last executing test programs: 17.582158029s ago: executing program 2 (id=4641): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd", 0x2}], 0x1, 0xffffffff, 0x9) 17.287181664s ago: executing program 2 (id=4642): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000001c0)={0x1, 0x6, {0xd, 0x1f, 0x9, 0xc, 0x6, 0x5c, 0x4, 0x10b}}) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) fallocate(r3, 0x0, 0x0, 0x1001f0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x40000) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x4, 0x81, 0x0, 0x8, 0x1, 0x48, 0x3, 0x4, 0x0, 0x5, 0x48, 0x4, 0x1, 0x0, 0x8, 0x8}}) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x9, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae500"], 0x0) 14.226407009s ago: executing program 2 (id=4656): ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000001c0)={0x1, 0x6, {0xd, 0x1f, 0x9, 0xc, 0x6, 0x5c, 0x4, 0x10b}}) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x400c8c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fallocate(r1, 0x0, 0x0, 0x1001f0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f80)={0xb4, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x4}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x28, 0x9, 0x0, 0x1, [{0x4}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40048c0}, 0x40000) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x4, 0x81, 0x0, 0x8, 0x1, 0x48, 0x3, 0x4, 0x0, 0x5, 0x48, 0x4, 0x1, 0x0, 0x8, 0x8}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae500"], 0x0) 10.81873412s ago: executing program 2 (id=4669): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@block_validity}, {@norecovery}, {@auto_da_alloc}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000f80)="$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") r0 = socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000000000e8ffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0x42441) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0xd4, r7, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x785f776e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7799e4a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x403664d2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x266ab229}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ba5eab4}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f2b37cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}]}, {0x4}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40005}, 0x20044041) close(0x3) socket$inet(0x2, 0x5, 0x40000001) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 10.508289484s ago: executing program 4 (id=4671): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@block_validity}, {@norecovery}, {@auto_da_alloc}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000f80)="$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") r0 = socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000000000e8ffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0x42441) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0xd4, r7, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x785f776e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7799e4a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x403664d2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x266ab229}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ba5eab4}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f2b37cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}]}, {0x4}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40005}, 0x20044041) close(0x3) socket$inet(0x2, 0x5, 0x40000001) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 10.507653454s ago: executing program 0 (id=4672): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x2000008a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r6, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x74}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000081}, 0x8000) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) rt_sigqueueinfo(0x0, 0xffffffff, 0x0) 10.238904448s ago: executing program 3 (id=4673): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x40095505, &(0x7f00000000c0)=0x7) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0x24, 0x5, {0x5, 0x1, "b85f54"}}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffd) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 9.877785484s ago: executing program 0 (id=4674): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc058, &(0x7f0000000080)=ANY=[], 0x1, 0x31a, &(0x7f0000002840)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_socket_connect_nvme_tcp() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x5, 0x0, 0x81, 0x200, 0x1, 0x1}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x28}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100000000000000000000008100"/28], 0x48) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) syz_open_dev$evdev(0x0, 0x3f, 0x1580) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r6 = socket$inet(0x2, 0x5, 0xffdffffd) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) unshare(0x2040400) 8.77744535s ago: executing program 0 (id=4675): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x40095505, &(0x7f00000000c0)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0x24, 0x7, {0x7, 0x1, "b85f54897b"}}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffd) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, r6) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_usb_ep_write(r0, 0xb, 0x9c, &(0x7f0000000440)="cf776996ea339b085e0432ad79cb77940b2a2cd6c6ee94e5545d1023d36d5fb6944fc1fa00f71d8ba82bee1280d72d21fd3b3fe0692d4e57283108e98ec8b10bc9d8920d0fa405dd5763630791264b89504006e9a00cc9a466bff23614e66a14558372865f52f1669689288b4b7de31e4a8812994f50dae8beb4769b1f7b7ab5bb5aad23d3b9d0469aeb717ac2805113698d7eabde92cb67f9b46e2a") read$FUSE(r7, &(0x7f000000ac40)={0x2020}, 0x2020) 8.151147839s ago: executing program 1 (id=4679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x60840, 0x8) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) 8.09064888s ago: executing program 1 (id=4680): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@block_validity}, {@norecovery}, {@auto_da_alloc}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000f80)="$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") socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000000000e8ffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 7.348462271s ago: executing program 3 (id=4681): r0 = timerfd_create(0x7, 0x800) clock_gettime(0x0, &(0x7f0000000100)) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) syz_socket_connect_nvme_tcp() 7.023790916s ago: executing program 0 (id=4682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$can_raw(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x2}, 0x8, 0x2, 0x0, 0x0, "13fb48498001b670"}, 0x10}}, 0x40816) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x583, &(0x7f0000001080)="$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") r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r9, 0xffffffffffffffff}}]}, 0x28}}, 0x0) setxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000340)=@v3={0x3000000, [{0x40000000, 0xc}, {0x7, 0xe61}], r9}, 0x18, 0x1) r10 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r11, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r10, 0x0}]) 6.889286468s ago: executing program 4 (id=4683): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000380)={[0x8000000000000001]}, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="03"], 0x20) r4 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 6.880289398s ago: executing program 2 (id=4684): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") open(0x0, 0x14927e, 0x20) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40048c0}, 0x40000) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x4, 0x81, 0x0, 0x8, 0x1, 0x48, 0x3, 0x4, 0x0, 0x5, 0x48, 0x4, 0x1, 0x0, 0x8, 0x8}}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={0x0}}, 0x40408c0) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae500"], 0x0) 3.621925466s ago: executing program 4 (id=4685): r0 = socket$inet_udp(0x2, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2400, 0x0, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r4) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r4, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000280)="b7bb28010677f20293eae24fa9cbc2a8e476c0d318075cc7c7cf494e4bd8734ef2ba7edd73c599aee7ded91db16a6e870841f1e7f4f151816eb9533b65f9610b24581d22f3ecb416", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) bind$inet(r3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) 3.582037867s ago: executing program 3 (id=4686): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x1c, 0x65, 0x0, 0xa6, 0x1, 0x0, @remote, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x8}}}}}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000080)={[{@numtail}, {@shortname_win95}, {@numtail}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@fat=@nfs}, {@shortname_win95}, {@uni_xlate}, {@uni_xlateno}, {@shortname_win95}]}, 0x1, 0x360, &(0x7f0000000900)="$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") 3.525848198s ago: executing program 0 (id=4687): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@block_validity}, {@norecovery}, {@auto_da_alloc}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000f80)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") r0 = socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000000000e8ffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0x42441) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0xfc, r7, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x785f776e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7799e4a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x403664d2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x266ab229}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ba5eab4}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f2b37cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28b12312}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x190da7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40005}, 0x20044041) close(0x3) socket$inet(0x2, 0x5, 0x40000001) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 3.516473408s ago: executing program 4 (id=4688): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000b40)={0x0, 0x4, @status={[0x8001, 0x30, 0x2, 0x2a, 0x2, 0x3]}, [0x457, 0xaa58, 0x8000000000000001, 0x9, 0xfffffe0000000000, 0xc5, 0x0, 0x8, 0x0, 0x8, 0x6, 0x2, 0x3, 0x80, 0x10, 0x1, 0x7, 0x80, 0x4, 0xa, 0x0, 0xfffffffffffffffd, 0xe48d, 0x4, 0x1, 0xa9d9, 0x10000, 0x7, 0x8, 0x4, 0x8001, 0x1, 0xbe0e, 0x1f42183d, 0x41, 0x6, 0x9, 0xe, 0x401, 0x6, 0x4, 0x871, 0x80000001, 0x7, 0xe19, 0x9, 0x9a2, 0x4, 0x9, 0x9, 0x10, 0x3, 0x2, 0x4, 0x8, 0x3, 0x2, 0x9, 0x5, 0x2, 0x9, 0x8001, 0x2]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) pread64(r3, &(0x7f0000001040)=""/66, 0x42, 0x9) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0xa6, 0x0) r6 = dup(r2) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r4, @ANYRES8=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000020002600b3a9d821a6007698a173541f77658f8d502f81cd67ef3095485153d800b17353aa669d8b6989bd85fd2a38192941a6951442294ba775cd071ac405f409000000000000001ab7f0e70882eea282429443af6a957ab3e9bdf1ae"], 0x50) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r7}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0080ba1f14bb2d43f200000007020000f8ffffffb7030000080000005796c20900000000850000005900000095"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r7}, 0x0, &(0x7f00000013c0)}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r9 = getuid() mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000680), 0x2000a, &(0x7f00000016c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRES16=r0, @ANYRESHEX=r8, @ANYBLOB=',cache=none,access=client,audit,appraise_type=imasig,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',measure,appraise_type=imasig,fowner<', @ANYRESDEC=0x0, @ANYRES32=r3, @ANYRESDEC=r9, @ANYBLOB=',smackfshat=kmem_cache_free\x00,\x00']) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x12) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000900)='ext4_es_shrink_scan_exit\x00', r12, 0x0, 0x4}, 0x18) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020009000800000000000000000000850000002cd342000000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.448121569s ago: executing program 1 (id=4689): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x2000008a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r6, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x74}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000081}, 0x8000) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) rt_sigqueueinfo(0x0, 0xffffffff, 0x0) 2.915251787s ago: executing program 4 (id=4690): r0 = timerfd_create(0x7, 0x800) clock_gettime(0x0, &(0x7f0000000100)) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) syz_socket_connect_nvme_tcp() 2.907360587s ago: executing program 1 (id=4691): r0 = timerfd_create(0x7, 0x800) clock_gettime(0x0, &(0x7f0000000100)) timerfd_settime(r0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) syz_socket_connect_nvme_tcp() r6 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r6, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 2.308153476s ago: executing program 2 (id=4692): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000280)) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a03000008241c8300074bcc0905060300040000000904010000020d00000904010102"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x10, 0x6b39, 0x10, 0x1e, 0x8, 0x1, 0x10, 0x8, 0x7, 0x10, 0xf, 0x1c}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904000001030000000921050000012205000905810300525a0007"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000340)="cb56", 0x2) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x7fffffff, 0x313d40) write$hidraw(r5, &(0x7f0000000bc0), 0xffffffae) ioctl$HIDIOCGRDESC(r5, 0x401c5820, &(0x7f00000005c0)) ioctl$HIDIOCGRDESC(r5, 0x4030582a, &(0x7f0000000140)={0xd, "7954bbc8aae250bd23544617d5"}) syz_usb_ep_write(r2, 0x84, 0x2, &(0x7f0000000740)='3\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r9, @ANYRES32=r9], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.306080526s ago: executing program 3 (id=4693): socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x1c, 0x65, 0x0, 0xa6, 0x1, 0x0, @remote, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x8}}}}}, 0x0) 1.969846061s ago: executing program 1 (id=4694): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x40095505, &(0x7f00000000c0)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0x24, 0x7, {0x7, 0x1, "b85f54897b"}}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffd) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, r6) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_usb_ep_write(r0, 0xb, 0x9c, &(0x7f0000000440)="cf776996ea339b085e0432ad79cb77940b2a2cd6c6ee94e5545d1023d36d5fb6944fc1fa00f71d8ba82bee1280d72d21fd3b3fe0692d4e57283108e98ec8b10bc9d8920d0fa405dd5763630791264b89504006e9a00cc9a466bff23614e66a14558372865f52f1669689288b4b7de31e4a8812994f50dae8beb4769b1f7b7ab5bb5aad23d3b9d0469aeb717ac2805113698d7eabde92cb67f9b46e2a") read$FUSE(r7, &(0x7f000000ac40)={0x2020}, 0x2020) 1.679060835s ago: executing program 4 (id=4695): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x40095505, &(0x7f00000000c0)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0x24, 0x7, {0x7, 0x1, "b85f54897b"}}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffd) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, r5) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_usb_ep_write(r0, 0xb, 0x9c, &(0x7f0000000440)="cf776996ea339b085e0432ad79cb77940b2a2cd6c6ee94e5545d1023d36d5fb6944fc1fa00f71d8ba82bee1280d72d21fd3b3fe0692d4e57283108e98ec8b10bc9d8920d0fa405dd5763630791264b89504006e9a00cc9a466bff23614e66a14558372865f52f1669689288b4b7de31e4a8812994f50dae8beb4769b1f7b7ab5bb5aad23d3b9d0469aeb717ac2805113698d7eabde92cb67f9b46e2a") read$FUSE(r6, &(0x7f000000ac40)={0x2020}, 0x2020) 1.443614029s ago: executing program 3 (id=4696): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000380)={[0x8000000000000001]}, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="03"], 0x20) r4 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 546.069862ms ago: executing program 3 (id=4697): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket(0x10, 0x2, 0x0) ptrace$cont(0x18, 0x0, 0x231, 0x91fd) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x88800, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 206.630686ms ago: executing program 0 (id=4698): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000500)={[{@nodiscard}, {@io_bits={'io_bits', 0x3d, 0xfffffffffffffff9}}, {@noinline_data}, {@fastboot}, {@noquota}, {@io_bits={'io_bits', 0x3d, 0xbf}}, {@io_bits={'io_bits', 0x3d, 0xc}}, {@nouser_xattr}, {@two_active_logs}, {@inline_dentry}, {@quota}, {@jqfmt_vfsv1}, {@barrier}, {@noinline_dentry}]}, 0x2, 0x5513, &(0x7f00000079c0)="$eJzs3M1rI/UbAPAnfdvX3/6KePC2A4vQwiY0fVn0VnUXX7BLWfXgSdMkDdlNMqVJ09qTB4/iwf9EFDx59G/w4NmbeFC8CUpmprrVFZRNG9t+PjB5Zr755pnnO5TCMxMSwIU1n/z8YyluxJWImI6I6xHZfqnYMut5eC4ibkbE1GNbqRj/fWAuIq5GxI1R8jxnqXjr09vDW2s/vPHTV99cmrn22ZffTm7VwKQ9HxHdnXx/v5vHtJXHh8V4bdjOYnd1WMT8je6j4jjN435zK8uwXzuaV8viSiufn+7s9Udxu1Orj2KrvZ2N7/TyE/aHraM82Qce1naz40ZzK4vtfprF1mFe18Fh/r/tsD/I8zSKfB9k6WMwOIr5ePOgma9n51EW671BMZ7nTRvNg1EcFrE4XdTTTiOrY+sJF3Du31zt/6432729g2TY3O23016yVqm+UKneKVd300Zz0Fwt17qNO6vJQqszmlYeNGvd9VaatjrNSj3tLiYLrXq9XK0mC3ebW+1aL6lWKyuVpfLaYrF3O3n1/jtJp5EsjOLL7d7eoN3pJ9vpbpJ/YjFZrqy8uJjcqiZvbWwmmw/u3dvYfPu9u+/ef2nj9VeKSX8pK1lYXlpeLleXysvVxQu0/o+Kose4fngqpUkXAHD26P+BSTi5/n/3QcTJ9/8x6f7/nDhT/e9F7/9PYP3wVPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX1nezn7+W7cznx9eK8f8VQ88Ux6WImIqIX59gOuaO5Zwu8sz+zfzZP9XwdSmyDKNzXCq2qxGxXmy//P+krwIAAACcX198ePOTvFvPX+YnXRCnKb9pM3X9/THlK0XE7Pz3Y8o2NXp5dkzJsr/vmTgYU7bsBtblMSXLb7nNjCvbPzJ9LFx+LJTyMHWq5QAAAKfieCdwul0IAAAAp+njSRfAZJTi6FHm0bPg7Jv3fzwQvHLsCAAAADiDSpMuAAAAADhxWf/v9/8AAADgfMt//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA3du4nN20gigPws8EF+kdFVfe9SndwjB6hyy4rDtBLcIAu6BV6Ac5AdjlCBBEeQyBCysJjW4m+T3ImY5kfbxAsZkYaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAunRXbZb/fn/70zZnf2gnz2gAAACAW3bVZln/M0/9D839T82tL02/iIgyIm7N3Ufx7ipz1ORUT8//vXy+elbD/4g64fgek+Z6HxHfm+vhc9efAgAAALxd29V6kWbr6c986ILoU1q0KT/+yJRXREQ1v8+UVh7zvmYKq7/f4/iVKa1ewJpmCktLbuNcaS+Zxennfl61m140RWrKm689F5lt7AAAQI9GV01vsxAAAAB693PoAhhGEaetzPNW4CQ1zfbe7KoHAAAAvELF0AUAAAAAnavn/z2d/3dw/h8AAAAMI53/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJd21Wa5Xa0XbXP2h3byjAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB7Zn3sUCGEoCqN3fjKjnWT/i5ULWgmWVudA4OM9EggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADceR0n7zM+jS3Jt9PG6Hgm+XXV+HfVWLpurL0wr++Px38EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzN7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/v28xpHFQcA/DszOxtbFWOUHCKi4EEvNt3W1t7EgxI8+CcIId3W2K0/2hxsKWIu3iTnXkSPIoISb/0fem6hl3rrYQ8VPCszO5OdNAXXXzPb5vOBN++7wzDv+2Yh5DvvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQG789jbPisDiJ0+rcrfvXNor+9gN94cbOnZWiFXHSZtKPhhebH5Ll7hIBAADg8Mjq+j4i7ua7a0WfLpb1f15fU9T83z49iet6/sG6v+7r2r9ov/x87/ny4oXpeMVNz22OhscPptL7n6Y49575yyt65ZMv371k5ReSvrf93Dgvn2fy9c2b7/TLcKGNbAGAf+JY3VdB/f9Q0Q+6TAyAQ6PXKLzr+j9b7DYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDaMt+PJOk4iYqU3jQu371/beFh/Y+fOSt1OX7++E19O71ncIo+Ic5uj4fFWZzPfLl+5emF9NBpeaj94KSK6Gv2tavoXPpjh4ohOno/gPwrS6suel3wejaDDP0oAADyW8qoVdf3dfHetOJcsRfzx3f76/9VGHDPW//c+PH2rOVaz/h/snWF16+Knq5evXH198+L6+eH54cdvnBi8OTh55tSpM6vlu5JVb0wAAAD4d/pVa9b/6dLB9f+jjThmrP8/+2bwRXOs7ED9T+xb/+86EwAAgMPt2Zd//y15yPmk34/P17e2Lg0mx73PJybHDlL92xaqlkQvoqr/s6WuswIAAADaMN5O9q3/n23EMeP6/1Pfv/Bj855ZRByp1v+PbXwyOtvedOZaGz8n7nqOAAAAdOtI1Zr7//Ny/3+6t+UhjYjXXpnE9S/2Z6n/s3e/+qE5VnP//8n2pjiX0uXJ8yj75YjectcZAQAA8Dh7ompFsf9rvrv20U9H3+/b/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQtj8DAAD//4CXPcE=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 0s ago: executing program 1 (id=4699): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = open(&(0x7f0000000840)='./file1\x00', 0x646100, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$eJzsmb2LE0EYxp+Z3eydhyg2FjYWHniit9ndqFxzxQmWgnCKWgZvPU73LpKskAQEg42NpYVga2NpYWFl4V9gq4UKgoUp7YSR+djdyWYT4gdG9P3BzT7z9c68L9yzsAFBEP8tHz98ff/w3NqlUwD2YxkLZvyzo5/i4Oj6d4/vnHy0fv7J87dPX+8duPuyHI/JPWL28z0ArzYcpGCuOXFk93IRNtO4DI4TRl8Bg6/lN6HQnRgM18yam5Zu7TMiif3rrWTrxk4SB7IJZRPJpmGfLy81HDBsAVhUtxOCWfOdXv9WM0nidlnURHbO2NSPimn1U/fb4FhHVj0hOICrD+4PZN/UBgF4Xr8QHKHRDTBsGr2GBfi+X5TEyv+IW8R3Zsl/vuKZEodW/9Sh4Locf0Pu/7Co/ZY4rDwi/6HzkcPDzAPtNZ/mnvvPC2VcAMam3iwlyYVfiOxVFCoXhT9JZz9u+ZMLN/ePerp7u97p9Vd3dpvb8Xa8F0WNs8HpIDgT1ZUR6XaK/y0qf1qy4tcmrPWYh24zTdthF0jbYd6PdGs57uaL1he1hyv/41g5pmMw887KX5QlmPnj6inVilO98t7EnAiCIAiCIAiCIAiCIAiCIKo5Cgb9S5hg5oNoFdFF9YXyewAAAP//L0Rm/Q==") fcntl$getflags(r5, 0x408) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x10, 0xffffffe5, 0x40, @private1, @local, 0x80, 0x40, 0x6, 0x9}}) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x8815) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = eventfd2(0x9, 0x80800) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000040)={0x400008001, 0x0, 0x1, r12, 0x1}) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r12, 0x1}) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x4, r12, 0x5}) recvmsg(r6, &(0x7f0000000800)={&(0x7f0000000300)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000005c0)=""/213, 0xd5}], 0x2, &(0x7f0000000700)=""/245, 0xf5}, 0x11000) fadvise64(r9, 0x3, 0x9, 0x3) kernel console output (not intermixed with test programs): 1350.798682][ T1406] usb 5-1: USB disconnect, device number 85 [ 1350.827391][T16538] loop3: detected capacity change from 0 to 16 [ 1350.843379][T16538] erofs: (device loop3): mounted with root inode @ nid 36. [ 1350.863424][T16538] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1350.874503][ T46] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1350.886455][T16538] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1351.164241][ T291] kye 0003:0458:0138.00B5: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.1-1/input0 [ 1351.370105][ T291] usb 2-1: USB disconnect, device number 69 [ 1351.505273][T10494] EXT4-fs (loop0): unmounting filesystem. [ 1351.506038][ T589] usb 1-1: USB disconnect, device number 80 [ 1351.686075][T16552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4481'. [ 1351.716621][T16554] loop0: detected capacity change from 0 to 1024 [ 1351.742165][T16554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1351.828332][T16558] loop2: detected capacity change from 0 to 512 [ 1351.858931][T16558] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1351.878431][T16558] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1351.886479][T16558] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1351.900952][T16558] System zones: 0-1, 15-15, 18-18, 34-34 [ 1351.908994][T16558] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1351.916201][T16558] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1351.926394][ T1406] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1351.934485][T16558] EXT4-fs warning (device loop2): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1352.019217][T16558] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1352.053804][T16558] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4483: bg 0: block 40: padding at end of block bitmap is not set [ 1352.121702][T16558] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1352.138173][ T1406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.163368][T16558] EXT4-fs (loop2): 1 truncate cleaned up [ 1352.168336][ T1406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.169120][T16558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1352.186200][ T1406] usb 5-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1352.209472][ T1406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.262045][ T589] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1352.270901][ T1406] usb 5-1: config 0 descriptor?? [ 1352.306041][ T291] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1352.459291][ T589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1352.477286][ T589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1352.583749][ T589] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1352.597199][T16570] loop3: detected capacity change from 0 to 256 [ 1352.609616][ T589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.619995][T16570] FAT-fs (loop3): Directory bread(block 64) failed [ 1352.626800][ T589] usb 1-1: Product: syz [ 1352.631393][ T589] usb 1-1: Manufacturer: syz [ 1352.636165][ T589] usb 1-1: SerialNumber: syz [ 1352.638129][T16570] FAT-fs (loop3): Directory bread(block 65) failed [ 1352.645530][ T589] usb 1-1: config 0 descriptor?? [ 1352.652984][T16570] FAT-fs (loop3): Directory bread(block 66) failed [ 1352.659624][T16570] FAT-fs (loop3): Directory bread(block 67) failed [ 1352.666577][T16570] FAT-fs (loop3): Directory bread(block 68) failed [ 1352.673169][T16570] FAT-fs (loop3): Directory bread(block 69) failed [ 1352.679870][T16570] FAT-fs (loop3): Directory bread(block 70) failed [ 1352.687546][T16570] FAT-fs (loop3): Directory bread(block 71) failed [ 1352.694348][T16570] FAT-fs (loop3): Directory bread(block 72) failed [ 1352.700997][T16570] FAT-fs (loop3): Directory bread(block 73) failed [ 1352.708020][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.722129][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.732523][ T291] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1352.750708][ T4046] udevd[4046]: symlink '../../loop3' '/dev/disk/by-diskseq/4053.tmp-b7:3' failed: Read-only file system [ 1352.751184][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.774116][ T291] usb 2-1: config 0 descriptor?? [ 1353.000601][ T5036] udevd[5036]: symlink '../../loop3' '/dev/disk/by-diskseq/4053.tmp-b7:3' failed: Read-only file system [ 1353.015112][T16573] loop3: detected capacity change from 0 to 1024 [ 1353.016214][ T5036] udevd[5036]: symlink '../../loop3' '/dev/disk/by-diskseq/4053.tmp-b7:3' failed: Read-only file system [ 1353.028343][T16573] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1353.043275][ T5036] udevd[5036]: symlink '../../loop3' '/dev/disk/by-diskseq/4055.tmp-b7:3' failed: Read-only file system [ 1353.057150][ T5036] udevd[5036]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1353.124863][ T1406] wacom 0003:056A:00B4.00B6: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 1353.135558][ T1406] wacom 0003:056A:00B4.00B6: hidraw0: USB HID v0.00 Device [HID 056a:00b4] on usb-dummy_hcd.4-1/input0 [ 1353.148208][ T1406] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B4.00B6/input/input505 [ 1353.164594][ T4030] udevd[4030]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1353.180992][ T4030] udevd[4030]: setting mode of /dev/snd/controlC0 to 020660 failed: Read-only file system [ 1353.191609][ T4030] udevd[4030]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: Read-only file system [ 1353.288284][T16578] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.4486: Allocating blocks 257-513 which overlap fs metadata [ 1353.437970][T16565] loop1: detected capacity change from 0 to 128 [ 1353.525295][T16565] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1353.539834][T16565] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1353.543342][ T5036] udevd[5036]: symlink '../../loop1' '/dev/disk/by-diskseq/4056.tmp-b7:1' failed: Read-only file system [ 1353.550456][T12377] usb 5-1: USB disconnect, device number 86 [ 1353.568906][ T291] usbhid 2-1:0.0: can't add hid device: -71 [ 1353.574921][ T291] usbhid: probe of 2-1:0.0 failed with error -71 [ 1353.590164][ T291] usb 2-1: USB disconnect, device number 70 [ 1353.600316][ T4047] udevd[4047]: symlink '../../loop1' '/dev/disk/by-diskseq/4056.tmp-b7:1' failed: Read-only file system [ 1353.636137][ T1406] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1353.817106][ T1406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1353.826901][ T1406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1353.839423][ T1406] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1353.848555][ T1406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.856638][ T1406] usb 4-1: Product: syz [ 1353.860962][ T1406] usb 4-1: Manufacturer: syz [ 1353.865579][ T1406] usb 4-1: SerialNumber: syz [ 1353.871349][ T1406] usb 4-1: config 0 descriptor?? [ 1354.775121][T10494] EXT4-fs (loop0): unmounting filesystem. [ 1354.779143][ T589] usb 1-1: USB disconnect, device number 81 [ 1354.913672][T10957] EXT4-fs (loop2): unmounting filesystem. [ 1355.436059][T10334] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1355.625980][T10334] usb 3-1: Using ep0 maxpacket: 16 [ 1355.632930][T10334] usb 3-1: config 5 has an invalid interface number: 53 but max is 1 [ 1355.723702][T10334] usb 3-1: config 5 has an invalid interface number: 120 but max is 1 [ 1355.745385][T10334] usb 3-1: config 5 has no interface number 0 [ 1355.761558][T10334] usb 3-1: config 5 has no interface number 1 [ 1355.777484][T10334] usb 3-1: config 5 interface 120 altsetting 8 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1355.810101][T10334] usb 3-1: config 5 interface 120 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 1355.850553][T10334] usb 3-1: config 5 interface 120 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1355.874883][T10334] usb 3-1: config 5 interface 120 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 1355.890145][T10334] usb 3-1: config 5 interface 120 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1355.901304][T10334] usb 3-1: config 5 interface 120 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 1355.911546][T10334] usb 3-1: config 5 interface 53 has no altsetting 0 [ 1355.918359][T10334] usb 3-1: config 5 interface 120 has no altsetting 0 [ 1356.050685][T10334] usb 3-1: New USB device found, idVendor=0411, idProduct=005e, bcdDevice=d7.53 [ 1356.060901][T10745] EXT4-fs (loop3): unmounting filesystem. [ 1356.062036][ T1406] usb 4-1: USB disconnect, device number 87 [ 1356.096170][T10334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.165992][T10334] usb 3-1: Product: Ь [ 1356.178769][T10334] usb 3-1: Manufacturer: 攱᪑ꔉ㾦㿚ꐑᨽ⻒嫅ၑ꤬䯸鑅⺜ꫠ䃪糂馉佩兼의뵝睛ꨚ훸鸇ー毯ꀃ횪롙聰ᓛෟਨ斒⁂ਫ뿮㎳콳﬛ꤝ劤餠ëꎭ鮰횢钅㰂ꋭ襺ퟪ妭褲崓搜﷨疃濘濝넘鬽鴤螢䰣◚蘸쎄㳜狼湾力⼅ꪓ飁 [ 1356.559445][T10334] usb 3-1: SerialNumber: ᠌ [ 1356.776687][T16592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.790718][T16592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.132559][T16627] loop3: detected capacity change from 0 to 1024 [ 1357.182441][T16627] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1357.216058][ T589] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1357.488528][ T589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.558048][ T589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.632359][ T589] usb 5-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1357.660390][ T589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.676756][ T589] usb 5-1: config 0 descriptor?? [ 1357.756148][ T4046] udevd[4046]: symlink '../../loop1' '/dev/disk/by-diskseq/4057.tmp-b7:1' failed: Read-only file system [ 1357.829755][ T397] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1357.986084][ T24] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1358.027909][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1358.038473][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1358.053284][ T397] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1358.063961][ T397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.072947][ T397] usb 4-1: Product: syz [ 1358.079279][ T397] usb 4-1: Manufacturer: syz [ 1358.084157][ T397] usb 4-1: SerialNumber: syz [ 1358.096147][ T397] usb 4-1: config 0 descriptor?? [ 1358.185971][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1358.192425][ T24] usb 1-1: config 5 has an invalid interface number: 53 but max is 1 [ 1358.200638][ T24] usb 1-1: config 5 has an invalid interface number: 120 but max is 1 [ 1358.208867][ T24] usb 1-1: config 5 has no interface number 0 [ 1358.214990][ T24] usb 1-1: config 5 has no interface number 1 [ 1358.221137][ T24] usb 1-1: config 5 interface 120 altsetting 8 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1358.232144][ T24] usb 1-1: config 5 interface 120 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 1358.242994][ T24] usb 1-1: config 5 interface 120 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1358.254007][ T24] usb 1-1: config 5 interface 120 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 1358.264734][ T24] usb 1-1: config 5 interface 120 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1358.275458][ T24] usb 1-1: config 5 interface 120 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 1358.285408][ T24] usb 1-1: config 5 interface 53 has no altsetting 0 [ 1358.292234][ T24] usb 1-1: config 5 interface 120 has no altsetting 0 [ 1358.295322][T16617] loop4: detected capacity change from 0 to 128 [ 1358.300870][ T24] usb 1-1: New USB device found, idVendor=0411, idProduct=005e, bcdDevice=d7.53 [ 1358.307987][T16617] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1358.323896][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.331673][ T4030] udevd[4030]: symlink '../../loop4' '/dev/disk/by-diskseq/4062.tmp-b7:4' failed: Read-only file system [ 1358.334502][ T24] usb 1-1: Product: Ь [ 1358.349712][ T24] usb 1-1: Manufacturer: 攱᪑ꔉ㾦㿚ꐑᨽ⻒嫅ၑ꤬䯸鑅⺜ꫠ䃪糂馉佩兼의뵝睛ꨚ훸鸇ー毯ꀃ횪롙聰ᓛෟਨ斒⁂ਫ뿮㎳콳﬛ꤝ劤餠ëꎭ鮰횢钅㰂ꋭ襺ퟪ妭褲崓搜﷨疃濘濝넘鬽鴤螢䰣◚蘸쎄㳜狼湾力⼅ꪓ飁 [ 1358.350721][T16617] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1358.377354][ T24] usb 1-1: SerialNumber: ᠌ [ 1358.397655][ T589] usbhid 5-1:0.0: can't add hid device: -71 [ 1358.403795][ T589] usbhid: probe of 5-1:0.0 failed with error -71 [ 1358.411315][ T589] usb 5-1: USB disconnect, device number 87 [ 1358.594851][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.603606][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.668966][ T5036] udevd[5036]: symlink '../../loop1' '/dev/disk/by-diskseq/4057.tmp-b7:1' failed: Read-only file system [ 1358.787495][ T5036] udevd[5036]: symlink '../../loop1' '/dev/disk/by-diskseq/4057.tmp-b7:1' failed: Read-only file system [ 1358.833883][T10334] usbhid 3-1:5.120: couldn't find an input interrupt endpoint [ 1358.851600][T10334] usb 3-1: USB disconnect, device number 61 [ 1358.874599][ T4049] udevd[4049]: symlink '../../loop2' '/dev/disk/by-diskseq/4059.tmp-b7:2' failed: Read-only file system [ 1358.927613][ T4049] udevd[4049]: symlink '../../loop4' '/dev/disk/by-diskseq/4062.tmp-b7:4' failed: Read-only file system [ 1358.959644][T16649] loop4: detected capacity change from 0 to 1024 [ 1358.972327][ T4049] udevd[4049]: symlink '../../loop4' '/dev/disk/by-diskseq/4062.tmp-b7:4' failed: Read-only file system [ 1358.985408][ T4049] udevd[4049]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1359.005121][ T4049] udevd[4049]: symlink '../../loop4' '/dev/disk/by-diskseq/4064.tmp-b7:4' failed: Read-only file system [ 1359.018351][ T4049] udevd[4049]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1359.045994][T16096] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1359.054594][T16649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1359.341095][T16657] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.4506: Allocating blocks 257-513 which overlap fs metadata [ 1359.492076][T16096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.508225][T16096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.525665][T16096] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1359.543098][T16096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.560011][T16096] usb 2-1: config 0 descriptor?? [ 1359.695973][T10334] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1359.888121][T10334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1359.897956][T10334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1359.973739][T10334] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1359.982958][T10334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.991057][T10334] usb 5-1: Product: syz [ 1359.995319][T10334] usb 5-1: Manufacturer: syz [ 1360.000185][T10334] usb 5-1: SerialNumber: syz [ 1360.006389][T10334] usb 5-1: config 0 descriptor?? [ 1360.160885][T10745] EXT4-fs (loop3): unmounting filesystem. [ 1360.164353][ T397] usb 4-1: USB disconnect, device number 88 [ 1360.206404][T16644] loop1: detected capacity change from 0 to 128 [ 1360.223993][T16644] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1360.245076][T16644] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1360.281108][T16096] usbhid 2-1:0.0: can't add hid device: -71 [ 1360.289449][T16096] usbhid: probe of 2-1:0.0 failed with error -71 [ 1360.296950][T16096] usb 2-1: USB disconnect, device number 71 [ 1360.682027][ T24] usbhid 1-1:5.120: couldn't find an input interrupt endpoint [ 1360.702490][ T24] usb 1-1: USB disconnect, device number 82 [ 1360.740529][T16667] loop0: detected capacity change from 0 to 16 [ 1360.766348][T16667] erofs: (device loop0): mounted with root inode @ nid 36. [ 1360.784746][T16667] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1360.794262][ T46] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1360.805731][T16667] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1361.300720][T16672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4512'. [ 1361.320133][T16681] loop3: detected capacity change from 0 to 16 [ 1361.332917][T16681] erofs: (device loop3): mounted with root inode @ nid 36. [ 1361.351206][T16681] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1361.370924][ T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1361.382273][T16681] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1361.413353][T16683] loop0: detected capacity change from 0 to 1024 [ 1361.467563][T16683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1362.011610][T10334] usb 5-1: USB disconnect, device number 88 [ 1362.030905][T10617] EXT4-fs (loop4): unmounting filesystem. [ 1362.039436][T16695] loop2: detected capacity change from 0 to 1024 [ 1362.377967][T16695] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1362.453039][ T24] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1362.525980][ T397] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1362.604830][T16706] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.4518: Allocating blocks 257-513 which overlap fs metadata [ 1362.681388][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1362.763194][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1362.776085][ T397] usb 4-1: Using ep0 maxpacket: 16 [ 1362.783727][ T397] usb 4-1: config 5 has an invalid interface number: 53 but max is 1 [ 1362.799348][ T397] usb 4-1: config 5 has an invalid interface number: 120 but max is 1 [ 1362.807990][ T397] usb 4-1: config 5 has no interface number 0 [ 1362.814111][ T397] usb 4-1: config 5 has no interface number 1 [ 1362.820669][ T397] usb 4-1: config 5 interface 120 altsetting 8 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1362.832142][ T397] usb 4-1: config 5 interface 120 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 1362.843315][ T397] usb 4-1: config 5 interface 120 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1362.855287][ T397] usb 4-1: config 5 interface 120 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 1362.868181][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1362.877358][ T397] usb 4-1: config 5 interface 120 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1362.888317][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.898183][ T397] usb 4-1: config 5 interface 120 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 1362.908224][ T24] usb 1-1: Product: syz [ 1362.912420][ T24] usb 1-1: Manufacturer: syz [ 1362.917096][ T24] usb 1-1: SerialNumber: syz [ 1362.921785][ T397] usb 4-1: config 5 interface 53 has no altsetting 0 [ 1362.931700][ T24] usb 1-1: config 0 descriptor?? [ 1362.936847][ T397] usb 4-1: config 5 interface 120 has no altsetting 0 [ 1362.948905][ T397] usb 4-1: New USB device found, idVendor=0411, idProduct=005e, bcdDevice=d7.53 [ 1362.958296][ T397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.966994][ T397] usb 4-1: Product: Ь [ 1362.971332][ T397] usb 4-1: Manufacturer: 攱᪑ꔉ㾦㿚ꐑᨽ⻒嫅ၑ꤬䯸鑅⺜ꫠ䃪糂馉佩兼의뵝睛ꨚ훸鸇ー毯ꀃ횪롙聰ᓛෟਨ斒⁂ਫ뿮㎳콳﬛ꤝ劤餠ëꎭ鮰횢钅㰂ꋭ襺ퟪ妭褲崓搜﷨疃濘濝넘鬽鴤螢䰣◚蘸쎄㳜狼湾力⼅ꪓ飁 [ 1362.980696][ T4049] udevd[4049]: symlink '../../loop4' '/dev/disk/by-diskseq/4074.tmp-b7:4' failed: Read-only file system [ 1362.998735][ T397] usb 4-1: SerialNumber: ᠌ [ 1363.070130][ T4049] udevd[4049]: symlink '../../loop1' '/dev/disk/by-diskseq/4068.tmp-b7:1' failed: Read-only file system [ 1363.088292][T16714] loop1: detected capacity change from 0 to 16 [ 1363.098338][T16714] erofs: (device loop1): mounted with root inode @ nid 36. [ 1363.107033][T16714] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1363.108820][ T4049] udevd[4049]: symlink '../../loop1' '/dev/disk/by-diskseq/4075.tmp-b7:1' failed: Read-only file system [ 1363.116981][ T46] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1363.129200][ T4049] udevd[4049]: symlink '../../loop1' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:1' failed: Read-only file system [ 1363.138649][T16714] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1363.159608][ T4049] udevd[4049]: symlink '../../loop1' '/dev/disk/by-diskseq/4075.tmp-b7:1' failed: Read-only file system [ 1363.177497][ T4049] udevd[4049]: symlink '../../loop1' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:1' failed: Read-only file system [ 1363.197129][ T4049] udevd[4049]: symlink '../../loop1' '/dev/disk/by-diskseq/4075.tmp-b7:1' failed: Read-only file system [ 1363.209080][T16687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.218458][T10334] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1363.231623][ T4049] udevd[4049]: symlink '../../loop1' '/dev/disk/by-diskseq/4075.tmp-b7:1' failed: Read-only file system [ 1363.244595][T16687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.295981][ T1406] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1363.368002][ T4049] udevd[4049]: symlink '../../loop1' '/dev/disk/by-diskseq/4076.tmp-b7:1' failed: Read-only file system [ 1363.417166][T10334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1363.426992][T10334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1363.440146][T10334] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1363.450112][T10334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.458462][ T1406] usb 5-1: device descriptor read/64, error -71 [ 1363.465104][T10334] usb 3-1: Product: syz [ 1363.469674][T10334] usb 3-1: Manufacturer: syz [ 1363.474362][T10334] usb 3-1: SerialNumber: syz [ 1363.480086][T10334] usb 3-1: config 0 descriptor?? [ 1363.646007][T12377] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1363.735967][ T1406] usb 5-1: device descriptor read/64, error -71 [ 1363.827235][T12377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.838289][T12377] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1363.847426][T12377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.856347][T12377] usb 2-1: config 0 descriptor?? [ 1364.005999][ T1406] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1364.066809][T16721] loop1: detected capacity change from 0 to 512 [ 1364.074103][T16721] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1364.085101][ T5036] udevd[5036]: symlink '../../loop1' '/dev/disk/by-diskseq/4077.tmp-b7:1' failed: Read-only file system [ 1364.106999][T16721] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1364.115036][T16721] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1364.123465][T16721] System zones: 0-1, 15-15, 18-18, 34-34 [ 1364.130284][T16721] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1364.136896][T16721] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1364.146422][T16721] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1364.161077][T16721] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1364.168160][T16721] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4524: bg 0: block 40: padding at end of block bitmap is not set [ 1364.182611][T16721] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1364.186014][ T1406] usb 5-1: device descriptor read/64, error -71 [ 1364.191891][T16721] EXT4-fs (loop1): 1 truncate cleaned up [ 1364.203379][T16721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1364.328163][T12377] usbhid 2-1:0.0: can't add hid device: -71 [ 1364.334303][T12377] usbhid: probe of 2-1:0.0 failed with error -71 [ 1364.341655][T12377] usb 2-1: USB disconnect, device number 72 [ 1364.368043][ T24] usb 1-1: USB disconnect, device number 83 [ 1364.391516][T10494] EXT4-fs (loop0): unmounting filesystem. [ 1364.476023][ T1406] usb 5-1: device descriptor read/64, error -71 [ 1364.596032][ T1406] usb usb5-port1: attempt power cycle [ 1364.611086][ T397] usbhid 4-1:5.120: couldn't find an input interrupt endpoint [ 1364.627504][ T397] usb 4-1: USB disconnect, device number 89 [ 1364.653985][T16732] loop3: detected capacity change from 0 to 1024 [ 1364.668004][T16732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1365.374276][T16735] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.4527: Allocating blocks 257-513 which overlap fs metadata [ 1365.380656][ T9966] EXT4-fs (loop1): unmounting filesystem. [ 1365.402955][T10334] usb 3-1: USB disconnect, device number 62 [ 1365.420022][T10957] EXT4-fs (loop2): unmounting filesystem. [ 1365.436047][ T1406] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1365.527069][ T1406] usb 5-1: device descriptor read/8, error -71 [ 1365.666107][ T397] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1365.677878][ T1406] usb 5-1: device descriptor read/8, error -71 [ 1365.756105][ T24] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1365.857101][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1365.867039][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1365.879409][ T397] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1365.888502][ T397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.896551][T10334] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1365.904162][ T397] usb 4-1: Product: syz [ 1365.908414][ T397] usb 4-1: Manufacturer: syz [ 1365.913146][ T397] usb 4-1: SerialNumber: syz [ 1365.918362][ T397] usb 4-1: config 0 descriptor?? [ 1365.937172][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.948262][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.958060][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1365.967142][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.975750][ T24] usb 1-1: config 0 descriptor?? [ 1366.015997][ T1406] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1366.085698][ T1406] usb 5-1: device descriptor read/8, error -71 [ 1366.107090][T10334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.118187][T10334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.128765][T10334] usb 3-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1366.137890][T10334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.146664][T10334] usb 3-1: config 0 descriptor?? [ 1366.449346][ T1406] usb 5-1: device descriptor read/8, error -71 [ 1366.586080][ T1406] usb usb5-port1: unable to enumerate USB device [ 1366.936849][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 1366.942866][T10334] usbhid 3-1:0.0: can't add hid device: -71 [ 1366.948892][T10334] usbhid: probe of 3-1:0.0 failed with error -71 [ 1366.955306][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 1366.967690][T10334] usb 3-1: USB disconnect, device number 63 [ 1366.973761][ T24] usb 1-1: USB disconnect, device number 84 [ 1367.626066][T12377] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1367.680996][ T397] usb 4-1: USB disconnect, device number 90 [ 1367.698957][T10745] EXT4-fs (loop3): unmounting filesystem. [ 1367.710651][T16769] loop0: detected capacity change from 0 to 1024 [ 1367.736113][T16769] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1368.028425][ T4049] udevd[4049]: symlink '../../loop0' '/dev/disk/by-diskseq/4082.tmp-b7:0' failed: Read-only file system [ 1368.057750][T12377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.068861][T12377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.079063][T12377] usb 5-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1368.088444][T12377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.100083][T12377] usb 5-1: config 0 descriptor?? [ 1368.246120][T16778] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.4538: Allocating blocks 257-513 which overlap fs metadata [ 1368.305995][ T397] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1368.356475][ T4049] udevd[4049]: symlink '../../loop2' '/dev/disk/by-diskseq/4081.tmp-b7:2' failed: Read-only file system [ 1368.384988][T16780] loop2: detected capacity change from 0 to 1024 [ 1368.406392][T16780] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1368.533871][ T4049] udevd[4049]: symlink '../../loop2' '/dev/disk/by-diskseq/4084.tmp-b7:2' failed: Read-only file system [ 1368.559298][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.562949][ T4046] udevd[4046]: symlink '../../loop1' '/dev/disk/by-diskseq/4080.tmp-b7:1' failed: Read-only file system [ 1368.576321][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.588228][ T4049] udevd[4049]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1368.605118][ T397] usb 4-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1368.624536][ T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.653673][ T4049] udevd[4049]: symlink '../../loop2' '/dev/disk/by-diskseq/4084.tmp-b7:2' failed: Read-only file system [ 1368.666119][ T4049] udevd[4049]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1368.697109][T16786] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.4540: Allocating blocks 257-513 which overlap fs metadata [ 1368.770908][T12377] wacom 0003:056A:00B4.00B7: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 1368.781474][T12377] wacom 0003:056A:00B4.00B7: hidraw0: USB HID v0.00 Device [HID 056a:00b4] on usb-dummy_hcd.4-1/input0 [ 1368.793620][T12377] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B4.00B7/input/input508 [ 1368.814172][T10494] EXT4-fs (loop0): unmounting filesystem. [ 1368.816580][ T397] usb 4-1: config 0 descriptor?? [ 1368.834739][ T4030] udevd[4030]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1368.851237][ T4030] udevd[4030]: symlink '../../loop0' '/dev/disk/by-diskseq/4082.tmp-b7:0' failed: Read-only file system [ 1368.866985][ T4049] udevd[4049]: symlink '../../loop0' '/dev/disk/by-diskseq/4082.tmp-b7:0' failed: Read-only file system [ 1368.878491][ T291] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1368.988553][T12377] usb 5-1: USB disconnect, device number 93 [ 1368.995974][T16096] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1369.059097][T16791] loop0: detected capacity change from 0 to 256 [ 1369.067016][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.082103][ T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.092163][ T291] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1369.101376][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.110384][ T291] usb 2-1: config 0 descriptor?? [ 1369.121135][T16791] FAT-fs (loop0): Directory bread(block 64) failed [ 1369.129041][T16791] FAT-fs (loop0): Directory bread(block 65) failed [ 1369.135643][T16791] FAT-fs (loop0): Directory bread(block 66) failed [ 1369.142602][T16791] FAT-fs (loop0): Directory bread(block 67) failed [ 1369.149449][T16791] FAT-fs (loop0): Directory bread(block 68) failed [ 1369.156472][T16791] FAT-fs (loop0): Directory bread(block 69) failed [ 1369.163227][T16791] FAT-fs (loop0): Directory bread(block 70) failed [ 1369.170035][T16791] FAT-fs (loop0): Directory bread(block 71) failed [ 1369.176804][T16791] FAT-fs (loop0): Directory bread(block 72) failed [ 1369.183358][T16791] FAT-fs (loop0): Directory bread(block 73) failed [ 1369.191215][T16096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1369.204299][T16096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1369.226757][T16096] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1369.241097][T16096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.255958][T16096] usb 3-1: Product: syz [ 1369.260201][T16096] usb 3-1: Manufacturer: syz [ 1369.264832][T16096] usb 3-1: SerialNumber: syz [ 1369.270933][T16096] usb 3-1: config 0 descriptor?? [ 1369.448278][T16771] loop3: detected capacity change from 0 to 128 [ 1369.458653][T16771] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1369.471092][T16771] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1369.525018][ T397] usbhid 4-1:0.0: can't add hid device: -71 [ 1369.588483][ T397] usbhid: probe of 4-1:0.0 failed with error -71 [ 1369.596257][ T397] usb 4-1: USB disconnect, device number 91 [ 1369.742607][ T291] usbhid 2-1:0.0: can't add hid device: -71 [ 1369.749783][ T291] usbhid: probe of 2-1:0.0 failed with error -71 [ 1369.766725][ T291] usb 2-1: USB disconnect, device number 73 [ 1369.918695][T16797] loop0: detected capacity change from 0 to 16 [ 1369.925717][T16797] erofs: (device loop0): mounted with root inode @ nid 36. [ 1369.935016][T16797] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1369.944793][ T46] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1369.956316][T16797] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1370.265976][ T291] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1370.386046][T15821] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1370.768418][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1370.779612][ T291] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1370.788966][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.798533][ T291] usb 1-1: config 0 descriptor?? [ 1370.848494][T15821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1370.859733][T15821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.869578][T15821] usb 4-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1370.876064][T10334] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1370.878839][T15821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.894861][T15821] usb 4-1: config 0 descriptor?? [ 1371.007865][T16799] loop0: detected capacity change from 0 to 512 [ 1371.019212][T16799] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1371.047041][T16799] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1371.054999][T16799] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1371.063370][T16799] System zones: 0-1, 15-15, 18-18, 34-34 [ 1371.067369][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1371.070728][T16799] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1371.078897][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1371.085785][T16799] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1371.111393][T16799] EXT4-fs warning (device loop0): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1371.115026][T10334] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1371.135173][T16799] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1371.141906][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.150137][T10334] usb 2-1: Product: syz [ 1371.154334][T10334] usb 2-1: Manufacturer: syz [ 1371.154352][T10334] usb 2-1: SerialNumber: syz [ 1371.158679][T10334] usb 2-1: config 0 descriptor?? [ 1371.159642][T16799] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4545: bg 0: block 40: padding at end of block bitmap is not set [ 1371.183065][T16799] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1371.192344][T16799] EXT4-fs (loop0): 1 truncate cleaned up [ 1371.198066][T16799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1371.272635][ T397] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1371.676083][ T397] usb 5-1: Using ep0 maxpacket: 16 [ 1371.685393][ T397] usb 5-1: config 1 has an invalid interface number: 220 but max is 1 [ 1371.721236][ T397] usb 5-1: config 1 has an invalid interface number: 76 but max is 1 [ 1371.735472][ T291] usbhid 1-1:0.0: can't add hid device: -71 [ 1371.739023][ T397] usb 5-1: config 1 has no interface number 0 [ 1371.743216][ T291] usbhid: probe of 1-1:0.0 failed with error -71 [ 1371.750811][ T397] usb 5-1: config 1 has no interface number 1 [ 1371.756258][ T291] usb 1-1: USB disconnect, device number 85 [ 1371.769346][T16096] usb 3-1: USB disconnect, device number 64 [ 1371.783476][ T397] usb 5-1: config 1 interface 220 has no altsetting 0 [ 1371.796303][ T397] usb 5-1: config 1 interface 76 has no altsetting 0 [ 1371.809276][ T397] usb 5-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=b2.a4 [ 1371.811058][T10957] EXT4-fs (loop2): unmounting filesystem. [ 1371.818886][ T397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.833039][ T397] usb 5-1: Product: syz [ 1371.909651][ T397] usb 5-1: Manufacturer: syz [ 1371.914575][ T397] usb 5-1: SerialNumber: syz [ 1371.922414][T16819] loop2: detected capacity change from 0 to 256 [ 1371.938893][T16819] FAT-fs (loop2): Directory bread(block 64) failed [ 1371.945495][T16819] FAT-fs (loop2): Directory bread(block 65) failed [ 1371.952139][T16819] FAT-fs (loop2): Directory bread(block 66) failed [ 1371.958773][T16819] FAT-fs (loop2): Directory bread(block 67) failed [ 1371.965356][T16819] FAT-fs (loop2): Directory bread(block 68) failed [ 1371.971940][T16819] FAT-fs (loop2): Directory bread(block 69) failed [ 1371.978543][T16819] FAT-fs (loop2): Directory bread(block 70) failed [ 1371.985077][T16819] FAT-fs (loop2): Directory bread(block 71) failed [ 1371.991682][T16819] FAT-fs (loop2): Directory bread(block 72) failed [ 1371.998264][T16819] FAT-fs (loop2): Directory bread(block 73) failed [ 1372.006178][T15821] usbhid 4-1:0.0: can't add hid device: -71 [ 1372.012293][T15821] usbhid: probe of 4-1:0.0 failed with error -71 [ 1372.058089][T15821] usb 4-1: USB disconnect, device number 92 [ 1372.133535][T16811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.142324][T16811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.154922][ T397] usb 5-1: USB disconnect, device number 94 [ 1372.195510][T16823] loop2: detected capacity change from 0 to 512 [ 1372.219948][T16823] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1372.229105][T16823] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1372.243602][ T28] audit: type=1400 audit(1752100714.358:255): avc: denied { setattr } for pid=16821 comm="syz.2.4551" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1372.526108][T16827] FAULT_INJECTION: forcing a failure. [ 1372.526108][T16827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.539332][T16827] CPU: 0 PID: 16827 Comm: syz.3.4552 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 1372.549252][T16827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1372.559339][T16827] Call Trace: [ 1372.562644][T16827] [ 1372.565598][T16827] __dump_stack+0x21/0x24 [ 1372.569970][T16827] dump_stack_lvl+0xee/0x150 [ 1372.574581][T16827] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1372.579637][T16827] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1372.585315][T16827] dump_stack+0x15/0x24 [ 1372.589510][T16827] should_fail_ex+0x3d4/0x520 [ 1372.594212][T16827] should_fail+0xb/0x10 [ 1372.598380][T16827] should_fail_usercopy+0x1a/0x20 [ 1372.603430][T16827] strncpy_from_user+0x24/0x2d0 [ 1372.608311][T16827] ? getname_flags+0xb9/0x500 [ 1372.613082][T16827] getname_flags+0xf4/0x500 [ 1372.617606][T16827] ? __kasan_check_write+0x14/0x20 [ 1372.622758][T16827] user_path_at_empty+0x30/0x1c0 [ 1372.627696][T16827] __se_sys_mount+0x2e3/0x380 [ 1372.632391][T16827] ? __x64_sys_mount+0xd0/0xd0 [ 1372.637186][T16827] ? __cfi_ksys_write+0x10/0x10 [ 1372.642061][T16827] __x64_sys_mount+0xbf/0xd0 [ 1372.646681][T16827] x64_sys_call+0x65d/0x9a0 [ 1372.651201][T16827] do_syscall_64+0x4c/0xa0 [ 1372.655627][T16827] ? clear_bhb_loop+0x30/0x80 [ 1372.660318][T16827] ? clear_bhb_loop+0x30/0x80 [ 1372.665015][T16827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.670924][T16827] RIP: 0033:0x7f58ac38e929 [ 1372.675358][T16827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1372.694983][T16827] RSP: 002b:00007f58ad1d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1372.703415][T16827] RAX: ffffffffffffffda RBX: 00007f58ac5b5fa0 RCX: 00007f58ac38e929 [ 1372.711400][T16827] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1372.719468][T16827] RBP: 00007f58ad1d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.727455][T16827] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 1372.735446][T16827] R13: 0000000000000000 R14: 00007f58ac5b5fa0 R15: 00007fff7250a978 [ 1372.743497][T16827] [ 1373.183383][T10957] EXT4-fs (loop2): unmounting filesystem. [ 1373.336438][T10334] usb 2-1: USB disconnect, device number 74 [ 1373.350070][T10494] EXT4-fs (loop0): unmounting filesystem. [ 1373.358506][ T4030] udevd[4030]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1373.736065][T16096] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1373.795992][ T24] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1373.947140][T16096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.958691][T16096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.968515][T16096] usb 3-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1373.977697][T16096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.986455][T16096] usb 3-1: config 0 descriptor?? [ 1373.987179][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.002484][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.012326][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1374.021447][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.030273][ T24] usb 1-1: config 0 descriptor?? [ 1374.135977][T12377] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1374.175970][ T291] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1374.317244][T12377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.328300][T12377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.338185][T12377] usb 5-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1374.347352][T12377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.356865][T12377] usb 5-1: config 0 descriptor?? [ 1374.367130][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.378082][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.388102][ T291] usb 4-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1374.397248][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.406677][ T291] usb 4-1: config 0 descriptor?? [ 1374.505964][T15821] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1374.607283][T16836] loop2: detected capacity change from 0 to 128 [ 1374.614210][T16836] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1374.626720][T16836] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1374.640033][T16096] usbhid 3-1:0.0: can't add hid device: -71 [ 1374.646092][T16096] usbhid: probe of 3-1:0.0 failed with error -71 [ 1374.654843][T16842] loop0: detected capacity change from 0 to 128 [ 1374.657200][T16096] usb 3-1: USB disconnect, device number 65 [ 1374.662761][T16842] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1374.680073][T16842] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1374.689760][T15821] usb 2-1: Using ep0 maxpacket: 16 [ 1374.696326][T15821] usb 2-1: config 5 has an invalid interface number: 53 but max is 1 [ 1374.704518][T15821] usb 2-1: config 5 has an invalid interface number: 120 but max is 1 [ 1374.716919][T15821] usb 2-1: config 5 has no interface number 0 [ 1374.722135][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 1374.723057][T15821] usb 2-1: config 5 has no interface number 1 [ 1374.729713][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 1374.736078][T15821] usb 2-1: config 5 interface 120 altsetting 8 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1374.752852][T15821] usb 2-1: config 5 interface 120 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 1374.754103][ T24] usb 1-1: USB disconnect, device number 86 [ 1374.763866][T15821] usb 2-1: config 5 interface 120 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1374.780716][T15821] usb 2-1: config 5 interface 120 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 1374.791746][T15821] usb 2-1: config 5 interface 120 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1374.802525][T15821] usb 2-1: config 5 interface 120 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 1374.812485][T15821] usb 2-1: config 5 interface 53 has no altsetting 0 [ 1374.819252][T15821] usb 2-1: config 5 interface 120 has no altsetting 0 [ 1374.827697][T15821] usb 2-1: New USB device found, idVendor=0411, idProduct=005e, bcdDevice=d7.53 [ 1374.843833][T15821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.851903][T15821] usb 2-1: Product: Ь [ 1374.856010][T15821] usb 2-1: Manufacturer: 攱᪑ꔉ㾦㿚ꐑᨽ⻒嫅ၑ꤬䯸鑅⺜ꫠ䃪糂馉佩兼의뵝睛ꨚ훸鸇ー毯ꀃ횪롙聰ᓛෟਨ斒⁂ਫ뿮㎳콳﬛ꤝ劤餠ëꎭ鮰횢钅㰂ꋭ襺ퟪ妭褲崓搜﷨疃濘濝넘鬽鴤螢䰣◚蘸쎄㳜狼湾力⼅ꪓ飁 [ 1374.883530][T15821] usb 2-1: SerialNumber: ᠌ [ 1374.993633][T16854] loop4: detected capacity change from 0 to 128 [ 1375.000613][T16854] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1375.013056][T16854] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1375.049439][ T291] usbhid 4-1:0.0: can't add hid device: -71 [ 1375.055536][T12377] usbhid 5-1:0.0: can't add hid device: -71 [ 1375.061584][T12377] usbhid: probe of 5-1:0.0 failed with error -71 [ 1375.068876][ T291] usbhid: probe of 4-1:0.0 failed with error -71 [ 1375.076993][ T291] usb 4-1: USB disconnect, device number 93 [ 1375.083879][T12377] usb 5-1: USB disconnect, device number 95 [ 1375.091065][T16858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.099786][T16858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.194132][T16863] loop2: detected capacity change from 0 to 1024 [ 1375.237852][T16863] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1375.248921][ T28] audit: type=1400 audit(1752100717.358:256): avc: denied { create } for pid=16862 comm="syz.2.4565" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1375.569925][T16876] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.4565: Allocating blocks 257-513 which overlap fs metadata [ 1375.792824][ T28] audit: type=1400 audit(1752100717.898:257): avc: denied { read } for pid=16886 comm="syz.3.4572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1375.855251][ T28] audit: type=1400 audit(1752100717.928:258): avc: denied { connect } for pid=16886 comm="syz.3.4572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1375.883637][T16887] loop3: detected capacity change from 0 to 512 [ 1376.081561][T16887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1376.165296][T16887] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1376.200226][ T28] audit: type=1400 audit(1752100717.928:259): avc: denied { write } for pid=16886 comm="syz.3.4572" path="socket:[65366]" dev="sockfs" ino=65366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1376.223751][T16887] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1376.233612][ T28] audit: type=1400 audit(1752100717.938:260): avc: denied { accept } for pid=16886 comm="syz.3.4572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1376.262902][T16887] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1376.276025][ T28] audit: type=1400 audit(1752100717.938:261): avc: denied { append } for pid=16886 comm="syz.3.4572" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1376.322171][T16887] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1376.336065][T16887] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1376.353133][T16887] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4572: bg 0: block 34: padding at end of block bitmap is not set [ 1376.399499][T16887] Quota error (device loop3): write_blk: dquota write failed [ 1376.417361][T16887] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1376.444791][T16887] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.4572: Failed to acquire dquot type 1 [ 1376.480518][T16887] EXT4-fs (loop3): 1 truncate cleaned up [ 1376.495997][T16887] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1376.588729][T10745] EXT4-fs (loop3): unmounting filesystem. [ 1376.668773][T10957] EXT4-fs (loop2): unmounting filesystem. [ 1376.723004][T16899] overlayfs: missing 'workdir' [ 1376.768991][T16901] loop2: detected capacity change from 0 to 1024 [ 1376.807747][T16901] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1376.937053][ T291] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1377.020277][T16911] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.4576: Allocating blocks 257-513 which overlap fs metadata [ 1377.421002][T15821] usbhid 2-1:5.120: couldn't find an input interrupt endpoint [ 1377.434677][T15821] usb 2-1: USB disconnect, device number 75 [ 1377.457136][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.468049][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.479527][ T291] usb 1-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1377.488683][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.497502][ T291] usb 1-1: config 0 descriptor?? [ 1377.576037][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1377.757257][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1377.767049][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1377.779563][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1377.793510][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.806660][ T24] usb 3-1: Product: syz [ 1377.810862][ T24] usb 3-1: Manufacturer: syz [ 1377.815472][ T24] usb 3-1: SerialNumber: syz [ 1377.815967][T15821] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1377.828534][ T19] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1377.828755][ T24] usb 3-1: config 0 descriptor?? [ 1378.027320][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.038356][T15821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.055100][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.064953][T15821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.074794][T15821] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1378.083959][ T19] usb 4-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1378.093106][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.101216][T15821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.110630][ T19] usb 4-1: config 0 descriptor?? [ 1378.115935][T15821] usb 2-1: config 0 descriptor?? [ 1378.118425][T16896] loop0: detected capacity change from 0 to 128 [ 1378.128288][T16896] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1378.140643][T16896] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1378.153670][ T291] usbhid 1-1:0.0: can't add hid device: -71 [ 1378.159737][ T291] usbhid: probe of 1-1:0.0 failed with error -71 [ 1378.167254][ T291] usb 1-1: USB disconnect, device number 87 [ 1378.256006][T12377] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1378.437169][T12377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.448235][T12377] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1378.457356][T12377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.466261][T12377] usb 5-1: config 0 descriptor?? [ 1378.676984][T16927] loop4: detected capacity change from 0 to 512 [ 1378.688138][T16927] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1378.716097][T16927] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1378.724342][T16927] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1378.733128][T16927] System zones: 0-1, 15-15, 18-18, 34-34 [ 1378.740996][T16927] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1378.749389][T16927] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1378.754556][T16919] loop3: detected capacity change from 0 to 128 [ 1378.767902][T16919] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1378.780384][T16919] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1378.790913][T16927] EXT4-fs warning (device loop4): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1378.810557][T15821] usbhid 2-1:0.0: can't add hid device: -71 [ 1378.816600][T15821] usbhid: probe of 2-1:0.0 failed with error -71 [ 1378.824016][ T19] usbhid 4-1:0.0: can't add hid device: -71 [ 1378.824772][T16927] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1378.830051][ T19] usbhid: probe of 4-1:0.0 failed with error -71 [ 1378.844299][T16927] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4583: bg 0: block 40: padding at end of block bitmap is not set [ 1378.845994][T15821] usb 2-1: USB disconnect, device number 76 [ 1379.171694][ T19] usb 4-1: USB disconnect, device number 94 [ 1379.181220][T16927] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1379.202659][T16927] EXT4-fs (loop4): 1 truncate cleaned up [ 1379.218142][T16927] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1379.702214][T12377] usbhid 5-1:0.0: can't add hid device: -71 [ 1379.709335][T12377] usbhid: probe of 5-1:0.0 failed with error -71 [ 1379.717146][T12377] usb 5-1: USB disconnect, device number 96 [ 1379.748575][T16938] loop0: detected capacity change from 0 to 1024 [ 1379.782440][ T24] usb 3-1: USB disconnect, device number 66 [ 1379.796622][T10957] EXT4-fs (loop2): unmounting filesystem. [ 1379.804060][T16938] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1380.003592][T16952] loop3: detected capacity change from 0 to 128 [ 1380.010461][ T28] audit: type=1400 audit(1752100722.108:262): avc: denied { audit_read } for pid=16951 comm="syz.3.4590" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1380.031142][T16952] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1380.033456][ T28] audit: type=1400 audit(1752100722.108:263): avc: denied { nlmsg_tty_audit } for pid=16951 comm="syz.3.4590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1380.061766][T16952] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1380.091666][ T28] audit: type=1400 audit(1752100722.198:264): avc: denied { setopt } for pid=16949 comm="syz.1.4589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1380.127898][T16952] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.4590: bg 0: bad block bitmap checksum [ 1380.140801][ T28] audit: type=1400 audit(1752100722.228:265): avc: denied { write } for pid=16949 comm="syz.1.4589" path="socket:[66154]" dev="sockfs" ino=66154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1380.141684][T16955] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.4585: Allocating blocks 257-513 which overlap fs metadata [ 1380.238550][T10745] EXT4-fs (loop3): unmounting filesystem. [ 1380.245992][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1380.283674][T16957] loop3: detected capacity change from 0 to 1024 [ 1380.325188][T16957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1380.457209][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.468459][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1380.477548][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.486364][ T24] usb 3-1: config 0 descriptor?? [ 1380.579962][T16961] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.4591: Allocating blocks 257-513 which overlap fs metadata [ 1380.818595][T10494] EXT4-fs (loop0): unmounting filesystem. [ 1380.857157][T16967] loop1: detected capacity change from 0 to 16 [ 1380.867249][T16967] erofs: (device loop1): mounted with root inode @ nid 36. [ 1380.875374][T16967] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1380.884879][ T46] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1380.896422][T16967] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1380.920085][ T24] keytouch 0003:0926:3333.00B8: fixing up Keytouch IEC report descriptor [ 1380.928653][ T1406] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1381.011536][T10617] EXT4-fs (loop4): unmounting filesystem. [ 1381.016337][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.00B8/input/input511 [ 1381.111049][ T24] keytouch 0003:0926:3333.00B8: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1381.172492][T16973] loop1: detected capacity change from 0 to 512 [ 1381.207689][ T1406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1381.286465][T16973] EXT4-fs (loop1): 1 orphan inode deleted [ 1381.292326][T16973] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1381.304101][T16973] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1381.793907][T16973] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4595'. [ 1381.823688][ T1406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1381.861941][ T24] usb 3-1: USB disconnect, device number 67 [ 1382.163857][T15821] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1382.236012][ T1213] __quota_error: 2 callbacks suppressed [ 1382.236029][ T1213] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1382.251759][ T1213] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:7: Failed to release dquot type 1 [ 1382.263873][ T1406] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1382.267372][ T9966] EXT4-fs (loop1): unmounting filesystem. [ 1382.273262][ T1406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.308941][T16977] loop1: detected capacity change from 0 to 1024 [ 1382.335962][T15821] usb 1-1: device descriptor read/64, error -71 [ 1382.337711][ T1406] usb 4-1: Product: syz [ 1382.361018][T16977] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1382.369800][ T1406] usb 4-1: Manufacturer: syz [ 1382.374521][ T1406] usb 4-1: SerialNumber: syz [ 1382.447568][ T1406] usb 4-1: config 0 descriptor?? [ 1382.569060][T16985] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.4597: Allocating blocks 257-513 which overlap fs metadata [ 1382.831499][T15821] usb 1-1: device descriptor read/64, error -71 [ 1382.886236][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1382.956069][T10334] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1382.996145][T16989] FAULT_INJECTION: forcing a failure. [ 1382.996145][T16989] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.008877][T16989] CPU: 1 PID: 16989 Comm: syz.4.4599 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 1383.018787][T16989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1383.028880][T16989] Call Trace: [ 1383.032179][T16989] [ 1383.035120][T16989] __dump_stack+0x21/0x24 [ 1383.039476][T16989] dump_stack_lvl+0xee/0x150 [ 1383.044090][T16989] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1383.049145][T16989] ? __cfi_push_rt_tasks+0x10/0x10 [ 1383.054277][T16989] ? finish_task_switch+0x16b/0x7b0 [ 1383.059518][T16989] dump_stack+0x15/0x24 [ 1383.063716][T16989] should_fail_ex+0x3d4/0x520 [ 1383.068506][T16989] __should_failslab+0xac/0xf0 [ 1383.073383][T16989] should_failslab+0x9/0x20 [ 1383.078015][T16989] slab_pre_alloc_hook+0x30/0x1e0 [ 1383.083082][T16989] kmem_cache_alloc_lru+0x49/0x280 [ 1383.088217][T16989] ? shmem_alloc_inode+0x28/0x40 [ 1383.093179][T16989] shmem_alloc_inode+0x28/0x40 [ 1383.097962][T16989] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 1383.103443][T16989] new_inode_pseudo+0x70/0x1f0 [ 1383.108259][T16989] new_inode+0x28/0x1e0 [ 1383.112429][T16989] shmem_get_inode+0x349/0xc20 [ 1383.117215][T16989] __shmem_file_setup+0x113/0x2b0 [ 1383.122262][T16989] shmem_file_setup+0x2f/0x40 [ 1383.126960][T16989] __se_sys_memfd_create+0x1e6/0x3b0 [ 1383.132271][T16989] __x64_sys_memfd_create+0x5b/0x70 [ 1383.137492][T16989] x64_sys_call+0x235/0x9a0 [ 1383.142010][T16989] do_syscall_64+0x4c/0xa0 [ 1383.146435][T16989] ? clear_bhb_loop+0x30/0x80 [ 1383.151130][T16989] ? clear_bhb_loop+0x30/0x80 [ 1383.155829][T16989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1383.161741][T16989] RIP: 0033:0x7f055b58e929 [ 1383.166170][T16989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1383.185797][T16989] RSP: 002b:00007f055c436e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1383.194240][T16989] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007f055b58e929 [ 1383.202228][T16989] RDX: 00007f055c436ef0 RSI: 0000000000000000 RDI: 00007f055b6114cc [ 1383.210218][T16989] RBP: 0000200000000c40 R08: 00007f055c436bb7 R09: 00007f055c436e40 [ 1383.218204][T16989] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000200 [ 1383.226188][T16989] R13: 00007f055c436ef0 R14: 00007f055c436eb0 R15: 00002000000006c0 [ 1383.234180][T16989] [ 1383.287554][T16989] loop4: detected capacity change from 0 to 1024 [ 1383.400122][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1383.448467][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1383.477033][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.506154][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1383.547750][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.576098][T10334] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1383.594426][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1383.606908][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.617460][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1383.629279][T10334] usb 2-1: Product: syz [ 1383.633714][T10334] usb 2-1: Manufacturer: syz [ 1383.641035][T10334] usb 2-1: SerialNumber: syz [ 1383.645876][ T24] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1383.661006][T15821] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1383.668611][T10334] usb 2-1: config 0 descriptor?? [ 1383.751571][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1383.760867][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.769050][ T24] usb 3-1: Product: syz [ 1383.815961][T15821] usb 1-1: device descriptor read/64, error -71 [ 1383.854964][ T24] usb 3-1: Manufacturer: syz [ 1383.859783][ T24] usb 3-1: SerialNumber: syz [ 1383.886164][ T1406] usb 4-1: USB disconnect, device number 95 [ 1383.894014][T10745] EXT4-fs (loop3): unmounting filesystem. [ 1383.901155][T16993] loop0: detected capacity change from 0 to 1024 [ 1383.946285][T16993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1384.050722][ T28] audit: type=1400 audit(1752100726.158:268): avc: denied { create } for pid=16999 comm="syz.3.4601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1384.078757][T17000] FAULT_INJECTION: forcing a failure. [ 1384.078757][T17000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.091940][T17000] CPU: 1 PID: 17000 Comm: syz.3.4601 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 1384.101862][T17000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1384.111939][T17000] Call Trace: [ 1384.115326][T17000] [ 1384.118276][T17000] __dump_stack+0x21/0x24 [ 1384.122643][T17000] dump_stack_lvl+0xee/0x150 [ 1384.127262][T17000] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1384.128921][T17003] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.4602: Allocating blocks 257-513 which overlap fs metadata [ 1384.132409][T17000] dump_stack+0x15/0x24 [ 1384.132443][T17000] should_fail_ex+0x3d4/0x520 [ 1384.155079][T17000] should_fail+0xb/0x10 [ 1384.159318][T17000] should_fail_usercopy+0x1a/0x20 [ 1384.164375][T17000] _copy_from_iter+0x190/0xfd0 [ 1384.169160][T17000] ? irqentry_exit+0x37/0x40 [ 1384.174304][T17000] ? sysvec_reschedule_ipi+0x78/0x80 [ 1384.179622][T17000] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1384.185281][T17000] ? __cfi__copy_from_iter+0x10/0x10 [ 1384.190597][T17000] ? __check_heap_object+0x70/0x100 [ 1384.195831][T17000] ? __check_object_size+0x45a/0x600 [ 1384.201143][T17000] file_tty_write+0x4ac/0x890 [ 1384.205841][T17000] ? __cfi_n_tty_write+0x10/0x10 [ 1384.210813][T17000] tty_write+0x3c/0x50 [ 1384.214909][T17000] vfs_write+0x5db/0xca0 [ 1384.219181][T17000] ? slab_free_freelist_hook+0xc2/0x190 [ 1384.224766][T17000] ? __cfi_vfs_write+0x10/0x10 [ 1384.229566][T17000] ? __fget_files+0x2d5/0x330 [ 1384.234281][T17000] ? __fdget_pos+0x1f2/0x380 [ 1384.238897][T17000] ? ksys_write+0x71/0x240 [ 1384.243347][T17000] ksys_write+0x140/0x240 [ 1384.247730][T17000] ? __cfi_ksys_write+0x10/0x10 [ 1384.252606][T17000] ? debug_smp_processor_id+0x17/0x20 [ 1384.258007][T17000] __x64_sys_write+0x7b/0x90 [ 1384.262647][T17000] x64_sys_call+0x27b/0x9a0 [ 1384.267260][T17000] do_syscall_64+0x4c/0xa0 [ 1384.271770][T17000] ? clear_bhb_loop+0x30/0x80 [ 1384.276569][T17000] ? clear_bhb_loop+0x30/0x80 [ 1384.281251][T17000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1384.287164][T17000] RIP: 0033:0x7f58ac38e929 [ 1384.291604][T17000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.311248][T17000] RSP: 002b:00007f58ad1d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1384.319668][T17000] RAX: ffffffffffffffda RBX: 00007f58ac5b5fa0 RCX: 00007f58ac38e929 [ 1384.327643][T17000] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000006 [ 1384.335644][T17000] RBP: 00007f58ad1d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.343616][T17000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.351591][T17000] R13: 0000000000000000 R14: 00007f58ac5b5fa0 R15: 00007fff7250a978 [ 1384.359585][T17000] [ 1384.365130][T17000] loop3: detected capacity change from 0 to 256 [ 1384.374160][T17000] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1384.763577][T10494] EXT4-fs (loop0): unmounting filesystem. [ 1384.822010][T17012] loop4: detected capacity change from 0 to 1024 [ 1384.847573][T17012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1384.972562][T16980] netlink: 'syz.2.4598': attribute type 7 has an invalid length. [ 1384.980536][T16980] netlink: 'syz.2.4598': attribute type 8 has an invalid length. [ 1385.094639][T17019] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.4606: Allocating blocks 257-513 which overlap fs metadata [ 1385.229990][ T28] audit: type=1400 audit(1752100727.338:269): avc: denied { ioctl } for pid=16979 comm="syz.2.4598" path="socket:[66257]" dev="sockfs" ino=66257 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1385.255142][ T28] audit: type=1400 audit(1752100727.338:270): avc: denied { execute } for pid=16979 comm="syz.2.4598" path="/299/file1" dev="tmpfs" ino=1691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1385.255186][ T24] cdc_ncm 3-1:1.0: bind() failure [ 1385.278362][ T28] audit: type=1400 audit(1752100727.338:271): avc: denied { write } for pid=16979 comm="syz.2.4598" path="socket:[66257]" dev="sockfs" ino=66257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1385.285079][ T24] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1385.313628][ T24] cdc_ncm 3-1:1.1: bind() failure [ 1385.333422][T10334] usb 2-1: USB disconnect, device number 77 [ 1385.352699][ T9966] EXT4-fs (loop1): unmounting filesystem. [ 1385.375423][T17020] fido_id[17020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1385.460475][ T2109] usb 3-1: USB disconnect, device number 68 [ 1385.503458][T17023] loop1: detected capacity change from 0 to 256 [ 1385.515468][T17023] FAT-fs (loop1): Directory bread(block 64) failed [ 1385.522347][T17023] FAT-fs (loop1): Directory bread(block 65) failed [ 1385.529304][T17023] FAT-fs (loop1): Directory bread(block 66) failed [ 1385.535986][ T2105] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1385.537110][T17023] FAT-fs (loop1): Directory bread(block 67) failed [ 1385.550199][T17023] FAT-fs (loop1): Directory bread(block 68) failed [ 1385.556866][T17023] FAT-fs (loop1): Directory bread(block 69) failed [ 1385.563499][T17023] FAT-fs (loop1): Directory bread(block 70) failed [ 1385.570205][T17023] FAT-fs (loop1): Directory bread(block 71) failed [ 1385.576846][T17023] FAT-fs (loop1): Directory bread(block 72) failed [ 1385.583499][T17023] FAT-fs (loop1): Directory bread(block 73) failed [ 1385.675969][ T1406] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1385.717083][ T2105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1385.726832][ T2105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1385.739042][ T2105] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1385.748163][ T2105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.756199][ T2105] usb 5-1: Product: syz [ 1385.760376][ T2105] usb 5-1: Manufacturer: syz [ 1385.764984][ T2105] usb 5-1: SerialNumber: syz [ 1385.770335][ T2105] usb 5-1: config 0 descriptor?? [ 1385.867013][ T1406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.878023][ T1406] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1385.887104][ T1406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.895782][ T1406] usb 4-1: config 0 descriptor?? [ 1385.984873][T17028] loop2: detected capacity change from 0 to 512 [ 1386.002578][T17028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1386.014666][T17028] EXT4-fs (loop2): 1 truncate cleaned up [ 1386.020432][T17028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1386.030113][T17028] EXT4-fs (loop2): unmounting filesystem. [ 1386.104859][T17005] loop3: detected capacity change from 0 to 512 [ 1386.112241][T17005] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1386.140467][T17005] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1386.149330][T17034] loop2: detected capacity change from 0 to 1024 [ 1386.150789][T17005] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1386.164488][T17005] System zones: 0-1, 15-15, 18-18, 34-34 [ 1386.171393][T17005] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1386.179029][T17005] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1386.179059][T17034] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1386.189007][T17005] EXT4-fs warning (device loop3): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1386.212040][T17005] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1386.219241][T17005] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4604: bg 0: block 40: padding at end of block bitmap is not set [ 1386.234439][T17005] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1386.243837][T17005] EXT4-fs (loop3): 1 truncate cleaned up [ 1386.249775][T17005] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1386.465383][T17041] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.4611: Allocating blocks 257-513 which overlap fs metadata [ 1386.547345][ T1406] usbhid 4-1:0.0: can't add hid device: -71 [ 1386.574079][ T1406] usbhid: probe of 4-1:0.0 failed with error -71 [ 1386.592242][ T4030] udevd[4030]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1386.635038][ T1406] usb 4-1: USB disconnect, device number 96 [ 1386.652022][T17044] loop0: detected capacity change from 0 to 1024 [ 1386.667887][T17044] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1386.676537][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1386.805938][T10334] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1386.874207][T17048] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.4613: Allocating blocks 257-513 which overlap fs metadata [ 1386.966086][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1386.993987][ T24] usb 2-1: config 5 has an invalid interface number: 53 but max is 1 [ 1387.003391][ T24] usb 2-1: config 5 has an invalid interface number: 120 but max is 1 [ 1387.019463][ T24] usb 2-1: config 5 has no interface number 0 [ 1387.025843][ T24] usb 2-1: config 5 has no interface number 1 [ 1387.032431][ T24] usb 2-1: config 5 interface 120 altsetting 8 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1387.043515][ T24] usb 2-1: config 5 interface 120 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 1387.054400][ T24] usb 2-1: config 5 interface 120 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1387.065482][ T24] usb 2-1: config 5 interface 120 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 1387.076340][T10334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1387.086116][T10334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1387.096988][ T24] usb 2-1: config 5 interface 120 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1387.107768][ T24] usb 2-1: config 5 interface 120 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 1387.117767][ T24] usb 2-1: config 5 interface 53 has no altsetting 0 [ 1387.124648][ T24] usb 2-1: config 5 interface 120 has no altsetting 0 [ 1387.132807][T10334] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1387.142051][T10334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.150132][T10334] usb 3-1: Product: syz [ 1387.154399][ T24] usb 2-1: New USB device found, idVendor=0411, idProduct=005e, bcdDevice=d7.53 [ 1387.163493][T10334] usb 3-1: Manufacturer: syz [ 1387.168147][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.176222][T10334] usb 3-1: SerialNumber: syz [ 1387.181171][ T24] usb 2-1: Product: Ь [ 1387.185558][T10334] usb 3-1: config 0 descriptor?? [ 1387.190667][ T24] usb 2-1: Manufacturer: 攱᪑ꔉ㾦㿚ꐑᨽ⻒嫅ၑ꤬䯸鑅⺜ꫠ䃪糂馉佩兼의뵝睛ꨚ훸鸇ー毯ꀃ횪롙聰ᓛෟਨ斒⁂ਫ뿮㎳콳﬛ꤝ劤餠ëꎭ鮰횢钅㰂ꋭ襺ퟪ妭褲崓搜﷨疃濘濝넘鬽鴤螢䰣◚蘸쎄㳜狼湾力⼅ꪓ飁 [ 1387.218781][ T24] usb 2-1: SerialNumber: ᠌ [ 1387.285993][ T1406] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1387.425730][T17040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.435224][T17040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.486976][ T1406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1387.500802][ T1406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1387.525537][ T1406] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1387.534835][ T1406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.542924][ T1406] usb 1-1: Product: syz [ 1387.547218][ T1406] usb 1-1: Manufacturer: syz [ 1387.552205][ T1406] usb 1-1: SerialNumber: syz [ 1387.557835][ T1406] usb 1-1: config 0 descriptor?? [ 1387.674355][T10745] EXT4-fs (loop3): unmounting filesystem. [ 1387.832822][ T2105] usb 5-1: USB disconnect, device number 97 [ 1387.852035][T10617] EXT4-fs (loop4): unmounting filesystem. [ 1388.930377][T17071] loop4: detected capacity change from 0 to 16 [ 1388.939066][T17071] erofs: (device loop4): mounted with root inode @ nid 36. [ 1388.947993][T17071] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1388.957426][ T46] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1388.969104][T17071] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1389.183770][T17075] loop4: detected capacity change from 0 to 512 [ 1389.218241][T10957] EXT4-fs (loop2): unmounting filesystem. [ 1389.299405][T17075] EXT4-fs (loop4): 1 orphan inode deleted [ 1389.305321][T17075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1389.319833][T17075] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1389.856866][T17075] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4621'. [ 1389.974994][T10334] usb 3-1: USB disconnect, device number 69 [ 1390.378678][ T1213] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1390.398655][ T1406] usb 1-1: USB disconnect, device number 90 [ 1390.407171][ T24] usbhid 2-1:5.120: couldn't find an input interrupt endpoint [ 1390.431528][ T1213] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:7: Failed to release dquot type 1 [ 1390.448571][ T24] usb 2-1: USB disconnect, device number 78 [ 1390.509213][T10494] EXT4-fs (loop0): unmounting filesystem. [ 1390.536890][T10617] EXT4-fs (loop4): unmounting filesystem. [ 1390.658967][ T4030] udevd[4030]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1390.749011][ T4047] udevd[4047]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1390.749038][ T4046] udevd[4046]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 1390.939379][T17086] loop2: detected capacity change from 0 to 256 [ 1390.969242][T17086] FAT-fs (loop2): Directory bread(block 64) failed [ 1390.975825][T17086] FAT-fs (loop2): Directory bread(block 65) failed [ 1390.982582][T17086] FAT-fs (loop2): Directory bread(block 66) failed [ 1390.989229][T17086] FAT-fs (loop2): Directory bread(block 67) failed [ 1390.995967][T17086] FAT-fs (loop2): Directory bread(block 68) failed [ 1391.002539][T17086] FAT-fs (loop2): Directory bread(block 69) failed [ 1391.009204][T17086] FAT-fs (loop2): Directory bread(block 70) failed [ 1391.015746][T17086] FAT-fs (loop2): Directory bread(block 71) failed [ 1391.022437][T17086] FAT-fs (loop2): Directory bread(block 72) failed [ 1391.029038][T17086] FAT-fs (loop2): Directory bread(block 73) failed [ 1391.047744][T17096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4627'. [ 1391.110750][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1391.119121][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1391.128347][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1391.136446][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1391.144853][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1391.153006][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1391.161398][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1391.418502][T17103] xt_bpf: check failed: parse error [ 1391.446030][T15821] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1391.625965][T15821] usb 5-1: Using ep0 maxpacket: 16 [ 1391.633239][T15821] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1391.644141][T15821] usb 5-1: config 0 has no interface number 0 [ 1391.650565][T15821] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1391.660639][T15821] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1391.670838][T15821] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1391.685565][T15821] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1391.695957][T12377] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1391.704386][T15821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.712689][T15821] usb 5-1: Product: syz [ 1391.712707][T15821] usb 5-1: Manufacturer: syz [ 1391.721871][T15821] usb 5-1: SerialNumber: syz [ 1391.730403][T15821] usb 5-1: config 0 descriptor?? [ 1391.735715][T17099] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1391.743251][T17099] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1391.895944][T12377] usb 2-1: Using ep0 maxpacket: 8 [ 1391.907901][T17111] loop3: detected capacity change from 0 to 128 [ 1391.914572][T12377] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.917132][T17111] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1391.934691][T17111] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1391.939266][T12377] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 33252, setting to 1024 [ 1391.958719][T17099] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1391.966087][ T28] audit: type=1400 audit(1752100734.068:272): avc: denied { setattr } for pid=17110 comm="syz.3.4632" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1391.988187][T17099] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1391.998064][ T28] audit: type=1400 audit(1752100734.108:273): avc: denied { read append open } for pid=17110 comm="syz.3.4632" path="/312/mnt/memory.events" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1392.006000][T12377] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1392.022922][T17111] FAULT_INJECTION: forcing a failure. [ 1392.022922][T17111] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.042289][T17111] CPU: 1 PID: 17111 Comm: syz.3.4632 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 1392.048978][T12377] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1392.052195][T17111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1392.052210][T17111] Call Trace: [ 1392.052217][T17111] [ 1392.052226][T17111] __dump_stack+0x21/0x24 [ 1392.061925][T12377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.071322][T17111] dump_stack_lvl+0xee/0x150 [ 1392.071362][T17111] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1392.071391][T17111] ? 0xffffffffa0001de8 [ 1392.071405][T17111] ? is_bpf_text_address+0x177/0x190 [ 1392.082080][T12377] usb 2-1: config 0 descriptor?? [ 1392.090202][T17111] dump_stack+0x15/0x24 [ 1392.090239][T17111] should_fail_ex+0x3d4/0x520 [ 1392.090264][T17111] ? __alloc_file+0x28/0x2a0 [ 1392.090286][T17111] __should_failslab+0xac/0xf0 [ 1392.132422][T17111] should_failslab+0x9/0x20 [ 1392.136946][T17111] kmem_cache_alloc+0x3b/0x330 [ 1392.141734][T17111] __alloc_file+0x28/0x2a0 [ 1392.146171][T17111] alloc_empty_file+0x97/0x180 [ 1392.150955][T17111] path_openat+0xf4/0x2f50 [ 1392.155462][T17111] ? kasan_set_track+0x4b/0x70 [ 1392.160238][T17111] ? kasan_save_alloc_info+0x25/0x30 [ 1392.165542][T17111] ? __kasan_slab_alloc+0x72/0x80 [ 1392.170593][T17111] ? kmem_cache_alloc+0x16e/0x330 [ 1392.175619][T17111] ? getname_flags+0xb9/0x500 [ 1392.180319][T17111] ? getname+0x19/0x20 [ 1392.184412][T17111] ? do_sys_openat2+0xcb/0x7e0 [ 1392.189183][T17111] ? __x64_sys_openat+0x136/0x160 [ 1392.194251][T17111] ? x64_sys_call+0x783/0x9a0 [ 1392.198951][T17111] ? do_syscall_64+0x4c/0xa0 [ 1392.203591][T17111] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1392.207693][T17099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.209669][T17111] ? do_filp_open+0x3c0/0x3c0 [ 1392.219057][T17099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.222676][T17111] do_filp_open+0x1c1/0x3c0 [ 1392.234945][T17111] ? __cfi_do_filp_open+0x10/0x10 [ 1392.240023][T17111] ? alloc_fd+0x4e6/0x590 [ 1392.244379][T17111] do_sys_openat2+0x185/0x7e0 [ 1392.249065][T17111] ? __kasan_check_write+0x14/0x20 [ 1392.254199][T17111] ? do_sys_open+0xe0/0xe0 [ 1392.258627][T17111] ? ksys_write+0x1eb/0x240 [ 1392.263156][T17111] ? __cfi_ksys_write+0x10/0x10 [ 1392.268025][T17111] __x64_sys_openat+0x136/0x160 [ 1392.272901][T17111] x64_sys_call+0x783/0x9a0 [ 1392.277421][T17111] do_syscall_64+0x4c/0xa0 [ 1392.281947][T17111] ? clear_bhb_loop+0x30/0x80 [ 1392.286734][T17111] ? clear_bhb_loop+0x30/0x80 [ 1392.291531][T17111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1392.297440][T17111] RIP: 0033:0x7f58ac38e929 [ 1392.299064][T17103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.301878][T17111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1392.301900][T17111] RSP: 002b:00007f58ad1d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1392.311519][T17103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.329843][T17111] RAX: ffffffffffffffda RBX: 00007f58ac5b5fa0 RCX: 00007f58ac38e929 [ 1392.353969][T17111] RDX: 0000000000105042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1392.353994][T17111] RBP: 00007f58ad1d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1392.354008][T17111] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1392.354021][T17111] R13: 0000000000000000 R14: 00007f58ac5b5fa0 R15: 00007fff7250a978 [ 1392.354041][T17111] [ 1392.377178][T10745] EXT4-fs (loop3): unmounting filesystem. [ 1392.385089][T12377] usbhid 2-1:0.0: can't add hid device: -71 [ 1392.385151][T12377] usbhid: probe of 2-1:0.0 failed with error -71 [ 1392.402485][T12377] usb 2-1: USB disconnect, device number 79 [ 1392.447825][T15821] CoreChips: probe of 5-1:0.41 failed with error -71 [ 1392.476223][T15821] usb 5-1: USB disconnect, device number 98 [ 1392.560764][T17121] loop3: detected capacity change from 0 to 1024 [ 1392.587360][T17121] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1392.774039][T17127] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.4636: Allocating blocks 257-513 which overlap fs metadata [ 1392.825052][ T2105] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1393.048781][ T2105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.059896][ T2105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.133694][ T24] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1393.146152][ T2105] usb 1-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1393.155289][ T2105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.167254][ T2105] usb 1-1: config 0 descriptor?? [ 1393.195074][T17132] loop1: detected capacity change from 0 to 256 [ 1393.207605][T17132] FAT-fs (loop1): Directory bread(block 64) failed [ 1393.214229][T17132] FAT-fs (loop1): Directory bread(block 65) failed [ 1393.220861][T17132] FAT-fs (loop1): Directory bread(block 66) failed [ 1393.227579][T17132] FAT-fs (loop1): Directory bread(block 67) failed [ 1393.234183][T17132] FAT-fs (loop1): Directory bread(block 68) failed [ 1393.240776][T17132] FAT-fs (loop1): Directory bread(block 69) failed [ 1393.247389][T17132] FAT-fs (loop1): Directory bread(block 70) failed [ 1393.253938][T17132] FAT-fs (loop1): Directory bread(block 71) failed [ 1393.260556][T17132] FAT-fs (loop1): Directory bread(block 72) failed [ 1393.267141][T17132] FAT-fs (loop1): Directory bread(block 73) failed [ 1393.272001][T17135] loop4: detected capacity change from 0 to 1024 [ 1393.307469][T17135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1393.325189][T17139] loop2: detected capacity change from 0 to 128 [ 1393.361187][T17139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1393.369968][T17139] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1393.409108][ T28] audit: type=1400 audit(1752100735.518:274): avc: denied { write } for pid=17138 comm="syz.2.4640" path="/305/mnt/file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1393.438129][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1393.448431][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1393.460505][T10957] EXT4-fs (loop2): unmounting filesystem. [ 1393.467193][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1393.476427][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.484526][ T24] usb 4-1: Product: syz [ 1393.488893][ T24] usb 4-1: Manufacturer: syz [ 1393.493546][ T24] usb 4-1: SerialNumber: syz [ 1393.526205][ T24] usb 4-1: config 0 descriptor?? [ 1393.556696][T17143] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.4639: Allocating blocks 257-513 which overlap fs metadata [ 1393.762295][T17147] loop2: detected capacity change from 0 to 1024 [ 1393.778937][T17147] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1393.926707][ T8326] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1393.982818][T17153] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.4642: Allocating blocks 257-513 which overlap fs metadata [ 1394.109827][T17119] loop0: detected capacity change from 0 to 128 [ 1394.167876][ T8326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1394.180314][T17119] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1394.192605][ T8326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1394.204960][T17119] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1394.224894][ T8326] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1394.236332][ T8326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.248391][ T8326] usb 5-1: Product: syz [ 1394.252675][ T2105] usbhid 1-1:0.0: can't add hid device: -71 [ 1394.260159][ T8326] usb 5-1: Manufacturer: syz [ 1394.264900][ T2105] usbhid: probe of 1-1:0.0 failed with error -71 [ 1394.271567][ T8326] usb 5-1: SerialNumber: syz [ 1394.277166][ T8326] usb 5-1: config 0 descriptor?? [ 1394.283288][ T2105] usb 1-1: USB disconnect, device number 91 [ 1394.365946][ T1406] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1394.687121][ T1406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1394.696969][ T1406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1394.709562][ T1406] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1394.718735][ T1406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.726779][ T1406] usb 3-1: Product: syz [ 1394.731021][ T1406] usb 3-1: Manufacturer: syz [ 1394.735669][ T1406] usb 3-1: SerialNumber: syz [ 1394.741289][ T1406] usb 3-1: config 0 descriptor?? [ 1395.574665][ T24] usb 4-1: USB disconnect, device number 97 [ 1395.592685][T10745] EXT4-fs (loop3): unmounting filesystem. [ 1395.627922][T17172] loop3: detected capacity change from 0 to 128 [ 1395.663399][T17172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1395.676212][T17172] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1395.717021][T17172] fuse: Bad value for 'user_id' [ 1395.746655][T10745] EXT4-fs (loop3): unmounting filesystem. [ 1396.154133][T17181] 9pnet_fd: Insufficient options for proto=fd [ 1396.300358][T10617] EXT4-fs (loop4): unmounting filesystem. [ 1396.308967][ T8326] usb 5-1: USB disconnect, device number 99 [ 1396.347164][T17185] loop1: detected capacity change from 0 to 40427 [ 1396.354237][T17185] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1396.362286][T17185] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1396.373294][T17185] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1396.412564][T17185] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1396.419700][T17185] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1396.457117][ T28] audit: type=1400 audit(1752100738.568:275): avc: denied { rename } for pid=17184 comm="syz.1.4653" name="#13" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1396.479077][ T28] audit: type=1400 audit(1752100738.568:276): avc: denied { unlink } for pid=17184 comm="syz.1.4653" name="#14" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1396.501001][T15821] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1396.524704][T17185] syz.1.4653: attempt to access beyond end of device [ 1396.524704][T17185] loop1: rw=34817, sector=77824, nr_sectors = 976 limit=40427 [ 1396.667204][T17194] loop3: detected capacity change from 0 to 1024 [ 1396.682601][T17194] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1396.697190][T15821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.713338][T15821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1396.725954][T15821] usb 1-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1396.735155][T15821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.801594][T15821] usb 1-1: config 0 descriptor?? [ 1396.810959][T10957] EXT4-fs (loop2): unmounting filesystem. [ 1396.812035][ T1406] usb 3-1: USB disconnect, device number 70 [ 1397.183158][ T4030] udevd[4030]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1397.185320][T17200] loop2: detected capacity change from 0 to 1024 [ 1397.223418][T17200] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1397.438848][T17212] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.4656: Allocating blocks 257-513 which overlap fs metadata [ 1397.526049][ T2105] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1397.544999][ T9966] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1397.545138][ T9966] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1397.595223][ T9966] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1397.627861][ T9966] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1397.643255][ T9966] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1397.651174][ T9966] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1397.658813][ T9966] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1397.707108][ T2105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1397.724878][ T2105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1397.765967][ T2105] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1397.775135][ T2105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.783408][ T8326] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1397.791335][ T7315] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1397.799366][ T2105] usb 4-1: Product: syz [ 1397.803559][ T2105] usb 4-1: Manufacturer: syz [ 1397.808549][ T2105] usb 4-1: SerialNumber: syz [ 1397.814192][ T2105] usb 4-1: config 0 descriptor?? [ 1397.997252][ T8326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.007457][ T7315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1398.017188][ T7315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1398.034580][ T8326] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1398.043721][ T8326] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1398.052968][ T8326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.055269][T15821] usbhid 1-1:0.0: can't add hid device: -71 [ 1398.063124][ T8326] usb 5-1: config 0 descriptor?? [ 1398.072052][T15821] usbhid: probe of 1-1:0.0 failed with error -71 [ 1398.079401][ T7315] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1398.083574][T15821] usb 1-1: USB disconnect, device number 92 [ 1398.088582][ T7315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.102715][ T7315] usb 3-1: Product: syz [ 1398.107006][ T7315] usb 3-1: Manufacturer: syz [ 1398.111657][ T7315] usb 3-1: SerialNumber: syz [ 1398.117152][ T7315] usb 3-1: config 0 descriptor?? [ 1398.277403][T17211] loop4: detected capacity change from 0 to 512 [ 1398.287905][T17211] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1398.307192][T17211] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1398.315228][T17211] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1398.323590][T17211] System zones: 0-1, 15-15, 18-18, 34-34 [ 1398.330728][T17211] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1398.337210][T17211] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1398.346692][T17211] EXT4-fs warning (device loop4): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1398.361400][T17211] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1398.369231][T17211] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4660: bg 0: block 40: padding at end of block bitmap is not set [ 1398.383772][T17211] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1398.392781][T17211] EXT4-fs (loop4): 1 truncate cleaned up [ 1398.398540][T17211] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1398.785272][ T28] audit: type=1400 audit(1752100740.888:277): avc: denied { bind } for pid=17221 comm="syz.0.4662" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1398.811460][ T28] audit: type=1400 audit(1752100740.888:278): avc: denied { node_bind } for pid=17221 comm="syz.0.4662" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1398.833612][ T28] audit: type=1400 audit(1752100740.888:279): avc: denied { shutdown } for pid=17221 comm="syz.0.4662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1399.501539][T17229] 9pnet_fd: Insufficient options for proto=fd [ 1399.698112][T10745] EXT4-fs (loop3): unmounting filesystem. [ 1399.791739][ T2105] usb 4-1: USB disconnect, device number 98 [ 1399.835976][T15821] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1400.017119][T15821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.028175][T15821] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1400.037419][T15821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.046621][T15821] usb 2-1: config 0 descriptor?? [ 1400.217152][T10957] EXT4-fs (loop2): unmounting filesystem. [ 1400.217879][ T7315] usb 3-1: USB disconnect, device number 71 [ 1400.253020][ T4046] udevd[4046]: setting owner of /dev/snd/pcmC1D0p to uid=0, gid=29 failed: No such file or directory [ 1400.257883][T17235] loop1: detected capacity change from 0 to 512 [ 1400.271565][T17235] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1400.283364][ T4047] udevd[4047]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1400.299609][T17235] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1400.307915][T17235] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1400.316276][T17235] System zones: 0-1, 15-15, 18-18, 34-34 [ 1400.322657][T17235] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1400.329510][T17235] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1400.339546][T17235] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1400.356670][T17235] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1400.363704][T17235] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4667: bg 0: block 40: padding at end of block bitmap is not set [ 1400.379584][T17235] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1400.386563][ T1406] usb 5-1: USB disconnect, device number 100 [ 1400.389505][T17235] EXT4-fs (loop1): 1 truncate cleaned up [ 1400.400751][T17235] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1400.400775][T10617] EXT4-fs (loop4): unmounting filesystem. [ 1400.474066][ T4029] udevd[4029]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1400.666473][ T7315] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1400.872916][T15821] usbhid 2-1:0.0: can't add hid device: -71 [ 1400.878940][T15821] usbhid: probe of 2-1:0.0 failed with error -71 [ 1400.886120][ T1406] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1400.886210][T15821] usb 2-1: USB disconnect, device number 80 [ 1400.899138][ T7315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.912344][ T7315] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1400.921618][ T7315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.933581][ T7315] usb 3-1: config 0 descriptor?? [ 1401.107017][ T1406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.118062][ T1406] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1401.130428][ T1406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.143221][T17243] loop2: detected capacity change from 0 to 512 [ 1401.145302][ T1406] usb 5-1: config 0 descriptor?? [ 1401.154719][ T8326] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1401.170865][T17243] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1401.176484][T17259] loop0: detected capacity change from 0 to 128 [ 1401.190001][T17243] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1401.198843][T17243] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1401.207712][T17243] System zones: 0-1, 15-15, 18-18, 34-34 [ 1401.214056][T17243] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1401.220752][T17243] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1401.231017][T17243] EXT4-fs warning (device loop2): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1401.245978][T17243] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1401.260795][T17243] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4669: bg 0: block 40: padding at end of block bitmap is not set [ 1401.275491][T17243] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1401.284613][T17243] EXT4-fs (loop2): 1 truncate cleaned up [ 1401.290540][T17243] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1401.367323][T17250] loop4: detected capacity change from 0 to 512 [ 1401.374646][T17250] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1401.406777][T17250] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1401.415017][T17250] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1401.423571][T17250] System zones: 0-1, 15-15, 18-18, 34-34 [ 1401.423943][ T8326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.430307][T17250] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1401.447376][ T8326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.459861][ T8326] usb 4-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1401.469192][ T8326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.744609][ T7315] usbhid 3-1:0.0: can't add hid device: -71 [ 1401.751577][T17250] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1401.782699][ T7315] usbhid: probe of 3-1:0.0 failed with error -71 [ 1402.004225][T17250] EXT4-fs warning (device loop4): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1402.019494][T17250] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1402.026652][T17250] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4671: bg 0: block 40: padding at end of block bitmap is not set [ 1402.041378][T17250] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1402.050514][T17250] EXT4-fs (loop4): 1 truncate cleaned up [ 1402.056608][T17250] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1402.095199][ T8326] usb 4-1: config 0 descriptor?? [ 1402.101670][ T7315] usb 3-1: USB disconnect, device number 72 [ 1402.444525][ T1406] usbhid 5-1:0.0: can't add hid device: -71 [ 1402.451347][ T1406] usbhid: probe of 5-1:0.0 failed with error -71 [ 1402.526543][ T1406] usb 5-1: USB disconnect, device number 101 [ 1402.586048][ T397] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1402.599781][ T9966] EXT4-fs (loop1): unmounting filesystem. [ 1402.616873][T17274] 9pnet_fd: Insufficient options for proto=fd [ 1402.777001][ T397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.788218][ T397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.798305][ T397] usb 1-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1402.807490][ T397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.816964][ T397] usb 1-1: config 0 descriptor?? [ 1402.890277][T17282] loop1: detected capacity change from 0 to 16 [ 1402.897267][T17282] erofs: (device loop1): mounted with root inode @ nid 36. [ 1402.905313][T17282] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1402.914783][ T47] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1402.926199][T17282] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1403.167757][ T8326] usbhid 4-1:0.0: can't add hid device: -71 [ 1403.173841][ T8326] usbhid: probe of 4-1:0.0 failed with error -71 [ 1403.181371][ T8326] usb 4-1: USB disconnect, device number 99 [ 1403.295968][T12377] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1403.436805][T17270] loop0: detected capacity change from 0 to 128 [ 1403.443665][T17270] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1403.456028][T17270] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1403.470885][ T397] usbhid 1-1:0.0: can't add hid device: -71 [ 1403.477390][T12377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.478468][ T397] usbhid: probe of 1-1:0.0 failed with error -71 [ 1403.491178][T12377] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1403.500762][ T397] usb 1-1: USB disconnect, device number 93 [ 1403.505204][T12377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.518957][T12377] usb 2-1: config 0 descriptor?? [ 1403.728773][T17284] loop1: detected capacity change from 0 to 512 [ 1403.736453][T17284] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1403.751846][T17284] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1403.765268][T17284] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1403.773908][T17284] System zones: 0-1, 15-15, 18-18, 34-34 [ 1403.780835][T17284] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1403.787285][T17284] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1403.796682][T17284] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1403.811335][T17284] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1403.818403][T17284] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4680: bg 0: block 40: padding at end of block bitmap is not set [ 1403.832850][T17284] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1403.841822][T17284] EXT4-fs (loop1): 1 truncate cleaned up [ 1403.847583][T17284] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1404.021083][T12377] usbhid 2-1:0.0: can't add hid device: -71 [ 1404.032464][T12377] usbhid: probe of 2-1:0.0 failed with error -71 [ 1404.121646][T12377] usb 2-1: USB disconnect, device number 81 [ 1404.131703][T10617] EXT4-fs (loop4): unmounting filesystem. [ 1404.138039][T10957] EXT4-fs (loop2): unmounting filesystem. [ 1404.722993][T17300] loop0: detected capacity change from 0 to 1024 [ 1404.743103][T17300] EXT4-fs: Ignoring removed bh option [ 1404.773615][T17300] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1407.361160][T17300] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 1407.381393][T17298] loop2: detected capacity change from 0 to 1024 [ 1407.459698][T17298] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1407.565590][T17315] loop4: detected capacity change from 0 to 512 [ 1407.586816][ T9966] EXT4-fs (loop1): unmounting filesystem. [ 1407.593588][T17315] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1407.844913][T17315] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1407.910579][T17315] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4688: bg 0: block 248: padding at end of block bitmap is not set [ 1407.936232][T17315] Quota error (device loop4): write_blk: dquota write failed [ 1407.944019][T17315] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1407.954328][T17315] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.4688: Failed to acquire dquot type 1 [ 1407.965961][ T8326] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1407.974378][T17315] EXT4-fs (loop4): 1 truncate cleaned up [ 1407.980457][T17315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1407.995969][ T7315] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1408.004946][T17315] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.4688: deleted inode referenced: 12 [ 1408.017283][T17315] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.4688: deleted inode referenced: 12 [ 1408.031306][T17323] loop3: detected capacity change from 0 to 256 [ 1408.038222][T17315] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.4688: deleted inode referenced: 12 [ 1408.055154][T17323] FAT-fs (loop3): Directory bread(block 64) failed [ 1408.070749][T17323] FAT-fs (loop3): Directory bread(block 65) failed [ 1408.077954][T10617] EXT4-fs (loop4): unmounting filesystem. [ 1408.083822][T17323] FAT-fs (loop3): Directory bread(block 66) failed [ 1408.096466][T17323] FAT-fs (loop3): Directory bread(block 67) failed [ 1408.104678][T17323] FAT-fs (loop3): Directory bread(block 68) failed [ 1408.112166][T17323] FAT-fs (loop3): Directory bread(block 69) failed [ 1408.119528][T17323] FAT-fs (loop3): Directory bread(block 70) failed [ 1408.133869][T17323] FAT-fs (loop3): Directory bread(block 71) failed [ 1408.140962][T17323] FAT-fs (loop3): Directory bread(block 72) failed [ 1408.147815][T17323] FAT-fs (loop3): Directory bread(block 73) failed [ 1408.241220][ T7315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.252264][ T8326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1408.262007][ T8326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1408.272926][ T7315] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1408.282058][ T7315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.292206][ T8326] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1408.313967][ T7315] usb 1-1: config 0 descriptor?? [ 1408.325786][ T8326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.361994][ T8326] usb 3-1: Product: syz [ 1408.513881][ T8326] usb 3-1: Manufacturer: syz [ 1408.589701][T17320] loop0: detected capacity change from 0 to 512 [ 1408.609364][ T8326] usb 3-1: SerialNumber: syz [ 1408.645674][T17320] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1408.655824][ T8326] usb 3-1: config 0 descriptor?? [ 1408.699081][ T8326] usb 3-1: USB disconnect, device number 73 [ 1408.723242][T10957] EXT4-fs (loop2): unmounting filesystem. [ 1408.751667][T17320] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1408.760325][T17320] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1408.768489][T17320] System zones: 0-1, 15-15, 18-18, 34-34 [ 1408.774980][T17320] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1408.782493][T17320] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1408.793674][T17320] EXT4-fs warning (device loop0): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1408.808521][T17320] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1408.817928][T17320] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4687: bg 0: block 40: padding at end of block bitmap is not set [ 1408.833985][T17320] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1408.846214][T17320] EXT4-fs (loop0): 1 truncate cleaned up [ 1408.852120][T17320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1409.152483][ T7315] usbhid 1-1:0.0: can't add hid device: -71 [ 1409.164316][ T7315] usbhid: probe of 1-1:0.0 failed with error -71 [ 1409.215997][ T8326] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1409.256271][ T7315] usb 1-1: USB disconnect, device number 94 [ 1409.407255][ T8326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.417459][ T8326] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1409.428605][ T8326] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1409.442914][ T8326] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1409.452024][ T8326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.460213][ T8326] usb 3-1: Product: syz [ 1409.464441][ T8326] usb 3-1: Manufacturer: syz [ 1409.469098][ T8326] usb 3-1: SerialNumber: syz [ 1409.505943][ T397] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1409.625963][ T2109] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1409.707064][ T397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.718103][ T397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.727912][ T397] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1409.737007][ T397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.745613][ T397] usb 2-1: config 0 descriptor?? [ 1409.899342][ T2109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.911329][ T2109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.925294][ T2109] usb 5-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1409.937497][ T2109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.042570][ T2109] usb 5-1: config 0 descriptor?? [ 1410.439970][T17342] loop1: detected capacity change from 0 to 128 [ 1410.450377][T17342] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1410.477064][T17342] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1410.489908][T17339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.498786][T17339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.575174][ T397] usbhid 2-1:0.0: can't add hid device: -71 [ 1410.581282][ T397] usbhid: probe of 2-1:0.0 failed with error -71 [ 1410.589271][ T397] usb 2-1: USB disconnect, device number 82 [ 1410.687890][T17346] loop4: detected capacity change from 0 to 128 [ 1410.711030][T17339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.720206][T17346] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1410.733369][T17339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.734047][T17346] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1410.754193][T17339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.768263][T17339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.768287][ T2109] usbhid 5-1:0.0: can't add hid device: -71 [ 1410.787504][ T2109] usbhid: probe of 5-1:0.0 failed with error -71 [ 1410.806039][ T28] audit: type=1400 audit(1752100752.908:280): avc: denied { create } for pid=17338 comm="syz.2.4692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1410.828344][T10494] EXT4-fs (loop0): unmounting filesystem. [ 1410.833905][ T2109] usb 5-1: USB disconnect, device number 102 [ 1411.035686][T17357] loop0: detected capacity change from 0 to 40427 [ 1411.056209][T17357] ================================================================================ [ 1411.072681][T17359] loop1: detected capacity change from 0 to 16 [ 1411.086595][T17357] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:919:5 [ 1411.099157][T17359] erofs: Unknown parameter './file1' [ 1411.107867][T17357] shift exponent -7 is negative [ 1411.114242][T17357] CPU: 0 PID: 17357 Comm: syz.0.4698 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 1411.124175][T17357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1411.134270][T17357] Call Trace: [ 1411.137566][T17357] [ 1411.140523][T17357] __dump_stack+0x21/0x24 [ 1411.144893][T17357] dump_stack_lvl+0xee/0x150 [ 1411.149526][T17357] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1411.154581][T17357] ? __kasan_slab_free+0x11/0x20 [ 1411.159553][T17357] dump_stack+0x15/0x24 [ 1411.163747][T17357] ubsan_epilogue+0xe/0x40 [ 1411.168268][T17357] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 1411.174710][T17357] ? match_int+0x13c/0x190 [ 1411.179219][T17357] parse_options+0x4829/0x4830 [ 1411.184079][T17357] ? do_new_mount+0x25a/0xa20 [ 1411.188795][T17357] ? default_options+0xd90/0xd90 [ 1411.193766][T17357] ? f2fs_fill_super+0x2245/0x6c70 [ 1411.198946][T17357] ? memcpy+0x56/0x70 [ 1411.202962][T17357] f2fs_fill_super+0x2281/0x6c70 [ 1411.207936][T17357] ? __cfi_f2fs_fill_super+0x10/0x10 [ 1411.213252][T17357] ? mutex_unlock+0x89/0x220 [ 1411.217871][T17357] ? set_blocksize+0x1df/0x360 [ 1411.222747][T17357] ? sb_set_blocksize+0xaa/0xf0 [ 1411.227632][T17357] ? __cfi_f2fs_fill_super+0x10/0x10 [ 1411.232942][T17357] mount_bdev+0x2bc/0x3f0 [ 1411.237309][T17357] ? __cfi_f2fs_fill_super+0x10/0x10 [ 1411.242637][T17357] f2fs_mount+0x34/0x40 [ 1411.246822][T17357] legacy_get_tree+0xfe/0x1a0 [ 1411.251598][T17357] ? __cfi_f2fs_mount+0x10/0x10 [ 1411.256489][T17357] vfs_get_tree+0x9a/0x270 [ 1411.260933][T17357] do_new_mount+0x25a/0xa20 [ 1411.265493][T17357] path_mount+0x675/0x1010 [ 1411.269940][T17357] ? user_path_at_empty+0x161/0x1c0 [ 1411.275165][T17357] __se_sys_mount+0x318/0x380 [ 1411.279906][T17357] ? __x64_sys_mount+0xd0/0xd0 [ 1411.284705][T17357] ? do_user_addr_fault+0x9ac/0x1050 [ 1411.290026][T17357] __x64_sys_mount+0xbf/0xd0 [ 1411.294655][T17357] x64_sys_call+0x65d/0x9a0 [ 1411.299192][T17357] do_syscall_64+0x4c/0xa0 [ 1411.303643][T17357] ? clear_bhb_loop+0x30/0x80 [ 1411.308362][T17357] ? clear_bhb_loop+0x30/0x80 [ 1411.310602][ T8326] cdc_ncm 3-1:1.0: bind() failure [ 1411.313072][T17357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1411.323993][T17357] RIP: 0033:0x7f40cd5900ca [ 1411.328443][T17357] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1411.330050][ T8326] usb 3-1: USB disconnect, device number 74 [ 1411.348082][T17357] RSP: 002b:00007f40ce3f0e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1411.348115][T17357] RAX: ffffffffffffffda RBX: 00007f40ce3f0ef0 RCX: 00007f40cd5900ca [ 1411.348131][T17357] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 00007f40ce3f0eb0 [ 1411.348147][T17357] RBP: 0000200000000040 R08: 00007f40ce3f0ef0 R09: 0000000000000000 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 1411.386388][T17357] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 1411.394406][T17357] R13: 00007f40ce3f0eb0 R14: 0000000000005513 R15: 0000200000000500 [ 1411.402410][T17357] [ 1411.436759][ T28] audit: type=1400 audit(1752100753.518:281): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[14501]" dev="pipefs" ino=14501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1411.576967][ T4030] udevd[4030]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1411.634917][T17357] ================================================================================ [ 1411.644455][T17357] F2FS-fs (loop0): Not support 144115188075855872, larger than 256 [ 1412.126678][T10686] device bridge_slave_1 left promiscuous mode [ 1412.132808][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.140395][T10686] device bridge_slave_0 left promiscuous mode [ 1412.146553][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.154495][T10686] device veth1_macvtap left promiscuous mode [ 1412.160571][T10686] device veth0_vlan left promiscuous mode [ 1412.956922][T10686] device bridge_slave_1 left promiscuous mode [ 1412.963078][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.970618][T10686] device bridge_slave_0 left promiscuous mode [ 1412.976805][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.984719][T10686] device bridge_slave_1 left promiscuous mode [ 1412.990932][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.998332][T10686] device bridge_slave_0 left promiscuous mode [ 1413.004431][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.012497][T10686] device bridge_slave_1 left promiscuous mode [ 1413.018711][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.026553][T10686] device bridge_slave_0 left promiscuous mode [ 1413.032679][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.040665][T10686] device bridge_slave_1 left promiscuous mode [ 1413.046841][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.054299][T10686] device bridge_slave_0 left promiscuous mode [ 1413.060677][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.069384][T10686] device veth1_macvtap left promiscuous mode [ 1413.075402][T10686] device veth0_vlan left promiscuous mode [ 1413.081659][T10686] device veth1_macvtap left promiscuous mode [ 1413.087719][T10686] device veth0_vlan left promiscuous mode [ 1413.093836][T10686] device veth1_macvtap left promiscuous mode [ 1413.099931][T10686] device veth0_vlan left promiscuous mode [ 1413.106206][T10686] device veth1_macvtap left promiscuous mode [ 1413.112231][T10686] device veth0_vlan left promiscuous mode