last executing test programs: 18.647107136s ago: executing program 2 (id=160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140005009f0000007f000001000000000000000020"], 0x60}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdb48a7e9cfe43fa6}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b40)={0x210, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x942}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55f4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda2}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2150}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20002000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x87c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x8044000) r6 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x33, 0x0, &(0x7f0000000100)=0xfffffffffffffd0e) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000800)={0x122, 0x29, 0x2, {0x6, [{{0x0, 0x3, 0x7}, 0x1, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x2}, 0x2b, 0x5, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0x5, 0x5, 0x7, './file0'}, {{0x4, 0x1, 0x3}, 0x4, 0x10, 0x7, './file0'}, {{0x8, 0x0, 0x1}, 0x8, 0xc, 0x7, './file0'}, {{0x40, 0x1}, 0x1, 0x47, 0x7, './file0'}, {{0x1, 0x0, 0x3}, 0x4, 0x4, 0x7, './file0'}, {{0x8, 0x3}, 0x8, 0x8, 0x7, './file0'}, {{0x8, 0x0, 0x2}, 0x9, 0x2, 0x7, './file0'}]}}, 0x122) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x2, 0x214, [0x200000000540, 0x0, 0x0, 0x200000000570, 0x2000000005a0], 0x0, &(0x7f00000000c0), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x4, 0xc40d27fc34a21d0e, 'pim6reg\x00', 'veth1\x00', 'macsec0\x00', 'vlan1\x00', @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}, {0x3, 0x14, 0x6006, 'vxcan1\x00', 'veth1_to_bridge\x00', 'netpci0\x00', 'vlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @multicast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@random="002139883121", 0xffffffffffffffff}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xffffffffffffffff}}}}]}]}, 0x28c) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x1000080, {0x0, 0x0, 0x0, 0x0, 0x12a03}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4404d80c}, 0x0) 18.638568726s ago: executing program 2 (id=161): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0xffffffffffffff14) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040)=0x1, 0x4) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0xffffffffffffff14) (async) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040)=0x1, 0x4) (async) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) 18.604478857s ago: executing program 2 (id=163): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000800)=ANY=[@ANYBLOB="49128beecfa593af043d0ad6d598e63e77ca480537178a4fa89180c01a47c13dd4731a7224f09f5eef9d87a9074ffbdf3a9d3eaac5f13a80126dcfd7f87a86ef3473b0c61c797904ef0d1df881a7ce9f81639670df669fb5f9d19acfbd9ba2e09aa35754153f3515fdf767f98bc0aeced990cdd3656f27d951c292462fadba21e9c1ebee2885238dff2137d266177034ed0d3f0ffceb583e25f1c872cee6df47c3b7550494f3634f7d0dcee1d5cd1436"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0xb000000, @rand_addr=' \x01\x00', 0x401}}}, 0x88) fchdir(0xffffffffffffffff) setpriority(0x0, 0x0, 0x200002a14b56) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) userfaultfd(0x80801) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8003, &(0x7f0000000740)={[{@journal_async_commit}, {@oldalloc}, {@discard}, {@nodiscard}, {@nojournal_checksum}]}, 0x0, 0x62c, &(0x7f00000000c0)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000008c0)) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) shutdown(r6, 0x0) 18.16997917s ago: executing program 2 (id=167): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000001100)='./file1\x00', 0x1000040, &(0x7f0000001140)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp855,errors=remount-ro,utf8,fmask=00000000000000000000004,iocharset=koi8-ru,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303430302c646d61736b3d30303030303030303030303034303030303030303030302c616c6c6f775f7574696d653d3030303030303030303030303030303030521e303030312c00b5efd5a5c49860e6033d86a1062aa410763a35d6358f3ec56140261c6ce5becee4b76d651a129b77d4e52b37ca8fdc9a7a3d08e55f6bfc2fdd3440ba22085c942503c30e11081ad5fa75126938c97d581a5cce2f6488388f66fa7e0e33b5b36d"], 0x1, 0x1531, &(0x7f00000014c0)="$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") r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x9, 0x2001) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) waitid(0x1, r3, &(0x7f00000000c0), 0x8, &(0x7f0000000400)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x4797}, {0x6, 0x7fffffff}]}]}, {0x0, [0x2e, 0x30, 0x0, 0x61, 0x61]}}, &(0x7f0000001f40)=""/4105, 0x3b, 0x1009, 0x1}, 0x28) sendmsg$nl_xfrm(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17.294413927s ago: executing program 2 (id=172): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x14711, &(0x7f00000005c0)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@nolazytime}, {@mblk_io_submit}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x222a}}, {@nouid32}, {@test_dummy_encryption}, {@bsdgroups}]}, 0x3, 0x453, &(0x7f0000000c40)="$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") r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) (async) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x1, 0x3, 0xfffffffe}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {0xa, 0x0, 0x2}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@local}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x882}, 0x20000800) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xf9, 0x577, &(0x7f00000017c0)="$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") (async) r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000007, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000100)=0x4, 0x80000000) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r8) (async, rerun: 32) write$P9_RLOCK(r8, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x1}, 0x8) (async, rerun: 32) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) close(r10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11, r10}, 0xc) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}}) 17.113358843s ago: executing program 2 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x4) (async, rerun: 64) getrusage(0xffffffffffffffff, &(0x7f0000000380)) (async, rerun: 64) r3 = socket(0x200000000000011, 0x4000000000080002, 0x54f9) bind$packet(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async, rerun: 64) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) (rerun: 64) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x2}) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 32) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) 17.112695703s ago: executing program 32 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x4) (async, rerun: 64) getrusage(0xffffffffffffffff, &(0x7f0000000380)) (async, rerun: 64) r3 = socket(0x200000000000011, 0x4000000000080002, 0x54f9) bind$packet(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async, rerun: 64) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) (rerun: 64) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x2}) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 32) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) 16.937882388s ago: executing program 0 (id=177): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r1, &(0x7f0000000600)="6ff8", 0x2, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e0001012bbd7000fbdbdf2564010102000000000000000000000000000004d50a002b00fc02000000000000000000000000000113b40000ff34000010000a002cbd70002abd7000050000000c0015005a07350006000400240009"], 0x114}, 0x1, 0x0, 0x0, 0x20}, 0x20008000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) pipe(&(0x7f0000000080)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00', 0x2}, &(0x7f00000000c0)=0x1e) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000009000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0200000000e2dd634f898b0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5, r9}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, &(0x7f0000000280), 0x0}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002200010200"], 0x1c}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') 15.947467899s ago: executing program 0 (id=185): prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents(r2, 0xffffffffffffffff, 0x5a) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20042, 0x36) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, &(0x7f0000000440)) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xfffffffffffffe81) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x9) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = userfaultfd(0x1) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xc01}}, {{0xa, 0x4e24, 0x20, @dev={0xfe, 0x80, '\x00', 0x38}, 0xfffffe01}}}, 0x108) socket$inet6(0xa, 0x80001, 0x4) syz_open_procfs(r1, &(0x7f00000000c0)='io\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRESHEX=r6, @ANYRES64=r0, @ANYRES8=r5], 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) fsopen(&(0x7f0000000440)='proc\x00', 0x0) 12.95779736s ago: executing program 0 (id=203): unshare(0x60000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0xd}, 0x94) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) unshare(0x20040600) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x20200) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000000080)=""/172, 0xac}, {&(0x7f0000000000)=""/102, 0x66}], 0x3}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe6c}, 0x9}], 0x2, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f00000001c0)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000100)=0xffffff97) 11.925021282s ago: executing program 0 (id=222): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) madvise(&(0x7f0000922000/0x4000)=nil, 0x4000, 0xf) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000e9f000/0x1000)=nil) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x82002, 0x20) openat(r0, &(0x7f0000000240)='./file0\x00', 0x139180, 0x10) r1 = syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724040501009c"], 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003f10000002203"], 0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300090c00000000000000000000000300060000000e0002000000e00000090000000000000000020001000000000000ddfbfd00000000030005006c00000e02000000ac1414aa1000000000000000020008"], 0x60}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=""/255, 0xff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mincore(&(0x7f000025c000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/71) 8.307634054s ago: executing program 0 (id=246): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x800) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x204000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000000080)="cffa0795e40a596b2d96d33ff2fc"}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x56) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000180)=""/70, &(0x7f0000000200)=0x46) r3 = openat(r2, &(0x7f0000000240)='./file0\x00', 0x300, 0x40) keyctl$set_timeout(0xf, 0x0, 0x157) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000280)) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000300)={0xbc, 0x0, 0x8fd7568aef5d37a5}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x10}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f00000005c0)={0x0, 0x5, [0x4, 0x7, 0x5, 0xfffffffffffffff7, 0x1, 0xcc2]}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x50}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x4) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x18, 0x3f9, 0x300, 0x70bd2b, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x890) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000840), 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r3) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9e}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) fcntl$getflags(r2, 0x408) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000a40)=0x9851, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000ac0)=@security={'security\x00', 0xe, 0x4, 0x5c0, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0xffffffff, 0x528, 0x528, 0x528, 0xffffffff, 0x4, &(0x7f0000000a80), {[{{@ip={@local, @empty, 0xffffff00, 0x0, '\x00', 'veth0_macvtap\x00', {}, {}, 0x29, 0x2, 0x4a}, 0x0, 0x2d0, 0x330, 0x0, {}, [@common=@ah={{0x30}, {[0x100, 0x81], 0x1}}, @common=@unspec=@bpf0={{0x230}, {0x3e, [{0x1, 0x9, 0x1, 0x8001}, {0xf, 0x73, 0x10, 0x9}, {0x3, 0x3, 0x8, 0x767}, {0x3, 0x1, 0xf, 0x9d2d}, {0x1, 0x80, 0x7, 0x2}, {0x7, 0xf, 0x92, 0x2}, {0xbb, 0x0, 0xd, 0x7}, {0x7, 0x48, 0x1e, 0x6f}, {0x5, 0xc, 0x5, 0x7}, {0xd7, 0x1, 0xc, 0xc35}, {0xf, 0x8, 0x1, 0x10001}, {0x3, 0x4, 0x9, 0x1}, {0x8, 0x9, 0x8}, {0x1ff, 0xf3, 0x10}, {0x7, 0x6, 0x0, 0x4}, {0x3, 0xf, 0x4, 0x5}, {0x1, 0x5, 0x3, 0x4}, {0x1ff, 0x8, 0xf, 0x2}, {0x5, 0x0, 0xff, 0x9}, {0xa3, 0xbe, 0x0, 0x1}, {0x9, 0xe, 0x3f, 0xc}, {0x9, 0x40, 0xff, 0x10}, {0x9, 0x6, 0xff, 0xffffffff}, {0x840, 0xf7, 0x48, 0x81}, {0x8, 0x90, 0xf7, 0xf6}, {0xf001, 0xa, 0x3, 0x81}, {0x1, 0xec, 0x1, 0x5799bd52}, {0x1ff, 0x31, 0x1, 0x4}, {0x4, 0x2, 0xf, 0x7fffffff}, {0xfff9, 0xa, 0x6, 0x7f}, {0x6, 0x4, 0x5, 0x6}, {0x3, 0x1, 0x3, 0x400}, {0x0, 0x4, 0x0, 0xda}, {0x8, 0x5, 0x40, 0xd06}, {0x8f48, 0x3b, 0xf, 0x2}, {0x40, 0x7, 0x0, 0xa6}, {0x9e, 0x3f, 0x8, 0xe9}, {0xffc0, 0x7, 0x1, 0xd0fb}, {0x9, 0x81, 0x8d, 0x81}, {0xdc, 0x4, 0x4, 0x6}, {0xf193, 0x6, 0x9, 0x7}, {0xdd, 0xde, 0xaa, 0x80000001}, {0x0, 0x0, 0x1, 0xffffff80}, {0x400, 0x1, 0x2, 0x1}, {0xb, 0x1, 0x10, 0xb}, {0x9, 0x3, 0xb3, 0x1}, {0x5, 0x80, 0x7, 0x7fffffff}, {0x40, 0x6, 0x9, 0x2}, {0x64a8, 0x3, 0x4, 0xc845}, {0x8, 0xc2, 0x40, 0x2}, {0x1ff, 0x9, 0x3, 0x1ff}, {0x9, 0x6, 0xf2, 0x4}, {0x4, 0x9, 0xa0, 0x81}, {0x0, 0xff, 0xc4, 0x80000000}, {0xe953, 0x1, 0x7, 0xff}, {0xb76, 0x9, 0x81, 0xff}, {0x1300, 0x5, 0x6, 0x9}, {0x800, 0xb7, 0x2, 0x3ff}, {0x4, 0x7, 0xff, 0x3}, {0x3, 0x5, 0xf9, 0x2}, {0x1, 0x2, 0xb6, 0xa4}, {0x0, 0x7, 0x6}, {0x6, 0x8, 0x1, 0x400}, {0x6, 0x5, 0x5, 0x6}], {0x9}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4122a8674907915b, 0xa, 0x5, 0x3, 0x5, 0x5], 0x5}, {0x1, [0x7, 0x0, 0x4, 0x2, 0x0, 0x1], 0x4, 0x6}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x101, 0x804, 0x1, 0x1}}, @common=@ttl={{0x28}, {0x3, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="bb4c7a04f399", 0x81, 0xc, [0x23, 0x1d, 0x1, 0x14, 0x17, 0x40, 0x38, 0x10, 0x12, 0x39, 0x6, 0x1, 0x26, 0xa, 0x32, 0x7ff], 0x2, 0x200, 0x1a}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="1a794453b16e", 0x7fff, 0xd, [0x9, 0x11, 0x40, 0xf, 0x0, 0x26, 0x23, 0x7, 0x26, 0x5, 0x6, 0x26, 0x3, 0x4, 0x3c, 0x2], 0x1, 0x9, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x620) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000001100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x10d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x110, 0x7, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0x377}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x110, 0x3, 0xfa, 0x3, 0x10, 0x2}, 0x5, &(0x7f0000001180)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x424}}]}) recvmsg(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000012c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/232, 0xe8}, {&(0x7f0000001440)=""/157, 0x9d}, {&(0x7f0000001500)=""/146, 0x92}], 0x3, &(0x7f0000001600)=""/189, 0xbd}, 0x3) 8.11633669s ago: executing program 0 (id=248): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f0000002280)={0x18, 0x2, {0xfffa, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) write(r4, 0x0, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40482, 0x0) unshare(0x20000400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x687, 0x6, 0xfffa}, 0x1d, [0x108e8fd7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x20003, 0x84, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1001, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x0, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0x426, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x85, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x2, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x8c, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x1, 0x1ff, 0x3, 0x7, 0xfd, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x8, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x800, 0x7, 0x7, 0xb1c, 0x1, 0x1fd, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xe6, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1c44}]}}]}, 0x60}}, 0x44080) 8.10017778s ago: executing program 33 (id=248): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f0000002280)={0x18, 0x2, {0xfffa, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) write(r4, 0x0, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40482, 0x0) unshare(0x20000400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x687, 0x6, 0xfffa}, 0x1d, [0x108e8fd7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x20003, 0x84, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1001, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x0, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0x426, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x85, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x2, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x8c, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x1, 0x1ff, 0x3, 0x7, 0xfd, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x8, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x800, 0x7, 0x7, 0xb1c, 0x1, 0x1fd, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xe6, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1c44}]}}]}, 0x60}}, 0x44080) 6.415893093s ago: executing program 6 (id=261): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013"], 0x60}}, 0x0) fsetxattr(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7379732e0000a3fb2b"], &(0x7f00000000c0)='\x00', 0x1, 0x3) 6.382768433s ago: executing program 6 (id=262): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r0, 0x2}], 0x1, 0xf6) r1 = dup2(r0, r0) read(r0, &(0x7f0000000600)=""/4096, 0x1000) poll(&(0x7f0000000080)=[{r1, 0x4000}, {r0, 0x3}], 0x2, 0xffff8001) 6.043995394s ago: executing program 3 (id=269): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r2 = syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x51, @string={0x51, 0x3, "855e239325f2440044418e8fc25735b5ca4cf98adc63997b423581567fee3f422e9bdb192f6ac96557bd1e3ded156d15263c167c00344efcfb9ce9e0746de95fec651ccd121cc4a19e17d65e6590be"}}}, 0x0) syz_usb_control_io$uac2(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x44, @string={0x44, 0x3, "8a0527a967762a6b2aa23b24e524a8237f8f6653211db78462e5e44c1accb180e1220cd2637a4d229a7a71c8609a625c70d6662b83a99fe25cb82eba6b21d848eaa8"}}}, 0x0) fcntl$setlease(r1, 0x400, 0x1) mknodat$null(0xffffffffffffffff, 0x0, 0x1000, 0x103) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000450, &(0x7f0000000140)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a40)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1) read$watch_queue(r3, &(0x7f00000001c0)=""/178, 0xb2) 5.49919389s ago: executing program 6 (id=273): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x14045, &(0x7f0000001b80), 0x1, 0x43d, &(0x7f0000000200)="$eJzs3MtrXNUfAPDvvZOkv/7amrHURx9qtIrFR9KktRZ0oyi4UBB0UZcxSUvstJEmgi1Bo0hdSsG9uBT8C1zpRtSV4Fb3UiiSTWtXI3fmTjKZzkySaSYTnc8HbnLOfXDOd849M+fck0kAfWsk+5FE7I2I3yNiuJpde8JI9det5cWpv5cXp5Iol9/6K6mcd3N5cap2au26PbVMMSL9LInDTcqdv3zl/GSpNHMpz48tXHh/bP7ylWdnL0yemzk3c3Hi9OmTJ8afPzXx3JbEmcV189BHc0cOvvbOtTemzlx79+dvk1r8DXFsStryyEi7y54olzsqbqfaV5dOBlaT61xWHu5ajdiIQkRkzTVY6f/DUYjVxhuOVz/taeWArhpqf3ipDPyHZaN5oB/VPuiz+W9t24Zhx45x46XqBCiL+1a+VY8MrEztBxvmt1tpJCLOLN3+Ktvibp5DAABs0PfZ+OeZZuO/NO6vO++efA2lGBH3RsT+iDgVEQci4r6IyrkPRMSDmyy/cZHkzvFPer2jwDYoG/+9mK9trR3/rSzsFAt5bl8l/sHk7Gxp5nj+mhyLwV1ZfrxNGT+88tsXrY7Vj/+yLSu/NhbM63F9YNfaa6YnFybvJuZ6Nz6JODTQLP5kZSUgiYiDEXGowzJmn/rmSKtj68ffXeWvI56stv9SNMRfk7Rfnxz7X5Rmjo/V7oo7/fLr1Tdbld/r+LP2j1hq2v65YlK/Xju/+TKu/vF5yzlNp/f/UPL2mn0fTi4sXBqPGEper1a6fv9Ew3kTq+dn8R872rz/74/VV+JwRGQ38UMR8XBEPJLX/dGIeCwijraJ/6eXH3+v8/i7K4t/OiJu588D1m//1cRQNO5pniic//G7NYUWNxN/1v4nK6lj+Z6NvP+tW68X0g7vZgAAAPj3SSNibyTp6Eo6TUdHq3/DfyD+n5bm5heePjv3wcXp6ncEijGY1p50Ddc9Dx3Pp/W1/ERD/kT+3PjLwu5KfnRqrjTd6+Chz+1p0f8zfxZ6XTug6wZ6XQGgZ/R/6F/6P/Qv/R/6V5P+v7sX9QC2X6X/N/yrpo97VBdgezV8/lv2gz5i/g/9S/+H/qX/Q1+a3x3tv7wvIdE0EemOqIZElxK9fmcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYGv8EAAD//5uU5i4=") ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) 5.340303385s ago: executing program 6 (id=274): syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000002a80)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109024100010100c0000904000012020600000b2406000080079ffbcaf705240000000d240f0100000000000000000009058202ef0300000009050302000296d28d2ad8c4fd9f000000d5b2e4df06"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000080)=ANY=[], 0x5, 0x150d, &(0x7f0000001540)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x12800, 0x120) getdents(r0, &(0x7f0000000440)=""/4090, 0xffa) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0xffffffff00000005, {0x5, 0xfffffffff7fffffb, 0x1000000001000002, 0x4000000006, 0x300, 0x5, {0x7, 0x62, 0x8040000000000b, 0x1, 0x7fffffffffc, 0x20000006a, 0x2b, 0x0, 0x4010, 0x6000, 0xda49, 0x0, 0x0, 0x1, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @val=@perf_event={0x10}}, 0x18) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000002b00)='./file1\x00', 0x0, &(0x7f0000000a00), 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") mount(0x0, 0x0, 0x0, 0x1000040, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001800010301000000000000000a80"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0) pwrite64(r8, &(0x7f0000000000)='2', 0x1, 0x4fed0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 4.951354167s ago: executing program 5 (id=275): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r2) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xe, 0xfffa}, {0x3, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044841}, 0x8044) unshare(0x64000400) (async, rerun: 64) r5 = socket(0x8000000010, 0x2, 0x0) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x1b4, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@remote, 0x0, 0x0, 0xfffe}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf27}}, @algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "2132d50900000045f3ba067585afe64e4f"}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) (async) write(r5, &(0x7f0000000500)="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", 0xfc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) r7 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) (async, rerun: 32) writev(r10, &(0x7f0000002b00)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000002780), 0xa00}], 0x2) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_open_procfs(0x0, 0x0) pread64(r11, 0x0, 0x0, 0x4) 4.950597018s ago: executing program 5 (id=276): syz_clone3(0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0xb7f5, 0x0, 0x9, 0x8, "eff5e85388a0539be9e9449de9027fc19de2b6"}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r4, 0x40046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) writev(r2, &(0x7f0000002a40)=[{&(0x7f00000005c0)="41d044182d0a567855f03d284be4084f45cdcb8a4e345372a086609b01824f2afe797723b43c2f5969deb3f85c6ff63402fcb38c90494c608dc48d1a3411d70a76d739330891f07765d1d8e3c93ddad130bcf4df4207feade8f661733dabeed8619bd8ac51c22410221915d131f7089e057e98c35be7202c545abe7d84064ce260dd", 0x82}, {&(0x7f0000000680)="14321bf326a7b16ca3a22629362e5e014a8b77291ff80f5dd9ea0aa24280ff53c84a5d6d3314f2e75b04facf027592cf6f9c73507cc930c188a1760138ffb57cd762bf39a0ba8d20f4c74e0dac49fe4240344aefe9f18474fefb2f58918921dcfd1a4c2eef0b6cf3c7b127937f37c8155b49f3bec12b8b0c60fc55a9bc9d101a03b6f91cf6178ac20b92ee9ba6982f5f0ef73f9d6c94b48b5c1c81262d9f83058c61ee2c0d4db584810e9078d9fdff71e2a55f66fde695e87f79bb1319c59802bdf981bf5be31297d89611d3e82a1b53fc9bfb404e029a1db85bb93f7e1b900af13f3dc59c95ceb45792d295f7faceab", 0xf0}, {&(0x7f0000000780)="9b2be85a900a328655d63f47dbff9d5a3736053de996fe6067283d447d44f8a946849d54a6613d12c2d37c468d77ca767aae3463ce108dc30fdb488f796f3670359454382418ec299c808b4188aea6f0ae93020b44b9cd5e3b3ace0c04f6d4c1cd3a071f7832be5e802ef90a73889914cb6a78104bdc7e0f853b6dc9329b66884e32bf28a0309d52068cf030e6", 0x8d}, {&(0x7f0000000840)="4753d6802d0ade7e5a38d2df1f1550443cf06bb4b55058faceecf410d4cbf805069f1487475e4d74aa453066875c27dd99fac66a0f91d18220f167b005c256b3df39a600a92043b9fff44aab190b751b87b4d3060cb55bd8e117015826a975f0ec7e774d7e2608a1870b0869c45d64dfc3253896500481904c0d1aaf0ada71c06b4f2345ca873e35830862cf90285f2b1fc5513a4fc1a17537a15b45d56ebc5e7b1f67679281336dceb6b3bf4e8c25b36cdb21720fbde8ef5fe8879a519d80588a4b65862f2db7f1a83544e728a9dafa4b6c118712919c2d3c0e42be213712c8e775eb74c3", 0xe5}, {&(0x7f0000000940)="95af8cfa54ff00c233c47ad5ea36e62052063ac0917df8d3bc6325a684a52a6d547c1ebfa08271946110849808ce81dfb75aee4eb682d589e4f77d8ba97c9f66a718eb36510915e8eef8238986428ea50634670c63a1a856cca467ba32c1b9640158b97d0b4eb514740ac4b260a576ec769d0565afd00492129e3f96129ea4f77f794760661de9125d803202aa9aa72ece278f0ef6254c91ed10dbbc185e94fa6a490c8c91af39d8bd52e50cc44342514f48a1658d8aa91f8603d7e913e5d2745e62bdaf42716afdac7db98420ed3b73ece946beb18dc9ea5002a9d5c9a18f7ee65ab732b1a82a", 0xe7}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="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", 0x1000}], 0x7) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x7, 0x209, 0xffffff00, 0x80000000, 0x9, "92a066cb4e240a514b93b993da2480b304eb4b", 0x7, 0x1}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x22, {[@local=@item_012={0x2, 0x2, 0x0, "d2ca"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, '\x00\x00'}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "f5236000"}, @local=@item_4={0x3, 0x2, 0x9, "868e9e8f"}, @main=@item_4={0x3, 0x0, 0x9, "49d203c6"}]}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000140)={0x20, 0x20, 0x43, {0x43, 0x8, "16ed7a405f2e81a40c7777caa4a006c82a58001660283b27f6da8a1d27b83cf63e2a91429862d1d501dcf19fd7ca372f61dff445041bff55b439b67107d42e99d3"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000240)={0x0, 0x22, 0x20, {[@global=@item_4={0x3, 0x1, 0x7, "213cb845"}, @local=@item_012={0x2, 0x2, 0x8, "69d5"}, @local=@item_012={0x2, 0x2, 0x0, "ac57"}, @main=@item_4={0x3, 0x0, 0x8, "0bb24d13"}, @local=@item_012={0x2, 0x2, 0x7, '$!'}, @main=@item_012={0x1, 0x0, 0xa, "88"}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x7, "64b70d6a"}, @main=@item_4={0x3, 0x0, 0xc, "222c9da0"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x75, 0x1, {0x22, 0xcc9}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0xa4e038c472d14c9f, 0x30, 0xda, "2ef5e606bd7b6d6ec75356b076772529b634c7075acd9970565691a49a89ea0aaf0e50bc67bca4f0ccb201187766659168aef66175e8a0f24c39833f384014e3578770245bcbbfa7e38531a800cd6744a6930fa009b7c5e49c22937294412da36d3acba38fb0f27b9060548ab58e81c760effc00f7109a65c29451bc607387782d35c8561ce45dd82d5e565be1695eefe8191089d2991c2d65f861def6a80a008d06d3373b116abc138a96fc6e2618ce048f2548c8914af2cccc5db8d023fc7a91245728d775194d0c25f7602b0c7f1c718cdd562a8e778c4dd2"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5b}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x1, 0x6f, "fa96360e6b1147ce60165b4306aa0a5d5c44e9cbf9f3cbc38ed7f07a6753a25a18b129c202af89e1a7bd25978a7a4a852176138934d05def0fe78d45b71052b35948c47a2dcd4683237171f9b2387374f3c07fcd11fccd2393cb27badf40ee22afb574349eae23d7339904c7da9aa9"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x8}}) (rerun: 32) r5 = socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x81, 0xe8, 0xffffe800, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x90, 0x700, 0x33, 0xffff}}) (async, rerun: 32) r6 = socket(0x10, 0x80002, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be6406d05000000390102030109025200010000000009044000000e0100390a2405"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async, rerun: 32) r9 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) bind$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) (async) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) 3.671373046s ago: executing program 5 (id=285): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) io_setup(0x1, &(0x7f0000000b80)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000000080)={{0x2, @rand_addr, 0x0, 0x2, 'wlc\x00', 0x8, 0x2, 0x3}, {@private=0xa010100, 0xffff, 0x2, 0x0, 0x0, 0x2}}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="00000000d3ec66ecc053c543da2e5f"], 0x48) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000)=0xd, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)='.', 0x1, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="b8c5", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xc0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'erspan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x40}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 3.57570197s ago: executing program 5 (id=286): r0 = syz_usb_connect(0x3, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601e2030200010006000609240305050306058109240306010304050507240405"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000326007d6606154ee600002603b8ddace0a26ba37adcf97045ab47393e28bf97a48fe5be9b32f5fd85774f"], 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000001340)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c00000040fcff06000036deac0d10b52186a0", @ANYRES16=r4, @ANYBLOB="00032bbd7000fbdbdf250000000008000500e0000001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp949,errors=remount-ro,utf8,errors=remount-ro,dmask=00000000000000000000003,time_offset=0x0000000000000006,gid=', @ANYRESHEX=r3, @ANYBLOB="2c00fbffffff5a505bfd46f7580dd2ea15f3b668cebede3eecc4c69407c292f1d3dfd5aac484104426ec9b25db0706b5634c5e66cff8b681d028399da8ea3af9f39f769c1849cc22e67973c13874a9cd7c6fe66db41742e33d9eee94251e1f927485b96027199d6f1b7e0a35ebc654fe6ed00fa6330c5a0ac2b08017fd80c74035c97a3f1abdcc9dc0219f42ca4e30030c93416b6036b4d8a70b1de9d788f4f1061fd9d787b6082e03cb1d32128a67113d31b990d5b19028d67f7b19017497f33e96c675a35b6187404d626c5bc935b8065d385ec6345d67eecbe37d19a9ce59024756fd60bcf98a3849c69a3c4030ddd9cd1776b83adafb99609e57a84e2ede0ff35aa85b3e4b61980e0b6d668ad2393f1b290d06007100"/308, @ANYRES32=r1, @ANYBLOB="6d7f869668abd800c8bf329f0b46ccabb86e4b0a268d63f663c7c62951844813f636c57f836e106cc2f041f6781489f573446fb1558c5f26e0f865bc4c079703ceac82bfd32c74b3dce0160e3b07737cb6f8288fb44ccbf6f1e379e96d790c23", @ANYRES8], 0x1, 0x152b, &(0x7f0000002f80)="$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") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x10) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x100, 0x8) finit_module(r5, 0x0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20b008000000080a59a1ad5309d1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="ffffffff36000094e1975ce60671ba7a8e9f38db33c6d3afc93bf640060a016df9dfd45ce71d4f329007ea51469c06b958810987b1c8222889a465457512108e14ff66620f26c32ec0c3e41a9fa8f1c026eee81f17111785001144630924fee3a86e865fcc42f8cba474b2577f"], 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r6, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r8}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c010000190001000000000002000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000040000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac000000000000ffffffff0300000000000000000000000004000000000000000000000000000084000500fc020000000000000000000000000002000004d4320000000a000000ff0200000000000000000000000000010000000004010800000000000100000007000000ac1414bb000000000000000000000000000004d533"], 0x13c}}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0500", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xfc}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100001002dbd7200fedbdf2500000000", @ANYRES32, @ANYBLOB="28280500a3040000280012800b0001006272696467650000180002800c002e00000000000000000005002c0002"], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r8, 0x0, 0x0}, 0x20) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.271439959s ago: executing program 6 (id=287): syz_usb_connect$uac3(0x2, 0xba, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_usb_connect$cdc_ecm(0x3, 0x95, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x3, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, "b806541bb7de"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x200, 0xfffa, 0xb, 0x48}, [@ncm={0x6, 0x24, 0x1a, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0x82}, @mdlm={0x15, 0x24, 0x12, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xd07, 0x8, 0x9, 0x6, 0x61d5, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0xf, 0x6, 0x7, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x5fc, 0x31}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb1, 0x7, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xa8, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x2, 0x1}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0xd, 0x5, 0x3, 0x40, 0x9}, 0x33, &(0x7f0000000180)={0x5, 0xf, 0x33, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x3, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x66d, 0x0, 0x20, [0xff00cf, 0x101ff3f, 0xf0, 0x0, 0x1fec0c0]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x0, 0x6}]}, 0x5, [{0x70, &(0x7f00000001c0)=@string={0x70, 0x3, "1766ff8204bb03bd2ca8617e0cffb3b616064f4bca3a6a0095b3d8cc40d80e6fa300b1100c302b2dbbee007ef9937e27f4c98e082cbbf618f8d45d54014d2c8e5ccba03522e6860dfb663f2daefe5560f6daa7ab64f989a4d18cd3be67a433e9b7fa067f7b4d0822a034190017b2"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000280)=@lang_id={0x44, 0x3, 0xc04}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x280a}}, {0xb4, &(0x7f0000000300)=@string={0xb4, 0x3, "4bdbf7b79b7349be49ac16b968d081bf62330337a40e31c93f38e92b6dc7eebddaced50f50631ce7d3a6e350f6f879a5dc8404aab3d556f53d543642901b1747d9e415c855f0b2604b5939fe0f89b788b2f3645fc7090d659d3da2d058755ec090b99d6f6099d7f0564223fa58ec0ab703fc5641b043408e84895180ecc256a6c71ae5dce2807d673a832b8c23bad668301cca21931702f698d302c473ccf66bfa3b39d85a31e7a168d6cacd4cf05bf6dd72"}}]}) 2.858604392s ago: executing program 3 (id=289): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x6, 0x4}, {0x5, 0x5}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000000)=""/228, 0x42, 0xe4, 0x1}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xff, 0x40, 0x7ffc0002}]}) timer_delete(r1) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) setresgid(0xee00, 0xee01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000040)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000300)={[], [], 0x2c}, 0x94, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO") syz_emit_ethernet(0x9a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x1e, [0x1, 0xfffffffe, 0x3, 0x6, 0x1, 0x10001, 0x5]}]}}}}}}}}, 0x0) 2.545821352s ago: executing program 3 (id=290): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x28744b5, &(0x7f0000000500)=ANY=[], 0x3, 0x0, &(0x7f0000000000)) lsetxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:kvm_device_t:s0\x00', 0x1a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001980)}}, 0x10) r3 = accept$inet6(r0, 0x0, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@rand_addr=' \x01\x00', 0x14, r2}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000140), &(0x7f00000001c0)={'U-', 0x9}, 0x16, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0x3, 0x2cb, &(0x7f0000000700)="$eJzs3U9rY1UUAPDz0rzXDF20C1ci+BazcGOZunVhB6kgdqVk4R/QwZmBoQ0DDQQ6imFWfgIXLvwe7twLbvwGgguX7hykcOW9lyZp00maSqKU32/Tw7nn5N5336MphNx+8Vrv6OHT/uPnX/8WnU4Wrf3YjxdZ7EQrzqWRAABuhRcpxZ83en9vt1a1JgBgtabe//OXlGzOpt5Z9bIAgBX66ONPPrh/eHjwYVl2InrfDrpZND+b8fuP40kcx6O4F9txNvksIKUmfu/9w4Nol5WduNsbDrpVZ+/zX8alRdT9e7EdO1f375WNqf7hoF3/5ZFlEU/2q4W8Fdvxykx/NX6Qx2x/dIt4ozO6yGr+3diOX7+Mp3EcD+vPNCbzf1NE+W767q+vPq2Kq/5sOOhu1nUTaWPd9wYAAAAAAAAAAAAAAAAAAAAAgNtrtxzbibu9KtWcv9PdOKvHdy+M1+frtOrxpj+LKOrg0vlAwxQ/nJ+vc68sy5Q19ePzfe6049V2tP+zCwcAAAAAAAAAAAAAAAAAAID/kf7ps6MHx8ePTqaDIiIuZq4ZNF/yz8avvmT7ONifyrwe84s3l5orNkbl1Vov1+z9/FlvnIn2zTZhkJcR89acz2TuVOtZ/Mp/p5RSlkXccFdHQX6duRYEW/Nrqg3+6futN48eZIv2sHN+436cHiripH966Z5GNn/SswuZtNTjV8ypKUZPzGl+Hsx5na1/s6v902dv/97MMcpkC64in8rkoyBe9vh1lnqe1/P7BwAAAAAAAAAAAAAAAAAAmJh86feKwedzW1srWxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNnk//9PgpjJXAqG8UfdfHVNSmk4zhRx0p+dNV//hQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCr/RMAAP//Ol1oeQ==") r4 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x57) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040050}, 0x8000000) 2.327259918s ago: executing program 3 (id=291): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@local, 0x4e21, 0x8000, 0x4e21, 0x8e00, 0xa, 0xa0, 0x40, 0x1d}, {0x4, 0x81, 0x8, 0x2, 0x81a, 0x7, 0x10, 0xaaa8}, {0x2, 0x2, 0x8b9, 0x5}, 0x1, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@local, 0x4d6, 0xaf}, 0x2, @in6=@local, 0x0, 0x4, 0x0, 0x2, 0x7, 0x4}}, 0xe8) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18, 0x8800}}], 0x1, 0x20040804) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x808080, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@sysvgroups}, {@discard}]}, 0x1, 0x473, &(0x7f0000002fc0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x2) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, 0x0, 0x0) io_setup(0x2e, &(0x7f0000000200)=0x0) io_submit(r8, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x27ec, r4, 0x0, 0x0, 0x10000, 0x0, 0x2, r4}]) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$binfmt_script(r11, &(0x7f0000000440), 0x1000a) sendfile(r10, r11, &(0x7f0000000080)=0xffff, 0x1001) close_range(r9, 0xffffffffffffffff, 0x0) 2.227982611s ago: executing program 3 (id=292): unshare(0x60000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0xd}, 0x94) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) unshare(0x20040600) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x20200) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000000080)=""/172, 0xac}, {&(0x7f0000000000)=""/102, 0x66}], 0x3}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe6c}, 0x9}], 0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f00000001c0)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000100)=0xffffff97) 1.587544591s ago: executing program 4 (id=294): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, r7}, &(0x7f0000000600), &(0x7f0000000640)=r6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @random="41e4081a43a8", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @private1, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811fb002c07d402fc05123cb8596b095a41f266fd4617a2c554e2", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000004c0)={@private=0xa010100, @multicast2, r9}, 0xc) 1.570498032s ago: executing program 1 (id=295): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) 1.506016444s ago: executing program 1 (id=296): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000300)={[{@nouser_xattr}, {@noblock_validity}, {@data_ordered}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x84000, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x9, 0xfffd, 0x0, 0x0, 0x20, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffc, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0xa}, {}, 0x100, 0x3504, 0x2}}, 0xf0}}, 0x0) (rerun: 64) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x5) (async) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r4, 0x12d, &(0x7f00000035c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x5, r3, 0x0, 0x0, 0x4}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x12b, r3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}]) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10031411e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x30, 0x0, 0x4, 0xfffff000}, {0x6, 0x4, 0x0, 0x8000}]}, 0x10) (async) lseek(r0, 0xfffffffffffffffd, 0x1) 1.239552301s ago: executing program 3 (id=297): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000140)=""/4096, 0x2b, 0x1000, 0x1}, 0x28) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000905000001020d0000052406000105240001000d240f0100000000000000000006241a0000100905810300020400000904010000020d00000904011602020d0000090582020002000000090503020022000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) clock_adjtime(0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x8}}) 1.143637435s ago: executing program 5 (id=298): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4) r2 = epoll_create1(0x0) sendfile(r0, r2, 0x0, 0x5d) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0028010}) 856.147373ms ago: executing program 5 (id=299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000039000000", 0xfe60) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xfd, 0x60, 0xd, 0x5}, 'syz1\x00', 0x3a}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1005, &(0x7f00000069c0)=ANY=[], 0x1, 0x5542, &(0x7f0000006040)="$eJzs3EtvG9UXAPDjpOn733+EWLDrSBVSItVRnT4EuwKteIhWFY8FK+rEruXW9kSx64auWLBELPgmCCRWLPkMLFizQyxA7JCKPPcGNTwqqrg2TX8/aXpm7lyfOXdUJTozkQN4Zi0Xv/5ci1NxLCIWI+JkRLVfy1vlcgovRMTpiFh4aKvl8T8GDkfE8Yg4NUmectbyqc/Pjs9c/OmtX7757sihE198/f38Vg3M24sR0d9K+/f6KZadFG/n8ea4W8X+hXGO6UT/Tj4uU7zX3qgy3GvuzmtW8XwnzS+37g4n8VavuTmJne6tanxrkC44HHd281QfuN3cro5b7Y0qdodlFTv3U10799PPtvvDUcrTyvk+qtLHaLQb03h7p53Ws3WnipuDUR5PectWe2cSxznmy8Vm2WtVdWzs507/t73dHdzdKcbt7WG3HBQX1xovrTUu1RvbZas9al+oN/utSxeKlU5vMq0+ajf7lztl2em11zbL/mqx0tncrDcaxcqV9ka3OSgajbXza+fqF1fz3tni9evvF71WsTKJr3YHd0fd3rC4VW4X6ROrxfra+ZdXizON4t1rN4ob71y9eu3Gex9e+eD6K9fefC1P+ktZxcr6ufX1euNcfb2x+vSuf/K7/rHW/0kueorrh32pPerkzdnVAfAU0f8D8zDT/n8ppt7/h/5/KvT/j7n+ODDrf5Dt7wbybHtk/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEH2w9KXb1Q7y+n4RB7/Xx56Lh/XImIhIh78jcU4vCfnYs6z9A/zl/5Uw7e1qDJMrnEkb8cj4nLefvv/k74LAAAAcHB99fHpz1K3nv5ZnndBzFJ6aLNw8uaU8tUiYmn5xylkifywKZ7ff1XJ5P/3odiZUrbqAdbRKSVLj9wOTSvbv7K4Jxx9KNRSWNideXimdQEAAE/S3k5gtl0IAAAAs/TpvAtgPqo3rflv8fNrviMp5BeCx/YcAQAAAE+h2rwLAAAAAJ64qv/3/X8AAABwsKXv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4nZ27SVIaiAIA/BImzozjT8py71XcwTE8gkuX1lyFI+AVvABnwJ1bdxZYpFtLKBAwIWGo76tKmu6Ex4Mii/6pBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgnL5Vs8mXz+/u2sZZrtrp5tsAAAAAuyyq2aR5Uaf6Q25/mZve5HoREWVE7Oq7j+LZRsxRjlPtub/ayuFrRBNh/Rm3+XgeEe/z8fP1uX8FAAAAuF7zx+k49dbTqR46IfqUBm3KFx86ildERFV/7yhauT69PerW1eHxofX/+yY+7blanJZaM7AVrZfM/NYMud10Fe2wUX7c/xR3fxVFKsr+0gEAAPqy2RPosRcCAABAzz4OnQDDaGY981r8vID/NhV5QvB+owYAAAA8QaeuegYAAAAu0cM/rzb9//37/6XZ/wvY/+/VD/v/AQAAwH+b30/HQ+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw7RbVbDJ/nI7bxlmujhR1esN2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8Yn9eThiGwSAMbhLldRNqwP13aRbsEowvMyD4+PckAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjc43h5nvFqzGQbvc4k755Xkk+nxrdT49e58U8y1t2/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICd/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnfv3jZuKAwD+vfP5SguIEFCGIEQlBlhoei0tXRlAEQN/AlKUXkvgyo82A60qUBY2lLkLghEhJFDY+j90bqUuZetwQ5GYGED22cnrUcRBFftIPh/p+X1tOX7f50RRvn7OAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALXxm3txVmwWJnG3Onb7wfX1or8z1Rdubt9dLloRd/7m+l/sV+Lz78V0p7PUXiIAAAAcHlld30f0I99ZLYLuQln/5/U5Rc3/zdOTuK7np+v+uq9r/6L9/NP953cHWpiMU1z0wsZoePKvqfSyfZznPHvmH8/olXe+fPaSld+Q7jtbz43z8n52vrp1661+GR5pIlsA4L84UfdVUP89VPSDNhMD4NDoVa1wr6r/s4V2cwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoQn8rnqzjTkQs9/biwp0H19fLfmr/5vbd5bqdvXFjO71mcYk8Ii5sjIYnm5rI/8CVq9c+XBuNhpebD16KiPZGr4L3Zjgnos0MBY8bdKuf9dm+6nhEtJ9z+0HLv5gAADhw8qoVdf29fGe1ONZZjPjj24fr/1eSONL6f6pP6//775+9nY6V1v+DxmY4/1Y2L32ycuXqtdc2Lq1dHF4cfvT6qcEbg9Pnzpw5t1I+K1nxxAQAAIDH069aWv93FyPGU+v/x5I4Zqz/P/168Hk6Vqb+f6S9Rb+2MwEAADjcnj3+26+dRxzv9Pvx2drm5uXBZLu7f2qybSHVf+1I1dL6P1tsOysAAACgCeOtzkPr/+eTOGZc/3/quxd+SK+ZRcTRav3/xPrHo/PNTaclv890VhP/TrzvUwUAAGCuHa1auv6fl+//d3dfeehGxKsvT+LqYwBnqv+zt7/8Ph0rff//dHNTnEvdpcn9KPuliN5S2xkBAABwkD1RtaLY/yXfWf3gx2Pv9r3/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANC0PwMAAP//MOI8CQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xf505, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) capset(&(0x7f0000000280)={0x20080522}, 0x0) ioctl$KVM_NMI(r4, 0xae9a) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xffffffff, 0xc, 0x1, 0x0, 0x0, 0x4) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r6, 0x8008976) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x80000) r10 = fcntl$dupfd(r9, 0x406, r9) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f00000002c0)={0xa0000013}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 591.431281ms ago: executing program 4 (id=300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1b) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000580)=""/144, 0x90}], 0x1) syz_emit_ethernet(0x9a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500640601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002000090780000080a00000002000098ca04020303d72204914f080a00000004000000ad13128098cf093cc9cd7b8ec814f9bcfdfea9051e00000001fffffffe2300000300000006000000010001000100000005000000"], 0x0) 590.825461ms ago: executing program 4 (id=301): r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000040)=0x28) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/99, 0x63}, 0xb337}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x1, 0x4) write(r0, &(0x7f0000000200)="240000001e005f0214e0ffda8250bb22fe54e592afe412cdf8bb048d8dd5d6d87c998fe8", 0x24) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) 449.116716ms ago: executing program 4 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002940)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x2281965a7a17aedf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0xffff, 0x3, 0x2, 0xb9c}, {0xfa, 0x0, 0x0, 0x4, 0x2, 0x87e}, 0x80, 0xfffff001, 0xf3f}}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PRATE64={0xfffffffffffffe7c, 0x5, 0x5a90d3d52efb08c}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000400)={0xfc, 0x1, 0xa18, 0x9, "6b179d416c072dfe94b540692acbcf40f779e2a84ba0c1d7701fd0701de1f993"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x0, 0x258, 0xfeffffff, 0x258, 0x0, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000, 0xff000000, 'wg1\x00', 'bridge0\x00', {0xff}, {}, 0x88, 0x0, 0x41}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@ecn={{0x28}, {0x0, 0x0, 0x8, 0x3}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @port=0x4e21, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x258}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x847, 0x7, [0x3a, 0x5, 0x3e, 0x1a, 0x3, 0x16, 0x2d, 0x35, 0x1, 0x4, 0x3b, 0x3f, 0x28, 0x33, 0x3f, 0x5], 0x0, 0x2, 0x4}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x6c}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3735d29e2530a11, @empty, @empty, @icmp_id=0x67, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000036db000000000000950000000000000078ce83fc0dd295677f350279b8777a90e7cdaa51449b8e75cfaa370000"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000100)=@generic={&(0x7f0000000180)='./file0\x00', r5}, 0x18) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)={0x30, r2, 0x62c21a4ade68aba1, 0xf0bd23, 0xfffffffd, {{0x32}, {@val={0x8, 0x117, 0x59}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x76}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x2000c800) 399.686628ms ago: executing program 1 (id=303): pselect6(0x0, 0x0, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) (async, rerun: 32) brk(0x400000ffc000) (async, rerun: 32) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0, 0x33e, &(0x7f00000007c0)="$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") (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 64) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x1e, 0x5, 0x0) (async) capget(&(0x7f00000012c0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000001300)={0x7, 0x6, 0x755, 0x390, 0x0, 0x2}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'veth0_to_team\x00', @multicast}) (async, rerun: 64) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) 339.39234ms ago: executing program 1 (id=304): setpriority(0x0, 0x0, 0x2a14b58) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402ec79030420be11d1d109050109758b0620010725010006efff0904020000010200000904020101010200001124020306040803000c0000000000000007240116050210090506090002"], 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="2c0000006805010002000000fcffff7f00000000000000001400020001000000000000000100000008000000"], 0x2c}}, 0x4000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) open(0x0, 0x143142, 0x1a5) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000003, &(0x7f0000000000), 0x41, 0x4cd, &(0x7f0000000100)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x14) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000740)={0x1, 0x0, [{0x50000, 0xf2, &(0x7f0000000640)=""/242}]}) 337.0526ms ago: executing program 4 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x20db, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lstat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = gettid() waitid(0x2, r2, 0x0, 0x8, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) setresgid(0x0, 0x0, 0xee01) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x20db, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) lstat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000340)) (async) setuid(r1) (async) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) gettid() (async) waitid(0x2, r2, 0x0, 0x8, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) (async) setresgid(0x0, 0x0, 0xee01) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) 275.253301ms ago: executing program 6 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)={0x18, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)={0x18, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0xe, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x3}}]}, 0x60}}, 0x4004) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 255.992232ms ago: executing program 4 (id=307): unshare(0x60000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0xd}, 0x94) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) unshare(0x20040600) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x20200) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f00000001c0)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000100)=0xffffff97) 167.424685ms ago: executing program 1 (id=308): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000) mremap(&(0x7f0000376000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000004e000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x148) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000010c0)) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) fallocate(r1, 0x20, 0x4000, 0x8000) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 0s ago: executing program 1 (id=309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000000000)={0xa, 0x2}, 0x1c) r1 = dup(r0) sendto$packet(r1, 0x0, 0x0, 0x24005010, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. [ 19.107074][ T24] audit: type=1400 audit(1779962850.050:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.108102][ T271] cgroup: Unknown subsys name 'net' [ 19.129735][ T24] audit: type=1400 audit(1779962850.050:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.156998][ T24] audit: type=1400 audit(1779962850.090:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.157163][ T271] cgroup: Unknown subsys name 'devices' [ 19.271743][ T271] cgroup: Unknown subsys name 'hugetlb' [ 19.277497][ T271] cgroup: Unknown subsys name 'rlimit' [ 19.385234][ T24] audit: type=1400 audit(1779962850.330:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.397110][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.410162][ T24] audit: type=1400 audit(1779962850.330:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.445048][ T24] audit: type=1400 audit(1779962850.330:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.468606][ T24] audit: type=1400 audit(1779962850.360:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.468800][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.494047][ T24] audit: type=1400 audit(1779962850.360:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.494062][ T24] audit: type=1400 audit(1779962850.400:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.494076][ T24] audit: type=1400 audit(1779962850.400:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.423877][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.431331][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.438855][ T279] device bridge_slave_0 entered promiscuous mode [ 20.446822][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.453967][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.461266][ T279] device bridge_slave_1 entered promiscuous mode [ 20.538093][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.545325][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.552760][ T282] device bridge_slave_0 entered promiscuous mode [ 20.559395][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.566562][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.573876][ T280] device bridge_slave_0 entered promiscuous mode [ 20.581785][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.588807][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.596249][ T280] device bridge_slave_1 entered promiscuous mode [ 20.605520][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.612647][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.619993][ T282] device bridge_slave_1 entered promiscuous mode [ 20.706690][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.713783][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.721129][ T281] device bridge_slave_0 entered promiscuous mode [ 20.730070][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.737126][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.744588][ T281] device bridge_slave_1 entered promiscuous mode [ 20.761432][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.768490][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.775856][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.783052][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.801114][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.808156][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.815547][ T283] device bridge_slave_0 entered promiscuous mode [ 20.822746][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.829771][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.837170][ T283] device bridge_slave_1 entered promiscuous mode [ 20.877978][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.885118][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.892365][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.899535][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.910769][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.917813][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.925439][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.932454][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.000959][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.008290][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.016269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.023925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.032302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.040620][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.047972][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.067675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.075459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.093321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.101312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.109540][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.116656][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.124050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.132661][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.139749][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.147211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.166735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.175232][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.182360][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.189694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.198034][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.205171][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.212796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.242966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.251557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.259415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.267368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.275784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.284083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.292636][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.299649][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.307037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.315176][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.322201][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.329562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.348310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.356704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.365025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.373134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.380883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.389453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.405347][ T282] device veth0_vlan entered promiscuous mode [ 21.411759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.419872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.430781][ T280] device veth0_vlan entered promiscuous mode [ 21.440165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.448419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.456783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.464255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.471682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.479962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.488268][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.495504][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.503008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.511680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.519756][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.526790][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.539186][ T279] device veth0_vlan entered promiscuous mode [ 21.548192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.555831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.564248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.571959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.580446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.588888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.597070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.605441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.613219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.624257][ T282] device veth1_macvtap entered promiscuous mode [ 21.638684][ T281] device veth0_vlan entered promiscuous mode [ 21.645399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.653626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.662716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.670980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.679367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.687961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.696261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.704651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.712783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.720859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.728790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.736879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.744393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.757744][ T279] device veth1_macvtap entered promiscuous mode [ 21.765555][ T280] device veth1_macvtap entered promiscuous mode [ 21.772547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.781214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.789248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.796887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.804989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.813303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.833204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.841624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.849847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.858246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.867394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.876002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.884445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.892683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.913794][ T281] device veth1_macvtap entered promiscuous mode [ 21.921032][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 21.931425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.939663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.948840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.956499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.964924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.973335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.981634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.989869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.998323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.011344][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.019676][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.030339][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.031461][ T283] device veth0_vlan entered promiscuous mode [ 22.050513][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.069889][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.079346][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.087081][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.135625][ T305] EXT4-fs (loop1): blocks per group (4278452224) and clusters per group (16384) inconsistent [ 22.158672][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.168596][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.177232][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.185653][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.195085][ T283] device veth1_macvtap entered promiscuous mode [ 22.484167][ T305] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.571817][ T320] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 22.585714][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.600585][ T320] EXT4-fs (loop0): Ignoring removed nobh option [ 22.600622][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.615738][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.622953][ T320] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1: iget: bad i_size value: 38620345925642 [ 22.624612][ T316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 22.636639][ T320] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 22.656897][ T313] ====================================================== [ 22.656897][ T313] WARNING: the mand mount option is being deprecated and [ 22.656897][ T313] will be removed in v5.15! [ 22.656897][ T313] ====================================================== [ 22.661425][ T320] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=./file0,nobh,acl,journal_dev=0x0000000000000011,usrjquota=,sysvgroups,usrjquota=,quota,grpid,nogrpid,,errors=continue [ 22.698265][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.710873][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.756427][ T313] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 22.770293][ T313] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 22.781716][ T320] EXT4-fs (loop0): shut down requested (2) [ 22.823494][ T311] process 'syz.3.4' launched '/dev/fd/3' with NULL argv: empty string added [ 23.374239][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.382318][ T300] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.630212][ T300] usb 2-1: Using ep0 maxpacket: 8 [ 23.750281][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.761343][ T300] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 23.780290][ T300] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 23.790591][ T367] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 23.793190][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.804079][ T367] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 23.818048][ T300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 23.834995][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 23.848322][ T300] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 23.944616][ T372] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 23.955086][ T367] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 23.958738][ T20] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 23.980450][ T367] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2797: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 23.993645][ T300] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 24.003068][ T300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.020292][ T367] EXT4-fs (loop3): 1 truncate cleaned up [ 24.028501][ T367] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue [ 24.047533][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.062325][ T300] usb 2-1: config 0 descriptor?? [ 24.075401][ T20] usb 1-1: config 0 descriptor?? [ 24.100262][ T341] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 24.110171][ T24] kauditd_printk_skb: 13164 callbacks suppressed [ 24.110184][ T24] audit: type=1326 audit(1779962855.050:13236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=343 comm="syz.4.11" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60f36c6bd7 code=0x7ffc0000 [ 24.141476][ T24] audit: type=1326 audit(1779962855.050:13237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=343 comm="syz.4.11" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f36cce59 code=0x7ffc0000 [ 24.166762][ T24] audit: type=1326 audit(1779962855.060:13238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=343 comm="syz.4.11" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60f36c6bd7 code=0x7ffc0000 [ 24.191697][ T367] audit: audit_backlog=65 > audit_backlog_limit=64 [ 24.192324][ T24] audit: type=1326 audit(1779962855.060:13239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=343 comm="syz.4.11" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f60f366e1d9 code=0x7ffc0000 [ 24.198708][ T367] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 24.223571][ T24] audit: type=1326 audit(1779962855.060:13240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=343 comm="syz.4.11" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60f36c6bd7 code=0x7ffc0000 [ 24.241327][ T367] audit: backlog limit exceeded [ 24.256131][ T24] audit: type=1326 audit(1779962855.060:13241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=343 comm="syz.4.11" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f60f366e1d9 code=0x7ffc0000 [ 24.285308][ T24] audit: type=1326 audit(1779962855.060:13242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=343 comm="syz.4.11" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60f36c6bd7 code=0x7ffc0000 [ 24.360174][ T300] usb 2-1: string descriptor 0 read error: -71 [ 24.371426][ T300] usb 2-1: USB disconnect, device number 2 [ 24.380254][ T362] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.470354][ T384] exfat: Deprecated parameter 'utf8' [ 24.475810][ T384] exfat: Deprecated parameter 'utf8' [ 24.481442][ T384] exfat: Deprecated parameter 'utf8' [ 24.514530][ T384] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 24.634304][ T339] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 24.661336][ T20] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 24.676589][ T20] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 24.697793][ T20] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 24.706158][ T20] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 24.714244][ T20] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 24.722599][ T20] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 24.730664][ T20] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 24.738813][ T20] steelseries_srws1 0003:1038:1410.0001: missing HID_OUTPUT_REPORT 0 [ 24.819764][ T391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 24.828824][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 24.837168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 24.850167][ T362] usb 3-1: unable to get BOS descriptor or descriptor too short [ 24.922997][ T5] usb 1-1: USB disconnect, device number 2 [ 24.930251][ T362] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.941131][ T362] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.949993][ T362] usb 3-1: config 1 has no interface number 0 [ 24.972232][ T393] loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 24.973314][ T393] loop1: p3 start 201326592 is beyond EOD, truncated [ 25.190499][ T362] usb 3-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 25.200907][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.221274][ T362] usb 3-1: Product: syz [ 25.225483][ T362] usb 3-1: Manufacturer: syz [ 25.230068][ T362] usb 3-1: SerialNumber: syz [ 25.275388][ T391] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 25.300367][ T391] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 25.311164][ T391] F2FS-fs (loop3): Found nat_bits in checkpoint [ 25.408561][ T391] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 25.417036][ T391] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 25.546461][ T307] udevd[307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 25.580801][ T308] udevd[308]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 25.584266][ T415] udevd[415]: inotify_add_watch(7, /dev/loop1p12, 10) failed: No such file or directory [ 25.596465][ T329] udevd[329]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 25.600652][ T362] usb 3-1: MIDIStreaming interface descriptor not found [ 25.615222][ T413] udevd[413]: inotify_add_watch(7, /dev/loop1p10, 10) failed: No such file or directory [ 25.625271][ T411] udevd[411]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory [ 25.629427][ T410] udevd[410]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 25.640137][ T412] udevd[412]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 25.658857][ T408] udevd[408]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 25.669721][ T414] udevd[414]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 25.680926][ T362] usb 3-1: USB disconnect, device number 2 [ 25.746924][ T421] netlink: 'syz.0.28': attribute type 7 has an invalid length. [ 25.802739][ T425] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 25.940438][ T430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 25.947695][ T430] IPv6: NLM_F_CREATE should be set when creating new route [ 25.954947][ T430] IPv6: NLM_F_CREATE should be set when creating new route [ 26.088626][ T425] loop3: p1 p2 p3 < p5 p6 p7 > [ 26.101889][ T435] netlink: 'syz.3.29': attribute type 6 has an invalid length. [ 26.110724][ T425] loop3: p2 size 16775168 extends beyond EOD, truncated [ 26.119332][ T425] loop3: p5 start 4294970168 is beyond EOD, truncated [ 26.143131][ T406] F2FS-fs (loop1): Invalid Fs Meta Ino: node(2305) meta(2) root(3) [ 26.167149][ T406] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 26.185538][ T406] F2FS-fs (loop1): Unrecognized mount option "$" or missing value [ 26.322363][ T444] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.33: invalid block [ 26.334078][ T444] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.33: invalid indirect mapped block 10 (level 1) [ 26.347754][ T444] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.33: invalid indirect mapped block 8 (level 1) [ 26.361209][ T444] EXT4-fs (loop3): 1 truncate cleaned up [ 26.366897][ T444] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue [ 26.430916][ T453] 9pnet: Insufficient options for proto=fd [ 26.520421][ T459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 26.677705][ T473] capability: warning: `syz.3.36' uses deprecated v2 capabilities in a way that may be insecure [ 26.709655][ T471] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.40: inode has both inline data and extents flags [ 26.724059][ T471] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.40: couldn't read orphan inode 15 (err -117) [ 26.736127][ T471] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue [ 26.812501][ T459] EXT4-fs (loop3): Ignoring removed nobh option [ 26.827493][ T459] EXT4-fs (loop3): dax option not supported [ 26.845529][ T479] erofs: Unknown parameter './cgroup.net/syz1' [ 26.980334][ T364] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.190193][ T300] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.250181][ T364] usb 5-1: device descriptor read/64, error -71 [ 27.412969][ T484] capability: warning: `syz.3.42' uses 32-bit capabilities (legacy support in use) [ 27.430199][ T300] usb 1-1: Using ep0 maxpacket: 32 [ 27.590212][ T300] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.611549][ T493] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 27.619459][ T491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58515 sclass=netlink_route_socket pid=491 comm=syz.3.44 [ 27.647809][ T493] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,errors=continue,noload,noquota,jqfmt=vfsv0,nodiscard,norecovery,,errors=continue [ 27.670558][ T364] usb 5-1: device descriptor read/64, error -71 [ 27.674755][ T490] DRBG: could not allocate digest TFM handle: hmac(sha256) [ 27.710410][ T300] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 27.731441][ T300] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 27.753804][ T300] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 27.770273][ T300] usb 1-1: config 128 has no interface number 0 [ 27.776976][ T300] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 27.788679][ T300] usb 1-1: config 128 interface 127 has no altsetting 0 [ 27.950350][ T300] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 27.959532][ T300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.967928][ T300] usb 1-1: Product: syz [ 27.970284][ T364] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.974839][ T300] usb 1-1: Manufacturer: syz [ 27.994893][ T300] usb 1-1: SerialNumber: syz [ 28.014468][ T504] EXT4-fs (loop2): invalid first ino: 0 [ 28.020204][ T479] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 28.240586][ T479] udc-core: couldn't find an available UDC or it's busy [ 28.247610][ T479] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.260132][ T364] usb 5-1: device descriptor read/64, error -71 [ 28.340166][ T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.420150][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.650344][ T364] usb 5-1: device descriptor read/64, error -71 [ 28.660226][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 28.710279][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.721964][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.732776][ T5] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 28.742742][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.755071][ T5] usb 4-1: config 0 descriptor?? [ 28.770356][ T364] usb usb5-port1: attempt power cycle [ 28.940308][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 28.950477][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.958740][ T25] usb 3-1: Product: syz [ 28.964115][ T25] usb 3-1: Manufacturer: syz [ 28.968852][ T25] usb 3-1: SerialNumber: syz [ 29.002957][ T532] udc-core: couldn't find an available UDC or it's busy [ 29.010435][ T532] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.120506][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 29.128063][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 29.176091][ T5] usb 4-1: USB disconnect, device number 2 [ 29.182465][ T364] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 29.360365][ T364] usb 5-1: device descriptor read/8, error -71 [ 29.833178][ T364] usb 5-1: device descriptor read/8, error -71 [ 29.868425][ T546] netlink: 'syz.0.58': attribute type 12 has an invalid length. [ 29.880625][ T546] netlink: 'syz.0.58': attribute type 29 has an invalid length. [ 29.888561][ T546] netlink: 148 bytes leftover after parsing attributes in process `syz.0.58'. [ 29.899606][ T544] device syzkaller0 entered promiscuous mode [ 29.910154][ T5] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 29.925422][ T24] kauditd_printk_skb: 14542 callbacks suppressed [ 29.925432][ T24] audit: type=1400 audit(1779962860.870:27784): avc: denied { write } for pid=543 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.953627][ T25] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 29.959987][ T25] usb 3-1: 1:1: freq mismatch (RO clock): req 44100, clock runs @0 [ 29.972444][ T552] xt_hashlimit: size too large, truncated to 1048576 [ 29.987002][ T24] audit: type=1400 audit(1779962860.920:27785): avc: denied { setopt } for pid=551 comm="syz.0.60" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.020222][ T25] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 30.039259][ T544] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.067785][ T25] usb 3-1: clock source 0 is not valid, cannot use [ 30.077529][ T544] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 30.104753][ T558] incfs: Options parsing error. -22 [ 30.111275][ T544] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 30.115569][ T25] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 30.126543][ T558] incfs: mount failed -22 [ 30.135784][ T24] audit: type=1400 audit(1779962861.080:27786): avc: denied { write } for pid=543 comm="syz.4.57" name="file0" dev="loop4" ino=1048597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.159015][ T25] usb 3-1: 2:1: freq mismatch (RO clock): req 44100, clock runs @0 [ 30.188748][ T25] usb 3-1: USB disconnect, device number 3 [ 30.198037][ T24] audit: type=1400 audit(1779962861.080:27787): avc: denied { remove_name } for pid=543 comm="syz.4.57" name="file0" dev="loop4" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.222675][ T24] audit: type=1400 audit(1779962861.080:27788): avc: denied { rename } for pid=543 comm="syz.4.57" name="file0" dev="loop4" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.278922][ T300] usb 1-1: USB disconnect, device number 3 [ 30.289236][ T537] EXT4-fs (loop3): Test dummy encryption mode enabled [ 30.301401][ T24] audit: type=1400 audit(1779962861.080:27789): avc: denied { add_name } for pid=543 comm="syz.4.57" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.326619][ T537] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c01c, mo2=0003] [ 30.338316][ T537] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,bsdgroups,test_dummy_encryption,errors=continue,bsddf,noauto_da_alloc,noblock_validity,,errors=continue [ 30.357634][ T24] audit: type=1400 audit(1779962861.300:27790): avc: denied { mount } for pid=536 comm="syz.3.55" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.491658][ T24] audit: type=1400 audit(1779962861.440:27791): avc: denied { create } for pid=536 comm="syz.3.55" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 30.553242][ T567] netlink: 388 bytes leftover after parsing attributes in process `syz.4.64'. [ 30.556754][ T574] device ipip0 entered promiscuous mode [ 30.648981][ T537] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 30.736779][ T580] incfs: Can't find or create .incomplete dir in . [ 30.744170][ T580] incfs: mount failed -28 [ 30.758449][ T24] audit: type=1400 audit(1779962861.680:27792): avc: denied { mounton } for pid=566 comm="syz.4.64" path="/9/file0/bus" dev="loop4" ino=1048599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 30.901553][ T538] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 30.924167][ T24] audit: type=1400 audit(1779962861.870:27793): avc: denied { read write open } for pid=536 comm="syz.3.55" path="/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.160148][ T362] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.205906][ T571] F2FS-fs (loop0): invalid crc value [ 31.231596][ T571] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.278863][ T571] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 31.341808][ T614] syz.4.77 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.376615][ T604] F2FS-fs (loop1): invalid crc value [ 31.382946][ T604] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 31.408613][ T604] F2FS-fs (loop1): recover fsync data on readonly fs [ 31.416258][ T604] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 31.423162][ T604] F2FS-fs (loop1): checkpoint=disable on readonly fs [ 31.430219][ T362] usb 3-1: Using ep0 maxpacket: 8 [ 31.550252][ T362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.572959][ T362] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 31.586879][ T362] usb 3-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 31.596418][ T362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.605421][ T362] usb 3-1: config 0 descriptor?? [ 31.902347][ T620] F2FS-fs (loop3): invalid crc value [ 31.920217][ T302] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.938918][ T620] F2FS-fs (loop3): Found nat_bits in checkpoint [ 31.965997][ T620] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 32.013426][ T582] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.032061][ T582] EXT4-fs (loop2): Ignoring removed orlov option [ 32.038921][ T620] overlayfs: missing 'lowerdir' [ 32.079340][ T582] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 32.118813][ T644] cgroup: syz.0.83 (644) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 32.135526][ T644] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 32.146047][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 32.180140][ T302] usb 2-1: Using ep0 maxpacket: 32 [ 32.300228][ T302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.472741][ T302] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 32.485194][ T302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.494732][ T362] wacom 0003:056A:00B2.0002: unknown main item tag 0x6 [ 32.502086][ T362] wacom 0003:056A:00B2.0002: unknown main item tag 0x6 [ 32.509447][ T302] usb 2-1: Product: syz [ 32.515703][ T362] wacom 0003:056A:00B2.0002: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 32.525356][ T302] usb 2-1: Manufacturer: syz [ 32.529958][ T302] usb 2-1: SerialNumber: syz [ 32.536140][ T362] wacom 0003:056A:00B2.0002: hidraw0: USB HID v0.08 Device [HID 056a:00b2] on usb-dummy_hcd.2-1/input0 [ 32.550341][ T302] usb 2-1: config 0 descriptor?? [ 32.556310][ T362] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B2.0002/input/input4 [ 32.590562][ T302] smsc95xx v2.0.0 [ 32.594210][ T302] smsc95xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 32.604306][ T302] smsc95xx: probe of 2-1:0.0 failed with error -22 [ 32.651590][ T660] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,usrjquota=,lazytime,nobarrier,grpjquota=,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue [ 32.671018][ T660] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.89: bg 0: block 260: invalid block bitmap [ 32.680193][ T5] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.695596][ T302] usb 3-1: USB disconnect, device number 4 [ 32.791609][ T362] usb 2-1: USB disconnect, device number 3 [ 33.000141][ T53] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 33.050197][ T5] usb 4-1: config 5 has an invalid interface number: 214 but max is 0 [ 33.058529][ T5] usb 4-1: config 5 has no interface number 0 [ 33.064747][ T5] usb 4-1: config 5 interface 214 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 33.075480][ T5] usb 4-1: config 5 interface 214 has no altsetting 0 [ 33.240520][ T5] usb 4-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=cb.02 [ 33.249763][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.257772][ T5] usb 4-1: Product: syz [ 33.262235][ T5] usb 4-1: Manufacturer: syz [ 33.266825][ T5] usb 4-1: SerialNumber: syz [ 33.334766][ T671] attempt to access beyond end of device [ 33.334766][ T671] loop1: rw=2049, want=250, limit=128 [ 33.348026][ T671] attempt to access beyond end of device [ 33.348026][ T671] loop1: rw=524288, want=250, limit=128 [ 33.360238][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.363993][ T670] attempt to access beyond end of device [ 33.363993][ T670] loop1: rw=2049, want=146, limit=128 [ 33.371218][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.391776][ T53] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 33.400826][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.409282][ T53] usb 5-1: config 0 descriptor?? [ 33.490225][ T300] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 33.570684][ T674] FAT-fs (loop1): Unrecognized mount option "A" or missing value [ 33.590598][ T5] usb 4-1: bad CDC descriptors [ 33.595536][ T5] usb 4-1: unsupported MDLM descriptors [ 33.602456][ T5] usb 4-1: USB disconnect, device number 4 [ 33.651926][ T667] raw_sendmsg: syz.4.90 forgot to set AF_INET. Fix it! [ 33.705349][ T677] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 33.712773][ T677] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 33.870220][ T300] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.881424][ T300] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.891342][ T300] usb 3-1: config 2 interface 0 has no altsetting 0 [ 33.897970][ T300] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 33.907764][ T300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.060219][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.072697][ T685] EXT4-fs (loop3): Ignoring removed bh option [ 34.081177][ T685] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable, [ 34.151035][ T690] udc-core: couldn't find an available UDC or it's busy [ 34.158408][ T690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.170172][ T53] usbhid 5-1:0.0: can't add hid device: -71 [ 34.181913][ T53] usbhid: probe of 5-1:0.0 failed with error -71 [ 34.195612][ T53] usb 5-1: USB disconnect, device number 6 [ 34.280182][ T300] usbhid 3-1:2.0: can't add hid device: -71 [ 34.286153][ T300] usbhid: probe of 3-1:2.0 failed with error -71 [ 34.293724][ T300] usb 3-1: USB disconnect, device number 5 [ 34.310127][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 34.470221][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 34.550174][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.560520][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.611276][ T717] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 34.665880][ T722] netlink: 'syz.4.107': attribute type 1 has an invalid length. [ 34.675419][ T722] Zero length message leads to an empty skb [ 34.720308][ T25] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 34.729494][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.738010][ T25] usb 2-1: Product: syz [ 34.747233][ T728] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 34.756121][ T25] usb 2-1: Manufacturer: syz [ 34.759083][ T724] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,quota,,errors=continue [ 34.765367][ T25] usb 2-1: SerialNumber: syz [ 34.775392][ T724] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.822080][ T731] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 34.919748][ T750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 34.932560][ T24] kauditd_printk_skb: 38 callbacks suppressed [ 34.932570][ T24] audit: type=1400 audit(1779962865.880:27832): avc: denied { mounton } for pid=751 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 35.007932][ T24] audit: type=1400 audit(1779962865.950:27833): avc: denied { setopt } for pid=753 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.080724][ T760] netlink: 'syz.3.120': attribute type 13 has an invalid length. [ 35.088632][ T760] netlink: 'syz.3.120': attribute type 17 has an invalid length. [ 35.140232][ T25] usb 2-1: 0:1 : does not exist [ 35.150176][ T25] usb 2-1: unit 0 not found! [ 35.172205][ T25] usb 2-1: USB disconnect, device number 4 [ 35.179310][ T762] EXT4-fs (loop3): Ignoring removed orlov option [ 35.234819][ T762] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue [ 35.260015][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 35.268469][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.277083][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.285929][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.294155][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.302642][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.311793][ T757] F2FS-fs (loop0): invalid crc value [ 35.323106][ T751] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.340375][ T751] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.340926][ T24] audit: type=1400 audit(1779962866.290:27834): avc: denied { map } for pid=759 comm="syz.3.120" path="/41/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.347940][ T751] device bridge_slave_0 entered promiscuous mode [ 35.378527][ T757] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 35.391166][ T751] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.398320][ T751] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.420660][ T751] device bridge_slave_1 entered promiscuous mode [ 35.431481][ T24] audit: type=1400 audit(1779962866.320:27835): avc: denied { execute } for pid=759 comm="syz.3.120" path="/41/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.455708][ T757] F2FS-fs (loop0): recover fsync data on readonly fs [ 35.467349][ T757] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 35.517952][ T751] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.525047][ T751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.551012][ T745] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 35.559197][ T653] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.559990][ T745] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 35.574938][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.576818][ T745] F2FS-fs (loop4): invalid crc value [ 35.582661][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.589080][ T745] F2FS-fs (loop4): Found nat_bits in checkpoint [ 35.606011][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.615167][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.623549][ T653] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.628394][ T745] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 35.630606][ T653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.637603][ T745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 35.645917][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.660947][ T653] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.667985][ T653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.676112][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.696395][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.707747][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.719889][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.728387][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.736219][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.740216][ T5] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.752000][ T751] device veth0_vlan entered promiscuous mode [ 35.779522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.789394][ T751] device veth1_macvtap entered promiscuous mode [ 35.799995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.827872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.836049][ T53] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.838496][ T781] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 35.861950][ T24] audit: type=1400 audit(1779962866.810:27836): avc: denied { mounton } for pid=751 comm="syz-executor" path="/root/syzkaller.72Cony/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.895769][ T7] device bridge_slave_1 left promiscuous mode [ 35.913431][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.926215][ T7] device bridge_slave_0 left promiscuous mode [ 35.933681][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.941052][ T24] audit: type=1400 audit(1779962866.850:27837): avc: denied { create } for pid=782 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.954169][ T785] FAT-fs (loop0): Directory bread(block 64) failed [ 35.964212][ T24] audit: type=1400 audit(1779962866.850:27838): avc: denied { connect } for pid=782 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.977216][ T785] FAT-fs (loop0): Directory bread(block 65) failed [ 35.992858][ T24] audit: type=1400 audit(1779962866.850:27839): avc: denied { write } for pid=782 comm="syz.2.114" laddr=fe80::903d:5aff:fe6d:7224 lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.010199][ T785] FAT-fs (loop0): Directory bread(block 66) failed [ 36.025205][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 36.025277][ T7] device veth1_macvtap left promiscuous mode [ 36.030749][ T785] FAT-fs (loop0): Directory bread(block 67) failed [ 36.042876][ T785] FAT-fs (loop0): Directory bread(block 68) failed [ 36.049587][ T785] FAT-fs (loop0): Directory bread(block 69) failed [ 36.056383][ T785] FAT-fs (loop0): Directory bread(block 70) failed [ 36.056604][ T7] device veth0_vlan left promiscuous mode [ 36.063089][ T785] FAT-fs (loop0): Directory bread(block 71) failed [ 36.075904][ T785] FAT-fs (loop0): Directory bread(block 72) failed [ 36.082475][ T785] FAT-fs (loop0): Directory bread(block 73) failed [ 36.126474][ T785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=785 comm=syz.0.124 [ 36.140012][ T24] audit: type=1400 audit(1779962866.870:27840): avc: denied { setopt } for pid=782 comm="syz.2.114" laddr=fe80::903d:5aff:fe6d:7224 lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.165816][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.176162][ T24] audit: type=1400 audit(1779962866.870:27841): avc: denied { create } for pid=782 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.197911][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.265278][ T301] attempt to access beyond end of device [ 36.265278][ T301] loop0: rw=1, want=1832, limit=256 [ 36.277098][ T301] attempt to access beyond end of device [ 36.277098][ T301] loop0: rw=1, want=3308, limit=256 [ 36.280246][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.307012][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.319327][ T53] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 36.331059][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.342960][ T53] usb 2-1: config 0 descriptor?? [ 36.361326][ T796] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 36.373256][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.382507][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.382765][ T796] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 36.390711][ T5] usb 4-1: Product: syz [ 36.405799][ T796] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.409466][ T5] usb 4-1: Manufacturer: syz [ 36.417461][ T5] usb 4-1: SerialNumber: syz [ 36.422346][ T796] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.125: Inode bitmap for bg 0 marked uninitialized [ 36.439280][ T796] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 37.400321][ T5] usb 4-1: 0:2 : does not exist [ 37.421717][ T5] usb 4-1: USB disconnect, device number 5 [ 37.440145][ T53] usbhid 2-1:0.0: can't add hid device: -71 [ 37.446216][ T53] usbhid: probe of 2-1:0.0 failed with error -71 [ 37.457174][ T53] usb 2-1: USB disconnect, device number 5 [ 37.488144][ T814] 9pnet: Could not find request transport: unx [ 37.497865][ T815] FAT-fs (loop3): Unrecognized mount option "00000000000000000000000" or missing value [ 37.512411][ T818] binder: BINDER_SET_CONTEXT_MGR already set [ 37.518421][ T818] binder: 813:818 ioctl 4018620d 200000000100 returned -16 [ 37.582403][ T809] F2FS-fs (loop2): invalid crc value [ 37.618549][ T809] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.645103][ T825] EXT4-fs (loop0): Ignoring removed orlov option [ 37.653042][ T825] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 37.659240][ T809] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.664359][ T825] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 37.682529][ T825] EXT4-fs (loop0): group descriptors corrupted! [ 37.739259][ T809] netlink: 324 bytes leftover after parsing attributes in process `syz.2.127'. [ 37.990760][ T830] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.009350][ T830] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.290493][ T838] loop2: p1[EZD] p2 p4 [ 38.294977][ T838] loop2: p1 size 251659765 extends beyond EOD, truncated [ 38.302816][ T838] loop2: p2 start 269365764 is beyond EOD, truncated [ 38.309520][ T838] loop2: p4 size 262144 extends beyond EOD, truncated [ 38.332965][ T301] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.349612][ T830] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.460022][ T845] netlink: 168 bytes leftover after parsing attributes in process `syz.2.136'. [ 38.716262][ T409] udevd[409]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 38.730128][ T415] udevd[415]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 38.743013][ T855] 9pnet: Insufficient options for proto=fd [ 38.750476][ T855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 38.765995][ T852] EXT4-fs (loop0): dax option not supported [ 39.120145][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.200142][ T53] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.380858][ T890] netlink: 'syz.1.150': attribute type 11 has an invalid length. [ 39.389313][ T890] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.150'. [ 39.452580][ T842] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 39.461190][ T842] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 39.472677][ T842] F2FS-fs (loop4): Unrecognized mount option "./file1" or missing value [ 39.510148][ T364] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.517996][ T53] usb 1-1: device descriptor read/64, error -71 [ 39.530197][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.541475][ T893] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 39.610196][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.620661][ T25] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.629819][ T25] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 39.641125][ T25] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 39.655461][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 39.667350][ T25] usb 4-1: config 1 interface 1 has no altsetting 0 [ 39.713908][ T898] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 39.750291][ T5] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 39.900233][ T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.910211][ T25] usb 4-1: string descriptor 0 read error: -22 [ 39.911603][ T53] usb 1-1: device descriptor read/64, error -71 [ 39.918462][ T25] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 39.924643][ T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.934058][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.040203][ T364] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 40.049384][ T364] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 40.057909][ T364] usb 3-1: Manufacturer: syz [ 40.063447][ T364] usb 3-1: config 0 descriptor?? [ 40.220233][ T53] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.410714][ T24] kauditd_printk_skb: 112 callbacks suppressed [ 40.410727][ T24] audit: type=1400 audit(1779962871.360:27954): avc: denied { create } for pid=859 comm="syz.3.141" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.437980][ T24] audit: type=1400 audit(1779962871.360:27955): avc: denied { write } for pid=859 comm="syz.3.141" name="file0" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.440180][ T25] usb 4-1: cannot get ctl value: req = 0x82, wValue = 0x201, wIndex = 0x200, type = 4 [ 40.460513][ T24] audit: type=1400 audit(1779962871.360:27956): avc: denied { open } for pid=859 comm="syz.3.141" path="/46/file0" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.470375][ T25] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 40.493119][ T24] audit: type=1400 audit(1779962871.360:27957): avc: denied { read } for pid=859 comm="syz.3.141" name="file0" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.523514][ T53] usb 1-1: device descriptor read/64, error -71 [ 40.531173][ T24] audit: type=1400 audit(1779962871.360:27958): avc: denied { ioctl } for pid=859 comm="syz.3.141" path="/46/file0" dev="tmpfs" ino=274 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.756939][ T24] audit: type=1400 audit(1779962871.700:27959): avc: denied { setopt } for pid=875 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.850283][ T364] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 40.859984][ T364] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 40.867937][ T364] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 40.877614][ T364] usb 3-1: USB disconnect, device number 6 [ 40.883668][ T302] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 40.920164][ T53] usb 1-1: device descriptor read/64, error -71 [ 41.040227][ T53] usb usb1-port1: attempt power cycle [ 41.130170][ T302] usb 5-1: Using ep0 maxpacket: 16 [ 41.250228][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.261451][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.271294][ T302] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.284565][ T302] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 41.293719][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.302943][ T302] usb 5-1: config 0 descriptor?? [ 41.391371][ T911] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,norecovery,min_batch_time=0x00000000000c0000,inode_readahead_blks=0x0000000000200000,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,resuid=0x00000000 [ 41.450207][ T53] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.485863][ T916] 9pnet: p9_errstr2errno: server reported unknown error 18 [ 41.548788][ T918] EXT4-fs (loop2): quotafile must be on filesystem root [ 41.611851][ T24] audit: type=1400 audit(1779962872.560:27960): avc: denied { read } for pid=921 comm="syz.2.158" laddr=172.20.20.170 lport=2 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.650259][ T53] usb 1-1: device descriptor read/8, error -71 [ 41.664924][ T922] EXT4-fs (loop2): old and new quota format mixing [ 41.674347][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.682424][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.723934][ T930] tipc: Invalid UDP bearer configuration [ 41.723957][ T930] tipc: Enabling of bearer rejected, failed to enable media [ 41.739676][ T24] audit: type=1400 audit(1779962872.680:27961): avc: denied { getopt } for pid=929 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.808261][ T24] audit: type=1400 audit(1779962872.750:27962): avc: denied { bind } for pid=939 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.870164][ T53] usb 1-1: device descriptor read/8, error -71 [ 41.914076][ T24] audit: type=1400 audit(1779962872.860:27963): avc: denied { unlink } for pid=280 comm="syz-executor" name="file0" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.937152][ T342] usb 4-1: USB disconnect, device number 6 [ 41.945354][ T945] incfs: Can't find or create .index dir in ./cgroup [ 41.960587][ T940] EXT4-fs (loop2): Ignoring removed oldalloc option [ 41.967989][ T945] incfs: mount failed -22 [ 41.973685][ T940] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 41.982167][ T940] EXT4-fs (loop2): write access will be enabled during recovery [ 41.989888][ T940] EXT4-fs (loop2): barriers disabled [ 41.995670][ T940] JBD2: no valid journal superblock found [ 42.001765][ T940] EXT4-fs (loop2): error loading journal [ 42.036502][ T949] bridge0: port 3(vlan2) entered blocking state [ 42.045337][ T949] bridge0: port 3(vlan2) entered disabled state [ 42.052318][ T949] device vlan2 entered promiscuous mode [ 42.058027][ T949] device vlan0 entered promiscuous mode [ 42.121454][ T947] EXT4-fs (loop3): Mount option "journal_ioprio=0x0000000000000006" incompatible with ext2 [ 42.339460][ T955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'. [ 42.462164][ T953] exfat: Deprecated parameter 'utf8' [ 42.469799][ T953] exfat: Deprecated parameter 'utf8' [ 42.474522][ T302] microsoft 0003:045E:07DA.0004: unknown main item tag 0x2 [ 42.479371][ T953] exfat: Deprecated parameter 'utf8' [ 42.490625][ T302] microsoft 0003:045E:07DA.0004: unknown global tag 0xd [ 42.498680][ T302] microsoft 0003:045E:07DA.0004: item 0 1 1 13 parsing failed [ 42.506446][ T953] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 42.519397][ T302] microsoft 0003:045E:07DA.0004: parse failed [ 42.529452][ T302] microsoft: probe of 0003:045E:07DA.0004 failed with error -22 [ 42.836374][ T962] netlink: 44 bytes leftover after parsing attributes in process `syz.0.169'. [ 42.845515][ T962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.169'. [ 42.861042][ T962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.169'. [ 42.940952][ T962] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 42.949311][ T962] EXT4-fs error (device loop0): ext4_get_journal_inode:5247: comm syz.0.169: inode #1792: comm syz.0.169: iget: illegal inode # [ 42.962853][ T962] EXT4-fs (loop0): no journal found [ 42.971652][ T964] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 42.983383][ T964] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.050143][ T5] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 43.124562][ T970] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 43.139677][ T970] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.146636][ T970] EXT4-fs error (device loop0): ext4_free_blocks:5690: comm syz.0.171: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.160427][ T970] EXT4-fs (loop0): Remounting filesystem read-only [ 43.167396][ T970] EXT4-fs (loop0): 1 orphan inode deleted [ 43.173176][ T970] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro, [ 43.262181][ T975] fuse: Unknown parameter '' [ 43.290123][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 43.331823][ T979] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,,errors=continue [ 43.349814][ T981] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.357207][ T981] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.360424][ T979] EXT4-fs error (device loop0): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.365314][ T981] device bridge_slave_0 entered promiscuous mode [ 43.379065][ T979] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 43.398143][ T979] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.398143][ T979] [ 43.407906][ T979] EXT4-fs (loop0): Total free blocks count 0 [ 43.414040][ T979] EXT4-fs (loop0): Free/Dirty block details [ 43.414538][ T981] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.420026][ T979] EXT4-fs (loop0): free_blocks=2415919104 [ 43.420033][ T979] EXT4-fs (loop0): dirty_blocks=64 [ 43.420039][ T979] EXT4-fs (loop0): Block reservation details [ 43.420044][ T979] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 43.452040][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.462820][ T981] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.470564][ T653] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 43.470680][ T981] device bridge_slave_1 entered promiscuous mode [ 43.482855][ T653] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.482855][ T653] [ 43.522538][ T981] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.529574][ T981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.536854][ T981] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.543881][ T981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.575603][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.584050][ T653] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.591577][ T653] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.611946][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.628176][ T990] netlink: 148 bytes leftover after parsing attributes in process `syz.0.177'. [ 43.633775][ T53] usb 5-1: USB disconnect, device number 7 [ 43.639400][ T653] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.650559][ T653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.659396][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.667841][ T653] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.675246][ T653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.682890][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.683312][ T5] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 43.700243][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.703939][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.717313][ T5] usb 2-1: Product: syz [ 43.721780][ T5] usb 2-1: Manufacturer: syz [ 43.726773][ T5] usb 2-1: SerialNumber: syz [ 43.731989][ T5] usb 2-1: config 0 descriptor?? [ 43.744121][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.760645][ T996] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 43.771206][ T5] sr9700: probe of 2-1:0.0 failed with error -22 [ 43.780386][ T996] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 43.789859][ T996] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 43.789859][ T996] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 43.789859][ T996] [ 43.809047][ T996] EXT4-fs (loop3): Test dummy encryption mode enabled [ 43.818707][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.819299][ T996] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv0,minixdf,nouser_xattr,test_dummy_encryption=v1,max_batch_time=0x0000000000000002,delalloc,data_err=abort,data_err=ignore,,errors=continue [ 43.848845][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.856579][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.870403][ T981] device veth0_vlan entered promiscuous mode [ 43.876570][ T996] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 43.881085][ T999] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 43.903702][ T999] EXT4-fs (loop4): invalid journal inode [ 43.909401][ T999] EXT4-fs (loop4): can't get journal size [ 43.912726][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.923629][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.928501][ T999] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 17104912: comm syz.4.180: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 43.933041][ T981] device veth1_macvtap entered promiscuous mode [ 43.949269][ T999] EXT4-fs (loop4): failed to initialize system zone (-117) [ 43.960715][ T999] EXT4-fs (loop4): mount failed [ 43.967118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.975150][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.983610][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.992866][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.001254][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.073530][ T1006] EXT4-fs (loop5): Ignoring removed bh option [ 44.081043][ T9] device bridge_slave_1 left promiscuous mode [ 44.084515][ T1006] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue [ 44.087258][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.107289][ T1006] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.120524][ T9] device bridge_slave_0 left promiscuous mode [ 44.126710][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.136779][ T1006] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #15: comm syz.5.175: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.136884][ T9] device veth1_macvtap left promiscuous mode [ 44.156346][ T9] device veth0_vlan left promiscuous mode [ 44.162520][ T1006] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 44.174963][ T1006] EXT4-fs (loop5): This should not happen!! Data will be lost [ 44.174963][ T1006] [ 44.191678][ T301] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set [ 44.207161][ T301] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 44.219947][ T301] EXT4-fs (loop5): This should not happen!! Data will be lost [ 44.219947][ T301] [ 44.229762][ T301] EXT4-fs (loop5): Total free blocks count 0 [ 44.236198][ T301] EXT4-fs (loop5): Free/Dirty block details [ 44.242246][ T301] EXT4-fs (loop5): free_blocks=0 [ 44.247205][ T301] EXT4-fs (loop5): dirty_blocks=16 [ 44.252542][ T301] EXT4-fs (loop5): Block reservation details [ 44.258535][ T301] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 44.440832][ T1018] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.465836][ T1018] FAT-fs (loop4): error, invalid access to FAT (entry 0x0002fff8) [ 44.475818][ T1021] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 44.590150][ T342] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 44.617195][ T1035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=1035 comm=syz.3.187 [ 44.626759][ T1039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.189'. [ 44.658571][ T1035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 44.666606][ T1042] device vlan2 entered promiscuous mode [ 44.673847][ T1042] device gretap0 entered promiscuous mode [ 44.712070][ T1044] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 44.719825][ T1044] netlink: 'syz.3.191': attribute type 2 has an invalid length. [ 45.594142][ T300] usb 2-1: USB disconnect, device number 7 [ 45.621639][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 45.621648][ T24] audit: type=1400 audit(1779962876.570:27988): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.653613][ T1056] exfat: Deprecated parameter 'utf8' [ 45.681924][ T1059] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 45.700771][ T1056] exfat: Deprecated parameter 'namecase' [ 45.706616][ T1056] exfat: Deprecated parameter 'namecase' [ 45.769806][ T1056] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc3758327, utbl_chksum : 0xe619d30d) [ 45.815120][ T24] audit: type=1400 audit(1779962876.760:27989): avc: denied { load_policy } for pid=1043 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 45.820352][ T1044] SELinux: failed to load policy [ 45.847839][ T1063] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 45.921633][ T1056] device syzkaller0 entered promiscuous mode [ 45.944405][ T24] audit: type=1400 audit(1779962876.890:27990): avc: denied { associate } for pid=1055 comm="syz.5.193" name="cgroup.controllers" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 45.976436][ T1055] device syzkaller0 left promiscuous mode [ 46.022723][ T24] audit: type=1400 audit(1779962876.920:27991): avc: denied { read append open } for pid=1055 comm="syz.5.193" path="/3/file1/cgroup.controllers" dev="loop5" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.231526][ T1073] F2FS-fs (loop4): invalid crc value [ 46.319879][ T1073] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.360440][ T1073] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.390248][ T24] audit: type=1400 audit(1779962876.920:27992): avc: denied { map } for pid=1055 comm="syz.5.193" path="/3/file1/cgroup.controllers" dev="loop5" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.416813][ T1069] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e028, mo2=0002] [ 46.441336][ T1069] System zones: 0-5 [ 46.447690][ T1069] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,auto_da_alloc=0x0000000000000003,nouid32,grpjquota=,nobarrier,dioread_nolock,nodiscard,errors=remount-ro, [ 46.468944][ T24] audit: type=1400 audit(1779962877.320:27993): avc: denied { ioctl } for pid=1062 comm="syz.4.196" path="/36/file0/file1" dev="loop4" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.093308][ T283] attempt to access beyond end of device [ 47.093308][ T283] loop4: rw=2049, want=45112, limit=40427 [ 47.401154][ T1089] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 47.418656][ T1089] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.459950][ T24] audit: type=1400 audit(1779962879.410:27994): avc: denied { getopt } for pid=1088 comm="syz.3.201" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.482563][ T24] audit: type=1400 audit(1779962879.410:27995): avc: granted { setsecparam } for pid=1100 comm="syz.5.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 47.501738][ T24] audit: type=1400 audit(1779962879.430:27996): avc: denied { write } for pid=1098 comm="syz.0.203" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.524850][ T24] audit: type=1400 audit(1779962879.430:27997): avc: denied { open } for pid=1098 comm="syz.0.203" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.550852][ T1099] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 47.551731][ T1065] F2FS-fs (loop1): invalid crc value [ 47.558106][ T1099] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 47.565146][ T1065] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.573185][ T1099] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 47.588697][ T1099] EXT4-fs (loop4): Unrecognized mount option "fowner=18446744073709551615" or missing value [ 47.605133][ T1101] FAT-fs (loop5): bogus logical sector size 0 [ 47.619156][ T1101] FAT-fs (loop5): Can't find a valid FAT filesystem [ 47.632378][ T1099] netlink: 'syz.4.202': attribute type 4 has an invalid length. [ 47.642895][ T1099] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 47.646421][ T1065] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 47.765784][ T1065] F2FS-fs (loop1): Corrupted max_depth of 3: 16842753 [ 47.846533][ T1099] loop4: p1 p2 p3 p4 [ 47.851223][ T1102] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 47.852341][ T1099] loop4: p2 size 786432 extends beyond EOD, truncated [ 47.869148][ T1099] loop4: p3 start 36132 is beyond EOD, truncated [ 47.876649][ T1099] loop4: p4 start 167772160 is beyond EOD, truncated [ 47.947220][ T1123] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 48.020565][ T409] udevd[409]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 48.020868][ T415] udevd[415]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 48.033232][ T1132] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 48.087534][ T1144] FAULT_INJECTION: forcing a failure. [ 48.087534][ T1144] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.105324][ T1144] CPU: 0 PID: 1144 Comm: syz.4.214 Not tainted syzkaller #0 [ 48.112739][ T1144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 48.122798][ T1144] Call Trace: [ 48.126111][ T1144] __dump_stack+0x21/0x24 [ 48.130796][ T1144] dump_stack_lvl+0x1a7/0x208 [ 48.135824][ T1144] ? show_regs_print_info+0x18/0x18 [ 48.141123][ T1144] ? vfs_write+0xb27/0xdc0 [ 48.145549][ T1144] dump_stack+0x15/0x1c [ 48.149793][ T1144] should_fail+0x3c1/0x510 [ 48.154214][ T1144] should_fail_usercopy+0x1a/0x20 [ 48.159249][ T1144] _copy_from_user+0x20/0xd0 [ 48.163836][ T1144] __se_sys_bpf+0x1bb/0x740 [ 48.168539][ T1144] ? __x64_sys_bpf+0x90/0x90 [ 48.173746][ T1144] ? debug_smp_processor_id+0x17/0x20 [ 48.179106][ T1144] __x64_sys_bpf+0x7b/0x90 [ 48.183515][ T1144] do_syscall_64+0x31/0x40 [ 48.187913][ T1144] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.193968][ T1144] RIP: 0033:0x7f60f36cce59 [ 48.198362][ T1144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.218156][ T1144] RSP: 002b:00007f60f2127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.226636][ T1144] RAX: ffffffffffffffda RBX: 00007f60f3945fa0 RCX: 00007f60f36cce59 [ 48.234613][ T1144] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 0000000000000000 [ 48.242651][ T1144] RBP: 00007f60f2127090 R08: 0000000000000000 R09: 0000000000000000 [ 48.250599][ T1144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.258544][ T1144] R13: 00007f60f3946038 R14: 00007f60f3945fa0 R15: 00007ffd7049e5f8 [ 48.413382][ T1158] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=, [ 48.855594][ T1153] F2FS-fs (loop3): Test dummy encryption mode enabled [ 48.863226][ T1153] F2FS-fs (loop3): invalid crc value [ 48.869926][ T1153] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.905452][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 48.917609][ T1153] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.928268][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 48.943782][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.953037][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 48.961342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.969882][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.978506][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.986594][ T364] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 48.992090][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.002563][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.194163][ T1188] FAULT_INJECTION: forcing a failure. [ 49.194163][ T1188] name failslab, interval 1, probability 0, space 0, times 1 [ 49.227404][ T1188] CPU: 0 PID: 1188 Comm: syz.1.228 Not tainted syzkaller #0 [ 49.234703][ T1188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 49.245186][ T1188] Call Trace: [ 49.248477][ T1188] __dump_stack+0x21/0x24 [ 49.252809][ T1188] dump_stack_lvl+0x1a7/0x208 [ 49.257573][ T1188] ? thaw_kernel_threads+0x220/0x220 [ 49.262948][ T1188] ? selinux_capable+0x2b6/0x3b0 [ 49.267884][ T1188] ? show_regs_print_info+0x18/0x18 [ 49.273071][ T1188] ? selinux_capset+0xf0/0xf0 [ 49.277738][ T1188] ? memcpy+0x56/0x70 [ 49.281749][ T1188] dump_stack+0x15/0x1c [ 49.285969][ T1188] should_fail+0x3c1/0x510 [ 49.290378][ T1188] ? dev_map_alloc+0x68/0x6b0 [ 49.295131][ T1188] __should_failslab+0xa4/0xe0 [ 49.299975][ T1188] should_failslab+0x9/0x20 [ 49.304477][ T1188] kmem_cache_alloc_trace+0x3a/0x2e0 [ 49.309845][ T1188] dev_map_alloc+0x68/0x6b0 [ 49.314342][ T1188] map_create+0x44e/0x2090 [ 49.318752][ T1188] __se_sys_bpf+0x24b/0x740 [ 49.323267][ T1188] ? __x64_sys_bpf+0x90/0x90 [ 49.327988][ T1188] ? debug_smp_processor_id+0x17/0x20 [ 49.333374][ T1188] __x64_sys_bpf+0x7b/0x90 [ 49.337804][ T1188] do_syscall_64+0x31/0x40 [ 49.342231][ T1188] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.348302][ T1188] RIP: 0033:0x7f9a4cee8e59 [ 49.352713][ T1188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.372730][ T1188] RSP: 002b:00007f9a4b943028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.381160][ T1188] RAX: ffffffffffffffda RBX: 00007f9a4d161fa0 RCX: 00007f9a4cee8e59 [ 49.389221][ T1188] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 0000000000000000 [ 49.397205][ T1188] RBP: 00007f9a4b943090 R08: 0000000000000000 R09: 0000000000000000 [ 49.405784][ T1188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.414058][ T1188] R13: 00007f9a4d162038 R14: 00007f9a4d161fa0 R15: 00007fffd2626bb8 [ 49.427800][ T1193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1193 comm=syz.3.229 [ 49.440260][ T364] usb 1-1: Using ep0 maxpacket: 8 [ 49.560311][ T364] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 49.568445][ T364] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.579192][ T364] usb 1-1: config 0 has no interface number 0 [ 49.584728][ T1182] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 49.594242][ T1182] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 49.606611][ T1182] F2FS-fs (loop5): invalid crc value [ 49.772864][ T1182] F2FS-fs (loop5): Found nat_bits in checkpoint [ 49.812402][ T1204] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 49.998168][ T1197] sock: sock_set_timeout: `syz.1.231' (pid 1197) tries to set negative timeout [ 50.071765][ T1182] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 50.079808][ T1182] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 50.470350][ T342] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 50.680275][ T364] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 50.689840][ T364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.698404][ T364] usb 1-1: Product: syz [ 50.740485][ T342] usb 2-1: Invalid ep0 maxpacket: 64 [ 50.793180][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 50.793210][ T24] audit: type=1400 audit(1779962882.730:28014): avc: denied { mounton } for pid=1213 comm="syz.4.235" path="/48/file0" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.967710][ T364] usb 1-1: Manufacturer: syz [ 50.973186][ T364] usb 1-1: SerialNumber: syz [ 50.979479][ T364] usb 1-1: config 0 descriptor?? [ 51.018556][ T1227] netlink: 24 bytes leftover after parsing attributes in process `syz.5.238'. [ 51.028785][ T24] audit: type=1400 audit(1779962882.970:28015): avc: denied { getopt } for pid=1224 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.049411][ T1215] hub 8-0:1.0: USB hub found [ 51.054669][ T342] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 51.062153][ T1215] hub 8-0:1.0: 1 port detected [ 51.240215][ T364] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 51.247079][ T364] uvcvideo: No valid video chain found. [ 51.310166][ T342] usb 2-1: Invalid ep0 maxpacket: 64 [ 51.315557][ T342] usb usb2-port1: attempt power cycle [ 51.350190][ T299] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 51.480520][ T1164] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.493556][ T1164] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.506797][ T24] audit: type=1400 audit(1779962883.460:28016): avc: denied { mount } for pid=1163 comm="syz.0.222" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.507095][ T525] usb 1-1: USB disconnect, device number 8 [ 51.572863][ T1236] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 51.583516][ T1236] EXT4-fs (loop5): 1 truncate cleaned up [ 51.589293][ T1236] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 51.600692][ T299] usb 4-1: Using ep0 maxpacket: 8 [ 51.602795][ T24] audit: type=1400 audit(1779962883.550:28017): avc: denied { mounton } for pid=1235 comm="syz.5.241" path="/16/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.609423][ T1236] overlayfs: failed to resolve './bus': -2 [ 51.695013][ T1240] FAULT_INJECTION: forcing a failure. [ 51.695013][ T1240] name failslab, interval 1, probability 0, space 0, times 0 [ 51.708156][ T1240] CPU: 1 PID: 1240 Comm: syz.5.242 Not tainted syzkaller #0 [ 51.715439][ T1240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 51.726244][ T1240] Call Trace: [ 51.729531][ T1240] __dump_stack+0x21/0x24 [ 51.733847][ T1240] dump_stack_lvl+0x1a7/0x208 [ 51.738543][ T1240] ? thaw_kernel_threads+0x220/0x220 [ 51.743957][ T1240] ? show_regs_print_info+0x18/0x18 [ 51.749133][ T1240] dump_stack+0x15/0x1c [ 51.753444][ T1240] should_fail+0x3c1/0x510 [ 51.757832][ T1240] ? bpf_map_area_alloc+0x49/0xe0 [ 51.762832][ T1240] __should_failslab+0xa4/0xe0 [ 51.767567][ T1240] should_failslab+0x9/0x20 [ 51.772044][ T1240] __kmalloc+0x60/0x330 [ 51.776170][ T1240] bpf_map_area_alloc+0x49/0xe0 [ 51.781003][ T1240] dev_map_create_hash+0x29/0x1e0 [ 51.786084][ T1240] ? bpf_map_charge_init+0x1ae/0x240 [ 51.791339][ T1240] dev_map_alloc+0x340/0x6b0 [ 51.795911][ T1240] map_create+0x44e/0x2090 [ 51.800301][ T1240] __se_sys_bpf+0x24b/0x740 [ 51.804799][ T1240] ? __x64_sys_bpf+0x90/0x90 [ 51.809448][ T1240] ? debug_smp_processor_id+0x17/0x20 [ 51.814788][ T1240] __x64_sys_bpf+0x7b/0x90 [ 51.819174][ T1240] do_syscall_64+0x31/0x40 [ 51.823567][ T1240] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.829428][ T1240] RIP: 0033:0x7f1b48134e59 [ 51.833817][ T1240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.853600][ T1240] RSP: 002b:00007f1b46b8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.862131][ T1240] RAX: ffffffffffffffda RBX: 00007f1b483adfa0 RCX: 00007f1b48134e59 [ 51.870081][ T1240] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 0000000000000000 [ 51.878156][ T1240] RBP: 00007f1b46b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.886231][ T1240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.894186][ T1240] R13: 00007f1b483ae038 R14: 00007f1b483adfa0 R15: 00007ffdd6b59738 [ 51.903131][ T342] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 51.921651][ T299] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.991776][ T1244] EXT4-fs (loop5): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 52.003170][ T342] usb 2-1: Invalid ep0 maxpacket: 64 [ 52.090205][ T299] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 52.097991][ T281] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 52.107250][ T24] audit: type=1400 audit(1779962884.050:28018): avc: denied { create } for pid=1246 comm="syz.5.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.107260][ T299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.107275][ T299] usb 4-1: Product: syz [ 52.132352][ T281] FAT-fs (loop0): Filesystem has been set read-only [ 52.146243][ T24] audit: type=1400 audit(1779962884.050:28019): avc: denied { getopt } for pid=1246 comm="syz.5.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.150132][ T342] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 52.167078][ T281] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 52.183940][ T299] usb 4-1: Manufacturer: syz [ 52.188599][ T299] usb 4-1: SerialNumber: syz [ 52.194236][ T299] usb 4-1: config 0 descriptor?? [ 52.230582][ T299] usb 4-1: bad CDC descriptors [ 52.235545][ T299] usb 4-1: unsupported MDLM descriptors [ 52.280217][ T342] usb 2-1: Invalid ep0 maxpacket: 64 [ 52.285654][ T342] usb usb2-port1: unable to enumerate USB device [ 52.321665][ T1252] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 52.329494][ T1252] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 52.348243][ T1252] F2FS-fs (loop5): invalid crc value [ 52.361548][ T1252] F2FS-fs (loop5): Found nat_bits in checkpoint [ 52.378789][ T1255] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.385894][ T1255] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.393796][ T1255] device bridge_slave_0 entered promiscuous mode [ 52.397909][ T1252] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 52.407372][ T1252] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 52.418279][ T1255] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.425707][ T1255] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.430411][ T24] audit: type=1400 audit(1779962884.370:28020): avc: denied { append } for pid=1251 comm="syz.5.247" path="/21/bus/file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.440515][ T1255] device bridge_slave_1 entered promiscuous mode [ 52.484350][ T364] usb 4-1: USB disconnect, device number 7 [ 52.524630][ T1255] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.531786][ T1255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.539164][ T1255] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.546200][ T1255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.710357][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.722113][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.731455][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.783800][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.792267][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.799297][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.807033][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.815289][ T1271] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 52.827570][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.834639][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.848641][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.858479][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.880543][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.891882][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.899947][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.907592][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.917252][ T1255] device veth0_vlan entered promiscuous mode [ 52.929532][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.938922][ T1255] device veth1_macvtap entered promiscuous mode [ 52.949856][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.959726][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.970710][ T653] device vlan2 left promiscuous mode [ 52.976006][ T653] device vlan0 left promiscuous mode [ 52.982149][ T653] bridge0: port 3(vlan2) entered disabled state [ 52.989014][ T653] device bridge_slave_1 left promiscuous mode [ 52.995590][ T653] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.003362][ T653] device bridge_slave_0 left promiscuous mode [ 53.009489][ T653] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.018220][ T653] device veth1_macvtap left promiscuous mode [ 53.024575][ T653] device veth0_vlan left promiscuous mode [ 53.080817][ T1277] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 53.165467][ T24] audit: type=1400 audit(1779962885.110:28021): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.244264][ T1283] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.253: inode has both inline data and extents flags [ 53.257926][ T1283] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.253: couldn't read orphan inode 15 (err -117) [ 53.270408][ T1283] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue [ 53.296774][ T1285] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 53.310380][ T1285] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.491478][ T1299] EXT4-fs (loop1): quotafile must be on filesystem root [ 53.502981][ T1299] overlayfs: unrecognized mount option "verity=on" or missing value [ 53.710174][ T15] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 53.798735][ T1299] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 53.809310][ T1299] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 53.819547][ T1299] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.843097][ T1299] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 53.850266][ T1299] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 53.998305][ T24] audit: type=1400 audit(1779962885.940:28022): avc: denied { setattr } for pid=1314 comm="syz.6.261" name="KEY" dev="sockfs" ino=19461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.031411][ T1312] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 54.040572][ T1312] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.090138][ T299] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 54.133751][ T1312] netlink: 25 bytes leftover after parsing attributes in process `syz.1.260'. [ 54.147951][ T1312] netlink: 'syz.1.260': attribute type 4 has an invalid length. [ 54.150495][ T15] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 54.157402][ T24] audit: type=1400 audit(1779962886.110:28023): avc: denied { create } for pid=1311 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 54.172182][ T15] usb 6-1: config 0 interface 0 has no altsetting 0 [ 54.196417][ T15] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 54.205655][ T15] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.206335][ T1312] fs-verity: sha512 using implementation "sha512-avx2" [ 54.221202][ T15] usb 6-1: config 0 descriptor?? [ 54.421009][ T1340] F2FS-fs (loop1): Unrecognized mount option "prjquota=&" or missing value [ 54.526196][ T299] usb 5-1: unable to get BOS descriptor or descriptor too short [ 54.570209][ T299] usb 5-1: not running at top speed; connect to a high speed hub [ 54.620498][ T342] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 54.650215][ T299] usb 5-1: config 2 has an invalid interface number: 212 but max is 1 [ 54.658528][ T299] usb 5-1: config 2 has an invalid interface number: 226 but max is 1 [ 54.666856][ T299] usb 5-1: config 2 has no interface number 0 [ 54.673073][ T299] usb 5-1: config 2 has no interface number 1 [ 54.680963][ T299] usb 5-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 54.691922][ T299] usb 5-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 54.703191][ T299] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 54.714524][ T299] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 54.726236][ T299] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 54.736272][ T299] usb 5-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 54.749609][ T299] usb 5-1: config 2 interface 212 has no altsetting 0 [ 54.860576][ T342] usb 4-1: Using ep0 maxpacket: 32 [ 54.910207][ T299] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 54.919415][ T299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.927686][ T299] usb 5-1: Product: syz [ 54.932109][ T299] usb 5-1: Manufacturer: syz [ 54.936926][ T299] usb 5-1: SerialNumber: syz [ 54.945544][ T1362] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 54.950487][ T15] usbhid 6-1:0.0: can't add hid device: -71 [ 54.966406][ T15] usbhid: probe of 6-1:0.0 failed with error -71 [ 54.977303][ T15] usb 6-1: USB disconnect, device number 3 [ 54.990632][ T1362] EXT4-fs (loop6): orphan cleanup on readonly fs [ 54.999001][ T1362] EXT4-fs (loop6): 1 truncate cleaned up [ 55.004729][ T1362] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 55.022587][ T342] usb 4-1: unable to get BOS descriptor or descriptor too short [ 55.280993][ T342] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 55.291741][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.299847][ T342] usb 4-1: Product: syz [ 55.304541][ T342] usb 4-1: Manufacturer: syz [ 55.309176][ T342] usb 4-1: SerialNumber: syz [ 55.321073][ T299] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.226/input/input10 [ 55.344702][ T299] usb 5-1: USB disconnect, device number 8 [ 55.350593][ C1] xpad 5-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 55.360280][ T525] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.570904][ T342] usb 4-1: unit 4 not found! [ 55.582904][ T342] usb 4-1: unit 0 not found! [ 55.711719][ T1376] EXT4-fs (loop1): Test dummy encryption mode enabled [ 55.720194][ T525] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1007 [ 55.730702][ T525] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 55.730751][ T1376] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 55.743949][ T300] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.753954][ T1376] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 55.753954][ T1376] [ 55.771397][ T1376] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue [ 55.850259][ T525] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.859517][ T525] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 55.867543][ T525] usb 7-1: SerialNumber: syz [ 55.900207][ T1367] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 56.010123][ T300] usb 6-1: Using ep0 maxpacket: 16 [ 56.111443][ T1389] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 56.124402][ T1389] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 56.127459][ T1346] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 56.134791][ T1389] F2FS-fs (loop4): invalid crc value [ 56.143367][ T300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.149884][ T1346] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.160999][ T300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.180840][ T300] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.194237][ T300] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 56.195036][ T1389] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 56.203727][ T300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.220776][ T1386] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 56.230392][ T300] usb 6-1: config 0 descriptor?? [ 56.238483][ T1386] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 56.251114][ T1367] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 56.264219][ T1389] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 56.272235][ T1389] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 56.414029][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 56.414040][ T24] audit: type=1400 audit(1779962888.360:28025): avc: denied { setopt } for pid=1402 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.444906][ T283] attempt to access beyond end of device [ 56.444906][ T283] loop4: rw=2049, want=45104, limit=40427 [ 56.456720][ T24] audit: type=1400 audit(1779962888.390:28026): avc: denied { create } for pid=1402 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 56.480387][ T24] audit: type=1400 audit(1779962888.430:28027): avc: denied { write } for pid=1366 comm="syz.6.274" path="/4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_wait_time_recursive" dev="loop6" ino=1048635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.534865][ T1403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.586054][ T24] audit: type=1400 audit(1779962888.430:28028): avc: denied { create } for pid=1402 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 56.605893][ T525] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 56.616464][ T525] usb 7-1: USB disconnect, device number 2 [ 56.744816][ T1413] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 56.800146][ T300] usbhid 6-1:0.0: can't add hid device: -71 [ 56.806196][ T300] usbhid: probe of 6-1:0.0 failed with error -71 [ 56.824359][ T300] usb 6-1: USB disconnect, device number 4 [ 56.923600][ T1421] F2FS-fs (loop4): Wrong segment_count / block_count (64 > 16384) [ 56.931567][ T1421] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 56.942931][ T1421] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.964773][ T1421] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 56.971993][ T1421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 57.023541][ T1408] mmap: syz.4.283 (1408) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 57.054607][ T1408] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 57.110442][ T53] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 57.240135][ T300] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 57.400155][ T525] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 57.500131][ T300] usb 6-1: Using ep0 maxpacket: 8 [ 57.530217][ T53] usb 2-1: unable to get BOS descriptor or descriptor too short [ 57.556732][ T24] audit: type=1326 audit(1779962889.500:28029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1432 comm="syz.3.289" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e231fe59 code=0x7ffc0000 [ 57.570234][ T53] usb 2-1: not running at top speed; connect to a high speed hub [ 57.587843][ T342] usb 4-1: USB disconnect, device number 8 [ 57.632512][ T24] audit: type=1326 audit(1779962889.530:28030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1432 comm="syz.3.289" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e231fe59 code=0x7ffc0000 [ 57.657542][ T24] audit: type=1326 audit(1779962889.530:28031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1432 comm="syz.3.289" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f11e231fe59 code=0x7ffc0000 [ 57.657561][ T300] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 57.683040][ T53] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.691588][ T525] usb 7-1: device descriptor read/64, error -71 [ 57.702319][ T24] audit: type=1326 audit(1779962889.530:28032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1432 comm="syz.3.289" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e231fe59 code=0x7ffc0000 [ 57.707817][ T300] usb 6-1: config 0 has no interface number 0 [ 57.732725][ T53] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 57.732754][ T53] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.732816][ T24] audit: type=1326 audit(1779962889.530:28033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1432 comm="syz.3.289" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e231fe59 code=0x7ffc0000 [ 57.786114][ T24] audit: type=1326 audit(1779962889.530:28034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1432 comm="syz.3.289" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f11e231fe59 code=0x7ffc0000 [ 57.844743][ T1433] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 57.910220][ T53] usb 2-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 57.921411][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.930131][ T53] usb 2-1: Product: syz [ 57.934451][ T53] usb 2-1: Manufacturer: syz [ 57.939494][ T53] usb 2-1: SerialNumber: syz [ 57.950243][ T300] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 57.959493][ T300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.969814][ T300] usb 6-1: Product: syz [ 57.974204][ T300] usb 6-1: Manufacturer: syz [ 57.977558][ T1440] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 57.978791][ T300] usb 6-1: SerialNumber: syz [ 57.988006][ T1440] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.993686][ T300] usb 6-1: config 0 descriptor?? [ 58.015481][ T1440] SELinux: Context system_u:object_r:kvm_devi is not valid (left unmapped). [ 58.100169][ T525] usb 7-1: device descriptor read/64, error -71 [ 58.133644][ T1447] EXT4-fs (loop3): Test dummy encryption mode enabled [ 58.140606][ T1447] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.151700][ T1447] EXT4-fs (loop3): 1 truncate cleaned up [ 58.157411][ T1447] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,sysvgroups,discard,,errors=continue [ 58.300349][ T53] usb 2-1: 0:2 : does not exist [ 58.308259][ T53] usb 2-1: USB disconnect, device number 12 [ 58.316705][ T409] udevd[409]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.370247][ T525] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 58.470725][ T1424] tipc: Started in network mode [ 58.475685][ T1424] tipc: Own node identity 566c0f913af1, cluster identity 4711 [ 58.483591][ T1424] tipc: Enabled bearer , priority 0 [ 58.494389][ T1451] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 58.520420][ T1424] exfat: Deprecated parameter 'utf8' [ 58.525851][ T1424] exfat: Deprecated parameter 'utf8' [ 58.531217][ T1424] exfat: Deprecated parameter 'utf8' [ 58.575104][ T1424] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 58.590548][ T1424] udc-core: couldn't find an available UDC or it's busy [ 58.597608][ T1424] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 58.630203][ T300] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 58.637185][ T300] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 58.648664][ T300] usb 6-1: USB disconnect, device number 5 [ 58.660144][ T525] usb 7-1: device descriptor read/64, error -71 [ 58.766103][ T1456] EXT4-fs (loop1): Test dummy encryption mode enabled [ 58.785032][ T1456] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 58.794458][ T1456] System zones: 0-5 [ 58.799040][ T1456] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue [ 59.090157][ T525] usb 7-1: device descriptor read/64, error -71 [ 59.231445][ T525] usb usb7-port1: attempt power cycle [ 59.358005][ T1466] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 59.358005][ T1466] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 59.358005][ T1466] [ 59.397243][ T1466] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 59.654920][ T342] tipc: 32-bit node address hash set to 910f9d6c [ 59.720141][ T525] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 59.900275][ T525] usb 7-1: device descriptor read/8, error -71 [ 59.944487][ T1480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 60.007756][ T1485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'. [ 60.023057][ T1485] sch_tbf: peakrate 2174 is lower than or equals to rate 2972 ! [ 60.032187][ T1485] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 60.073122][ T1497] overlayfs: unrecognized mount option "uuid=on" or missing value [ 60.081977][ T1493] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.088998][ T1493] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #4: comm syz.1.304: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1) [ 60.090140][ T53] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 60.113811][ T1493] EXT4-fs error (device loop1): ext4_quota_enable:6454: comm syz.1.304: Bad quota inode: 4, type: 1 [ 60.136134][ T1493] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.151330][ T1493] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 60.158614][ T1493] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 60.162171][ T525] usb 7-1: device descriptor read/8, error -71 [ 60.255839][ T1510] EXT4-fs (loop1): Ignoring removed oldalloc option [ 60.262901][ T1510] EXT4-fs (loop1): Ignoring removed oldalloc option [ 60.269550][ T1510] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.293339][ T1510] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue [ 60.312627][ T1504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.306'. [ 60.321766][ T1504] netlink: 12 bytes leftover after parsing attributes in process `syz.6.306'. [ 60.412163][ T1507] ================================================================== [ 60.420276][ T1507] BUG: KASAN: use-after-free in __ext4_iget+0x381/0x44c0 [ 60.427402][ T1507] Read of size 8 at addr ffff888133c48528 by task syz.4.307/1507 [ 60.435563][ T1507] [ 60.437911][ T1507] CPU: 0 PID: 1507 Comm: syz.4.307 Not tainted syzkaller #0 [ 60.445167][ T1507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 60.455768][ T1507] Call Trace: [ 60.459054][ T1507] __dump_stack+0x21/0x24 [ 60.463478][ T1507] dump_stack_lvl+0x1a7/0x208 [ 60.468262][ T1507] ? show_regs_print_info+0x18/0x18 [ 60.473697][ T1507] ? thaw_kernel_threads+0x220/0x220 [ 60.479133][ T1507] ? _raw_spin_lock+0x94/0xf0 [ 60.483802][ T1507] print_address_description+0x7f/0x2c0 [ 60.489357][ T1507] ? __ext4_iget+0x381/0x44c0 [ 60.494034][ T1507] kasan_report+0xe2/0x130 [ 60.498660][ T1507] ? __ext4_iget+0x381/0x44c0 [ 60.503346][ T1507] __asan_report_load8_noabort+0x14/0x20 [ 60.508963][ T1507] __ext4_iget+0x381/0x44c0 [ 60.513539][ T1507] ? __kasan_check_write+0x14/0x20 [ 60.518688][ T1507] ? _raw_write_lock+0x94/0xf0 [ 60.523524][ T1507] ? _raw_write_trylock+0x150/0x150 [ 60.529290][ T1507] ? __proc_create+0x570/0x8e0 [ 60.534135][ T1507] ? __kasan_check_write+0x14/0x20 [ 60.539233][ T1507] ? ext4_get_projid+0x140/0x140 [ 60.544322][ T1507] ? _raw_write_unlock+0x2b/0x60 [ 60.549430][ T1507] ? proc_register+0x34d/0x4e0 [ 60.554303][ T1507] ext4_enable_quotas+0x33c/0x6d0 [ 60.559411][ T1507] ext4_fill_super+0x84ad/0x8d70 [ 60.564345][ T1507] ? ext4_mount+0x40/0x40 [ 60.568762][ T1507] ? vscnprintf+0x80/0x80 [ 60.573078][ T1507] ? set_blocksize+0x1ed/0x3b0 [ 60.577821][ T1507] ? sb_set_blocksize+0xaa/0xf0 [ 60.582937][ T1507] mount_bdev+0x28b/0x3a0 [ 60.587258][ T1507] ? ext4_mount+0x40/0x40 [ 60.591575][ T1507] ext4_mount+0x34/0x40 [ 60.595724][ T1507] legacy_get_tree+0xed/0x190 [ 60.600473][ T1507] ? ext4_chksum+0x180/0x180 [ 60.605048][ T1507] vfs_get_tree+0x89/0x260 [ 60.609442][ T1507] do_new_mount+0x25a/0xa20 [ 60.613948][ T1507] path_mount+0x585/0xc90 [ 60.618528][ T1507] __se_sys_mount+0x320/0x390 [ 60.623202][ T1507] ? __x64_sys_mount+0xd0/0xd0 [ 60.628044][ T1507] __x64_sys_mount+0xbf/0xd0 [ 60.632920][ T1507] do_syscall_64+0x31/0x40 [ 60.637765][ T1507] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.643665][ T1507] RIP: 0033:0x7f60f36ce0ca [ 60.648082][ T1507] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.668979][ T1507] RSP: 002b:00007f60f2126e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.677386][ T1507] RAX: ffffffffffffffda RBX: 00007f60f2126ee0 RCX: 00007f60f36ce0ca [ 60.685618][ T1507] RDX: 0000200000000b80 RSI: 0000200000000bc0 RDI: 00007f60f2126ea0 [ 60.693763][ T1507] RBP: 0000200000000b80 R08: 00007f60f2126ee0 R09: 0000000000200000 [ 60.701990][ T1507] R10: 0000000000200000 R11: 0000000000000246 R12: 0000200000000bc0 [ 60.709954][ T1507] R13: 00007f60f2126ea0 R14: 0000000000000bac R15: 00002000000001c0 [ 60.718016][ T1507] [ 60.720427][ T1507] Allocated by task 809: [ 60.724770][ T1507] __kasan_slab_alloc+0xbd/0xf0 [ 60.729606][ T1507] slab_post_alloc_hook+0x5d/0x2f0 [ 60.734789][ T1507] kmem_cache_alloc+0x162/0x2d0 [ 60.739784][ T1507] f2fs_alloc_inode+0x26/0x410 [ 60.744546][ T1507] new_inode_pseudo+0x62/0x210 [ 60.749282][ T1507] new_inode+0x28/0x1e0 [ 60.753413][ T1507] f2fs_new_inode+0xf3/0x1420 [ 60.758065][ T1507] f2fs_create+0x1fd/0x1a00 [ 60.762550][ T1507] path_openat+0x170a/0x31c0 [ 60.767117][ T1507] do_filp_open+0x1e2/0x410 [ 60.771632][ T1507] do_sys_openat2+0x19f/0x750 [ 60.776281][ T1507] __x64_sys_creat+0x8e/0xb0 [ 60.780894][ T1507] do_syscall_64+0x31/0x40 [ 60.785293][ T1507] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.791151][ T1507] [ 60.793454][ T1507] Last potentially related work creation: [ 60.799152][ T1507] kasan_save_stack+0x3a/0x60 [ 60.803802][ T1507] __kasan_record_aux_stack+0xd2/0x100 [ 60.809323][ T1507] kasan_record_aux_stack_noalloc+0xb/0x10 [ 60.815453][ T1507] call_rcu+0x11a/0x10b0 [ 60.819850][ T1507] evict+0x881/0x930 [ 60.823726][ T1507] evict_inodes+0x5dc/0x650 [ 60.828206][ T1507] generic_shutdown_super+0x96/0x320 [ 60.833808][ T1507] kill_block_super+0x7f/0xf0 [ 60.838547][ T1507] kill_f2fs_super+0x303/0x3b0 [ 60.843459][ T1507] deactivate_locked_super+0xa0/0x100 [ 60.848873][ T1507] deactivate_super+0xaf/0xe0 [ 60.853521][ T1507] cleanup_mnt+0x45b/0x510 [ 60.858000][ T1507] __cleanup_mnt+0x19/0x20 [ 60.862478][ T1507] task_work_run+0x127/0x190 [ 60.867058][ T1507] exit_to_user_mode_loop+0xcb/0xe0 [ 60.872316][ T1507] exit_to_user_mode_prepare+0x76/0xa0 [ 60.878062][ T1507] syscall_exit_to_user_mode+0x1d/0x40 [ 60.883507][ T1507] do_syscall_64+0x3d/0x40 [ 60.887927][ T1507] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.893795][ T1507] [ 60.896106][ T1507] The buggy address belongs to the object at ffff888133c48000 [ 60.896106][ T1507] which belongs to the cache f2fs_inode_cache of size 1520 [ 60.910677][ T1507] The buggy address is located 1320 bytes inside of [ 60.910677][ T1507] 1520-byte region [ffff888133c48000, ffff888133c485f0) [ 60.924189][ T1507] The buggy address belongs to the page: [ 60.929803][ T1507] page:ffffea0004cf1200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x133c48 [ 60.940028][ T1507] head:ffffea0004cf1200 order:3 compound_mapcount:0 compound_pincount:0 [ 60.948338][ T1507] flags: 0x4000000000010200(slab|head) [ 60.953776][ T1507] raw: 4000000000010200 0000000000000000 0000000100000001 ffff88810279b980 [ 60.962542][ T1507] raw: 0000000000000000 0000000080130013 00000001ffffffff 0000000000000000 [ 60.971113][ T1507] page dumped because: kasan: bad access detected [ 60.977720][ T1507] page_owner tracks the page as allocated [ 60.983599][ T1507] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 604, ts 31407457145, free_ts 0 [ 61.005370][ T1507] prep_new_page+0x179/0x180 [ 61.009940][ T1507] get_page_from_freelist+0x223b/0x23d0 [ 61.015462][ T1507] __alloc_pages_nodemask+0x290/0x620 [ 61.020807][ T1507] new_slab+0x84/0x3f0 [ 61.024851][ T1507] ___slab_alloc+0x2a6/0x450 [ 61.029413][ T1507] __slab_alloc+0x63/0xa0 [ 61.033717][ T1507] kmem_cache_alloc+0x1ac/0x2d0 [ 61.038548][ T1507] f2fs_alloc_inode+0x26/0x410 [ 61.043292][ T1507] iget_locked+0x146/0x7d0 [ 61.047769][ T1507] f2fs_iget+0x55/0x4b60 [ 61.052012][ T1507] f2fs_fill_super+0x4d6f/0x73f0 [ 61.056935][ T1507] mount_bdev+0x28b/0x3a0 [ 61.061264][ T1507] f2fs_mount+0x34/0x40 [ 61.065401][ T1507] legacy_get_tree+0xed/0x190 [ 61.070052][ T1507] vfs_get_tree+0x89/0x260 [ 61.074492][ T1507] do_new_mount+0x25a/0xa20 [ 61.078965][ T1507] page_owner free stack trace missing [ 61.084325][ T1507] [ 61.086629][ T1507] Memory state around the buggy address: [ 61.092233][ T1507] ffff888133c48400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.100288][ T1507] ffff888133c48480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.108600][ T1507] >ffff888133c48500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.116656][ T1507] ^ [ 61.122153][ T1507] ffff888133c48580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 61.130203][ T1507] ffff888133c48600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 [ 61.138240][ T1507] ================================================================== [ 61.146274][ T1507] Disabling lock debugging due to kernel taint [ 61.168515][ T1507] EXT4-fs warning (device loop4): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 61.183637][ T1507] EXT4-fs (loop4): mount failed [ 61.220200][ T53] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.229211][ T53] usb 4-1: config 1 has no interface number 0 [ 61.235516][ T53] usb 4-1: config 1 interface 1 altsetting 22 endpoint 0x3 has invalid maxpacket 8704, setting to 1024 [ 61.246590][ T53] usb 4-1: config 1 interface 1 altsetting 22 bulk endpoint 0x3 has invalid maxpacket 1024 [ 61.256587][ T53] usb 4-1: config 1 interface 1 has no altsetting 1 [ 61.420378][ T53] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.429818][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.442159][ T53] usb 4-1: Product: syz [ 61.447360][ T53] usb 4-1: Manufacturer: syz [ 61.454169][ T53] usb 4-1: SerialNumber: syz [ 61.500790][ T53] cdc_ncm 4-1:1.1: bind() failure [ 63.432770][ T342] usb 4-1: USB disconnect, device number 9