last executing test programs: 17.511942622s ago: executing program 0 (id=3224): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080), 0xfd32) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 11.118710967s ago: executing program 4 (id=3256): r0 = syz_usb_connect$hid(0x7, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="b40000000300000061108c000000000063000000000000009500000c00000000a6c71cb4cbe04ab14dfeb7c6b4ea189fe9d8aa2730a864598e31097ed3404c07000000f3cfc2cf1b91f191c5179cac6e294616fcc216a77d6d8e13dfcc5e8f45cd0e93a5d2b5846bc7ec7c8d6b68ec34a83c3d7a8c272e135a2fb788549c5a050000000000000055ed36fb64659d776af9"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000ac0)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000440)=0x101, 0x4) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) syz_emit_ethernet(0x132e, &(0x7f0000002ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000cd0412f83a00fe8000000000000000000000000000aaff020000000000000000000000000001040090780000000060c12c00000000000000000000000000000000000000000100000000000000000000ffff7f000001a4020401"], 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/214, 0xd6}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f00000008c0)=""/35, 0x23}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/1, 0x1}], 0x9}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27, 0x1b}], 0x1, &(0x7f0000000780)=""/112, 0x70}}], 0x3, 0x40002002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000b80)="d5ba5fee895b7f96aeeef3025edd089ecc8b56bbf829cc29aefe9a43b8b53122413aa25f107f1fc8067e4e38844aa615558be07f7d0f040000000000000095ef3d", 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000008eda0000e90000cc1db447d3d239837eb5a3c44a2415dd45325c3caa540fa47704da9a85b6e375782110a05c609a90f9956933f6916e91106056e732c7377ab7a63f0226399e9fd5214ae7309992097f0a3cfe", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x903, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000011c0)={0x0, 0x8}) sched_setscheduler(r5, 0x0, &(0x7f0000000a80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000b00)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 8.044738059s ago: executing program 4 (id=3269): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x7fe2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0), 0x3, 0x4cd, &(0x7f0000000780)="$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") r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) eventfd(0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newtclass={0x74, 0x28, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x7, 0xffe0}, {0x7, 0xffff}, {0xfff1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x74, 0x7f}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x9}}, @TCA_RATE={0x6, 0x5, {0x3, 0xe}}, @TCA_RATE={0x6, 0x5, {0x2, 0xdc}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x74}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000380)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#%\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce5+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) 7.158538282s ago: executing program 4 (id=3272): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b000a05240000000d240f0100000000000000000006240700000009058103400000000009058202080000000009050302"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) close(r3) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000940)=ANY=[@ANYRESDEC=r3], &(0x7f00000008c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x8, 0x81, 0x0, 0x20, 0x9}, 0x13, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0x15555555555557b0}) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000003c0)={[{0x0, 0x0, 0x0, 0x0, 0x2, 0xfd}, {0x0, 0x9be7, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000}], 0xffffffff}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = epoll_create(0x7) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{}, {0x20}]}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000040)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) fcntl$dupfd(r8, 0x0, r9) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1705, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x80, 0xfa, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0xfa, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xed3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xdf, 0x3, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x9, 0x7}}]}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x10, 0x9, 0x6, 0x8, 0x28}, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="050f0f00010a1003000700020129e5"], 0x8, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x437}}, {0x5d, &(0x7f0000000c80)=ANY=[@ANYBLOB="5d03ba7fe427de8f6d40b2a404000000000000000d54bfd91ca4b72fde888b38dd9fd1d032e14b2c6759b8961ce873af34426073aa214e9b50710ee618cb03d2d0ecb727542c017d3038582b1debc5e900"/95]}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x80b}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x44c}}]}) 7.05604068s ago: executing program 0 (id=3271): socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x360, 0x11, 0x148, 0x360, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x2000, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x10) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x93) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x1d0, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) r7 = dup3(r6, r5, 0x0) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0213000005000000000000000000000003"], 0x28}}, 0x0) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x58df, 0x8, 0x1100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x1}, 0x48) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x8, 0x0}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r10}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x1, 0x8000}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.594510618s ago: executing program 2 (id=3276): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c0000001800159900000000000000001d01000008001200", @ANYRES32=0x0, @ANYBLOB="9aef556787388aff7aaa725b697f32452666dd894ef625d7ddc41c5fbe7aa6c85f6cf4e7da045f5946e259096ac6d9053619045a3d35c1c3bba62ff56f400abe9aaccec16a6614db1c2e2284a4d0c993b36668815b2fdc7a6af0e58a616269e83c3ea4f9bbd8a6da56e9bf69bbc98392539f210e7dbd66f6b04c22d53c7266ce12406f19a5c06541e8021357ec5bab797908780f82a9aef453af264540fef38ff15f9f1bbdbffe1b32a4980d05748528ca146c3057abbb95ab2ae348df752103cbcc2d"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 6.56947514s ago: executing program 0 (id=3277): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x5d) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) fdatasync(r6) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000003c0)={&(0x7f0000000280)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 5.760773496s ago: executing program 2 (id=3285): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="76cb00006a00370300000000000000000a0000000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20002000}, 0x20000082) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x101}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x101}]}}}]}, 0x40}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001c00)={0x10, 0x6, {0x94, @usage=0xcee, 0x0, 0x4, 0xf672, 0x1000, 0x145, 0x900, 0x0, @struct={0x400, 0x6}, 0x7, 0x9, [0x4, 0xffff, 0x80000001, 0x7, 0x40, 0x2]}, {0xf740, @usage=0x1, 0x0, 0x80000000, 0x1000, 0x9, 0x1ff, 0xd347, 0x3, @usage=0x4, 0xff, 0x2, [0xaa, 0x200, 0x2, 0x4, 0x44, 0x9]}, {0xffffffff, @struct={0x10001}, r2, 0xbb4, 0x20, 0x81, 0x3, 0x2, 0xe, @usage=0x4, 0x9, 0x1, [0x8001, 0x200, 0x3, 0x800, 0x80000001, 0x6]}, {0x7, 0x8, 0x200}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001c00)={0x10, 0x6, {0x94, @usage=0xcee, 0x0, 0x4, 0xf672, 0x1000, 0x145, 0x900, 0x0, @struct={0x400, 0x6}, 0x7, 0x9, [0x4, 0xffff, 0x80000001, 0x7, 0x40, 0x2]}, {0xf740, @usage=0x1, 0x0, 0x80000000, 0x1000, 0x9, 0x1ff, 0xd347, 0x3, @usage=0x4, 0xff, 0x2, [0xaa, 0x200, 0x2, 0x4, 0x44, 0x9]}, {0xffffffff, @struct={0x10001}, r2, 0xbb4, 0x20, 0x81, 0x3, 0x2, 0xe, @usage=0x4, 0x9, 0x1, [0x8001, 0x200, 0x3, 0x800, 0x80000001, 0x6]}, {0x7, 0x8, 0x200}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000240)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pread64(r5, &(0x7f0000000680)=""/228, 0xe4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x40) fcntl$lock(r4, 0x0, &(0x7f0000000280)={0x1, 0x3, 0x7, 0x30}) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r11, {0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) 5.372033308s ago: executing program 2 (id=3286): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private=0xa010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000740)=[{{&(0x7f0000000480)=@file={0x1, './file1/file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000280)="8aeb83317d05733c", 0x8}, {&(0x7f0000000880)="a0c4399f2781d2d72ba663a216f232ac166a38e7fc4feaf7481bdddb6856198b8eeff67b248a5922f3e69eff6e9c4de747ab62b1169562bf3d67cd978f749953cc8a6730137d7dae59b33d9120a43d0d85565b988632ade6fa5be6b65592b26e269bb14cd223618a974e0ccea95f1c485716242f443795be86743c1b444a178d77c06a1b36954eae73af2eb29d1ff9f2f31c60af3081387f1bcb06b120540bcb82d99713f29a9a96bd3f97d9428922a48b85e3cd05d5717b6609fe0b62969a1466afdeb911d3cb87", 0xc8}, {&(0x7f0000000680)="930df61f5fc64b1e769d9723e6c255243be90ad3dbe50adc1f4a347167bbb890df4adc7a22d106f5c965145721a2fb1499eee06d99f9190b7063251d72847db63a61237323762bbf52c07378b32488bd7afd5fc1885f0917d88e00eac466bef3ba6d5736c84a96cea40121c6", 0x6c}, {&(0x7f0000000980)="cb3677e0a69fbe2ea092d8f32c222d8205b36514acd1ed3969f9de7741bd1ee52448cba7f39332acc824c29b1423a20a391368c0715370b92438d583de8dc4b67bfc29900ff312170081aaddfc637fe552e1730a2863acb172457f87a28e13da832fdefddbcc4b6d475affd96e8ea4dac1f652d579c76e7124815c12046d9f58366af4bf09b0fdfe9e521c86dedace92b1c9380bfa88ff27760cb3b20092d18c7106fd74b3ca8a9e7c74e735983913bd08e65ea1d3b270e80067de32d30fe552741e667f002929b58caadb1d806276fe3ff4acbb0d9b1debaee57f", 0xdb}, {&(0x7f0000000780)="df296daa268797dedd4d449f6b7594f1c4b126c170bfcae2d723fbd887a0a15aefaa9e34809e266a43459271a28911ee69da8371f6f9dc74fca100a91dc3765e9f32f54157e2dc4c9627d8907ab14e6d6481883b3bfe5409fd6b94c574ad935d3f7fe5a16a814cff43673548c32fa5d27462b6ea987778579f75c917160c", 0x7e}, {&(0x7f0000000a80)="4d7ce2560d5df5ee13e285c3fd36fb41516ca3d41c0b6122a706ce8dacc069ea8a9017880543a06320bef7a5bd9c9cbcac26e0ca110760c6222de289b144644e0aadf5144f9971496a42aca202607441ff3e0f26f667a6e6eb4eacf61fb4b405196e283b696c568c07fbf20279c8914e7d2cb6a788248baf0c82927f4c99e76c740aa28a46d0734afca4c0b94bc641b44cbc7ba145e65d29fbc3e2368f5b5647e8ed10cb439bb0ecb442460cf9075c13808ae810fbc1f870390ff886f9aab4ea7d7471516393d58d071264", 0xcb}], 0x6, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20, 0x80}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="00bb23e700000000000000b702000014000000b703f712637e0cbb7f85c3aa6ce4f96a6e0000000000000500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000850000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = signalfd(0xffffffffffffffff, 0x0, 0x0) signalfd(r7, &(0x7f00000000c0), 0x8) execveat(0xffffffffffffffff, &(0x7f0000000300)='./file1/file0\x00', &(0x7f0000000640)=[&(0x7f0000000500)='&[\x9c\x00'], &(0x7f0000000840)=[0x0], 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r8, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5.267745347s ago: executing program 4 (id=3287): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00'}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "1338d8a4", {0x3, 0x101, 0x0, 0x40, 0x4, 0x7f, 0x8}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c00000001090212000110655ca67392a6000000"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x2e, 0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000000940)=""/243, 0x1f, 0xf3, 0x0, 0x9}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x20, &(0x7f0000000bc0)={&(0x7f0000000a40)=""/169, 0xa9, 0x0, &(0x7f0000000b00)=""/172, 0xac}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xce, '\x00', 0x0, 0x17, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000240)=0x9, 0x4) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000380)='rpc_pipefs\x00', 0x0) 4.596290742s ago: executing program 1 (id=3291): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x7, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = getpid() getpgid(r5) r6 = accept(r4, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) recvmmsg(r3, &(0x7f0000000700)=[{{&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000900)=""/163, 0xa3}}, {{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000840)=""/150, 0x96}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/52, 0x34}, {&(0x7f0000000580)=""/42, 0x2a}, {&(0x7f0000000380)=""/72, 0x48}], 0x6, &(0x7f0000000680)=""/127, 0x7f}, 0x9}], 0x2, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'wg2\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="03011400ff1e430000000800ad0001140000002f"], 0xdd12}], 0x1}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000002640)) close_range(r11, 0xffffffffffffffff, 0x0) pwritev(r7, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.526463898s ago: executing program 2 (id=3292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x10, 0x80, 0x101, 0x0, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x67, 0x0, 0x5, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0x13, 0xdd, [@empty, @multicast1, @rand_addr=0x64010101, @loopback]}, @ra={0x94, 0x4}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x1, 0xa, 0xfffffffc, 0x0, r1, 0xffffffff, '\x00', r4, r5, 0x5, 0x1, 0x4, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) 3.65255008s ago: executing program 2 (id=3293): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) (rerun: 32) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000400)="$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") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async, rerun: 64) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$eJzs3M9rI+UbAPAn7XZ/f/dbxIO3HViEFjZh0x+L3qru4g/sUlY9eNI0SUN2k0xp0rT25MGjePA/EQVPHv0bPHj2Jh4Ub0IlM1PdqgtC08RtPx+YPPO+efPM84Zl4ZkpCeDcmk9+/bkUN+JKRMxGxPWI7LxUHJm1PLwQETcjYuaJo1TM/zFxMSKuRsSNUfI8Z6l46/Pbw1urP731yzffXbpw7Yuvv5/eroFpezEiutv5+V43j2krj4+K+dqwncXuyrCI+Rvdx8U4zeNeczPLsFc7WlfL4nIrX59u7/ZHcatTq49iq72VzW/38gv2h62jPNkHHtV2snGjuZnFdj/NYusgr2v/IP+/7aA/yPM0inwfZeljMDiK+Xxzv5nvZ/txFuu9QTGf500bzf1RHBaxuFzU004jq2PzJN/0f9vb7d7ufjJs7vTbaS9ZrVRfqlTvlqs7aaM5aK6Ua93G3ZVkodUZLSsPmrXuWitNW51mpZ52F5OFVr1erlaThXvNzXatl1SrleXKnfLqYnF2O3n9wXtJp5EsjOKr7d7uoN3pJ1vpTpJ/YjFZqiy/vJjcqibvrG8kGw/v31/feDfuvf/glfU3XysW/a2sZGHpztJSuXqnvFRdPIP7/+Ap+/+kKHqM+4cTKU27AIBnj/4fmIbT6/93HsbhYTZ/mv1/6P/HYlz97+Ek+t/z3v+fwv7hRPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1g9zX76Rnczn42vF/P+KqeeKcSkiZiLi8B/MxsVjOWeLPHNPWT/3lxq+LUWWYXSNS8VxNSLWiuO3/5/2twAAAABn11cf3/ws79bzl/lpF8Qk5TdtZq5/OKZ8pYiYm/9xTNlmRi/PjylZ9u/7QuyPKVt2A+vymJLlt9wujCvbvzJ7LFx+IpTyMDPRcgAAgIk43glMtgsBAABgkj6ddgFMRymOHmUePQvO/vL+zweCV46NAAAAgGdQadoFAAAAAKcu6//9/h8AAACcbfnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M7O/dyoDURxAH62cSD/FBTlnla4QRkpIcccIwpIE5RAWkgD1EBuKSGCFR4vWlbsaiWP7d3V90kwjAU/ZhA+zBtpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjT33q7+v3z66+uOYdjN3lmAwAAAFyzr7er5sU89d+31z+2lz63/SIiyoi4tnav4s1FZtXm1A+8v743hj8RTcLpO6bt411ELKqIRUT8/9T3rwAAAACv1269WabVenqajz0ghpSKNuWHb5nyioio5/8ypZWnvC+Zwpr/9yR+ZEprClizTGGp5DbJlfYkze1+rtrN7jRFasrHP59t7gAAwICqi2bYVQgAAABD+j72ABhHEbdbmeetwGlq2u29txc9AAAA4AUqxh4AAAAA0Ltm/f+sz/8L5/8BAABAV+n8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPq0r7er3Xqz7JpzOHaTZzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LA/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc79u0ZSxQEAfzOzs/FOxTXKFhFRsNDGy+2dd14nFkqw8E8QQm7vjLcqnim84xDS2Enqa0RLEUGJ3f0PVyeQJnYptohgYbUyszPJ5Ae4/prZZD8fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXh24dxkh064zguzm3tP1jJ+u1jfebRxs5C1rI4qjPps+HF6oeo21wiAAAAzI6krO9DCLvp5lLWx528/k/La7Ka/9unx3FZzx+v+8u+rP2z9svPe88fDNQZj5Pd9NbqoH/5ZCqt/2+W0+2Zv7yilT/5/N1Lkn8h8Xvrzw3T/HlGXz9+/E47D+fqyBYA+CculX0RlL8PZX2vycQAmBmtSuFd1v9Jp9mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOowXA9PlnEUQlhoHcaZ7f0HK6f1jzZ2Fsp2/eHDjeo9s1ukIYRbq4P+5RrnMu0+v3f/zvJg0L9bf/BSCKGp0d8qpn/ngwkuDqGR5yP4j4K4+LKnJZ+zETT4QwkAgHMpLVpW1++mm0vZuWg+hNF3R+v/VytxmLD+3/vw+lZ1rGr936tthg2am+yyxbU/RqPRvfuvr368fLt/u//JG1d6b/au3rh27cZi/q5k0RsTAAAA/p120ar1fzx/cv3/YiUOE9b/n33T+7I6VjJr9f+EDhf9ms4EAABgtj378u+/Raecj9rt8MXy2trd3vh48PnK+NhAqn/bXNGq9X8y33RWAAAAQB2G69GR9f+blThMuP7/1Pcv/Fi9ZxJCuFCs/19a+XRws77pTLU6/py46TkCAADQrAtFq67/p/n+//hgy0McQnjtlXFc/BvAier/5N2vfqiOVd3/f7W+KU6luDt+HnnfDaHVbTojAAAAzrMnipYV+7+mm0sf/XTx/bb9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1+zMAAP//H1NCtw==") (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000005900)=ANY=[@ANYBLOB="180c100029cb4813cae6600600026e6b4821f52d25000000ea00ffff", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000058c0)='cgroup2\x00', 0x0, 0x0) (async) r6 = socket(0x2, 0x3, 0x7) getsockopt(r6, 0xff, 0x100000000000001, 0x0, 0x0) 3.595775905s ago: executing program 2 (id=3294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x80}, 0x10}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x241, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) 3.385483041s ago: executing program 0 (id=3295): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)="eb", &(0x7f0000000280)="2255fe0000000000003be53f004e2dcf", 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) faccessat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xa00}, {0x65, 0x0, 0x5}}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x4, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000640)='memory.pressure\x00', 0x2, 0x0) sendmsg$netlink(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a40)={0x110c, 0x26, 0x100, 0x70bd28, 0x0, "", [@generic="6ef29c210190b87da4c96f170a2f14286f90a199e44145bd2b7fdb732104621b33744e34d2760350dc16c957e8135d10df049069820b2d07522feb4cbd2665070941a3fc90f6f8b9d588c3e15ee86ee8eb31edc4106a8116882c8f9ec346f3391ed86256faaa93a5379e1323e65e65842ec6ed0f69171576884369f81260e67ceae74ea3d9f7f067d63b61a9769c26a752bfdae1c42a85b224a729b49352576e8435ca72f03137e7e7acdbbe5bfb49fa63a29c38a47836e74f41245d019498c98d35782328a744abf7937a7a527f6fddc3b88ffaf79fe8287dfd38b83cf3716927a8751ab7d04521a95a30b9a6e23949a24c05f5", @nested={0xf04, 0x26, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @typed={0x8, 0x33, 0x0, 0x0, @pid}, @typed={0x8, 0x124, 0x0, 0x0, @uid}, @typed={0x8, 0x57, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@multicast1}, @generic="63cbb528926af24828ad7a9dbb7734c35945040f3eb33bb6734a2b91cc4d7be2a432dae82eddf351f98b0d9ee621ad2afec80fcc3642ed68a20133f4bb6346ae477e791660833bcaa6b64e86901f1e8affa3b9e3b90397dd3646fa2e1ed0b274bc6312e390eb053ae45c7271df055ec0c2d048fd2cdca457c6b374a871033f39aeb1d321ec61fc7d477a21e779aa0b46b0b506219ec012b5a70c1dcab9a42fb85cc669ba1c0cc7745bea26c890447a05e1502459ce33c609c5489dc989dd7a", @generic="4dfd7482489367a135822658cc340364155d4ce07a"]}, @generic, @generic="a45e3a1cce89771c650fec1bd63f78e25637a2cb856473c089813410cddfc639d48ae4a23cd51d1e110bce7ff260997397110f6d780c5c8f1eea91df98d27eb20d0902a50e8c6d8b9527e4cb0c944df38602db20c360a5beb414f2e3ca8e3bf48746ae25a85d4cce93ae7923dc998b84521e18b4d37500f5d421cae2883eb41a725c3e53cdcd3b833472269f9ffa9d1e0a7f47852085605889251cf8a065d59984b84baa7801c111d483a064bcd94a35b407890756a0e24fde02c168fa8bb33b769f9f29e1767d9619e00ef39f28c8365d6a96784581fd2451b2bce04b29762b4323accecb5ae87f44afbf62da4818d02176e52de6aa", @typed={0xc, 0x29, 0x0, 0x0, @u64=0x2}]}, 0x110c}, {&(0x7f0000001dc0)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x14, 0x4f, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x36, 0x0, 0x0, @uid}, @generic, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@multicast1}]}, 0x34}, {0x0}], 0x3, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x78, 0x8001}, 0x4000010) 2.595536806s ago: executing program 1 (id=3299): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback]}}}], 0x38}}], 0x2, 0x0) (fail_nth: 6) 2.299899961s ago: executing program 1 (id=3300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_clone3(&(0x7f0000000640)={0x51321000, &(0x7f0000000280), 0x0, 0x0, {0x3c}, 0x0, 0x0, &(0x7f00000003c0)=""/144, 0x0}, 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000000)={0x200000000000000, 0x1000, 0x4f, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) r10 = socket(0x10, 0x3, 0x0) fstat(r10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0200005201010000000000000000000e00009cf1f179dde4f30000f884431861b37926b74edc4cfbcb5d63518f94388574bfd55f2f7609455bee53495f61c775b65ad4013680130027007379010c65dc073e577a5f74", @ANYRES32=r3, @ANYBLOB="0400ec005f00b0005a9516ee493c14d0276b8429e9fbd419cdcf8315e1d3420ec0a257c9b96a9e31d9440e8f36b51e4b86b9933f2be279221c1a1f3b96b72cd0db23fde1f624c1bbcd8872e46c940f4eac2cfd2feff4b783d82d6b84cd6aa5f2edc8ab0008008a00", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="0c00980073797a5f74756e0000"], 0x21c}}, 0x40000) socket$netlink(0x10, 0x3, 0x0) 1.931128161s ago: executing program 4 (id=3301): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000240)=@isdn, 0x80, &(0x7f0000001980)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000300)=""/13, 0xd}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f00000016c0)=""/73, 0x49}, {&(0x7f0000001740)=""/142, 0x8e}, {&(0x7f0000001800)=""/189, 0xbd}, {&(0x7f00000018c0)=""/182, 0xb6}], 0x8}, 0xa9a2}], 0x1, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)={0x10000000}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0x5, &(0x7f00000001c0)={0x3, 0x3b}) r5 = socket$inet(0x2, 0x1, 0x0) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x63aa, 0x7}, {0xffffffffffffffff, 0x3401}, {r5, 0x5223}, {r4, 0x1200}, {r2, 0x20}], 0x5, 0xca) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000000ef, &(0x7f0000000480)=ANY=[@ANYRES8], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16=r5], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='rxrpc_resend\x00', r8}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 1.898614274s ago: executing program 3 (id=3302): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066ef66ba420066b8621766670f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d966b8bf008ed8", 0x41}], 0x1, 0x51, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 1.471866808s ago: executing program 3 (id=3303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x10, 0x80, 0x101, 0x0, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x67, 0x0, 0x5, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0x13, 0xdd, [@empty, @multicast1, @rand_addr=0x64010101, @loopback]}, @ra={0x94, 0x4}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x1, 0xa, 0xfffffffc, 0x0, r1, 0xffffffff, '\x00', r4, r5, 0x5, 0x1, 0x4, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) 1.423047833s ago: executing program 1 (id=3304): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x2}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200), 0x0) (async) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) (async) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r8 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r8}}) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@fscache}]}}) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) open(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 1.375817777s ago: executing program 1 (id=3305): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xd, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x200) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0xffffffff, 0x8000, 0x0, r3, 0x4, '\x00', 0x0, r3, 0x40000007}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0xffffff2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='tcp_retransmit_synack\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x2}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x46, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES8=r0], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(r0, 0xc, &(0x7f0000000540)={0x8, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'vcan0\x00', @multicast}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8010, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.10019655s ago: executing program 1 (id=3306): syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @selector_unit={0x5}, @extension_unit={0x8, 0x24, 0x8, 0x0, 0x0, 0x0, "e4"}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "a3e82f0707"}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x0, 0x0, "fd8000000000"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@weak_handle, @flat=@weak_binder, @flat=@weak_handle}, &(0x7f0000000240)={0x0, 0x18, 0x84}}, 0x1000}], 0x0, 0x0, 0x0}) 807.872133ms ago: executing program 4 (id=3307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x10, 0x80, 0x101, 0x0, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x67, 0x0, 0x5, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0x13, 0xdd, [@empty, @multicast1, @rand_addr=0x64010101, @loopback]}, @ra={0x94, 0x4}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x1, 0xa, 0xfffffffc, 0x0, r1, 0xffffffff, '\x00', r4, r5, 0x5, 0x1, 0x4, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) 411.785336ms ago: executing program 3 (id=3308): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0400ffff07"], 0xd) sendmmsg$inet6(r0, &(0x7f0000000080), 0x0, 0x0) 398.849847ms ago: executing program 3 (id=3309): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r10, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r10, 0x0, 0x20000000}, 0x20) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r11) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000280)={'wg2\x00'}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 267.716498ms ago: executing program 0 (id=3310): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@grpquota}, {@usrjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@i_version}, {@acl}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28040d3, 0x0, 0xbc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000005780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010010850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x40, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x9}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x2004000, &(0x7f0000001180), 0x2, 0x515, &(0x7f0000001700)="$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") removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000100), &(0x7f00000001c0)='%pK \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000340)={'wg2\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/vmstat\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800003, 0x4000010, r7, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ac00000001020101000000000000000007000008080008400000000258000a80080001400000000108000140000000011c0002800c00028005000100880000000c000280050001002100000008000140000000002000028006000340000200001400018008000100ac1414aa08000200ac14143a080004400000000708000b0073697000180003801400018008000100ac1e0001080002000000000008000540000000020800094000000006"], 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 260.179848ms ago: executing program 3 (id=3311): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r3) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) r7 = socket$tipc(0x1e, 0x2, 0x0) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @random="6a2df1591db0", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x10, 0xf989, "6080356e793ca9d55b8ef24e"}, @window={0x3, 0x3}, @generic={0x0, 0xe, "04f6fea52eb715ea7022d662"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) (async) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 5.20908ms ago: executing program 3 (id=3312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008d}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffc2, &(0x7f0000000280)=0x666) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 0s ago: executing program 0 (id=3313): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x2000) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40044591, &(0x7f0000000200)) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0xc, r8}, 0x10) kernel console output (not intermixed with test programs): ct=0, SerialNumber=0 [ 626.096901][ T312] usb 1-1: config 0 descriptor?? [ 626.258959][ T6218] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 626.360840][T13775] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.367900][T13775] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.376043][T13775] device bridge_slave_0 entered promiscuous mode [ 626.383461][T13775] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.390598][T13775] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.398147][T13775] device bridge_slave_1 entered promiscuous mode [ 626.467630][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 626.478738][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.485720][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.494780][T13789] device bridge_slave_1 left promiscuous mode [ 626.501047][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.508282][T13789] device bridge_slave_0 left promiscuous mode [ 626.514623][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.547177][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2991'. [ 626.559083][T13775] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.565927][T13775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.573105][T13775] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.579955][T13775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.587301][ T2090] uvcvideo: Found UVC 0.00 device syz (0b05:1791) [ 626.593663][ T2090] uvcvideo: No valid video chain found. [ 626.600246][ T2090] usb 2-1: USB disconnect, device number 119 [ 626.624023][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.631098][ T6218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.643196][ T6218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.643278][ T312] hid-led 0003:04D8:F372.0059: unknown main item tag 0x0 [ 626.652850][ T6218] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 626.668655][ T312] hid-led 0003:04D8:F372.0059: unknown main item tag 0x0 [ 626.668673][ T312] hid-led 0003:04D8:F372.0059: unknown main item tag 0x0 [ 626.668707][ T312] hid-led 0003:04D8:F372.0059: unknown main item tag 0x0 [ 626.668725][ T312] hid-led 0003:04D8:F372.0059: unknown main item tag 0x0 [ 626.668744][ T312] hid-led 0003:04D8:F372.0059: unknown main item tag 0x0 [ 626.676862][ T6218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.699609][ T312] hid-led 0003:04D8:F372.0059: unknown main item tag 0x0 [ 626.704503][ T6218] usb 4-1: config 0 descriptor?? [ 626.723690][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.724828][ T312] hid-led 0003:04D8:F372.0059: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0 [ 626.750042][ T312] hid-led 0003:04D8:F372.0059: Greynut Luxafor initialized [ 626.809623][ T6209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 626.817158][ T6209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 626.840833][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 626.849960][ T312] usb 1-1: USB disconnect, device number 93 [ 626.856167][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 626.857119][ T607] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 626.864848][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.873351][ T607] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 626.878732][ T8055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.888172][ T607] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 626.896429][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 626.903230][ T607] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 626.909989][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.923942][ T8055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.924051][ T607] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 626.932061][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 626.940176][ T607] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 626.947338][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 626.955421][ T607] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 626.965533][T13775] device veth0_vlan entered promiscuous mode [ 626.973185][T11321] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 626.984553][T11321] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 626.984992][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.992995][T11321] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 627.000439][ T2090] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 627.009098][T11321] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 627.017624][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.024459][T11321] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 627.034275][T13775] device veth1_macvtap entered promiscuous mode [ 627.039527][T11321] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 627.047366][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.053356][T11321] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 627.061554][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.068197][T11321] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 627.083008][T11321] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 627.083800][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 627.091539][T11321] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 627.100872][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 627.107640][T11321] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 627.145843][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 627.145855][T13795] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 627.145938][T13795] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.158503][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.197333][T13795] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 627.207468][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 627.215845][ T6218] hid (null): bogus close delimiter [ 627.222236][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.233269][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 627.241655][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.252905][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 627.261002][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.272358][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 627.280425][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.291441][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 627.340753][ T361] tipc: Left network mode [ 627.389731][ T2090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.403650][ T2090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.413778][ T2090] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 627.423158][ T2090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.431904][ T2090] usb 2-1: config 0 descriptor?? [ 627.439154][T11321] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 627.439401][ T6218] usb 4-1: string descriptor 0 read error: -22 [ 627.585457][ T24] audit: type=1400 audit(1722800722.970:5944): avc: denied { rename } for pid=13803 comm="syz.0.2993" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 627.587883][T13804] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 627.707146][ T6218] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.005A/input/input68 [ 627.726380][ T6218] uclogic 0003:256C:006D.005A: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 627.907497][ T312] usb 4-1: USB disconnect, device number 111 [ 628.079250][T11321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.090186][T11321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.090440][ T361] device bridge_slave_1 left promiscuous mode [ 628.099762][T11321] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 628.099775][T11321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.101071][T11321] usb 3-1: config 0 descriptor?? [ 628.106869][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.134678][ T361] device bridge_slave_0 left promiscuous mode [ 628.134706][ T2090] hid (null): bogus close delimiter [ 628.146653][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.155005][ T361] device veth1_macvtap left promiscuous mode [ 628.160928][ T361] device veth0_vlan left promiscuous mode [ 628.374362][T13787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2990'. [ 628.479787][ T619] Bluetooth: hci0: Frame reassembly failed (-84) [ 628.701592][T13787] udc-core: couldn't find an available UDC or it's busy [ 628.730264][T11321] hid-generic 0003:044F:B65D.005C: unknown main item tag 0x0 [ 628.741589][T13787] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 628.749203][T11321] hid-generic 0003:044F:B65D.005C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 628.762148][ T24] audit: type=1326 audit(1722800724.150:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363e8639f9 code=0x7ffc0000 [ 628.825515][ T24] audit: type=1326 audit(1722800724.190:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363e8639f9 code=0x7ffc0000 [ 628.850759][ T24] audit: type=1326 audit(1722800724.190:5947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363e8639f9 code=0x7ffc0000 [ 628.874412][ T24] audit: type=1326 audit(1722800724.190:5948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363e8639f9 code=0x7ffc0000 [ 628.897876][ T24] audit: type=1326 audit(1722800724.190:5949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363e8639f9 code=0x7ffc0000 [ 628.934832][ T24] audit: type=1326 audit(1722800724.190:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363e8639f9 code=0x7ffc0000 [ 629.001619][ T24] audit: type=1326 audit(1722800724.190:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363e8639f9 code=0x7ffc0000 [ 629.066674][ T24] audit: type=1326 audit(1722800724.190:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.4.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f363e8639f9 code=0x7ffc0000 [ 629.319079][ T2090] usb 2-1: string descriptor 0 read error: -71 [ 629.339117][ T2090] uclogic 0003:256C:006D.005B: failed retrieving string descriptor #200: -71 [ 629.347726][ T2090] uclogic 0003:256C:006D.005B: failed retrieving pen parameters: -71 [ 629.362355][T11321] usb 3-1: USB disconnect, device number 82 [ 629.369021][ T2090] uclogic 0003:256C:006D.005B: failed probing pen v2 parameters: -71 [ 629.376994][ T2090] uclogic 0003:256C:006D.005B: failed probing parameters: -71 [ 629.384414][ T2090] uclogic: probe of 0003:256C:006D.005B failed with error -71 [ 629.460079][ T2090] usb 2-1: USB disconnect, device number 120 [ 629.944313][T13866] tmpfs: Unknown parameter '' [ 629.965860][ T5135] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 629.979374][ T5135] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.991180][T13799] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 629.999020][ T5135] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 630.008418][ T5135] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 630.016612][ T5135] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 630.344706][T13883] fuse: Bad value for 'fd' [ 630.398927][ T2090] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 630.508989][ T6222] Bluetooth: hci0: command 0x1003 tx timeout [ 630.517981][ T40] Bluetooth: hci0: sending frame failed (-49) [ 630.759360][ T2090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 152, changing to 11 [ 630.774530][ T2090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.812841][ T2090] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 630.831270][ T2090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.873283][ T2090] usb 4-1: config 0 descriptor?? [ 631.088965][T11321] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 631.108961][ T6222] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 631.340491][ T2090] holtek_kbd 0003:04D9:A055.005D: unknown main item tag 0x0 [ 631.347632][ T2090] holtek_kbd 0003:04D9:A055.005D: item fetching failed at offset 3/5 [ 631.356014][ T2090] holtek_kbd: probe of 0003:04D9:A055.005D failed with error -22 [ 631.469007][ T6222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.479832][ T6222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.489439][ T6222] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 631.498340][ T6222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.508980][T11321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.511193][ T6222] usb 3-1: config 0 descriptor?? [ 631.529122][T11321] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 631.561871][ T312] usb 4-1: USB disconnect, device number 112 [ 631.698988][T11321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.707895][T11321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.715690][T11321] usb 2-1: Product: syz [ 631.719762][T11321] usb 2-1: Manufacturer: syz [ 631.724166][T11321] usb 2-1: SerialNumber: syz [ 631.812286][T13908] udc-core: couldn't find an available UDC or it's busy [ 631.819184][T13908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 632.588992][ T6218] Bluetooth: hci0: command 0x1001 tx timeout [ 632.595040][ T40] Bluetooth: hci0: sending frame failed (-49) [ 632.770687][T13914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.812797][T13923] fuse: Bad value for 'fd' [ 632.909030][T11321] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 632.915404][T11321] cdc_ncm 2-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 632.923060][T11321] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 633.360018][T11321] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 633.375920][T11321] usb 2-1: USB disconnect, device number 121 [ 633.382411][T11321] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 633.727461][T13795] print_req_error: 30 callbacks suppressed [ 633.727479][T13795] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 633.747931][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 633.765025][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 633.776783][T13795] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 633.778977][ T6222] usbhid 3-1:0.0: can't add hid device: -71 [ 633.790441][T13799] buffer_io_error: 20 callbacks suppressed [ 633.790455][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 633.807359][T13795] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 633.817265][ T6222] usbhid: probe of 3-1:0.0 failed with error -71 [ 633.819118][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 633.841108][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 633.841663][ T6222] usb 3-1: USB disconnect, device number 83 [ 633.849874][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 633.866908][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 633.867006][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 633.867016][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 633.867068][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 633.867077][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 633.942456][T13938] netlink: 'syz.2.3026': attribute type 27 has an invalid length. [ 633.950219][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3026'. [ 633.974350][T13938] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.981423][T13938] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.212479][ T5135] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 634.214010][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3030'. [ 634.234149][T13951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3030'. [ 634.234484][T13799] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 634.244788][ T5135] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 634.263022][T13799] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 634.273429][ T5135] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 634.281444][ T5135] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 634.293024][T13951] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 634.392683][T13958] fuse: Bad value for 'fd' [ 634.598906][ T607] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 634.678951][T11321] Bluetooth: hci0: command 0x1009 tx timeout [ 634.888926][ T607] usb 3-1: no configurations [ 634.893383][ T607] usb 3-1: can't read configurations, error -22 [ 635.058928][ T607] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 635.378953][ T607] usb 3-1: no configurations [ 635.383393][ T607] usb 3-1: can't read configurations, error -22 [ 635.389842][ T607] usb usb3-port1: attempt power cycle [ 635.798867][ T607] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 635.928974][ T607] usb 3-1: no configurations [ 635.933427][ T607] usb 3-1: can't read configurations, error -22 [ 636.088884][ T607] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 636.181420][ T93] udevd[93]: worker [5135] terminated by signal 33 (Unknown signal 33) [ 636.190188][ T93] udevd[93]: worker [5135] failed while handling '/devices/virtual/block/loop4' [ 636.228988][ T607] usb 3-1: no configurations [ 636.233416][ T607] usb 3-1: can't read configurations, error -22 [ 636.239879][ T607] usb usb3-port1: unable to enumerate USB device [ 636.258943][ T6222] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 636.498918][ T6222] usb 4-1: Using ep0 maxpacket: 8 [ 636.619168][ T6222] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.798986][ T6222] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 636.807980][ T6222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.815842][ T6222] usb 4-1: Product: syz [ 636.819856][ T6222] usb 4-1: Manufacturer: syz [ 636.824226][ T6222] usb 4-1: SerialNumber: syz [ 636.829458][ T6222] usb 4-1: config 0 descriptor?? [ 636.869533][ T6222] uvcvideo: Found UVC 0.00 device syz (8086:0b03) [ 636.875860][ T6222] uvcvideo: No valid video chain found. [ 637.071992][ T6222] usb 4-1: USB disconnect, device number 113 [ 637.400433][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 637.400448][ T24] audit: type=1326 audit(1722800732.790:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb109c9f9 code=0x7ffc0000 [ 637.468927][ T24] audit: type=1326 audit(1722800732.790:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb109c9f9 code=0x7ffc0000 [ 637.518889][ T24] audit: type=1326 audit(1722800732.790:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f4eb109c9f9 code=0x7ffc0000 [ 637.562475][ T24] audit: type=1326 audit(1722800732.790:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb109c9f9 code=0x7ffc0000 [ 637.609707][ T24] audit: type=1326 audit(1722800732.790:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb109c9f9 code=0x7ffc0000 [ 637.638950][ T312] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 637.663724][ T24] audit: type=1326 audit(1722800732.820:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4eb109c9f9 code=0x7ffc0000 [ 637.755551][ T24] audit: type=1326 audit(1722800732.820:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb109c9f9 code=0x7ffc0000 [ 637.778947][ T24] audit: type=1326 audit(1722800732.820:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb109c9f9 code=0x7ffc0000 [ 637.903589][ T24] audit: type=1326 audit(1722800732.880:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eb109c9f9 code=0x7ffc0000 [ 637.958909][ T312] usb 2-1: device descriptor read/64, error -71 [ 637.997827][ T24] audit: type=1326 audit(1722800732.880:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb109c9f9 code=0x7ffc0000 [ 638.311352][T14044] tipc: Started in network mode [ 638.316046][T14044] tipc: Own node identity 1, cluster identity 4711 [ 638.343123][T14044] tipc: 32-bit node address hash set to 1 [ 638.368886][ T312] usb 2-1: device descriptor read/64, error -71 [ 638.874958][ T312] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 638.886044][T14050] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.896395][T14050] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.910238][T14050] device bridge_slave_0 entered promiscuous mode [ 638.926756][T14050] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.940926][T14050] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.955621][T14050] device bridge_slave_1 entered promiscuous mode [ 638.995979][ T1267] tipc: Left network mode [ 639.074262][T14050] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.081164][T14050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.088263][T14050] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.095046][T14050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.177463][T13799] print_req_error: 44 callbacks suppressed [ 639.177482][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 639.194280][ T312] usb 2-1: device descriptor read/64, error -71 [ 639.202177][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.202719][T13795] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 639.209765][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.222560][T13795] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.232504][T13799] buffer_io_error: 30 callbacks suppressed [ 639.232516][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 639.241919][T13795] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 639.263609][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.274752][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 639.283115][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.391811][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 639.400283][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.409521][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.431911][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 639.461829][T14061] fuse: Bad value for 'fd' [ 639.483690][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 639.493844][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.511773][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 639.516557][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.528784][T14067] fuse: Unknown parameter '017777777777777777777770x000000000000000a' [ 639.549244][T14067] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 639.557657][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 639.558281][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 639.646571][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.654230][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.663767][ T6164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.667852][T13795] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 639.671230][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 639.683933][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.696905][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 639.705261][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.713082][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 639.720244][ T6164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.744778][T14077] device pim6reg1 entered promiscuous mode [ 639.757605][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 639.765644][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.775521][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 639.784581][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.801642][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 639.809908][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 639.821913][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 639.830194][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 639.838414][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 639.845989][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 639.855800][T14050] device veth0_vlan entered promiscuous mode [ 639.867192][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 639.875315][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 639.884991][T14050] device veth1_macvtap entered promiscuous mode [ 639.897655][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 639.905271][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 639.908902][ T312] usb 2-1: device descriptor read/64, error -71 [ 639.913874][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 639.963117][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 639.971628][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.005094][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3054'. [ 640.014042][ T6164] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 640.025237][T14087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14087 comm=syz.0.3054 [ 640.049667][ T1267] device bridge_slave_1 left promiscuous mode [ 640.055744][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.063571][ T1267] device bridge_slave_0 left promiscuous mode [ 640.069966][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.078237][ T1267] device veth1_macvtap left promiscuous mode [ 640.084314][ T312] usb usb2-port1: attempt power cycle [ 640.089939][ T1267] device veth0_vlan left promiscuous mode [ 640.343305][ T6164] usb 4-1: device descriptor read/64, error -71 [ 640.588380][ T312] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 641.089686][ T6164] usb 4-1: device descriptor read/64, error -71 [ 641.098112][ T6218] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 641.239555][ T1267] Bluetooth: hci0: Frame reassembly failed (-84) [ 641.262110][ T312] usb 2-1: device not accepting address 124, error -71 [ 641.379173][ T6164] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 641.509332][ T6218] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 641.546758][ T6218] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 641.567740][ T6218] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 641.668986][ T6218] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.678029][ T6218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 641.686045][ T6218] usb 3-1: SerialNumber: syz [ 641.711287][T14098] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 641.729029][ T6164] usb 4-1: device descriptor read/64, error -71 [ 641.738026][T14111] tipc: Started in network mode [ 641.742834][T14111] tipc: Own node identity 1, cluster identity 4711 [ 641.749672][T14111] tipc: 32-bit node address hash set to 1 [ 641.933713][T14098] udc-core: couldn't find an available UDC or it's busy [ 641.940627][T14098] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 641.989475][ T6218] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 641.997550][ T6218] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 642.023769][ T6218] usb 3-1: USB disconnect, device number 88 [ 642.073883][T14114] overlayfs: missing 'lowerdir' [ 642.118897][ T6164] usb 4-1: device descriptor read/64, error -71 [ 642.239360][ T6164] usb usb4-port1: attempt power cycle [ 642.538284][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 642.542354][ T24] audit: type=1400 audit(1722800737.920:6038): avc: denied { rmdir } for pid=12764 comm="syz-executor" name="bus" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 642.546980][ T8060] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 642.989054][ T8060] usb 5-1: Using ep0 maxpacket: 16 [ 643.109322][ T8060] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.159606][ T8060] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 643.173024][ T8060] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 643.182993][ T8060] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.228879][T11321] Bluetooth: hci0: command 0x1003 tx timeout [ 643.234977][ T40] Bluetooth: hci0: sending frame failed (-49) [ 643.248327][ T8060] usb 5-1: config 0 descriptor?? [ 643.937937][ T8060] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.005E/input/input69 [ 643.963015][T14169] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3080: casefold flag without casefold feature [ 643.976270][T14169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.3080: missing EA_INODE flag [ 643.991062][T14169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3080: error while reading EA inode 2 err=-117 [ 644.020388][ T8060] microsoft 0003:045E:07DA.005E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 644.076304][T14169] EXT4-fs (loop2): 1 orphan inode deleted [ 644.099477][T14169] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 644.145155][T11321] usb 5-1: USB disconnect, device number 119 [ 644.510220][T13799] print_req_error: 44 callbacks suppressed [ 644.510238][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 644.516630][T13795] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 644.528911][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.538695][T13795] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.556662][T13799] buffer_io_error: 31 callbacks suppressed [ 644.556675][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 644.574489][T13795] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 644.582731][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.593806][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 644.602459][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.613218][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 644.621705][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.632665][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 644.640771][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.651686][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 644.667905][T13795] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 644.682454][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 644.693935][T13795] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 644.699333][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 644.709924][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 644.717814][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 645.008196][T14194] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 645.008196][T14194] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 645.008196][T14194] [ 645.026004][T14194] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 645.080146][T14194] EXT4-fs (loop2): 1 truncate cleaned up [ 645.085622][T14194] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,user_xattr,debug_want_extra_isize=0x000000000000002e,noload,noacl,quota,,errors=continue [ 645.278545][T14208] fuse: Bad value for 'rootmode' [ 645.324552][ T312] Bluetooth: hci0: command 0x1001 tx timeout [ 645.335774][ T40] Bluetooth: hci0: sending frame failed (-49) [ 645.543696][T14220] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3092: casefold flag without casefold feature [ 645.557149][T14220] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.3092: missing EA_INODE flag [ 645.569314][T14220] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3092: error while reading EA inode 2 err=-117 [ 645.582064][T14220] EXT4-fs (loop2): 1 orphan inode deleted [ 645.587641][T14220] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 646.121058][ T24] audit: type=1400 audit(1722800741.510:6039): avc: denied { bind } for pid=14242 comm="syz.2.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 646.121520][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3098'. [ 647.388867][ T312] Bluetooth: hci0: command 0x1009 tx timeout [ 647.545042][ T6209] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 647.818908][ T6209] usb 3-1: Using ep0 maxpacket: 32 [ 648.358029][ T6209] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 648.367315][ T6209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.375629][ T6209] usb 3-1: Product: syz [ 648.379760][ T6209] usb 3-1: Manufacturer: syz [ 648.384171][ T6209] usb 3-1: SerialNumber: syz [ 648.389874][ T6209] usb 3-1: config 0 descriptor?? [ 648.578965][ T6164] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 648.618054][T14295] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.625019][T14295] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.632856][T14295] device bridge_slave_0 entered promiscuous mode [ 648.633008][T14264] udc-core: couldn't find an available UDC or it's busy [ 648.640569][T14295] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.645914][T14264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 648.653455][T14295] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.667494][T14295] device bridge_slave_1 entered promiscuous mode [ 648.699275][T14264] FAT-fs (loop2): Unrecognized mount option "errrs=conqinueutf8=0" or missing value [ 648.714911][T14295] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.721801][T14295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.728900][T14295] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.735642][T14295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.762178][ T8060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 648.770475][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.777661][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.796501][ T8060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 648.860716][ T6164] usb 5-1: Using ep0 maxpacket: 16 [ 648.866610][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.873561][ T8060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.880819][ T8060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 648.889373][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.896323][ T8060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.903901][ T8060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 648.913741][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 649.059614][ T6164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.089387][ T6164] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 649.182901][T14295] device veth0_vlan entered promiscuous mode [ 649.196821][ T6164] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 649.202895][T14295] device veth1_macvtap entered promiscuous mode [ 649.216585][ T6164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.240504][ T6164] usb 5-1: config 0 descriptor?? [ 649.248137][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 649.256881][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 649.269462][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 649.348652][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 649.356690][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 649.364409][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 649.374261][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 649.926667][ T6164] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.005F/input/input70 [ 650.004285][ T6164] microsoft 0003:045E:07DA.005F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 650.625895][T13795] print_req_error: 38 callbacks suppressed [ 650.625914][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 650.663479][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.675537][ T5273] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 650.687098][T13795] buffer_io_error: 26 callbacks suppressed [ 650.687111][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 650.711881][ T5273] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.723563][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.745740][T14328] syz.1.3120[14328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.745821][T14328] syz.1.3120[14328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.760803][ T5273] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 650.780185][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 650.797033][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.807911][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 650.815950][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.826824][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 650.835569][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.846920][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 650.862582][ T5273] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 650.876686][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 650.888258][ T5273] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 650.896756][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 650.906569][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 650.915127][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 650.931245][ T607] usb 5-1: USB disconnect, device number 120 [ 651.108857][ T312] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 651.230471][ T1267] device bridge_slave_1 left promiscuous mode [ 651.244334][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.251927][T14350] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3126'. [ 651.261737][ T1267] device bridge_slave_0 left promiscuous mode [ 651.267695][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.276205][ T1267] device veth1_macvtap left promiscuous mode [ 651.282608][ T1267] device veth0_vlan left promiscuous mode [ 651.396872][ T24] audit: type=1400 audit(1722800746.780:6040): avc: denied { setattr } for pid=14358 comm="syz.3.3128" name="L2CAP" dev="sockfs" ino=79760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 651.515632][ T312] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 651.526086][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.542235][ T312] usb 2-1: config 0 descriptor?? [ 651.617695][T14341] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.624859][T14341] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.635399][T14341] device bridge_slave_0 entered promiscuous mode [ 651.644973][T14341] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.652229][T14341] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.661277][T14341] device bridge_slave_1 entered promiscuous mode [ 651.907452][T14376] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3120'. [ 651.925449][ T24] audit: type=1400 audit(1722800747.310:6041): avc: denied { write } for pid=14327 comm="syz.1.3120" name="file0" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=DC [ 651.950296][ T24] audit: type=1400 audit(1722800747.310:6042): avc: denied { add_name } for pid=14327 comm="syz.1.3120" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=DC [ 651.973233][ T24] audit: type=1400 audit(1722800747.310:6043): avc: denied { setattr } for pid=14327 comm="syz.1.3120" name="work" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=DC [ 651.996777][ T24] audit: type=1400 audit(1722800747.310:6044): avc: denied { create } for pid=14327 comm="syz.1.3120" name="#5e" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 652.007374][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3120'. [ 652.019333][ T24] audit: type=1400 audit(1722800747.310:6045): avc: denied { remove_name } for pid=14327 comm="syz.1.3120" name="#5e" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=DC [ 652.106352][ T24] audit: type=1400 audit(1722800747.310:6046): avc: denied { rename } for pid=14327 comm="syz.1.3120" name="#5e" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 652.132651][ T24] audit: type=1400 audit(1722800747.310:6047): avc: denied { unlink } for pid=14327 comm="syz.1.3120" name="#5e" dev="tmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon=DC [ 652.230129][T11321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 652.237558][T11321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.259255][T11321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.277736][T11321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.285835][ T24] audit: type=1400 audit(1722800747.310:6048): avc: denied { unlink } for pid=14327 comm="syz.1.3120" name="#5f" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 652.329608][T11321] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.336496][T11321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.355369][ T607] usb 2-1: USB disconnect, device number 126 [ 652.367892][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.386063][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.402762][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.411220][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.418056][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.436251][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 652.444181][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.569135][ T6209] rtl8150 3-1:0.0: couldn't reset the device [ 652.575923][ T6209] rtl8150: probe of 3-1:0.0 failed with error -5 [ 652.644158][ T6209] usb 3-1: USB disconnect, device number 89 [ 652.765520][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 652.782839][T14341] device veth0_vlan entered promiscuous mode [ 652.789548][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 652.797258][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 652.807371][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 652.815347][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 652.828667][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 652.836836][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 652.846607][T14341] device veth1_macvtap entered promiscuous mode [ 652.858213][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 652.866485][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 652.875303][ T6222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 653.183749][T11321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 653.194404][T11321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 653.231315][T14408] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 653.246206][T14408] ext4 filesystem being mounted at /1/bus supports timestamps until 2038 (0x7fffffff) [ 653.329915][ T1267] device bridge_slave_1 left promiscuous mode [ 653.336881][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.346654][ T1267] device bridge_slave_0 left promiscuous mode [ 653.352699][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.360717][ T1267] device veth1_macvtap left promiscuous mode [ 653.366740][ T1267] device veth0_vlan left promiscuous mode [ 653.411522][T14416] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3138'. [ 653.421717][T14416] fuse: Invalid rootmode [ 653.737829][ T6209] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 654.204386][ T6209] usb 3-1: Using ep0 maxpacket: 8 [ 654.329023][ T6209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.340031][ T6209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.350396][ T6209] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 654.359459][ T6209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.368414][ T6209] usb 3-1: config 0 descriptor?? [ 654.430446][ T24] audit: type=1400 audit(1722800749.820:6049): avc: denied { remount } for pid=14429 comm="syz.0.3144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 654.709030][ T6209] usbhid 3-1:0.0: can't add hid device: -71 [ 654.715065][ T6209] usbhid: probe of 3-1:0.0 failed with error -71 [ 654.723548][ T6209] usb 3-1: USB disconnect, device number 90 [ 655.108949][ T6222] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 655.348921][ T6222] usb 5-1: Using ep0 maxpacket: 8 [ 655.606078][ T6222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.616393][ T6222] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 655.625646][ T6222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.637900][ T6222] usb 5-1: config 0 descriptor?? [ 655.742624][T14469] tipc: Failed to remove local publication {66,1,1}/2872097448 [ 655.751259][T14466] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 655.758667][T14469] tipc: Failed to remove local publication {66,1,1}/2872097448 [ 655.766900][T14469] tipc: Failed to remove local publication {66,1,1}/2872097448 [ 655.778394][T14466] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,mblk_io_submit,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue [ 655.998879][T11321] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 656.098868][ T6164] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 656.110187][ T6222] logitech 0003:046D:C295.0060: item fetching failed at offset 0/3 [ 656.118167][ T6222] logitech 0003:046D:C295.0060: parse failed [ 656.128930][ T312] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 656.140903][ T6222] logitech: probe of 0003:046D:C295.0060 failed with error -22 [ 656.248953][T11321] usb 3-1: Using ep0 maxpacket: 16 [ 656.311112][T14445] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 656.327301][T14445] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 656.348875][ T6164] usb 2-1: Using ep0 maxpacket: 32 [ 656.359283][ T607] usb 5-1: USB disconnect, device number 121 [ 656.378934][ T312] usb 1-1: Using ep0 maxpacket: 16 [ 656.389003][T11321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 656.401004][T11321] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 656.419636][T11321] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 656.435231][T11321] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 656.445412][T11321] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 656.460903][T11321] usb 3-1: config 1 interface 0 has no altsetting 0 [ 656.467847][T11321] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 656.482799][T11321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.509365][ T312] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 656.521423][ T312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 656.531174][T11321] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 656.580154][ T5273] print_req_error: 45 callbacks suppressed [ 656.580172][ T5273] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 656.580856][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 656.586386][ T5273] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.597469][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.608240][ T6164] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 656.619097][T13799] buffer_io_error: 32 callbacks suppressed [ 656.619110][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 656.648870][ T6164] usb 2-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 656.652145][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.660349][ T5273] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 656.671292][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 656.686616][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.689192][ T6164] usb 2-1: Product: syz [ 656.697536][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 656.709264][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.711503][ T6164] usb 2-1: Manufacturer: syz [ 656.724854][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 656.732861][ T312] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 656.741801][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.752631][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.760439][ T312] usb 1-1: Product: syz [ 656.764468][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 656.772552][ T312] usb 1-1: Manufacturer: syz [ 656.779616][T11321] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 656.793274][T11321] usb 3-1: USB disconnect, device number 91 [ 656.797036][ T6164] usb 2-1: config 0 descriptor?? [ 656.799526][ T312] usb 1-1: SerialNumber: syz [ 656.820252][T13795] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 656.833705][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 656.848025][T13795] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 656.856221][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 656.866314][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 656.887503][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 657.089110][ T6164] snd-usb-audio: probe of 2-1:0.0 failed with error -71 [ 657.098955][ T312] r8152 1-1:1.0: Unknown version 0x0000 [ 657.108589][ T6164] usb 2-1: USB disconnect, device number 127 [ 657.306889][ T312] usb 1-1: USB disconnect, device number 94 [ 657.603149][T11321] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 658.054219][T14523] netlink: 'syz.1.3164': attribute type 19 has an invalid length. [ 658.378951][T11321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.390109][T11321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.413078][T11321] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 658.422272][T11321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.434420][T11321] usb 5-1: config 0 descriptor?? [ 659.393987][T14545] fuse: Bad value for 'fd' [ 659.680720][T11321] usbhid 5-1:0.0: can't add hid device: -71 [ 659.812894][T11321] usbhid: probe of 5-1:0.0 failed with error -71 [ 659.820022][T11321] usb 5-1: USB disconnect, device number 122 [ 659.868954][ T6218] Bluetooth: hci0: command 0x1003 tx timeout [ 659.875410][ T40] Bluetooth: hci0: sending frame failed (-49) [ 660.038878][ T6164] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 660.068858][ T6209] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 660.279003][ T6164] usb 4-1: Using ep0 maxpacket: 8 [ 660.399060][ T6164] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 660.409792][ T6164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.420549][ T6164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.430275][ T6209] usb 1-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 660.440387][ T6164] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 660.453146][ T6209] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.465846][ T6164] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 660.474693][ T6209] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 660.483540][ T6164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.491310][ T6209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.499869][ T6164] usb 4-1: config 0 descriptor?? [ 660.505233][ T6209] usb 1-1: config 0 descriptor?? [ 660.549537][ T6209] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 660.949296][T14588] fuse: Bad value for 'fd' [ 661.095330][ T6164] kye 0003:0458:5011.0061: unbalanced collection at end of report description [ 661.106943][ T6164] kye 0003:0458:5011.0061: parse failed [ 661.116353][ T6164] kye: probe of 0003:0458:5011.0061 failed with error -22 [ 661.124144][T11321] usb 1-1: USB disconnect, device number 95 [ 661.175495][T14595] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3184: casefold flag without casefold feature [ 661.188345][T14595] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.3184: missing EA_INODE flag [ 661.199976][T14595] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3184: error while reading EA inode 2 err=-117 [ 661.212424][T14595] EXT4-fs (loop0): 1 orphan inode deleted [ 661.217995][T14595] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 661.285228][ T290] usb 4-1: USB disconnect, device number 117 [ 661.601965][ T24] audit: type=1400 audit(1722800756.990:6050): avc: denied { setopt } for pid=14600 comm="syz.1.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 661.644627][ T24] audit: type=1400 audit(1722800757.010:6051): avc: denied { write } for pid=14600 comm="syz.1.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 661.664402][ T24] audit: type=1400 audit(1722800757.010:6052): avc: denied { read } for pid=14600 comm="syz.1.3185" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 661.826248][T14613] Module has invalid ELF structures [ 661.829743][ T24] audit: type=1400 audit(1722800757.210:6053): avc: denied { sys_module } for pid=14612 comm="syz.3.3189" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 661.888532][ T24] audit: type=1400 audit(1722800757.210:6054): avc: denied { module_load } for pid=14612 comm="syz.3.3189" path="/12/bus" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 661.948876][ T6164] Bluetooth: hci0: command 0x1001 tx timeout [ 661.954774][ T40] Bluetooth: hci0: sending frame failed (-49) [ 662.005197][T14615] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3187'. [ 662.101379][ T24] audit: type=1400 audit(1722800757.490:6055): avc: denied { read write } for pid=14616 comm="syz.3.3190" name="uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 662.161901][ T24] audit: type=1400 audit(1722800757.490:6056): avc: denied { open } for pid=14616 comm="syz.3.3190" path="/dev/uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 662.728894][ T6222] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 662.771770][ T24] audit: type=1326 audit(1722800758.160:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363e8639f9 code=0x7ffc0000 [ 662.815500][ T24] audit: type=1326 audit(1722800758.180:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363e8639f9 code=0x7ffc0000 [ 662.852241][ T24] audit: type=1326 audit(1722800758.180:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.4.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f363e8639f9 code=0x7ffc0000 [ 662.877751][T11321] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 662.968851][ T6222] usb 1-1: Using ep0 maxpacket: 16 [ 663.248976][ T6222] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 663.264129][ T6222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.276085][ T6222] usb 1-1: Product: syz [ 663.280445][ T6222] usb 1-1: Manufacturer: syz [ 663.284953][ T6222] usb 1-1: SerialNumber: syz [ 663.296166][ T6222] usb 1-1: config 0 descriptor?? [ 663.508944][T11321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.518980][T11321] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.614613][T11321] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 663.623584][T11321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 663.631790][T11321] usb 4-1: SerialNumber: syz [ 663.909638][T11321] usb 4-1: 0:2 : does not exist [ 663.919300][ T5] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 663.953533][T11321] usb 4-1: USB disconnect, device number 118 [ 663.998984][ T6222] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 664.029015][ T6164] Bluetooth: hci0: command 0x1009 tx timeout [ 664.299023][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.308996][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.358967][ T6222] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.369075][ T6222] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.392284][ T5] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 664.401208][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 664.409324][ T5] usb 5-1: SerialNumber: syz [ 664.473696][ T6222] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 664.482712][ T6222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 664.490582][ T6222] usb 2-1: SerialNumber: syz [ 664.834556][ T6222] usb 2-1: 0:2 : does not exist [ 664.880283][ T5] usb 5-1: 0:2 : does not exist [ 664.887092][ T6222] usb 2-1: USB disconnect, device number 2 [ 664.920818][ T5] usb 5-1: USB disconnect, device number 123 [ 665.129686][T13799] udevd[13799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 665.293063][ T6222] usb 1-1: USB disconnect, device number 96 [ 665.904200][ T6222] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 666.329080][ T6222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.340353][ T6222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.350888][ T6222] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 666.360706][T14679] netlink: 'syz.3.3206': attribute type 4 has an invalid length. [ 666.369748][ T6222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.378379][ T6222] usb 1-1: config 0 descriptor?? [ 666.708717][T14692] input: syz0 as /devices/virtual/input/input71 [ 666.766213][ T6222] usbhid 1-1:0.0: can't add hid device: -71 [ 666.777968][ T6222] usbhid: probe of 1-1:0.0 failed with error -71 [ 666.787826][ T6222] usb 1-1: USB disconnect, device number 97 [ 667.189012][ T6164] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 667.258906][ T6222] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 667.428941][ T6164] usb 2-1: Using ep0 maxpacket: 16 [ 667.448984][ T6218] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 667.559040][ T6164] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 667.569275][ T6164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 667.628990][ T6222] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.639010][ T6222] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 667.689083][ T6218] usb 5-1: Using ep0 maxpacket: 8 [ 667.704619][T14711] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.714620][T14711] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.722341][T14711] device bridge_slave_0 entered promiscuous mode [ 667.729161][ T6164] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 667.729435][T14711] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.745190][T14711] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.748305][ T6164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.752616][T14711] device bridge_slave_1 entered promiscuous mode [ 667.760301][ T6222] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 667.780197][ T6164] usb 2-1: Product: ᐏ [ 667.784187][ T6164] usb 2-1: Manufacturer: у [ 667.788668][ T6222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 667.814943][T14711] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.829625][T14711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.836824][T14711] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.843635][T14711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.857298][ T6222] usb 1-1: SerialNumber: syz [ 667.862367][ T6218] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 667.874080][T11321] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.882296][T11321] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.889972][T11321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 667.897449][T11321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 667.911802][ T6218] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 667.925569][T11321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 667.933879][T11321] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.940840][T11321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.948635][T11321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 667.956829][T11321] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.963738][T11321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.971291][T11321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 667.986441][T11321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.995615][ T6164] usb 2-1: SerialNumber: syz [ 668.007504][T14711] device veth0_vlan entered promiscuous mode [ 668.015030][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 668.023872][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 668.032570][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 668.041397][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 668.057651][T14711] device veth1_macvtap entered promiscuous mode [ 668.064984][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 668.076867][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.086613][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.115630][T13794] print_req_error: 110 callbacks suppressed [ 668.115649][T13794] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 668.115682][ T5273] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 668.122217][T13794] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.139391][ T5273] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.144572][T13794] buffer_io_error: 80 callbacks suppressed [ 668.144586][T13794] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 668.155738][ T5273] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 668.198944][ T5273] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.209962][ T5273] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 668.217832][ T5273] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.235311][ T5273] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 668.244062][ T5273] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.255615][ T5273] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 668.264810][ T5273] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.276752][ T5273] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 668.304202][ T1267] tipc: Left network mode [ 668.319893][ T6218] usb 5-1: string descriptor 0 read error: -22 [ 668.325949][ T6218] usb 5-1: Dual-Role OTG device on HNP port [ 668.332266][ T6209] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 668.369094][ T6218] usb 5-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 668.378126][ T6218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.387588][ T6218] usb 5-1: config 0 descriptor?? [ 668.394549][T14737] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 668.402648][T14737] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 668.416056][T14737] F2FS-fs (loop2): invalid crc value [ 668.423279][T14737] F2FS-fs (loop2): Found nat_bits in checkpoint [ 668.429861][ T6218] hub 5-1:0.0: bad descriptor, ignoring hub [ 668.436019][ T6218] hub: probe of 5-1:0.0 failed with error -5 [ 668.442297][ T6218] uvcvideo: Found UVC 0.00 device (17dc:0202) [ 668.449734][ T6218] uvcvideo: No valid video chain found. [ 668.466785][T14737] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 668.473829][T14737] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 668.712935][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 668.712950][ T24] audit: type=1400 audit(1722800764.100:6076): avc: denied { setopt } for pid=14705 comm="syz.4.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 668.779204][ T1267] device bridge_slave_1 left promiscuous mode [ 668.785345][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.794284][ T1267] device bridge_slave_0 left promiscuous mode [ 668.823012][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.890689][ T6209] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 668.898898][ T6209] usb 4-1: config 0 has no interface number 0 [ 668.905062][ T6209] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.916051][ T6209] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.925748][ T6209] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 668.934597][ T6209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.943815][ T6209] usb 4-1: config 0 descriptor?? [ 669.268886][ T361] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 669.282471][ T361] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 669.289235][T14735] device veth1 entered promiscuous mode [ 669.305926][T14734] device veth1 left promiscuous mode [ 669.388486][T13794] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 669.389787][T13797] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 669.401400][T13794] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 669.412046][T13797] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 669.425170][T13794] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 669.434420][ T6209] usbhid 4-1:0.32: can't add hid device: -71 [ 669.440781][ T6209] usbhid: probe of 4-1:0.32 failed with error -71 [ 669.448166][ T6209] usb 4-1: USB disconnect, device number 119 [ 669.454432][T13794] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 669.490409][T14755] fuse: Bad value for 'fd' [ 669.516227][ T24] audit: type=1400 audit(1722800764.900:6077): avc: denied { checkpoint_restore } for pid=14753 comm="syz.2.3221" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 669.762436][T14771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14771 comm=syz.1.3225 [ 669.782962][ T24] audit: type=1400 audit(1722800765.170:6078): avc: denied { ioctl } for pid=14770 comm="syz.1.3225" path="socket:[81662]" dev="sockfs" ino=81662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 669.809001][ T6164] usb 2-1: 0:2 : does not exist [ 669.825017][ T6222] usb 1-1: 0:2 : does not exist [ 669.836896][ T6164] usb 2-1: USB disconnect, device number 3 [ 669.935142][ T6222] usb 1-1: USB disconnect, device number 98 [ 670.215660][T13795] udevd[13795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 670.263523][ T24] audit: type=1400 audit(1722800765.650:6079): avc: denied { create } for pid=14773 comm="syz.3.3227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 670.703268][ T6164] usb 5-1: reset high-speed USB device number 124 using dummy_hcd [ 670.759621][ T6164] usb 5-1: device reset changed ep0 maxpacket size! [ 670.779271][ T6164] usb 5-1: USB disconnect, device number 124 [ 670.789198][ T5] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 671.058973][ T6222] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 671.218965][ T6164] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 671.228859][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 671.328886][ T6222] usb 2-1: Using ep0 maxpacket: 16 [ 671.348992][ T5] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 671.357171][ T5] usb 3-1: config 179 has no interface number 0 [ 671.363192][ T5] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 671.374156][ T5] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 671.385248][ T5] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 671.396254][ T5] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 671.407477][ T5] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 671.420492][ T5] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 671.429345][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.448934][T14792] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 671.609032][ T6164] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.620799][ T6164] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 671.648966][ T6222] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 671.657959][ T6222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.665871][ T6222] usb 2-1: Product: syz [ 671.670128][ T6222] usb 2-1: Manufacturer: syz [ 671.676053][ T6222] usb 2-1: SerialNumber: syz [ 671.685929][ T5] usb 3-1: USB disconnect, device number 92 [ 671.691700][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 671.691723][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 671.728569][T14815] FAULT_INJECTION: forcing a failure. [ 671.728569][T14815] name failslab, interval 1, probability 0, space 0, times 1 [ 671.746141][T14815] CPU: 0 PID: 14815 Comm: syz.2.3237 Tainted: G W 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 671.757460][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 671.767295][T14815] Call Trace: [ 671.770429][T14815] dump_stack_lvl+0x1e2/0x24b [ 671.774944][T14815] ? bfq_pos_tree_add_move+0x43b/0x43b [ 671.780232][T14815] dump_stack+0x15/0x17 [ 671.784223][T14815] should_fail+0x3c6/0x510 [ 671.788566][T14815] ? tcf_block_get_ext+0x1af/0x15b0 [ 671.793599][T14815] __should_failslab+0xa4/0xe0 [ 671.798196][T14815] should_failslab+0x9/0x20 [ 671.802542][T14815] kmem_cache_alloc_trace+0x3a/0x2e0 [ 671.807661][T14815] tcf_block_get_ext+0x1af/0x15b0 [ 671.812520][T14815] ? rtnetlink_rcv_msg+0x955/0xc50 [ 671.817465][T14815] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 671.822501][T14815] ? tcf_block_netif_keep_dst+0x200/0x200 [ 671.828054][T14815] ? __local_bh_enable_ip+0x53/0x80 [ 671.833087][T14815] ? _raw_spin_unlock_bh+0x51/0x60 [ 671.838028][T14815] ? fq_codel_change+0xaf4/0xf10 [ 671.842812][T14815] tcf_block_get+0xf4/0x140 [ 671.847157][T14815] ? tcf_chain0_head_change_cb_del+0x350/0x350 [ 671.853137][T14815] ? tcf_block_get+0x140/0x140 [ 671.857755][T14815] ? __kasan_kmalloc+0x9/0x10 [ 671.862248][T14815] ? __kmalloc+0x1aa/0x330 [ 671.866509][T14815] fq_codel_init+0x3c1/0xa60 [ 671.870931][T14815] ? qdisc_peek_dequeued+0x230/0x230 [ 671.876047][T14815] qdisc_create+0x879/0x12d0 [ 671.880480][T14815] ? qdisc_notify+0x370/0x370 [ 671.884989][T14815] ? __nla_parse+0x43/0x60 [ 671.889243][T14815] tc_modify_qdisc+0x8e2/0x1470 [ 671.893936][T14815] ? qdisc_offload_graft_helper+0x280/0x280 [ 671.899658][T14815] ? mutex_trylock+0xa0/0xa0 [ 671.904080][T14815] ? ns_capable+0x89/0xe0 [ 671.908248][T14815] ? netlink_net_capable+0x125/0x160 [ 671.913369][T14815] ? qdisc_offload_graft_helper+0x280/0x280 [ 671.919096][T14815] rtnetlink_rcv_msg+0x955/0xc50 [ 671.923873][T14815] ? is_bpf_text_address+0x172/0x190 [ 671.928991][T14815] ? rtnetlink_bind+0x80/0x80 [ 671.933510][T14815] ? arch_stack_walk+0xf3/0x140 [ 671.938192][T14815] ? stack_trace_save+0x113/0x1c0 [ 671.943052][T14815] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 671.948956][T14815] ? stack_trace_snprint+0xf0/0xf0 [ 671.953900][T14815] ? avc_has_perm+0x14d/0x400 [ 671.958413][T14815] ? memcpy+0x56/0x70 [ 671.962241][T14815] ? avc_has_perm+0x275/0x400 [ 671.966743][T14815] ? __kasan_slab_alloc+0xb1/0xe0 [ 671.971607][T14815] ? slab_post_alloc_hook+0x61/0x2f0 [ 671.976729][T14815] ? kmem_cache_alloc+0x168/0x2e0 [ 671.981606][T14815] ? avc_has_perm_noaudit+0x240/0x240 [ 671.986800][T14815] ? iov_iter_advance+0x258/0xb20 [ 671.991662][T14815] netlink_rcv_skb+0x1cf/0x410 [ 671.996257][T14815] ? rtnetlink_bind+0x80/0x80 [ 672.000774][T14815] ? netlink_ack+0xb30/0xb30 [ 672.005196][T14815] ? __netlink_lookup+0x37b/0x3a0 [ 672.010144][T14815] rtnetlink_rcv+0x1c/0x20 [ 672.014399][T14815] netlink_unicast+0x8df/0xac0 [ 672.018999][T14815] ? netlink_detachskb+0x90/0x90 [ 672.023769][T14815] ? security_netlink_send+0x7b/0xa0 [ 672.028889][T14815] netlink_sendmsg+0xa46/0xd00 [ 672.033578][T14815] ? netlink_getsockopt+0x5c0/0x5c0 [ 672.038608][T14815] ? kmem_cache_free+0xa9/0x1e0 [ 672.043306][T14815] ? security_socket_sendmsg+0x82/0xb0 [ 672.048592][T14815] ? netlink_getsockopt+0x5c0/0x5c0 [ 672.053629][T14815] ____sys_sendmsg+0x59e/0x8f0 [ 672.058225][T14815] ? __sys_sendmsg_sock+0x40/0x40 [ 672.063085][T14815] ? import_iovec+0xe5/0x120 [ 672.067522][T14815] ___sys_sendmsg+0x252/0x2e0 [ 672.072025][T14815] ? __sys_sendmsg+0x280/0x280 [ 672.076628][T14815] ? rw_verify_area+0x1c3/0x360 [ 672.081322][T14815] ? __fdget+0x1bc/0x240 [ 672.085392][T14815] __se_sys_sendmsg+0x1b1/0x280 [ 672.090076][T14815] ? __x64_sys_sendmsg+0x90/0x90 [ 672.094850][T14815] ? ksys_write+0x260/0x2c0 [ 672.099197][T14815] ? debug_smp_processor_id+0x17/0x20 [ 672.104399][T14815] __x64_sys_sendmsg+0x7b/0x90 [ 672.108995][T14815] do_syscall_64+0x34/0x70 [ 672.113354][T14815] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 672.119065][T14815] RIP: 0033:0x7f040b37a9f9 [ 672.123318][T14815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.142759][T14815] RSP: 002b:00007f0409ffa048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.151007][T14815] RAX: ffffffffffffffda RBX: 00007f040b508f80 RCX: 00007f040b37a9f9 [ 672.158815][T14815] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 672.166633][T14815] RBP: 00007f0409ffa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 672.174466][T14815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.182245][T14815] R13: 000000000000000b R14: 00007f040b508f80 R15: 00007fffc896aa28 [ 672.190229][ T6164] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 672.200953][ T6164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 672.209331][ T6222] usb 2-1: config 0 descriptor?? [ 672.217366][ T6164] usb 5-1: SerialNumber: syz [ 672.222469][ T8060] Bluetooth: hci0: command 0x1003 tx timeout [ 672.228373][ T40] Bluetooth: hci0: sending frame failed (-49) [ 672.249520][ T6222] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 672.257188][ T6222] usb 2-1: Detected FT232H [ 672.471993][ T6222] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 672.507663][T14819] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 672.604641][ T6222] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 672.628970][ T6222] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 672.639762][ T6222] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 672.648477][ T6222] usb 2-1: USB disconnect, device number 4 [ 672.658198][ T6222] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 672.672613][ T6164] usb 5-1: 0:2 : does not exist [ 672.678181][ T6222] ftdi_sio 2-1:0.0: device disconnected [ 672.777816][ T6164] usb 5-1: USB disconnect, device number 125 [ 673.129435][T13795] udevd[13795]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 673.164471][ T5273] print_req_error: 46 callbacks suppressed [ 673.164489][ T5273] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 673.183023][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 673.205504][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.216376][ T5273] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.227094][ T5273] buffer_io_error: 32 callbacks suppressed [ 673.227106][ T5273] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 673.244905][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 673.253082][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.264329][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 673.284680][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.314834][T14835] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 673.327454][T14835] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 673.337107][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 673.540504][T14835] EXT4-fs (loop2): invalid journal inode [ 673.589051][ T6222] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 673.655622][T13795] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 673.673637][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 673.691601][T13795] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.703039][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.714246][T13795] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 673.722992][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 673.732836][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 673.741390][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 673.749532][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 673.757567][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 673.858851][ T6222] usb 2-1: Using ep0 maxpacket: 8 [ 673.935152][T14846] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 673.943174][T14846] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 673.959238][T14846] F2FS-fs (loop2): Found nat_bits in checkpoint [ 673.989015][ T6222] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 674.001651][ T6222] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 674.022745][ T6222] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 674.033402][T14846] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 674.040308][T14846] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 674.048211][ T6222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 674.150621][ T361] attempt to access beyond end of device [ 674.150621][ T361] loop2: rw=1, want=45112, limit=40427 [ 674.188947][ T5] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 674.239022][ T6222] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 674.251584][ T6222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.268841][ T6222] usb 2-1: Product: syz [ 674.272977][ T6222] usb 2-1: Manufacturer: syz [ 674.277383][ T6222] usb 2-1: SerialNumber: syz [ 674.293493][ T6222] usb 2-1: config 0 descriptor?? [ 674.298378][ T8060] Bluetooth: hci0: command 0x1001 tx timeout [ 674.304500][ T40] Bluetooth: hci0: sending frame failed (-49) [ 674.339278][ T6222] hub 2-1:0.0: bad descriptor, ignoring hub [ 674.349455][ T6222] hub: probe of 2-1:0.0 failed with error -5 [ 674.407016][T14868] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3249: casefold flag without casefold feature [ 674.419804][T14868] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.3249: missing EA_INODE flag [ 674.438157][T14868] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3249: error while reading EA inode 2 err=-117 [ 674.450721][T14868] EXT4-fs (loop2): 1 orphan inode deleted [ 674.456260][T14868] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 674.568940][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.579043][ T5] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 674.587886][ T5] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 674.597191][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.640421][ T5] usb 4-1: config 0 descriptor?? [ 674.828877][ T290] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 674.882588][ T24] audit: type=1326 audit(1722800770.270:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4952039f9 code=0x7ffc0000 [ 674.937319][ T24] audit: type=1326 audit(1722800770.270:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa4952039f9 code=0x7ffc0000 [ 675.005257][ T24] audit: type=1326 audit(1722800770.270:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4952039f9 code=0x7ffc0000 [ 675.045694][ T6222] usb 4-1: USB disconnect, device number 120 [ 675.072311][ T24] audit: type=1326 audit(1722800770.270:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4952039f9 code=0x7ffc0000 [ 675.128052][ T24] audit: type=1326 audit(1722800770.270:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4952039f9 code=0x7ffc0000 [ 675.190710][ T24] audit: type=1326 audit(1722800770.270:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa4952039f9 code=0x7ffc0000 [ 675.228929][ T290] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.243262][ T290] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 675.259883][ T24] audit: type=1326 audit(1722800770.270:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4952039f9 code=0x7ffc0000 [ 675.307865][ T24] audit: type=1326 audit(1722800770.270:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa4952039f9 code=0x7ffc0000 [ 675.344571][ T24] audit: type=1326 audit(1722800770.270:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa495203a33 code=0x7ffc0000 [ 675.379409][ T290] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 675.392671][ T290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 675.408097][ T290] usb 5-1: SerialNumber: syz [ 675.415062][ T24] audit: type=1326 audit(1722800770.310:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4952024df code=0x7ffc0000 [ 675.719661][ T290] usb 5-1: 0:2 : does not exist [ 675.759036][T14892] tipc: Started in network mode [ 675.763730][ T290] usb 5-1: USB disconnect, device number 126 [ 675.769694][T14892] tipc: Own node identity 1, cluster identity 4711 [ 675.776086][T14892] tipc: 32-bit node address hash set to 1 [ 675.858858][ T5] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 675.969304][T13799] udevd[13799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 676.098864][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 676.195447][T14894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3256'. [ 676.219035][ T5] usb 3-1: config 0 has no interfaces? [ 676.349155][ T6164] Bluetooth: hci0: command 0x1009 tx timeout [ 676.378923][ T5] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0198, bcdDevice=29.a0 [ 676.387845][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=131 [ 676.396124][ T5] usb 3-1: Product: syz [ 676.400260][ T5] usb 3-1: Manufacturer: syz [ 676.404666][ T5] usb 3-1: SerialNumber: syz [ 676.414354][ T5] usb 3-1: config 0 descriptor?? [ 676.660715][T14890] udc-core: couldn't find an available UDC or it's busy [ 676.667499][T14890] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.688058][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x1 [ 676.696044][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.705695][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.713330][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.720849][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.728066][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.735491][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x4 [ 676.742909][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.750964][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x2 [ 676.758221][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.765998][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.773460][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.780862][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.788099][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x4 [ 676.795547][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.799024][ T6222] usb 2-1: USB disconnect, device number 5 [ 676.803023][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.815764][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.828539][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.838763][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.846198][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.853681][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.861151][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.868408][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.876151][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.888982][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.901676][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.914365][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.927069][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.934591][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.942219][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.949665][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.956919][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.964486][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.971930][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.979385][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.986668][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 676.994135][ T5] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 677.009545][ T5] hid-generic 0000:0000:0000.0062: hidraw0: HID v0.00 Device [syz0] on syz0 [ 677.031806][ T290] usb 3-1: USB disconnect, device number 93 [ 677.643190][T14917] fuse: Unknown parameter 'f$90x000000000000000b' [ 677.689649][T14920] EXT4-fs (loop2): Ignoring removed nobh option [ 677.701583][T14920] EXT4-fs (loop2): 1 orphan inode deleted [ 677.707266][T14920] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,nobh,init_itable,sysvgroups,delalloc,usrquota, [ 677.723102][T14920] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 677.848917][ T6222] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 678.238976][ T6222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.249912][ T6222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.259663][ T6222] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 678.268505][ T6222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.277154][ T6222] usb 4-1: config 0 descriptor?? [ 678.759272][ T5273] print_req_error: 42 callbacks suppressed [ 678.759289][ T5273] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 678.759313][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 678.765032][ T5273] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 678.776808][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 678.787566][ T5273] buffer_io_error: 29 callbacks suppressed [ 678.787578][ T5273] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 678.798231][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 678.828919][ T6222] usbhid 4-1:0.0: can't add hid device: -71 [ 678.830103][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 678.835743][ T6222] usbhid: probe of 4-1:0.0 failed with error -71 [ 678.852608][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 678.854451][ T6222] usb 4-1: USB disconnect, device number 121 [ 678.863933][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 678.877038][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 678.884953][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 678.895648][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 678.903672][T13795] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 678.914632][T13795] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 679.028858][ T8060] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 679.459435][ T8060] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.500287][ T8060] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 679.572718][ T290] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 679.609074][ T8060] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 679.618370][ T8060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 679.628146][ T8060] usb 3-1: SerialNumber: syz [ 679.818858][ T290] usb 2-1: Using ep0 maxpacket: 8 [ 679.848725][T14953] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.855601][T14953] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.863328][T14953] device bridge_slave_0 entered promiscuous mode [ 679.870327][T14953] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.877284][T14953] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.884945][T14953] device bridge_slave_1 entered promiscuous mode [ 679.919933][ T8060] usb 3-1: 0:2 : does not exist [ 679.931085][T14953] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.938030][T14953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.945261][T14953] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.952195][T14953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.979662][ T8060] usb 3-1: USB disconnect, device number 94 [ 679.985583][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.993036][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.001233][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 680.008464][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 680.030804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 680.038770][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.045635][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.052935][ T290] usb 2-1: config 1 interface 0 altsetting 133 endpoint 0x81 has an invalid bInterval 174, changing to 11 [ 680.064744][ T290] usb 2-1: config 1 interface 0 altsetting 133 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 680.077871][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 680.086036][ T290] usb 2-1: config 1 interface 0 has no altsetting 0 [ 680.092785][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.099638][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.106840][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 680.114889][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 680.140209][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 680.154170][T14953] device veth0_vlan entered promiscuous mode [ 680.161898][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 680.170109][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 680.177412][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 680.193331][T14953] device veth1_macvtap entered promiscuous mode [ 680.202109][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 680.219182][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 680.227764][ T607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 680.268062][T14965] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 680.274910][ T290] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 680.274926][ T290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.274937][ T290] usb 2-1: Product: syz [ 680.274947][ T290] usb 2-1: Manufacturer: ⠁ [ 680.274965][ T290] usb 2-1: SerialNumber: syz [ 680.408956][ T6164] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 680.650225][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 680.666515][T13799] blk_update_request: I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.667631][ T5273] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 680.677753][ T6164] usb 5-1: Using ep0 maxpacket: 16 [ 680.692207][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.700336][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.708582][T13799] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.808956][ T6164] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.840644][ T6164] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 680.850873][ T6164] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 680.940126][ T6164] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 681.039317][ T6164] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 681.052943][ T6164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 681.059153][ T290] usbhid 2-1:1.0: can't add hid device: -71 [ 681.061297][ T6164] usb 5-1: SerialNumber: syz [ 681.066619][ T290] usbhid: probe of 2-1:1.0 failed with error -71 [ 681.082292][ T290] usb 2-1: USB disconnect, device number 6 [ 681.089041][T14958] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 681.098421][T14958] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 681.107747][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 681.107759][ T24] audit: type=1400 audit(1722800776.490:6101): avc: denied { setopt } for pid=14980 comm="syz.3.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 681.120590][ T6164] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 681.329806][ T619] device bridge_slave_1 left promiscuous mode [ 681.336018][ T619] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.344522][ T619] device bridge_slave_0 left promiscuous mode [ 681.350622][ T619] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.360611][ T619] device veth1_macvtap left promiscuous mode [ 681.366539][ T619] device veth0_vlan left promiscuous mode [ 681.396927][T15001] udc-core: couldn't find an available UDC or it's busy [ 681.404616][T15001] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 681.422475][T15001] udc-core: couldn't find an available UDC or it's busy [ 681.434598][T15001] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 681.515343][ T6164] usb 5-1: USB disconnect, device number 127 [ 681.568871][ T5] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 681.838862][ T5] usb 4-1: device descriptor read/64, error -71 [ 682.146313][T15016] FAULT_INJECTION: forcing a failure. [ 682.146313][T15016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.159331][T15016] CPU: 0 PID: 15016 Comm: syz.1.3288 Tainted: G W 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 682.170511][T15016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 682.180509][T15016] Call Trace: [ 682.183634][T15016] dump_stack_lvl+0x1e2/0x24b [ 682.188131][T15016] ? bfq_pos_tree_add_move+0x43b/0x43b [ 682.193427][T15016] ? dev_hard_start_xmit+0x5b3/0x620 [ 682.198544][T15016] ? dev_hard_start_xmit+0x5b8/0x620 [ 682.203662][T15016] dump_stack+0x15/0x17 [ 682.207655][T15016] should_fail+0x3c6/0x510 [ 682.211920][T15016] should_fail_usercopy+0x1a/0x20 [ 682.216777][T15016] strncpy_from_user+0x24/0x2d0 [ 682.221470][T15016] ? update_load_avg+0x541/0x1690 [ 682.226316][T15016] strncpy_from_user_nofault+0x73/0x150 [ 682.231700][T15016] bpf_probe_read_compat_str+0xec/0x180 [ 682.237081][T15016] bpf_prog_873dba3036f747bf+0x35/0x8a4 [ 682.242458][T15016] bpf_trace_run3+0x121/0x2c0 [ 682.246998][T15016] ? bpf_trace_run2+0x280/0x280 [ 682.251662][T15016] ? __this_cpu_preempt_check+0x13/0x20 [ 682.257044][T15016] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 682.263754][T15016] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 682.269913][T15016] __bpf_trace_sched_switch+0xb/0x10 [ 682.275018][T15016] __traceiter_sched_switch+0x85/0xc0 [ 682.280230][T15016] __schedule+0x10be/0x1330 [ 682.284566][T15016] ? release_firmware_map_entry+0x18d/0x18d [ 682.290286][T15016] ? preempt_schedule+0xd9/0xe0 [ 682.294969][T15016] preempt_schedule_common+0x9b/0xf0 [ 682.300089][T15016] preempt_schedule+0xd9/0xe0 [ 682.304604][T15016] ? schedule_preempt_disabled+0x20/0x20 [ 682.310117][T15016] ? ip6table_mangle_hook+0x2e7/0x850 [ 682.315281][T15016] ? __skb_clone+0x447/0x6b0 [ 682.319723][T15016] preempt_schedule_thunk+0x16/0x18 [ 682.324738][T15016] ? qdisc_run+0x1bf/0x330 [ 682.329003][T15016] __local_bh_enable_ip+0x65/0x80 [ 682.333852][T15016] local_bh_enable+0x1f/0x30 [ 682.338280][T15016] ip6_finish_output2+0xf28/0x1850 [ 682.343229][T15016] ? __ip6_finish_output+0x780/0x780 [ 682.348344][T15016] ? validate_xmit_skb+0xc50/0xc50 [ 682.353294][T15016] __ip6_finish_output+0x5ec/0x780 [ 682.358243][T15016] ip6_finish_output+0x34/0x1e0 [ 682.362923][T15016] ? ip6_output+0x481/0x4c0 [ 682.367264][T15016] ip6_output+0x1f7/0x4c0 [ 682.371433][T15016] ? ac6_seq_show+0xf0/0xf0 [ 682.375793][T15016] ? ip6_output+0x4c0/0x4c0 [ 682.380114][T15016] ip6_local_out+0x1ff/0x480 [ 682.384538][T15016] ? dst_output+0x80/0x80 [ 682.388702][T15016] ? __ip6_local_out+0x420/0x420 [ 682.393564][T15016] ? ip6_make_skb+0x64b/0x760 [ 682.398077][T15016] ip6_send_skb+0x82/0x190 [ 682.402341][T15016] udp_v6_send_skb+0xa46/0x1470 [ 682.407021][T15016] udpv6_sendmsg+0x20f1/0x30d0 [ 682.411709][T15016] ? ip_do_fragment+0x2310/0x2310 [ 682.416563][T15016] ? memcpy+0x56/0x70 [ 682.420404][T15016] ? udp_v6_early_demux+0xd10/0xd10 [ 682.425416][T15016] ? avc_has_perm+0x275/0x400 [ 682.429933][T15016] ? avc_has_perm_noaudit+0x240/0x240 [ 682.435156][T15016] ? selinux_socket_sendmsg+0x243/0x340 [ 682.440520][T15016] ? is_bpf_text_address+0x172/0x190 [ 682.445645][T15016] ? inet_send_prepare+0x5e/0x4a0 [ 682.450500][T15016] inet6_sendmsg+0xa1/0xc0 [ 682.454755][T15016] ? inet6_compat_ioctl+0x4e0/0x4e0 [ 682.459790][T15016] ____sys_sendmsg+0x59e/0x8f0 [ 682.464474][T15016] ? __sys_sendmsg_sock+0x40/0x40 [ 682.469330][T15016] ? kmem_cache_free+0xa9/0x1e0 [ 682.474033][T15016] ? import_iovec+0xe5/0x120 [ 682.478445][T15016] ___sys_sendmsg+0x252/0x2e0 [ 682.482958][T15016] ? __sys_sendmsg+0x280/0x280 [ 682.487565][T15016] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 682.494154][T15016] ? proc_fail_nth_write+0x20b/0x290 [ 682.499280][T15016] ? __fdget+0x1bc/0x240 [ 682.503353][T15016] __sys_sendmmsg+0x2c3/0x510 [ 682.507869][T15016] ? __ia32_sys_sendmsg+0x90/0x90 [ 682.512727][T15016] ? mutex_lock+0xa5/0x110 [ 682.516984][T15016] ? __kasan_check_write+0x14/0x20 [ 682.521928][T15016] ? __ia32_sys_read+0x90/0x90 [ 682.526530][T15016] __x64_sys_sendmmsg+0xa0/0xb0 [ 682.531215][T15016] do_syscall_64+0x34/0x70 [ 682.535468][T15016] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 682.541282][T15016] RIP: 0033:0x7fdaa3c379f9 [ 682.545537][T15016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.565100][T15016] RSP: 002b:00007fdaa28b7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 682.573331][T15016] RAX: ffffffffffffffda RBX: 00007fdaa3dc5f80 RCX: 00007fdaa3c379f9 [ 682.581246][T15016] RDX: 0000000000000002 RSI: 0000000020003f80 RDI: 0000000000000003 [ 682.589049][T15016] RBP: 00007fdaa28b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 682.596858][T15016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.604758][T15016] R13: 000000000000000b R14: 00007fdaa3dc5f80 R15: 00007ffc4cefc268 [ 682.664562][ T24] audit: type=1400 audit(1722800778.050:6102): avc: denied { create } for pid=15019 comm="syz.1.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 682.664924][T15020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3290'. [ 682.689027][ T5] usb 4-1: device descriptor read/64, error -71 [ 682.699167][ T7986] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 682.961326][T15027] netlink: 'syz.2.3292': attribute type 19 has an invalid length. [ 682.989083][ T8060] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 683.108883][ T7986] usb 5-1: Using ep0 maxpacket: 16 [ 683.148937][ T5] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 683.388943][ T7986] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 683.397864][ T7986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.405629][ T7986] usb 5-1: Product: syz [ 683.408963][ T8060] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.409690][ T7986] usb 5-1: Manufacturer: syz [ 683.420746][ T8060] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.424746][ T5] usb 4-1: device descriptor read/64, error -71 [ 683.434777][ T8060] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 683.440377][ T7986] usb 5-1: SerialNumber: syz [ 683.449615][ T8060] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.459279][ T7986] usb 5-1: config 0 descriptor?? [ 683.466464][ T8060] usb 2-1: config 0 descriptor?? [ 683.499676][ T7986] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 683.507352][ T7986] usb 5-1: Detected FT232H [ 683.675417][T15038] fuse: Unknown parameter '' [ 683.709070][ T7986] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 683.752277][T15040] udc-core: couldn't find an available UDC or it's busy [ 683.759196][T15040] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 683.838871][ T5] usb 4-1: device descriptor read/64, error -71 [ 683.958994][ T5] usb usb4-port1: attempt power cycle [ 684.198887][ T607] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 684.228944][ T8060] usb 2-1: string descriptor 0 read error: -71 [ 684.248945][ T8060] uclogic 0003:256C:006D.0063: failed retrieving string descriptor #200: -71 [ 684.257579][ T8060] uclogic 0003:256C:006D.0063: failed retrieving pen parameters: -71 [ 684.265795][ T8060] uclogic 0003:256C:006D.0063: failed probing pen v2 parameters: -71 [ 684.273822][ T8060] uclogic 0003:256C:006D.0063: failed probing parameters: -71 [ 684.281232][ T8060] uclogic: probe of 0003:256C:006D.0063 failed with error -71 [ 684.290128][ T8060] usb 2-1: USB disconnect, device number 7 [ 684.368899][ T5] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 684.438863][ T607] usb 1-1: Using ep0 maxpacket: 8 [ 684.558908][ T607] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 684.569592][ T607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.581598][ T607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.591678][ T607] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 684.605447][ T607] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 684.620059][ T607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.633268][ T607] usb 1-1: config 0 descriptor?? [ 684.732190][T15057] FAULT_INJECTION: forcing a failure. [ 684.732190][T15057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.745366][T15057] CPU: 1 PID: 15057 Comm: syz.1.3299 Tainted: G W 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 684.756634][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 684.766520][T15057] Call Trace: [ 684.769658][T15057] dump_stack_lvl+0x1e2/0x24b [ 684.774165][T15057] ? bfq_pos_tree_add_move+0x43b/0x43b [ 684.779473][T15057] dump_stack+0x15/0x17 [ 684.783446][T15057] should_fail+0x3c6/0x510 [ 684.787703][T15057] should_fail_usercopy+0x1a/0x20 [ 684.792565][T15057] _copy_from_user+0x20/0xd0 [ 684.796992][T15057] __copy_msghdr_from_user+0xaf/0x7c0 [ 684.802200][T15057] ? __ia32_sys_shutdown+0x70/0x70 [ 684.807149][T15057] ? kmem_cache_free+0xa9/0x1e0 [ 684.811828][T15057] ? import_iovec+0xe5/0x120 [ 684.816455][T15057] ___sys_sendmsg+0x166/0x2e0 [ 684.820968][T15057] ? __sys_sendmsg+0x280/0x280 [ 684.825571][T15057] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 684.832158][T15057] ? proc_fail_nth_write+0x20b/0x290 [ 684.837296][T15057] ? __fdget+0x1bc/0x240 [ 684.841364][T15057] __sys_sendmmsg+0x2c3/0x510 [ 684.845884][T15057] ? __ia32_sys_sendmsg+0x90/0x90 [ 684.848846][ T5] usb 4-1: device not accepting address 124, error -71 [ 684.850736][T15057] ? mutex_lock+0xa5/0x110 [ 684.850759][T15057] ? __kasan_check_write+0x14/0x20 [ 684.866711][T15057] ? __ia32_sys_read+0x90/0x90 [ 684.871306][T15057] __x64_sys_sendmmsg+0xa0/0xb0 [ 684.875988][T15057] do_syscall_64+0x34/0x70 [ 684.880243][T15057] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 684.885968][T15057] RIP: 0033:0x7fdaa3c379f9 [ 684.890232][T15057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.909750][T15057] RSP: 002b:00007fdaa28b7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 684.917994][T15057] RAX: ffffffffffffffda RBX: 00007fdaa3dc5f80 RCX: 00007fdaa3c379f9 [ 684.925824][T15057] RDX: 0000000000000002 RSI: 0000000020003f80 RDI: 0000000000000003 [ 684.933709][T15057] RBP: 00007fdaa28b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 684.941606][T15057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.949497][T15057] R13: 000000000000000b R14: 00007fdaa3dc5f80 R15: 00007ffc4cefc268 [ 685.166928][T15061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=338 sclass=netlink_route_socket pid=15061 comm=syz.1.3300 [ 685.327535][ T7986] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 685.349005][ T7986] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 685.398942][ T7986] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 685.418063][ T7986] usb 5-1: USB disconnect, device number 2 [ 685.434760][ T7986] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 685.566394][T15067] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 685.658208][ T7986] ftdi_sio 5-1:0.0: device disconnected [ 685.680775][T15064] kvm: pic: non byte write [ 685.685671][T15064] kvm: pic: non byte write [ 685.994128][T15079] netlink: 'syz.3.3303': attribute type 19 has an invalid length. [ 686.514053][ T6222] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 686.697225][T15087] netlink: 'syz.4.3307': attribute type 19 has an invalid length. [ 686.999974][T15092] 9pnet: Insufficient options for proto=fd [ 687.048977][ T607] usbhid 1-1:0.0: can't add hid device: -71 [ 687.054844][ T607] usbhid: probe of 1-1:0.0 failed with error -71 [ 687.068532][T15097] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 687.074719][ T607] usb 1-1: USB disconnect, device number 99 [ 687.077216][ T6222] usb 2-1: device descriptor read/64, error -71 [ 687.089865][T15094] EXT4-fs error (device loop0): __ext4_iget:4958: inode #11: block 1: comm syz.0.3310: invalid block [ 687.100801][T15094] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3310: couldn't read orphan inode 11 (err -117) [ 687.112757][T15094] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,usrjquota=,inode_readahead_blks=0x0000000000400000,i_version,acl,,errors=continue [ 687.269220][ T24] audit: type=1400 audit(1722800782.650:6103): avc: denied { setattr } for pid=15093 comm="syz.0.3310" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 687.348909][T14953] ------------[ cut here ]------------ [ 687.354329][T14953] kernel BUG at fs/ext4/inode.c:5246! [ 687.359671][T14953] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 687.365555][T14953] CPU: 0 PID: 14953 Comm: syz-executor Tainted: G W 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 687.376917][T14953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 687.386824][T14953] RIP: 0010:ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 687.392805][T14953] Code: 6d ca ff e9 0f f1 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 21 f1 ff ff 48 89 df e8 79 6e ca ff e9 14 f1 ff ff e8 1f d6 8c ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 57 41 [ 687.412245][T14953] RSP: 0018:ffffc9000129f980 EFLAGS: 00010293 [ 687.418145][T14953] RAX: ffffffff81ddd2e1 RBX: 0000000000000000 RCX: ffff88812c4ba780 [ 687.425972][T14953] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 687.433776][T14953] RBP: ffffc9000129fa90 R08: ffffffff81ddaefd R09: ffffed1025638f24 [ 687.441593][T14953] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 687.449403][T14953] R13: 00000000ffffffff R14: 0000000000000000 R15: ffff888110929000 [ 687.457207][T14953] FS: 00005555565f3500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 687.466060][T14953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 687.472487][T14953] CR2: 0000001b3161fffc CR3: 00000001183e8000 CR4: 00000000003506b0 [ 687.480292][T14953] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 687.488111][T14953] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 687.495922][T14953] Call Trace: [ 687.499051][T14953] ? __die_body+0x62/0xb0 [ 687.503210][T14953] ? die+0x88/0xb0 [ 687.506765][T14953] ? do_trap+0x1a4/0x310 [ 687.510854][T14953] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 687.516581][T14953] ? handle_invalid_op+0x95/0xc0 [ 687.521356][T14953] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 687.526740][T14953] ? exc_invalid_op+0x32/0x50 [ 687.531255][T14953] ? asm_exc_invalid_op+0x12/0x20 [ 687.536112][T14953] ? ext4_mark_iloc_dirty+0x1a6d/0x3e60 [ 687.541490][T14953] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 687.546878][T14953] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 687.554024][T14953] __ext4_mark_inode_dirty+0x4fc/0x7b0 [ 687.559305][T14953] ? sb_end_intwrite+0x110/0x110 [ 687.564064][T14953] ? current_time+0x1af/0x2f0 [ 687.568599][T14953] ? atime_needs_update+0x5a0/0x5a0 [ 687.573606][T14953] ? __ext4_unlink+0x6f0/0xac0 [ 687.578216][T14953] __ext4_unlink+0x8b5/0xac0 [ 687.582637][T14953] ? ext4_orphan_del+0x7c0/0x7c0 [ 687.587425][T14953] ? down_write+0xd7/0x150 [ 687.591661][T14953] ? down_read_killable+0x220/0x220 [ 687.596690][T14953] ? may_delete+0x533/0x760 [ 687.601122][T14953] ext4_unlink+0x142/0x3f0 [ 687.605372][T14953] vfs_unlink+0x23b/0x510 [ 687.609537][T14953] do_unlinkat+0x430/0x8b0 [ 687.613792][T14953] ? fsnotify_link_count+0x90/0x90 [ 687.618747][T14953] ? strncpy_from_user+0x18e/0x2d0 [ 687.623692][T14953] ? getname_flags+0x1fd/0x520 [ 687.628285][T14953] __x64_sys_unlink+0x49/0x50 [ 687.632801][T14953] do_syscall_64+0x34/0x70 [ 687.637052][T14953] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 687.642776][T14953] RIP: 0033:0x7fdd781e3fa7 [ 687.647035][T14953] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.666469][T14953] RSP: 002b:00007ffc572bff48 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 687.674716][T14953] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdd781e3fa7 [ 687.682526][T14953] RDX: 00007ffc572bff70 RSI: 00007ffc572c0000 RDI: 00007ffc572c0000 [ 687.690338][T14953] RBP: 00007ffc572c0000 R08: 0000000000000000 R09: 0000000000000000 [ 687.698148][T14953] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc572c10f0 [ 687.705959][T14953] R13: 00007fdd7825278c R14: 00000000000a7b8e R15: 00007ffc572c21b0 [ 687.713772][T14953] Modules linked in: [ 687.717646][T14953] ---[ end trace 390346377ba77cd4 ]--- [ 687.726795][T14953] RIP: 0010:ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 687.732929][T14953] Code: 6d ca ff e9 0f f1 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 21 f1 ff ff 48 89 df e8 79 6e ca ff e9 14 f1 ff ff e8 1f d6 8c ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 57 41 [ 687.752486][T14953] RSP: 0018:ffffc9000129f980 EFLAGS: 00010293 [ 687.758371][T14953] RAX: ffffffff81ddd2e1 RBX: 0000000000000000 RCX: ffff88812c4ba780 [ 687.766226][T14953] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 687.774028][T14953] RBP: ffffc9000129fa90 R08: ffffffff81ddaefd R09: ffffed1025638f24 [ 687.781829][T14953] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 687.789643][T14953] R13: 00000000ffffffff R14: 0000000000000000 R15: ffff888110929000 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 687.797434][T14953] FS: 00005555565f3500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 687.806238][T14953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 687.812706][T14953] CR2: 0000001b3161fffc CR3: 00000001183e8000 CR4: 00000000003506b0 [ 687.821020][T14953] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 687.828867][T14953] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 687.836767][T14953] Kernel panic - not syncing: Fatal exception [ 687.837419][ T24] audit: type=1400 audit(1722800782.730:6104): avc: denied { unlink } for pid=14953 comm="syz-executor" name="bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 687.842997][T14953] Kernel Offset: disabled [ 687.868912][T14953] Rebooting in 86400 seconds..