last executing test programs: 21.098477211s ago: executing program 1 (id=1129): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x2000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r2}, 0x10) socket(0x200000000000011, 0x2, 0x0) openat(r1, &(0x7f000000c380)='\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r4 = eventfd(0x5) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYRESDEC=r4, @ANYRESDEC=r0, @ANYRES8=r3]) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000600)={0x18, 0x0, &(0x7f0000000580)=[@dead_binder_done, @free_buffer], 0x31, 0x0, &(0x7f00000005c0)="e61a7369d7a5ded55debc5b8a7eb390e186e8677bd155575823a62bb642024f1e871a53f2ad2e96c680393995d9a02642d"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='ufshcd_exception_event\x00', 0xffffffffffffffff, 0x0, 0x2a6e}, 0x18) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) rt_sigqueueinfo(r6, 0x35, &(0x7f00000000c0)={0x32, 0x5, 0x5}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRES16=r5], 0x154}, 0x1, 0x0, 0x0, 0x240c8045}, 0x4) 20.230581565s ago: executing program 1 (id=1132): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a00009040000010301010009370008"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x4888}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001940)=[{0x0}, {&(0x7f0000000480)=""/156, 0x9c}], 0x2}}], 0x1, 0x0, 0x0) ptrace(0x10, 0x1) (async) ptrace(0x10, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) gettid() (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000040)={@initdev, 0x0}, &(0x7f0000000080)=0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @random="2966e59e1ce0"}, 0x10) (async) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @random="2966e59e1ce0"}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010400000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r11}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) (async) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r11}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="98000000f7255dd5f328789e02519a3536ad465572a6f411be3f3cf9ca9124f9f69439976dfe82177f0af4bbee97df5876b45be5976148c411bfa4", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000780)={{r2}, 0x4, &(0x7f0000000740)=[0x9, 0x8, 0x5, 0x8000000000000001], 0x2, 0xf}) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r12, 0x5501) write$uinput_user_dev(r12, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0xf1f, 0x4296fccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) (async) write$uinput_user_dev(r12, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0xf1f, 0x4296fccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) 15.797230096s ago: executing program 4 (id=1165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) 15.732528101s ago: executing program 4 (id=1166): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='writeback_bdi_register\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (fail_nth: 20) 15.478493413s ago: executing program 4 (id=1167): getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/202, 0xca}], 0x1, &(0x7f0000000200)=""/119, 0x77}}, {{&(0x7f0000000c80)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d80)=""/157, 0x9d}, {&(0x7f0000000e40)=""/199, 0xc7}, {&(0x7f0000001040)=""/131, 0x83}, {&(0x7f0000001100)=""/112, 0x70}], 0x4, &(0x7f0000001180)=""/142, 0x8e}}], 0x2, 0x0, 0x0) shutdown(r0, 0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x40, 0x13, 0xff94, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000001000000aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902720003010000000904000000010300000a240100"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_control_io$hid(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="8800000000020104000000000000000002000000240002801400018008000100e000000208000203ac1414aa0c000280050001000000000024000380140001800100010000000000080002000c00028005000100000000002c000180140001"], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$unix(r3, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}}], 0x1, 0x0) r5 = syz_usb_connect$cdc_ecm(0x6, 0x142, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x130, 0x1, 0x1, 0x29, 0x90, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0xdd, {{0x9, 0x24, 0x6, 0x0, 0x0, "af330eeb"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xd4, 0x401, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x800, 0xaf52, 0x4, 0x0, 0x7, 0x2e}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mdlm_detail={0xd7, 0x24, 0x13, 0x0, "ebef688ea9a6f12dcabc3eb4fa17f80739108b519d2b715ce29b65216f29b813fb2426a80ecc9d5f05e4d7c0ca731a00883c112b03f5cda73dd37270213f11d5d99e31b221fbd2055eafe73c08f8bcc53d073b377021ebe16ad212411674ed2aa3ca659aaa87de9fc5e9679e504305b7d942430490c9b56ff1bca80378acf22b1a7b58763b484d0fbe0f44b6cdc45dcb3b50812d0e9b11183f0e01a10241ec079eb44c9b8111553f7589a99f5d3bbeaad1885de5627474f89285279738f3d06eefe0cbc06c785833a0e896b6f0c78bf34b1491"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x3, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0xb, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x800, 0x6, 0x5, 0xe}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x4, 0x2, 0x7, 0x8, 0x5}, 0x45, &(0x7f0000000700)={0x5, 0xf, 0x45, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "09d7bb00513ae47d071ec5ee38c76733"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x5, 0xf, 0x6, [0xff0000]}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x5, 0xf00, 0x1, [0x0, 0xc030, 0xc000, 0xff3f00]}]}, 0x1, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x42b}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000ac0)={0x14, &(0x7f0000000a40)={0x0, 0x23, 0x6c, {0x6c, 0x11, "1d9c43f659f71da430be4909c32cc4f374d206f0550f932a0fa72fbedf475a0049becf4a4c5612e948271e3ebc2820f79a0da5ccc00f69265627db9bbad30ac7543e3b39420f025fbe204c06713a8136ec3eb8efb4450ebb43865c980771036086a216d5ae2091a45429"}}, &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000b00)={0x40, 0x14, 0x4e, "7956d050af3a79b2617ba6cc9bf1896dac3b69696e424d8230aba4413da0b9a308d26d51afe828bc3de221a64c9f91ddc8dac2dc7b1cee5d81dba75d596f23aa25d5dc3175ca41cf271c1b186c0d"}, &(0x7f0000000b80)={0x0, 0xa, 0x1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x8}}) sendmmsg$unix(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) r6 = dup3(r3, r2, 0x0) connect$unix(r6, &(0x7f0000000100)=@abs={0x1}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$uac1(r1, 0x0, 0x0) 12.39843812s ago: executing program 4 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000000), &(0x7f0000000400)}, 0x20) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x2000012) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500bd4d3621a52df7cd14105925fcf99e3ae454fcef59189e84722055a53670d23398e7b2d646d18d9f349ab44c51f8a207a9758154d420f0f4291d050d4b81a59eabb837385b5f8ab0076ea60ba29da982e407a2997376e6"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = dup(0xffffffffffffffff) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r11, 0x400455c8, 0x4) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000040)=0x32) 8.974343137s ago: executing program 1 (id=1189): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='writeback_bdi_register\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 8.778570544s ago: executing program 1 (id=1193): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x40}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x8000) 8.733021287s ago: executing program 1 (id=1194): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r4, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x10000, 0x1}}, 0x10) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES32=r3, @ANYBLOB="20690355038ca6c934d9749ede988c9375de68c7adab234197016b616a9f865882392dcd2f108cf9a88774a64041bf431a14b4c6f45079eef9639bd8eb6dd13e3a5c30f83dd30b5e85c97111435c969aebeb6b711c0db0763ca1c088561087541b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_NMI(r5, 0xae9a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r12, @ANYBLOB="cd57a3e8b150b45826917a61508b2bf342c6c76179837cbf2b05ab5f0f1c1e1e91c6426a777c4a5c785ba1fd4e8bb49a8cbfedb0ee2e6024ad2b", @ANYRESOCT, @ANYRES16=r10, @ANYRES16=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.474735163s ago: executing program 2 (id=1202): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000008e2602c67f", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}}, 0x4040000) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000a40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000006200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r6, 0x89e0, 0x0) io_setup(0x1fe, &(0x7f0000000200)=0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000140)={0x9, 0x0, 0x0}, 0x0) io_submit(r7, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r5, &(0x7f0000000180)}]) dup3(r2, r3, 0x0) r10 = syz_btf_id_by_name$bpf_lsm(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000008f07010000f8ffffffb702000008000000b7030000000000008500000071000000950000000000000028b09d53edae90583347f27be426c4aad8d232858235a7550db3f818977cf05cda0246631cf48d142c83bcc6bfc2f8ec3cd673ad37a17e04493d77d4b68424fa3291689a63cb8ef2f76a4ae3c2eb58f289371cbc4eec04357da62739fb7b7502b711a11499a280684dc7e11313609b07ef7adca88913a7985a462d9ad576874fdf62c76d2347a3d0531a421d413c4225ba90af24a45aaf94127cc294"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1a1e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYRESDEC=r12, @ANYRES64=r8], 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x4e22, @private=0xa010111}}) syz_usb_control_io(r13, &(0x7f0000001080)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x7, 0x3, 0x3, 0x4, 0xfffa}}}, 0x0) 6.961695216s ago: executing program 0 (id=1204): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$loop(&(0x7f0000001500), 0x4, 0x2040) ioctl$BLKDISCARD(r3, 0x1277, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r4], 0x0) 5.698180382s ago: executing program 1 (id=1205): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) mkdir(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000800000000000000000000000000a4842e7a0925723eb62e49a9f00e4e79422bfbc2a5336b"], 0x48) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_fc_replay\x00', r3, 0x0, 0x100}, 0x18) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 5.218379052s ago: executing program 0 (id=1206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf3, 0x0, 0x0, 0x3, 0x9, 0x40, 0x0, 0x3}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x217, 0x69, 0x0, 0x0, 0x0, 0x4003ff, 0x20000000006], 0x0, 0x2c0710}) r3 = eventfd2(0x2, 0x800) r4 = eventfd2(0x7, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x2, 0x2, r4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@polexpire={0xc0, 0x1b, 0x0, 0x3, 0x0, {{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x4e21}, {}, {}, 0x20000}}}, 0xc0}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x1c, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES8=r9, @ANYRES16=r6, @ANYRESHEX=r8, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0xd0, 0x2a0, 0x188, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @private=0xa010100, 0x0, 0xffffff00, 'team_slave_1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x5e, 0x3, 0xa}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x5, 0x0, 0x1, 0x4, 0x4, 0x6], 0x0, 0x1}, {0x1, [0x2, 0x1, 0x0, 0x0, 0x4], 0x6, 0x2}}}}, {{@ip={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x8, 0x1, 0xa8}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 5.134232749s ago: executing program 0 (id=1207): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB="0000000000001b0000006b42ad188142098f1000"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet(0x2, 0xa, 0x0) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0xc424041bee88b3fa) getpid() (async) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8954, &(0x7f0000000000)={{}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}, 'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x1010000, &(0x7f0000001980)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6b6f69382d722c756e695f786c6174653d302c696f636861727365743d6370313235302c757466383d302c757466383d312c757466383d302c636865636b3d72656c617865642c636865636b3d72656c617865642c757466383d302c757466383d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c616c6c6f775f7574696d653d30303030303030303030303030303030303030303737372c00eade9911980a28d9e64ac7143b83906e08fdc397c0249fe6c1202ecca94174f756f5b4ee6a1320dffedae492ac088fd52c782b6b1ae1e47771f3a27af913fcdc27815708b923ac65da98fe8d5dec2fc54ca63881d473f3547d482204ef00ac54c27ce9ff730eff12a28a578a27d237c3acc48429d360fc56e15b4df3421d30d7df43c6b3af973eaac4f858f9547b1e9de6575a5a101ccf4255cd30e0ab8c11b5ba2b859009818ee1b149006159e6719bc1b0ffbf3931e0"], 0x1, 0x36d, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r4 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) 4.914567847s ago: executing program 0 (id=1208): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000f0dbf2e25149ddf0cfb814970fc58225e8b8"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000005c0)='./bus\x00') unlink(&(0x7f00000001c0)='./file0\x00') 4.545737878s ago: executing program 3 (id=1209): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) connect$unix(r2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r12, r13) getsockopt$sock_int(r13, 0x1, 0x2e, 0x0, &(0x7f00000000c0)=0x5) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) 4.130406113s ago: executing program 2 (id=1210): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000300)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x2000c050) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3810744, &(0x7f0000000840)={[{@noauto_da_alloc}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@errors_remount}, {@noinit_itable}, {@errors_remount}, {@i_version}, {@acl}], [{@permit_directio}, {@smackfshat={'smackfshat', 0x3d, '(+\''}}, {@context={'context', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@uid_gt}, {@pcr={'pcr', 0x3d, 0x21}}, {@context={'context', 0x3d, 'root'}}, {@uid_lt}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 3.905069952s ago: executing program 0 (id=1211): socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/kernel/oops_count', 0x50000, 0x240) accept4$tipc(r1, 0x0, &(0x7f0000000e80), 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000a301"], 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x6, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @const={0xb, 0x0, 0x0, 0xa, 0x5}, @enum={0x1, 0x5, 0x0, 0x6, 0x4, [{0xa, 0x877}, {0x6, 0x2}, {0x4, 0x2905dd36}, {0xe, 0x5}, {0x4, 0x1}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x3}, @enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0xb, 0xfff}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0x1, 0x5}, {0x6, 0x1}, {0xd, 0x1}, {0xb, 0x3}]}, @ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x4}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x5f, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000300)=""/37, 0xf2, 0x25, 0x1, 0x7, 0x10000, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0xf5, &(0x7f00000004c0)=""/245, 0x41100, 0x13, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000003c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x8, 0x200}, 0x10, 0xa8ac, r2, 0xa, &(0x7f00000005c0)=[r0, r0], &(0x7f00000008c0)=[{0x4, 0x5, 0xf, 0x9}, {0x0, 0x5, 0x4, 0x7}, {0x0, 0x1, 0xc, 0x6}, {0x5, 0x3, 0x5, 0xc}, {0x4, 0x2, 0xc, 0x3}, {0x4, 0x1, 0x3, 0x3}, {0x5, 0x4, 0x2, 0x2}, {0x5, 0x1, 0x6, 0x7}, {0x3, 0x1, 0x2, 0x9}, {0x3, 0x5, 0x5, 0x5}], 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r11 = signalfd4(r10, &(0x7f0000000040)={[0xe4cf]}, 0x8, 0x80800) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x3c, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x20, 0xe, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r11, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r13, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x94d, 0x6}}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000e00)={&(0x7f0000000600), 0xc, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x2b8, r13, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x2a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xd13a, 0xfff3, 0x0, 0x5c62, 0xe, 0x7ff, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0xfc00, 0x4, 0x10, 0x9, 0xfe01, 0x1]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb, 0x1, 0x6c, 0x48, 0x1, 0x9, 0x24, 0x9, 0x48, 0x36, 0x12, 0x1b, 0x5, 0x1b, 0x6, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x2}, {0x3, 0x2}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0xa}, {0x6, 0x1}, {0x0, 0x1}, {0x7, 0x9}, {0x5, 0x8}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x7}, {}, {0x6, 0xa}, {0x1, 0xa}, {0x5, 0x6}, {0x3, 0x8}, {0x5, 0x8}, {0x4, 0x3}, {0x6, 0xa}, {0x6, 0x8}, {0x0, 0x7}, {0x5, 0x4}, {0x3, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x4, 0x2}, {0x3, 0x1}, {0x5}, {0x6, 0x6}, {0x5, 0x9}, {0x7, 0x2}, {0x7, 0x5}, {0x4, 0x5}, {0x2, 0xa}, {0x1, 0xa}, {0x2, 0x5}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x6}, {0x0, 0x8}, {0x7, 0x3}, {0x6, 0x8}, {0x6, 0x7}, {0x3, 0x2}, {0x1, 0x5}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x2}, {0x5, 0x8}, {0x0, 0x3}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{}, {0x2, 0x1}, {0x1, 0x6}, {0x2, 0x4}, {0x0, 0x5}, {0x1, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x3, 0x6}, {0x6, 0x1}, {0x4, 0x7}, {0x1, 0x6}, {0x5, 0x7}, {0x1}, {0x1, 0xa}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x40, 0x1, 0x1d, 0x0, 0x1, 0x5, 0x67]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x4, 0x2, 0x0, 0xf, 0x1, 0xfffa, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x16, 0x48, 0x6c, 0x1, 0x5, 0x60, 0x24, 0x2, 0x6c, 0x6c, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x5}, {0x4}, {0x1, 0x5}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x5, 0x4}, {0x5, 0x5}, {0x6, 0x2}, {0x7, 0xa}, {0x7}, {0x7, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x2, 0x9}, {0x7, 0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x3, 0x7}, {0x5, 0x1}, {0x7}, {0x4, 0x5}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x5, 0x1}, {0x0, 0xa}, {0x7, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x6, 0x5}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x9}, {0x3, 0x7}, {0x7, 0xa}, {0x5, 0xa}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x7}, {0x4}, {0x6, 0x1}, {0x4, 0x4}, {0x5, 0x6}, {0x6, 0x3}, {0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x3, 0x4}, {0x3, 0x9}, {0x6, 0x2}, {0x0, 0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x6, 0x1e}, {0x0, 0x6}, {0x3, 0x8}, {0x1}, {0x6}, {0x4, 0x4}, {0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x6, 0x4, 0xc, 0xa948, 0x7, 0xfe00]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x7, 0x63e4, 0x3, 0x1, 0xe, 0x3, 0x1]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x4, 0xe, 0xf8f8, 0x2, 0xe, 0x1e]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x2}, {0x3, 0x4}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x7}, {0x1, 0x8}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x4, 0x4}, {0x2, 0x1}, {0x0, 0x3}, {0x6}, {0x4, 0x8}, {0x2, 0x5}, {0x7}, {0x2, 0x5}, {0x6, 0x7}, {0x4, 0x5}, {0x2}, {0x5, 0x7}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x4}, {0x6, 0x9}, {0x5, 0x7}, {0x2, 0xa}, {0x5, 0x1}, {0x6}, {0x1, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x2, 0x4}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x1}, {0x1, 0x3}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0x1}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf1b, 0x9, 0xfc92, 0x1000, 0x6, 0x9, 0x6, 0x37]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x8, 0xe, 0x10, 0x8, 0x80, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x2c4, 0x800, 0x40, 0x68, 0x81, 0x1000]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0x5}, {0x6, 0x1}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x1}, {0x3, 0x8}, {0x4}, {0x0, 0x8}, {0x2}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x5}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x7cf2, 0x0, 0x1d1, 0x0, 0x8, 0xc]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x83, 0x5, 0x6, 0x6, 0x6, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xf637, 0x7, 0x60, 0x3, 0x3, 0xf02c, 0x3]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x1, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x800}, 0x800) 3.561784731s ago: executing program 3 (id=1212): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000340)="c796bab467f3068794dee57f04a0caa16edf5059d79b2fa8324cb02707", 0x1d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="44e343cbd6728e801c9d2f10", 0xc}], 0x1}}], 0x3, 0x8008881) 3.553217072s ago: executing program 3 (id=1213): syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001", @ANYRES32], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0xb, "65cb8f43793d9cff6cb7"}, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c916, &(0x7f0000000400), 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="007b3ec3fa940dd6e7da302d1390000000000000000000000000000000000000000000000000020000fecfd9b21e2eab85bb0f4458df7592b57dc93699"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, r5, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r5, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x41}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 3.128469867s ago: executing program 2 (id=1214): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nodiscard}, {@lazytime}, {@acl}, {@background_gc_off}, {@inline_xattr}, {@disable_roll_forward}, {@data_flush}, {@flush_merge}, {@noflush_merge}, {@lazytime}, {@fsync_mode_strict}, {@noheap}, {@jqfmt_vfsold}, {@nobarrier}, {@nolazytime}, {@four_active_logs}, {@heap}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0x0, &(0x7f0000001040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$bind(0x0, &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.844637551s ago: executing program 2 (id=1215): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f00000004c0)=0xc, 0x100000021) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/181, 0xb5) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x1ff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x300}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @rand_addr=0x7e000000}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @local}, 0x91d1a35871ddc624, 0x0, 0x0, 0x0, 0xfffe, &(0x7f00000000c0)='xfrm0\x00', 0x76, 0xfffffffffffffffa, 0x6}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'bond_slave_1\x00', 0x0}) getsockopt$packet_int(r5, 0x107, 0x15, 0x0, &(0x7f0000000200)) ioctl$int_in(r5, 0x5421, &(0x7f00000002c0)=0x8001) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000008140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=@delqdisc={0x88, 0x25, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xb}, {0xa, 0xc}, {0xffe0, 0xffff}}, [@TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3f, 0x3, 0xaa, 0x1, 0x80, 0x3f, 0x5}}, {0xe, 0x2, [0x2, 0x100, 0x1ff, 0x0, 0x80]}}, {{0x1c, 0x1, {0x2, 0x7f, 0x1, 0x1, 0x2, 0x7, 0x9, 0x5}}, {0xe, 0x2, [0x3a2b, 0x81, 0x5, 0x6, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x20000045) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0xfffffffffffffcd8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0xfffffffffffffce5}}]}]}, 0x6c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES32=r3, @ANYRES64=r6, @ANYRESHEX, @ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x28048810}, 0x20080810) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r9, 0x0, 0x81, 0x1f, 0x8, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xfec0ffff00000000}, 0x8000, 0x0, 0x8000, 0x3}}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000900)={0x6, 0x2, 0x2, 0x3f, 0x12, "95c9f05afbd65b2fd39ceec7e60f30c5ee6c0e"}) sendmsg$nl_route(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="bc0000001900000428bd7000fddbdf251d01000008000a00", @ANYRES32=r10, @ANYBLOB="1500040004000080050000003e1b39d972a768720000000015000200030000e005020000dd43070bcbab3ed9050000000c000b00020000000200008015000300010000a007020000a71ffc9eb492e5730000000005000d006900000008000e00", @ANYBLOB], 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.886166181s ago: executing program 0 (id=1217): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000000b80)=[{}, {}], 0x10, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000440)='./bus\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0xc4) r8 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000001780)='./file0\x00', r8, &(0x7f00000000c0)='./file2/file0\x00') open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) utime(&(0x7f00000002c0)='./file2/file0\x00', 0x0) setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000740)={0x2, 0xffffffffffffffff}, 0x0) socket(0x10, 0x803, 0x4) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1.630420363s ago: executing program 4 (id=1216): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/26, 0x1a}], 0x1, &(0x7f00000003c0)=""/147, 0x93}, 0x80000000}], 0x1, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) rt_tgsigqueueinfo(r3, r3, 0x10, &(0x7f0000000240)={0x3d, 0x3, 0xfffffff9}) ftruncate(0xffffffffffffffff, 0x1c) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000100)) tkill(r3, 0x2e) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x28, 0x8000) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000000c0)={0x56, 0x9, 0x6, {0x1}, {0x8, 0x1000}, @ramp={0x9, 0xfffc, {0xfff, 0x4e, 0x5, 0x4}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffff2a}, 0x1, 0x0, 0x0, 0x1}, 0x3ce923f644b0bb8c) r5 = syz_open_procfs(r0, &(0x7f00000001c0)='net/dev\x00') read$FUSE(r5, 0x0, 0xffffffffffffff77) unshare(0x62040200) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup3(r1, r5, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 742.391357ms ago: executing program 4 (id=1218): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000240)) ioctl$RNDADDENTROPY(r0, 0x40045201, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) rt_sigaction(0x0, &(0x7f00000001c0)={&(0x7f0000000140)="420f380a2c41c4e22d28bb000000810fa3c5c401bc5f49e144dfa6feeffffff341dace3e219c8ec3e00c69c463f914570bfe41d9fd47150d000000", 0x0, 0x0}, 0x0, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) syz_usb_control_io$uac1(r2, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000019080)=ANY=[@ANYBLOB="0100000001000000080000000b000000000000000eafe555bae5f2abe16bb87a9ec8a79fc1bd50a8c9ecbe38c6d5998251671c2e8f232f340b80b3da7e1fff17f07bd098f99cea1054881f896c353faa1b10592327d84f55a6f0f20b6953b38988cff63ee9d28d437fa9b830b43c3c73323efd44c74a705327039c492341c058cfab2ff85462a9156c48e94586d56fabc3f0e1193831cc88c0e56766f9dbe26206a6ce2ecc618b4c92d5d46719d017a7ac9c246d91534a2e83876a7e8aaf43c7e0da2574dacccbe563d10e08ac093c9893755e72957c16c3c00b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 515.597196ms ago: executing program 3 (id=1219): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, 0x0) r0 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x800000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x833b0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x14) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002840)=""/4118, 0x1077) r5 = socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$netlink(r5, 0x10e, 0x0, &(0x7f0000000380)=""/179, &(0x7f00000002c0)=0xb3) pipe2(0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES8=r5, @ANYRESDEC=r4, @ANYRES64=r2, @ANYBLOB="e29531dff7c45cb4102fe71efb3edeaa71ded65964a69428f4a0967f5a3cda3d12200e63a7a23234c3f6246cdcc277bb15afe6ad3f6cb6706557e3a2d9fa182346d3333da33dc4b026b154835bf07321dd7fb6177da80c620b4c07841828f91e1ad3f60232b90fcd82f7ee5342a07704d92a7930dab56f10f4be0254b7eff2ff3e386a80164ce91d794be886924dbba3dd", @ANYRES16, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22701, 0x0) write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000ffff00"}) r8 = syz_open_pts(r7, 0x0) dup3(r8, r7, 0x0) 498.416838ms ago: executing program 2 (id=1220): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x200000000000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 354.55094ms ago: executing program 2 (id=1221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000004c0)={0x0, 0x0, 0x2, "71ad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0xa, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) setresgid(0xee00, 0xee01, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 117.953429ms ago: executing program 3 (id=1222): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x24008800) recvmmsg(0xffffffffffffffff, &(0x7f0000005680)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000680)=""/244, 0xf4}, {&(0x7f0000000180)=""/10, 0xa}], 0x3, &(0x7f0000000380)=""/149, 0x95}, 0xb15}, {{&(0x7f00000005c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x2, &(0x7f0000000780)=""/15, 0xf}, 0x7}, {{&(0x7f0000002800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/116, 0x74}, {&(0x7f0000003900)=""/190, 0xbe}, {&(0x7f00000039c0)=""/167, 0xa7}, {&(0x7f0000003a80)=""/190, 0xbe}, {&(0x7f0000003b40)=""/33, 0x21}, {&(0x7f0000003b80)=""/155, 0x9b}, {&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/88, 0x58}], 0x9}, 0x1}, {{&(0x7f0000003d80)=@can, 0x80, &(0x7f00000044c0)=[{&(0x7f0000003e00)=""/221, 0xdd}, {&(0x7f0000003f00)=""/227, 0xe3}, {&(0x7f0000004000)=""/65, 0x41}, {&(0x7f0000004080)=""/149, 0x95}, {&(0x7f0000004140)=""/156, 0x9c}, {&(0x7f0000004200)=""/20, 0x14}, {&(0x7f0000004240)=""/253, 0xfd}, {&(0x7f0000004340)=""/187, 0xbb}, {&(0x7f0000004400)=""/155, 0x9b}], 0x9}, 0x7}], 0x4, 0x12022, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000a000000050000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffff, 0x8, 0x101, 0x3, 0x0, 0x0, 0x0, 0x0, {0x4, 0x6}}}}]}, 0x78}}, 0x0) dup2(r0, r0) 0s ago: executing program 3 (id=1223): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000020000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b972df209f3ab2a855ca6870855e39253fae81c3646b28506667e86ccfa7ac04888b6f26e593a7b406000000242569d5ca4e26d37689798ac954a1134c6356a137bab5a9ab83d1a57d9fa6a5bc884317dbbfec4ac82335f30def202739677add8c9060f3b9a75d058a3f44f6dc5cdbbef2d3873ee9a515cbf9092240781f4128e5f5feba5b5baf79da1cb1588774cc496aae92e871eddfde79adeb2bb0126d6c51a1b55d78ef88e6986e2910acc46a04"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) r7 = timerfd_create(0x9, 0x80000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) timerfd_gettime(r7, &(0x7f0000000040)) r8 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000080000ea000000000000003900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r11 = socket$unix(0x1, 0x1, 0x0) dup2(r11, r10) connect$unix(r11, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) inotify_init1(0x80800) write$binfmt_aout(r8, &(0x7f0000000b00)={{0x10b, 0x1, 0x9, 0xf7, 0x325, 0x2, 0xd4, 0x8}, "17d6d32a78df8be526ece6567e13c47f38d1c4cd66a531fdba18dda57baddb107a23d51ff367be83e1cb21583275225ef6e82e068d4cb2b57352a54b72e36aa8251e1cc1159b85ba20208d40e2a96f723d7ed6ed602f235174e7aca7a8c99ab3910e600d244f51268167", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x78a) kernel console output (not intermixed with test programs): issive=1 [ 221.282489][ T4316] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 221.311661][ T4316] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 221.321791][ T4316] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 221.329582][ T4316] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 221.338664][ T4316] EXT4-fs (loop4): orphan cleanup on readonly fs [ 221.345828][ T4316] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.933: bg 0: block 34: padding at end of block bitmap is not set [ 221.360405][ T4316] Quota error (device loop4): write_blk: dquota write failed [ 221.367695][ T4316] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 221.377765][ T4316] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.933: Failed to acquire dquot type 1 [ 221.392367][ T4316] EXT4-fs (loop4): 1 truncate cleaned up [ 221.398079][ T4316] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,discard,nogrpid,noblock_validity,,errors=continue [ 221.410491][ T15] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 221.761670][ T4339] FAULT_INJECTION: forcing a failure. [ 221.761670][ T4339] name failslab, interval 1, probability 0, space 0, times 0 [ 221.774425][ T4339] CPU: 0 PID: 4339 Comm: syz.0.938 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 221.784018][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.793906][ T4339] Call Trace: [ 221.797042][ T4339] dump_stack_lvl+0x1e2/0x24b [ 221.801554][ T4339] ? bfq_pos_tree_add_move+0x43b/0x43b [ 221.806843][ T4339] ? kmem_cache_free+0xa9/0x1e0 [ 221.811532][ T4339] dump_stack+0x15/0x17 [ 221.815537][ T4339] should_fail+0x3c6/0x510 [ 221.819777][ T4339] ? __se_sys_mount+0x156/0x3b0 [ 221.824553][ T4339] __should_failslab+0xa4/0xe0 [ 221.829154][ T4339] should_failslab+0x9/0x20 [ 221.833502][ T4339] kmem_cache_alloc_trace+0x3a/0x2e0 [ 221.838617][ T4339] __se_sys_mount+0x156/0x3b0 [ 221.843136][ T4339] ? __x64_sys_mount+0xd0/0xd0 [ 221.847726][ T4339] __x64_sys_mount+0xbf/0xd0 [ 221.852158][ T4339] do_syscall_64+0x34/0x70 [ 221.856406][ T4339] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 221.862132][ T4339] RIP: 0033:0x7f14e0657ff9 [ 221.866384][ T4339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.885826][ T4339] RSP: 002b:00007f14df2d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 221.894096][ T4339] RAX: ffffffffffffffda RBX: 00007f14e080ff80 RCX: 00007f14e0657ff9 [ 221.901880][ T4339] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 221.909789][ T4339] RBP: 00007f14df2d1090 R08: 0000000020000200 R09: 0000000000000000 [ 221.917591][ T4339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.925405][ T4339] R13: 0000000000000000 R14: 00007f14e080ff80 R15: 00007fff9256c908 [ 221.935677][ T4335] kernel profiling enabled (shift: 0) [ 222.079853][ T544] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 222.273151][ T24] audit: type=1326 audit(1729498116.447:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.2.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4d66ff9 code=0x7ffc0000 [ 222.309963][ T15] usbhid 3-1:0.0: can't add hid device: -71 [ 222.316007][ T15] usbhid: probe of 3-1:0.0 failed with error -71 [ 222.340231][ T544] usb 2-1: Using ep0 maxpacket: 16 [ 222.347409][ T24] audit: type=1400 audit(1729498116.507:3747): avc: denied { bind } for pid=4350 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 222.367362][ T15] usb 3-1: USB disconnect, device number 32 [ 222.377717][ T24] audit: type=1400 audit(1729498116.507:3748): avc: denied { listen } for pid=4350 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 222.397211][ T24] audit: type=1400 audit(1729498116.507:3749): avc: denied { connect } for pid=4350 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 222.416891][ T24] audit: type=1400 audit(1729498116.507:3750): avc: denied { write } for pid=4350 comm="syz.3.941" path="socket:[31387]" dev="sockfs" ino=31387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 222.485440][ T544] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.572448][ T544] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 222.700730][ T4363] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 222.708051][ T4363] EXT4-fs (loop4): Mount option "delalloc" incompatible with ext3 [ 222.789935][ T544] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.798853][ T544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.806682][ T544] usb 2-1: Product: syz [ 222.810654][ T544] usb 2-1: Manufacturer: syz [ 222.815046][ T544] usb 2-1: SerialNumber: syz [ 222.860447][ T544] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 223.231730][ T4382] futex_wake_op: syz.1.937 tries to shift op by 36; fix this program [ 223.455187][ T4385] FAULT_INJECTION: forcing a failure. [ 223.455187][ T4385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.492205][ T1569] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 223.500599][ T24] audit: type=1400 audit(1729498117.677:3751): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.522200][ T1570] usb 2-1: USB disconnect, device number 42 [ 223.525308][ T4385] CPU: 0 PID: 4385 Comm: syz.2.950 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 223.529031][ T24] audit: type=1400 audit(1729498117.677:3752): avc: denied { remove_name } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.537533][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.537538][ T4385] Call Trace: [ 223.537555][ T4385] dump_stack_lvl+0x1e2/0x24b [ 223.537565][ T4385] ? bfq_pos_tree_add_move+0x43b/0x43b [ 223.537575][ T4385] dump_stack+0x15/0x17 [ 223.537585][ T4385] should_fail+0x3c6/0x510 [ 223.537595][ T4385] should_fail_usercopy+0x1a/0x20 [ 223.537605][ T4385] _copy_from_user+0x20/0xd0 [ 223.537616][ T4385] __se_sys_mount+0x179/0x3b0 [ 223.537627][ T4385] ? __x64_sys_mount+0xd0/0xd0 [ 223.537639][ T4385] __x64_sys_mount+0xbf/0xd0 [ 223.537649][ T4385] do_syscall_64+0x34/0x70 [ 223.537662][ T4385] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 223.537671][ T4385] RIP: 0033:0x7ff2e4d66ff9 [ 223.537682][ T4385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.537688][ T4385] RSP: 002b:00007ff2e39e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 223.537700][ T4385] RAX: ffffffffffffffda RBX: 00007ff2e4f1ef80 RCX: 00007ff2e4d66ff9 [ 223.537705][ T4385] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 223.537711][ T4385] RBP: 00007ff2e39e0090 R08: 0000000020000200 R09: 0000000000000000 [ 223.537717][ T4385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.537723][ T4385] R13: 0000000000000000 R14: 00007ff2e4f1ef80 R15: 00007ffcb97eca98 [ 223.705238][ T4394] xt_hashlimit: size too large, truncated to 1048576 [ 223.799859][ T15] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 224.219856][ T1569] usb 5-1: Using ep0 maxpacket: 32 [ 224.234267][ T4408] syz.2.955[4408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.234580][ T4408] syz.2.955[4408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.312200][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 224.421002][ T4411] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 224.430334][ T1569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.431869][ T4411] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue [ 224.441071][ T1569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.464049][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.473630][ T1569] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.484276][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.500813][ T1569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.502151][ T15] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 224.518854][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.527485][ T15] usb 1-1: config 0 descriptor?? [ 224.529072][ T1569] usb 5-1: config 0 descriptor?? [ 224.600939][ T1569] hub 5-1:0.0: USB hub found [ 225.069949][ T15] usbhid 1-1:0.0: can't add hid device: -71 [ 225.075839][ T15] usbhid: probe of 1-1:0.0 failed with error -71 [ 225.085115][ T15] usb 1-1: USB disconnect, device number 24 [ 225.100057][ T1569] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 225.354410][ T4438] FAULT_INJECTION: forcing a failure. [ 225.354410][ T4438] name failslab, interval 1, probability 0, space 0, times 0 [ 225.367454][ T4438] CPU: 0 PID: 4438 Comm: syz.2.962 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 225.377064][ T4438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 225.386958][ T4438] Call Trace: [ 225.390092][ T4438] dump_stack_lvl+0x1e2/0x24b [ 225.394600][ T4438] ? bfq_pos_tree_add_move+0x43b/0x43b [ 225.399892][ T4438] dump_stack+0x15/0x17 [ 225.403880][ T4438] should_fail+0x3c6/0x510 [ 225.408132][ T4438] ? __alloc_skb+0x80/0x510 [ 225.412474][ T4438] __should_failslab+0xa4/0xe0 [ 225.417073][ T4438] should_failslab+0x9/0x20 [ 225.421414][ T4438] kmem_cache_alloc+0x3d/0x2e0 [ 225.426011][ T4438] __alloc_skb+0x80/0x510 [ 225.430177][ T4438] ? __kasan_check_write+0x14/0x20 [ 225.435123][ T4438] create_monitor_ctrl_close+0xc8/0x4f0 [ 225.440507][ T4438] ? hci_sock_release+0xd1/0x3d0 [ 225.445279][ T4438] hci_sock_release+0xd9/0x3d0 [ 225.449886][ T4438] sock_close+0xdf/0x270 [ 225.453957][ T4438] ? sock_mmap+0xa0/0xa0 [ 225.458035][ T4438] __fput+0x33d/0x7b0 [ 225.461862][ T4438] ____fput+0x15/0x20 [ 225.465674][ T4438] task_work_run+0x129/0x190 [ 225.470100][ T4438] exit_to_user_mode_loop+0xbf/0xd0 [ 225.475140][ T4438] syscall_exit_to_user_mode+0xa2/0x1a0 [ 225.480522][ T4438] do_syscall_64+0x40/0x70 [ 225.484768][ T4438] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 225.490506][ T4438] RIP: 0033:0x7ff2e4d66ff9 [ 225.494797][ T4438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.514193][ T4438] RSP: 002b:00007ff2e39e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 225.522521][ T4438] RAX: 0000000000000000 RBX: 00007ff2e4f1ef80 RCX: 00007ff2e4d66ff9 [ 225.530331][ T4438] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000006 [ 225.538141][ T4438] RBP: 00007ff2e39e0090 R08: 0000000000000000 R09: 0000000000000000 [ 225.545954][ T4438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.553766][ T4438] R13: 0000000000000000 R14: 00007ff2e4f1ef80 R15: 00007ffcb97eca98 [ 225.800389][ T1569] usbhid 5-1:0.0: can't add hid device: -71 [ 225.806619][ T1569] usbhid: probe of 5-1:0.0 failed with error -71 [ 225.843712][ T1569] usb 5-1: USB disconnect, device number 39 [ 225.869872][ T375] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 226.076938][ T4455] fuse: Unknown parameter 'use00000000000000000000' [ 226.276077][ T375] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 226.289096][ T375] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.299167][ T375] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.312106][ T375] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 226.339834][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.358266][ T375] usb 3-1: config 0 descriptor?? [ 226.364118][ T4467] syz.3.972[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.364175][ T4467] syz.3.972[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.392792][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 226.392804][ T24] audit: type=1400 audit(1729498120.567:3769): avc: denied { setattr } for pid=4468 comm="syz.4.973" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.432121][ T375] usb-storage 3-1:0.0: USB Mass Storage device detected [ 226.500592][ T375] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 226.567991][ T4470] device syzkaller0 entered promiscuous mode [ 226.653711][ T4442] udc-core: couldn't find an available UDC or it's busy [ 226.660544][ T4442] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 226.669888][ T15] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 226.949869][ T15] usb 4-1: Using ep0 maxpacket: 32 [ 227.208226][ T1570] usb 3-1: USB disconnect, device number 33 [ 227.334092][ T15] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.344062][ T15] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 227.354713][ T15] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 227.367962][ T15] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 227.376912][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.386092][ T15] usb 4-1: config 0 descriptor?? [ 227.410308][ T4485] FAULT_INJECTION: forcing a failure. [ 227.410308][ T4485] name failslab, interval 1, probability 0, space 0, times 0 [ 227.428143][ T4485] CPU: 0 PID: 4485 Comm: syz.2.978 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 227.437770][ T4485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 227.447650][ T4485] Call Trace: [ 227.450782][ T4485] dump_stack_lvl+0x1e2/0x24b [ 227.455289][ T4485] ? panic+0x812/0x812 [ 227.459207][ T4485] ? down_read_trylock+0x179/0x1d0 [ 227.464145][ T4485] ? bfq_pos_tree_add_move+0x43b/0x43b [ 227.469437][ T4485] ? __init_rwsem+0x1c0/0x1c0 [ 227.473950][ T4485] ? vmacache_update+0xb7/0x120 [ 227.478640][ T4485] dump_stack+0x15/0x17 [ 227.482631][ T4485] should_fail+0x3c6/0x510 [ 227.486881][ T4485] ? getname_flags+0xba/0x520 [ 227.491395][ T4485] __should_failslab+0xa4/0xe0 [ 227.495996][ T4485] should_failslab+0x9/0x20 [ 227.500336][ T4485] kmem_cache_alloc+0x3d/0x2e0 [ 227.505023][ T4485] getname_flags+0xba/0x520 [ 227.509359][ T4485] user_path_at_empty+0x2d/0x50 [ 227.514047][ T4485] __se_sys_mount+0x285/0x3b0 [ 227.518656][ T4485] ? __x64_sys_mount+0xd0/0xd0 [ 227.523248][ T4485] __x64_sys_mount+0xbf/0xd0 [ 227.527675][ T4485] do_syscall_64+0x34/0x70 [ 227.531929][ T4485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 227.537683][ T4485] RIP: 0033:0x7ff2e4d66ff9 [ 227.541908][ T4485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.561350][ T4485] RSP: 002b:00007ff2e39e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 227.569591][ T4485] RAX: ffffffffffffffda RBX: 00007ff2e4f1ef80 RCX: 00007ff2e4d66ff9 [ 227.577402][ T4485] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 227.585214][ T4485] RBP: 00007ff2e39e0090 R08: 0000000020000200 R09: 0000000000000000 [ 227.593110][ T4485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.600922][ T4485] R13: 0000000000000000 R14: 00007ff2e4f1ef80 R15: 00007ffcb97eca98 [ 227.609478][ T15] usb 4-1: bad CDC descriptors [ 227.630371][ T4492] fuse: Unknown parameter 'use00000000000000000000' [ 227.645533][ T4494] devtmpfs: Unknown parameter 'posixacl' [ 227.652307][ T24] audit: type=1400 audit(1729498121.827:3770): avc: denied { read } for pid=4493 comm="syz.2.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.810492][ T288] usb 4-1: USB disconnect, device number 41 [ 227.879914][ T24] audit: type=1400 audit(1729498122.027:3771): avc: denied { setattr } for pid=4495 comm="syz.4.981" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 228.017045][ T24] audit: type=1400 audit(1729498122.187:3772): avc: denied { ioctl } for pid=4520 comm="syz.0.987" path="socket:[31741]" dev="sockfs" ino=31741 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.324668][ T4529] FAULT_INJECTION: forcing a failure. [ 228.324668][ T4529] name failslab, interval 1, probability 0, space 0, times 0 [ 228.337169][ T4529] CPU: 1 PID: 4529 Comm: syz.3.989 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 228.346689][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.356580][ T4529] Call Trace: [ 228.359774][ T4529] dump_stack_lvl+0x1e2/0x24b [ 228.364318][ T4529] ? panic+0x812/0x812 [ 228.368212][ T4529] ? bfq_pos_tree_add_move+0x43b/0x43b [ 228.373508][ T4529] dump_stack+0x15/0x17 [ 228.377511][ T4529] should_fail+0x3c6/0x510 [ 228.381757][ T4529] ? alloc_fs_context+0x64/0x680 [ 228.386527][ T4529] __should_failslab+0xa4/0xe0 [ 228.391129][ T4529] should_failslab+0x9/0x20 [ 228.395465][ T4529] kmem_cache_alloc_trace+0x3a/0x2e0 [ 228.400586][ T4529] alloc_fs_context+0x64/0x680 [ 228.405190][ T4529] ? _raw_read_unlock+0x25/0x40 [ 228.409874][ T4529] ? get_fs_type+0x460/0x4e0 [ 228.414313][ T4529] fs_context_for_mount+0x24/0x30 [ 228.419159][ T4529] do_new_mount+0x15c/0xb30 [ 228.423500][ T4529] ? do_move_mount_old+0x160/0x160 [ 228.428444][ T4529] ? security_capable+0x87/0xb0 [ 228.433309][ T4529] ? ns_capable+0x89/0xe0 [ 228.437473][ T4529] path_mount+0x56f/0xcb0 [ 228.441640][ T4529] __se_sys_mount+0x2c4/0x3b0 [ 228.446152][ T4529] ? __x64_sys_mount+0xd0/0xd0 [ 228.450752][ T4529] __x64_sys_mount+0xbf/0xd0 [ 228.455178][ T4529] do_syscall_64+0x34/0x70 [ 228.459462][ T4529] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 228.465159][ T4529] RIP: 0033:0x7efc0503fff9 [ 228.469410][ T4529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.488855][ T4529] RSP: 002b:00007efc03cb9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.497105][ T4529] RAX: ffffffffffffffda RBX: 00007efc051f7f80 RCX: 00007efc0503fff9 [ 228.504910][ T4529] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 228.512727][ T4529] RBP: 00007efc03cb9090 R08: 0000000020000200 R09: 0000000000000000 [ 228.520624][ T4529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.528435][ T4529] R13: 0000000000000000 R14: 00007efc051f7f80 R15: 00007fffa8287608 [ 228.575151][ T4531] fuse: Unknown parameter 'user_i00000000000000000000' [ 229.170236][ T4570] FAULT_INJECTION: forcing a failure. [ 229.170236][ T4570] name failslab, interval 1, probability 0, space 0, times 0 [ 229.183128][ T4570] CPU: 1 PID: 4570 Comm: syz.0.1000 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 229.192815][ T4570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.202701][ T4570] Call Trace: [ 229.205836][ T4570] dump_stack_lvl+0x1e2/0x24b [ 229.210342][ T4570] ? panic+0x812/0x812 [ 229.214250][ T4570] ? bfq_pos_tree_add_move+0x43b/0x43b [ 229.219544][ T4570] dump_stack+0x15/0x17 [ 229.223538][ T4570] should_fail+0x3c6/0x510 [ 229.227791][ T4570] ? fuse_init_fs_context+0x54/0x200 [ 229.232912][ T4570] __should_failslab+0xa4/0xe0 [ 229.237512][ T4570] should_failslab+0x9/0x20 [ 229.241941][ T4570] kmem_cache_alloc_trace+0x3a/0x2e0 [ 229.247059][ T4570] fuse_init_fs_context+0x54/0x200 [ 229.252004][ T4570] ? bpf_prog_type_fuse_show+0x30/0x30 [ 229.257300][ T4570] alloc_fs_context+0x573/0x680 [ 229.261987][ T4570] fs_context_for_mount+0x24/0x30 [ 229.266849][ T4570] do_new_mount+0x15c/0xb30 [ 229.271185][ T4570] ? do_move_mount_old+0x160/0x160 [ 229.276133][ T4570] ? security_capable+0x87/0xb0 [ 229.281006][ T4570] ? ns_capable+0x89/0xe0 [ 229.285225][ T4570] path_mount+0x56f/0xcb0 [ 229.289325][ T4570] __se_sys_mount+0x2c4/0x3b0 [ 229.293839][ T4570] ? __x64_sys_mount+0xd0/0xd0 [ 229.298438][ T4570] __x64_sys_mount+0xbf/0xd0 [ 229.302866][ T4570] do_syscall_64+0x34/0x70 [ 229.307118][ T4570] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 229.312850][ T4570] RIP: 0033:0x7f14e0657ff9 [ 229.317100][ T4570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.336553][ T4570] RSP: 002b:00007f14df2d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 229.344886][ T4570] RAX: ffffffffffffffda RBX: 00007f14e080ff80 RCX: 00007f14e0657ff9 [ 229.352697][ T4570] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 229.360584][ T4570] RBP: 00007f14df2d1090 R08: 0000000020000200 R09: 0000000000000000 [ 229.368394][ T4570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.376304][ T4570] R13: 0000000000000000 R14: 00007f14e080ff80 R15: 00007fff9256c908 [ 229.400672][ T4572] syz.1.1001[4572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.400728][ T4572] syz.1.1001[4572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.413951][ T4572] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 229.637186][ T4567] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 229.644042][ T4567] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 229.654525][ T4567] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 229.675465][ T4567] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 229.682423][ T4567] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 229.753756][ T4585] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 229.763481][ T4584] fuse: Unknown parameter 'user_i00000000000000000000' [ 229.782802][ T24] audit: type=1400 audit(1729498123.957:3773): avc: denied { mounton } for pid=4566 comm="syz.4.999" path="/16/file1/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 229.783556][ T4589] SELinux: security_context_str_to_sid(staff_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 229.827249][ T24] audit: type=1400 audit(1729498123.957:3774): avc: denied { write } for pid=4566 comm="syz.4.999" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 229.849077][ T24] audit: type=1400 audit(1729498123.957:3775): avc: denied { add_name } for pid=4566 comm="syz.4.999" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 229.869672][ T24] audit: type=1400 audit(1729498123.987:3776): avc: denied { remove_name } for pid=4566 comm="syz.4.999" name=".index" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 229.892424][ T24] audit: type=1400 audit(1729498123.987:3777): avc: denied { rmdir } for pid=4566 comm="syz.4.999" name=".index" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 229.926544][ T4585] EXT4-fs (loop2): failed to initialize system zone (-117) [ 229.936766][ T4585] EXT4-fs (loop2): mount failed [ 229.942453][ T24] audit: type=1400 audit(1729498124.127:3778): avc: denied { mac_admin } for pid=4590 comm="syz.3.1006" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.963388][ T4591] SELinux: Context ì is not valid (left unmapped). [ 230.019163][ T4193] attempt to access beyond end of device [ 230.019163][ T4193] loop4: rw=524288, want=45072, limit=40427 [ 230.030565][ T4193] attempt to access beyond end of device [ 230.030565][ T4193] loop4: rw=0, want=45072, limit=40427 [ 230.280442][ T4585] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 230.287731][ T4585] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 230.296042][ T4585] F2FS-fs (loop2): Unrecognized mount option "user_xatr" or missing value [ 230.376228][ T1569] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 230.417112][ T4604] syz.0.1010[4604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.417172][ T4604] syz.0.1010[4604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.427954][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.474599][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.504608][ T4599] device bridge_slave_0 entered promiscuous mode [ 230.528213][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.539200][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.546601][ T4599] device bridge_slave_1 entered promiscuous mode [ 230.650882][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.657816][ T4599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.665021][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.671861][ T4599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.711041][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.711082][ T4613] FAULT_INJECTION: forcing a failure. [ 230.711082][ T4613] name failslab, interval 1, probability 0, space 0, times 0 [ 230.730824][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.732826][ T4613] CPU: 0 PID: 4613 Comm: syz.1.1012 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 230.747384][ T4613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.757270][ T4613] Call Trace: [ 230.760412][ T4613] dump_stack_lvl+0x1e2/0x24b [ 230.764919][ T4613] ? panic+0x812/0x812 [ 230.768815][ T4613] ? path_mount+0x56f/0xcb0 [ 230.773153][ T4613] ? bfq_pos_tree_add_move+0x43b/0x43b [ 230.778458][ T4613] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 230.784358][ T4613] dump_stack+0x15/0x17 [ 230.788339][ T4613] should_fail+0x3c6/0x510 [ 230.792604][ T4613] ? generic_parse_monolithic+0x268/0x3f0 [ 230.798159][ T4613] __should_failslab+0xa4/0xe0 [ 230.802751][ T4613] should_failslab+0x9/0x20 [ 230.807087][ T4613] __kmalloc_track_caller+0x5f/0x320 [ 230.812207][ T4613] kmemdup_nul+0x2a/0xa0 [ 230.816286][ T4613] generic_parse_monolithic+0x268/0x3f0 [ 230.821670][ T4613] ? vfs_parse_fs_string+0x220/0x220 [ 230.826885][ T4613] ? fuse_init_fs_context+0xfa/0x200 [ 230.829991][ T1569] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.832020][ T4613] ? alloc_fs_context+0x587/0x680 [ 230.841975][ T1569] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.846778][ T4613] parse_monolithic_mount_data+0x6c/0x80 [ 230.858456][ T1569] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.863058][ T4613] do_new_mount+0x28b/0xb30 [ 230.863068][ T4613] ? do_move_mount_old+0x160/0x160 [ 230.863079][ T4613] ? security_capable+0x87/0xb0 [ 230.863096][ T4613] ? ns_capable+0x89/0xe0 [ 230.874090][ T1569] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 42037, setting to 1024 [ 230.878108][ T4613] path_mount+0x56f/0xcb0 [ 230.883362][ T375] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 230.887839][ T4613] __se_sys_mount+0x2c4/0x3b0 [ 230.892129][ T1569] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.902931][ T4613] ? __x64_sys_mount+0xd0/0xd0 [ 230.902942][ T4613] __x64_sys_mount+0xbf/0xd0 [ 230.902951][ T4613] do_syscall_64+0x34/0x70 [ 230.902963][ T4613] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 230.902979][ T4613] RIP: 0033:0x7f6563138ff9 [ 230.954916][ T4613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.974348][ T4613] RSP: 002b:00007f6561db2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 230.982685][ T4613] RAX: ffffffffffffffda RBX: 00007f65632f0f80 RCX: 00007f6563138ff9 [ 230.990486][ T4613] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 230.998298][ T4613] RBP: 00007f6561db2090 R08: 0000000020000200 R09: 0000000000000000 [ 231.006107][ T4613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.014077][ T4613] R13: 0000000000000000 R14: 00007f65632f0f80 R15: 00007ffed02ce808 [ 231.024085][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.052903][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.070519][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.077399][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.099952][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.113960][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.120940][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.154170][ T4599] device veth0_vlan entered promiscuous mode [ 231.160579][ T1569] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.167306][ T4599] device veth1_macvtap entered promiscuous mode [ 231.175733][ T1569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.184251][ T1569] usb 4-1: Product: syz [ 231.188256][ T1569] usb 4-1: Manufacturer: syz [ 231.192845][ T1569] usb 4-1: SerialNumber: syz [ 231.201077][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.209321][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.217387][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.224945][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.232859][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.246461][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.255493][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.414462][ T4631] fuse: Unknown parameter 'user_i00000000000000000000' [ 231.434742][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.442900][ T375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.453900][ T24] audit: type=1400 audit(1729498125.607:3779): avc: denied { listen } for pid=4635 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 231.473931][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.482638][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.490892][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.513282][ T4591] serio: Serial port ptm0 [ 231.518000][ T1511] device bridge_slave_1 left promiscuous mode [ 231.531263][ T375] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 231.534550][ T24] audit: type=1400 audit(1729498125.707:3780): avc: denied { mount } for pid=4638 comm="syz.2.1019" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 231.542318][ T375] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 231.577366][ T375] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 231.580753][ T1511] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.592174][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.624384][ T1511] device bridge_slave_0 left promiscuous mode [ 231.650068][ T24] audit: type=1400 audit(1729498125.807:3781): avc: denied { accept } for pid=4635 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 231.687135][ T375] usb 1-1: config 0 descriptor?? [ 231.770292][ T1511] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.824190][ T24] audit: type=1326 audit(1729498125.987:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de8647ff9 code=0x7ffc0000 [ 231.849416][ T24] audit: type=1326 audit(1729498125.987:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de8647ff9 code=0x7ffc0000 [ 231.873446][ T1569] cdc_ncm 4-1:1.0: bind() failure [ 231.879559][ T1569] cdc_ncm 4-1:1.1: bind() failure [ 231.884975][ T24] audit: type=1326 audit(1729498125.987:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563138ff9 code=0x7ffc0000 [ 231.933742][ T24] audit: type=1326 audit(1729498125.987:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563138ff9 code=0x7ffc0000 [ 231.957060][ T24] audit: type=1326 audit(1729498125.997:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f6563138ff9 code=0x7ffc0000 [ 231.961141][ T375] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 231.987055][ T24] audit: type=1326 audit(1729498125.997:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563138ff9 code=0x7ffc0000 [ 231.995736][ T1569] usb 4-1: USB disconnect, device number 42 [ 232.012198][ T24] audit: type=1326 audit(1729498125.997:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563138ff9 code=0x7ffc0000 [ 232.041137][ T1511] device veth1_macvtap left promiscuous mode [ 232.046987][ T1511] device veth0_vlan left promiscuous mode [ 232.199873][ T15] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 232.383369][ T4659] FAULT_INJECTION: forcing a failure. [ 232.383369][ T4659] name failslab, interval 1, probability 0, space 0, times 0 [ 232.395930][ T4659] CPU: 0 PID: 4659 Comm: syz.4.1022 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 232.405582][ T4659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.415473][ T4659] Call Trace: [ 232.418607][ T4659] dump_stack_lvl+0x1e2/0x24b [ 232.423114][ T4659] ? panic+0x812/0x812 [ 232.427019][ T4659] ? bfq_pos_tree_add_move+0x43b/0x43b [ 232.432324][ T4659] ? preempt_schedule_irq+0xe7/0x140 [ 232.437434][ T4659] ? preempt_schedule_notrace+0x140/0x140 [ 232.442992][ T4659] ? debug_smp_processor_id+0x17/0x20 [ 232.448199][ T4659] dump_stack+0x15/0x17 [ 232.452190][ T4659] should_fail+0x3c6/0x510 [ 232.456445][ T4659] ? generic_parse_monolithic+0x268/0x3f0 [ 232.462003][ T4659] __should_failslab+0xa4/0xe0 [ 232.466685][ T4659] should_failslab+0x9/0x20 [ 232.471023][ T4659] __kmalloc_track_caller+0x5f/0x320 [ 232.476149][ T4659] kmemdup_nul+0x2a/0xa0 [ 232.480225][ T4659] generic_parse_monolithic+0x268/0x3f0 [ 232.485611][ T4659] ? vfs_parse_fs_string+0x220/0x220 [ 232.490762][ T4659] ? fuse_init_fs_context+0xfa/0x200 [ 232.495849][ T4659] ? alloc_fs_context+0x587/0x680 [ 232.500711][ T4659] parse_monolithic_mount_data+0x6c/0x80 [ 232.506175][ T4659] do_new_mount+0x28b/0xb30 [ 232.510514][ T4659] ? do_move_mount_old+0x160/0x160 [ 232.515577][ T4659] ? security_capable+0x87/0xb0 [ 232.520237][ T4659] ? ns_capable+0x89/0xe0 [ 232.524574][ T4659] path_mount+0x56f/0xcb0 [ 232.528744][ T4659] __se_sys_mount+0x2c4/0x3b0 [ 232.533257][ T4659] ? __x64_sys_mount+0xd0/0xd0 [ 232.537968][ T4659] __x64_sys_mount+0xbf/0xd0 [ 232.542387][ T4659] do_syscall_64+0x34/0x70 [ 232.546641][ T4659] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 232.552371][ T4659] RIP: 0033:0x7f8de8647ff9 [ 232.556619][ T4659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.576062][ T4659] RSP: 002b:00007f8de72c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 232.584305][ T4659] RAX: ffffffffffffffda RBX: 00007f8de87fff80 RCX: 00007f8de8647ff9 [ 232.592144][ T4659] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 232.599926][ T4659] RBP: 00007f8de72c1090 R08: 0000000020000200 R09: 0000000000000000 [ 232.607735][ T4659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.615546][ T4659] R13: 0000000000000000 R14: 00007f8de87fff80 R15: 00007ffccff0f478 [ 232.769943][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 232.783960][ T15] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 232.793626][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 232.803138][ T15] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 232.911510][ T4682] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 232.921671][ T4686] xt_hashlimit: size too large, truncated to 1048576 [ 232.928314][ T4682] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038 (0x7fffffff) [ 232.970302][ T15] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 232.979258][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.997684][ T15] usb 3-1: Product: syz [ 233.001857][ T15] usb 3-1: Manufacturer: syz [ 233.006258][ T15] usb 3-1: SerialNumber: syz [ 233.014771][ T15] usb 3-1: config 0 descriptor?? [ 233.050406][ T15] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 233.080376][ T1569] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 233.551735][ T1570] usb 1-1: USB disconnect, device number 25 [ 233.689939][ T1569] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 233.700108][ T1569] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.712924][ T1569] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 233.721728][ T1569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.825549][ T4701] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 233.993192][ T4703] FAULT_INJECTION: forcing a failure. [ 233.993192][ T4703] name failslab, interval 1, probability 0, space 0, times 0 [ 234.005719][ T4703] CPU: 0 PID: 4703 Comm: syz.3.1034 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 234.015478][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 234.025455][ T4703] Call Trace: [ 234.028600][ T4703] dump_stack_lvl+0x1e2/0x24b [ 234.033099][ T4703] ? panic+0x812/0x812 [ 234.037004][ T4703] ? bfq_pos_tree_add_move+0x43b/0x43b [ 234.042305][ T4703] ? debug_smp_processor_id+0x17/0x20 [ 234.047506][ T4703] dump_stack+0x15/0x17 [ 234.051499][ T4703] should_fail+0x3c6/0x510 [ 234.055753][ T4703] ? generic_parse_monolithic+0x268/0x3f0 [ 234.061318][ T4703] __should_failslab+0xa4/0xe0 [ 234.065905][ T4703] should_failslab+0x9/0x20 [ 234.070247][ T4703] __kmalloc_track_caller+0x5f/0x320 [ 234.075364][ T4703] ? kfree+0xc3/0x270 [ 234.079191][ T4703] kmemdup_nul+0x2a/0xa0 [ 234.083263][ T4703] generic_parse_monolithic+0x268/0x3f0 [ 234.088732][ T4703] ? vfs_parse_fs_string+0x220/0x220 [ 234.093856][ T4703] ? fuse_init_fs_context+0xfa/0x200 [ 234.099058][ T4703] ? alloc_fs_context+0x587/0x680 [ 234.103921][ T4703] parse_monolithic_mount_data+0x6c/0x80 [ 234.109389][ T4703] do_new_mount+0x28b/0xb30 [ 234.113745][ T4703] ? do_move_mount_old+0x160/0x160 [ 234.118847][ T4703] ? security_capable+0x87/0xb0 [ 234.123545][ T4703] ? ns_capable+0x89/0xe0 [ 234.127718][ T4703] path_mount+0x56f/0xcb0 [ 234.131882][ T4703] __se_sys_mount+0x2c4/0x3b0 [ 234.136558][ T4703] ? __x64_sys_mount+0xd0/0xd0 [ 234.141160][ T4703] __x64_sys_mount+0xbf/0xd0 [ 234.145584][ T4703] do_syscall_64+0x34/0x70 [ 234.149839][ T4703] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 234.155562][ T4703] RIP: 0033:0x7efc0503fff9 [ 234.159820][ T4703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.179262][ T4703] RSP: 002b:00007efc03cb9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 234.187500][ T4703] RAX: ffffffffffffffda RBX: 00007efc051f7f80 RCX: 00007efc0503fff9 [ 234.195305][ T4703] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 234.203118][ T4703] RBP: 00007efc03cb9090 R08: 0000000020000200 R09: 0000000000000000 [ 234.210929][ T4703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.218741][ T4703] R13: 0000000000000000 R14: 00007efc051f7f80 R15: 00007fffa8287608 [ 234.289928][ T5] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 234.543624][ T4714] EXT4-fs (loop3): 1 orphan inode deleted [ 234.549271][ T4714] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 234.558215][ T4714] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038 (0x7fffffff) [ 234.620288][ T15] scsi host1: usb-storage 3-1:0.0 [ 234.633602][ T15] usb 3-1: USB disconnect, device number 34 [ 234.649859][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 234.890207][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.901129][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.910835][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.923803][ T5] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 234.932784][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.941451][ T5] usb 5-1: config 0 descriptor?? [ 235.229891][ T15] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 235.449883][ T375] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 235.469868][ T15] usb 3-1: Using ep0 maxpacket: 16 [ 235.679910][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 235.685789][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 235.693265][ T5] usb 5-1: USB disconnect, device number 40 [ 235.709891][ T375] usb 4-1: Using ep0 maxpacket: 16 [ 235.749960][ T15] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 235.759058][ T15] usb 3-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 235.767332][ T15] usb 3-1: Product: syz [ 235.771434][ T15] usb 3-1: Manufacturer: syz [ 235.775902][ T15] usb 3-1: SerialNumber: syz [ 235.785629][ T15] usb 3-1: config 0 descriptor?? [ 235.810020][ T1569] usb 2-1: string descriptor 0 read error: -71 [ 235.816708][ T1569] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 235.826481][ T1569] usb 2-1: USB disconnect, device number 43 [ 235.833235][ T15] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 235.841014][ T15] usb 3-1: Detected FT-X [ 235.869960][ T375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.880892][ T375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.890690][ T375] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.903614][ T375] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 235.912727][ T375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.933254][ T375] usb 4-1: config 0 descriptor?? [ 236.409906][ T1569] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 236.870116][ T1569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.884341][ T1569] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.900528][ T1569] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.911273][ T1569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.954999][ T1569] usb 5-1: config 0 descriptor?? [ 237.465315][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.478173][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.487571][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.495389][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.508089][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.515853][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.523339][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.533749][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.541431][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.548750][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.556421][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.564193][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.571645][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.578926][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.586699][ T1569] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 237.595789][ T1569] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 237.610010][ T1569] plantronics 0003:047F:FFFF.002C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 237.640430][ T15] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 237.649058][ T4752] FAULT_INJECTION: forcing a failure. [ 237.649058][ T4752] name failslab, interval 1, probability 0, space 0, times 0 [ 237.659941][ T15] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 237.693294][ T4752] CPU: 1 PID: 4752 Comm: syz.0.1045 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 237.699960][ T15] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 237.703005][ T4752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 237.719403][ T4752] Call Trace: [ 237.722543][ T4752] dump_stack_lvl+0x1e2/0x24b [ 237.727043][ T4752] ? panic+0x812/0x812 [ 237.730950][ T4752] ? bfq_pos_tree_add_move+0x43b/0x43b [ 237.736417][ T4752] ? debug_smp_processor_id+0x17/0x20 [ 237.741628][ T4752] dump_stack+0x15/0x17 [ 237.745616][ T4752] should_fail+0x3c6/0x510 [ 237.749871][ T4752] ? generic_parse_monolithic+0x268/0x3f0 [ 237.750095][ T15] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 237.755439][ T4752] __should_failslab+0xa4/0xe0 [ 237.767843][ T4752] should_failslab+0x9/0x20 [ 237.772178][ T4752] __kmalloc_track_caller+0x5f/0x320 [ 237.777305][ T4752] ? kfree+0xc3/0x270 [ 237.781121][ T4752] kmemdup_nul+0x2a/0xa0 [ 237.785199][ T4752] generic_parse_monolithic+0x268/0x3f0 [ 237.788774][ T15] usb 3-1: USB disconnect, device number 35 [ 237.790579][ T4752] ? vfs_parse_fs_string+0x220/0x220 [ 237.790589][ T4752] ? fuse_init_fs_context+0xfa/0x200 [ 237.790600][ T4752] ? alloc_fs_context+0x587/0x680 [ 237.790617][ T4752] parse_monolithic_mount_data+0x6c/0x80 [ 237.808580][ T15] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 237.811407][ T4752] do_new_mount+0x28b/0xb30 [ 237.811417][ T4752] ? do_move_mount_old+0x160/0x160 [ 237.811427][ T4752] ? security_capable+0x87/0xb0 [ 237.811443][ T4752] ? ns_capable+0x89/0xe0 [ 237.829025][ T15] ftdi_sio 3-1:0.0: device disconnected [ 237.830328][ T4752] path_mount+0x56f/0xcb0 [ 237.830340][ T4752] __se_sys_mount+0x2c4/0x3b0 [ 237.830350][ T4752] ? __x64_sys_mount+0xd0/0xd0 [ 237.830359][ T4752] __x64_sys_mount+0xbf/0xd0 [ 237.830376][ T4752] do_syscall_64+0x34/0x70 [ 237.871476][ T4752] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 237.877189][ T4752] RIP: 0033:0x7f14e0657ff9 [ 237.881448][ T4752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.900887][ T4752] RSP: 002b:00007f14df2d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.909468][ T4752] RAX: ffffffffffffffda RBX: 00007f14e080ff80 RCX: 00007f14e0657ff9 [ 237.917712][ T4752] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 237.925523][ T4752] RBP: 00007f14df2d1090 R08: 0000000020000200 R09: 0000000000000000 [ 237.933333][ T4752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.941143][ T4752] R13: 0000000000000000 R14: 00007f14e080ff80 R15: 00007fff9256c908 [ 238.320114][ T15] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 238.404963][ T4791] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.408632][ T4785] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1055: casefold flag without casefold feature [ 238.412956][ T375] usbhid 4-1:0.0: can't add hid device: -71 [ 238.425696][ T4785] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1055: missing EA_INODE flag [ 238.432489][ T375] usbhid: probe of 4-1:0.0 failed with error -71 [ 238.442420][ T4785] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1055: error while reading EA inode 12 err=-117 [ 238.452871][ T375] usb 4-1: USB disconnect, device number 43 [ 238.460966][ T4785] EXT4-fs (loop3): 1 orphan inode deleted [ 238.471703][ T4785] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 238.732007][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 238.732026][ T24] audit: type=1400 audit(1729498132.907:3818): avc: denied { wake_alarm } for pid=4795 comm="syz.0.1058" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.760035][ T1569] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 238.772367][ T24] audit: type=1400 audit(1729498132.947:3819): avc: denied { read } for pid=4795 comm="syz.0.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.881896][ T4801] FAULT_INJECTION: forcing a failure. [ 238.881896][ T4801] name failslab, interval 1, probability 0, space 0, times 0 [ 238.894446][ T15] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 238.894456][ T4801] CPU: 1 PID: 4801 Comm: syz.0.1059 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 238.894472][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.904510][ T15] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.914211][ T4801] Call Trace: [ 238.914230][ T4801] dump_stack_lvl+0x1e2/0x24b [ 238.914238][ T4801] ? panic+0x812/0x812 [ 238.914247][ T4801] ? bfq_pos_tree_add_move+0x43b/0x43b [ 238.914257][ T4801] ? debug_smp_processor_id+0x17/0x20 [ 238.914272][ T4801] dump_stack+0x15/0x17 [ 238.924877][ T15] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 238.936969][ T4801] should_fail+0x3c6/0x510 [ 238.936981][ T4801] ? generic_parse_monolithic+0x268/0x3f0 [ 238.936991][ T4801] __should_failslab+0xa4/0xe0 [ 238.937002][ T4801] should_failslab+0x9/0x20 [ 238.937012][ T4801] __kmalloc_track_caller+0x5f/0x320 [ 238.937038][ T4801] ? kfree+0xc3/0x270 [ 238.940523][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.944683][ T4801] kmemdup_nul+0x2a/0xa0 [ 238.944696][ T4801] generic_parse_monolithic+0x268/0x3f0 [ 238.944713][ T4801] ? vfs_parse_fs_string+0x220/0x220 [ 239.022407][ T4801] ? fuse_init_fs_context+0xfa/0x200 [ 239.027529][ T4801] ? alloc_fs_context+0x587/0x680 [ 239.032383][ T4801] parse_monolithic_mount_data+0x6c/0x80 [ 239.037850][ T4801] do_new_mount+0x28b/0xb30 [ 239.042191][ T4801] ? do_move_mount_old+0x160/0x160 [ 239.047134][ T4801] ? security_capable+0x87/0xb0 [ 239.051821][ T4801] ? ns_capable+0x89/0xe0 [ 239.055998][ T4801] path_mount+0x56f/0xcb0 [ 239.060159][ T4801] __se_sys_mount+0x2c4/0x3b0 [ 239.064679][ T4801] ? __x64_sys_mount+0xd0/0xd0 [ 239.069283][ T4801] __x64_sys_mount+0xbf/0xd0 [ 239.073700][ T4801] do_syscall_64+0x34/0x70 [ 239.077961][ T4801] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 239.083791][ T4801] RIP: 0033:0x7f14e0657ff9 [ 239.088043][ T4801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.107490][ T4801] RSP: 002b:00007f14df2d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.115732][ T4801] RAX: ffffffffffffffda RBX: 00007f14e080ff80 RCX: 00007f14e0657ff9 [ 239.123543][ T4801] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 239.131390][ T4801] RBP: 00007f14df2d1090 R08: 0000000020000200 R09: 0000000000000000 [ 239.139167][ T4801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.146973][ T4801] R13: 0000000000000000 R14: 00007f14e080ff80 R15: 00007fff9256c908 [ 239.451829][ T1569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.505727][ T1569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.549943][ T15] usb 2-1: string descriptor 0 read error: -71 [ 239.556550][ T15] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 239.570864][ T15] usb 2-1: USB disconnect, device number 44 [ 239.732673][ T24] audit: type=1400 audit(1729498133.867:3820): avc: denied { checkpoint_restore } for pid=4807 comm="syz.0.1061" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.756835][ T1569] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 239.815439][ T1569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.827415][ T1568] usb 5-1: USB disconnect, device number 41 [ 239.837839][ T1569] usb 3-1: config 0 descriptor?? [ 240.111353][ T4830] overlayfs: failed to resolve './file1': -2 [ 240.289941][ T15] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 240.309869][ T375] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 240.352196][ T1569] sony 0003:1345:3008.002D: hiddev96,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 240.382773][ T1569] sony 0003:1345:3008.002D: failed to claim input [ 240.560923][ T4838] tipc: Started in network mode [ 240.565616][ T4838] tipc: Own node identity , cluster identity 4711 [ 240.572631][ T4838] tipc: Failed to set node id, please configure manually [ 240.579963][ T4838] tipc: Enabling of bearer rejected, failed to enable media [ 240.589400][ T1569] usb 3-1: USB disconnect, device number 36 [ 240.630595][ T4837] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1068'. [ 240.727406][ T24] audit: type=1400 audit(1729498134.867:3821): avc: denied { name_bind } for pid=4835 comm="syz.4.1068" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 240.800273][ T375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.819101][ T375] usb 1-1: config 0 has no interfaces? [ 240.833444][ T15] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.835042][ T375] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.843402][ T15] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.865027][ T15] usb 2-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 240.865492][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.873933][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.890321][ T15] usb 2-1: config 0 descriptor?? [ 240.890657][ T375] usb 1-1: config 0 descriptor?? [ 240.930580][ T15] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 241.069875][ T1569] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 241.226151][ T4843] SELinux: Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped). [ 241.240121][ T24] audit: type=1400 audit(1729498135.417:3822): avc: denied { relabelto } for pid=4841 comm="syz.2.1069" name="cpuset.cpus" dev="cgroup" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:printer_device_t:s0" [ 241.268362][ T24] audit: type=1400 audit(1729498135.437:3823): avc: denied { associate } for pid=4841 comm="syz.2.1069" name="cpuset.cpus" dev="cgroup" ino=217 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:printer_device_t:s0" [ 241.322002][ T24] audit: type=1400 audit(1729498135.467:3824): avc: denied { read write } for pid=4841 comm="syz.2.1069" name="cpuset.cpus" dev="cgroup" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:printer_device_t:s0" [ 241.355210][ T24] audit: type=1400 audit(1729498135.467:3825): avc: denied { open } for pid=4841 comm="syz.2.1069" path="/syzcgroup/cpu/syz2/cpuset.cpus" dev="cgroup" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:printer_device_t:s0" [ 241.391155][ T4849] FAULT_INJECTION: forcing a failure. [ 241.391155][ T4849] name failslab, interval 1, probability 0, space 0, times 0 [ 241.444890][ T4849] CPU: 1 PID: 4849 Comm: syz.3.1070 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 241.454601][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 241.464486][ T4849] Call Trace: [ 241.467622][ T4849] dump_stack_lvl+0x1e2/0x24b [ 241.472136][ T4849] ? bfq_pos_tree_add_move+0x43b/0x43b [ 241.477423][ T4849] ? kasan_check_range+0x88/0x2a0 [ 241.482281][ T4849] dump_stack+0x15/0x17 [ 241.486275][ T4849] should_fail+0x3c6/0x510 [ 241.490528][ T4849] ? selinux_sb_alloc_security+0x53/0x200 [ 241.496094][ T4849] __should_failslab+0xa4/0xe0 [ 241.500685][ T4849] should_failslab+0x9/0x20 [ 241.505025][ T4849] kmem_cache_alloc_trace+0x3a/0x2e0 [ 241.510149][ T4849] ? __kasan_check_write+0x14/0x20 [ 241.515188][ T4849] ? down_write+0xd7/0x150 [ 241.519530][ T4849] selinux_sb_alloc_security+0x53/0x200 [ 241.524907][ T4849] security_sb_alloc+0x62/0x90 [ 241.529505][ T4849] alloc_super+0x138/0x780 [ 241.533754][ T4849] sget_fc+0x2e8/0x740 [ 241.537659][ T4849] ? kill_litter_super+0xa0/0xa0 [ 241.542434][ T4849] ? fuse_reconfigure+0xb0/0xb0 [ 241.547122][ T4849] get_tree_nodev+0x2a/0x160 [ 241.551548][ T4849] ? fuse_get_tree+0x80/0xd0 [ 241.555975][ T4849] fuse_get_tree+0x8f/0xd0 [ 241.560252][ T4849] vfs_get_tree+0x88/0x290 [ 241.564480][ T4849] do_new_mount+0x2ba/0xb30 [ 241.568838][ T4849] ? do_move_mount_old+0x160/0x160 [ 241.573768][ T4849] ? security_capable+0x87/0xb0 [ 241.578458][ T4849] ? ns_capable+0x89/0xe0 [ 241.582618][ T4849] path_mount+0x56f/0xcb0 [ 241.586784][ T4849] __se_sys_mount+0x2c4/0x3b0 [ 241.591311][ T4849] ? __x64_sys_mount+0xd0/0xd0 [ 241.595899][ T4849] ? fpu__clear_all+0x20/0x20 [ 241.600413][ T4849] __x64_sys_mount+0xbf/0xd0 [ 241.604841][ T4849] do_syscall_64+0x34/0x70 [ 241.609091][ T4849] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 241.615052][ T4849] RIP: 0033:0x7efc0503fff9 [ 241.619283][ T4849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.638718][ T4849] RSP: 002b:00007efc03cb9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.646980][ T4849] RAX: ffffffffffffffda RBX: 00007efc051f7f80 RCX: 00007efc0503fff9 [ 241.654777][ T4849] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 241.662589][ T4849] RBP: 00007efc03cb9090 R08: 0000000020000200 R09: 0000000000000000 [ 241.670398][ T4849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.678204][ T4849] R13: 0000000000000000 R14: 00007efc051f7f80 R15: 00007fffa8287608 [ 241.720516][ T4843] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.742017][ T4843] EXT4-fs (loop2): orphan cleanup on readonly fs [ 241.745087][ T24] audit: type=1400 audit(1729498135.917:3826): avc: denied { write } for pid=4852 comm="syz.3.1071" path="socket:[33328]" dev="sockfs" ino=33328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.755043][ T4843] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3345: comm syz.2.1069: Allocating blocks 41-42 which overlap fs metadata [ 241.785606][ T4843] EXT4-fs (loop2): Remounting filesystem read-only [ 241.792158][ T1569] usb 5-1: not running at top speed; connect to a high speed hub [ 241.800015][ T4843] Quota error (device loop2): write_blk: dquota write failed [ 241.800148][ T4843] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.1069: Failed to acquire dquot type 0 [ 241.800517][ T4843] EXT4-fs (loop2): 1 truncate cleaned up [ 241.800890][ T4843] EXT4-fs (loop2): pa ffff88811017a1f8: logic 1, phys. 41, len 23 [ 241.800899][ T4843] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4362: group 0, free 22, pa_free 23 [ 241.801253][ T4843] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002 [ 241.909974][ T1569] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 241.918785][ T1569] usb 5-1: config 1 has no interface number 1 [ 241.924832][ T1569] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 242.039105][ T4857] EXT4-fs error (device loop3): mb_free_blocks:1524: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 242.053779][ T4857] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.1072: invalid indirect mapped block 1 (level 1) [ 242.067582][ T4857] EXT4-fs (loop3): 1 truncate cleaned up [ 242.073363][ T4857] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 242.129980][ T1569] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.139050][ T1569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.147006][ T1569] usb 5-1: Product: syz [ 242.151173][ T1569] usb 5-1: Manufacturer: syz [ 242.156342][ T1569] usb 5-1: SerialNumber: syz [ 242.552803][ T2954] usb 2-1: USB disconnect, device number 45 [ 242.959871][ T2954] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 243.075237][ T288] usb 1-1: USB disconnect, device number 26 [ 243.208736][ T4879] EXT4-fs (loop2): Unrecognized mount option "audit" or missing value [ 243.329935][ T2954] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 243.340181][ T2954] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.364231][ T4867] F2FS-fs (loop3): Test dummy encryption mode enabled [ 243.367011][ T2954] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 243.372271][ T4867] F2FS-fs (loop3): invalid crc value [ 243.380096][ T2954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.397746][ T4867] F2FS-fs (loop3): Found nat_bits in checkpoint [ 243.420575][ T4867] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 243.446615][ T4888] incfs: Options parsing error. -22 [ 243.451964][ T4888] incfs: mount failed -22 [ 243.609995][ T421] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 243.717138][ T1569] usb 5-1: USB disconnect, device number 42 [ 243.899932][ T421] usb 1-1: Using ep0 maxpacket: 16 [ 244.030355][ T421] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 244.050280][ T421] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 244.098205][ T421] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 244.109958][ T1569] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 244.153842][ T421] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 244.200730][ T421] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 244.248357][ T421] usb 1-1: config 1 interface 0 has no altsetting 0 [ 244.271195][ T421] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 244.289360][ T421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.410225][ T1569] usb 5-1: Using ep0 maxpacket: 16 [ 244.415681][ T421] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 244.780286][ T1569] usb 5-1: config 160 has an invalid descriptor of length 165, skipping remainder of the config [ 244.912041][ T1569] usb 5-1: config 160 has no interfaces? [ 245.009953][ T1569] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 245.018896][ T1569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 245.026847][ T1569] usb 5-1: SerialNumber: syz [ 245.180280][ T4914] fuse: Unknown parameter '0x0000000000000007' [ 245.330616][ T1569] usb 5-1: USB disconnect, device number 43 [ 245.342246][ T4918] erofs: (device loop3): mounted with root inode @ nid 36. [ 245.532249][ T4937] EXT4-fs (loop3): 1 orphan inode deleted [ 245.537848][ T4937] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue [ 245.559790][ T4937] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038 (0x7fffffff) [ 245.629919][ T2954] usb 2-1: string descriptor 0 read error: -71 [ 245.638655][ T2954] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 245.661556][ T2954] usb 2-1: USB disconnect, device number 46 [ 245.790679][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 245.950607][ T4946] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 245.962953][ T4946] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 245.975898][ T4946] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 246.015319][ T4946] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 246.023114][ T4946] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 246.074770][ T4961] fuse: Unknown parameter '0x0000000000000007' [ 246.089643][ T4962] attempt to access beyond end of device [ 246.089643][ T4962] loop3: rw=10241, want=53256, limit=40427 [ 246.096304][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 246.096316][ T24] audit: type=1326 audit(1729498140.257:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.2.1096" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2e4d66ff9 code=0x0 [ 246.199953][ T421] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 246.213284][ T421] usb 1-1: USB disconnect, device number 27 [ 246.219940][ T5] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 246.522144][ T24] audit: type=1326 audit(1729498140.697:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.2.1096" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2e4d66ff9 code=0x0 [ 246.545787][ T1878] attempt to access beyond end of device [ 246.545787][ T1878] loop3: rw=2049, want=45104, limit=40427 [ 246.557000][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 246.676665][ T5003] fuse: Unknown parameter '0x0000000000000007' [ 246.699636][ T24] audit: type=1400 audit(1729498140.867:3853): avc: denied { relabelfrom } for pid=5004 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 246.700002][ T5] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 246.739858][ T421] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 246.747155][ T5] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 246.757647][ T24] audit: type=1400 audit(1729498140.897:3854): avc: denied { relabelto } for pid=5004 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 246.777607][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.785063][ T5005] device syzkaller0 entered promiscuous mode [ 246.899996][ T1569] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 246.949914][ T5] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.958876][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.966951][ T5] usb 5-1: Product: syz [ 246.971040][ T5] usb 5-1: Manufacturer: syz [ 246.975954][ T5] usb 5-1: SerialNumber: syz [ 246.984679][ T5013] xt_hashlimit: size too large, truncated to 1048576 [ 247.019857][ T421] usb 1-1: device descriptor read/64, error -71 [ 247.227101][ T24] audit: type=1400 audit(1729498141.397:3855): avc: denied { append } for pid=4950 comm="syz.4.1093" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 247.259925][ T1569] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 247.270219][ T1569] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.284783][ T1569] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 247.293693][ T1569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.303147][ T24] audit: type=1400 audit(1729498141.477:3856): avc: denied { create } for pid=4950 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 247.419852][ T421] usb 1-1: device descriptor read/64, error -71 [ 247.592657][ T4993] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.611016][ T4993] EXT4-fs (loop2): failed to initialize system zone (-117) [ 247.618095][ T4993] EXT4-fs (loop2): mount failed [ 247.664311][ T5022] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.671332][ T5022] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.691721][ T5022] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.698607][ T5022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.705766][ T5022] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.712613][ T5022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.722012][ T5022] device bridge0 entered promiscuous mode [ 247.734932][ T421] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 247.989130][ T5024] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 247.998384][ T5024] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038 (0x7fffffff) [ 248.050809][ T421] usb 1-1: device descriptor read/64, error -71 [ 248.177142][ T24] audit: type=1400 audit(1729498142.337:3857): avc: denied { create } for pid=5023 comm="syz.3.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 248.459863][ T421] usb 1-1: device descriptor read/64, error -71 [ 248.579920][ T421] usb usb1-port1: attempt power cycle [ 248.752038][ T5035] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 248.752038][ T5035] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 248.752038][ T5035] [ 248.769661][ T5035] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 248.781173][ T5035] EXT4-fs (loop3): 1 truncate cleaned up [ 248.786632][ T5035] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,auto_da_alloc,debug_want_extra_isize=0x0000000000000068,nodelalloc,noacl,abort,,errors=continue [ 249.009888][ T421] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 249.029918][ T5] usb 5-1: 0:2 : does not exist [ 249.047699][ T5] usb 5-1: USB disconnect, device number 44 [ 249.209987][ T421] usb 1-1: device descriptor read/8, error -71 [ 249.479981][ T421] usb 1-1: device descriptor read/8, error -71 [ 249.518987][ T5057] fuse: Unknown parameter '0x0000000000000007' [ 249.553260][ T24] audit: type=1400 audit(1729498143.727:3858): avc: denied { create } for pid=5055 comm="syz.0.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 249.572831][ T24] audit: type=1400 audit(1729498143.727:3859): avc: denied { ioctl } for pid=5055 comm="syz.0.1115" path="socket:[33722]" dev="sockfs" ino=33722 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.789927][ T1569] usb 3-1: string descriptor 0 read error: -71 [ 249.885316][ T1569] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 249.915593][ T1569] usb 3-1: USB disconnect, device number 37 [ 250.039890][ T315] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 250.201590][ T5067] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 250.209455][ T5067] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 250.218586][ T5067] F2FS-fs (loop2): invalid crc value [ 250.225201][ T5067] F2FS-fs (loop2): Found nat_bits in checkpoint [ 250.229876][ T1570] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 250.245213][ T24] audit: type=1400 audit(1729498144.417:3860): avc: denied { write } for pid=5075 comm="syz.0.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 250.262426][ T5067] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 250.272010][ T5067] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 250.323072][ T5067] attempt to access beyond end of device [ 250.323072][ T5067] loop2: rw=2049, want=45104, limit=40427 [ 250.335815][ T5067] xt_TCPMSS: Only works on TCP SYN packets [ 250.350803][ T3890] F2FS-fs (loop2): access invalid blkaddr:2048 [ 250.356854][ T3890] CPU: 0 PID: 3890 Comm: syz-executor Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 250.366659][ T3890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.376547][ T3890] Call Trace: [ 250.379680][ T3890] dump_stack_lvl+0x1e2/0x24b [ 250.384192][ T3890] ? f2fs_get_next_page_offset+0x750/0x750 [ 250.389839][ T3890] ? bfq_pos_tree_add_move+0x43b/0x43b [ 250.395123][ T3890] dump_stack+0x15/0x17 [ 250.399117][ T3890] f2fs_is_valid_blkaddr+0xc87/0x1370 [ 250.404332][ T3890] f2fs_map_blocks+0x174c/0x3e50 [ 250.409100][ T3890] ? f2fs_do_map_lock+0x280/0x280 [ 250.413961][ T3890] ? bio_add_page+0x2cd/0x460 [ 250.418472][ T3890] ? xa_load+0x488/0x4a0 [ 250.422550][ T3890] f2fs_mpage_readpages+0xef9/0x24a0 [ 250.427675][ T3890] ? f2fs_verify_bio+0x440/0x440 [ 250.432535][ T3890] ? __this_cpu_preempt_check+0x13/0x20 [ 250.437916][ T3890] ? __mod_memcg_lruvec_state+0x131/0x310 [ 250.443467][ T3890] ? xas_nomem+0x19a/0x1d0 [ 250.447724][ T3890] ? __kasan_check_read+0x11/0x20 [ 250.452581][ T3890] f2fs_readahead+0xfd/0x250 [ 250.457007][ T3890] ? blk_start_plug+0x5a/0x170 [ 250.461692][ T3890] read_pages+0x17e/0xbf0 [ 250.465862][ T3890] ? page_cache_ra_unbounded+0x890/0x890 [ 250.471327][ T3890] ? add_to_page_cache_lru+0x221/0x2c0 [ 250.476621][ T3890] ? add_to_page_cache_locked+0x40/0x40 [ 250.482004][ T3890] ? xa_load+0x488/0x4a0 [ 250.486083][ T3890] page_cache_ra_unbounded+0x6be/0x890 [ 250.491376][ T3890] ? memcpy+0x56/0x70 [ 250.495199][ T3890] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 250.501534][ T3890] ? hashlen_string+0x120/0x120 [ 250.506217][ T3890] ondemand_readahead+0x863/0xc60 [ 250.511080][ T3890] ? do_wp_page+0x981/0xca0 [ 250.515420][ T3890] page_cache_sync_ra+0x26c/0x2c0 [ 250.520280][ T3890] f2fs_readdir+0x4e7/0xb70 [ 250.524619][ T3890] ? f2fs_fill_dentries+0xe10/0xe10 [ 250.529659][ T3890] ? security_file_permission+0x86/0xb0 [ 250.535033][ T3890] iterate_dir+0x265/0x580 [ 250.539286][ T3890] ? f2fs_fill_dentries+0xe10/0xe10 [ 250.544320][ T3890] __se_sys_getdents64+0x1c1/0x460 [ 250.549268][ T3890] ? __x64_sys_getdents64+0x90/0x90 [ 250.554300][ T3890] ? filldir+0x680/0x680 [ 250.558380][ T3890] ? debug_smp_processor_id+0x17/0x20 [ 250.563587][ T3890] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 250.569491][ T3890] ? irqentry_exit_to_user_mode+0x41/0x80 [ 250.575051][ T3890] __x64_sys_getdents64+0x7b/0x90 [ 250.579904][ T3890] do_syscall_64+0x34/0x70 [ 250.584158][ T3890] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 250.589885][ T3890] RIP: 0033:0x7ff2e4d99193 [ 250.594137][ T3890] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 250.613581][ T3890] RSP: 002b:00007ffcb97eac08 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 250.621822][ T3890] RAX: ffffffffffffffda RBX: 000055556b4794e0 RCX: 00007ff2e4d99193 [ 250.629633][ T3890] RDX: 0000000000008000 RSI: 000055556b4794e0 RDI: 0000000000000005 [ 250.637443][ T3890] RBP: 000055556b4794b4 R08: 0000000000000000 R09: 0000000000000000 [ 250.645256][ T3890] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 250.653066][ T3890] R13: 0000000000000010 R14: 000055556b4794b0 R15: 00007ffcb97eceb0 [ 250.665043][ T3890] attempt to access beyond end of device [ 250.665043][ T3890] loop2: rw=524288, want=45072, limit=40427 [ 250.676593][ T3890] attempt to access beyond end of device [ 250.676593][ T3890] loop2: rw=0, want=45072, limit=40427 [ 250.701081][ T315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.735761][ T1511] attempt to access beyond end of device [ 250.735761][ T1511] loop2: rw=2049, want=40992, limit=40427 [ 250.869951][ T315] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 250.878918][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.887121][ T315] usb 4-1: Product: syz [ 250.891354][ T315] usb 4-1: Manufacturer: syz [ 250.895790][ T315] usb 4-1: SerialNumber: syz [ 250.904866][ T315] usb 4-1: config 0 descriptor?? [ 250.949960][ T1570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.968765][ T1570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.982015][ T1570] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 250.998988][ T1570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.012245][ T1570] usb 5-1: config 0 descriptor?? [ 251.078799][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.085714][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.093108][ T5095] device bridge_slave_0 entered promiscuous mode [ 251.099904][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.106744][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.116952][ T5095] device bridge_slave_1 entered promiscuous mode [ 251.235738][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.243244][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.252363][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.260629][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.268615][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.275471][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.282770][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.296220][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.304998][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.311419][ T5060] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 251.313555][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.328327][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.370099][ T315] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 251.377215][ T5095] device veth0_vlan entered promiscuous mode [ 251.386558][ T315] usb 4-1: USB disconnect, device number 44 [ 251.393465][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.406611][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.414740][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.422031][ T2954] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 251.422271][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.437107][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.445117][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.457187][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.500772][ T1570] usbhid 5-1:0.0: can't add hid device: -71 [ 251.507320][ T1570] usbhid: probe of 5-1:0.0 failed with error -71 [ 251.534689][ T1570] usb 5-1: USB disconnect, device number 45 [ 251.714399][ T5095] device veth1_macvtap entered promiscuous mode [ 251.721993][ T7] device bridge_slave_1 left promiscuous mode [ 251.728034][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.735577][ T7] device bridge_slave_0 left promiscuous mode [ 251.741771][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.749409][ T7] device veth1_macvtap left promiscuous mode [ 251.755437][ T7] device veth0_vlan left promiscuous mode [ 251.874820][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.886474][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.910014][ T2954] usb 1-1: Using ep0 maxpacket: 8 [ 251.931461][ T24] audit: type=1400 audit(1729498146.107:3861): avc: denied { ioctl } for pid=5117 comm="syz.2.1128" path="socket:[35000]" dev="sockfs" ino=35000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 251.960884][ T24] audit: type=1400 audit(1729498146.107:3862): avc: denied { accept } for pid=5117 comm="syz.2.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 251.978906][ T5124] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=24091 sclass=netlink_xfrm_socket pid=5124 comm=syz.2.1134 [ 251.993839][ T5123] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1134'. [ 252.012477][ T24] audit: type=1400 audit(1729498146.187:3863): avc: denied { getopt } for pid=5116 comm="syz.3.1133" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.034035][ T2954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.050485][ T2954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.063868][ T24] audit: type=1400 audit(1729498146.187:3864): avc: denied { bind } for pid=5116 comm="syz.3.1133" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.084155][ T2954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 252.097476][ T2954] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 252.109208][ T5130] fuse: Unknown parameter 'pcr' [ 252.114515][ T24] audit: type=1400 audit(1729498146.187:3865): avc: denied { node_bind } for pid=5116 comm="syz.3.1133" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 252.136239][ T24] audit: type=1400 audit(1729498146.287:3866): avc: denied { setopt } for pid=5129 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.136538][ T2954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.165402][ T2954] usb 1-1: config 0 descriptor?? [ 252.180175][ T421] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 252.321904][ T5140] syz.2.1138[5140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.321965][ T5140] syz.2.1138[5140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.354752][ T24] audit: type=1400 audit(1729498146.527:3867): avc: denied { mounton } for pid=5135 comm="syz.2.1138" path="/4/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 252.440792][ T5144] incfs: Error accessing: ./file0. [ 252.460241][ T5144] incfs: mount failed -20 [ 252.520549][ T421] usb 2-1: Using ep0 maxpacket: 32 [ 252.849884][ T421] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 252.863733][ T421] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.878072][ T421] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 252.880846][ T2954] pyra 0003:1E7D:2C24.002E: item fetching failed at offset 5/7 [ 252.887258][ T421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.904078][ T2954] pyra 0003:1E7D:2C24.002E: parse failed [ 252.909789][ T2954] pyra: probe of 0003:1E7D:2C24.002E failed with error -22 [ 252.950627][ T421] hub 2-1:4.0: bad descriptor, ignoring hub [ 252.958009][ T421] hub: probe of 2-1:4.0 failed with error -5 [ 252.964757][ T421] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 253.192958][ T24] audit: type=1400 audit(1729498147.367:3868): avc: denied { connect } for pid=5114 comm="syz.1.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 253.213560][ T24] audit: type=1400 audit(1729498147.367:3869): avc: denied { write } for pid=5114 comm="syz.1.1132" laddr=172.20.20.10 lport=3 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 253.238082][ T24] audit: type=1400 audit(1729498147.367:3870): avc: denied { read } for pid=5114 comm="syz.1.1132" laddr=172.20.20.10 lport=3 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 253.261528][ T315] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 253.529846][ T315] usb 5-1: device descriptor read/64, error -71 [ 253.919879][ T315] usb 5-1: device descriptor read/64, error -71 [ 254.099883][ T1570] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 254.189872][ T315] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 254.191668][ T421] usb 1-1: USB disconnect, device number 32 [ 254.519893][ T1570] usb 4-1: device descriptor read/64, error -71 [ 254.619890][ T315] usb 5-1: device descriptor read/64, error -71 [ 254.939886][ T1570] usb 4-1: device descriptor read/64, error -71 [ 255.009900][ T315] usb 5-1: device descriptor read/64, error -71 [ 255.126653][ T5197] 9pnet: Insufficient options for proto=fd [ 255.132685][ T315] usb usb5-port1: attempt power cycle [ 255.269979][ T1570] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 255.664050][ T1570] usb 4-1: device descriptor read/64, error -71 [ 255.749877][ T315] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 255.919881][ T315] usb 5-1: device descriptor read/8, error -71 [ 256.094800][ T1570] usb 4-1: device descriptor read/64, error -71 [ 256.129899][ T315] usb 5-1: device descriptor read/8, error -71 [ 256.219964][ T1570] usb usb4-port1: attempt power cycle [ 256.380770][ T25] usb 2-1: USB disconnect, device number 47 [ 256.400357][ T5237] FAULT_INJECTION: forcing a failure. [ 256.400357][ T5237] name failslab, interval 1, probability 0, space 0, times 0 [ 256.413124][ T5237] CPU: 1 PID: 5237 Comm: syz.4.1166 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 256.422827][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 256.432792][ T5237] Call Trace: [ 256.435928][ T5237] dump_stack_lvl+0x1e2/0x24b [ 256.440433][ T5237] ? bfq_pos_tree_add_move+0x43b/0x43b [ 256.445729][ T5237] dump_stack+0x15/0x17 [ 256.449720][ T5237] should_fail+0x3c6/0x510 [ 256.453974][ T5237] ? fuse_fill_super+0x120/0x550 [ 256.458747][ T5237] __should_failslab+0xa4/0xe0 [ 256.463349][ T5237] should_failslab+0x9/0x20 [ 256.467689][ T5237] kmem_cache_alloc_trace+0x3a/0x2e0 [ 256.472808][ T5237] fuse_fill_super+0x120/0x550 [ 256.477409][ T5237] get_tree_nodev+0xb2/0x160 [ 256.481838][ T5237] ? fuse_reconfigure+0xb0/0xb0 [ 256.486519][ T5237] fuse_get_tree+0x8f/0xd0 [ 256.490773][ T5237] vfs_get_tree+0x88/0x290 [ 256.495026][ T5237] do_new_mount+0x2ba/0xb30 [ 256.499365][ T5237] ? do_move_mount_old+0x160/0x160 [ 256.504327][ T5237] ? security_capable+0x87/0xb0 [ 256.509009][ T5237] ? ns_capable+0x89/0xe0 [ 256.513176][ T5237] path_mount+0x56f/0xcb0 [ 256.517349][ T5237] __se_sys_mount+0x2c4/0x3b0 [ 256.521851][ T5237] ? __x64_sys_mount+0xd0/0xd0 [ 256.526448][ T5237] __x64_sys_mount+0xbf/0xd0 [ 256.530882][ T5237] do_syscall_64+0x34/0x70 [ 256.535131][ T5237] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 256.540853][ T5237] RIP: 0033:0x7f8de8647ff9 [ 256.545108][ T5237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.564546][ T5237] RSP: 002b:00007f8de72c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 256.572786][ T5237] RAX: ffffffffffffffda RBX: 00007f8de87fff80 RCX: 00007f8de8647ff9 [ 256.580597][ T5237] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 256.588411][ T5237] RBP: 00007f8de72c1090 R08: 0000000020000200 R09: 0000000000000000 [ 256.596222][ T5237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.604118][ T5237] R13: 0000000000000000 R14: 00007f8de87fff80 R15: 00007ffccff0f478 [ 256.621086][ T5224] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 256.637516][ T5224] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 256.648174][ T5224] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 256.679237][ T5224] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 256.686327][ T1570] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 256.693954][ T5224] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 256.849922][ T1570] usb 4-1: device descriptor read/8, error -71 [ 257.079892][ T1570] usb 4-1: device descriptor read/8, error -71 [ 257.087074][ T5095] attempt to access beyond end of device [ 257.087074][ T5095] loop2: rw=2049, want=45104, limit=40427 [ 257.149874][ T315] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 257.250139][ T315] usb 5-1: Using ep0 maxpacket: 8 [ 257.460099][ T315] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 257.469130][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.483418][ T315] usb 5-1: config 0 descriptor?? [ 257.565299][ T5265] netem: change failed [ 257.729851][ T1570] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 257.729899][ T315] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 257.939985][ T1570] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 257.940006][ T315] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: 01 [ 257.948993][ T1570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.967114][ T1570] usb 4-1: config 0 descriptor?? [ 258.023206][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 258.023216][ T24] audit: type=1400 audit(1729498152.197:3922): avc: denied { write } for pid=5274 comm="syz.0.1173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 258.159024][ T5240] udc-core: couldn't find an available UDC or it's busy [ 258.165906][ T5240] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 258.173323][ T315] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 258.261993][ T1570] playstation 0003:054C:0DF2.002F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 258.467568][ T5290] FAULT_INJECTION: forcing a failure. [ 258.467568][ T5290] name failslab, interval 1, probability 0, space 0, times 0 [ 258.469984][ T1570] playstation 0003:054C:0DF2.002F: Failed to retrieve feature with reportID 9: -71 [ 258.480239][ T5290] CPU: 0 PID: 5290 Comm: syz.2.1177 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 258.491863][ T1570] playstation 0003:054C:0DF2.002F: Failed to retrieve DualSense pairing info: -71 [ 258.499167][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.508691][ T1570] playstation 0003:054C:0DF2.002F: Failed to get MAC address from DualSense [ 258.518068][ T5290] Call Trace: [ 258.518091][ T5290] dump_stack_lvl+0x1e2/0x24b [ 258.518100][ T5290] ? bfq_pos_tree_add_move+0x43b/0x43b [ 258.518110][ T5290] dump_stack+0x15/0x17 [ 258.518118][ T5290] should_fail+0x3c6/0x510 [ 258.518138][ T5290] ? fuse_fill_super+0x160/0x550 [ 258.527119][ T1570] playstation 0003:054C:0DF2.002F: Failed to create dualsense. [ 258.529707][ T5290] __should_failslab+0xa4/0xe0 [ 258.535936][ T1570] playstation: probe of 0003:054C:0DF2.002F failed with error -71 [ 258.539510][ T5290] should_failslab+0x9/0x20 [ 258.539521][ T5290] kmem_cache_alloc_trace+0x3a/0x2e0 [ 258.539537][ T5290] ? fuse_fill_super+0x120/0x550 [ 258.549284][ T1570] usb 4-1: USB disconnect, device number 48 [ 258.552531][ T5290] fuse_fill_super+0x160/0x550 [ 258.552545][ T5290] get_tree_nodev+0xb2/0x160 [ 258.552552][ T5290] ? fuse_reconfigure+0xb0/0xb0 [ 258.552560][ T5290] fuse_get_tree+0x8f/0xd0 [ 258.552568][ T5290] vfs_get_tree+0x88/0x290 [ 258.552578][ T5290] do_new_mount+0x2ba/0xb30 [ 258.552594][ T5290] ? do_move_mount_old+0x160/0x160 [ 258.623785][ T5290] ? security_capable+0x87/0xb0 [ 258.628555][ T5290] ? ns_capable+0x89/0xe0 [ 258.632718][ T5290] path_mount+0x56f/0xcb0 [ 258.636892][ T5290] __se_sys_mount+0x2c4/0x3b0 [ 258.641409][ T5290] ? __x64_sys_mount+0xd0/0xd0 [ 258.645998][ T5290] __x64_sys_mount+0xbf/0xd0 [ 258.650422][ T5290] do_syscall_64+0x34/0x70 [ 258.651769][ T5240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1167'. [ 258.654689][ T5290] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 258.654706][ T5290] RIP: 0033:0x7f528cef1ff9 [ 258.673427][ T5290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.692869][ T5290] RSP: 002b:00007f528bb6b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 258.701107][ T5290] RAX: ffffffffffffffda RBX: 00007f528d0a9f80 RCX: 00007f528cef1ff9 [ 258.708920][ T5290] RDX: 0000000020002100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 258.716735][ T5290] RBP: 00007f528bb6b090 R08: 0000000020000200 R09: 0000000000000000 [ 258.724541][ T5290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.732357][ T5290] R13: 0000000000000000 R14: 00007f528d0a9f80 R15: 00007ffc14310778 [ 258.816133][ T24] audit: type=1400 audit(1729498152.987:3923): avc: denied { mounton } for pid=5296 comm="syz.3.1179" path="/169/bus" dev="tmpfs" ino=967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 258.820460][ T5300] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev tmpfs, type tmpfs) errno=-22 [ 258.838539][ T24] audit: type=1400 audit(1729498152.997:3924): avc: denied { remount } for pid=5296 comm="syz.3.1179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 258.868726][ T24] audit: type=1400 audit(1729498153.027:3925): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 258.891353][ T24] audit: type=1400 audit(1729498153.027:3926): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.166834][ T24] audit: type=1400 audit(1729498153.027:3927): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.189624][ T24] audit: type=1400 audit(1729498153.027:3928): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.191654][ T315] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 259.212710][ T24] audit: type=1400 audit(1729498153.027:3929): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.233773][ T315] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 259.255266][ T24] audit: type=1400 audit(1729498153.107:3930): avc: denied { map_create } for pid=5297 comm="syz.2.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 259.255627][ T315] asix: probe of 5-1:0.0 failed with error -71 [ 259.280607][ T24] audit: type=1400 audit(1729498153.117:3931): avc: denied { bpf } for pid=5297 comm="syz.2.1180" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 259.285772][ T315] usb 5-1: USB disconnect, device number 49 [ 259.382258][ T5308] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 259.629987][ T5] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 259.705850][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 259.714844][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1184'. [ 259.730674][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 259.737097][ T5312] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 259.909857][ T315] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 259.999983][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.011100][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.020704][ T5] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 260.029777][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.041354][ T5] usb 1-1: config 0 descriptor?? [ 260.179836][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 260.309932][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.321086][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.330681][ T315] usb 3-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 260.339488][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.339864][ T1569] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 260.348333][ T315] usb 3-1: config 0 descriptor?? [ 260.500978][ T5] cypress 0003:04B4:07B1.0030: unknown main item tag 0x6 [ 260.508066][ T5] cypress 0003:04B4:07B1.0030: item fetching failed at offset 4/5 [ 260.515855][ T5] cypress 0003:04B4:07B1.0030: parse failed [ 260.521658][ T5] cypress: probe of 0003:04B4:07B1.0030 failed with error -22 [ 260.589862][ T1569] usb 4-1: Using ep0 maxpacket: 16 [ 260.631772][ T5310] SELinux: failed to load policy [ 260.702934][ T1570] usb 1-1: USB disconnect, device number 33 [ 260.710789][ T1569] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.722131][ T1569] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.735393][ T1569] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 260.744401][ T1569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.753136][ T1569] usb 4-1: config 0 descriptor?? [ 261.289888][ T1569] usbhid 4-1:0.0: can't add hid device: -71 [ 261.295714][ T1569] usbhid: probe of 4-1:0.0 failed with error -71 [ 261.304476][ T1569] usb 4-1: USB disconnect, device number 49 [ 261.770261][ T1569] Bluetooth: hci0: command 0x1003 tx timeout [ 261.776157][ T2728] Bluetooth: hci0: sending frame failed (-49) [ 261.798663][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 262.381029][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.387985][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.395339][ T5336] device bridge_slave_0 entered promiscuous mode [ 262.402269][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.409092][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.416885][ T5336] device bridge_slave_1 entered promiscuous mode [ 262.453222][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.460082][ T5336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.467169][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.473975][ T5336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.495015][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.502515][ T4626] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.509611][ T4626] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.524975][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.533422][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.540304][ T4626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.547651][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.555892][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.562739][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.579060][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.587092][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.599588][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.611663][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.619519][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.627061][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.676977][ T5336] device veth0_vlan entered promiscuous mode [ 262.689247][ T5341] device veth1_macvtap left promiscuous mode [ 262.689917][ T315] usb 3-1: string descriptor 0 read error: -71 [ 262.699695][ T5341] device macsec0 entered promiscuous mode [ 262.716038][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.725065][ T5341] device veth1_macvtap entered promiscuous mode [ 262.750296][ T5341] device macsec0 left promiscuous mode [ 262.815730][ T5336] device veth1_macvtap entered promiscuous mode [ 262.822057][ T315] usbhid 3-1:0.0: can't add hid device: -71 [ 262.838712][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.846857][ T315] usbhid: probe of 3-1:0.0 failed with error -71 [ 262.854051][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.111472][ T315] usb 3-1: USB disconnect, device number 38 [ 263.131839][ T24] kauditd_printk_skb: 49 callbacks suppressed [ 263.131851][ T24] audit: type=1400 audit(1729498157.307:3981): avc: denied { mounton } for pid=5336 comm="syz-executor" path="/root/syzkaller.KwOJj7/syz-tmp" dev="sda1" ino=1988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 263.167393][ T24] audit: type=1400 audit(1729498157.347:3982): avc: denied { mount } for pid=5336 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 263.191344][ T24] audit: type=1400 audit(1729498157.347:3983): avc: denied { mount } for pid=5336 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 263.213479][ T24] audit: type=1400 audit(1729498157.347:3984): avc: denied { mounton } for pid=5336 comm="syz-executor" path="/root/syzkaller.KwOJj7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 263.240250][ T24] audit: type=1400 audit(1729498157.347:3985): avc: denied { mounton } for pid=5336 comm="syz-executor" path="/root/syzkaller.KwOJj7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 263.269276][ T24] audit: type=1400 audit(1729498157.347:3986): avc: denied { unmount } for pid=5336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 263.292878][ T24] audit: type=1400 audit(1729498157.347:3987): avc: denied { mounton } for pid=5336 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 263.319392][ T24] audit: type=1400 audit(1729498157.347:3988): avc: denied { mount } for pid=5336 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 263.342265][ T24] audit: type=1400 audit(1729498157.347:3989): avc: denied { mounton } for pid=5336 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 263.368640][ T24] audit: type=1400 audit(1729498157.347:3990): avc: denied { mount } for pid=5336 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 263.402361][ T5356] netem: change failed [ 263.510386][ T7] device bridge_slave_1 left promiscuous mode [ 263.517276][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.530127][ T7] device bridge_slave_0 left promiscuous mode [ 263.536078][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.700195][ T2954] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 263.850279][ T1570] Bluetooth: hci0: command 0x1001 tx timeout [ 263.856235][ T2728] Bluetooth: hci0: sending frame failed (-49) [ 264.239904][ T2954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.253679][ T5381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1199'. [ 264.259844][ T2954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.274193][ T2954] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 264.287072][ T2954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.301585][ T2954] usb 2-1: config 0 descriptor?? [ 264.619876][ T25] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 264.979915][ T25] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 264.990011][ T25] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.002844][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 265.012105][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.029962][ T5394] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.037528][ T5394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.044553][ T5394] IPv6: NLM_F_CREATE should be set when creating new route [ 265.051680][ T5394] IPv6: NLM_F_CREATE should be set when creating new route [ 265.079869][ T1570] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 265.312864][ T5383] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.330999][ T5383] EXT4-fs (loop3): failed to initialize system zone (-117) [ 265.338178][ T5383] EXT4-fs (loop3): mount failed [ 265.349860][ T1570] usb 3-1: device descriptor read/64, error -71 [ 265.459894][ T5] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 265.899895][ T1570] usb 3-1: device descriptor read/64, error -71 [ 265.929914][ T1569] Bluetooth: hci0: command 0x1009 tx timeout [ 266.009927][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.019892][ T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.099955][ T5] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.108870][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.116707][ T5] usb 1-1: SerialNumber: syz [ 266.170207][ T1570] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 266.411253][ T5] usb 1-1: 0:2 : does not exist [ 266.415998][ T5] usb 1-1: unit 255 not found! [ 266.439868][ T1570] usb 3-1: device descriptor read/64, error -71 [ 266.490361][ T2954] usbhid 2-1:0.0: can't add hid device: -71 [ 266.496128][ T2954] usbhid: probe of 2-1:0.0 failed with error -71 [ 266.503195][ T2954] usb 2-1: USB disconnect, device number 48 [ 266.639904][ T5] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 266.648763][ T5] usb 1-1: USB disconnect, device number 34 [ 266.657002][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 266.839888][ T1570] usb 3-1: device descriptor read/64, error -71 [ 266.869890][ T2954] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 266.959929][ T1570] usb usb3-port1: attempt power cycle [ 267.169874][ T2954] usb 2-1: device descriptor read/64, error -71 [ 267.575618][ T1570] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 267.599976][ T25] usb 4-1: string descriptor 0 read error: -71 [ 267.670178][ T25] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 267.726905][ T25] usb 4-1: USB disconnect, device number 50 [ 268.010562][ T1570] usb 3-1: device descriptor read/8, error -71 [ 268.290017][ T1570] usb 3-1: device descriptor read/8, error -71 [ 268.347240][ T5428] sched: RT throttling activated [ 268.406462][ T5429] EXT4-fs (loop2): Unrecognized mount option "permit_directio" or missing value [ 268.549891][ T2954] usb 2-1: device descriptor read/64, error -71 [ 268.569961][ T5] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 268.819917][ T2954] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 268.859941][ T375] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 268.940013][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.968975][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 268.984482][ T5] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.993664][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.010625][ T5] usb 1-1: config 0 descriptor?? [ 269.119918][ T2954] usb 2-1: device descriptor read/64, error -71 [ 269.131743][ T5437] F2FS-fs (loop2): Invalid segment/section count (31 != 24 * 1) [ 269.139303][ T5437] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 269.148512][ T5437] F2FS-fs (loop2): invalid crc value [ 269.154775][ T5437] F2FS-fs (loop2): Found nat_bits in checkpoint [ 269.177028][ T5437] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 269.183889][ T5437] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 269.219954][ T375] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 269.230519][ T375] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.243342][ T375] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 269.252378][ T375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.480564][ T5] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 269.487786][ T5] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 269.495005][ T5] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 269.502209][ T5] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 269.508457][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 269.508469][ T24] audit: type=1400 audit(1729498163.677:4032): avc: denied { read } for pid=5403 comm="syz.1.1205" path="socket:[35712]" dev="sockfs" ino=35712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.509481][ T5] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 269.545937][ T2954] usb 2-1: device descriptor read/64, error -71 [ 269.552028][ T5] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 269.559189][ T5] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 269.566435][ T5] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 269.573613][ T5] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 269.580818][ T5] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 269.588000][ T5] plantronics 0003:047F:FFFF.0031: unbalanced collection at end of report description [ 269.597575][ T5] plantronics 0003:047F:FFFF.0031: parse failed [ 269.603677][ T5] plantronics: probe of 0003:047F:FFFF.0031 failed with error -22 [ 269.669978][ T2954] usb usb2-port1: attempt power cycle [ 269.679891][ T1570] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 269.684108][ T5434] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 269.701079][ T5434] EXT4-fs (loop3): failed to initialize system zone (-117) [ 269.708195][ T5434] EXT4-fs (loop3): mount failed [ 269.716379][ T5] usb 1-1: USB disconnect, device number 35 [ 269.940319][ T1570] usb 3-1: Using ep0 maxpacket: 32 [ 270.119915][ T2954] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 270.139931][ T1570] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 270.147964][ T1570] usb 3-1: config 0 has no interface number 0 [ 270.162183][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.169017][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.176566][ T5450] device bridge_slave_0 entered promiscuous mode [ 270.183753][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.190672][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.197814][ T5450] device bridge_slave_1 entered promiscuous mode [ 270.230829][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.237669][ T5450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.244808][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.251564][ T5450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.277249][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.285413][ T1511] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.293045][ T1511] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.300145][ T2954] usb 2-1: device descriptor read/8, error -71 [ 270.309615][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.317600][ T1570] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 270.317783][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.326576][ T1570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.333301][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.348643][ T1570] usb 3-1: Product: syz [ 270.352672][ T1570] usb 3-1: Manufacturer: syz [ 270.357070][ T1570] usb 3-1: SerialNumber: syz [ 270.357297][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.362173][ T1570] usb 3-1: config 0 descriptor?? [ 270.374779][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.381661][ T1511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.388949][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.403190][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.410387][ T1570] smsc95xx v2.0.0 [ 270.418151][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.429311][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.437387][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.444876][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.454996][ T5450] device veth0_vlan entered promiscuous mode [ 270.465109][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.474508][ T5450] device veth1_macvtap entered promiscuous mode [ 270.484213][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.496014][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.530004][ T5] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 270.580086][ T2954] usb 2-1: device descriptor read/8, error -71 [ 270.613725][ T24] audit: type=1400 audit(1729498164.787:4033): avc: denied { ioctl } for pid=5456 comm="syz.4.1216" path="/dev/input/event0" dev="devtmpfs" ino=163 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 270.780747][ T7] device bridge_slave_1 left promiscuous mode [ 270.786720][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.794004][ T7] device bridge_slave_0 left promiscuous mode [ 270.800114][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 270.805168][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.812824][ T7] device veth1_macvtap left promiscuous mode [ 270.818650][ T7] device veth0_vlan left promiscuous mode [ 270.849970][ T2954] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 270.960460][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.971431][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.981130][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 270.993926][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 271.002889][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.011859][ T5] usb 1-1: config 0 descriptor?? [ 271.042108][ T24] audit: type=1400 audit(1729498165.217:4034): avc: denied { ioctl } for pid=5440 comm="syz.2.1215" path="socket:[35986]" dev="sockfs" ino=35986 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 271.052867][ T5441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1215'. [ 271.067364][ T24] audit: type=1400 audit(1729498165.217:4035): avc: denied { getopt } for pid=5440 comm="syz.2.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 271.076242][ T2954] usb 2-1: device descriptor read/8, error -71 [ 271.100039][ T5441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1215'. [ 271.130358][ T1570] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 271.141140][ T1570] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 271.169975][ T1570] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 271.180810][ T1570] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 271.189340][ T1570] usb 3-1: USB disconnect, device number 43 [ 271.380352][ T2954] usb 2-1: device descriptor read/8, error -71 [ 271.499962][ T2954] usb usb2-port1: unable to enumerate USB device [ 271.531291][ T5] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 271.539442][ T5] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 271.546548][ T5] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 271.553640][ T5] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 271.560824][ T5] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 271.567902][ T5] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 271.574940][ T5] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 271.581973][ T5] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 271.588971][ T5] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 271.596096][ T5] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 271.629126][ T5] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0032/input/input38 [ 271.640394][ T544] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 271.649482][ T24] audit: type=1400 audit(1729498165.817:4036): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=1199 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.669313][ T5] microsoft 0003:045E:07DA.0032: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 271.671839][ T375] usb 4-1: string descriptor 0 read error: -71 [ 271.701627][ T24] audit: type=1400 audit(1729498165.817:4037): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1199 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.725406][ T24] audit: type=1400 audit(1729498165.897:4038): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1199 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.747941][ T375] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 271.764836][ T24] audit: type=1400 audit(1729498165.927:4039): avc: denied { create } for pid=5464 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 271.846561][ T375] usb 4-1: USB disconnect, device number 51 [ 271.909981][ T24] audit: type=1400 audit(1729498166.067:4040): avc: denied { create } for pid=5464 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 271.952183][ T24] audit: type=1400 audit(1729498166.067:4041): avc: denied { getopt } for pid=5464 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 SYZFAIL: bad allocate request allocated=0 size=151060219/151060224 (errno 9: Bad file descriptor) [ 272.161439][ T544] usb 5-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 272.172018][ T544] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.180872][ T316] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 272.390021][ T544] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 272.398956][ T544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 272.410745][ T1568] usb 1-1: USB disconnect, device number 36 [ 272.429952][ T544] usb 5-1: can't set config #1, error -71 [ 272.440694][ T544] usb 5-1: USB disconnect, device number 50 [ 273.161234][ T306] device bridge_slave_1 left promiscuous mode [ 273.167156][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.174457][ T306] device bridge_slave_0 left promiscuous mode [ 273.180430][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.187811][ T306] device bridge_slave_1 left promiscuous mode [ 273.193798][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.204893][ T306] device bridge_slave_0 left promiscuous mode [ 273.211055][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.218525][ T306] device bridge_slave_1 left promiscuous mode [ 273.224545][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.231776][ T306] device bridge_slave_0 left promiscuous mode [ 273.237669][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.245239][ T306] device bridge_slave_1 left promiscuous mode [ 273.251230][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.258294][ T306] device bridge_slave_0 left promiscuous mode [ 273.264318][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.272261][ T306] device veth1_macvtap left promiscuous mode [ 273.278056][ T306] device veth0_vlan left promiscuous mode [ 273.283856][ T306] device veth1_macvtap left promiscuous mode [ 273.289648][ T306] device veth0_vlan left promiscuous mode [ 273.295534][ T306] device veth1_macvtap left promiscuous mode [ 273.301354][ T306] device veth0_vlan left promiscuous mode [ 273.306999][ T306] device veth1_macvtap left promiscuous mode [ 273.312872][ T306] device veth0_vlan left promiscuous mode [ 275.850533][ T306] device veth1_macvtap left promiscuous mode