USB disconnect, device number 21 [ 261.251901][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 261.493176][ T7376] set_capacity_and_notify: 3 callbacks suppressed [ 261.493194][ T7376] loop2: detected capacity change from 0 to 131072 [ 261.509880][ T7376] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 261.517326][ T7376] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 261.550401][ T7376] F2FS-fs (loop2): invalid crc value [ 261.584195][ T7420] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2451'. [ 261.611790][ T7376] F2FS-fs (loop2): Found nat_bits in checkpoint [ 261.855842][ T7376] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 261.865266][ T7376] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 261.873027][ T1170] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 262.120971][ T1170] usb 2-1: Using ep0 maxpacket: 8 [ 262.241052][ T1170] usb 2-1: config 0 interface 0 has no altsetting 0 [ 262.248925][ T1170] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 262.267821][ T1170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.294987][ T1170] usb 2-1: config 0 descriptor?? [ 262.317551][ T7431] loop9: detected capacity change from 0 to 512 [ 262.344376][ T7431] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.416991][ T7431] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 262.432307][ T7431] Quota error (device loop9): write_blk: dquota write failed [ 262.440012][ T7431] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 262.449608][ T7431] Quota error (device loop9): write_blk: dquota write failed [ 262.458263][ T7431] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 262.472690][ T7431] EXT4-fs error (device loop9): ext4_acquire_dquot:6227: comm syz.9.2454: Failed to acquire dquot type 1 [ 262.492987][ T7431] EXT4-fs (loop9): 1 truncate cleaned up [ 262.503178][ T7431] EXT4-fs (loop9): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,max_batch_time=0x0000000000000005,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 262.602217][ T7455] loop8: detected capacity change from 0 to 1024 [ 262.639398][ T7431] EXT4-fs error (device loop9): ext4_remount:6053: comm syz.9.2454: Abort forced by user [ 262.650298][ T7431] EXT4-fs (loop9): Remounting filesystem read-only [ 262.657896][ T7431] EXT4-fs (loop9): re-mounted. Opts: . Quota mode: writeback. [ 262.769284][ T7431] 9pnet: p9_errstr2errno: server reported unknown error [ 262.796286][ T7455] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 262.916528][ T1170] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 262.925099][ T1170] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x1 [ 262.932897][ T1170] koneplus 0003:1E7D:2D51.002E: item fetching failed at offset 39/40 [ 262.941951][ T1170] koneplus 0003:1E7D:2D51.002E: parse failed [ 262.948084][ T1170] koneplus: probe of 0003:1E7D:2D51.002E failed with error -22 [ 263.101444][ T7431] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2454'. [ 263.117895][ T1170] usb 2-1: USB disconnect, device number 50 [ 263.391170][ T20] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 263.405551][ T7500] loop2: detected capacity change from 0 to 2048 [ 263.440820][ T7500] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,prjquota,noquota,,errors=continue. Quota mode: none. [ 263.457964][ T7505] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2479'. [ 263.681169][ T20] usb 10-1: device descriptor read/64, error -71 [ 264.001193][ T341] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 264.136901][ T20] usb 10-1: device descriptor read/64, error -71 [ 264.203485][ T30] audit: type=1400 audit(1787087817.948:954): avc: denied { mounton } for pid=7523 comm="syz.2.2485" path="/proc/403/task" dev="proc" ino=66656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 264.232044][ T7524] UDC core: couldn't find an available UDC or it's busy: -16 [ 264.239576][ T7524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 264.411206][ T20] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 264.441451][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2490'. [ 264.491326][ T750] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 264.521333][ T341] usb 2-1: unable to get BOS descriptor or descriptor too short [ 264.621308][ T341] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.631515][ T341] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 264.640404][ T341] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.681276][ T20] usb 10-1: device descriptor read/64, error -71 [ 264.727498][ T7544] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2492'. [ 264.751356][ T306] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 264.891346][ T341] usb 2-1: string descriptor 0 read error: -22 [ 264.897652][ T341] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.906777][ T341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.951934][ T341] cdc_ncm 2-1:1.0: skipping garbage [ 264.957167][ T341] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 264.964170][ T341] cdc_ncm 2-1:1.0: bind() failure [ 265.091356][ T20] usb 10-1: device descriptor read/64, error -71 [ 265.121387][ T306] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 265.131328][ T306] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 265.211419][ T20] usb usb10-port1: attempt power cycle [ 265.221456][ T306] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.230526][ T306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 265.238676][ T306] usb 9-1: SerialNumber: syz [ 265.261442][ T7542] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 265.369690][ T30] audit: type=1400 audit(1787087819.108:955): avc: denied { module_load } for pid=7547 comm="syz.9.2494" path="/sys/kernel/notes" dev="sysfs" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 265.369733][ T7548] Invalid ELF header magic: != ELF [ 265.404891][ T7548] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 265.414246][ T30] audit: type=1400 audit(1787087819.158:956): avc: denied { mounton } for pid=7547 comm="syz.9.2494" path="/217/bus/file0" dev="overlay" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 265.482459][ T7542] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 265.740727][ T341] usb 2-1: USB disconnect, device number 51 [ 265.952842][ T306] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 266.149924][ T30] audit: type=1400 audit(1787087819.888:957): avc: denied { read } for pid=7582 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.175986][ T7581] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2504'. [ 266.183609][ T30] audit: type=1400 audit(1787087819.888:958): avc: denied { open } for pid=7582 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.209925][ T30] audit: type=1400 audit(1787087819.888:959): avc: denied { getattr } for pid=7582 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.235771][ T30] audit: type=1400 audit(1787087819.948:960): avc: denied { write } for pid=7577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=485 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.265912][ T30] audit: type=1400 audit(1787087819.948:961): avc: denied { add_name } for pid=7577 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.288647][ T30] audit: type=1400 audit(1787087819.948:962): avc: denied { create } for pid=7577 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.311491][ T30] audit: type=1400 audit(1787087819.948:963): avc: denied { write } for pid=7577 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=14774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.376423][ T6] usb 9-1: USB disconnect, device number 20 [ 266.389102][ T6] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 266.840977][ T7596] loop9: detected capacity change from 0 to 131072 [ 266.851642][ T7596] F2FS-fs (loop9): Test dummy encryption mode enabled [ 266.861808][ T7596] F2FS-fs (loop9): invalid crc value [ 266.879907][ T7596] F2FS-fs (loop9): Found nat_bits in checkpoint [ 266.981762][ T7596] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 267.071532][ T3880] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 267.119092][ T7654] loop8: detected capacity change from 0 to 256 [ 267.493015][ T7660] loop2: detected capacity change from 0 to 512 [ 267.513790][ T7660] EXT4-fs (loop2): Ignoring removed oldalloc option [ 267.524687][ T7660] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,,errors=continue. Quota mode: writeback. [ 267.541649][ T3880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 267.542634][ T7660] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 267.584122][ T7668] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2521'. [ 267.651687][ T3880] usb 2-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config [ 267.661950][ T3880] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 140, changing to 7 [ 268.211769][ T3880] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 268.220986][ T3880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.231834][ T3880] usb 2-1: Product: syz [ 268.236162][ T3880] usb 2-1: Manufacturer: syz [ 268.240903][ T3880] usb 2-1: SerialNumber: syz [ 268.544548][ T3880] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 268.592292][ T3880] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 268.636034][ T7684] loop9: detected capacity change from 0 to 512 [ 268.652921][ T3880] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 268.727908][ T3880] usb 2-1: USB disconnect, device number 52 [ 268.736392][ T7684] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2526'. [ 268.942140][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 269.288651][ T7711] loop9: detected capacity change from 0 to 1024 [ 269.745509][ T7715] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2539'. [ 269.766681][ T7711] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 269.810720][ T7724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2540'. [ 269.968969][ T7695] loop2: detected capacity change from 0 to 131072 [ 270.031930][ T750] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 270.041684][ T7695] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 270.051396][ T7695] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 270.067713][ T7695] F2FS-fs (loop2): invalid crc value [ 270.075530][ T7695] F2FS-fs (loop2): Found nat_bits in checkpoint [ 270.105684][ T7695] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 270.113880][ T7695] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 270.272372][ T750] usb 9-1: Using ep0 maxpacket: 8 [ 270.349118][ T7752] loop9: detected capacity change from 0 to 512 [ 270.365278][ T7752] EXT4-fs (loop9): Ignoring removed oldalloc option [ 270.377172][ T7752] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 270.392014][ T750] usb 9-1: config 0 interface 0 has no altsetting 0 [ 270.402193][ T750] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 270.412683][ T7752] EXT4-fs (loop9): 1 truncate cleaned up [ 270.425649][ T7752] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 270.446129][ T750] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.456181][ T7768] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2553'. [ 270.465448][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2553'. [ 270.481664][ T750] usb 9-1: config 0 descriptor?? [ 270.624669][ T7784] kernel profiling enabled (shift: 9) [ 270.792052][ T7787] loop9: detected capacity change from 0 to 1024 [ 270.904252][ T7787] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 271.000472][ T3880] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 271.093458][ T750] koneplus 0003:1E7D:2D51.002F: unknown main item tag 0x0 [ 271.103696][ T750] koneplus 0003:1E7D:2D51.002F: unknown main item tag 0x1 [ 271.110926][ T750] koneplus 0003:1E7D:2D51.002F: item fetching failed at offset 39/40 [ 271.123548][ T750] koneplus 0003:1E7D:2D51.002F: parse failed [ 271.132737][ T750] koneplus: probe of 0003:1E7D:2D51.002F failed with error -22 [ 271.272075][ T3880] usb 2-1: Using ep0 maxpacket: 32 [ 271.312444][ T3882] usb 9-1: USB disconnect, device number 21 [ 271.724181][ T3880] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 271.732432][ T3880] usb 2-1: config 0 has no interface number 0 [ 271.738763][ T3880] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 271.739474][ T7773] loop2: detected capacity change from 0 to 131072 [ 271.749405][ T3880] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 84 [ 271.765279][ T7773] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 271.772534][ T7773] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 271.781402][ T7773] F2FS-fs (loop2): invalid crc value [ 271.788399][ T7773] F2FS-fs (loop2): Found nat_bits in checkpoint [ 271.817082][ T7773] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 271.820642][ T7802] loop9: detected capacity change from 0 to 512 [ 271.824349][ T7773] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 271.851347][ T7802] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 271.860584][ T7802] System zones: 1-12 [ 271.865935][ T7802] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2564: invalid indirect mapped block 8 (level 2) [ 271.880297][ T7802] EXT4-fs (loop9): 1 truncate cleaned up [ 271.886267][ T7802] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.922282][ T3880] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 271.931575][ T3880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.939631][ T3880] usb 2-1: Product: syz [ 271.944088][ T3880] usb 2-1: Manufacturer: syz [ 271.951446][ T3880] usb 2-1: SerialNumber: syz [ 271.959380][ T3880] usb 2-1: config 0 descriptor?? [ 271.982521][ T7784] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 271.989610][ T7784] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 272.067826][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 272.067844][ T30] audit: type=1400 audit(1787087825.807:967): avc: denied { create } for pid=7807 comm="syz.6.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 272.087157][ T7810] loop2: detected capacity change from 0 to 512 [ 272.103793][ T7810] EXT4-fs (loop2): Ignoring removed oldalloc option [ 272.110482][ T7810] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 272.121396][ T7810] EXT4-fs (loop2): 1 truncate cleaned up [ 272.127109][ T7810] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 272.206996][ T291] usb 2-1: USB disconnect, device number 53 [ 272.242233][ T3882] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 272.303515][ T7825] loop8: detected capacity change from 0 to 128 [ 272.327088][ T7825] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.338555][ T7825] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 272.525775][ T3882] usb 10-1: device descriptor read/64, error -71 [ 272.589349][ T7833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.702119][ T7839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7839 comm=syz.2.2576 [ 272.784820][ T7845] loop2: detected capacity change from 0 to 512 [ 272.814564][ T7845] EXT4-fs (loop2): Ignoring removed oldalloc option [ 272.836792][ T7845] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 272.867858][ T7845] EXT4-fs (loop2): 1 truncate cleaned up [ 272.876927][ T7845] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 272.928734][ T30] audit: type=1400 audit(1787087826.667:968): avc: denied { map } for pid=7846 comm="syz.1.2580" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 272.951910][ T3882] usb 10-1: device descriptor read/64, error -71 [ 273.232364][ T3882] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 273.542426][ T3882] usb 10-1: device descriptor read/64, error -71 [ 273.590974][ T7837] loop8: detected capacity change from 0 to 131072 [ 273.607768][ T7869] loop2: detected capacity change from 0 to 1024 [ 273.645476][ T7837] F2FS-fs (loop8): Invalid log sectorsize (67108873) [ 273.652463][ T7837] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 273.661376][ T7837] F2FS-fs (loop8): invalid crc value [ 273.667495][ T7869] EXT4-fs (loop2): Ignoring removed oldalloc option [ 273.674609][ T7869] EXT4-fs (loop2): Ignoring removed bh option [ 273.682241][ T7837] F2FS-fs (loop8): Found nat_bits in checkpoint [ 273.698986][ T7869] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,oldalloc,errors=remount-ro,nodioread_nolock,bh,. Quota mode: none. [ 273.715501][ T7869] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.715986][ T7837] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 273.733317][ T7837] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 273.845805][ T7887] loop2: detected capacity change from 0 to 512 [ 273.867345][ T7887] EXT4-fs (loop2): Ignoring removed oldalloc option [ 273.874631][ T7887] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 273.899767][ T7887] EXT4-fs (loop2): 1 truncate cleaned up [ 273.922388][ T7887] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 273.982439][ T3882] usb 10-1: device descriptor read/64, error -71 [ 274.049865][ T30] audit: type=1400 audit(1787087827.787:969): avc: denied { write } for pid=7904 comm="syz.8.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 274.072832][ T30] audit: type=1400 audit(1787087827.787:970): avc: denied { read } for pid=7904 comm="syz.8.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 274.102875][ T3882] usb usb10-port1: attempt power cycle [ 274.533520][ T3882] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 274.559853][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2604'. [ 274.712490][ T3882] usb 10-1: device descriptor read/8, error -71 [ 274.915387][ T7931] loop9: detected capacity change from 0 to 512 [ 274.923321][ T3882] usb 10-1: device descriptor read/8, error -71 [ 274.967929][ T7915] loop2: detected capacity change from 0 to 131072 [ 274.979898][ T7931] EXT4-fs (loop9): Ignoring removed oldalloc option [ 274.986755][ T7931] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 274.998847][ T7931] EXT4-fs (loop9): 1 truncate cleaned up [ 275.004752][ T7931] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 275.044001][ T7915] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 275.050751][ T7915] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 275.100414][ T7937] loop8: detected capacity change from 0 to 512 [ 275.128481][ T7915] F2FS-fs (loop2): invalid crc value [ 275.153902][ T7937] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 275.343990][ T7915] F2FS-fs (loop2): Found nat_bits in checkpoint [ 275.423282][ T7937] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 275.459994][ T7937] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.474226][ T7915] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 275.481685][ T7915] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 275.582017][ T7949] futex_wake_op: syz.8.2610 tries to shift op by 144; fix this program [ 275.646577][ T7949] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.2610: iget: bad i_size value: 2533274857506816 [ 275.798568][ T7927] fuse: Bad value for 'user_id' [ 275.825480][ T7958] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2615'. [ 276.003448][ T7973] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2622'. [ 276.192794][ T3880] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 276.222688][ T3875] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 276.347639][ T7997] loop2: detected capacity change from 0 to 256 [ 276.363450][ T7997] exfat: Unknown parameter '„}Îò±’C•Nÿá æ£Xñ²ž' [ 276.382694][ T3882] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 276.552754][ T3880] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.563157][ T3880] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.632692][ T3882] usb 10-1: Using ep0 maxpacket: 8 [ 276.642951][ T3880] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 276.662413][ T3880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 276.681045][ T3880] usb 9-1: SerialNumber: syz [ 276.702781][ T3875] usb 2-1: config 8 has no interfaces? [ 276.802856][ T3882] usb 10-1: config 0 interface 0 has no altsetting 0 [ 276.812859][ T3882] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 276.824609][ T3882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.833875][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2635'. [ 276.837905][ T3882] usb 10-1: config 0 descriptor?? [ 276.942811][ T3875] usb 2-1: string descriptor 0 read error: -22 [ 276.984385][ T3875] usb 2-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c [ 276.993806][ T3875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.003573][ T3880] usb 9-1: 0:2 : does not exist [ 277.011607][ T3880] usb 9-1: USB disconnect, device number 22 [ 277.019509][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 277.130065][ T8030] loop2: detected capacity change from 0 to 1024 [ 277.263591][ T3880] usb 2-1: USB disconnect, device number 54 [ 277.342097][ T8030] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 277.393853][ T3882] koneplus 0003:1E7D:2D51.0030: unknown main item tag 0x0 [ 277.411480][ T3882] koneplus 0003:1E7D:2D51.0030: unknown main item tag 0x1 [ 277.419103][ T3882] koneplus 0003:1E7D:2D51.0030: item fetching failed at offset 39/40 [ 277.427875][ T3882] koneplus 0003:1E7D:2D51.0030: parse failed [ 277.460283][ T3882] koneplus: probe of 0003:1E7D:2D51.0030 failed with error -22 [ 277.673113][ T3880] usb 10-1: USB disconnect, device number 29 [ 277.823329][ T6] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 277.913675][ T30] audit: type=1400 audit(1787087831.657:971): avc: denied { sys_module } for pid=8077 comm="syz.2.2658" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 277.913704][ T8078] Invalid ELF header magic: != ELF [ 278.365099][ T8089] overlayfs: upper fs does not support file handles, falling back to index=off. [ 278.374498][ T8089] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 278.393518][ T8089] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 278.404320][ T8089] overlayfs: conflicting lowerdir path [ 278.526274][ T8095] loop9: detected capacity change from 0 to 1024 [ 278.731620][ T8095] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 278.903039][ T6] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 278.911686][ T6] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 278.922227][ T6] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 278.936182][ T6] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 278.947492][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 278.966499][ T6] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 279.088614][ T8115] loop2: detected capacity change from 0 to 256 [ 279.120422][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.128948][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.175995][ T8112] device bridge_slave_0 entered promiscuous mode [ 279.193166][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.213084][ T8115] kvm: pic: non byte write [ 279.217658][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.226287][ T8112] device bridge_slave_1 entered promiscuous mode [ 279.233217][ T6] usb 9-1: string descriptor 0 read error: -22 [ 279.239507][ T6] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 279.242048][ T8122] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2672'. [ 279.248649][ T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.267104][ T6] usb 9-1: config 0 descriptor?? [ 279.282333][ T30] audit: type=1400 audit(1787087833.016:972): avc: denied { lock } for pid=8123 comm="syz.9.2671" path="socket:[68760]" dev="sockfs" ino=68760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 279.310153][ T8036] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 279.323498][ T6] hub 9-1:0.0: bad descriptor, ignoring hub [ 279.329675][ T6] hub: probe of 9-1:0.0 failed with error -5 [ 279.346938][ T6] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input21 [ 279.348996][ T8130] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 279.392935][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.400200][ T8112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.407801][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.414891][ T8112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.442576][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.451070][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.459019][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.471586][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.479880][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.487087][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.496274][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.504876][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.511922][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.526650][ T20] hid-generic 0000:0000:0001.0031: unknown main item tag 0x0 [ 279.534640][ T20] hid-generic 0000:0000:0001.0031: unknown main item tag 0x0 [ 279.542624][ T20] hid-generic 0000:0000:0001.0031: unknown main item tag 0x0 [ 279.550677][ T20] hid-generic 0000:0000:0001.0031: unknown main item tag 0x0 [ 279.551036][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.558411][ T20] hid-generic 0000:0000:0001.0031: unknown main item tag 0x0 [ 279.567307][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.573909][ T20] hid-generic 0000:0000:0001.0031: unknown main item tag 0x0 [ 279.582321][ T3875] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 279.589914][ T20] hid-generic 0000:0000:0001.0031: unknown main item tag 0x0 [ 279.605392][ T20] hid-generic 0000:0000:0001.0031: unknown main item tag 0x0 [ 279.614217][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.615635][ T20] hid-generic 0000:0000:0001.0031: hidraw0: HID v0.10 Device [syz0] on syz1 [ 279.632984][ T8134] tipc: Started in network mode [ 279.638002][ T8134] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 279.646763][ T8134] tipc: Enabled bearer , priority 0 [ 279.659457][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.668335][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.676108][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.685463][ T8112] device veth0_vlan entered promiscuous mode [ 279.700527][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.710108][ T8112] device veth1_macvtap entered promiscuous mode [ 279.719870][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.730887][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.759531][ T8137] binder: 8136:8137 ioctl c0046209 0 returned -22 [ 279.773784][ T310] device bridge_slave_1 left promiscuous mode [ 279.781157][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.791970][ T310] device bridge_slave_0 left promiscuous mode [ 279.799144][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.809684][ T310] device veth1_macvtap left promiscuous mode [ 279.815861][ T310] device veth0_vlan left promiscuous mode [ 279.816082][ T8143] loop6: detected capacity change from 0 to 512 [ 279.833186][ T3875] usb 2-1: Using ep0 maxpacket: 8 [ 279.863703][ T8143] EXT4-fs (loop6): Ignoring removed nobh option [ 279.877505][ T8143] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 279.892864][ T8143] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.915753][ T8143] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #2: comm syz.6.2675: corrupted inode contents [ 279.929954][ T8143] EXT4-fs error (device loop6): ext4_dirty_inode:6108: inode #2: comm syz.6.2675: mark_inode_dirty error [ 279.942420][ T8143] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #2: comm syz.6.2675: corrupted inode contents [ 279.955242][ T8143] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.2675: mark_inode_dirty error [ 279.973279][ T3875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 279.987421][ T3875] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 280.006761][ T3875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.027708][ T3875] usb 2-1: config 0 descriptor?? [ 280.407333][ T8169] loop2: detected capacity change from 0 to 1024 [ 280.637370][ T3875] koneplus 0003:1E7D:2D51.0032: unknown main item tag 0x0 [ 280.664502][ T3875] koneplus 0003:1E7D:2D51.0032: unknown main item tag 0x1 [ 280.772048][ T3875] koneplus 0003:1E7D:2D51.0032: item fetching failed at offset 39/40 [ 280.863667][ T8169] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 280.868735][ T3875] koneplus 0003:1E7D:2D51.0032: parse failed [ 280.921212][ T3875] koneplus: probe of 0003:1E7D:2D51.0032 failed with error -22 [ 280.974978][ T3875] usb 2-1: USB disconnect, device number 55 [ 281.007123][ T341] tipc: Node number set to 43690 [ 281.013460][ T3880] usb 9-1: USB disconnect, device number 23 [ 281.338205][ T8198] FAULT_INJECTION: forcing a failure. [ 281.338205][ T8198] name failslab, interval 1, probability 0, space 0, times 0 [ 281.351260][ T8198] CPU: 1 PID: 8198 Comm: syz.2.2693 Not tainted syzkaller #0 [ 281.358666][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.368744][ T8198] Call Trace: [ 281.372130][ T8198] [ 281.375174][ T8198] __dump_stack+0x21/0x30 [ 281.379529][ T8198] dump_stack_lvl+0x110/0x170 [ 281.384462][ T8198] ? show_regs_print_info+0x20/0x20 [ 281.389688][ T8198] dump_stack+0x15/0x20 [ 281.393867][ T8198] should_fail+0x3ab/0x500 [ 281.398294][ T8198] __should_failslab+0xa4/0xe0 [ 281.403154][ T8198] should_failslab+0x9/0x20 [ 281.407747][ T8198] slab_pre_alloc_hook+0x39/0xd0 [ 281.412770][ T8198] ? kvm_mmu_topup_memory_cache+0xd8/0x210 [ 281.418594][ T8198] kmem_cache_alloc+0x44/0x260 [ 281.423356][ T8198] kvm_mmu_topup_memory_cache+0xd8/0x210 [ 281.429082][ T8198] kvm_mmu_load+0x88/0x1ea0 [ 281.433581][ T8198] ? kvm_lapic_sync_from_vapic+0x540/0x540 [ 281.439389][ T8198] vcpu_enter_guest+0x4edb/0x6600 [ 281.444510][ T8198] ? avc_has_perm+0x163/0x250 [ 281.449187][ T8198] ? local_bh_enable+0x30/0x30 [ 281.453950][ T8198] ? avc_has_perm_noaudit+0x490/0x490 [ 281.459409][ T8198] ? inode_doinit_with_dentry+0xf6/0xd90 [ 281.465040][ T8198] ? 0xffffffffa001a000 [ 281.469196][ T8198] ? is_bpf_text_address+0x177/0x190 [ 281.474481][ T8198] ? __kernel_text_address+0xa0/0x100 [ 281.479865][ T8198] ? unwind_get_return_address+0x4d/0x90 [ 281.485497][ T8198] ? stack_trace_save+0xf0/0xf0 [ 281.490342][ T8198] ? arch_stack_walk+0xee/0x140 [ 281.495192][ T8198] ? stack_trace_save+0xa6/0xf0 [ 281.500043][ T8198] ? __stack_depot_save+0x34/0x480 [ 281.505151][ T8198] ? path_openat+0x284f/0x2f80 [ 281.510266][ T8198] ? kasan_set_track+0x5b/0x70 [ 281.515025][ T8198] ? __kasan_check_read+0x11/0x20 [ 281.520045][ T8198] ? vmx_vcpu_pi_load+0xa1/0x370 [ 281.524978][ T8198] ? __kasan_check_write+0x14/0x20 [ 281.530095][ T8198] ? kvm_arch_vcpu_load+0x56f/0x760 [ 281.535468][ T8198] ? local_bh_enable+0x1f/0x30 [ 281.540312][ T8198] ? kvm_load_guest_fpu+0x12a/0x240 [ 281.545505][ T8198] kvm_arch_vcpu_ioctl_run+0xfa7/0x2020 [ 281.551051][ T8198] kvm_vcpu_ioctl+0x8ed/0xc00 [ 281.555725][ T8198] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 281.561364][ T8198] ? selinux_file_ioctl+0x3ad/0x4c0 [ 281.566598][ T8198] ? selinux_file_alloc_security+0x120/0x120 [ 281.572640][ T8198] ? mutex_unlock+0x8f/0x230 [ 281.577241][ T8198] ? __mutex_lock_slowpath+0x10/0x10 [ 281.582528][ T8198] ? __fget_files+0x2e1/0x340 [ 281.587201][ T8198] ? security_file_ioctl+0x84/0xa0 [ 281.592312][ T8198] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 281.597941][ T8198] __se_sys_ioctl+0x121/0x1a0 [ 281.602704][ T8198] __x64_sys_ioctl+0x7b/0x90 [ 281.607291][ T8198] x64_sys_call+0x2f/0x9a0 [ 281.611705][ T8198] do_syscall_64+0x4c/0xa0 [ 281.616119][ T8198] ? clear_bhb_loop+0x50/0xa0 [ 281.620881][ T8198] ? clear_bhb_loop+0x50/0xa0 [ 281.625564][ T8198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.631460][ T8198] RIP: 0033:0x7fab960710d9 [ 281.635875][ T8198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.655507][ T8198] RSP: 002b:00007fab94aca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.664025][ T8198] RAX: ffffffffffffffda RBX: 00007fab962f8fa0 RCX: 00007fab960710d9 [ 281.671998][ T8198] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 281.679965][ T8198] RBP: 00007fab94aca090 R08: 0000000000000000 R09: 0000000000000000 [ 281.687939][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.695911][ T8198] R13: 00007fab962f9038 R14: 00007fab962f8fa0 R15: 00007ffd09b3ab58 [ 281.703881][ T8198] [ 281.726354][ T8206] loop6: detected capacity change from 0 to 512 [ 281.740066][ T8206] EXT4-fs (loop6): Ignoring removed oldalloc option [ 281.771159][ T30] audit: type=1400 audit(1787087835.506:973): avc: denied { call } for pid=8207 comm="syz.8.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 281.783370][ T8206] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 281.790884][ T8208] binder_alloc: 8207: pid 8207 spamming oneway? 2 buffers allocated for a total size of 5120 [ 281.832661][ T8206] EXT4-fs (loop6): 1 truncate cleaned up [ 281.838444][ T8206] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 282.100819][ T8231] loop8: detected capacity change from 0 to 1024 [ 282.355599][ T8231] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 282.537895][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'. [ 282.863862][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2706'. [ 282.932875][ T30] audit: type=1400 audit(1787087836.666:974): avc: denied { mounton } for pid=8251 comm="syz.8.2707" path="/dev/vcsu" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 282.979391][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2706'. [ 283.146333][ T8204] loop9: detected capacity change from 0 to 131072 [ 283.158509][ T8204] F2FS-fs (loop9): Invalid log sectorsize (67108873) [ 283.165619][ T8204] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 283.182081][ T8204] F2FS-fs (loop9): invalid crc value [ 283.209611][ T8204] F2FS-fs (loop9): Found nat_bits in checkpoint [ 283.277760][ T8204] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 283.285421][ T8204] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 283.303552][ T6] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 283.347821][ T3875] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 283.493224][ T8302] loop6: detected capacity change from 0 to 1024 [ 283.623610][ T3875] usb 9-1: Using ep0 maxpacket: 16 [ 283.743074][ T8302] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 283.860752][ T3875] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.870946][ T3875] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.993674][ T6] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 284.002119][ T6] usb 2-1: config 0 has no interface number 0 [ 284.043774][ T750] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 284.043805][ T3875] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.060617][ T3875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.068741][ T3875] usb 9-1: Product: syz [ 284.072965][ T3875] usb 9-1: Manufacturer: syz [ 284.077691][ T3875] usb 9-1: SerialNumber: syz [ 284.163675][ T6] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 284.173378][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.195166][ T6] usb 2-1: Product: syz [ 284.209832][ T6] usb 2-1: Manufacturer: syz [ 284.224388][ T6] usb 2-1: SerialNumber: syz [ 284.233022][ T6] usb 2-1: config 0 descriptor?? [ 284.356551][ T8321] loop9: detected capacity change from 0 to 512 [ 284.403790][ T750] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.412253][ T750] usb 3-1: config 0 has no interface number 0 [ 284.419196][ T750] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.430508][ T750] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.440762][ T750] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 284.450101][ T750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.454430][ T8321] EXT4-fs (loop9): orphan cleanup on readonly fs [ 284.461877][ T750] usb 3-1: config 0 descriptor?? [ 284.464566][ T3875] usb 9-1: 0:2 : does not exist [ 284.476784][ T3875] usb 9-1: USB disconnect, device number 24 [ 284.483259][ T8321] EXT4-fs warning (device loop9): ext4_enable_quotas:6479: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 284.498034][ T8321] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 284.505216][ T8321] EXT4-fs error (device loop9): ext4_ext_check_inode:501: inode #13: comm syz.9.2730: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 284.507500][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 284.524437][ T8321] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.2730: couldn't read orphan inode 13 (err -117) [ 284.552524][ T8321] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.729207][ T8329] loop6: detected capacity change from 0 to 131072 [ 284.814203][ T8329] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 284.820964][ T8329] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 284.829861][ T8329] F2FS-fs (loop6): invalid crc value [ 284.837210][ T8329] F2FS-fs (loop6): Found nat_bits in checkpoint [ 284.859100][ T8329] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 284.866310][ T8329] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 284.920035][ T8341] loop8: detected capacity change from 0 to 512 [ 284.923800][ T6] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 284.936939][ T8309] UDC core: couldn't find an available UDC or it's busy: -16 [ 284.944616][ T8309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 284.952145][ T6] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 284.964941][ T750] prodikeys 0003:041E:2801.0033: item fetching failed at offset 6/7 [ 284.973071][ T750] prodikeys 0003:041E:2801.0033: hid parse failed [ 284.978624][ T8341] EXT4-fs (loop8): Ignoring removed oldalloc option [ 284.979865][ T6] asix: probe of 2-1:0.251 failed with error -61 [ 284.994775][ T750] prodikeys: probe of 0003:041E:2801.0033 failed with error -22 [ 285.009612][ T8341] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 285.020861][ T8341] EXT4-fs (loop8): 1 truncate cleaned up [ 285.027204][ T8341] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 285.043724][ T306] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 285.173590][ T3882] usb 3-1: USB disconnect, device number 29 [ 285.381436][ T8367] loop2: detected capacity change from 0 to 1024 [ 285.624065][ T306] usb 10-1: device descriptor read/64, error -71 [ 285.629775][ T3882] usb 2-1: USB disconnect, device number 56 [ 285.636982][ T8367] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 285.744804][ T8380] loop8: detected capacity change from 0 to 512 [ 285.771009][ T8380] EXT4-fs (loop8): Ignoring removed oldalloc option [ 285.777910][ T8380] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 285.781199][ T8384] xt_hashlimit: max too large, truncated to 1048576 [ 285.789844][ T8380] EXT4-fs (loop8): 1 truncate cleaned up [ 285.800499][ T8380] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 285.821430][ T8384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2748'. [ 286.024308][ T306] usb 10-1: device descriptor read/64, error -71 [ 286.049047][ T8405] xt_hashlimit: size too large, truncated to 1048576 [ 286.062611][ T30] audit: type=1400 audit(1787087839.806:975): avc: denied { ioctl } for pid=8404 comm="syz.8.2755" path="socket:[71730]" dev="sockfs" ino=71730 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.211582][ T8418] loop8: detected capacity change from 0 to 512 [ 286.213060][ T8414] loop2: detected capacity change from 0 to 8192 [ 286.245416][ T8418] EXT4-fs (loop8): Ignoring removed oldalloc option [ 286.274832][ T8418] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 286.291195][ T8418] EXT4-fs (loop8): 1 truncate cleaned up [ 286.297454][ T8418] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 286.313879][ T306] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 286.367878][ T8425] loop2: detected capacity change from 0 to 512 [ 286.396187][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2764'. [ 286.411285][ T8425] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.421901][ T8425] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 286.498272][ T8431] EXT4-fs (loop8): Unrecognized mount option "euid>00000000000000000000" or missing value [ 286.921034][ T306] usb 10-1: device descriptor read/64, error -71 [ 287.314004][ T306] usb 10-1: device descriptor read/64, error -71 [ 287.373900][ T5040] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 287.416704][ T5040] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 287.427078][ T8453] EXT4-fs (loop8): Ignoring removed bh option [ 287.433670][ T8455] EXT4-fs (loop6): Ignoring removed oldalloc option [ 287.440720][ T306] usb usb10-port1: attempt power cycle [ 287.455182][ T8455] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 287.467076][ T8455] EXT4-fs (loop6): 1 truncate cleaned up [ 287.472745][ T8455] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 287.501386][ T8453] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 287.513522][ T8455] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 287.523861][ T8455] EXT4-fs error (device loop6): ext4_dirty_inode:6108: inode #15: comm syz.6.2774: mark_inode_dirty error [ 287.545173][ T8455] EXT4-fs error (device loop6): ext4_get_max_inline_size:116: inode #15: comm syz.6.2774: can't get inode location 15 [ 287.594133][ T8453] EXT4-fs (loop8): 1 truncate cleaned up [ 287.624535][ T8453] EXT4-fs (loop8): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 287.744958][ T8464] FAT-fs (loop6): Unrecognized mount option "rod¥I" or missing value [ 287.860503][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2782'. [ 288.044524][ T8453] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2772: bg 0: block 465: padding at end of block bitmap is not set [ 288.111161][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.118609][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.126246][ T8477] device bridge_slave_0 entered promiscuous mode [ 288.133368][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.140754][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.150893][ T8477] device bridge_slave_1 entered promiscuous mode [ 288.184637][ T8488] EXT4-fs (loop6): Ignoring removed oldalloc option [ 288.191371][ T8488] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 288.212768][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.220079][ T8477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.227436][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.234599][ T8477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.264634][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.272764][ T8488] EXT4-fs (loop6): 1 truncate cleaned up [ 288.292415][ T8488] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 288.320144][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.358399][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.421519][ T30] audit: type=1400 audit(1787087842.155:976): avc: denied { validate_trans } for pid=8438 comm="syz.1.2769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 288.423878][ T8488] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 288.453647][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.474825][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.481912][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.514279][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.534191][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.541268][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.548853][ T8488] EXT4-fs error (device loop6): ext4_dirty_inode:6108: inode #15: comm syz.6.2786: mark_inode_dirty error [ 288.570922][ T8488] EXT4-fs error (device loop6): ext4_get_max_inline_size:116: inode #15: comm syz.6.2786: can't get inode location 15 [ 288.574410][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.627358][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.647314][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.675653][ T310] device bridge_slave_1 left promiscuous mode [ 288.687752][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.714602][ T310] device bridge_slave_0 left promiscuous mode [ 288.720823][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.742544][ T310] device veth1_macvtap left promiscuous mode [ 288.754268][ T310] device veth0_vlan left promiscuous mode [ 288.783136][ T30] audit: type=1400 audit(1787087842.515:977): avc: denied { map } for pid=8506 comm="syz.6.2793" path="socket:[71221]" dev="sockfs" ino=71221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 288.790278][ T8510] set_capacity_and_notify: 6 callbacks suppressed [ 288.790293][ T8510] loop6: detected capacity change from 0 to 2048 [ 288.885518][ T353] loop6: p1 < > p4 [ 288.894942][ T353] loop6: p4 size 722688 extends beyond EOD, truncated [ 288.926373][ T8510] loop6: p1 < > p4 [ 288.931602][ T8510] loop6: p4 size 722688 extends beyond EOD, truncated [ 288.967460][ T30] audit: type=1400 audit(1787087842.705:978): avc: denied { read write } for pid=8506 comm="syz.6.2793" name="loop6p4" dev="devtmpfs" ino=2355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 289.029665][ T30] audit: type=1400 audit(1787087842.725:979): avc: denied { open } for pid=8506 comm="syz.6.2793" path="/dev/loop6p4" dev="devtmpfs" ino=2355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 289.058627][ T8477] device veth0_vlan entered promiscuous mode [ 289.075180][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.093492][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.105347][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.155180][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.171243][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.189051][ T8477] device veth1_macvtap entered promiscuous mode [ 289.207405][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.279881][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.299736][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.319912][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.474751][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.596517][ T8497] loop9: detected capacity change from 0 to 131072 [ 289.621993][ T8497] F2FS-fs (loop9): Invalid log sectorsize (67108873) [ 289.629587][ T8497] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 289.641982][ T8497] F2FS-fs (loop9): invalid crc value [ 289.671723][ T8539] loop6: detected capacity change from 0 to 512 [ 289.675052][ T8497] F2FS-fs (loop9): Found nat_bits in checkpoint [ 289.692888][ T8539] EXT4-fs (loop6): Ignoring removed oldalloc option [ 289.703503][ T8539] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 289.724117][ T8539] EXT4-fs (loop6): 1 truncate cleaned up [ 289.730390][ T8497] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 289.737753][ T8539] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 289.758454][ T8497] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 289.807944][ T8500] loop8: detected capacity change from 0 to 131072 [ 289.853930][ T8500] F2FS-fs (loop8): Invalid log sectorsize (67108873) [ 289.871133][ T8500] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 289.880736][ T8545] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2802'. [ 289.883810][ T8500] F2FS-fs (loop8): invalid crc value [ 289.919821][ T8500] F2FS-fs (loop8): Found nat_bits in checkpoint [ 289.963164][ T8500] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 289.970438][ T8500] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 290.174380][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 290.315567][ T8554] loop9: detected capacity change from 0 to 40427 [ 290.361342][ T8561] dummy_hcd dummy_hcd.0: remove, state 1 [ 290.364371][ T306] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 290.367088][ T8561] usb usb1: USB disconnect, device number 1 [ 290.383717][ T8561] dummy_hcd dummy_hcd.0: stopped [ 290.389425][ T8561] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 290.424389][ T6] usb 7-1: Using ep0 maxpacket: 8 [ 290.456380][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2810'. [ 290.540259][ T8578] loop8: detected capacity change from 0 to 512 [ 290.544478][ T6] usb 7-1: config 0 interface 0 has no altsetting 0 [ 290.553538][ T6] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 290.562717][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.571384][ T6] usb 7-1: config 0 descriptor?? [ 290.597552][ T8578] EXT4-fs (loop8): Ignoring removed oldalloc option [ 290.604481][ T8578] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 290.615321][ T306] usb 2-1: Invalid ep0 maxpacket: 64 [ 290.622800][ T8578] EXT4-fs (loop8): 1 truncate cleaned up [ 290.628843][ T8578] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 290.682298][ T8576] loop9: detected capacity change from 0 to 32768 [ 290.725012][ T352] loop9: p1 p2 p3 < p5 p6 p7 > [ 290.730816][ T352] loop9: p2 size 16775168 extends beyond EOD, truncated [ 290.741647][ T352] loop9: p5 start 4294970168 is beyond EOD, truncated [ 290.752621][ T8576] loop9: p1 p2 p3 < p5 p6 p7 > [ 290.758267][ T8576] loop9: p2 size 16775168 extends beyond EOD, truncated [ 290.764414][ T306] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 290.766788][ T8576] loop9: p5 start 4294970168 is beyond EOD, truncated [ 290.993129][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2814'. [ 291.004434][ T306] usb 2-1: Invalid ep0 maxpacket: 64 [ 291.033802][ T306] usb usb2-port1: attempt power cycle [ 291.045452][ T6] koneplus 0003:1E7D:2D51.0034: unknown main item tag 0x0 [ 291.052741][ T6] koneplus 0003:1E7D:2D51.0034: unknown main item tag 0x1 [ 291.060058][ T6] koneplus 0003:1E7D:2D51.0034: item fetching failed at offset 39/40 [ 291.068440][ T6] koneplus 0003:1E7D:2D51.0034: parse failed [ 291.074877][ T6] koneplus: probe of 0003:1E7D:2D51.0034 failed with error -22 [ 291.218023][ T8595] loop8: detected capacity change from 0 to 1024 [ 291.527343][ T8595] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 291.550024][ T3880] usb 7-1: USB disconnect, device number 2 [ 291.657670][ T8604] FAULT_INJECTION: forcing a failure. [ 291.657670][ T8604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.675077][ T8604] CPU: 1 PID: 8604 Comm: syz.0.2821 Not tainted syzkaller #0 [ 291.682494][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.692574][ T8604] Call Trace: [ 291.695855][ T8604] [ 291.698782][ T8604] __dump_stack+0x21/0x30 [ 291.703126][ T8604] dump_stack_lvl+0x110/0x170 [ 291.707797][ T8604] ? show_regs_print_info+0x20/0x20 [ 291.713021][ T8604] dump_stack+0x15/0x20 [ 291.717171][ T8604] should_fail+0x3ab/0x500 [ 291.721578][ T8604] should_fail_usercopy+0x1a/0x20 [ 291.726598][ T8604] _copy_to_user+0x20/0x90 [ 291.731014][ T8604] simple_read_from_buffer+0xe9/0x160 [ 291.736392][ T8604] proc_fail_nth_read+0x1a6/0x220 [ 291.741425][ T8604] ? proc_fault_inject_write+0x310/0x310 [ 291.747164][ T8604] ? security_file_permission+0x83/0xa0 [ 291.752733][ T8604] ? proc_fault_inject_write+0x310/0x310 [ 291.758381][ T8604] vfs_read+0x28c/0xc20 [ 291.762553][ T8604] ? kernel_read+0x1f0/0x1f0 [ 291.767151][ T8604] ? __kasan_check_write+0x14/0x20 [ 291.772264][ T8604] ? mutex_lock+0x9b/0x1c0 [ 291.776673][ T8604] ? wait_for_completion_killable_timeout+0x10/0x10 [ 291.783255][ T8604] ? __fget_files+0x2e1/0x340 [ 291.787922][ T8604] ? __fdget_pos+0x2d2/0x380 [ 291.792586][ T8604] ? ksys_read+0x70/0x260 [ 291.794532][ T306] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 291.796909][ T8604] ksys_read+0x14a/0x260 [ 291.796932][ T8604] ? vfs_write+0xfd0/0xfd0 [ 291.813006][ T8604] ? debug_smp_processor_id+0x17/0x20 [ 291.818373][ T8604] __x64_sys_read+0x7b/0x90 [ 291.822867][ T8604] x64_sys_call+0x96d/0x9a0 [ 291.827359][ T8604] do_syscall_64+0x4c/0xa0 [ 291.831764][ T8604] ? clear_bhb_loop+0x50/0xa0 [ 291.836465][ T8604] ? clear_bhb_loop+0x50/0xa0 [ 291.841132][ T8604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.847037][ T8604] RIP: 0033:0x7f297bc0190e [ 291.851565][ T8604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 291.871258][ T8604] RSP: 002b:00007f297a699fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.879766][ T8604] RAX: ffffffffffffffda RBX: 00007f297a69a6c0 RCX: 00007f297bc0190e [ 291.887738][ T8604] RDX: 000000000000000f RSI: 00007f297a69a0a0 RDI: 0000000000000004 [ 291.894435][ T306] usb 2-1: Invalid ep0 maxpacket: 64 [ 291.895719][ T8604] RBP: 00007f297a69a090 R08: 0000000000000000 R09: 0000000000000000 [ 291.895734][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.895747][ T8604] R13: 00007f297bec9038 R14: 00007f297bec8fa0 R15: 00007fff5e1e4118 [ 291.924900][ T8604] [ 291.980310][ T8612] loop0: detected capacity change from 0 to 1024 [ 292.011181][ T8616] loop8: detected capacity change from 0 to 512 [ 292.015268][ T8612] EXT4-fs (loop0): Ignoring removed orlov option [ 292.028370][ T8616] EXT4-fs (loop8): Ignoring removed oldalloc option [ 292.035672][ T8616] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 292.044420][ T306] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 292.054762][ T8616] EXT4-fs (loop8): 1 truncate cleaned up [ 292.055369][ T8612] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 292.066386][ T8616] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 292.102556][ T30] audit: type=1326 audit(1787087845.835:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.2824" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297bc410d9 code=0x7ffc0000 [ 292.137099][ T30] audit: type=1326 audit(1787087845.875:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.2824" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297bc410d9 code=0x7ffc0000 [ 292.162394][ T30] audit: type=1326 audit(1787087845.875:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.2824" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297bc410d9 code=0x7ffc0000 [ 292.174414][ T306] usb 2-1: Invalid ep0 maxpacket: 64 [ 292.188023][ T30] audit: type=1326 audit(1787087845.905:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.2824" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297bc410d9 code=0x7ffc0000 [ 292.217635][ T30] audit: type=1326 audit(1787087845.905:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.2824" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f297bc410d9 code=0x7ffc0000 [ 292.239423][ T306] usb usb2-port1: unable to enumerate USB device [ 292.245931][ T30] audit: type=1326 audit(1787087845.905:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.2824" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297bc410d9 code=0x7ffc0000 [ 292.388813][ T8635] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2830'. [ 292.410744][ T8639] UDC core: couldn't find an available UDC or it's busy: -16 [ 292.418567][ T8639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 292.695026][ T3880] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 292.791044][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2835'. [ 292.881482][ T8651] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 293.004427][ T3880] usb 10-1: Using ep0 maxpacket: 32 [ 293.010522][ T8658] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2837'. [ 293.174371][ T3880] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 293.184177][ T3880] usb 10-1: can't read configurations, error -61 [ 293.294542][ T3882] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 293.297505][ T8678] SELinux: Context system_u:object_r:system_dbusd_var_lib_t:s0 is not valid (left unmapped). [ 293.338688][ T3880] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 293.345162][ T8681] tmpfs: Unknown parameter 'mpollocal' [ 293.464385][ T3875] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 293.469614][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 293.469629][ T30] audit: type=1400 audit(1787087847.205:1065): avc: denied { create } for pid=8694 comm="syz.0.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 293.514810][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2851'. [ 293.521540][ T30] audit: type=1400 audit(1787087847.255:1066): avc: denied { checkpoint_restore } for pid=8698 comm="syz.0.2850" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 293.535597][ T8700] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 293.553827][ T3882] usb 7-1: Using ep0 maxpacket: 8 [ 293.584306][ T3880] usb 10-1: Using ep0 maxpacket: 32 [ 293.674394][ T3882] usb 7-1: config 0 interface 0 has no altsetting 0 [ 293.682343][ T3882] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 293.701205][ T3882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.717744][ T3882] usb 7-1: config 0 descriptor?? [ 293.744471][ T3880] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 293.754379][ T3880] usb 10-1: can't read configurations, error -61 [ 293.767872][ T3880] usb usb10-port1: attempt power cycle [ 293.813375][ T8720] binder: 8719:8720 ioctl 40285881 200000000000 returned -22 [ 293.822329][ T8720] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 293.834085][ T8720] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 293.842531][ T8720] CPU: 0 PID: 8720 Comm: syz.0.2860 Not tainted syzkaller #0 [ 293.845665][ T8717] fuse: Bad value for 'fd' [ 293.850043][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.864525][ T8720] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 293.870550][ T8720] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ae 80 7f fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 95 80 7f fe 41 be 58 11 00 00 4d [ 293.890289][ T8720] RSP: 0018:ffffc90000f579e0 EFLAGS: 00010246 [ 293.896418][ T8720] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88810e092780 [ 293.904483][ T8720] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000005 [ 293.912518][ T8720] RBP: ffffc90000f57a00 R08: ffff88810005996f R09: 1ffff1102000b32d [ 293.920504][ T8720] R10: dffffc0000000000 R11: ffffed102000b32e R12: dffffc0000000000 [ 293.928494][ T8720] R13: ffff88810b71b478 R14: ffff888101789160 R15: 0000000000000000 [ 293.936477][ T8720] FS: 00007f297a69a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 293.945396][ T8720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.952073][ T8720] CR2: 0000000000000000 CR3: 0000000143bb3000 CR4: 00000000003526b0 [ 293.960127][ T8720] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 293.968108][ T8720] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.976076][ T8720] Call Trace: [ 293.979353][ T8720] [ 293.982287][ T8720] ? dummy_wakeup+0x270/0x270 [ 293.986979][ T8720] usb_gadget_set_selfpowered+0x6c/0x180 [ 293.992613][ T8720] composite_dev_prepare+0x2e7/0x310 [ 293.997896][ T8720] configfs_composite_bind+0xb4/0x13a0 [ 294.003349][ T8720] ? __kasan_check_write+0x14/0x20 [ 294.008465][ T8720] ? mutex_lock+0x9b/0x1c0 [ 294.012880][ T8720] ? os_desc_qw_sign_store+0x140/0x140 [ 294.018339][ T8720] udc_bind_to_driver+0x1fb/0x770 [ 294.023371][ T8720] ? wait_for_completion_killable_timeout+0x10/0x10 [ 294.029963][ T8720] usb_gadget_probe_driver+0x1fc/0x380 [ 294.035429][ T8720] gadget_dev_desc_UDC_store+0x217/0x330 [ 294.041094][ T8720] configfs_write_iter+0x312/0x400 [ 294.046291][ T8720] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 294.051839][ T8720] vfs_write+0x831/0xfd0 [ 294.056101][ T8720] ? file_end_write+0x1b0/0x1b0 [ 294.060947][ T8720] ? wait_for_completion_killable_timeout+0x10/0x10 [ 294.067539][ T8720] ? __fget_files+0x2e1/0x340 [ 294.072213][ T8720] ? __fdget_pos+0x2d2/0x380 [ 294.076815][ T8720] ? ksys_write+0x70/0x260 [ 294.081237][ T8720] ksys_write+0x14a/0x260 [ 294.085578][ T8720] ? __ia32_sys_read+0x90/0x90 [ 294.090368][ T8720] ? __kasan_check_write+0x14/0x20 [ 294.095478][ T8720] ? switch_fpu_return+0x15d/0x2c0 [ 294.100595][ T8720] __x64_sys_write+0x7b/0x90 [ 294.105185][ T8720] x64_sys_call+0x8ef/0x9a0 [ 294.109684][ T8720] do_syscall_64+0x4c/0xa0 [ 294.114097][ T8720] ? clear_bhb_loop+0x50/0xa0 [ 294.118796][ T8720] ? clear_bhb_loop+0x50/0xa0 [ 294.123472][ T8720] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.129381][ T8720] RIP: 0033:0x7f297bc410d9 [ 294.133798][ T8720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.153487][ T8720] RSP: 002b:00007f297a69a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.161899][ T8720] RAX: ffffffffffffffda RBX: 00007f297bec8fa0 RCX: 00007f297bc410d9 [ 294.169883][ T8720] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000008 [ 294.177849][ T8720] RBP: 00007f297bcd8024 R08: 0000000000000000 R09: 0000000000000000 [ 294.185820][ T8720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.193792][ T8720] R13: 00007f297bec9038 R14: 00007f297bec8fa0 R15: 00007fff5e1e4118 [ 294.201770][ T8720] [ 294.204789][ T8720] Modules linked in: [ 294.211085][ T8720] ---[ end trace f1ec3acae97cf2a6 ]--- [ 294.218063][ T8720] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 294.224982][ T3875] usb 9-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice= 0.40 [ 294.226604][ T8720] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ae 80 7f fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 95 80 7f fe 41 be 58 11 00 00 4d [ 294.234089][ T3875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.254306][ T8720] RSP: 0018:ffffc90000f579e0 EFLAGS: 00010246 [ 294.262099][ T3875] usb 9-1: Product: syz [ 294.274689][ T3880] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 294.282653][ T3875] usb 9-1: Manufacturer: syz [ 294.284316][ T8720] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88810e092780 [ 294.287624][ T3875] usb 9-1: SerialNumber: syz [ 294.295539][ T8720] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000005 [ 294.308107][ T8720] RBP: ffffc90000f57a00 R08: ffff88810005996f R09: 1ffff1102000b32d [ 294.316301][ T8720] R10: dffffc0000000000 R11: ffffed102000b32e R12: dffffc0000000000 [ 294.324545][ T8720] R13: ffff88810b71b478 R14: ffff888101789160 R15: 0000000000000000 [ 294.332603][ T8720] FS: 00007f297a69a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 294.341703][ T8720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.348383][ T8720] CR2: 00007f22450f1558 CR3: 0000000143bb3000 CR4: 00000000003526b0 [ 294.356642][ T8720] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 294.364307][ T3880] usb 10-1: Using ep0 maxpacket: 32 [ 294.364888][ T8720] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 294.377845][ T8720] Kernel panic - not syncing: Fatal exception [ 294.384028][ T8720] Kernel Offset: disabled [ 294.388432][ T8720] Rebooting in 86400 seconds..