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") listxattr(0x0, 0x0, 0x0) [ 88.979973][ T3561] EXT4-fs (loop1): unmounting filesystem. 16:05:59 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x100) [ 89.044518][ T3608] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) 16:05:59 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d0101000004ffffdb030000"], 0x1d) [ 89.166730][ T4215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.189238][ T4215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.235012][ T3611] hid (null): bogus close delimiter [ 89.240556][ T3611] hid (null): unknown global tag 0xc [ 89.250597][ T4256] loop1: detected capacity change from 0 to 4096 [ 89.260364][ T3611] hid (null): invalid report_size 969952143 [ 89.283472][ T3611] hid (null): unknown global tag 0xed [ 89.288717][ T4256] __ntfs_error: 22 callbacks suppressed [ 89.288735][ T4256] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 89.307476][ T3611] hid (null): invalid report_count -264275548 16:05:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$PROG_LOAD(0xf, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, 0x0}, 0x90) [ 89.336922][ T4256] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 89.340645][ T3611] hid (null): unknown global tag 0xc [ 89.380927][ T4256] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 89.394984][ T3611] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 89.411637][ T3608] usbhid 3-1:0.0: can't add hid device: -71 [ 89.421718][ T3608] usbhid: probe of 3-1:0.0 failed with error -71 [ 89.427290][ T4256] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 89.438411][ T3611] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 89.467614][ T3611] hid-generic 0003:0158:0100.0002: bogus close delimiter 16:06:00 executing program 0: socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 89.472846][ T4256] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 89.480417][ T3611] hid-generic 0003:0158:0100.0002: item 0 0 2 10 parsing failed [ 89.495731][ T3608] usb 3-1: USB disconnect, device number 4 [ 89.535315][ T3611] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 89.537153][ T4256] ntfs: volume version 3.1. [ 89.576698][ T3611] usb 4-1: USB disconnect, device number 5 [ 89.581270][ T4256] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 89.597045][ T4256] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. 16:06:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r0, 0x2) fcntl$lock(r0, 0x25, &(0x7f0000000740)={0x1}) syz_open_procfs(0x0, &(0x7f0000000600)='fdinfo/3\x00') pread64(0xffffffffffffffff, &(0x7f0000000300)=""/246, 0xf6, 0x0) [ 89.623528][ T4256] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 89.641583][ T4256] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 89.700254][ T4256] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. 16:06:00 executing program 0: syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@gquota}, {@grpid}]}, 0x1, 0x989c, &(0x7f000000ac80)="$eJzs3QeYJHWhcP3ZZckZEwZkyZjIGZWkIIKABElKkCxRQAkGQAQBUUCioAgokkSQJKLknHPOOeecv2fZXV3XA1ff934v93LOeZ7Z7q6urqn+/6pqpqmhe6VFl1t4YGCSgeGNvPxHh730yWO2emnhnY+77sgXFztiiWNGTB5r+MWQoSMupxpxOfXAwMCgEcsZNHza4CEnnTx4YJyBgcGjLneCcccfNMHAwNojbi444nLu4RcTXj1yvjdHi1d02GoM2m341/BvOjAwMO6wK08PzLziqMsZsV6z/MsTlbbSQost+g+rv7sNG78hI66P+jXW8K8JLx0YmPCSAd4+Br27z+it7z/JPuevvMq7vB7/K1ppocUWH81/2L44xohpcw/bx0ffB42Nvp0Pnfv2kcegQXjg/F/SSgstuuTA2x/nB1Z74+At3nzruDl4vIGBweMPDAyeYGBg8IQDA4MnGhgYPPG77VL/d72rG19VVVW9Ky208OwLD3u9N9rvA+OM/L2Wfi9c9fWlbx8YGBhz+DyD5xr5WrCqqqqqqqqq/me20MKzLwKv/yd5p9f/J572yoy9/q+qqqqqqqr639PiCy08+7DX8aO9/p/8nV7/b3//CxuN+Nv/uYc/6o1390lUVVVVVVVV1Tu27Ffeev0//miv/4e+0+v/h+bf9YER84387wavj7LIQaP8PcGro0wfY5T5Xxll+pBRpo86/1gDA4OHjJj+2j8mDx5v2H3/Ov/gSYat94jpL48yfZZ//P/NQ6YdZfqso0yffpTps41Y12HTZxhl+pyjzD/jvzO2VVVVVVVVVVVVVVVVVVVV/6964/HTzvjHe75/fGCU92//+/u4j/i7gEHHn3XVVe/aiv7PaNC//j3E9u/2Ov3fNsx5nKOHDgxsssK7vSr1LvRuf15Dvbvl7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7i3ub8/9/f/3+KI9Ye+f/Mz33YHlNONOpjNxjl+jj/T9f6Xeu9ev5/YINBAwMjfCcZ5rrUQssuP+PAwMBEU+5x2BwDf79vnmH3zT/ZGCPeIGH42yBMN4QXvP2IT0XffsSsI5Zx/FvLX/zNQ8cYNNpKjNKkpxx++PorvTjH6JfTv/3zGDzyygcu3nqRke9lMXi0md5uOx25/JHPZXTnEes+47B1n3nLjTebeYtttv3MBhuvud46662zybxzzz3PnHPPNe9sM6+7wUbrzDL837cbs6Fv/TvNvzNmk48+Zo8vNOqYjf7c3m7Mhr7zmL21xLH3Xn3DkWM2+qr9V2M2zTuP2dANRnyjIUPHHFjjrbEZNDAwZNoxB7YedmPWsQcGhkw3Yt7Jh8372ckGDwzs+Y8nOuza2H/fBgdtP2yelRZdbuF/fOz+v378/tt8nv1Ywy+GjBiSIVONuJx6+LeZZOAfm+LgISedPHjYc/+nYZ5g3PEHTTAwsPaImwuOuJx3xL1XjJzvbT5nfbQVfettVnYb/vV3j3GHXTl2mYlvHHU5b0Pw39H/0c//f/GaZ9DfB2rQiK8R8wz3Wmixxf/xvd4ahgVHvifMsJ8tw0z+Lz7G/r/sX9Z36Dhvvcnt263vO7wv7vDnD9vX9I+eO/S/631x+dix5Fv/Dv13jh0D73zsGOMfV/8xdZ3Lpxj92LHE26/iP+0XI8do7NFmertjx4wHLLTdW8emdz52LLnBiA8a+sexY/DAwJBpRh47hh1Iph9zYM9hN2YbdmOGMQeOHHZj9rdujDtw1rAbM6216UZrD3rrbXtGLHeWYctdcLJBbz35q2Ze6Jgx9nnzzWlHrMssox1YR2wfQ0f9+bjQZMOHbeRjabl3bTn8vulHLHfW/2C5Ix9Ly51n8+H3zTBiubONttwx3mG5Ix87cn8YNutb+8OMg/7pDz9h/110tP130MjD+igPGfk11vCvCS8d+dlQsL/8R8cd2n8neYf1fYfPtcLtbdi0HZe6/LT/rs+1ovUd553X9+0+h/tt13fDcbde+r9hfQeNsr7/tJ1tNt/wbWXGEdvZnP/B9jvysaMfx8Z8697hDDP+O8exBf/lOLbDGINHW/lRervfgdaG+Ydfn/zvS5v3qDEmHjn2Y4623P/qd6AZ3/k4NskGoz1u0UMGBtGYP/TY4euP/V+M+ZgD//y7+sgxH/nYdxrzGf51zAf9y5jP885j/u/+3jnjNMPvH+MdxnzwLlssNXLMx/oPx3yG/3TMFxwYg8Z8zwOHj9s7HU/fbsxHPvafx3zIwBcHBgamHTHm0/872/ks/z3b+Xgw//Dr9/990sVTnL77KMeYQf/JmE//n4750L9v59O+dd/UgwfGGmtg6zW33HLzWYf/O/LmbMP/5WPRU/cNH+d3+ln6dkYjH/tO+8W0/47R0P8eo48M+df5R77oGHl7hbOOnfT/9Fg07X9mNGjRAT4WnXrh8HF7p9+L3m7MRz6Wfg4OHeXxo7+ue4f3o8TnNGza/gfse9vIRY54WO9H+e/3T5vtyP/Gt8HoB/l6r9Z//3eXv7v83eXvLn9xb3P+/+/v///QJMs9OuJF8ph7zbfeWu/2+r7LvafP/4/w/afz/2utN99ew14KjrjvHc/PDp/nf+T52bmHX0x49cj5Rj8/yCv69udnZ9h7pmUH/t+cn/0/auS++m+8ju/47y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3Nuf/R/6N8tCDXr9v+xEnQsfcb9+1Xn+31/dd7j19/n+E7z+d/399rX33Gzzw9/ve8fz/8Hkc5/+XPmifkwf+B5//H7mvdv6//ovyd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xb3P+f8GRfwcw1+rr7jby7wE2mXWBnd7t9X2Xe6+e/+/z/711/HeXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLG3H+f2C0j3Vcpu0Cg/P//7t7G/+v5o9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjF/2v5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/1/DGL/zfyxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf9b+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOK/Wf6Yxf/b+WMW/83zxyz+W+SPWfy3zB+z+H8nf8zi/938MYv/VvljFv+t88cs/tvkj71n/d98858mb5s/9p71H23//17+mMX/+/ljFv8f5I9Z/H+YP2bx3y5/zOK/ff6YxX+H/DGL/4/yxyz+O+aPWfx/nD9m8d8pf8ziv3P+mMX/J/ljFv9d8scs/rvmj1n8d8sfs/j/NH/M4r97/pjF/2f5Yxb/n+ePWfz3yB+z+O+ZP2bx3yt/zOL/i/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOL/y/wxi/+B+WMW/4Pyxyz+v8ofs/j/On/M4n9w/pjF/zf5Yxb/Q/LHLP6H5o9Z/A/LH7P4/zZ/zOL/u/wxi//h+WMW/9/nj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/8f8scs/sfmj1n8/5g/ZvE/Ln/M4n98/pjF/0/5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4v/n/DGL/6n5Yxb/v+SPWfxPyx+z+P81f8zi/7f8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9J/AcN5I9Z/Aflj1n8B+ePWfzHyB+z+A/JH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+78sfs/i/P3/M4v+B/DGL/wfzxyz+H8ofs/hPnj9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8Z8if8zi//H8MYv/lPljFv+h+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/T+SPWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv/P5o9Z/D+XP2bx/3z+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+H8hf8zi/8X8MYv/ovljFv/F8scs/l/KH7P4L54/ZvH/cv6YxX+J/DGL/5L5Yxb/r+SPWfyXyh+z+C+dP2bxXyZ/zOL/1fwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+H8tf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfy/nj9m8f9G/pjFf7X8sbf839xu+I33sP/q+WOW/X+N/DGL/5r5Yxb/b+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP7fyh+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/zfLHLP7fzh+z+G+eP2bx3yJ/zOK/Zf6Yxf87+WMW/+/mj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/e/ljFv/v549Z/H+QP2bx/2H+mMV/u/wxi//2+WMW/x3yxyz+P8ofs/jvmD9m8f9x/pjFf6f8MYv/zvljFv+f5I9Z/HfJH7P475o/ZvHfLX/M4v/T/DGL/+75Yxb/n+WPWfx/nj9m8d8jf8ziv2f+mMV/r/wxi/8v8scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/8v88cs/gfmj1n8D8ofs/j/Kn/M4v/r/DGL/8H5Yxb/3+SPWfwPyR+z+B+aP2bxPyx/zOL/2/wxi//v8scs/ofnj1n8f58/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/n/IH7P4H5s/ZvH/Y/6Yxf+4/DGL//H5Yxb/P+WPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/5/zxyz+p+aPWfz/kj9m8T8tf8zi/9f8MYv/3/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZPybxf+tq/v+axX9Q/pjFf3D+mMV/jPwxi/+Q/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8zi/778MYv/+/PHLP4fyB+z+H8wf8zi/6H8MYv/5PljFv8P549Z/D+SP2bx/2j+mMX/Y/ljFv8p8scs/h/PH7P4T5k/ZvEfmj9m8Z8qf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/0T+mMX/k/ljFv9P5Y9Z/D+dP2bx/0z+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvH/bP6Yxf9z+WMW/8/nj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/8X8scs/l/MH7P4L5o/ZvFfLH/M4v+l/DGL/+L5Yxb/L+ePWfyXyB+z+C+ZP2bx/0r+mMV/qfwxi//S+WMW/2Xyxyz+X80fs/gvmz9m8V8uf8ziv3z+mMV/hfwxi//X8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMX/6/ljFv9v5I9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjF/5v5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/t/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/t/PHLP6b549Z/LfIH7P4b5k/ZvH/Tv6Yxf+7+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/17+mMX/+/ljFv8f5I9Z/H+YP2bx3y5/zOK/ff6YxX+H/DGL/4/yxyz+O+aPWfx/nD9m8d8pf8ziv3P+mMX/J/ljFv9d8scs/rvmj1n8d8sfs/j/NH/M4r97/pjF/2f5Yxb/n+ePWfz3yB+z+O+ZP2bx3yt/zOL/i/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOL/y/wxi/+B+WMW/4Pyxyz+v8ofs/j/On/M4n9w/pjF/zf5Yxb/Q/LHLP6H5o9Z/A/LH7P4/zZ/zOL/u/wxi//h+WMW/9/nj1n8j8gfs/gfmT9m8T9K4z/GfzS3xf9ojf9/lsX/mPwxi/8f8scs/sfmj1n8/5g/ZvE/Ln/M4n98/pjF/0/5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4v/n/DGL/6n5Yxb/v+SPWfxPyx+z+P81f8zi/7f8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9J/McYyB+z+A/KH7P4D84fs/iPkT9m8R+SP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvGfPH/M4v/h/DGL/0fyxyz+H80fs/h/LH/M4j9F/pjF/+P5Yxb/KfPHLP5D88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+n8gfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP6fzR+z+H8uf8zi//n8MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8f9C/pjF/4v5Yxb/RfPHLP6L5Y9Z/L+UP2bxXzx/zOL/5fwxi/8S+WMW/yXzxyz+X8kfs/gvlT9m8V86f8ziv0z+mMX/q/ljFv9l88cs/svlj1n8l88fs/ivkD9m8f9a/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/h/PX/M4v+N/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4fzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/Vv6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvH/dv6YxX/z/DGL/xb5Yxb/LfPHLP7fyR+z+H83f8ziv1X+mMV/6/wxi/82+WMW/23zxyz+38sfs/h/P3/M4v+D/DGL/w/zxyz+2+WPWfy3zx+z+O+QP2bx/1H+mMV/x/wxi/+P88cs/jvlj1n8d84fs/j/JH/M4r9L/pjFf9f8MYv/bvljFv+f5o9Z/HfPH7P4/yx/zOL/8/wxi/8e+WMW/z3zxyz+e+WPWfx/kT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfx/mT9m8T8wf8zif1D+mMX/V/ljFv9f549Z/A/OH7P4/yZ/zOJ/SP6Yxf/Q/DGL/2H5Yxb/3+aPWfx/lz9m8T88f8zi//v8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8f9D/pjF/9j8MYv/H/PHLP7H5Y9Z/I/PH7P4/yl/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/P+cP2bxPzV/zOL/l/wxi/9p+WMW/7/mj1n8/5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGJ/5CB/DGL/6D8MYv/4Pwxi/8Y+WMW/yH5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMX/ffljFv/3549Z/D+QP2bx/2D+mMX/Q/ljFv/J88cs/h/OH7P4fyR/zOL/0fwxi//H8scs/lPkj1n8P54/ZvGfMn/M4j80f8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/ifwxi/8n88cs/p/KH7P4fzp/zOL/mfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4v/Z/DGL/+fyxyz+n88fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/y/kj1n8v5g/ZvFfNH/M4r9Y/pjF/0v5Yxb/xfPHLP5fzh+z+C+RP2bxXzJ/zOL/lfwxi/9S+WMW/6Xzxyz+y+SPWfy/mj9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/6/lj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi//X88cs/t/IH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/N/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv9v5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv9v549Z/DfPH7P4b5E/ZvHfMn/M4v+d/DGL/3fzxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/vfwxi//388cs/j/IH7P4/zB/zOK/Xf6YxX/7/DGL/w75Yxb/H+WPWfx3zB+z+P84f8ziv1P+mMV/5/wxi/9P8scs/rvkj1n8d80fs/jvlj9m8f9p/pjFf/f8MYv/z/LHLP4/zx+z+O+RP2bx3zN/zOK/V/6Yxf8X+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf+X+WMW/wPzxyz+B+WPWfx/lT9m8f91/pjF/+D8MYv/b/LHLP6H5I9Z/A/NH7P4H5Y/ZvH/bf6Yxf93+WMW/8Pzxyz+v88fs/gfkT9m8T8yf8zif9R/5T/m/8/r9T80i//R7f+Yxf+Y/DGL/x/exn/s/1fr9T80i/+x7f+Yxf+P+WMW/+Pyxyz+x+ePWfz/lD9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+f84fs/ifmj9m8f9L/pjF/7T8MYv/X/PHLP5/yx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMR/zIH8MYv/oPwxi//g/DGL/xj5Yxb/IfljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/Wf6Yxf99+WMW//fnj1n8P5A/ZvH/YP6Yxf9D+WMW/8nzxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+U+SPWfw/nj9m8Z8yf8ziPzR/zOI/Vf6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v+J/DGL/yfzxyz+n8ofs/h/On/M4v+Z/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8zi/9n8MYv/5/LHLP6fzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/L+SPWfy/mD9m8V80f8ziv1j+mMX/S/ljFv/F88cs/l/OH7P4L5E/ZvFfMn/M4v+V/DGL/1L5Yxb/pfPHLP7L5I9Z/L+aP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/r+WPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/9fzxyz+38gfs/ivlj9m8V89f8ziv0b+mMV/zfwxi/8388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/2/lj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/2/nj1n8N88fs/hvkT9m8d8yf8zi/538MYv/d/PHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v+9/DGL//fzxyz+P8gfs/j/MH/M4r9d/pjFf/v8MYv/DvljFv8f5Y9Z/HfMH7P4/zh/zOK/U/6YxX/n/DGL/0/yxyz+u+SPWfx3zR+z+O+WP2bx/2n+mMV/9/wxi//P8scs/j/PH7P475E/ZvHfM3/M4r9X/pjF/xf5Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/5f5Yxb/A/PHLP4H5Y9Z/H+VP2bx/3X+mMX/4Pwxi/9v8scs/ofkj1n8D80fs/gflj9m8f9t/pjF/3f5Yxb/w/PHLP6/zx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/P+SPWfyPzR+z+P8xf8zif1z+mMX/+Pwxi/+f8scs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/z/ljFv9T88cs/n/JH7P4n5Y/ZvH/a/6Yxf9v+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfk/iPNZA/ZvEflD9m8R+cP2bxHyN/zOI/JH/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+L8vf8zi//78MYv/B/LHLP4fzB+z+H8of8ziP3n+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/ivwxi//H88cs/lPmj1n8h+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/D+RP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8P5s/ZvH/XP6Yxf/z+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOL/hfwxi/8X88cs/ovmj1n8F8sfs/h/KX/M4r94/pjF/8v5Yxb/JfLHLP5L5o9Z/L+SP2bxXyp/zOK/dP6YxX+Z/DGL/1fzxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOL/tfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bx/3r+mMX/G/ljFv/V8scs/qvnj1n818gfs/ivmT9m8f9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/638MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8d8sf8zi/+38MYv/5vljFv8t8scs/lvmj1n8v5M/ZvH/bv6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/L+XP2bx/37+mMX/B/ljFv8f5o9Z/LfLH7P4b58/ZvHfIX/M4v+j/DGL/475Yxb/H+ePWfx3yh+z+O+cP2bx/0n+mMV/l/wxi/+u+WMW/93yxyz+P80fs/jvnj9m8f9Z/pjF/+f5Yxb/PfLHLP575o9Z/PfKH7P4/yJ/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4/zJ/zOJ/YP6Yxf+g/DGL/6/yxyz+v84fs/gfnD9m8f9N/pjF/5D8MYv/ofljFv/D8scs/r/NH7P4/y5/zOJ/eP6Yxf/3+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOL/h/wxi/+x+WMW/z/mj1n8j8sfs/gfnz9m8f9T/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/j/OX/M4n9q/pjF/y/5Yxb/0/LHLP5/zR+z+P8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljEv+xB/LHLP6D8scs/oPzxyz+Y+SPWfyH5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi/9k+WMW//flj1n8358/ZvH/QP6Yxf+D+WMW/w/lj1n8J88fs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/hPkT9m8f94/pjFf8r8MYv/0Pwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/yfyxyz+n8wfs/h/Kn/M4v/p/DGL/2fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/Z/PHLP6fyx+z+H8+f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfy/kD9m8f9i/pjFf9H8MYv/YvljFv8v5Y9Z/BfPH7P4fzl/zOK/RP6YxX/J/DGL/1fyxyz+S+WPWfyXzh+z+C+TP2bx/2r+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfy/lj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+X88fs/h/I3/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/MH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8v5U/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8v50/ZvHfPH/M4r9F/pjFf8v8MYv/d/LHLP7fzR+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL//fyxyz+388fs/j/IH/M4v/D/DGL/3b5Yxb/7fPHLP475I9Z/H+UP2bx3zF/zOL/4/wxi/9O+WMW/53zx96T/pOO9dbVUf1/kj/2nvQfcXVU/13yxyz+u+aPWfx3yx+z+P80f8ziv3v+mMX/Z/ljFv+f549Z/PfIH7P475k/ZvHfK3/M4v+L/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4v/L/DGL/4H5Yxb/g/LHLP6/yh+z+P86f8zif3D+mMX/N/ljFv9D8scs/ofmj1n8D8sfs/j/Nn/M4v+7/DGL/+H5Yxb/3+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/x/yxyz+x+aPWfz/mD9m8T8uf8zif3z+mMX/T/ljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zi/+f8MYv/qfljFv+/5I9Z/E/LH7P4/zV/zOL/t/wxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfxHNM4/3bL4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6YxP+tP3rL/1+z+A/KH7P4D84fs/iPkT9m8R+SP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvGfPH/M4v/h/DGL/0fyxyz+H80fs/h/LH/M4j9F/pjF/+P5Yxb/KfPHLP5D88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+n8gfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP6fzR+z+H8uf8zi//n8MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8f9C/pjF/4v5Yxb/RfPHLP6L5Y9Z/L+UP2bxXzx/zOL/5fwxi/8S+WMW/yXzxyz+X8kfs/gvlT9m8V86f8ziv0z+mMX/q/ljFv9l88cs/svlj1n8l88fs/ivkD9m8f9a/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/h/PX/M4v+N/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4fzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/Vv6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvH/dv6YxX/z/DGL/xb5Yxb/LfPHLP7fyR+z+H83f8ziv1X+mMV/6/wxi/82+WMW/23zxyz+38sfs/h/P3/M4v+D/DGL/w/zxyz+2+WPWfy3zx+z+O+QP2bx/1H+mMV/x/wxi/+P88cs/jvlj1n8d84fs/j/JH/M4r9L/pjFf9f8MYv/bvljFv+f5o9Z/HfPH7P4/yx/zOL/8/wxi/8e+WMW/z3zxyz+e+WPWfx/kT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfx/mT9m8T8wf8zif1D+mMX/V/ljFv9f549Z/A/OH7P4/yZ/zOJ/SP6Yxf/Q/DGL/2H5Yxb/3+aPWfx/lz9m8T88f8zi//v8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8f9D/pjF/9j8MYv/H/PHLP7H5Y9Z/I/PH7P4/yl/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/P+cP2bxPzV/zOL/l/wxi/9p+WMW/7/mj1n8/5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/+O/4tvvvn/45r9j8zi/3T7P2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj0n8xx3IH7P4D8ofs/gPzh+z+I+RP2bxH5I/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfzflz9m8X9//pjF/wP5Yxb/D+aPWfw/lD9m8Z88f8zi/+H8MYv/R/LHLP4fzR+z+H8sf8ziP0X+mMX/4/ljFv8p88cs/kPzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP6fyB+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/p/NH7P4fy5/zOL/+fwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bx/0L+mMX/i/ljFv9F88cs/ovlj1n8v5Q/ZvFfPH/M4v/l/DGL/xL5Yxb/JfPHLP5fyR+z+C+VP2bxXzp/zOK/TP6Yxf+r+WMW/2Xzxyz+y+WPWfyXzx97r/qPPZr/Cvlj71X/gdH8v5Y/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/l/PH7P4fyN/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/L+VP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/L+dP2bx3zx/zOK/Rf6YxX/L/DGL/3fyxyz+380fs/hvlT9m8d86f8ziv03+mMV/2/wxi//38scs/t/PH7P4/yB/zOL/w/wxi/92+WMW/+3zxyz+O+SPWfx/lD9m8d8xf8zi/+P8MYv/TvljFv+d88cs/j/JH7P475I/ZvHfNX/M4r9b/pjF/6f5Yxb/3fPHLP4/yx+z+P88f8ziv0f+mMV/z/wxi/9e+WMW/1/kj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/1/mj1n8D8wfs/gflD9m8f9V/pjF/9f5Yxb/g/PHLP6/yR+z+B+SP2bxPzR/zOJ/WP6Yxf+3+WMW/9/lj1n8D88fs/j/Pn/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8/5A/ZvE/Nn/M4v/H/DGL/3H5Yxb/4/PHLP5/yh+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/P+ePWfxPzR+z+P8lf8zif1r+mMX/r/ljFv+/5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/TOI/3kD+mMV/UP6YxX9w/pjFf4z8MYv/kPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvGfLH/M4v++/DGL//vzxyz+H8gfs/h/MH/M4v+h/DGL/+T5Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/KfLHLP4fzx+z+E+ZP2bxH5o/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scBsPhPnz9m8Z8hf8ziP2P+mMX/E/ljFv9P5o9Z/D+VP2bx/3T+mMX/M/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyx/7h/+p72n/u/DHL/j9P/pjFf978MYv/fPljFv/588cs/p/NH7P4fy5/zOL/+fwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bx/0L+mMX/i/ljFv9F88cs/ovlP6Id/umWxf9L+WMW/8Xzxyz+X84fs/gvkT9m8V8yf8zi/5X8MYv/UvljFv+l88cs/svkj1n8v5o/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv+v5Y9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/1/PHLP7fyB+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/zfzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/b+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/b+ePWfw3zx+z+G+RP2bx3zJ/zOL/nfwxi/9388cs/lvlj1n8t84fs/hvkz9m8d82f8zi/738MYv/9/PHLP4/yB+z+P8wf8ziv13+mMV/+/wxi/8O+WMW/x/lj1n8d8wfs/j/OH/M4r9T/pjFf+f8MYv/T/LHLP675I9Z/HfNH7P475Y/ZvH/af6YxX/3/DGL/8/yxyz+P88fs/jvkT9m8d8zf8ziv1f+mMX/F/ljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/l/ljFv8D88cs/gflj1n8f5U/ZvH/df6Yxf/g/DGL/2/yxyz+h+SPWfwPzR+z+B+WP2bx/23+mMX/d/ljFv/D88cs/r/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv8/5I9Z/I/NH7P4/zF/zOJ/XP6Yxf/4/DGL/5/yxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/P+WMW/1Pzxyz+f8kfs/iflj9m8f9r/pjF/2/5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+T+I8/kD9m8R+UP2bxH5w/ZvEfI3/M4j8kf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4vy9/zOL//vwxi/8H8scs/h/MH7P4fyh/zOI/ef6Yxf/D+WMW/4/kj1n8P5o/ZvH/WP6YxX+K/DGL/8fzxyz+U+aPWfyH5o9Z/KfKH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P5E/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfw/mz9m8f9c/pjF//P5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4v+F/DGL/xfzxyz+i+aPWfwXyx+z+H8pf8ziv3j+mMX/y/ljFv8l8scs/kvmj1n8v5I/ZvFfKn/M4r90/pjFf5n8MYv/V/PHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4v+1/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvH/ev6Yxf8b+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bx/2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOL/rfwxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOL/7fwxi//m+WMW/y3yxyz+W+aPWfy/kz9m8f9u/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8v5c/ZvH/fv6Yxf8H+WMW/x/mj1n8t8sfs/hvnz9m8d8hf8zi/6P8MYv/jvljFv8f549Z/HfKH7P475w/ZvH/Sf6YxX+X/DGL/675Yxb/3fLHLP4/zR+z+O+eP2bx/1n+mMX/5/ljFv898scs/nvmj1n898ofs/j/In/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/j/Mn/M4n9g/pjF/6D8MYv/r/LHLP6/zh+z+B+cP2bx/03+mMX/kPwxi/+h+WMW/8Pyxyz+v80fs/j/Ln/M4n94/pjF//f5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4v+H/DGL/7H5Yxb/P+aPWfyPyx+z+B+fP2bx/1P+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+P85f8zif2r+mMX/L/ljFv/T8scs/n/NH7P4/y1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMS/wkG8scs/oPyxyz+g/PHLP5j5I9Z/Ifkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/9+WPWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfwnzx+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+RP2bx/3j+mMV/yvwxi//Q/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/J/LHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/9n88cs/p/LH7P4fz5/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/L+QP2bx/2L+mMV/0fwxi/9i+WMW/y/lj1n8F88fs/h/OX/M4r9E/pjFf8n8MYv/V/LHLP5L5Y9Z/JfOH7P4L5M/ZvH/av6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/L+WP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP5fzx+z+H8jf8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+38wfs/ivlT9m8V87f8ziv07+mMV/3fyx0fwHvVf918sfs+z/6+ePWfw3yB+z+H8rf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+H87f8ziv3n+mMV/i/wxi/+W+WMW/+/kj1n8v5s/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/v5Y9Z/L+fP2bx/0H+mMX/h/ljFv/t8scs/tvnj1n8d8gfs/j/KH/M4r9j/pjF/8f5Yxb/nfLHLP47549Z/H+SP2bx3yV/zOK/a/6YxX+3/DGL/0/zxyz+u+ePWfx/lj9m8f95/pjFf4/8MYv/nvljFv+98scs/r/IH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/r/MH7P4H5g/ZvE/KH/M4v+r/DGL/6/zxyz+B+ePWfx/kz9m8T8kf8zif2j+mMX/sPwxi/9v88cs/r/LH7P4H54/ZvH/ff6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4/yF/zOJ/bP6Yxf+P+WMW/+Pyxyz+x+ePWfz/lD9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+f84fs/ifmj9m8f9L/pjF/7T8MYv/X/PHLP5/yx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMR/woH8MYv/oPwxi//g/DGL/xj5Yxb/IfljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/Wf6Yxf99+WMW//fnj1n8P5A/ZvH/YP6Yxf9D+WMW/8nzxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+U+SPWfw/nj9m8Z8yf8ziPzR/zOI/Vf6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v+J/DGL/yfzxyz+n8ofs/h/On/M4v+Z/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8zi/9n8MYv/5/LHLP6fzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/L+SPWfy/mD9m8V80f8ziv1j+mMX/S/ljFv/F88cs/l/OH7P4L5E/ZvFfMn/M4v+V/DGL/1L5Yxb/pfPHLP7L5I9Z/L+aP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/r+WPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/9fzxyz+38gfs/ivlj9m8V89f8ziv0b+mMV/zfwxi/8388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/2/lj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/2/nj1n8N88fs/hvkT9m8d8yf8zi/538MYv/d/PHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v+9/DGL//fzxyz+P8gfs/j/MH/M4r9d/pjFf/v8MYv/DvljFv8f5Y9Z/HfMH7P4/zh/zOK/U/6YxX/n/DGL/0/yxyz+u+SPWfx3zR+z+O+WP2bx/2n+mMV/9/wxi//P8scs/j/PH7P475E/ZvHfM3/M4r9X/pjF/xf5Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/5f5Yxb/A/PHLP4H5Y9Z/H+VP2bx/3X+mMX/4Pwxi/9v8scs/ofkj70X/QcNDGw/MJr/oflj70V/2v8Pyx+z+P82f8zi/7v8MYv/4fljFv/f549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/H/LHLP7H5o9Z/P+YP2bxPy5/zOJ/fP6Yxf9P+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOL/5/wxi/+p+WMW/7/kj1n8T8sfs/j/NX/M4v+3/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPSfwnGsgfs/gPyh+z+A/OH7P4j5E/ZvEfYvd/mydv8R/T7v82WfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf7L8MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP6T549Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/KfIH7P4fzx/zOI/Zf6YxX9o/pjFf6r8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/E/ljFv9P5o9Z/D+VP2bx/3T+mMX/M/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyHxh4ZKx/mWTxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP6fzR+z+H8uf8zi//n8MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8f9C/pjF/4v5Yxb/RfPHLP6L5Y9Z/L+UP2bxXzx/zOL/5fwxi/8S+WMW/yXzxyz+X8kfs/gvlT9m8V86f8ziv0z+mMX/q/ljFv9l88cs/svlj1n8l88fs/ivkD9m8f9a/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/h/PX/M4v+N/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4f9Pkv8C/P6vFfy2T/3+QxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/Vv6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvH/dv6YxX/z/DGL/xb5Yxb/LfPHLP7fyR+z+H83f8ziv1X+mMV/6/wxi/82+WMW/23zxyz+38sfs/h/P3/M4v+D/DGL/w/zxyz+2+WPWfy3zx+z+O+QP2bx/1H+mMV/x/wxi/+P88cs/jvlj1n8d84fs/j/JH/M4r9L/pjFf9f8MYv/bvljFv+f5o9Z/HfPH7P4/yx/zOL/8/wxi/8e+WMW/z3zxyz+e+WPWfx/kT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfx/mT9m8T8wf8zif1D+mMX/V/ljFv9f549Z/A/OH7P4/yZ/zOJ/SP6Yxf/Q/DGL/2H5Yxb/3+aPWfx/lz9m8T88f8zi//v8MYv/EfljFv8j88dG8z/hvep/VP6YZf8/On/M4n9M/pjF/w/5Yxb/Y/PHLP5/zB+z+B+XP2bxPz5/zOL/p/wxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bx/3P+mMX/1Pwxi/9f8scs/qflj1n8/5o/ZvH/W/7YoMPGVvifnj9m2f/PyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q+/g/8g8ZZh8X+j/R+z+L+ZPybxn3ggf8ziPyh/zOI/OH/M4j9G/pjFf0j+mMV/zP+PnbsP97qu7zj+BT4HEBV0rhYaRiCKpoKgIpk3aKlH4Gg3lpKgpHgzQZlSoCslu7G2cparXFtp3qTO1NJZc01HOed02aysttmcmznWCpflxK2SXQfOIc7p7bk8X777esX78fiDc36/0/uX8rzqxe94HfUPZek/XP9Qlv4j9A9l6T9S/1CW/lvpH8rSf5T+oSz9t9Y/lKX/NvqHsvTfVv9Qlv6j9Q9l6T9G/1CW/tvpH8rSf3v9Q1n6/4b+oSz9d9A/lKX/b+ofytL/JfqHsvR/qf6hLP1/S/9Qlv4v0z+Upf9Y/UNZ+u+ofyhL/530D2Xp/3L9Q1n6j9M/lKX/zvqHsvR/hf6hLP3H6x/K0v+V+oey9J+gfyhL/4n6h7L030X/UJb+k/QPZem/q/6hLP130z+Upf9k/UNZ+u+ufyhL/z30D2Xp/yr9Q1n676l/KEv/vfQPZem/t/6hLP2n6B/K0n+q/qEs/ffRP5Sl/zT9Q1n6T9c/lKX/vvqHsvTfT/9Qlv776x/K0n+G/qEs/Q/QP5Sl/0z9Q1n6v1r/UJb+B+ofytL/NfqHsvQ/SP9Qlv4H6x/K0v8Q/UNZ+h+qfyhL/1n6h7L0P0z/UJb+h+sfytL/tfqHsvR/nf6hLP2P0D+Upf+R+oey9D9K/1CW/p36h7L0P1r/UJb+s/UPZek/R/9Qlv5z9Q9l6d+lfyhL/2P0D2Xpf6z+oSz9X69/KEv/N+gfytL/jfqHsvR/k/6hLP2P0z+Upf+b9Q9l6f8W/UNZ+h+vfyhL/xP0D2XpP0//UJb+b9U/lKX/ifqHsvSfr38oS/8F+oey9D9J/1CW/ifrH8rSf6H+oSz936Z/KEv/U/QPZel/qv6hLP0X6R/K0v80/UNZ+p+ufyhL/zP0D2Xpf6b+oSz9f1v/UJb+Z+kfytJ/sf6hLP2X6B/K0v9s/UNZ+p+jfyhL/6X6h7L0/x39Q1n6n6t/KEv/8/QPZem/TP9Qlv5v1z+Upf879A9l6b9c/1CW/iv0D2Xpf77+oSz9L9A/lKX/7+ofytL/nfqHsvR/l/6hLP0v1D+Upf9F+oey9F+pfyhL/3frH8rS/2L9Q1n6v0f/UJb+79U/lKX/+/QPZen/fv1DWfpfon8oS/8P6B/K0v+D+oey9P89/UNZ+v++/qEs/T+kfyhL/w/rH8rS/1L9Q1n6/4H+oSz9L9M/lKX/R/QPZen/Uf1DWfpfrn8oS/8/1D+Upf/H9A9l6f9x/UNZ+n9C/1CW/lfoH8rS/4/0D2Xp/0n9Q1n6/7H+oSz9/0T/UJb+n9I/lKX/p/UPZel/pf6hLP2v0j+Upf9n9A9l6X+1/qEs/a/RP5Sl/7X6h7L0v07/UJb+n9U/lKX/9fqHsvS/Qf9Qlv436h/K0v9P9Q9l6X+T/qEs/T+nfyhL/5v1D2Xpf4v+oSz9b9U/lKX/5/UPZen/Bf1DWfrfpn8oS//b9Q9l6f9n+oey9L9D/1CW/l/UP5Sl/5f0D2Xp/+f6h7L0v1P/UJb+f6F/KEv/L+sfytL/L/UPZel/l/6hLP3v1j+Upf9f6R/K0n+V/qEs/b+ifyhL/6/qH8rS/x79Q1n6/7X+oSz979U/lKX/3+gfytL/Pv1DWfr/rf6hLP3v1z+Upf8D+oey9P87/UNZ+n9N/1CW/g/qH8rS/+v6h7L0/3v9Q1n6P6R/KEv/b+gfytL/m/qHsvT/lv6hLP0f1j+Upf+39Q9l6f8d/UNZ+n9X/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/xH9Q1n6f0//UJb+/6x/KEv/R/UPZen/L/qHsvR/TP9Qlv7/qn8oS/9/0z+Upf/j+oey9P++/qEs/Z/QP5Sl/7/rH8rSf7X+oSz9/0P/UJb+P9A/lKX/f+ofytL/h/qHsvT/kf6hLP3X6B/K0v9J/UNZ+v+X/qEs/X+sfyhL/6f0D2Xp/xP9Q1n6/1T/0Jbcf9uOo5f2fDrmaf1DW3L/Tf/3/9/6h7L0f0b/UJb+a/UPZen/rP6hLP3/R/9Qlv7/q38oS/+f6R/K0v/n+oey9P+F/qEs/Z/TP5Sl/zr9Q0n6b1fpH8rSf4j+oSz9h+ofytJ/mP6hLP2L/qEs/Tv0D2XpP1z/UJb+I/QPZek/Uv9Qlv5b6R/K0n+U/qEs/bfWP5Sl/zb6h7L031b/UJb+o/UPZek/Rv/QFtcfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKiqzq5Za4YN6fPUsE0fjHtw0fqP+649/ozrrvvi9r0fe748O3jJoZs+WLdu3bqhT1df63k4oqqq7v+27Xoej+x/3P36F826YvKGR2X81c/ucdPyZw97/60P37D2yOtn39Sx/tmO6uTTzly8aOrQqioTO6oV3Q/2GVJVZdeO6rLuB9O6H+zWUd3Q/WD6+gdbVau6H+x9yjmLT+1+YnLt3zMA+HXX2bWyGtZnsas+fxrYdP8vmnX7yt6PA7xk76uVqmf/77xth3f0+1qv59n/3tcvr+y//4P+GwQAfsXg9v+e8b0fB3jJX3n/P/fsjz8cfe3597/39csE+w8AzQu+/99no/t/37/f9/+jPwdsvD/rpMtHdO//9WuPW9bzVHkh3///5euXif33f2if7/8PqaqyS+/3/0dUVZm0mb8dAJBCZ9e71wz0/n/g/S879rsZsun+b3/zquO69//RUbe+tOepjkHu/y4Dvf8/ot9fKwDwwnR2fWZdv/f/g9j/atfgJTfu/+Er7n9J9/5/49Hvj9/ka4PZ/0n993/KsiVLp5x3/gV7nblk4emLTl909swZMw7Yb8b+M6dNWf8dgQ2/buZvCgBs4Tbv/X81qt/NkKp6YuP9h+4ad3/3/k/75FFn9Dw1cpD7v+uA7//He/8PAH1MGFoNH16tWLhs2bn7bPi19+G0Db9u+I8F+z+If/4/sfeH6Hp/ZnBIVb1s433XeR8Y2r3/10zc8a6ep4YPcv93G3D/D+37s4oAwAuzme//T+1302f/xwy7cWb3/h89afdLep4a7D//nzzg/l/l/T8A1NHZVf2/vonu3v+Lt/nFlfWuy+5+/g8AmtfG/j857j0T6l2XPew/ADSvjf1fdMi2d9S7Lq+y/wDQvDb2/77Oy+fXuy572n8AaF4b+z/nrHEP1Lsue9l/AGheG/s//oJTlte7LnvbfwBoXhv7f9Pxax6rd12m2H8AaF4b+3/iyEefqnddptp/AGheG/v/3T2OPa3eddnH/gNA89rY/y8fuPcj9a7LNPsPAM1rY/+njr1qTr3rMt3+A0Dz2tj/j55z8LX1rsu+9h8AmtfG/o+d+/np9a7LfvYfAJrXxv6//cSvX1rvuuxv/wGgeW3s/3MXHjq23nWZYf8BoHlt7P+q+3aeV++6HGD/AaB5bez/7Ccue7DedZlp/wGgeW3s/25PP7m03nV5tf0HgOa1sf+f+87Jq+tdlwPtPwA0r439H33Vc2PqXZfX2H8AaF4b+/++i5deUe+6HGT/AaB5bez/Dy4fPanedTnY/gNA89rY/7d9YeVt9a7LIfYfAJrXxv5/8/Hps+tdl0PtPwA0r439P+Erd32v3nWZZf8BoHlt7P9+D92zsN51Ocz+A0Dz2tj/u38y95l61+Vw+w8AzWtj/1/+3m/tXO+6vNb+A0Dz2tj/T3x2/gfrXZfX2X8AaF4b+/+zL03ct951OcL+A0Dz2tj/pR+7+Zp61+VI+w8AzWtj/7v2/Olj9a7LUfYfAJrXxv7fO/pdy+tdl077DwDNa2P/b3zFsAfqXZej7T8ANK+N/Z9w0Ifn17sus+0/ADSvjf1fOXuHO+pdlzn2HwCa18b+b33mpybUuy5z7T8ANK+N/T99xeNX1rsuXfYfAJrXxv7/aN6SkfWuyzH2HwCa18b+7zRqwdh61+VY+w8AzWtj/y+b/NCl9a7L6+0/ADSvjf3/+cxbpte7Lm+w/wDQvDb2f/lO46+td13eaP8BoHlt7P+3l9w9p951eZP9B4DmtbH/C46Z+ki963Kc/QeA5rWx/9MWdJ1W77q82f4DQPPa2P8737nqqXrX5S32HwCa18b+X3Lvp2+rd12Ot/8A0Lw29n+b1dtNqnddTrD/ANC8Nvb/5GfOvqLedZln/wGgeW3s/w8ffmxMvevyVvsPAM1rY/87r75wdb3rcqL9B4DmtbH/X13546X1rst8+w8AzWtj/2/5yKUP1rsuC+w/ADSvjf2fdHs1r951Ocn+A0Dzzjv/grMWLl686Fyf+MQnPtn4yYv9/0wAAEDTfvmH/hf7rwQAAAAAAAAAAAAAAAAAAADyauNfJ/Zi/z0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/8cOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAgvytVxigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOArAAD//3CV1MM=") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000000040)=ANY=[], 0x1001, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=ANY=[], 0x1015, 0x0) 16:06:00 executing program 1: r0 = socket(0xa, 0x3, 0x36) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001100)={'ip_vti0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="03"]}) 16:06:00 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x100) 16:06:00 executing program 3: syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000016c0)={[{@gid}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@codepage={'codepage', 0x3d, 'cp1255'}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@part={'part', 0x3d, 0x7e}}]}, 0x1, 0x2fe, &(0x7f0000000240)="$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") mount$afs(&(0x7f0000000040)=@cell={0x5c, 'syz1:', 'syz1', '', 0x3c}, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 89.973662][ T4254] loop4: detected capacity change from 0 to 32768 16:06:00 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) [ 90.024862][ T4254] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4254) [ 90.109426][ T4274] loop3: detected capacity change from 0 to 64 16:06:00 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r0, 0x2) fcntl$lock(r0, 0x25, &(0x7f0000000740)={0x1}) syz_open_procfs(0x0, &(0x7f0000000600)='fdinfo/3\x00') pread64(0xffffffffffffffff, &(0x7f0000000300)=""/246, 0xf6, 0x0) 16:06:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, 0x0) [ 90.187664][ T4254] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.257666][ T4254] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 90.321830][ T4254] BTRFS info (device loop4): enabling auto defrag [ 90.358479][ T4254] BTRFS info (device loop4): enabling disk space caching 16:06:00 executing program 2: mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) flock(r0, 0x2) close(r0) 16:06:00 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503190002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 16:06:00 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)=0x100) [ 90.402696][ T4254] BTRFS info (device loop4): max_inline at 0 [ 90.433215][ T4254] BTRFS info (device loop4): force clearing of disk cache [ 90.477158][ T4254] BTRFS info (device loop4): turning on sync discard 16:06:01 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 90.531009][ T4254] BTRFS info (device loop4): disk space caching is enabled 16:06:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) 16:06:01 executing program 3: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 16:06:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) 16:06:01 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r0, 0x2) fcntl$lock(r0, 0x25, &(0x7f0000000740)={0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='fdinfo/3\x00') pread64(r1, 0x0, 0x0, 0x0) [ 90.823386][ T3611] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.850777][ T4314] overlayfs: missing 'lowerdir' 16:06:01 executing program 2: syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000016c0)={[{@gid}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@codepage={'codepage', 0x3d, 'cp1255'}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@part={'part', 0x3d, 0x7e}}]}, 0x1, 0x2fe, &(0x7f0000000240)="$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") mount$afs(&(0x7f0000000040)=@cell={0x5c, 'syz1:', 'syz1', '', 0x3c}, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 90.915917][ T4254] BTRFS info (device loop4): enabling ssd optimizations [ 90.948536][ T4268] loop0: detected capacity change from 0 to 32768 [ 90.959064][ T4254] BTRFS info (device loop4): rebuilding free space tree 16:06:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2814000}) [ 91.046761][ T4254] BTRFS info (device loop4): disabling free space tree [ 91.052329][ T4268] XFS (loop0): Mounting V5 Filesystem [ 91.061851][ T4254] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 91.080317][ T4254] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 91.111626][ T4328] loop2: detected capacity change from 0 to 64 16:06:01 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x38) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 16:06:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) 16:06:01 executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) [ 91.254690][ T3611] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.276482][ T4268] XFS (loop0): Ending clean mount [ 91.280343][ T3611] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 91.320078][ T3574] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.367420][ T4268] XFS (loop0): Quotacheck needed: Please wait. 16:06:01 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d0101000004ffffdb03000000000000000000"], 0x1d) [ 91.440427][ T4268] XFS (loop0): Quotacheck: Done. [ 91.493575][ T3611] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.527825][ T3611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 16:06:02 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r0, 0x2) fcntl$lock(r0, 0x25, &(0x7f0000000740)={0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='fdinfo/3\x00') pread64(r1, 0x0, 0x0, 0x0) [ 91.558335][ T3611] usb 2-1: Product: syz [ 91.568256][ T3611] usb 2-1: Manufacturer: syz [ 91.584963][ T3611] usb 2-1: SerialNumber: syz 16:06:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x40}, 0x1, 0x4c00000000000000}, 0x0) 16:06:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:02 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x310decfa, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, 0x0) 16:06:02 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 91.821289][ T3559] XFS (loop0): Unmounting Filesystem 16:06:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x65) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 16:06:02 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1403, 0xe5b91d44bea93499, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0) 16:06:02 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40585414, 0x0) [ 92.146835][ T4359] dummy0 speed is unknown, defaulting to 1000 16:06:02 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)='l', 0x1}], 0x1}, 0x40011) sendmsg$inet(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)="04", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 92.209006][ T4359] dummy0 speed is unknown, defaulting to 1000 16:06:02 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r0, 0x2) fcntl$lock(r0, 0x25, &(0x7f0000000740)={0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='fdinfo/3\x00') pread64(r1, 0x0, 0x0, 0x0) [ 92.253083][ T4359] dummy0 speed is unknown, defaulting to 1000 16:06:02 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, 0x0) 16:06:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x18, r1, 0xb01, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) [ 92.383693][ T3611] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 92.389815][ T3611] cdc_ncm 2-1:1.0: bind() failure [ 92.411609][ T4367] binder: BINDER_SET_CONTEXT_MGR already set [ 92.421125][ T3611] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 92.445593][ T3611] cdc_ncm 2-1:1.1: bind() failure 16:06:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x40}, 0x1, 0x4c00000000000000}, 0x0) [ 92.470919][ T4367] binder: 4366:4367 ioctl 4018620d 200001c0 returned -16 [ 92.495558][ T3611] usb 2-1: USB disconnect, device number 2 16:06:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 16:06:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:03 executing program 0: r0 = msgget(0x3, 0x202) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000240)=""/142) 16:06:03 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$PROG_LOAD(0xf, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, 0x0}, 0x90) 16:06:03 executing program 4: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="fb0230"], 0x10) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000001200)=0x8) r1 = socket(0x2, 0x1, 0x0) bind(r1, &(0x7f0000000000)=ANY=[], 0x10) r2 = dup(r1) listen(r2, 0x0) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=ANY=[], 0x10) r4 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) close(r4) r5 = accept$inet(r1, 0x0, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, 0x0, 0x0) poll(&(0x7f0000000140)=[{r5, 0xc0}], 0x1, 0x0) 16:06:03 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) 16:06:03 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:03 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9}}}]}}]}, 0x45c}}, 0x0) [ 92.901895][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 43890. Sending cookies. Check SNMP counters. [ 92.906917][ T4359] infiniband syz1: set active [ 92.919672][ T3609] dummy0 speed is unknown, defaulting to 1000 16:06:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 92.970669][ T4386] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.993446][ T4359] infiniband syz1: added dummy0 16:06:03 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:06:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x40}, 0x1, 0x4c00000000000000}, 0x0) 16:06:03 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$PROG_LOAD(0xf, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, 0x0}, 0x90) 16:06:03 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000080)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@utf8}, {@dmode={'dmode', 0x3d, 0x9}}, {@check_relaxed}, {@overriderock}, {@check_strict}, {@map_off}, {@mode={'mode', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp737'}}]}, 0x2, 0x9e8, &(0x7f0000000440)="$eJzs3c1vHOd9B/Dv8EWiaUOSbdV1BdtayZVM2yxFUrVUwYdWIlcSXb4UJAVY6MFyLaoQxNat3QK2UaAyUPRUowVa9JDcjJxyMuBLfAl8S27JKYcAgf8FIyflxGBml9SSXHJJhW+WPx9id+flN8/zm53Zebi7s/OE75alo6vGlpaq2yOO3/jxHmTMAXZl/JvPv/isvH16P4fSnTeKnyR9SWpJT5Lnk96x8dmZqQ4F3UtuJfk6KZIcTuNxS26l+O889XD86xQ/LOvd0KGtlkwnS3yv7ff+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1ExNj48PFIcysT0jbdrDUltnbHx2ZkiS0vr5ywv0/BV1et38VXHepOivKWvb7mr7+ePP5z9XJLa6bzQGHuh6pA8ffnkyeeOvflsT9fy8htl8wc5vPViP/z4k3vvLi4ufLAriRx81+rTE3MzE1OXr9VrE3MztUsXLgyfu351rnZ1YrI+d3Nuvj5VG5utX56fma0NjL1aG7l06XytPnRz5sb0tfGhyfryxIt/Njo8fKH21tDf1C/Pzs1Mn3traG7s+sTk5MT0tSqmnF3GXCx3xL+emK/N1y9P1Wp37i4unF+TU3fW7L9l0EinNSmDRjsFjQ6Pjo6MjI6OfNrsPXtlwoU3Lr1xcXi4Z3iNrIvYpZ2Wg+WJjTfzzh/E4RF1Ndr/ZDITmc6NvJ1a27+xjGc2M5naYH7Tcvt/5lx903pb2/9mK9/TMvtEeXc6LzVH+zZo/zfIZe/+PszH+ST38m4Ws5iFfLDvGe3t37XUM52JzGUmE5nK5WpKrTmllku5kAsZzju5npOZSy1XM5HJ1DOXm5nLfOrVHjWW2dRzOfOZyWxqGchYXk0tI7mUSzmfWuoZys3M5Eamcy3juVyVcid3q+f9/CY5rgSNbCVodJOgdY35ttv/+tp/Tvje2fmDODyipWb7f6hz6MDYXiQEAAAA7Lg/+XmOHH/mZ79JirxYfS5/dWKyPrzfaQEAAAA7qDpd74XyobccejGF9/8AAADwuCmq39gVSfpzsjG0/EsoHwIAAADAY6L6/v+lFCcfTvD+HwAAAB4zna+x3zGiGFy+/G/tduPxdjOiMVb0X52YrA+NzUy+OZKz1VUGql8arCutOyl6q58fvJZTjahT/Y3H/ocllnX2lVEjQ2+O5LWcbq7IwMvlw8sDbSJHG5GvNCJfaY3szqrI82UkADzuTm/SHm+1/X8tg42IwRNVk99zok0bPKxlBYCDYqWPnd81uzRr0/43I17aqP3/803e/5cRz+TOycYpBUN5L+9nMbczmOYZByfblbrcG0HjNITBDp8G9DdPWfjlxa4Mrvs8oG9lXVtjFzKawbafCLSUWyzncL4R17072wAA9trpTdvhrbX/gx3e//c7pRAADpSVHux3cWC/1xEAWE0rDQAAAAAAAAAAAAAAAAAAAAAAAAAAADtvSxfw/8XZZHFxIdmDzgJWBvq2k+HmA13Zo5z3faA7yX7V/pfZ9lLlNj4oT52B1QP7fGACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgTxRJd7vpXcnhJMNJzu19Vrvn/n4nsFNqj7ZY8SAP8lGO7HQ6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADfd83r/3el8fhkY1J6upIzSW4l+dv9znEnPdjvBPbNP1T3Ldf/70p6s1Skp7HZU/SOjc/OTJWbvzhczv/m8y8+K2+dy17fq0JZQFnDqs4lmjW0TOldvdTT1VL94wsf3vuX9/+pNn6l2jGvzF+dHJ+6NvtXDwOfK75sdIHQ2g3Ccr7/duan/9My+VCz8i/LNW1vbb1Xq3rH19f7x+2W3qDeLbi7uDBa1jRff3v+X//x7kcts57JqeTlgWRgdU1/X942qOnU2udzteLb4j+LI/n/3Kq2f/lsFEtFuYmOVuv/xJ27iwtD772/eHslp39fldOxnExyO+nbek4nq+NJW9Ve19Vb1jpcBZV3xzuUt6mWEkc2eF6frnaZ/m2tQ23jdah0eN6bGZ1vm9H//vOzObvtLX22Q41tFd8Wvy6u51f5j5b+P7rK7X8mbV+dbYqoIlv2lNZ5q15eXY3Ias1HW2e8s7bMDV+V7IL/yt/lL1a2f1fL8b+5rfbmeNRSY/vXRbL918WPjq5rUR6qWqTja1qk5tFno2WaeR5vRG2Q5x/l9aTnxLaOKK93OKLs1uv/B8VAfpv7+v8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOviLpbje9KzmT5FiSo+V4LVlaG3P/Eerr6i8eJc0d8yg5f/cUG65o8SAP8lGO7HVGAAAAAAAAAOyOK+PffP7FZ+Wt+j6+O3/a1ZxTS3qSHCv+r3dsfHZmqkNBvcmt5a/0+7aXw63y7qmH41+XY893WGh/Tx8AgO+03wcAAP//BZNu0Q==") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) setresuid(0xee00, 0xee01, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000000)='\n', 0x1) [ 93.131462][ T4390] binder: BINDER_SET_CONTEXT_MGR already set [ 93.179821][ T4390] binder: 4389:4390 ioctl 4018620d 200001c0 returned -16 [ 93.236315][ T4399] loop2: detected capacity change from 0 to 1764 16:06:03 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, 0x0) [ 93.282127][ T4359] RDS/IB: syz1: added 16:06:03 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d0101000004ffffdb030000000000000000000000fd97"], 0x1d) [ 93.316872][ T4359] smc: adding ib device syz1 with port count 1 [ 93.338035][ T4359] smc: ib device syz1 port 1 has pnetid [ 93.348739][ T3611] dummy0 speed is unknown, defaulting to 1000 [ 93.362129][ T4359] dummy0 speed is unknown, defaulting to 1000 16:06:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x80c406, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0xff, 0x2a9, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 16:06:04 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) 16:06:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x0, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, 0x0) [ 93.591488][ T4410] loop0: detected capacity change from 0 to 128 16:06:04 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:06:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) dup2(r0, r1) r2 = memfd_create(&(0x7f0000000100)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa2\xfc\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\xdf\x81\x8b\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\\\x00\x8d%K\x1d\xe7\xc1\xf0\x8c*\x91R\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d`+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x82Xa2.\xce\x01\x00\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x03D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF5^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xce\x05\x00\x00\x00Y\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x92\x06\x00\x00\x00\x00\x00\x00\x00^Q\xcf&\xf2\x9f\xf4\x83\xac]S\xce\xa55\x98\xa5\x97\xb3\xa6\r:L\x10\xb3;\x18G\r\xd8\xee4\xa3\xacI\xfc\xf6a\xde\rL\xcb\xbbE\xfe&&xL\xc49\x02\xe8A\x91\xfd\x15\xaeY:^E^>a\xd8\xdcJu\x16B!\x0et\xf0c\xc3W\x9c\xb8\xc2c\xbc\x99\xcb\x91xA2^\xe3\xfeq\xac2X\xd1\x1cG\x1b\xe0\x8d\x1a\x11\xddX\x16H\xae\x00#\x92\nW9C\v\xbf\xe7Q\xe7\x06\x81v\x15Y\x1bY\x0f+ \a\x01\x00\x00\x00^f\x11]&\"\xd5\x84/\xab\xac\xeaB\xa2^3\xdd.\x8c\xe0\xb8\xf8\x8c\xf4\r\t\xb1\xa9)$\xf5\x1d\x87\x1aJ\x1b\xf3\xefj\xac\xf3\a\xdc\x9a\x05\x14\xa6\xc1\xe9\xe1\xab\xb7\xe0\x95\xa0U\xa1\x1e\xb5\xc5gw\x9cpk4\'en\xc28\xd2\x00\x00\x00\x00\x9f\x82\xe9\x82\xc5\x83\xe1EV\xa98\xa9/\xe5:;\xa9(xf\x9b\xd3a\x15\xb4W\"Y\x8f5Q\x13R\x84\x83H\xb2n\xbc\\\x11\xd4\xb4}O*\xab6\xf5Ym\xe3\xdf\x17\xcc\xb0o9\xff\xe7G\x0e\x1d\xfcH\xe9\x00\x00\\\xb8\x8fA^\xc2\x05\xf4\x8b\x02[\xa4jR\x96%&\xdf\xf9c\x8a4\x00\xa4tA\n\xfb\x7f\xf1S\xfd<\v\x18\xeb\xfb\xd6\xcb:\xbb\xb0\xe6,\x89\vcU\x00\x1e\xa0\x8b\xae\xe3M\xa6l\x15\x9c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00g\xc1\b\x11v\x90\xf2n\xb9vJ\xf3c\xbf\xdb\xeb\xe0\vg\xc6m\x80\x1d\xf2\x1d\x95\xec\xdf\xe1=\xa0\xac\xe6\x86\x12\xe7\xd7\xf9tG\xb0b\'\xed\xfd\x97c\xbb\xb1\xfb\x92\xe4\x97\xa4t\xa0\xa2]\xcf5\x9a\f\xf2\x800\x14\xa5#\xa8\xa2HD)\x9e\xe7o\xc1\x05A\xc7\x86?4\xa1\xeac\xb1\xfe\b\xf0\xc4\x820\xc4\x06\xd4`,\xba\x11T\xd4\xe0\xe4C\xe6\x00'/870, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x12, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x8008007) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00'}, &(0x7f0000000100)=0x54) 16:06:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup3(r2, r1, 0x0) r4 = accept(r3, 0x0, 0x0) dup3(r0, r4, 0x0) 16:06:04 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d0101000004ffffdb030000000000000000000000fd97"], 0x1d) 16:06:04 executing program 2: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="fb0230"], 0x10) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000001200)=0x8) r1 = socket(0x2, 0x1, 0x0) bind(r1, &(0x7f0000000000)=ANY=[], 0x10) r2 = dup(r1) listen(r2, 0x0) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=ANY=[], 0x10) r4 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) close(r4) r5 = accept$inet(r1, 0x0, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, 0x0, 0x0) poll(&(0x7f0000000140)=[{r5, 0xc0}], 0x1, 0x0) [ 93.958422][ T4359] dummy0 speed is unknown, defaulting to 1000 [ 94.157270][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 56858. Sending cookies. Check SNMP counters. [ 94.317134][ T4359] dummy0 speed is unknown, defaulting to 1000 [ 94.461449][ T4359] dummy0 speed is unknown, defaulting to 1000 [ 94.573433][ T4359] dummy0 speed is unknown, defaulting to 1000 16:06:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:05 executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x3, 0x0) 16:06:05 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) semget$private(0x0, 0x4, 0x0) semctl$SEM_INFO(0x0, 0x4, 0x13, 0x0) semget(0x1, 0x0, 0x207) 16:06:05 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0xf, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, 0x0}, 0x90) 16:06:05 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:05 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:06:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001440)={[{@dyn}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 16:06:05 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x90) [ 94.919659][ T4442] binder: BINDER_SET_CONTEXT_MGR already set [ 94.951428][ T4442] binder: 4439:4442 ioctl 4018620d 200001c0 returned -16 16:06:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, 0x0) 16:06:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 16:06:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0xf, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, 0x0}, 0x90) 16:06:05 executing program 4: quotactl$Q_SETQUOTA(0x0, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r0, 0x0) unlink(&(0x7f0000000000)='./cgroup\x00') [ 95.234619][ T4452] input: syz1 as /devices/virtual/input/input6 16:06:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup2(r0, r1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) write$FUSE_DIRENTPLUS(r4, 0x0, 0x0) 16:06:05 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d0101000004ffffdb030000000000000000000000fd97073a"], 0x1d) 16:06:06 executing program 3: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000000)=ANY=[], 0x0, 0x150b, &(0x7f0000003fc0)="$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") lchown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 16:06:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) 16:06:06 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x0, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:06 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)) [ 95.587640][ T4463] loop3: detected capacity change from 0 to 256 16:06:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0xf, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, 0x0}, 0x90) 16:06:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) 16:06:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) r0 = getpid() syz_pidfd_open(r0, 0x0) 16:06:06 executing program 4: quotactl$Q_SETQUOTA(0x0, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r0, 0x0) unlink(&(0x7f0000000000)='./cgroup\x00') 16:06:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) 16:06:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:06 executing program 1: pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x480481, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x4000, 0x40) gettid() connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x5450, 0x0) pipe2(0x0, 0x0) r2 = mq_open(&(0x7f0000000140)='\\+]$B:\'{{\x00', 0x40, 0x0, &(0x7f0000000180)={0x849, 0x4, 0x2, 0x9}) ioctl$FIONCLEX(r2, 0x5450) 16:06:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @dev}, 0x10) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = accept$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x0) [ 95.983680][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 95.983697][ T27] audit: type=1326 audit(1712592366.496:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c327de69 code=0x0 [ 96.012062][ C0] vkms_vblank_simulate: vblank timer overrun 16:06:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, 0x0) 16:06:06 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) 16:06:06 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) bpf$PROG_LOAD(0xf, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, 0x0}, 0x90) [ 96.046387][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 16:06:06 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0xf0, {0xf0, 0x21, "d437b1838b3d0bdb50c514b5d4b947f80c3c1ca22d9fc40205eb71b0e0bffb9d94fa42963c15d532471c051fc7f1d0e6508bef49f35b7eb677778f4bd039d286684c17b484621d1aef251de275dc66257b4f046b8659ccd23aef1b54b0ab200a4f10bb7b75fe11b74dd3397ea165192cf42fedcc5a10e5e8793b3082841ddccbf823dd321d937acef30a8777155802d188f9232ad8a090a758d1829780553174dde497a4793ff07b0e584f8d44c4ad7b16c6ab7878ee3abffed688853cc2740f6314bf74791f4b5bf8f8b00a6b314502f66fc08e5922cff8c1e6434e95ebc5ccaf1b1c20d95a2384d349f397edae"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 16:06:06 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x0, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:06 executing program 4: quotactl$Q_SETQUOTA(0x0, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r0, 0x0) unlink(&(0x7f0000000000)='./cgroup\x00') 16:06:06 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r2 = dup3(r1, r0, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000200), 0x0, 0x0, 0x0) 16:06:06 executing program 1: bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x5451, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) pwrite64(r1, &(0x7f0000000000), 0xfffffea1, 0x0) pwritev(r0, &(0x7f0000000600), 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) 16:06:06 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x403c5404, 0x0) 16:06:06 executing program 4: ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0x5450, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x5451, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast1, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0xea, 0x6}}, {{@in=@rand_addr=0x64010100, 0x0, 0x2b}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa94}}, 0xe8) 16:06:07 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:06:07 executing program 2: syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045505, 0x0) [ 96.453133][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 96.473576][ T4350] usb 1-1: new high-speed USB device number 2 using dummy_hcd 16:06:07 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000090018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) 16:06:07 executing program 4: pipe2$9p(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5451, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x5451, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000009cc0)=""/53, &(0x7f0000009d00)=0x35) [ 96.733547][ T4350] usb 1-1: Using ep0 maxpacket: 16 16:06:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='jbd2_update_log_tail\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0x40086607, 0x20001419) [ 96.768163][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 16:06:07 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair(0x11, 0x2, 0x0, &(0x7f0000000000)) 16:06:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2208882, &(0x7f0000000440)={[{@shortname_win95}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_lower}, {@numtail}, {@shortname_lower}, {@numtail}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}]}, 0x5, 0x33b, &(0x7f0000000a00)="$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") mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) [ 96.873695][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 96.906336][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 16:06:07 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000016c0)={'pimreg0\x00', 0x41}) [ 96.927260][ T4350] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 96.939355][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.956291][ T4350] usb 1-1: config 0 descriptor?? 16:06:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 16:06:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) [ 97.130951][ T4527] kAFS: No cell specified 16:06:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000090018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) 16:06:07 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) 16:06:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 97.287586][ T27] audit: type=1326 audit(1712592367.806:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e17e7de69 code=0x0 16:06:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000680)=@updpolicy={0xb4, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, {0x3f000000}}}, 0xb4}, 0x1, 0xfffff000}, 0x0) 16:06:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='jbd2_update_log_tail\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0x40086607, 0x20001419) 16:06:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) geteuid() [ 97.425203][ T4539] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.435448][ T4491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.452382][ T4491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.494201][ T4350] hid (null): bogus close delimiter [ 97.500749][ T4350] hid (null): unknown global tag 0xc [ 97.513984][ T4350] hid (null): invalid report_size 969952143 [ 97.527024][ T4350] hid (null): unknown global tag 0xed [ 97.538353][ T4350] hid (null): invalid report_count -264275548 16:06:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) [ 97.547723][ T4350] hid (null): unknown global tag 0xc [ 97.567892][ T4350] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 97.575964][ T4350] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 97.584006][ T4350] hid-generic 0003:0158:0100.0003: bogus close delimiter [ 97.591229][ T4350] hid-generic 0003:0158:0100.0003: item 0 0 2 10 parsing failed [ 97.602527][ T4350] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 16:06:08 executing program 1: syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045505, 0x0) 16:06:08 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000090018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) [ 97.728183][ T4350] usb 1-1: USB disconnect, device number 2 16:06:08 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f0000000040)={[{@autodefrag}, {@autodefrag}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x25]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@thread_pool={'thread_pool', 0x3d, 0x9}}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="85", 0x1}], 0x1, 0x0, 0x0, 0x1d) 16:06:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0306003c5c980128836360864666703a1ffe80000000000000ff1422f4c2f96901a17631012510f15ed529ab6deacbe40a84"], 0xffdd) [ 97.898719][ T4553] device syzkaller0 entered promiscuous mode 16:06:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001e000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000000)='ext4_fc_track_range\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='ext4_fc_track_range\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 16:06:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) bpf$PROG_LOAD(0xf, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, 0x0}, 0x90) 16:06:08 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='jbd2_update_log_tail\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0x40086607, 0x20001419) 16:06:08 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16:06:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000090018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) 16:06:08 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:08 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7}, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x4, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 16:06:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_da_write_pages_extent\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_da_write_pages_extent\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) 16:06:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:09 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 16:06:09 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 16:06:09 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 16:06:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 16:06:09 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 98.883075][ T4579] kAFS: No cell specified [ 98.890169][ T27] audit: type=1800 audit(1712592369.416:9): pid=4552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 16:06:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16:06:09 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503190002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 16:06:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000016c0)={'pimreg0\x00', 0x41}) 16:06:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000080), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='ext4_ext_handle_unwritten_extents\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 16:06:09 executing program 1: bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x5451, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) pwrite64(r1, &(0x7f0000000000), 0xfffffea1, 0x0) pwritev(r0, &(0x7f0000000600), 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) 16:06:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) bpf$PROG_LOAD(0xf, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, 0x0}, 0x90) 16:06:09 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x2, 0x0, 0x0, 0x0) 16:06:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 16:06:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) [ 99.396052][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd 16:06:10 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX]) 16:06:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0306003c5c980128836360864666703a1ffe80000000000000ff1422f4c2f96901a17631012510f15ed529ab6deacbe40a84"], 0xffdd) 16:06:10 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) [ 99.611763][ T4605] fuse: Unknown parameter '0xffffffffffffffff' 16:06:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 16:06:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='u'], 0xffdd) [ 99.773574][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.813745][ T14] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 16:06:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) [ 99.870628][ T4609] device syzkaller0 entered promiscuous mode 16:06:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_da_write_pages_extent\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_da_write_pages_extent\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) 16:06:10 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) [ 100.013637][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.022794][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.103058][ T14] usb 1-1: Product: syz [ 100.119768][ T14] usb 1-1: Manufacturer: syz [ 100.143461][ T14] usb 1-1: SerialNumber: syz 16:06:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 16:06:10 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX]) 16:06:10 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 16:06:10 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 16:06:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) write$cgroup_subtree(r0, 0x0, 0x20000188) [ 100.344223][ T4625] fuse: Unknown parameter '0xffffffffffffffff' 16:06:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 16:06:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0306003c5c980128836360864666703a1ffe80000000000000ff1422f4c2f96901a17631012510f15ed529ab6deacbe40a84"], 0xffdd) 16:06:11 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)) 16:06:11 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 100.687268][ T4632] device syzkaller0 entered promiscuous mode 16:06:11 executing program 4: bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x5451, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) pwrite64(r1, &(0x7f0000000000), 0xfffffea1, 0x0) pwritev(r0, &(0x7f0000000600), 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) 16:06:11 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX]) 16:06:11 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) [ 100.863712][ T14] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 100.869911][ T14] cdc_ncm 1-1:1.0: bind() failure [ 100.882087][ T4643] fuse: Unknown parameter '0xffffffffffffffff' [ 100.888170][ T14] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 100.905794][ T14] cdc_ncm 1-1:1.1: bind() failure 16:06:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c912, &(0x7f0000000200)=ANY=[@ANYBLOB='nobarrier,noblock_validity,nogrpid,bh,max_batch_time=0x0000000000000400,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',jqfmt=vfsold,i_version,resgid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x4de, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) chmod(&(0x7f00000000c0)='./file0/file1/../file0/file0/file0\x00', 0x0) [ 100.926363][ T14] usb 1-1: USB disconnect, device number 3 16:06:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) write$cgroup_int(r0, 0x0, 0x0) 16:06:11 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000080), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='ext4_ext_handle_unwritten_extents\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) [ 101.110979][ T4651] loop2: detected capacity change from 0 to 512 [ 101.152978][ T4651] EXT4-fs: Ignoring removed bh option 16:06:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)) [ 101.182822][ T4651] EXT4-fs: Ignoring removed i_version option [ 101.220691][ T4651] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.257875][ T4651] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended 16:06:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 101.340730][ T4651] EXT4-fs (loop2): 1 truncate cleaned up [ 101.352482][ T4651] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 101.377773][ T3589] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5) 16:06:11 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$PROG_LOAD(0xf, 0x0, 0x0) 16:06:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x400000) 16:06:12 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 101.527052][ T3560] EXT4-fs (loop2): unmounting filesystem. 16:06:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r3}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 16:06:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1}, 0x0) 16:06:12 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@u}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_ext_remove_space\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) 16:06:12 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 16:06:12 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) 16:06:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="4f3bf5cb8031e51b257f40", 0x48}], 0x1) 16:06:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000090018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) [ 101.878559][ T27] audit: type=1326 audit(1712592372.396:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e17e7de69 code=0x0 16:06:12 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:12 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r3) 16:06:12 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 16:06:12 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 16:06:12 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/3440], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16:06:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16:06:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfde0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) 16:06:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c912, &(0x7f0000000200)=ANY=[@ANYBLOB='nobarrier,noblock_validity,nogrpid,bh,max_batch_time=0x0000000000000400,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',jqfmt=vfsold,i_version,resgid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x4de, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) chmod(&(0x7f00000000c0)='./file0/file1/../file0/file0/file0\x00', 0x0) 16:06:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9f"], 0x0, 0x10b}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) [ 102.485326][ T4700] loop3: detected capacity change from 0 to 512 [ 102.501203][ T4700] EXT4-fs: Ignoring removed bh option [ 102.515919][ T4700] EXT4-fs: Ignoring removed i_version option [ 102.536895][ T4700] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.546160][ T3324] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.554521][ T4700] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.584674][ T4700] EXT4-fs (loop3): 1 truncate cleaned up [ 102.590534][ T4700] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. 16:06:13 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/file0\x00') [ 102.626430][ T3589] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) 16:06:13 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 102.677149][ T3569] EXT4-fs (loop3): unmounting filesystem. 16:06:13 executing program 2: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r1, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') 16:06:13 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) 16:06:13 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/3440], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16:06:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c912, &(0x7f0000000200)=ANY=[@ANYBLOB='nobarrier,noblock_validity,nogrpid,bh,max_batch_time=0x0000000000000400,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',jqfmt=vfsold,i_version,resgid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x4de, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) chmod(&(0x7f00000000c0)='./file0/file1/../file0/file0/file0\x00', 0x0) [ 102.923887][ T3324] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 16:06:13 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000200)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 102.989922][ T4718] loop3: detected capacity change from 0 to 512 [ 103.016848][ T4718] EXT4-fs: Ignoring removed bh option [ 103.022361][ T4718] EXT4-fs: Ignoring removed i_version option [ 103.039591][ T4718] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.069876][ T4718] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.123704][ T3324] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.145295][ T4718] EXT4-fs (loop3): 1 truncate cleaned up 16:06:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1}, 0x0) [ 103.170262][ T3324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.179480][ T4718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.194860][ T3324] usb 2-1: Product: syz [ 103.200259][ T3324] usb 2-1: Manufacturer: syz 16:06:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 16:06:13 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 103.224480][ T3324] usb 2-1: SerialNumber: syz [ 103.233023][ T4034] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 103.290999][ T3569] EXT4-fs (loop3): unmounting filesystem. 16:06:13 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 103.359103][ T27] audit: type=1326 audit(1712592373.876:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4727 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48b1e7de69 code=0x0 16:06:13 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_journal_start\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) 16:06:14 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000003e00), 0x0, 0x0) open(0x0, 0x200, 0x0) open$dir(0x0, 0xa, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x104, &(0x7f0000000040), &(0x7f0000000080)=0x2) 16:06:14 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/3440], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16:06:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000200)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c000000840000000220000000000080000000000000000000000001000000000000000000000000a857dd58a8e15f5ce49ba8879c179fca47445e58060000000000000074e4677fddaa"], 0x2c}, 0x0) 16:06:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c912, &(0x7f0000000200)=ANY=[@ANYBLOB='nobarrier,noblock_validity,nogrpid,bh,max_batch_time=0x0000000000000400,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',jqfmt=vfsold,i_version,resgid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x4de, &(0x7f0000000540)="$eJzs3U1rXHsZAPDnnGRq2qYmRRe1YC22khTtTNLYNrioCqKrglr3NSaTEDLJhMykbULRFD+AIKKCK1duBD+AIP0IIhR0LyqK3Nveu7iLezuXmTnTm6YzeeHOS0l+PziZ/3mZPM8zw/zP/M85zAngxLocETci4mWtVrsWEWPZ8jSbnp6NiJ3mdi+eP56vT0nUavfeSSLJltW3n9z1P7OnxEhE/PB7ET9J3oxb2dpemSuVihvZfKG6ul6obG1fX16dWyouFddmZqZvzd6evTk71ZU6RyPiznf+8+tf/OG7d/7ytYf/vP+/yZ8m2fLYVUe3NUvPNV6LluGI2OhFsAEYyurJDToRAAAOpfU9/8sRcS3GYqjxbQ4AAAA4TmrfHI0Pk4gaAAAAcGyljWtgkzSfXQcwGmmazzev4f18nElL5Ur1q4vlzbWF5rWy45FLF5dLxansWuHxyCX1+elG+5P5G6/mI2K5VJyJiPMR8aux0431+flyaWHQBz8AAADghDi7Z/z//lhz/H9ItaGeZgcAAAB0zfigEwAAAAB6zvgfAAAAjj/jfwAAADjWvn/3bn2qte5/vfBga3Ol/OD6QrGykl/dnM/PlzfW80vl8lLjN/tWD/p/pXJ5/euxtvmoUC1WqoXK1vb91fLmWvX+8mu3wAYAAAD66PyXnv4jiYidb5xuTHWnBp0U0BfDR9n4373LA+g/v98LJ9eR9v/AsZIbdALAwCUHrO948c5fu58LAADQGxNfaH/+Pznw2MBO2qcUgR5x/A9OLuf/4eRy/h9OrlwMRTaQT3YGnQwwEL0//1+rHSkhAACg60YbU5LmIxrHAUYjTfP5iHON2wLkksXlUnEqIj4bEX8fy32mPj/deGZy4JgBAAAAAAAAAAAAAAAAAAAAAAAAAGiq1ZKoAQAAAMdaRPrfJLv/18TY1dG9xwdOJR+MNR4j4uHv7v3m0Vy1ujFdX/7uq+XV32bLbwziCAYAAACwV2uc3hrHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA3vXj+eL419TPu/78dEePt4g/HSONxJHIRcea9JIZ3PS+JiKEuxN95EhEX2sVP6mnFeJZFu/inBxg/jYizXYgPJ9nTev/zrXafvzQuNx7bf/5uNXqoT69z/5e+6v+GOvQ/5w4Z4+KzPxU6xn8ScXG4ff/Tip90iH/lkPF//KPt7U7rar+PmGi7/0lei1Worq4XKlvb15dX55aKS8W1mZnpW7O3Z2/OThUWl0vF7G/bGL/84p9f7lf/mQ7xxw+o/+oh6//o2aPnn2s2c+3iT15p//5f6BA/zfZ9X8na9fUTrfZOs73bpT/+7dJ+9S90qP+g93/ykPVf+8HP/3XITQGAPqhsba/MlUrFjb2N1s6+zarj1zjw1divUX+l3ooqNI7a+NnbkcagGiP7fboH1ycBAAC98eYYGAAAAAAAAAAAAAAAAAAAAOi3fv66XsvOYEoFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXxwEAAP///EnRzA==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) chmod(&(0x7f00000000c0)='./file0/file1/../file0/file0/file0\x00', 0x0) 16:06:14 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) pread64(r0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 103.809199][ T4743] loop2: detected capacity change from 0 to 512 [ 103.817451][ T4743] EXT4-fs: Ignoring removed bh option [ 103.823962][ T4743] EXT4-fs: Ignoring removed i_version option [ 103.832708][ T4743] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 16:06:14 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 103.854410][ T4743] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended 16:06:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8943, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r4], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r6, 0x8943, 0x20000000) [ 103.921873][ T4743] EXT4-fs (loop2): 1 truncate cleaned up [ 103.928151][ T4743] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.939560][ T3589] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5) 16:06:14 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) write$cgroup_subtree(r1, 0x0, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) 16:06:14 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) [ 104.034875][ T3560] EXT4-fs (loop2): unmounting filesystem. 16:06:14 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:14 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008070000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0x32600) 16:06:14 executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="f9021480bb58", 0x6}], 0x2}, 0x0) 16:06:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 104.393716][ T3324] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 104.400502][ T3324] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 104.423756][ T3324] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 104.603565][ T3324] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 104.638262][ T3324] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 104.666811][ T3324] usb 2-1: USB disconnect, device number 3 [ 104.679705][ T3324] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) 16:06:15 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) 16:06:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 16:06:15 executing program 0: io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) io_submit(r0, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) dup2(r2, r1) 16:06:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1}, 0x0) 16:06:15 executing program 4: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 16:06:15 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) listen(r0, 0x9) 16:06:15 executing program 3: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000780)) 16:06:15 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r3}, 0x10) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 16:06:15 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x9204, 0x0) 16:06:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x22, 0x10, {[@local=@item_4, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x0, "3aff20fe"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) 16:06:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:15 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) 16:06:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 16:06:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r2}, 0x10) write$cgroup_type(r1, &(0x7f0000000180), 0x2000) 16:06:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x1, r2, 0xb}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000080), 0x0, r2, 0x4}) 16:06:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000080), 0x0, r2, 0x4}) [ 105.713473][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd 16:06:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xff05, 0x0, 0x0, 0x8, 0x0, "0000000100"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x1a) 16:06:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r1, @ANYBLOB="01"], 0x1dc}}, 0x0) 16:06:16 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) 16:06:16 executing program 3: syz_usb_connect(0x0, 0x51, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x43, 0x75, 0xd0, 0x8, 0x54c, 0x257, 0xd6f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x6b, 0x85, 0x61, 0x0, [], [{{0x9, 0x5, 0xd}}, {{0x9, 0x5, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x2}]}}, {{0x9, 0x5, 0x2}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x23, &(0x7f0000000180)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "041c2db96d034c5fb76390755ceb26b5"}, @ss_cap={0xa}]}}) 16:06:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(0x4) close(0x5) 16:06:16 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000640)='ext4_da_reserve_space\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='ext4_da_reserve_space\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) [ 106.083690][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.101692][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.115224][ T14] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 16:06:16 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0xde, 0xe6, 0x7f, 0x10, 0x1a72, 0x1013, 0x8766, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0x9e, 0xc2}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7}, @generic={0x3}]}}) [ 106.141319][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.167785][ T14] usb 1-1: config 0 descriptor?? 16:06:16 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000140)={0x0, [0x10000002, 0x14, 0x604], [{0x7fffffff}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}) 16:06:16 executing program 4: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="780230"], 0x10) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000001200)=0x8) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=ANY=[], 0x10) 16:06:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700), 0x10, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/152, 0x98}, {&(0x7f0000000200)=""/76, 0x4c}], 0x2}, 0x0) sendmmsg(r1, &(0x7f0000000080), 0x10, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000000)={0x0, 0x8}, 0x10) close(r1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202ff"], 0x1) r3 = socket(0x2, 0x8002, 0x0) connect$unix(r3, &(0x7f0000000000)=ANY=[], 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13"], 0x3e}, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 106.296888][ T4351] usb 4-1: new high-speed USB device number 6 using dummy_hcd 16:06:16 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) 16:06:16 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:16 executing program 1: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x20}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) memfd_create(&(0x7f0000006e80)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\x950\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x01\x00\x00\x00\xa3\xb9\xff\xff\xebw\xdeM\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x00\x00v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\x00\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\x18\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x9d\x8e\x0f\x14Uc\x15n\xd5!}\x00+\xa5\xdcxUY3\x9b\xe7\xa1\x95\xc8\xf4G\xc3G\xf0\xed+\xa4\xec~7\xf3\"\x9c\x9e\xfaN\xc5\x8cM\xa7D\xb5\xe5\xfb\xda\xbc\x8a\xdc\x8adI\r\fO\xa7-\x98\xa3FM\xc2', 0x0) 16:06:17 executing program 4: unshare(0x60600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4010ae68, 0x0) 16:06:17 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}}}, 0x2) 16:06:17 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 106.524016][ T4350] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.548124][ T3568] Bluetooth: hci2: Malformed HCI Event [ 106.556861][ T4351] usb 4-1: Using ep0 maxpacket: 8 [ 106.656278][ T14] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 106.676624][ T14] plantronics 0003:047F:FFFF.0004: item fetching failed at offset 11/15 [ 106.687150][ T14] plantronics 0003:047F:FFFF.0004: parse failed [ 106.694250][ T14] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 16:06:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 106.783579][ T4350] usb 3-1: Using ep0 maxpacket: 16 [ 106.814095][ T4351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 106.824367][ T4351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.836309][ T4351] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 106.847178][ T4351] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 106.872944][ T4346] usb 1-1: USB disconnect, device number 4 [ 106.893520][ T3580] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.053582][ T4351] usb 4-1: New USB device found, idVendor=054c, idProduct=0257, bcdDevice=d6.f5 [ 107.062771][ T4351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.071538][ T4351] usb 4-1: Product: syz [ 107.076297][ T4351] usb 4-1: Manufacturer: syz [ 107.081144][ T4351] usb 4-1: SerialNumber: syz [ 107.091251][ T4351] usb 4-1: config 0 descriptor?? [ 107.163587][ T3580] usb 2-1: Using ep0 maxpacket: 32 [ 107.204028][ T4350] usb 3-1: New USB device found, idVendor=1a72, idProduct=1013, bcdDevice=87.66 [ 107.213530][ T4350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.221720][ T4350] usb 3-1: Product: syz [ 107.227464][ T4350] usb 3-1: Manufacturer: syz [ 107.232199][ T4350] usb 3-1: SerialNumber: syz [ 107.241883][ T4350] usb 3-1: config 0 descriptor?? [ 107.293576][ T3580] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 107.304124][ T4350] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 107.312011][ T3580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 107.327314][ T4350] ftdi_sio ttyUSB0: unknown device type: 0x8766 [ 107.352751][ T4350] usb 4-1: USB disconnect, device number 6 16:06:17 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) pwrite64(r0, &(0x7f0000000e80)="1d06322d5964373db9c764414c456f48173b82a7d643e95e8c49590b111f65892f6e00dda6329378ef42480a52b61bf1de404dc073cefc7f306e11861f13318ac621f76bd941de2a450a799b556a67d06c4e3d25acd316014af302414a86a64071a48b94990090f74ecd08e96e07c2a53e70561d604d09f8f8121dde126770fc8dd38580844b8c49a36d4092820ed84843f0cb7521c7fc99616dc163d80c63b5172cbd1df0662cd60c252bc39a9dcabe05da3502b6336f4c0f18e2f03adabe30", 0xffffffe9, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x301, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sendmmsg$inet(r2, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000100)="95", 0x7ffff000}, {&(0x7f0000000180)="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", 0xd00}], 0x2}}], 0x3e, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)=ANY=[], 0x118}}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) readv(r4, &(0x7f0000001200)=[{&(0x7f0000000000)=""/52, 0x34}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xffff, 0x0, 0x0, 0x6, 0x0, "1a5a4c00"}) sendfile(r1, r0, 0x0, 0x1000000000006) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, r5, 0x0) setrlimit(0x0, 0x0) memfd_create(0x0, 0x0) syz_clone(0x0, 0x0, 0x4, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 107.504230][ T3580] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 107.505086][ T3324] usb 3-1: USB disconnect, device number 5 [ 107.513691][ T3580] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 107.528654][ T3580] usb 2-1: Product: syz [ 107.534919][ T3580] usb 2-1: Manufacturer: syz [ 107.539814][ T3580] usb 2-1: SerialNumber: syz [ 107.545708][ T3324] ftdi_sio 3-1:0.0: device disconnected [ 107.548418][ T3580] usb 2-1: config 0 descriptor?? 16:06:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) [ 107.597707][ T3580] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 107.618154][ T3580] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 16:06:18 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000014c0)=""/4096, 0x1002}], 0x1}, 0x0) 16:06:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = memfd_create(&(0x7f00000000c0)='\x03\xdb\xcc[\xd2\xfa\x8b\x8b\xaf\'\x1eq19d\xc0\xa3w\xcc\xcb\x82\x81\xbf`\xef\xd2\xfc\xc0b\x16f\xdc\xb7\xd6vS\xd3P\x9e\x00\xed\x12\xd1\x1d\xa3\xf9\xeb\x8d\xfc\x17\xff\x03\xe6Y\x8b\xfe\x05\'\x92{\x9a\xd0\x81\xc7\x04\x13\xff\xff-=\xf9Lp\xa6\xdc>\x1a\xde$\xc3\x8e\r.\xd4\xff&[\\', 0x0) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[], 0xb0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 16:06:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x0) getdents64(r0, 0x0, 0x0) [ 107.802751][ T3580] usb 2-1: USB disconnect, device number 4 [ 107.831064][ T3580] ldusb 2-1:0.0: LD USB Device #0 now disconnected 16:06:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x81) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7ff, 0x0, 0x0, 0x0, 0x0, "3afce10ceb6d35d5e280c8200aaf534d50631a"}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffc00, 0x0, 0x0, 0x0, 0x0, "85210389f770c9d45e0ce7016fee42f4fccc41"}) 16:06:18 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 107.951060][ T4867] loop3: detected capacity change from 0 to 512 [ 107.966099][ T4867] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem 16:06:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) [ 107.999655][ T4867] EXT4-fs (loop3): orphan cleanup on readonly fs [ 108.009601][ T4867] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz-executor.3: bad orphan inode 15 [ 108.026099][ T4867] ext4_test_bit(bit=14, block=18) = 1 [ 108.031755][ T4867] is_bad_inode(inode)=0 [ 108.046609][ T4867] NEXT_ORPHAN(inode)=1023 [ 108.051176][ T4867] max_ino=32 [ 108.058260][ T4867] i_nlink=0 [ 108.079459][ T4867] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.3: corrupted xattr block 19 16:06:18 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000140)={0x0, [0x10000002, 0x14, 0x604], [{0x7fffffff}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 108.095913][ T4867] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 108.109285][ T4867] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. 16:06:18 executing program 2: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000200)='./file0\x00', 0x0, 0x101003, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2300003, &(0x7f0000000040)=ANY=[], 0x8, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 16:06:18 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0xa1b, "c7080000000000000009a0721972dd40cb00000000000800"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x183240, 0x0) read$ptp(r1, &(0x7f00000000c0)=""/8, 0x8) 16:06:18 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) pwrite64(r1, &(0x7f0000000000)="19", 0x1, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x22, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfffffcdd) syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001880)=[{0x0}], 0x1, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0) [ 108.206667][ T4867] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path /root/syzkaller-testdir1185701083/syzkaller.zavuTv/108/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 108.291961][ T3569] EXT4-fs (loop3): unmounting filesystem. 16:06:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x81) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7ff, 0x0, 0x0, 0x0, 0x0, "3afce10ceb6d35d5e280c8200aaf534d50631a"}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffc00, 0x0, 0x0, 0x0, 0x0, "85210389f770c9d45e0ce7016fee42f4fccc41"}) 16:06:18 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0xde, 0xe6, 0x7f, 0x10, 0x1a72, 0x1013, 0x8766, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0x9e, 0xc2}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7}, @generic={0x3}]}}) 16:06:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) 16:06:19 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000140)={0x0, [0x10000002, 0x14, 0x604], [{0x7fffffff}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}) 16:06:19 executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000000000000000001"], 0x18}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000100)="95", 0x7ffff000}, {&(0x7f0000000180)="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", 0xd00}], 0x2}}], 0x3e, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r2, 0x0) [ 108.490538][ T27] audit: type=1326 audit(1712592379.006:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4880 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c327de69 code=0x0 16:06:19 executing program 2: unshare(0x60600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4010ae68, 0x0) 16:06:19 executing program 2: r0 = memfd_create(&(0x7f0000000040)='}\xa4-}{\x00', 0x2) r1 = dup(r0) fcntl$addseals(r0, 0x409, 0x6) socket$unix(0x1, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8000002) pwritev(r1, &(0x7f0000001140)=[{&(0x7f0000000080)='V', 0x1}], 0x1, 0x0, 0x0) 16:06:19 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @random="d8928afb7028"}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 108.763556][ T3580] usb 2-1: new high-speed USB device number 5 using dummy_hcd 16:06:19 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f00000007c0)='gid=0,no98\xb0\x89\x99\x81\x02\x85\x1cE\b\x00\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[G\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2<\xa6\xd3\xce%\b#0\x9a\xb1\x92\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xec\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9cB\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd9\x87\xa8-\x14\x9e>\x82zw\xdf\xe2f\x83[\xc1\a\x03\xa9\xd7\x8ai>%\x94\xa4\xce\xb68Y\xc2\xa8\xc8\xf1\x9f6\xf6\x84\x04\xddDw\xd6\t\xb9\x8eQ\xc3\xc6\xd9\x1b\xa0@,\xf2I\xad\xd4\x87\x01\xda{:\xf0\x84w\xea\xb9\f\x17\xde\xc5\xcd4^X\xfem\x06\xe6P\xc5\xd1>\x0e\x0f\xc5\xfe\x8a\xd7\xcfo\xb1\xaa\xdak\xe7W\xfbD\xee8\xde\x00@\x970\xd8j\xa4]%\x99\xc4\xc7jA\xf4R\x10\x0e7w\xd3\xfa\x88\xbcD9X\f\xf4\f\xff\x04\xbf)Z?\n\xa2\xefn\xf9\xbf6\xcd\x82\xf4Wn\xe5\xb8\xc1\x16\x8aX]\xc9h=\x04c\x01]\xc6j6\t\xd2\xed\x80\x10A\f\x17A8\xe6Z\x186\x1al\f\x05\x1b:K\x01\xac*\x11i\xa8\xf0\x15Z\xe9\b.5\x01\x00\xa6\xc9\xd1g\x85\xda\xaa)\xab\xa4}dq\xab\xdd\xa5\xbb}\x1d+stp\xe2\x04\x00') 16:06:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x16e, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) 16:06:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x81) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7ff, 0x0, 0x0, 0x0, 0x0, "3afce10ceb6d35d5e280c8200aaf534d50631a"}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffc00, 0x0, 0x0, 0x0, 0x0, "85210389f770c9d45e0ce7016fee42f4fccc41"}) 16:06:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5452, 0x0) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, 0x0, 0x0) 16:06:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 16:06:19 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 109.026945][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 109.040347][ T3580] usb 2-1: Using ep0 maxpacket: 16 16:06:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, 0x0, 0x3d) 16:06:19 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 16:06:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x8, 0x0, &(0x7f0000000180)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 16:06:19 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 16:06:19 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f90000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000b5b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='mm_page_alloc\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001d80)="8d", 0x33fe0}], 0x1}, 0x8040) 16:06:19 executing program 0: ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x5451, 0x0) 16:06:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x81) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7ff, 0x0, 0x0, 0x0, 0x0, "3afce10ceb6d35d5e280c8200aaf534d50631a"}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffc00, 0x0, 0x0, 0x0, 0x0, "85210389f770c9d45e0ce7016fee42f4fccc41"}) 16:06:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x280008a, &(0x7f0000000040)={[{@numtail}, {@shortname_win95}, {@shortname_win95}, {@fat=@nfs}, {@numtail}, {@rodir}, {@utf8no}, {@fat=@flush}, {@shortname_mixed}, {@shortname_win95}, {@shortname_winnt}, {@shortname_win95}, {@fat=@uid}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}]}, 0x97, 0x2a9, &(0x7f0000002300)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r0, 0x2007ffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 16:06:19 executing program 0: r0 = semget(0x2, 0x3, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1) 16:06:20 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$setlease(r0, 0xa, 0x1) [ 109.460898][ T4931] loop3: detected capacity change from 0 to 256 [ 109.482036][ T3580] usb 2-1: New USB device found, idVendor=1a72, idProduct=1013, bcdDevice=87.66 [ 109.499565][ T3580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 16:06:20 executing program 0: semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000001880)=""/4096) [ 109.525915][ T3580] usb 2-1: Product: syz [ 109.544676][ T3580] usb 2-1: Manufacturer: syz [ 109.550443][ T27] audit: type=1800 audit(1712592380.066:13): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048595 res=0 errno=0 [ 109.556266][ T3580] usb 2-1: SerialNumber: syz 16:06:20 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000080)='+\'\x02@\x00', 0x0) r1 = mq_open(&(0x7f0000000100)='%\x00', 0x40, 0x0, 0x0) dup2(r0, r1) fstatfs(r1, &(0x7f00000006c0)=""/76) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) pwritev(r1, 0x0, 0x0, 0x8, 0x80000001) [ 109.620576][ T3580] usb 2-1: config 0 descriptor?? 16:06:20 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 109.664811][ T3580] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 109.675681][ T3580] ftdi_sio ttyUSB0: unknown device type: 0x8766 16:06:20 executing program 2: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r3}) 16:06:20 executing program 4: r0 = semget(0x2, 0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000280)={{0x2}}) 16:06:20 executing program 0: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setrlimit(0x1, 0x0) socket(0x28, 0x4, 0x8) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = mq_open(&(0x7f0000000040)=',*{[[*\x00', 0x40, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1}) ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f0000000100)) 16:06:20 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 16:06:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000980)='jbd2_handle_stats\x00', r0}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 16:06:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xffffff46) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0xffffff46) r3 = dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000ec0)={0x10}, 0x10}], 0x1}, 0x0) rt_sigreturn() write$P9_RFLUSH(r1, &(0x7f0000000300)={0x7}, 0x7) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x78) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) write$9p(r3, &(0x7f0000000380)="d8", 0x1) [ 109.905988][ T3562] usb 2-1: USB disconnect, device number 5 [ 109.934890][ T3562] ftdi_sio 2-1:0.0: device disconnected 16:06:20 executing program 1: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r3}) 16:06:20 executing program 3: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)={[0xf5b2]}, 0x8) r0 = mq_open(&(0x7f0000000240)='!Y\xc7\n\xc6$\xd39P\xc2\xd1\x15\xc4\x83\x00Z\x03\xc2\xa6E5\xdf\xb3\x0e\xb1\xfa\xc1\xb8\xdaQ\xf1\xee\x1f\x13\xc7\x98kj\xb0\x01\xb1\xe5\xcc\xe4\xe2\xd3BRO\x14\xec\xe7\x1c\xae\xd2`\xc9\xe7y\x12\x82\xeb\xf415\xfb~\xa8\x00\x00\x00\xf0\xf9l\xacu\x04-4\a\x0e\x9e\xfc\x00'/95, 0x40, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x5451, 0x0) 16:06:20 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 16:06:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 16:06:20 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 16:06:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) sendto$inet6(r0, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000b80)="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", 0x5a4, 0x8000, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)='P', 0x1}], 0x1}}], 0x1, 0x0) [ 110.518093][ T27] audit: type=1326 audit(1712592381.036:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48b1e7de69 code=0x0 16:06:21 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:21 executing program 2: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 16:06:21 executing program 1: r0 = eventfd2(0x7, 0x80000) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) dup2(0xffffffffffffffff, 0xffffffffffffffff) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = mq_open(&(0x7f0000000080)='.^\x00', 0x40, 0x0, &(0x7f00000000c0)={0x7, 0x2, 0x6, 0x4}) read(r1, &(0x7f0000000100)=""/237, 0xed) 16:06:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = memfd_create(&(0x7f00000000c0)='\x03\xdb\xcc[\xd2\xfa\x8b\x8b\xaf\'\x1eq19d\xc0\xa3w\xcc\xcb\x82\x81\xbf`\xef\xd2\xfc\xc0b\x16f\xdc\xb7\xd6vS\xd3P\x9e\x00\xed\x12\xd1\x1d\xa3\xf9\xeb\x8d\xfc\x17\xff\x03\xe6Y\x8b\xfe\x05\'\x92{\x9a\xd0\x81\xc7\x04\x13\xff\xff-=\xf9Lp\xa6\xdc>\x1a\xde$\xc3\x8e\r.\xd4\xff&[\\', 0x0) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[], 0xb0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 16:06:21 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0xde, 0xe6, 0x7f, 0x10, 0x1a72, 0x1013, 0x8766, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0x9e, 0xc2}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7}, @generic={0x3}]}}) 16:06:21 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r0, 0x53f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, "0199ea422a95", @short="499c00d5e13c35f6"}}}}]}, 0x4c}}, 0x0) [ 110.888887][ T4973] loop2: detected capacity change from 0 to 8192 [ 110.918023][ T4973] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. 16:06:21 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x15, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 16:06:21 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) sendto$inet6(r0, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000b80)="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", 0x5a4, 0x8000, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)='P', 0x1}], 0x1}}], 0x1, 0x0) [ 111.025698][ T4973] syz-executor.2 (4973) used greatest stack depth: 19792 bytes left 16:06:21 executing program 3: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r3}) [ 111.123495][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd 16:06:21 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:21 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) 16:06:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$eJzs3V1rZGcdAPD/mcxkk91oovaiCq2LLewW3ZlN17ZBpFtBvCso1es1ZGdD2ElmyUzaTSiSxQ8giGjBG73yRvADCLIfQYSCvRcryqJbBXuhPeW8zL6kM81kNzOzTH4/eOY85/X/f2Ym531yAjixzkbEaxExExEvRMRiObxSltgvSjbdB3ffXstKEmn6xj+TSMph2WRJWTJnytnmik5fnd2966utVnO77G90N280Ort7FzY2V9eb682tS5eWX155ZeWllYvH0s6sXa9++28//8lvvvPqH7721l+u/OP8j7J8F8rxvXYct+I9qWXvxT3ViNgeRbAJmCnbU4veCwAAT7JsH//zEfGVfP9/MWbyvbnBZh+oJyPPDgAAADgO6eWF+F8SkQIAAABTq5LfA5tU6uW9AAtRqdTrxT28T8XpSqvd6X71Wntn62pxr+xS1CrXNlrNi+U9tUtRS7L+5XtnFIr+F/NxWUkeugf4Z4vz+fj6Wrt1dRInPAAAAOAEOnPg+P8/i8XxPwAAADBlliadAAAAADByjv8BAABg+j3C8f/sKPIAAAAARuK7r7+elbT3/Ourb+7uXG+/eeFqs3O9vrmzVl9rb9+or7fb6630VMTmYctrtds3vh5bOzcb3Wan2+js7l3ZbO9sda9sPPQIbAAAAGCMPvfl2+8lEbH/jfm8RO/a/syAGfxWAKZGZcjp0uzl/dHmAozXoM08MP2qnz7abb4wxWpFJ5l0HsDkHLYCmBs0xR9HkQ0AADAK5754+700+eT1/+r9cwPAlBr2+j8wfQZc/08Xx50IMHaHXP8HpljNHYBw4h1+/X+Aoa//p+mhywIAAEZqIS9JpV5eC1yIyodpIZaillzbaDUvRsRnI+LPi7VTWf9yPmfiRwMAAAAAAAAAAAAAAAAAAAAAAAAAMKQ0TSJ9BNVHmgsAAACYhIjK35Py+V/nFp9fOHh+YDb5MH8U8Edpmr71yzd+cXO1291ezob/Kx8+GxHdd8rhL07iDAYAAADQ03vKf3GcXptwNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMqw/uvr3WK+OMe+dbEbHUL3415vLuXNQi4vS/k6g+MF8SETPHEH//VkQ83S9+kqUVS2UWB+NXImI+z2Lk8Z9J07Rv/DOPHR1OttvZ+ue1fn9/lTibd/v//VeLcvlx4w9e/1Xurf9mDsavFuu/zwwZ40vv/q7xQO8P7ldPFeOr/dc/vfjJgPXvc/2CVT856Iff39sblFv664hzfbc/yUOxGt3NG43O7t6Fjc3V9eZ6c+vSpeWXV15ZeWnlYuPaRqtZvvaN8dNnfv/RoPh3zkacLuPP9nIqNyxLReebZftXD7b/+axSG7Tk+/7/7s27XyiqtQOLiDu3Is4/1//zfzrv9n3/f/XfNJdvB7Lx58ptQrJf1CPKr29EPPvbPz07sP235sra0T//84c3PffC93781yEnBQDGoLO7d3211Wpuj7zyTpqmw02c7ZU+XqxsB+6YWzEfEQNG9Y8Vwy75qYGpvj8fMaZP56iVy0eZOD11pC9bsv8ENPAEV2bzL+Sk10wAAMBxu7/3P+lMAAAAAAAAAAAAAAAAAAAA4OQax/8VOxhzfzJNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4VB8HAAD//5/G1lI=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 16:06:21 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) 16:06:21 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 16:06:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040)=0x9, 0x4) [ 111.320600][ T4994] loop3: detected capacity change from 0 to 512 [ 111.359899][ T4994] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 111.393431][ T14] usb 2-1: Using ep0 maxpacket: 16 16:06:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) sendto$inet6(r0, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000b80)="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", 0x5a4, 0x8000, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)='P', 0x1}], 0x1}}], 0x1, 0x0) [ 111.438670][ T4994] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.458720][ T4994] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz-executor.3: bad orphan inode 15 [ 111.476786][ T4994] ext4_test_bit(bit=14, block=18) = 1 [ 111.482780][ T4994] is_bad_inode(inode)=0 [ 111.487205][ T4994] NEXT_ORPHAN(inode)=1023 [ 111.491574][ T4994] max_ino=32 [ 111.495000][ T4994] i_nlink=0 [ 111.511046][ T4994] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.3: corrupted xattr block 19 [ 111.528379][ T4994] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) 16:06:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x22, 0x10, {[@local=@item_4, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x0, "3aff20fe"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) [ 111.542828][ T4994] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. 16:06:22 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000300)=0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x48, 0x0, &(0x7f0000000500)=[@register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000005c0)='^'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) [ 111.630797][ T3569] EXT4-fs (loop3): unmounting filesystem. 16:06:22 executing program 3: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r3}) [ 111.753582][ T14] usb 2-1: New USB device found, idVendor=1a72, idProduct=1013, bcdDevice=87.66 [ 111.767189][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.775696][ T14] usb 2-1: Product: syz [ 111.780142][ T14] usb 2-1: Manufacturer: syz [ 111.785464][ T14] usb 2-1: SerialNumber: syz [ 111.792407][ T14] usb 2-1: config 0 descriptor?? 16:06:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x10, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0xfe, 0x244, &(0x7f0000000780)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0xc000, 0x1) [ 111.834744][ T14] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 111.849871][ T14] ftdi_sio ttyUSB0: unknown device type: 0x8766 [ 111.873387][ T4350] usb 1-1: new high-speed USB device number 5 using dummy_hcd 16:06:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) [ 111.925358][ T5012] loop3: detected capacity change from 0 to 128 [ 112.007174][ T27] audit: type=1326 audit(1712592382.526:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e17e7de69 code=0x0 [ 112.052769][ T3580] usb 2-1: USB disconnect, device number 6 [ 112.079777][ T3580] ftdi_sio 2-1:0.0: device disconnected [ 112.083063][ T5012] EXT4-fs (loop3): Test dummy encryption mode enabled [ 112.104177][ T5012] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.118628][ T5012] ext4 filesystem being mounted at /root/syzkaller-testdir1185701083/syzkaller.zavuTv/120/mnt supports timestamps until 2038 (0x7fffffff) 16:06:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000440)={@local, @random="408e14d3d536", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1367d4", 0x34, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0xaa, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @sack={0x5, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) [ 112.264378][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.275661][ T4350] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.289977][ T4350] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.299285][ T5025] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 112.300257][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.321962][ T4350] usb 1-1: config 0 descriptor?? 16:06:22 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) sendto$inet6(r0, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000b80)="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", 0x5a4, 0x8000, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)='P', 0x1}], 0x1}}], 0x1, 0x0) [ 112.360423][ T5012] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" 16:06:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) readv(r0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000d00)=""/129, 0x81}], 0x2) 16:06:22 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @random="408e14d3d536", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1367d4", 0x14, 0x2f, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:06:23 executing program 4: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r3}) [ 112.448048][ T3569] EXT4-fs (loop3): unmounting filesystem. 16:06:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:23 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000300)=0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x48, 0x0, &(0x7f0000000500)=[@register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000005c0)='^'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) 16:06:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 16:06:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000980), 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 16:06:23 executing program 3: r0 = memfd_create(&(0x7f0000001d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81\x01\x00\x00\x00\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea%\xc0\xe9\x9d,K\x97\xe1m|g', 0xd) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffff1f, 0x12, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000600)=[{&(0x7f0000000d00)=""/4096, 0x1000}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/74, 0x4a}], 0x1, 0x0) [ 112.694604][ T5041] loop1: detected capacity change from 0 to 512 [ 112.736806][ T5041] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 112.785090][ T5041] EXT4-fs (loop1): orphan cleanup on readonly fs [ 112.809391][ T5041] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 15 [ 112.825762][ T4350] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 16:06:23 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup3(r1, r0, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) 16:06:23 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r2, 0x15, 0x0, @val=@netkit={@prog_id}}, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) [ 112.843657][ T4350] plantronics 0003:047F:FFFF.0005: item fetching failed at offset 11/15 [ 112.852751][ T4350] plantronics 0003:047F:FFFF.0005: parse failed [ 112.859610][ T5041] ext4_test_bit(bit=14, block=18) = 1 [ 112.859631][ T5041] is_bad_inode(inode)=0 [ 112.859641][ T5041] NEXT_ORPHAN(inode)=1023 [ 112.859650][ T5041] max_ino=32 [ 112.859659][ T5041] i_nlink=0 [ 112.883336][ T4350] plantronics: probe of 0003:047F:FFFF.0005 failed with error -22 16:06:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f", 0xa, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 112.902611][ T5041] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 112.927599][ T5041] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 112.940506][ T5041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. 16:06:23 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:23 executing program 1: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r3}) 16:06:23 executing program 4: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000300)=0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x48, 0x0, &(0x7f0000000500)=[@register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000005c0)='^'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) 16:06:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') lseek(r0, 0xd7, 0x0) read$FUSE(r0, &(0x7f0000005fc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f00000008c0)=ANY=[@ANYRES64=r1, @ANYRES64, @ANYBLOB="d4d50a5aed31672d023e59b2e923948b58e5a3c7042e867719a5905d6ba3c139a22a8d582a9c8a94dc76c89e42e78449c2b7ea9bc4e80ce16cf05f57a736d9ea4c7c2403060664a1c85546afbe157d8d43e3d54300a6a6574c8412549f89f1ea5270a4b4048b41435a5c31a00e3560bd4b0ea339", @ANYRESHEX, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r2], 0x1, 0x14fb, &(0x7f0000002a80)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) [ 113.085708][ T3561] EXT4-fs (loop1): unmounting filesystem. [ 113.104785][ T3607] usb 1-1: USB disconnect, device number 5 16:06:23 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) [ 113.200818][ T5059] loop2: detected capacity change from 0 to 256 [ 113.262300][ T27] audit: type=1326 audit(1712592383.776:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5062 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa56987de69 code=0x0 16:06:23 executing program 2: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1, 0x168, &(0x7f0000000240)="$eJzs29tKOlEUx/HfqP9/ZudzdBUU1E2Op4Lu8lFEJ5PGkuxGCaJH6cl6Ab3oBZpolKnZBE2CDun3A7LXEhZr74vtLC9GAGbWhSRLltKSPM97vDq0tB/3pgBMhDdc3zwAsyfJ1QdmVL+c9J//LUkvrw/V3vCTjjg/9MsJf/34H9H7Uj8ftf7J8te9VLg+I2khyvzyPKg/Mvov/rJ/xqhfilw/OP/xQbh+WdKKpFVJa5LWJW1I2pS09U3/mtF/N2J/AAAAAACisJQ189AXCV02XCcX5P/8PB/k//28YOTFIJ/z82z11q2N6wgARpT44f4njfufMu4/gL+r3eleV1zXuSMgICAIgrh/mQCMm33fbNntTvek0azUnbpzUyidnpWK+fNcwfYnfzs8/wOYHp8P/bh3AgAAAAAAAAAAAAAARrUtaSfuTQAAAACYiEm8ThT3GQEAAAAAAAAAAAAAmHbvAQAA///oFUsF") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x4000) 16:06:23 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f", 0xa, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$eJzs3V1rZGcdAPD/mcxkk91oovaiCq2LLewW3ZlN17ZBpFtBvCso1es1ZGdD2ElmyUzaTSiSxQ8giGjBG73yRvADCLIfQYSCvRcryqJbBXuhPeW8zL6kM81kNzOzTH4/eOY85/X/f2Ym531yAjixzkbEaxExExEvRMRiObxSltgvSjbdB3ffXstKEmn6xj+TSMph2WRJWTJnytnmik5fnd2966utVnO77G90N280Ort7FzY2V9eb682tS5eWX155ZeWllYvH0s6sXa9++28//8lvvvPqH7721l+u/OP8j7J8F8rxvXYct+I9qWXvxT3ViNgeRbAJmCnbU4veCwAAT7JsH//zEfGVfP9/MWbyvbnBZh+oJyPPDgAAADgO6eWF+F8SkQIAAABTq5LfA5tU6uW9AAtRqdTrxT28T8XpSqvd6X71Wntn62pxr+xS1CrXNlrNi+U9tUtRS7L+5XtnFIr+F/NxWUkeugf4Z4vz+fj6Wrt1dRInPAAAAOAEOnPg+P8/i8XxPwAAADBlliadAAAAADByjv8BAABg+j3C8f/sKPIAAAAARuK7r7+elbT3/Ourb+7uXG+/eeFqs3O9vrmzVl9rb9+or7fb6630VMTmYctrtds3vh5bOzcb3Wan2+js7l3ZbO9sda9sPPQIbAAAAGCMPvfl2+8lEbH/jfm8RO/a/syAGfxWAKZGZcjp0uzl/dHmAozXoM08MP2qnz7abb4wxWpFJ5l0HsDkHLYCmBs0xR9HkQ0AADAK5754+700+eT1/+r9cwPAlBr2+j8wfQZc/08Xx50IMHaHXP8HpljNHYBw4h1+/X+Aoa//p+mhywIAAEZqIS9JpV5eC1yIyodpIZaillzbaDUvRsRnI+LPi7VTWf9yPmfiRwMAAAAAAAAAAAAAAAAAAAAAAAAAMKQ0TSJ9BNVHmgsAAACYhIjK35Py+V/nFp9fOHh+YDb5MH8U8Edpmr71yzd+cXO1291ezob/Kx8+GxHdd8rhL07iDAYAAADQ03vKf3GcXptwNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMqw/uvr3WK+OMe+dbEbHUL3415vLuXNQi4vS/k6g+MF8SETPHEH//VkQ83S9+kqUVS2UWB+NXImI+z2Lk8Z9J07Rv/DOPHR1OttvZ+ue1fn9/lTibd/v//VeLcvlx4w9e/1Xurf9mDsavFuu/zwwZ40vv/q7xQO8P7ldPFeOr/dc/vfjJgPXvc/2CVT856Iff39sblFv664hzfbc/yUOxGt3NG43O7t6Fjc3V9eZ6c+vSpeWXV15ZeWnlYuPaRqtZvvaN8dNnfv/RoPh3zkacLuPP9nIqNyxLReebZftXD7b/+axSG7Tk+/7/7s27XyiqtQOLiDu3Is4/1//zfzrv9n3/f/XfNJdvB7Lx58ptQrJf1CPKr29EPPvbPz07sP235sra0T//84c3PffC93781yEnBQDGoLO7d3211Wpuj7zyTpqmw02c7ZU+XqxsB+6YWzEfEQNG9Y8Vwy75qYGpvj8fMaZP56iVy0eZOD11pC9bsv8ENPAEV2bzL+Sk10wAAMBxu7/3P+lMAAAAAAAAAAAAAAAAAAAA4OQax/8VOxhzfzJNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4VB8HAAD//5/G1lI=") lseek(0xffffffffffffffff, 0x7ff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 113.419753][ T5067] loop2: detected capacity change from 0 to 64 16:06:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}, 0x1, 0x7}, 0x0) [ 113.550380][ T5071] loop1: detected capacity change from 0 to 512 [ 113.585751][ T5071] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 113.612721][ T5071] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.620207][ T5071] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 15 [ 113.637802][ T5071] ext4_test_bit(bit=14, block=18) = 1 [ 113.643610][ T5071] is_bad_inode(inode)=0 [ 113.648068][ T5071] NEXT_ORPHAN(inode)=1023 [ 113.652593][ T5071] max_ino=32 [ 113.656795][ T5071] i_nlink=0 16:06:24 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000002c0), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r0, 0x1) [ 113.665137][ T5071] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.1: corrupted xattr block 19 16:06:24 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net\x00') r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x1, 0x40000011, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x0) [ 113.746860][ T5071] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 113.773729][ T5071] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. 16:06:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80020, &(0x7f0000000540)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x2c, 0x38]}}}}]}) 16:06:24 executing program 1: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r3}) [ 113.858271][ T3561] EXT4-fs (loop1): unmounting filesystem. 16:06:24 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f", 0xa, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 113.941888][ T5082] devtmpfs: Bad value for 'mpol' 16:06:24 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1, 0x168, &(0x7f0000000240)="$eJzs29tKOlEUx/HfqP9/ZudzdBUU1E2Op4Lu8lFEJ5PGkuxGCaJH6cl6Ab3oBZpolKnZBE2CDun3A7LXEhZr74vtLC9GAGbWhSRLltKSPM97vDq0tB/3pgBMhDdc3zwAsyfJ1QdmVL+c9J//LUkvrw/V3vCTjjg/9MsJf/34H9H7Uj8ftf7J8te9VLg+I2khyvzyPKg/Mvov/rJ/xqhfilw/OP/xQbh+WdKKpFVJa5LWJW1I2pS09U3/mtF/N2J/AAAAAACisJQ189AXCV02XCcX5P/8PB/k//28YOTFIJ/z82z11q2N6wgARpT44f4njfufMu4/gL+r3eleV1zXuSMgICAIgrh/mQCMm33fbNntTvek0azUnbpzUyidnpWK+fNcwfYnfzs8/wOYHp8P/bh3AgAAAAAAAAAAAAAARrUtaSfuTQAAAACYiEm8ThT3GQEAAAAAAAAAAAAAmHbvAQAA///oFUsF") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x4000) 16:06:24 executing program 2: ioperm(0x0, 0xd6, 0x1f) setresuid(0x0, 0xee01, 0xee00) fanotify_init(0x0, 0x0) 16:06:24 executing program 0: r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 16:06:24 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2fad435442d6ea5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9"], 0x1, 0x54f6, &(0x7f0000005800)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) sendfile(r1, r0, 0x0, 0x100800001) 16:06:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$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") lseek(0xffffffffffffffff, 0x7ff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 16:06:24 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x4b) waitid(0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) [ 114.152853][ T5090] loop3: detected capacity change from 0 to 64 16:06:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r3 = signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20942, 0x0) pwrite64(r4, &(0x7f0000000100)='=', 0x1, 0x801b5ec) sendfile(r3, r4, 0x0, 0x1000000000006) splice(r0, &(0x7f0000000040), r1, 0x0, 0x808, 0x0) 16:06:24 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r1 = dup(r0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) [ 114.273692][ T5097] loop1: detected capacity change from 0 to 512 [ 114.311716][ T5097] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 114.366928][ T5097] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.379920][ T5097] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 15 [ 114.392534][ T5097] ext4_test_bit(bit=14, block=18) = 1 [ 114.398959][ T5097] is_bad_inode(inode)=0 [ 114.403687][ T5097] NEXT_ORPHAN(inode)=1023 [ 114.408276][ T5097] max_ino=32 [ 114.411751][ T5097] i_nlink=0 16:06:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f0005000000", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 114.416266][ T5097] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 114.429868][ T5097] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 114.442725][ T5097] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. 16:06:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) 16:06:25 executing program 0: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r3}) [ 114.565326][ T3561] EXT4-fs (loop1): unmounting filesystem. [ 114.591317][ T27] audit: type=1326 audit(1712592385.106:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5106 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e17e7de69 code=0x0 16:06:25 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) syz_clone(0x10080000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) 16:06:25 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x54, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@dmm={0x7}]}}}]}}]}}, 0x0) 16:06:25 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1, 0x168, &(0x7f0000000240)="$eJzs29tKOlEUx/HfqP9/ZudzdBUU1E2Op4Lu8lFEJ5PGkuxGCaJH6cl6Ab3oBZpolKnZBE2CDun3A7LXEhZr74vtLC9GAGbWhSRLltKSPM97vDq0tB/3pgBMhDdc3zwAsyfJ1QdmVL+c9J//LUkvrw/V3vCTjjg/9MsJf/34H9H7Uj8ftf7J8te9VLg+I2khyvzyPKg/Mvov/rJ/xqhfilw/OP/xQbh+WdKKpFVJa5LWJW1I2pS09U3/mtF/N2J/AAAAAACisJQ189AXCV02XCcX5P/8PB/k//28YOTFIJ/z82z11q2N6wgARpT44f4njfufMu4/gL+r3eleV1zXuSMgICAIgrh/mQCMm33fbNntTvek0azUnbpzUyidnpWK+fNcwfYnfzs8/wOYHp8P/bh3AgAAAAAAAAAAAAAARrUtaSfuTQAAAACYiEm8ThT3GQEAAAAAAAAAAAAAmHbvAQAA///oFUsF") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x4000) 16:06:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$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") lseek(0xffffffffffffffff, 0x7ff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 114.829229][ T5118] loop0: detected capacity change from 0 to 64 16:06:25 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r2, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000100081050000000000000089c8e5fa07", @ANYRES32=r3, @ANYBLOB="0000000000000000140012800a000100767863"], 0x34}}, 0x0) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x25) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r6], 0x24}}, 0x0) [ 115.080902][ T5121] loop3: detected capacity change from 0 to 512 [ 115.091048][ T3324] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.101612][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.120061][ T5121] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.149530][ T5121] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.161056][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.179888][ T5121] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz-executor.3: bad orphan inode 15 [ 115.291217][ T5121] ext4_test_bit(bit=14, block=18) = 1 [ 115.297745][ T5121] is_bad_inode(inode)=0 [ 115.302219][ T5121] NEXT_ORPHAN(inode)=1023 [ 115.307455][ T5121] max_ino=32 [ 115.310941][ T5121] i_nlink=0 [ 115.316898][ T5121] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.3: corrupted xattr block 19 [ 115.330557][ T5121] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) 16:06:25 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000500)={0x0, 0x0, 0xf0, {0xf0, 0x7, "bba87a81d94e553612049bfa68bf9c61306199bf74e4a088373d363db0f4ceba0c91624019d68607baf66a9446e0eac0b209f1cae6fa38cb25f67941900af7777eed17a2985cfd34b68862eb6b98adc70382fff4d8d539a4016ced619c882e26e4de61eeb39e1d528265012cbff2ed9a3c497bf3cc6441dd341cc3d5000619abc014a6f926d1b7d503bc077979bc63630a6f1951ce3a39b175a888554fb9d31bc767ecf50a1f8019392463433479321ebbda4bbcbc1ab638cd025deddfb83d80928a5ed07c569d35b387e2aec2ca6dfb6fe8e17c935a2ec2b22573204cf0dee5b4cdeeb66f40a4b289153a1fb355"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 115.340681][ T5121] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. 16:06:25 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x408}, {&(0x7f0000000fc0)=""/4096, 0x64}, {&(0x7f0000000400)=""/106, 0x56c}, {&(0x7f0000000740)=""/73, 0x17}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 16:06:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f0005000000", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 115.383222][ T3569] EXT4-fs (loop3): unmounting filesystem. [ 115.453655][ T3324] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 16:06:26 executing program 2: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65}) 16:06:26 executing program 0: r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x181, 0x0) [ 115.567089][ T3324] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.596047][ T3324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.618070][ T3324] usb 2-1: SerialNumber: syz 16:06:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000740)={[{@shortname_lower}, {@shortname_lower}, {@utf8}, {@utf8no}, {@shortname_mixed}, {@rodir}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe28}}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@numtail}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000140)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0x100800001) [ 115.684545][ T3324] cdc_ether: probe of 2-1:1.0 failed with error -22 16:06:26 executing program 4: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x0) getdents64(r0, 0x0, 0x0) 16:06:26 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r2, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000100081050000000000000089c8e5fa07", @ANYRES32=r3, @ANYBLOB="0000000000000000140012800a000100767863"], 0x34}}, 0x0) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x25) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r6], 0x24}}, 0x0) [ 115.861638][ T5140] loop0: detected capacity change from 0 to 256 [ 115.873223][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.886173][ T3324] usb 2-1: USB disconnect, device number 7 16:06:26 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 115.917081][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 115.927529][ T5144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:06:26 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f0005000000", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x808734, &(0x7f00000002c0)={[{@dioread_nolock}, {@delalloc}, {@quota}, {@noinit_itable}, {@data_err_abort}, {@errors_continue}, {@jqfmt_vfsv0}, {@data_err_abort}, {@noquota}, {@resuid}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@usrquota}, {@grpjquota}]}, 0xee, 0x474, &(0x7f0000000bc0)="$eJzs3E9sFNUfAPDvTP/Ajx/QioiCIFU0Nv5paUHl4EWjiSaamOihHmtbCFKooWsihGg1Bo+GxDvxaOLRi570YtSTiVe9GxKixAhyqpndmbI77BYK2650P59k2ff2vfa978682bfvMQ2gaw1l/yQRmyPi14gYqGUbKwzVnq5cOjP1z6UzU0ksLr7+R1Ktd/nSmamiavFz/88zw2lE+nGSN9Jo/tTpY5OzszMn8/xo5fg7o/OnTj959PjkkZkjMyfGDx06eGDsmafHn2pLnFlcl3e9P7d750tvnnt1auLcWz9+mfV3x55aeX0c7TKUBf7nYlW57JF2N9ZhW+rSSW/16au/O9YbblZPRGSHq686/geiJ3qXygbixY862jlgVWWfTRtaFy8sAutYEp3uAdAZxQd99v23eKzR1OM/4eJztS9AWdxX8ketpDfSvE7fKrY/FBETC1fPZ49YpXUIAIB632bznyeazf/S2FFXb2u+hzIYEXdFxLaIuDsitkfEPRHVuvdGxH0rbL+8NXT9/Ce9cEuB3aRs/vdsvrfVOP8rZn8x2JPntlTj70sOH52d2Z+/J8PRtyHLjy3Txncv/PJpq7L6+d9EsRCXzwXzfiTlLbnpycpkuyalFz+M2NXbLP5kaScga3xnROxa2a/eWiSOPvbF7laVGuJfuHo+a3+iIf5l9K6sQ80sfh7xaO34L0Qp/nh5KbXc/uToxpid2T9anBXX++nns6+1av+24m+D7Phvajz/SzUG/krq92vnV97G2d8+afmd5sbxpxd6SwvU2fnfn7xR3bPuz197b7JSOTkW0Z+8Us0vvb6xUjk5fu1nq/XGr9XP4h/e13j+FyN/W/6cxX9/RGQn8Z6IeCAi9uZ9fzAiHoqIfcvE/8PzD7996/Gvriz+6abXv6VLzmDj8V95oufY99+0av/mjv/Bamo4f6V6/buBci/SFh28nfcOAAAA7hRpRGyOJB1ZSqfpyEjt//Bvj03p7Nx85fHDc++emK7dIzAYfWmx0jVQtx46lizkv7GWL5ZcivID+brxZz3/q+ZHpuZmpzsYN1Ab583Gf+b3nlLlq01uZAHubG3YRwPuUOXxn3aoH8DaK4//vR3qB7D2zP+he91g/PevVT+Atdds/H9Qypf3AoD1wfwfupfxD93L+IfuZfxDV1ru5v2vb/2Wf4l1n4hWf1JBYl0kOn1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9Cw+3+") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000002380)=""/129, 0x18) getdents(r0, &(0x7f0000000180)=""/33, 0x21) 16:06:26 executing program 0: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) epoll_create1(0x0) epoll_create1(0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000400), 0x0, 0x0) r4 = epoll_create1(0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYRES32=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) [ 116.129642][ T5148] loop2: detected capacity change from 0 to 512 16:06:26 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000000c0)) [ 116.207636][ T3954] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 16:06:26 executing program 0: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65}) 16:06:26 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) [ 116.313505][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.333550][ T3580] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.349549][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.376931][ T14] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 16:06:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "17785e", 0x10, 0x4, 0x0, @empty, @mcast2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}}, 0x4a) [ 116.427744][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.449711][ T14] usb 4-1: config 0 descriptor?? 16:06:27 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:27 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f0005000000000006", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 116.542323][ T5160] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 116.553366][ T3580] usb 5-1: device descriptor read/64, error -71 16:06:27 executing program 0: mmap(&(0x7f00001be000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{}, {}, {0x6}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r0, 0x0) 16:06:27 executing program 1: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) epoll_create1(0x0) epoll_create1(0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000400), 0x0, 0x0) r4 = epoll_create1(0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYRES32=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) [ 116.729920][ T27] audit: type=1326 audit(1712592387.246:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5167 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48b1e7de69 code=0x0 16:06:27 executing program 1: r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1a000}, 0x2}, 0x0) connect$can_j1939(r1, &(0x7f0000000280)={0x1d, r2, 0x2}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) [ 116.833498][ T3580] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.936750][ T14] arvo 0003:1E7D:30D4.0006: item fetching failed at offset 0/7 [ 116.959215][ T14] arvo 0003:1E7D:30D4.0006: parse failed [ 116.981648][ T14] arvo: probe of 0003:1E7D:30D4.0006 failed with error -22 [ 117.077167][ T3580] usb 5-1: device descriptor read/64, error -71 [ 117.152304][ T3562] usb 4-1: USB disconnect, device number 7 [ 117.222731][ T3580] usb usb5-port1: attempt power cycle 16:06:27 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) write$FUSE_WRITE(r1, &(0x7f0000000100)={0xfffffeec}, 0xffffffd1) timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) write$FUSE_DIRENT(r1, &(0x7f0000002300)={0x10}, 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}, {r3, r4+60000000}}, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) 16:06:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x3e4}}, 0x0) 16:06:28 executing program 1: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65}) 16:06:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f0005000000000006", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 117.672263][ T5180] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.694568][ T3580] usb 5-1: new high-speed USB device number 4 using dummy_hcd 16:06:28 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x400}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xf, 0x2e, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 117.793438][ T3580] usb 5-1: device descriptor read/8, error -71 16:06:28 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) 16:06:28 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000740)=0x205, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000280), 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) 16:06:28 executing program 0: mlockall(0x1) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x31, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) mlockall(0x1) mount$9p_tcp(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) [ 118.073376][ T3580] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.193632][ T3580] usb 5-1: device descriptor read/8, error -71 [ 118.314970][ T3580] usb usb5-port1: unable to enumerate USB device 16:06:28 executing program 2: r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1a000}, 0x2}, 0x0) connect$can_j1939(r1, &(0x7f0000000280)={0x1d, r2, 0x2}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) [ 118.434554][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880594a7000: rx timeout, send abort 16:06:29 executing program 3: timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000740)=0x205, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000280), 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000400)=@gcm_256={{0x303}, "ff6506b8726b824d", "608cfbde3c61048162f1fc7a3bfd24edd3395c825a4c9627a3af60db94a05996", '\ft9W', "64966f3e51874eb2"}, 0x38) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) read$FUSE(r4, 0x0, 0x0) 16:06:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x800, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0xa}) [ 118.944436][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880594a7000: abort rx timeout. Force session deactivation 16:06:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 16:06:29 executing program 4: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) 16:06:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$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") r0 = open(0x0, 0x0, 0x0) lseek(r0, 0x7ff, 0x0) getdents64(r0, 0x0, 0x0) 16:06:29 executing program 2: r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1a000}, 0x2}, 0x0) connect$can_j1939(r1, &(0x7f0000000280)={0x1d, r2, 0x2}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:29 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x28ac1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = mq_open(&(0x7f0000000080)='!{@:\x00', 0x2, 0x65, &(0x7f0000001300)={0xa, 0x42, 0x404, 0xb}) r2 = socket(0xa, 0x2, 0x0) ioctl$TUNSETOWNER(r2, 0x5451, 0x0) dup3(r0, r1, 0x80000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5452, &(0x7f00000011c0)) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x5450, 0x0) r4 = timerfd_create(0x2, 0x1c0000) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = mq_open(&(0x7f0000000140)='!}+^{\x00', 0x40, 0x9, &(0x7f0000000180)={0x8, 0x9, 0x35, 0x4}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0x5450, 0x0) inotify_init1(0x0) getsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f00000001c0)=""/3, &(0x7f0000000200)=0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x5450, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x66c0000, 0x7d, 0x80}) ioctl$TIOCSCTTY(r6, 0x5450, 0x4) 16:06:29 executing program 4: r0 = io_uring_setup(0x766, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)="e9", 0x1}], 0x1}, 0x20044481) close_range(r0, 0xffffffffffffffff, 0x0) [ 119.392427][ T5210] loop1: detected capacity change from 0 to 512 [ 119.489742][ T5210] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 119.549587][ T5210] EXT4-fs (loop1): orphan cleanup on readonly fs [ 119.564197][ T5210] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 15 16:06:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) [ 119.698358][ T5210] ext4_test_bit(bit=14, block=18) = 1 [ 119.720514][ T5210] is_bad_inode(inode)=0 [ 119.739949][ T5210] NEXT_ORPHAN(inode)=1023 16:06:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200000c0000000000feff00760000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 119.772507][ T5210] max_ino=32 [ 119.775893][ T5210] i_nlink=0 [ 119.780891][ T5210] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 119.875684][ T5210] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 119.903069][ T5210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. 16:06:30 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f000500000000000600", 0x13, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 119.977434][ T3561] EXT4-fs (loop1): unmounting filesystem. 16:06:30 executing program 1: r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1a000}, 0x2}, 0x0) connect$can_j1939(r1, &(0x7f0000000280)={0x1d, r2, 0x2}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) [ 120.397394][ T27] audit: type=1326 audit(1712592390.906:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e17e7de69 code=0x0 16:06:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0xfffffffffffffffd) 16:06:31 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000480)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) [ 120.506184][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880597c5000: rx timeout, send abort 16:06:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x14, 0x0, 0x301}, 0x14}}, 0x0) 16:06:31 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1154}, {&(0x7f00000000c0)=""/250, 0x8}], 0x2, 0x0, 0xd64}}], 0x300, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r1, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x18, r3, 0x10, &(0x7f0000000080)) 16:06:31 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f000500000000000600", 0x13, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 121.014661][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880597c5000: abort rx timeout. Force session deactivation 16:06:31 executing program 4: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) 16:06:31 executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) [ 121.189688][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found 16:06:31 executing program 2: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) shmctl$SHM_LOCK(0x0, 0xb) 16:06:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xe3, 0x200, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)={r2}) 16:06:31 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, 0x1c) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) setreuid(0xee00, 0x0) r1 = getuid() setreuid(0xee00, r1) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) timerfd_gettime(0xffffffffffffffff, 0x0) 16:06:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$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") r0 = open(0x0, 0x0, 0x0) lseek(r0, 0x7ff, 0x0) getdents64(r0, 0x0, 0x0) [ 121.488709][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c21d000: rx timeout, send abort 16:06:32 executing program 4: r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1a000}, 0x2}, 0x0) connect$can_j1939(r1, &(0x7f0000000280)={0x1d, r2, 0x2}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 16:06:32 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) 16:06:32 executing program 3: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) [ 121.946623][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058322400: rx timeout, send abort [ 121.997052][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c21d000: abort rx timeout. Force session deactivation [ 122.145268][ T27] audit: type=1326 audit(1712592392.656:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48b1e7de69 code=0x0 16:06:32 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000880)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0x80800) 16:06:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x1, 0x0, 0xd25}, 'syz0\x00', 0x3e}) setfsuid(0xee01) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:06:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x40002, 0x2, {0xd, @pix_mp={0x0, 0xfffffffe}}}) [ 122.454926][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058322400: abort rx timeout. Force session deactivation [ 122.485543][ T5277] input: syz0 as /devices/virtual/input/input7 16:06:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x7ff, 0x0) getdents64(r0, 0x0, 0x0) 16:06:33 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) mlockall(0x1) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x5450, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x3f42, 0x0) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/dmi', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = dup(r2) connect$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) write$P9_RREAD(r3, 0x0, 0x0) shutdown(r2, 0x0) mlockall(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000040)) 16:06:33 executing program 2: r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1a000}, 0x2}, 0x0) connect$can_j1939(r1, &(0x7f0000000280)={0x1d, r2, 0x2}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) [ 122.675296][ T5281] loop3: detected capacity change from 0 to 512 [ 122.725589][ T5281] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 122.807219][ T5281] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.826747][ T5281] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz-executor.3: bad orphan inode 15 [ 122.910722][ T5281] ext4_test_bit(bit=14, block=18) = 1 [ 122.940971][ T5281] is_bad_inode(inode)=0 [ 122.967241][ T5281] NEXT_ORPHAN(inode)=1023 16:06:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, 0x1c) shutdown(r0, 0x0) [ 122.998490][ T5281] max_ino=32 [ 123.018324][ T5281] i_nlink=0 [ 123.037055][ T5281] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.3: corrupted xattr block 19 [ 123.147205][ T5281] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 123.165483][ T5281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. 16:06:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @empty}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) [ 123.320511][ T3569] EXT4-fs (loop3): unmounting filesystem. [ 123.487987][ T5294] binder: 5293:5294 ioctl 4018620d 0 returned -22 [ 123.512359][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 16:06:34 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001100)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009900)=[{&(0x7f0000009880)='E', 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f000000b5c0)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f000000a300)="f2", 0x1}], 0x1}, 0x0) sendmmsg$inet6(r1, &(0x7f000000e040)=[{{0x0, 0x0, &(0x7f000000b700)=[{&(0x7f000000b6c0)='2', 0x1}], 0x1}}], 0x1, 0x0) 16:06:34 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x40045010, 0x0) 16:06:34 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 16:06:34 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x14, 0x0, 0x0, 0x0) [ 123.773183][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc78c00: rx timeout, send abort 16:06:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x7ff, 0x0) getdents64(r0, 0x0, 0x0) 16:06:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffeb5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x5450, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = accept$inet6(r0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) [ 124.009162][ T5308] loop1: detected capacity change from 0 to 512 [ 124.031192][ T5308] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 124.052778][ T5308] EXT4-fs (loop1): orphan cleanup on readonly fs 16:06:34 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) [ 124.060219][ T5308] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 15 [ 124.079980][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 16:06:34 executing program 2: r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1a000}, 0x2}, 0x0) connect$can_j1939(r1, &(0x7f0000000280)={0x1d, r2, 0x2}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) [ 124.121037][ T5308] ext4_test_bit(bit=14, block=18) = 1 [ 124.193479][ T4346] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.232598][ T5308] is_bad_inode(inode)=0 [ 124.271316][ T5308] NEXT_ORPHAN(inode)=1023 [ 124.281609][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc78c00: abort rx timeout. Force session deactivation [ 124.294385][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057c1e400: rx timeout, send abort [ 124.302707][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058e3e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.319421][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058e3c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.321721][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 124.339988][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 124.346291][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.352777][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.359386][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.360268][ T5308] max_ino=32 [ 124.365869][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.365940][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.382159][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.385085][ T5308] i_nlink=0 [ 124.388697][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.398221][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.404821][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.411275][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.417998][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.424489][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.431015][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.437523][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.444066][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.450528][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.457162][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.463766][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.470382][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.476972][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.483542][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.489997][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.490337][ T5308] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 124.496527][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.496548][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.496597][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.496612][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.496658][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.541354][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.547905][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.554409][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.560924][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found 16:06:35 executing program 3: mlockall(0x1) shutdown(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) [ 124.567429][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.573981][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.580435][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.586985][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.593472][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 124.599991][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.606590][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found 16:06:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x1, 0x0, 0xd25}, 'syz0\x00', 0x3e}) setfsuid(0xee01) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 124.643557][ T5308] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 124.665833][ T5308] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. 16:06:35 executing program 1: setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r0 = socket(0x9, 0x0, 0x0) r1 = inotify_init1(0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f00000000c0)) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r2, 0x107, 0x0, 0x0, 0x5a) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x5451, 0x0) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00], 0x0, 0x0, &(0x7f00000002c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x100000000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x5450, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x511102, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x5450, 0x0) r4 = mq_open(&(0x7f0000000a40)='\xcf\xd7b w~3\xff\xa1\xe15s\xc0Q{u\xdaf\x17\x8c\xa8.\xda\xa7\xa0\x1a1n\x90\xd7\xd2|Gh\xd2\xb4\xf8\xbda\x17\xe6\xa6\xd3\xaa\xa1\xecr\xe6\xadN|\xa6\xe1\xd6\xf6\xab\xb9\xf8\x9bT&e\xe2\xaeT\x83\x10\xf2\x12#\xabh\x9e\xc9Q\x81\xc5\"\xb0-\"\xbf\xb8\x88\xf3\xd1D\f\x03\xc7mQ\xf2\xd6\xe0\xaeCvb\x80\x0f\xcc.\xfb\x12I\xfc\xd0\xc5\x1d\x8a>\x7f\xc2f^\'=J@\xfe\xb1\xc3\xccW', 0x40, 0x0, 0x0) ioctl$GIO_FONT(r4, 0x8904, &(0x7f0000000440)=""/74) [ 124.732795][ T5318] input: syz0 as /devices/virtual/input/input8 [ 124.743404][ T4346] usb 1-1: device descriptor read/64, error -71 [ 124.755594][ T3561] EXT4-fs (loop1): unmounting filesystem. [ 124.802620][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057c1e400: abort rx timeout. Force session deactivation 16:06:35 executing program 2: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r3}) 16:06:35 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000001c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d63703836312c73657373696f6e3d3078666666666666666666666666666637662c626172726965722c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030a526060c1b3b160330312c666f7263652c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nls=cp737,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c5a81f2ea678d3792c1dc38"], 0x1, 0x6da, &(0x7f0000004980)="$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") getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000c00), &(0x7f0000002000)=0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x15}, @l2cap_cid_signaling={{0x11}, [@l2cap_conf_rsp={{0x5, 0x0, 0x6}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}}]}}, 0x1a) [ 125.013328][ T4346] usb 1-1: new high-speed USB device number 7 using dummy_hcd 16:06:35 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 125.132339][ T5327] loop1: detected capacity change from 0 to 1024 [ 125.166049][ T5327] hfsplus: unable to parse mount options 16:06:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 125.231166][ T3954] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.254576][ T3568] Bluetooth: Unexpected continuation frame (len 21) [ 125.261608][ T4346] usb 1-1: device descriptor read/64, error -71 [ 125.332245][ T5331] binder: 5330:5331 ioctl 4018620d 0 returned -22 [ 125.393527][ T4346] usb usb1-port1: attempt power cycle [ 125.413454][ T3324] usb 3-1: new high-speed USB device number 6 using dummy_hcd 16:06:36 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004001) 16:06:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x7ff, 0x0) getdents64(r0, 0x0, 0x0) [ 125.783667][ T3324] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.820965][ T4346] usb 1-1: new high-speed USB device number 8 using dummy_hcd 16:06:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x1, 0x0, 0xd25}, 'syz0\x00', 0x3e}) setfsuid(0xee01) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 125.933592][ T4346] usb 1-1: device descriptor read/8, error -71 [ 125.965470][ T5340] input: syz0 as /devices/virtual/input/input9 [ 125.969863][ T3324] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 16:06:36 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) [ 126.000691][ T3324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.023537][ T3324] usb 3-1: Product: syz [ 126.027940][ T3324] usb 3-1: Manufacturer: syz [ 126.032679][ T3324] usb 3-1: SerialNumber: syz [ 126.102660][ T27] audit: type=1326 audit(1712592396.616:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa56987de69 code=0x0 16:06:36 executing program 1: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r3}) [ 126.223525][ T4346] usb 1-1: new high-speed USB device number 9 using dummy_hcd 16:06:36 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 126.333434][ T4346] usb 1-1: device descriptor read/8, error -71 16:06:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socketpair$tipc(0x11, 0x2, 0x0, &(0x7f0000000000)) [ 126.453566][ T4346] usb usb1-port1: unable to enumerate USB device 16:06:37 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) 16:06:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d012e2f66"], 0xa) getpeername$unix(r0, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)=0x16) recvmmsg(r1, &(0x7f0000001300), 0x10, 0x0, 0x0) dup2(r1, r0) listen(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) connect$unix(r3, &(0x7f0000000140)=ANY=[], 0xa) accept$unix(r1, 0x0, 0x0) 16:06:37 executing program 1: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="780230"], 0x10) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000001200)=0x8) r1 = socket(0x2, 0x1, 0x0) bind(r1, &(0x7f0000000000)=ANY=[], 0x10) r2 = dup(r1) listen(r2, 0x0) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=ANY=[], 0x10) r4 = accept$inet(r1, 0x0, 0x0) r5 = dup2(r4, r3) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f0000000600)="ee08665d19ac14d5e5134876f197a7728420aef6171504b1c3d4b3830c921bf0817a0000040000006a89dbdf", 0x2c) sendto$inet(r3, &(0x7f0000000240)="b7a6cc487a524e5a540da1e4393afe48ed35831a09f974daafca9348ab77281b9aa0bcb32da460cd420576148d90b49502fc6e00000000000000ff189f6a7ce7b305a2e58e1c1e2ce6744f82b858d6bafd9dc00cec3b8caf59d0edb1a32b026059ebf6757ffe963e22cffdf722dd8e5d99febf5c9c1cb1dbbeae83802ba55e3397302858d6938eba0c236e9a014b0a5723", 0x91, 0x407, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000300)="5baedf9b4a3fb59e8ac501aef287820c5929f92683837d162f12dcff88d52ba7d228b3b60f4b5d1a1b89a0fd5eb44cdbd787ca05c3f354cbf096d63496d5e26be357a5eb7317ad601da3724013d0c3e48a2b486459f66a30245a028f9fd798947e59ae8864c807c4e236e17be86fd05d98c0fa9dfcd2e0e21a3665ac0d081befa52152d28ca2932f9e8d09e34994f1102ec267d975f6837f702f5be824d64a4fc2ae644add27520da098c1d4e874fdf157a7deae0cba19c150cf2b4038c37d55ad64df6494ff7e1ec8750f693c9d9183034499c8032341efc7ce9d3225a2034e", 0xe0, 0x0, 0x0, 0x0) 16:06:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 126.788924][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 60726. Sending cookies. Check SNMP counters. 16:06:37 executing program 3: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r3}) 16:06:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x3a, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 16:06:37 executing program 4: mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x2284001, 0x0) [ 126.937330][ T5358] binder: 5357:5358 ioctl 4018620d 0 returned -22 16:06:37 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000001c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d63703836312c73657373696f6e3d3078666666666666666666666666666637662c626172726965722c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030a526060c1b3b160330312c666f7263652c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nls=cp737,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c5a81f2ea678d3792c1dc38"], 0x1, 0x6da, &(0x7f0000004980)="$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") getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000c00), &(0x7f0000002000)=0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x15}, @l2cap_cid_signaling={{0x11}, [@l2cap_conf_rsp={{0x5, 0x0, 0x6}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}}]}}, 0x1a) 16:06:37 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) 16:06:37 executing program 0: mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:06:37 executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)='%pK \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='scsi_dispatch_cmd_start\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2009) [ 127.183376][ T3568] Bluetooth: Unexpected continuation frame (len 21) [ 127.213600][ T3324] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 127.220112][ T3324] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 16:06:37 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 127.268749][ T3324] cdc_ncm 3-1:1.0: setting rx_max = 2048 16:06:37 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000003e40)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) [ 127.446549][ T27] audit: type=1326 audit(1712592397.966:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5376 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c327de69 code=0x0 [ 127.459684][ T3324] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 127.496458][ T3324] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 127.532794][ T3324] usb 3-1: USB disconnect, device number 6 [ 127.552176][ T3324] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 127.674753][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd 16:06:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b57ae45bb7c1626db645bb0b0c052db8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 16:06:38 executing program 1: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) [ 127.864822][ T14] usb 5-1: device descriptor read/64, error -71 16:06:38 executing program 2: r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$kcm(r0, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000003b40)="d5", 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff63, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:06:38 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000e40)=0x8, 0x4) [ 128.133446][ T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd 16:06:38 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000001c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d63703836312c73657373696f6e3d3078666666666666666666666666666637662c626172726965722c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030a526060c1b3b160330312c666f7263652c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nls=cp737,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c5a81f2ea678d3792c1dc38"], 0x1, 0x6da, &(0x7f0000004980)="$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") getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000c00), &(0x7f0000002000)=0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x15}, @l2cap_cid_signaling={{0x11}, [@l2cap_conf_rsp={{0x5, 0x0, 0x6}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}}]}}, 0x1a) 16:06:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "865703b7e43b34e4"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x8f) 16:06:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$eJzs3V1rZGcdAPD/mcxkk91oovaiCq2LLewW3ZlN17ZBpFtBvCso1es1ZGdD2ElmyUzaTSiSxQ8giGjBG73yRvADCLIfQYSCvRcryqJbBXuhPeW8zL6kM81kNzOzTH4/eOY85/X/f2Ym531yAjixzkbEaxExExEvRMRiObxSltgvSjbdB3ffXstKEmn6xj+TSMph2WRJWTJnytnmik5fnd2966utVnO77G90N280Ort7FzY2V9eb682tS5eWX155ZeWllYvH0s6sXa9++28//8lvvvPqH7721l+u/OP8j7J8F8rxvXYct+I9qWXvxT3ViNgeRbAJmCnbU4veCwAAT7JsH//zEfGVfP9/MWbyvbnBZh+oJyPPDgAAADgO6eWF+F8SkQIAAABTq5LfA5tU6uW9AAtRqdTrxT28T8XpSqvd6X71Wntn62pxr+xS1CrXNlrNi+U9tUtRS7L+5XtnFIr+F/NxWUkeugf4Z4vz+fj6Wrt1dRInPAAAAOAEOnPg+P8/i8XxPwAAADBlliadAAAAADByjv8BAABg+j3C8f/sKPIAAAAARuK7r7+elbT3/Ourb+7uXG+/eeFqs3O9vrmzVl9rb9+or7fb6630VMTmYctrtds3vh5bOzcb3Wan2+js7l3ZbO9sda9sPPQIbAAAAGCMPvfl2+8lEbH/jfm8RO/a/syAGfxWAKZGZcjp0uzl/dHmAozXoM08MP2qnz7abb4wxWpFJ5l0HsDkHLYCmBs0xR9HkQ0AADAK5754+700+eT1/+r9cwPAlBr2+j8wfQZc/08Xx50IMHaHXP8HpljNHYBw4h1+/X+Aoa//p+mhywIAAEZqIS9JpV5eC1yIyodpIZaillzbaDUvRsRnI+LPi7VTWf9yPmfiRwMAAAAAAAAAAAAAAAAAAAAAAAAAMKQ0TSJ9BNVHmgsAAACYhIjK35Py+V/nFp9fOHh+YDb5MH8U8Edpmr71yzd+cXO1291ezob/Kx8+GxHdd8rhL07iDAYAAADQ03vKf3GcXptwNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMqw/uvr3WK+OMe+dbEbHUL3415vLuXNQi4vS/k6g+MF8SETPHEH//VkQ83S9+kqUVS2UWB+NXImI+z2Lk8Z9J07Rv/DOPHR1OttvZ+ue1fn9/lTibd/v//VeLcvlx4w9e/1Xurf9mDsavFuu/zwwZ40vv/q7xQO8P7ldPFeOr/dc/vfjJgPXvc/2CVT856Iff39sblFv664hzfbc/yUOxGt3NG43O7t6Fjc3V9eZ6c+vSpeWXV15ZeWnlYuPaRqtZvvaN8dNnfv/RoPh3zkacLuPP9nIqNyxLReebZftXD7b/+axSG7Tk+/7/7s27XyiqtQOLiDu3Is4/1//zfzrv9n3/f/XfNJdvB7Lx58ptQrJf1CPKr29EPPvbPz07sP235sra0T//84c3PffC93781yEnBQDGoLO7d3211Wpuj7zyTpqmw02c7ZU+XqxsB+6YWzEfEQNG9Y8Vwy75qYGpvj8fMaZP56iVy0eZOD11pC9bsv8ENPAEV2bzL+Sk10wAAMBxu7/3P+lMAAAAAAAAAAAAAAAAAAAA4OQax/8VOxhzfzJNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4VB8HAAD//5/G1lI=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 128.323426][ T14] usb 5-1: device descriptor read/64, error -71 [ 128.443653][ T14] usb usb5-port1: attempt power cycle [ 128.455947][ T5399] loop2: detected capacity change from 0 to 1024 [ 128.503838][ T5399] hfsplus: unable to parse mount options [ 128.552165][ T5405] loop1: detected capacity change from 0 to 512 [ 128.597796][ T3568] Bluetooth: Unexpected continuation frame (len 21) [ 128.613923][ T5405] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 16:06:39 executing program 2: mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') [ 128.685780][ T5405] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.705713][ T5405] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 15 16:06:39 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 128.771142][ T5405] ext4_test_bit(bit=14, block=18) = 1 [ 128.803353][ T5405] is_bad_inode(inode)=0 [ 128.807580][ T5405] NEXT_ORPHAN(inode)=1023 16:06:39 executing program 2: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) [ 128.843414][ T5405] max_ino=32 [ 128.846819][ T5405] i_nlink=0 [ 128.855973][ T5405] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 128.883460][ T14] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 128.916248][ T5405] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 128.936248][ T5405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. 16:06:39 executing program 1: r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4e, 0x7d, 0xe0, 0x0, 0xfe9, 0xdb00, 0x51d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7a, 0x8a, 0xb9}}]}}]}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5501, &(0x7f0000001140)={{}, "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"}) [ 128.993693][ T14] usb 5-1: device descriptor read/8, error -71 [ 129.048683][ T3561] EXT4-fs (loop1): unmounting filesystem. 16:06:39 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000003e40)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) [ 129.173405][ T3324] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.234598][ T27] audit: type=1326 audit(1712592399.756:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e17e7de69 code=0x0 [ 129.263646][ T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 129.363518][ T14] usb 5-1: device descriptor read/8, error -71 [ 129.489870][ T14] usb usb5-port1: unable to enumerate USB device [ 129.543672][ T3324] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 16:06:40 executing program 1: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000ffcffc)) [ 129.713766][ T3324] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.739243][ T3324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.776386][ T3324] usb 4-1: Product: syz [ 129.785467][ T3324] usb 4-1: Manufacturer: syz [ 129.801708][ T3324] usb 4-1: SerialNumber: syz 16:06:40 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001080)={{r0}, &(0x7f0000001000), &(0x7f0000001040)='%pS \x00'}, 0x20) write$cgroup_subtree(r2, 0x0, 0x32600) 16:06:40 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:40 executing program 2: mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 16:06:40 executing program 2: r0 = open(&(0x7f0000000280)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000440)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f00000005c0)='./bus\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3240404, 0x0) [ 130.135362][ T5443] binder: BINDER_SET_CONTEXT_MGR already set [ 130.141595][ T5443] binder: 5442:5443 ioctl 4018620d 200001c0 returned -16 [ 130.230687][ T27] audit: type=1800 audit(1712592400.746:24): pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1960 res=0 errno=0 16:06:40 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000001c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d63703836312c73657373696f6e3d3078666666666666666666666666666637662c626172726965722c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030a526060c1b3b160330312c666f7263652c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nls=cp737,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c5a81f2ea678d3792c1dc38"], 0x1, 0x6da, &(0x7f0000004980)="$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") getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000c00), &(0x7f0000002000)=0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x15}, @l2cap_cid_signaling={{0x11}, [@l2cap_conf_rsp={{0x5, 0x0, 0x6}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}}]}}, 0x1a) 16:06:41 executing program 2: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000200)) [ 130.600622][ T3568] Bluetooth: Unexpected continuation frame (len 21) 16:06:41 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x6, 0x0) 16:06:41 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x800c, &(0x7f0000000100)=ANY=[@ANYBLOB="626172726965722c6e6c733d63703433372c6e6f6465636f6d706f73652c747970653d883b7f382c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303030303030312c73657373696f6e3d3078303030303030303030303030303030312c626172726965722c706172743d3078303030303030303030303030303030392c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',decompose,nodecompose,uid=', @ANYRESHEX=0x0, @ANYBLOB=',force,barrier,nobarrier\x00\x00\x00\x00=cp866,euid<', @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x6e3, &(0x7f0000000280)="$eJzs3UtoHOcdAPD/rFbSrgqOnPiRlkCWGNJSUVuyUFr1UreUokMoIT30vNhyLLyWg6QU2ZRG6ePeQ049pQfdQg8lvRvac0Og5KpjoJBLTrqpzOzMaqWdfUjWK+nvJ2bmm/ke881/dmb2gfgC+L+1NBPVZ5HE0sybm+n6zvZ8a2x7fjLPbkXERERUIqrtRSSrkeXeyaf4droxL5/028+HK4tvf/7VzhfttWo+ZeUrg+qVmOjdtJVP0YiIsXzZa7xPi58c3v2B9u72bW9USecI04DdKAIXf3muVuG57fXY6uR9/J9sPqj6Ua5b4IJK2s/NHtMRUxFRi2g/9fO7Q+Vse3fyts67AwAAAHBU9aNXeWE3dmMzLp1GdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCbKh//P8mnSpFuRFKM/z+Rb4s8fQENHwjxs8n28tnpdwYAAAAAAAAATt2ru7Ebm3GpWN9Lst/8X+v6jf9b8V6sx3Ksxc3YjGZsxEasxVxETHc1NLHZ3NhYm8tqRlwZUPN2fFpS83b/Pt454WMGAAAAAAAAgAuuNiT/4Xjvtt/H0v7v/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBEkEWPtRTZdKdLTUalGRC0iJtJyWxGfFumviaRs47Oz7wcAAAA8l9rB1aQ2Qp0X3o/d2IxLxfpekn3mv5Z9Xq7Fe7EaG7ESG9GK5biXf4ZOP/VXdrbnWzvb84/Sqbfdn355pK5nLUb7u4fyPb+clajH/VjJttyMu5HEXqaSt/LyzvZ8unxU3q8P0j4lP8kN6M1YV/peOrv+SZb+88FvEapHOsRjqvTNmc5yxzsRmc37lta4XESgPBJDz0514J7motL55ufK4D2Vx/yDwXufOlSq9Jubc3E4Erej0jlD1wZHIuK7//j41w9aqw8f3F+fuTiHVOr9oSUOR2K+KxLXv0GRGG42i8TVzvpS/CJ+FTPx5eRbsRYr8ZtoxkYsN4r8Zv56TufTgyP12VT32lvDepJek43O/ausT4040KdoxM+zVDNey87ppViJJB5HxHK8kf3djrnO3WD/DF8d4aqvjHCn7XLje9miE6ao9y/7t9GaPClpXC93xbX7njud5XVv2Y/Si6VRKp51oz+PulS/kyfSFv4w8Plw1g5HYq4rEi/1e720Q/rXvXS+3lp9uPag+e6I+3s9X6bX0Z8u1FMiPcMvRi0/uMvZPMmuqdks76XOE/ZgvCbyX1zaKj15Vzv12lfqL+Nx3Dtwpf4wFmIhFrPS17LS4z1PrDTveqelSlS77uFpXvpOq9r5Yaf7/dbjaLXfDwFwsU19f2qi/t/6v+sf1f9Yf1B/s/azyR9NvjIR4/8a/3F1duz1yivJ3+Oj+N3+538AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD41p88fdhstZbXyhOV8qxkcK1ma68YSGxAmQOJJB8qZ4TCyfqTp3tDGxycmMy7d8zqJ5koRmscXrhxit1Itg6fr9rwc1GM8jTCLpKegKeVj93nYs/7W8YvwKk8nGgcq9ZeWVbxgu3KOvqrt152vsYioqzwkBvH2EncfYDzdGvj0bu31p88/cHKo+Y7y+8sr44vLCzOLi68MX/r/kprebY9j86wr2cz+C1wFrrfTnSkF/urw+sOGKgVAAAAAAAAAAAAOEVn8b8Q532MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNfb0kxUn0USc7M3Z9P1ne35VjoV6f2S1YioRETy24jknxF3oj3FdFdzSb/9fLiy+PbnX+18sd9WtShfidjqW280W/kUjYgYy5cn1d7d4e1N7CcnS7KTTmTSgN0oAgfn7X8BAAD//yez7S0=") [ 130.797550][ T5456] loop2: detected capacity change from 0 to 1024 16:06:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)=ANY=[], 0xfc, 0x54b, &(0x7f0000000a80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 130.868054][ T3954] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.889784][ T5458] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.912388][ T5458] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 16:06:41 executing program 4: syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000000)='./file0\x00', 0x4008, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x9894, &(0x7f0000012fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x80086601, 0x1000000000000) 16:06:41 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 16:06:41 executing program 0: r0 = open(&(0x7f0000000280)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000440)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f00000005c0)='./bus\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3240404, 0x0) [ 130.993739][ T3324] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 131.000433][ T3324] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 131.048616][ T3324] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 131.079323][ T5462] loop2: detected capacity change from 0 to 512 [ 131.109650][ T5462] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 131.139813][ T5462] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.146839][ T27] audit: type=1800 audit(1712592401.676:25): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 131.175380][ T5462] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz-executor.2: bad orphan inode 15 [ 131.213560][ T3324] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 131.228712][ T5462] ext4_test_bit(bit=14, block=18) = 1 [ 131.257970][ T3324] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 131.277011][ T5462] is_bad_inode(inode)=0 [ 131.290289][ T5462] NEXT_ORPHAN(inode)=1023 [ 131.300522][ T5462] max_ino=32 [ 131.317573][ T3324] usb 4-1: USB disconnect, device number 8 [ 131.333479][ T3562] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.348468][ T5462] i_nlink=0 [ 131.357873][ T3324] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 131.374946][ T5462] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.2: corrupted xattr block 19 [ 131.412647][ T5462] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 131.428287][ T5462] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 16:06:42 executing program 0: syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000000)='./file0\x00', 0x4008, &(0x7f0000000180)=ANY=[@ANYBLOB="0067824b7e640c09563beca2abd4a7000000000000cf68082281384e5cc89bdaff244b3ee948c96f5c42650010000000000000bd9e15ba174521323e401ee5ca4674f2b7d982ee1e1ca3a90919f6bff4a3540f4a17700755ebd54f87d7982a753f3f4ccd011707ca41ba88a2470dd009b38e569878c9c0223eef5c0bbaa2bb7d54be4a0c0a44a2c099c7838c81ba3ec27d1f1bede2a2c9e9bfb2cf0bab0ad9ac5c98653c3889cff118e3007586c1553dd9b648516e564df8a9019b4ccfd2a799c6d523a425442d298bee734ec92473426a13b1d4ef8bc5a9f74a428234af27f1a695e680fad21ab349c6c7fa518ecd187b9736c0324a353b59828c7eb42c602af2dcd528b978d6dd90247566d9d5e77c2e8f95acac1d6d7a8359f87d45c8c335a5f0e0e235b4f3ba1b8b2357851f9b666c15cf57ed03145a6abf0ec252771a68a8751b0d7db7bdcbdef4279f968db28c686feb6287c8ade20e120e82e765e96ee74d050000000000000056b34556bb80437891a773bac4f2e6c8ef4db4f1b598959482818e74463b50f51b78ffa13bc8a72c525c2a2b082a605202e552618ca005af0a30c1167445049e7450d377ab285896765be2acf2168072820fa7899d4f82bd9169414e32b95d46b362a3f87695821c42c7f47ceb6d5fd3e04dcd316e3f227ad83e7860abe664b181fe2c237d1f31e5b57a4c4dff0dc53e12b45ee8c64735798ce7020b1bc2cac81fed6d3b234f600da2fa69918f657e742bd7143b09a27e1805db72e618b44dabd3a3600d57d37f283374b5655bef020f4f3b8842fb4825d23218751f1d28c6d688ad6c52a84875ea6ed6cb9078ede08d7983504d575337931b3dc1a0a3245cce68ae232af67ae4ec496c9f40b42ecc2e9f76e59736b0b7e8f9d7a0d4f8206d8133673de61a71945fca4382c9b16a84d3e2edd44e0486b1a7fa37391a8954ab6ee70e817c4b4fd207a9e0a76d11a04b30273696f5b87b9962e9e2fbf8197570bbf2e680f6a82600c749f9d312f9fbacaaea89db1c6b4fa92bed68c9dcd675394d46887eec7f38e657000000000000000000"], 0x1, 0x9894, &(0x7f0000012fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x80086601, 0x1000000000000) 16:06:42 executing program 2: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000200)) [ 131.533467][ T3562] usb 2-1: device descriptor read/64, error -71 [ 131.565612][ T3560] EXT4-fs (loop2): unmounting filesystem. 16:06:42 executing program 2: pipe2(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, &(0x7f0000000300)}}, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) r2 = mq_open(&(0x7f0000000040)='\x13\x00', 0x42, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) 16:06:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r0, &(0x7f0000000080)="44f9b1", 0x3, 0x0, 0x0, 0x0) [ 131.803536][ T3562] usb 2-1: new high-speed USB device number 9 using dummy_hcd 16:06:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) ioctl$TUNSETOFFLOAD(r1, 0x541b, 0x0) 16:06:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000140)) [ 132.003582][ T3562] usb 2-1: device descriptor read/64, error -71 16:06:42 executing program 2: r0 = open(&(0x7f0000000280)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000440)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f00000005c0)='./bus\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3240404, 0x0) 16:06:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 132.126037][ T3562] usb usb2-port1: attempt power cycle [ 132.222251][ T27] audit: type=1800 audit(1712592402.736:26): pid=5490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1958 res=0 errno=0 16:06:42 executing program 2: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000200)) 16:06:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000001c0)='sys_enter\x00', r1}, 0x10) unlink(&(0x7f0000000000)='./cgroup\x00') [ 132.536482][ T3562] usb 2-1: new high-speed USB device number 10 using dummy_hcd 16:06:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) [ 132.633816][ T3562] usb 2-1: device descriptor read/8, error -71 16:06:43 executing program 2: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x7, &(0x7f0000000040)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) 16:06:43 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) [ 132.848670][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.855090][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.933600][ T3562] usb 2-1: new high-speed USB device number 11 using dummy_hcd 16:06:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 133.042990][ T3562] usb 2-1: device descriptor read/8, error -71 16:06:43 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) [ 133.164162][ T3562] usb usb2-port1: unable to enumerate USB device [ 133.193335][ T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 133.354923][ T5475] loop0: detected capacity change from 0 to 32768 [ 133.418230][ T5475] XFS (loop0): Mounting V5 Filesystem [ 133.443479][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 133.461692][ T5475] XFS (loop0): Ending clean mount 16:06:44 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) [ 133.553837][ T3580] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 133.564346][ T14] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 133.580164][ T3559] XFS (loop0): Unmounting Filesystem [ 133.586120][ T14] usb 5-1: config 0 has no interface number 0 [ 133.601862][ T14] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.613659][ T14] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 133.743750][ T14] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 133.752890][ T14] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 133.770084][ T14] usb 5-1: Product: syz [ 133.774756][ T14] usb 5-1: SerialNumber: syz [ 133.790670][ T14] usb 5-1: config 0 descriptor?? [ 133.835694][ T14] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 133.852364][ T14] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input10 16:06:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) accept$inet6(r1, 0x0, 0x0) [ 133.983770][ T3580] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.010459][ T3580] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.030073][ T27] audit: type=1326 audit(1712592404.546:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48b1e7de69 code=0x0 [ 134.040449][ T14] usb 5-1: USB disconnect, device number 10 [ 134.053921][ T3580] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.059515][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 134.069903][ T3580] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 134.080298][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 134.090393][ T3580] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.099827][ C0] vkms_vblank_simulate: vblank timer overrun 16:06:44 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) [ 134.141499][ T14] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 134.147018][ T3580] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 16:06:44 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x800c, &(0x7f0000000700)={[{@part={'part', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'cp437'}}, {@session={'session', 0x3d, 0xffffffffffffff7f}}, {@type={'type', 0x3d, "883b7f38"}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@nodecompose}, {}, {@umask={'umask', 0x3d, 0x1}}, {@force}, {@barrier}, {@part={'part', 0x3d, 0x9}}, {@gid}, {}, {@nodecompose}, {@uid}, {@creator={'creator', 0x3d, "a9076de4"}}, {@barrier}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp866'}}], [{@euid_lt}, {@euid_lt}]}, 0x1, 0x6da, &(0x7f0000004980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) [ 134.289473][ T5544] loop1: detected capacity change from 0 to 1024 16:06:44 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 134.353635][ T3580] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.371778][ T3580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.391954][ T3580] usb 4-1: Product: syz [ 134.399773][ T3580] usb 4-1: Manufacturer: syz [ 134.409723][ T3580] usb 4-1: SerialNumber: syz [ 134.425258][ T3589] hfsplus: b-tree write err: -5, ino 4 16:06:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) 16:06:45 executing program 1: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) 16:06:45 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa96fbc950f5b0599}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb613a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e00"/2537], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bffffff00004000632f77fbac14140be934a0a662079f4b4d2f87e5feca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 16:06:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) 16:06:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab4416850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='ext4_allocate_blocks\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r2}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 16:06:45 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d000905820349"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000000980)=ANY=[]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000040)=""/73, 0x49) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 16:06:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) 16:06:45 executing program 2: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) 16:06:45 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="050f1c009514100a"]}) 16:06:45 executing program 2: semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0x9800}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0x1}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{}, {}], 0x2, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfffc}], 0x1, 0x0) semop(0x0, 0x0, 0x0) [ 135.103543][ T3580] cdc_ncm 4-1:1.0: bind() failure 16:06:45 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x56, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f7ff01", 0x20, 0x6, 0x0, @local, @private1, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x3, 0xa}]}}}}}}}}, 0x0) [ 135.133740][ T3580] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 135.174021][ T3580] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 135.205687][ T3580] usbtest: probe of 4-1:1.1 failed with error -71 [ 135.220782][ T3580] usb 4-1: USB disconnect, device number 9 [ 135.250070][ T4350] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 135.275526][ T5573] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 135.363613][ T4346] usb 5-1: new high-speed USB device number 11 using dummy_hcd 16:06:46 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x42) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r1) [ 135.543496][ T4350] usb 1-1: Using ep0 maxpacket: 8 [ 135.629193][ T4346] usb 5-1: Using ep0 maxpacket: 16 [ 135.683553][ T4350] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.706620][ T4350] usb 1-1: config 0 has no interface number 0 [ 135.713513][ T4350] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 16:06:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) [ 135.731821][ T4350] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.741364][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.768211][ T4350] usb 1-1: config 0 descriptor?? [ 135.793557][ T4346] usb 5-1: descriptor type invalid, skip [ 135.799400][ T4346] usb 5-1: descriptor type invalid, skip [ 135.803375][ T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 135.812842][ T4346] usb 5-1: descriptor type invalid, skip [ 135.819136][ T4346] usb 5-1: descriptor type invalid, skip [ 135.834206][ T4350] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 135.850502][ T4346] usb 5-1: descriptor type invalid, skip [ 135.856900][ T4346] usb 5-1: descriptor type invalid, skip [ 135.870754][ T4346] usb 5-1: descriptor type invalid, skip [ 135.876842][ T4346] usb 5-1: descriptor type invalid, skip [ 135.882666][ T4346] usb 5-1: descriptor type invalid, skip 16:06:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x2) 16:06:46 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) [ 135.896787][ T4346] usb 5-1: descriptor type invalid, skip [ 135.903226][ T4346] usb 5-1: descriptor type invalid, skip [ 135.931206][ T4346] usb 5-1: descriptor type invalid, skip [ 135.941503][ T4346] usb 5-1: descriptor type invalid, skip [ 135.957862][ T4346] usb 5-1: descriptor type invalid, skip [ 135.975706][ T4346] usb 5-1: descriptor type invalid, skip [ 135.987177][ T4346] usb 5-1: descriptor type invalid, skip [ 136.000918][ T4346] usb 5-1: descriptor type invalid, skip 16:06:46 executing program 2: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000200)) [ 136.013554][ T4346] usb 5-1: descriptor type invalid, skip [ 136.025457][ T4346] usb 5-1: descriptor type invalid, skip [ 136.039171][ T4346] usb 5-1: descriptor type invalid, skip [ 136.044011][ T14] usb 2-1: Using ep0 maxpacket: 32 16:06:46 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82200000904000002ca744d00090503034d00ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000800)=""/32, 0x20) [ 136.065980][ T4346] usb 5-1: descriptor type invalid, skip [ 136.075058][ T4346] usb 5-1: descriptor type invalid, skip [ 136.081139][ T4346] usb 5-1: descriptor type invalid, skip [ 136.093400][ T4346] usb 5-1: descriptor type invalid, skip [ 136.100775][ T4346] usb 5-1: descriptor type invalid, skip [ 136.116869][ T4346] usb 5-1: descriptor type invalid, skip [ 136.134678][ T4346] usb 5-1: descriptor type invalid, skip [ 136.146120][ T4346] usb 5-1: descriptor type invalid, skip [ 136.156808][ T4346] usb 5-1: descriptor type invalid, skip [ 136.162662][ T4346] usb 5-1: descriptor type invalid, skip [ 136.164908][ T14] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 136.168528][ T4346] usb 5-1: descriptor type invalid, skip [ 136.182396][ T4346] usb 5-1: descriptor type invalid, skip [ 136.188804][ T4346] usb 5-1: descriptor type invalid, skip [ 136.189348][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 136.195453][ T4346] usb 5-1: descriptor type invalid, skip [ 136.213082][ T4346] usb 5-1: descriptor type invalid, skip [ 136.219569][ T4346] usb 5-1: descriptor type invalid, skip [ 136.225781][ T4346] usb 5-1: descriptor type invalid, skip [ 136.231659][ T4346] usb 5-1: descriptor type invalid, skip [ 136.238086][ T4346] usb 5-1: descriptor type invalid, skip [ 136.244450][ T4346] usb 5-1: descriptor type invalid, skip [ 136.250503][ T4346] usb 5-1: descriptor type invalid, skip [ 136.256968][ T4346] usb 5-1: descriptor type invalid, skip [ 136.262953][ T4346] usb 5-1: descriptor type invalid, skip [ 136.269379][ T4346] usb 5-1: descriptor type invalid, skip [ 136.275554][ T4346] usb 5-1: descriptor type invalid, skip [ 136.281501][ T4346] usb 5-1: descriptor type invalid, skip [ 136.287299][ T3609] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.295780][ T4346] usb 5-1: descriptor type invalid, skip [ 136.301657][ T4346] usb 5-1: descriptor type invalid, skip [ 136.308799][ T4346] usb 5-1: descriptor type invalid, skip [ 136.315076][ T4346] usb 5-1: descriptor type invalid, skip [ 136.320933][ T4346] usb 5-1: descriptor type invalid, skip [ 136.327047][ T4346] usb 5-1: descriptor type invalid, skip [ 136.333874][ T4346] usb 5-1: descriptor type invalid, skip [ 136.339745][ T4346] usb 5-1: descriptor type invalid, skip [ 136.346000][ T4346] usb 5-1: descriptor type invalid, skip [ 136.351742][ T4346] usb 5-1: descriptor type invalid, skip [ 136.357873][ T4346] usb 5-1: descriptor type invalid, skip [ 136.364151][ T4346] usb 5-1: descriptor type invalid, skip [ 136.369937][ T4346] usb 5-1: descriptor type invalid, skip [ 136.373780][ T14] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 136.376316][ T4346] usb 5-1: descriptor type invalid, skip [ 136.393598][ T14] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 136.393661][ T4346] usb 5-1: descriptor type invalid, skip [ 136.402650][ T14] usb 2-1: Product: syz [ 136.414449][ T14] usb 2-1: Manufacturer: syz [ 136.419349][ T14] usb 2-1: SerialNumber: syz [ 136.421321][ T4346] usb 5-1: descriptor type invalid, skip [ 136.424686][ T3324] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.430782][ T4346] usb 5-1: descriptor type invalid, skip [ 136.447980][ T4346] usb 5-1: descriptor type invalid, skip [ 136.448856][ T14] usb 2-1: config 0 descriptor?? [ 136.454220][ T4346] usb 5-1: descriptor type invalid, skip [ 136.469332][ T4346] usb 5-1: descriptor type invalid, skip [ 136.475514][ T4346] usb 5-1: descriptor type invalid, skip [ 136.481344][ T4346] usb 5-1: descriptor type invalid, skip [ 136.491586][ T4346] usb 5-1: descriptor type invalid, skip [ 136.497911][ T4346] usb 5-1: descriptor type invalid, skip [ 136.506106][ T14] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 136.511405][ T4346] usb 5-1: descriptor type invalid, skip [ 136.521806][ T4346] usb 5-1: descriptor type invalid, skip [ 136.524537][ T14] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 136.535946][ T4346] usb 5-1: descriptor type invalid, skip [ 136.541855][ T4346] usb 5-1: descriptor type invalid, skip [ 136.548315][ T4346] usb 5-1: descriptor type invalid, skip [ 136.558590][ T4346] usb 5-1: descriptor type invalid, skip [ 136.565911][ T4346] usb 5-1: descriptor type invalid, skip [ 136.571770][ T4346] usb 5-1: descriptor type invalid, skip [ 136.582715][ T4346] usb 5-1: descriptor type invalid, skip [ 136.589821][ T4346] usb 5-1: descriptor type invalid, skip [ 136.599180][ T4346] usb 5-1: descriptor type invalid, skip [ 136.607221][ T4346] usb 5-1: descriptor type invalid, skip [ 136.614430][ T4346] usb 5-1: descriptor type invalid, skip [ 136.620224][ T4346] usb 5-1: descriptor type invalid, skip [ 136.626535][ T4346] usb 5-1: descriptor type invalid, skip [ 136.632292][ T4346] usb 5-1: descriptor type invalid, skip [ 136.638378][ T4346] usb 5-1: descriptor type invalid, skip [ 136.644630][ T4346] usb 5-1: descriptor type invalid, skip [ 136.650547][ T4346] usb 5-1: descriptor type invalid, skip [ 136.657024][ T4346] usb 5-1: descriptor type invalid, skip [ 136.662926][ T4346] usb 5-1: descriptor type invalid, skip [ 136.663691][ T3609] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 136.669523][ T4346] usb 5-1: descriptor type invalid, skip [ 136.679512][ T3324] usb 3-1: Using ep0 maxpacket: 8 [ 136.685606][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685627][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685641][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685655][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685669][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685683][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685697][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685711][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685724][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685738][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685751][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685765][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685779][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685792][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685806][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685820][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685834][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685855][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685869][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685883][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685896][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685910][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685923][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685936][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685949][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685962][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685976][ T4346] usb 5-1: descriptor type invalid, skip [ 136.685989][ T4346] usb 5-1: descriptor type invalid, skip [ 136.686003][ T4346] usb 5-1: descriptor type invalid, skip [ 136.686017][ T4346] usb 5-1: descriptor type invalid, skip [ 136.686031][ T4346] usb 5-1: descriptor type invalid, skip [ 136.686044][ T4346] usb 5-1: descriptor type invalid, skip [ 136.686058][ T4346] usb 5-1: descriptor type invalid, skip [ 136.699981][ T3609] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 136.716467][ T4346] usb 5-1: descriptor type invalid, skip [ 136.778375][ T14] usb 2-1: USB disconnect, device number 12 [ 136.784305][ T4346] usb 5-1: descriptor type invalid, skip [ 136.813686][ T3324] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 136.824418][ T4346] usb 5-1: descriptor type invalid, skip [ 136.838574][ T3324] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.842204][ T4346] usb 5-1: descriptor type invalid, skip [ 136.850530][ T14] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 136.853663][ T4346] usb 5-1: descriptor type invalid, skip [ 136.865703][ T3324] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 136.871092][ T4346] usb 5-1: descriptor type invalid, skip [ 136.882391][ T3324] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 136.894896][ T4346] usb 5-1: descriptor type invalid, skip [ 136.914677][ T3609] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 136.923596][ T4346] usb 5-1: descriptor type invalid, skip [ 136.928757][ T3609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.966036][ T4346] usb 5-1: descriptor type invalid, skip [ 136.981995][ T3609] usb 4-1: Product: syz [ 136.997486][ T4346] usb 5-1: descriptor type invalid, skip [ 136.997508][ T4346] usb 5-1: descriptor type invalid, skip [ 136.997523][ T4346] usb 5-1: descriptor type invalid, skip [ 137.009294][ T3609] usb 4-1: Manufacturer: syz [ 137.025992][ T4346] usb 5-1: descriptor type invalid, skip [ 137.027860][ T3324] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 137.032652][ T4346] usb 5-1: descriptor type invalid, skip [ 137.042523][ T3324] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 137.048920][ T4346] usb 5-1: descriptor type invalid, skip [ 137.054218][ T3324] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 137.065190][ T4346] usb 5-1: descriptor type invalid, skip [ 137.073646][ T3609] usb 4-1: SerialNumber: syz [ 137.091443][ T4346] usb 5-1: descriptor type invalid, skip [ 137.107502][ T3324] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.135191][ T4346] usb 5-1: descriptor type invalid, skip [ 137.135212][ T4346] usb 5-1: descriptor type invalid, skip [ 137.135226][ T4346] usb 5-1: descriptor type invalid, skip [ 137.135240][ T4346] usb 5-1: descriptor type invalid, skip [ 137.135255][ T4346] usb 5-1: descriptor type invalid, skip [ 137.165607][ T3609] usb 4-1: config 0 descriptor?? [ 137.171563][ T4346] usb 5-1: descriptor type invalid, skip [ 137.183946][ T5582] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 137.196414][ T5582] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 137.200595][ T4351] usb 1-1: USB disconnect, device number 10 [ 137.212875][ T4351] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 137.225179][ T3324] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 137.233141][ T3324] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 137.258798][ T3324] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 137.273751][ T4346] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 137.282945][ T4346] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 137.283094][ T3324] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.300761][ T4346] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.393520][ T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 137.457128][ T5582] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 137.465330][ T5582] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 137.493792][ T4346] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 16:06:48 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 137.503129][ T4346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.511378][ T4346] usb 5-1: Product: syz [ 137.516247][ T4346] usb 5-1: Manufacturer: syz [ 137.531492][ T4346] usb 5-1: SerialNumber: syz [ 137.563581][ T3324] usb 3-1: string descriptor 0 read error: -22 [ 137.571618][ T3324] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 137.590643][ T3324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.608326][ T5589] binder: BINDER_SET_CONTEXT_MGR already set [ 137.620780][ T5589] binder: 5588:5589 ioctl 4018620d 200001c0 returned -16 [ 137.643611][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 137.660806][ T3324] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 137.783585][ T14] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 137.800143][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 137.865441][ T4351] usb 3-1: USB disconnect, device number 7 [ 137.893858][ T4346] usb 5-1: 0:2 : does not exist [ 137.913821][ T3609] Error reading MAC address [ 137.949506][ T4346] usb 5-1: USB disconnect, device number 11 [ 137.964575][ T14] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 137.974346][ T14] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 137.983191][ T14] usb 2-1: Product: syz [ 137.987968][ T14] usb 2-1: Manufacturer: syz [ 137.992707][ T14] usb 2-1: SerialNumber: syz [ 138.014270][ T14] usb 2-1: config 0 descriptor?? [ 138.058812][ T14] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 138.082093][ T14] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 16:06:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000dea200000000800007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000000)='ext4_fc_track_range\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 16:06:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x2, 0x14, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) close(r1) 16:06:48 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) 16:06:49 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000404c05d50300000000000109022400010000000009041200010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "1f00cb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 16:06:49 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 138.488241][ T14] usb 2-1: USB disconnect, device number 13 [ 138.511464][ T14] ldusb 2-1:0.0: LD USB Device #0 now disconnected 16:06:49 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x12140, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) syz_open_pts(r2, 0x0) 16:06:49 executing program 4: syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000000)='./file0\x00', 0x4008, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x9894, &(0x7f0000012fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x80086601, 0x1000000000000) 16:06:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a"], 0x38}}, 0x0) 16:06:49 executing program 2: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) 16:06:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 138.830585][ T5612] binder: 5611:5612 ioctl c0306201 0 returned -14 [ 138.843658][ T3580] usb 1-1: new high-speed USB device number 11 using dummy_hcd 16:06:49 executing program 4: socket(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, r1, 0x503, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 16:06:49 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) 16:06:49 executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x5452, 0x0) 16:06:49 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 139.223725][ T3580] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 139.248981][ T3580] usb 1-1: config 0 has no interface number 0 16:06:49 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000340)='ext4_remove_blocks\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) [ 139.272747][ T3580] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.298512][ T3580] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.313099][ T3580] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 139.323016][ T3580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.344899][ T3580] usb 1-1: config 0 descriptor?? 16:06:49 executing program 4: socket$packet(0x11, 0x0, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) 16:06:50 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) 16:06:50 executing program 3: mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) [ 139.613850][ T4346] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 139.625190][ T3607] usb 4-1: USB disconnect, device number 10 16:06:50 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x42) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r1) [ 139.773480][ T4351] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.849029][ T3580] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0007/input/input13 [ 139.883831][ T4346] usb 2-1: Using ep0 maxpacket: 8 [ 139.957606][ T3580] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input18 [ 140.013761][ T3609] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.023792][ T4346] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 140.038224][ T4346] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.048524][ T4351] usb 5-1: Using ep0 maxpacket: 16 [ 140.066895][ T4346] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.088350][ T4346] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.111442][ T4346] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.141157][ T4346] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.161058][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.180100][ T3580] usb 1-1: USB disconnect, device number 11 [ 140.186563][ T4351] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.209313][ T4351] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 140.219954][ T4351] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 140.253576][ T3609] usb 3-1: Using ep0 maxpacket: 32 [ 140.313678][ T4351] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.328468][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.340694][ T4351] usb 5-1: SerialNumber: syz [ 140.373606][ T3609] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 140.373647][ T5627] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 140.385442][ T3609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 140.414544][ T4351] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 140.453426][ T4346] usb 2-1: usb_control_msg returned -71 [ 140.460874][ T4346] usbtmc 2-1:16.0: can't read capabilities [ 140.478969][ T4346] usb 2-1: USB disconnect, device number 14 16:06:51 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 140.577578][ T3609] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 140.613647][ T3609] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 140.622634][ T3609] usb 3-1: Product: syz [ 140.630717][ T3609] usb 3-1: Manufacturer: syz [ 140.640362][ T3609] usb 3-1: SerialNumber: syz [ 140.649839][ T3609] usb 3-1: config 0 descriptor?? [ 140.649957][ T4351] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 140.680161][ T4351] usb 5-1: USB disconnect, device number 12 [ 140.695640][ T3609] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 140.736186][ T3609] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 16:06:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) wait4(0x0, 0x0, 0x0, 0x0) [ 140.918873][ T4346] usb 3-1: USB disconnect, device number 8 [ 140.935828][ T4346] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 140.953508][ T3324] usb 1-1: new high-speed USB device number 12 using dummy_hcd 16:06:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, "863ef04367a03e5c3eb543f161060b299c4d9c"}) 16:06:51 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) 16:06:51 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000200)) 16:06:51 executing program 1: socket$packet(0x11, 0x0, 0x300) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) 16:06:51 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) 16:06:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$KDDELIO(r0, 0x8901, 0x0) [ 141.313659][ T3324] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.327019][ T27] audit: type=1326 audit(1712592411.846:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5645 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f065ac7de69 code=0x0 [ 141.340317][ T3324] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 16:06:51 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = mq_open(&(0x7f0000000000)='-))\x00', 0x40, 0x0, &(0x7f00000000c0)={0x6, 0xe184, 0x100, 0x5}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x5450, 0x0) [ 141.374557][ T3324] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 16:06:51 executing program 4: mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x8919, 0x0) [ 141.533358][ T4346] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 141.569290][ T3324] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.589082][ T3324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.630584][ T3324] usb 1-1: Product: syz [ 141.634932][ T3324] usb 1-1: Manufacturer: syz [ 141.639570][ T3324] usb 1-1: SerialNumber: syz [ 141.694542][ T3324] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 141.701400][ T3324] cdc_ncm 1-1:1.0: bind() failure [ 141.803453][ T4346] usb 3-1: Using ep0 maxpacket: 32 [ 141.937613][ T4346] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 141.951605][ T4346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 16:06:52 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) [ 142.163580][ T4346] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 142.183309][ T4346] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 142.216536][ T4346] usb 3-1: Product: syz [ 142.225849][ T4346] usb 3-1: Manufacturer: syz [ 142.236488][ T4346] usb 3-1: SerialNumber: syz [ 142.255701][ T4346] usb 3-1: config 0 descriptor?? [ 142.325381][ T4346] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 142.356413][ T4346] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 142.569026][ T4351] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 142.774925][ T4346] usb 3-1: USB disconnect, device number 9 [ 142.799133][ T4346] ldusb 3-1:0.0: LD USB Device #0 now disconnected 16:06:53 executing program 4: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5421, &(0x7f0000000040)={'veth1_to_bond\x00'}) [ 142.835233][ T4351] usb 2-1: Using ep0 maxpacket: 16 16:06:53 executing program 4: socket$packet(0x11, 0x0, 0x300) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) [ 142.963420][ T4351] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.982425][ T4351] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 16:06:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) [ 143.002579][ T4351] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 16:06:53 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fgetxattr(r0, &(0x7f0000000780)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) [ 143.098996][ T5666] input: syz0 as /devices/virtual/input/input14 [ 143.105781][ T4351] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.133308][ T4351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.156368][ T4351] usb 2-1: SerialNumber: syz 16:06:53 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000200)) 16:06:53 executing program 4: ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x40045010, 0x0) [ 143.219868][ T5658] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 16:06:53 executing program 3: mlockall(0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x33) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) [ 143.274560][ T4351] cdc_acm 2-1:1.0: Control and data interfaces are not separated! 16:06:53 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) 16:06:54 executing program 2: socket$packet(0x11, 0x0, 0x300) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) 16:06:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 143.503892][ T4351] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 143.538671][ T4351] usb 2-1: USB disconnect, device number 15 16:06:54 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tcp_mem(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0xfcebdee4e414896a, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) dup3(r1, r1, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r3 = socket$inet6(0xa, 0x80801, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0) mq_open(&(0x7f0000000400)='\x1a(\x028\xd2\xc5\xb5\x884K\xc3<\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8b\x1e\x83jp;\x00\x00\xae\xcf\xce\x155', 0x79, 0x78, 0x0) [ 143.685613][ T4346] usb 1-1: USB disconnect, device number 12 [ 143.697517][ T5680] binder: 5678:5680 ioctl c0306201 20000080 returned -14 16:06:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42042, 0x0) dup3(r0, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f00000003c0)='.pending_reads\x00', 0x850040, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system', 0x0, 0x0) mq_open(&(0x7f0000001400)='\x89\x14\xc5H\x9d\xd3\x03(#X\xa61\x8b?\xef\x03\xe9\vQh?\x10\x13\x9dG\x0f\xc0\x9c\x05\xd2\xaa\xd0\x83\xa3\xf8\xe8_\x1d\xf3\xa3^\xed\xfe7\xa8\xfb&[\x8a\x85\xd4\xdd\xac\xb9IR\x15;ceF3\xc0\xd3\xca{\xbc\xcf\xce\xa8F\a_\x88q\xaf\a\xb5\b\xe3@\x12\x18\x10\x89\xe7\x97\x86G\x05.b\xd6\x0e\xa7\x1a\xc7J\tc\xf4\xb8p\xec\x9a\n\xe9\xa1\xbb\'', 0x841, 0x19, 0x0) 16:06:54 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 16:06:54 executing program 2: r0 = mq_open(&(0x7f0000001080)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x65, 0x0) close(r0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000005c0), 0x40040, 0x0) r2 = memfd_create(&(0x7f0000000040)='}\xa4-}{\x10', 0x0) fcntl$dupfd(r2, 0x0, r1) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000021c0), &(0x7f0000003440)=ANY=[@ANYBLOB="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"], 0x1b, 0x0) 16:06:54 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf, 0xca0, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x161, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 16:06:54 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) 16:06:54 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 16:06:54 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) 16:06:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_clone(0x660694c0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:06:54 executing program 0: r0 = memfd_create(&(0x7f00000004c0)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY30xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000003300)=""/4096, 0x1000, 0x0, 0x0, 0x0) 16:06:55 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000ffdd00850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) 16:06:55 executing program 4: r0 = mq_open(&(0x7f0000001700)='macvtap0\x00', 0x40, 0x1, 0x0) preadv2(r0, 0x0, 0x0, 0x6, 0xd1f, 0x18) 16:06:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000780), &(0x7f0000000740)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000006c0)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) [ 144.853613][ T4346] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.869804][ T4346] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 16:06:55 executing program 4: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f00000009c0)="a2"}, 0x20) 16:06:55 executing program 0: socket$inet6_tcp(0x1c, 0x1, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) setpriority(0x0, 0x0, 0xfffffffc) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) [ 144.912110][ T4346] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 16:06:55 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x41) [ 145.154516][ T4346] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.189364][ T4346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 16:06:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000200)) [ 145.230581][ T4346] usb 2-1: Product: syz [ 145.250277][ T4346] usb 2-1: Manufacturer: syz 16:06:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x2, @remote}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x18) [ 145.271341][ T4346] usb 2-1: SerialNumber: syz 16:06:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000180)) 16:06:55 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) [ 145.384456][ T4346] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 145.391323][ T4346] cdc_ncm 2-1:1.0: bind() failure 16:06:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000400), &(0x7f0000000440)=0x8) 16:06:56 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), 0x0, 0x0, 0x3) 16:06:56 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) 16:06:56 executing program 4: socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, &(0x7f0000000080)=0x10) 16:06:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_clone(0x660694c0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 145.880182][ T5749] dummy0 speed is unknown, defaulting to 1000 16:06:56 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x40045010, 0x0) 16:06:56 executing program 3: r0 = socket(0x2, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) 16:06:56 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) 16:06:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) [ 146.112382][ T27] audit: type=1326 audit(1712592416.626:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa56987de69 code=0x0 16:06:56 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 16:06:56 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) 16:06:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, "cb0b86ba84950cfefc99ea82b153487f1f8788"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 16:06:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000006c0)) 16:06:56 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000010c0)='./file0/../file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000001000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 16:06:57 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x41) 16:06:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @remote, @broadcast}, @address_request}}}}, 0x0) 16:06:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 16:06:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f0000000040)) 16:06:57 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000200)) 16:06:57 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) 16:06:57 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, 0x0, 0x0) [ 147.176476][ T14] usb 2-1: USB disconnect, device number 16 16:06:57 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 16:06:57 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 16:06:57 executing program 2: mkdir(&(0x7f00000028c0)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000002a40)='./file0\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x1c, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x38}}, 0x0) 16:06:57 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000780)={0x256, 0x7d, 0x0, {{0x0, 0x13b, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4, '}##-', 0xf3, '\xea\x17\xaag\xa0\xe9@\xbd\n\xfc\x01}\xff\x16\xc5H\x99;/vo\'\x86\v\xaf\x16\xdb\xba\xee$z\x85K\x17\f\xeb\x8a\b\xd2\xea\xa0U.j\xf9\xdf\x8d\x17i\x05x\xda\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xfcb\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2Ksl\xe6l\xcap\x85a?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2;\xf7(\xe6\xd6\xe9\xc1x\xe0H3L\xac\x80\x00\x00\x00\x00\x00\x00\x00\xd8\x8b\xbah\xd3CnS)m\x96\xa3P|F+\xfdAg\xf3\xa6\x1a\xe0W\x9e\xfc\x1c\x85\xb4\x80\xbc\xacJ{\xbc\x8b\x83\xee\xa5v\xbcM8\xb4#\xcb7s\xdcT\x7f\xd1!\xa5\x1a\x87:\xf9\x9b-\x92q-\x00\x94\xe9\\\x95\xfbi\xaa\x8b\xfe\xde\xa0,>\x1fL\x91L\xf1\xa5\xe2b(\x81\x163\xc6\x18z%o!\x94&\x8f\xbf', 0x5, 'rfdno', 0xc, 'C\x01B(\t+o\xc0\x04\x00\x00\x95'}, 0x106, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xb4\xa4\x89\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\x06\x84\xc9\x14\x0e\x03\xce\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\xa3\x00\x00\xbbXE\x8f\x89\x1a\xa8h\x01}\x13\xcf\xc5\x99Wk\x11\xb0k\xb1\xadm\b\x9a\x00\x8b\x15U]'}}, 0x256) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 16:06:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:06:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 16:06:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) [ 147.468415][ T5796] binder: 5795:5796 unknown command 0 [ 147.484682][ T5796] binder: 5795:5796 ioctl c0306201 20000080 returned -22 16:06:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000580)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="240eac0a811acb9a8e6de190d0d43b50fa3126fd9a0d38c5ba013f729fcd55426977d3dd49d2ff95094bd1bdc5ee1a292cf5e95447fee11dcefad956032721dd1ca671347a30df69f93e169a4128b4280742f59a5573b1718ad587db718a2cb930180e306929c94fda70f90c8f464177acee7d0ca4cef77235fd9ff1401d99c963c84cfdfc6faf6bf98f19fffe93d852c2bc2124ec708b3b46bb44cb1fabd93670b4e0f0ebf284569eed91a651c85d26f817c7f47bd6726dfa3df153f8951d45190b7aacdc63bbe40d4aff75bfc556c9508086286c75afc29fc9407571cd2eace8a53a289a05ae8cf03352fdd3de9c523797b88ad4ac99"], 0x4, 0x24f, &(0x7f00000002c0)="$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") mount$9p_tcp(0x0, &(0x7f00000014c0)='./file0\x00', 0x0, 0x0, 0x0) 16:06:58 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) [ 147.667468][ T5807] loop2: detected capacity change from 0 to 128 [ 147.716617][ T5807] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 147.750338][ T5807] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 16:06:58 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="b2", 0x1}], 0x1}, 0x0) [ 147.775952][ T5807] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. 16:06:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000240)=""/212) [ 147.851526][ T5807] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz-executor.2: checksumming directory block 0 16:06:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) write$P9_RLOPEN(r2, 0x0, 0x0) 16:06:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) [ 147.941690][ T3560] EXT4-fs (loop2): unmounting filesystem. 16:06:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 16:06:58 executing program 4: r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r1, 0x0) write$cgroup_pressure(r3, &(0x7f0000000000)={'full'}, 0x2f) 16:06:58 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r2}) 16:06:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 16:06:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x75e3, &(0x7f0000001440)={0x0, 0x7294}) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) close(r0) close(r1) socket$igmp6(0xa, 0x3, 0x2) 16:06:58 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x42) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r1) 16:06:58 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033#\\\xb7\x98zvS\x99[d \xff\xff\x00\x80\x00\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xb8\xad\xe1\xba\xf2\xb6F\x85\xdaA\x85\xb8\\\x94\xc3\xc4\xb1\xa2\x16\xff\x03;\x01\x00\x00\x00\x01\x00\x00\x00\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x01\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7hTgiz\nX\x91%\x16.\xac#4\xd5#\xd1\xa2i\x1e*\x99\x95\x1a\xcb#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2v[\t\x00\x8d\xf3\xcc1\r5V\x00\x00\x00\x00\x00\x00\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\a\x05^\x11O\xd6\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xe0\x1e@gW\xf1[\x93H\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00Y\xf6\x85\x17\x86,\x9bf\xb9Z\x8e\xa4\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oNTqU\xed\x14a6\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xff\x97\xbaq\rY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xd9\xf0\xef\x86\t\xaf\vi\xdc\xbf?\xf5\x02\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'5\xff\xdf\xec&+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\xa2\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]4\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01\x17\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x90-\x19\xb9\x93\xd3k\xb9\xf3\\\xb3\xa3\x86\x8b=_\xfb\xfeI7\x8c\x9f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\\5\xf5\x9b\xef\xc9x\xb6=\xb4\xe7l z\x1c\xac\x93\x81\xa5\xa7s\x89[\xc8\xd2\xfe\xe8\xc2\xdf},\x14\x81\xeb\x12g\xf3\xa6\xd3\xc7\x13\xb7^\x19\t=[\xbb\x0e\xba^\xbaE\x0fP\xb8H\xcdCD\xb9\x91\xc7\x18\xf5b\x80\xfe\xa4\xcbW\xfb\x04\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000), 0xc) 16:06:58 executing program 4: r0 = syz_io_uring_setup(0x4d18, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f00000000c0)) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = dup2(r1, r0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000180)) 16:06:59 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) 16:06:59 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) ioprio_set$pid(0x2, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) splice(r0, 0x0, r2, 0x0, 0x8002, 0x0) vmsplice(r1, &(0x7f0000000a40)=[{&(0x7f0000000480)="ba", 0x1}], 0x1, 0x0) 16:06:59 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)="81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 148.602648][ T5840] binder: 5839:5840 unknown command 0 [ 148.616205][ T5840] binder: 5839:5840 ioctl c0306201 20000080 returned -22 [ 148.623601][ T27] audit: type=1326 audit(1712592419.136:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48b1e7de69 code=0x0 [ 148.673511][ T4351] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 148.679286][ T5843] [ 148.683555][ T5843] ============================================ [ 148.689839][ T5843] WARNING: possible recursive locking detected [ 148.696024][ T5843] 6.1.84-syzkaller #0 Not tainted [ 148.701070][ T5843] -------------------------------------------- [ 148.707783][ T5843] syz-executor.4/5843 is trying to acquire lock: [ 148.714208][ T5843] ffff88801e4ed868 (&pipe->mutex/1){+.+.}-{3:3}, at: pipe_write+0x12d/0x1af0 [ 148.723272][ T5843] [ 148.723272][ T5843] but task is already holding lock: [ 148.730846][ T5843] ffff88807886a468 (&pipe->mutex/1){+.+.}-{3:3}, at: pipe_wait_readable+0x3df/0x550 [ 148.740427][ T5843] [ 148.740427][ T5843] other info that might help us debug this: [ 148.748526][ T5843] Possible unsafe locking scenario: [ 148.748526][ T5843] [ 148.755992][ T5843] CPU0 [ 148.759288][ T5843] ---- [ 148.762574][ T5843] lock(&pipe->mutex/1); [ 148.767109][ T5843] lock(&pipe->mutex/1); [ 148.771504][ T5843] [ 148.771504][ T5843] *** DEADLOCK *** [ 148.771504][ T5843] [ 148.779658][ T5843] May be due to missing lock nesting notation [ 148.779658][ T5843] [ 148.788016][ T5843] 1 lock held by syz-executor.4/5843: [ 148.793414][ T5843] #0: ffff88807886a468 (&pipe->mutex/1){+.+.}-{3:3}, at: pipe_wait_readable+0x3df/0x550 [ 148.803428][ T5843] [ 148.803428][ T5843] stack backtrace: [ 148.809334][ T5843] CPU: 0 PID: 5843 Comm: syz-executor.4 Not tainted 6.1.84-syzkaller #0 [ 148.817673][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 148.827850][ T5843] Call Trace: [ 148.831136][ T5843] [ 148.834128][ T5843] dump_stack_lvl+0x1e3/0x2cb [ 148.838822][ T5843] ? nf_tcp_handle_invalid+0x642/0x642 [ 148.844297][ T5843] ? panic+0x75d/0x75d [ 148.848415][ T5843] validate_chain+0x4711/0x5950 [ 148.853300][ T5843] ? reacquire_held_locks+0x660/0x660 [ 148.858692][ T5843] ? reacquire_held_locks+0x660/0x660 [ 148.864085][ T5843] ? reacquire_held_locks+0x660/0x660 [ 148.869588][ T5843] ? validate_chain+0x112/0x5950 [ 148.875791][ T5843] ? reacquire_held_locks+0x660/0x660 [ 148.881270][ T5843] ? reacquire_held_locks+0x660/0x660 [ 148.886705][ T5843] ? look_up_lock_class+0x77/0x140 [ 148.891850][ T5843] ? register_lock_class+0x100/0x990 [ 148.897169][ T5843] ? is_dynamic_key+0x260/0x260 [ 148.902225][ T5843] ? mark_lock+0x9a/0x340 [ 148.906590][ T5843] __lock_acquire+0x125b/0x1f80 [ 148.911472][ T5843] lock_acquire+0x1f8/0x5a0 [ 148.916533][ T5843] ? pipe_write+0x12d/0x1af0 [ 148.921169][ T5843] ? read_lock_is_recursive+0x10/0x10 [ 148.926686][ T5843] ? __might_sleep+0xb0/0xb0 [ 148.931368][ T5843] __mutex_lock+0x132/0xd80 [ 148.935940][ T5843] ? pipe_write+0x12d/0x1af0 [ 148.940651][ T5843] ? read_lock_is_recursive+0x10/0x10 [ 148.946072][ T5843] ? __lock_acquire+0x1f80/0x1f80 [ 148.951150][ T5843] ? __mutex_trylock_common+0x17e/0x2e0 [ 148.956718][ T5843] ? pipe_write+0x12d/0x1af0 [ 148.961326][ T5843] ? mutex_lock_nested+0x10/0x10 [ 148.966302][ T5843] ? aa_file_perm+0x3e3/0xf60 [ 148.971015][ T5843] pipe_write+0x12d/0x1af0 [ 148.975462][ T5843] ? print_irqtrace_events+0x210/0x210 [ 148.980962][ T5843] ? aa_path_link+0xea0/0xea0 [ 148.986008][ T5843] ? do_raw_spin_unlock+0x137/0x8a0 [ 148.991227][ T5843] ? pipe_wait_readable+0x3df/0x550 [ 148.996452][ T5843] ? mutex_lock_nested+0x10/0x10 [ 149.001503][ T5843] ? finish_wait+0xcf/0x1e0 [ 149.006031][ T5843] ? pipe_read+0x12a0/0x12a0 [ 149.010644][ T5843] ? end_current_label_crit_section+0x147/0x170 [ 149.016982][ T5843] ? common_file_perm+0x17d/0x1d0 [ 149.022030][ T5843] ? fsnotify_perm+0x67/0x590 [ 149.026728][ T5843] do_iter_write+0x6e6/0xc50 [ 149.031353][ T5843] ? iter_file_splice_write+0x2d5/0xfc0 [ 149.036913][ T5843] ? vfs_iter_write+0xa0/0xa0 [ 149.041777][ T5843] ? vfs_iter_write+0x69/0xa0 [ 149.046496][ T5843] iter_file_splice_write+0x830/0xfc0 [ 149.051900][ T5843] ? splice_from_pipe+0x240/0x240 [ 149.056956][ T5843] ? common_file_perm+0x17d/0x1d0 [ 149.062018][ T5843] ? fsnotify_perm+0x67/0x590 [ 149.066740][ T5843] ? bpf_lsm_file_permission+0x5/0x10 [ 149.072314][ T5843] ? splice_from_pipe+0x240/0x240 [ 149.073381][ T4351] usb 3-1: Using ep0 maxpacket: 32 [ 149.077381][ T5843] do_splice+0xfdb/0x1790 [ 149.086945][ T5843] ? fd_install+0x57/0x540 [ 149.091599][ T5843] ? __might_fault+0xa1/0x110 [ 149.096551][ T5843] ? __fget_files+0x28/0x4a0 [ 149.101361][ T5843] ? __fget_files+0x435/0x4a0 [ 149.106044][ T5843] ? wait_for_space+0x2d0/0x2d0 [ 149.110913][ T5843] ? __fdget+0x182/0x210 [ 149.115177][ T5843] __se_sys_splice+0x340/0x420 [ 149.119970][ T5843] ? __x64_sys_splice+0xf0/0xf0 [ 149.124846][ T5843] ? syscall_enter_from_user_mode+0x2e/0x230 [ 149.130851][ T5843] ? lockdep_hardirqs_on+0x94/0x130 [ 149.136087][ T5843] ? __x64_sys_splice+0x1d/0xf0 [ 149.141296][ T5843] do_syscall_64+0x3d/0xb0 [ 149.145729][ T5843] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.151650][ T5843] RIP: 0033:0x7fa56987de69 [ 149.156079][ T5843] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 149.176031][ T5843] RSP: 002b:00007fa56a6830c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 149.184892][ T5843] RAX: ffffffffffffffda RBX: 00007fa5699abf80 RCX: 00007fa56987de69 [ 149.192903][ T5843] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 149.200896][ T5843] RBP: 00007fa5698ca47a R08: 0000000000008002 R09: 0000000000000000 [ 149.208880][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.216872][ T5843] R13: 000000000000000b R14: 00007fa5699abf80 R15: 00007ffd5a413a78 16:06:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @remote, @broadcast}, @address_request}}}}, 0x0) 16:06:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) [ 149.224885][ T5843] [ 149.228082][ C0] vkms_vblank_simulate: vblank timer overrun 16:06:59 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x40045010, 0x0) 16:06:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x0, 0x0) [ 149.283551][ T4351] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 149.294017][ T4351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 149.307533][ T5850] uinput: write device info first 16:06:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/229, 0x22fe0}], 0x3}, 0x0) 16:06:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="7800000024005186000000000000000100000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671004c00020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a41fcab000"/96], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d0000000a00010062617369630000003c000200380002800800010080100001000000020000000000000000000c00000000000100"/84], 0x6c}}, 0x0) 16:06:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') dup2(r0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8903, &(0x7f0000000080)={'wlan0\x00'}) 16:06:59 executing program 0: move_pages(0x0, 0x0, &(0x7f0000000040), 0xfffffffffffffffc, 0x0, 0x2) [ 149.413135][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.430922][ T5859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 16:07:00 executing program 3: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000180)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) 16:07:00 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 16:07:00 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000740000000000000000230000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) [ 149.503547][ T4351] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 149.517569][ T4351] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 149.565907][ T4351] usb 3-1: Product: syz [ 149.579009][ T4351] usb 3-1: Manufacturer: syz [ 149.604161][ T4351] usb 3-1: SerialNumber: syz [ 149.622898][ T4351] usb 3-1: config 0 descriptor?? [ 149.684635][ T4351] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 149.713821][ T4351] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 149.907128][ T3609] usb 3-1: USB disconnect, device number 10 [ 149.915205][ T3609] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 150.473434][ T3609] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 150.713358][ T3609] usb 3-1: Using ep0 maxpacket: 32 [ 150.833447][ T3609] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 150.841757][ T3609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 151.013444][ T3609] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 151.022644][ T3609] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 151.031337][ T3609] usb 3-1: Product: syz [ 151.035683][ T3609] usb 3-1: Manufacturer: syz [ 151.040467][ T3609] usb 3-1: SerialNumber: syz [ 151.046291][ T3609] usb 3-1: config 0 descriptor?? [ 151.084562][ T3609] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 151.094817][ T3609] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 151.498029][ T3324] usb 3-1: USB disconnect, device number 11 [ 151.517080][ T3324] ldusb 3-1:0.0: LD USB Device #0 now disconnected