last executing test programs: 2m43.305167661s ago: executing program 3 (id=3395): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fsync(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000500)) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x0, 0xffffff6a, 0x0, 0x0, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000150400003d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff07003506000002000000170600000ee50014bf250000000000005d670000000000006507000006000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff2d440100000000009500000000000000050000000000000095000700000000000172dbabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6355cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe6fd599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f712e522aad0f13b0e5b43d837d040f813d011538"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m42.215909506s ago: executing program 3 (id=3399): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x1ff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SVE_GET_VL(0x33, 0x197d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xb6440, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x1008002, &(0x7f0000000dc0)={[{@errors_continue}, {@resuid}, {@resuid}, {@commit={'commit', 0x3d, 0xfffffffffffffff4}}, {@lazytime}, {@usrquota}, {@norecovery}, {@data_err_abort}]}, 0x1, 0x5f0, &(0x7f0000000640)="$eJzs3c9vVNUeAPDvnWlLf/BeC3l57+FCmhgDidDSAoYYF7A1pMEfcePGSgsiBRpao0UTSoIbE+PGGBNXLsT/QolsWenKhRtXhoSoYWnimDu9t3TaO6WddjrI/XySoffeM7fne5l+e86cnnMngNIaTv+pROyLiNkkYjBZXC7riqxweOl5D/748Gz6SKJWe/W3JJLsWP78JPs6kJ3cGxE/fJ/E3uraeucWrl2cnJmZvprtj85fmh2dW7h2+MKlyfPT56cvjz8/fuL4seMnxo60dF3XC46dvvnOe4MfT7zx9Zd/JmPf/DyRxMl4KXviyuvYLsMxXP8/SdYWDZzY7so6pJr9nKx8iZOuDgbEpuSvX3dE/C8GoxoPX7zB+OjljgYHtFUtiagBJZXIfyipvB+Qv7df/T64UtBnONS/I10ToM3un1oaAFib/11LY4PRWx8b6H+QxMphnSQiWhuZa7Q7Iu7embh57s7EzWgchysYNQS20+KNiPh/Uf4n9fwfit4Yqud/pSH/037BmexrevyVFutfPVTcjnF4oNhS/veum//RJP/fXJH/b7VY//DDzbf7GvK/r9VLAgAAAAAAgNK6fSoiDhX9/b+yPP8nCub/DETEyW2of3jV/tq//1fubUM1QIH7pyJeLJz/W8ln/w5Vs61/1ecDdCfnLsxMH4mIf0fEwejele6PrVPH4U/2ftGsbDib/5c/0vrvZnMBszjude1qPGdqcn5yq9cNRNy/EfFU4fzfZLn9Twra//T3wewG69j77K0zzcoenf9Au9S+ijhQ2P4/vGtFsv79OUbr/YHRvFew1tMffPpts/pbzX+3mICtS9v//vXzfyhZeb+euc3XcXShq9asrNX+f0/yWn19UE927P3J+fmrYxE9yelqerTh+PjmY4YnUZ4Peb6k+X/wmfXH/4r6/30Rsbjqeye/N64pzv33r4FfmsWj/w+dk+b/1Kba/81vjN8a+q5Z/Rtr/4/V2/qD2RHjf7Dk8zxNexqPF6RjV1HRTscLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+CSkTsjqQysrxdqYyMRAxExH+ivzJzZW7+uXNX3r08lZbVP/+/kn/S7+DSfpJ//v/Qiv3xVftHI2JPRHxW7avvj5y9MjPV6YsHAAAAAAAAAAAAAAAAAACAx8RAk/X/qV+rnY4OaLuuTgcAdExB/v/YiTiAnaf9h/KS/1Be8h/KS/5Decl/KC/5D+W10fzvbXMcwM7T/gMAAAAAwBNlz/7bPyURsfhCX/2R6snKujsaGdBulU4HAHSMW/xAeZn6A+XlPT6QPKK8cOp/spEz1zN7dgsnAwAAAAAAAAAAAEDpHNhn/T+UlfX/UF7W/0N55ev/93c4DmDneY8PxCNW8jf/6L+trP8HAAAAAAAAAAAAADZjbuHaxcmZmemrNl5/PMLYyY1arXY9/Sl4XOL5h2/kU+G3+n2q0ZYI87V+Gzurc7+TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACARn8HAAD//9zcJCQ=") 2m37.386855419s ago: executing program 3 (id=3402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x20000026, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 2m34.130124383s ago: executing program 3 (id=3411): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)={[{@errors_remount}, {@keep_last_dots}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8}, {@keep_last_dots}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x401}}, {@umask={'umask', 0x3d, 0xb35e}}, {@utf8}]}, 0x1, 0x152a, &(0x7f0000001ac0)="$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") getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 2m33.889991586s ago: executing program 3 (id=3417): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x2, 0x0) 2m33.785171297s ago: executing program 3 (id=3418): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m33.369493503s ago: executing program 32 (id=3418): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m12.638238577s ago: executing program 1 (id=3582): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x800, 0x20, 0x0, 0x0, 0xc, 0x2, 0x9e8e, 0x5, 0x4, 0x0}) 2m12.41960843s ago: executing program 1 (id=3583): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(0xffffffffffffffff, 0x2004, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c000000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 2m12.305586771s ago: executing program 1 (id=3585): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}}) 2m12.288068372s ago: executing program 1 (id=3587): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440)={[{@resgid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@delalloc}]}, 0x2, 0xbe0, &(0x7f0000001f40)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x0) getdents(r0, &(0x7f0000001280)=""/4075, 0xffb) 2m12.009724135s ago: executing program 1 (id=3590): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0x7439, 0x0) 2m11.823897727s ago: executing program 1 (id=3597): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r1, &(0x7f00000004c0)="27ae7a5c0cbed4eb3bebc9ec4672", 0xe, 0x800, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'macvtap0\x00', {0xff}, {}, 0x56, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x3, 0x20], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x7], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x5, 0x4, 0x5, 0x1], 0x0, 0x2}, {0x1, [0x2, 0x7, 0x4, 0x1, 0x1, 0x6], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) unshare(0x22020600) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180)) 2m11.714992519s ago: executing program 33 (id=3597): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r1, &(0x7f00000004c0)="27ae7a5c0cbed4eb3bebc9ec4672", 0xe, 0x800, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'macvtap0\x00', {0xff}, {}, 0x56, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x3, 0x20], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x7], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x5, 0x4, 0x5, 0x1], 0x0, 0x2}, {0x1, [0x2, 0x7, 0x4, 0x1, 0x1, 0x6], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) unshare(0x22020600) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180)) 2m1.968891118s ago: executing program 5 (id=3668): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendto$packet(r1, &(0x7f00000004c0)="27ae7a5c0cbed4eb3bebc9ec4672", 0xe, 0x800, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 2m1.949753768s ago: executing program 5 (id=3669): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x880) creat(&(0x7f00000007c0)='./file0\x00', 0x11c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) 2m0.437617818s ago: executing program 5 (id=3677): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000004c0)={[{@fmask={'fmask', 0x3d, 0x2}}, {@utf8}, {@errors_continue}, {@errors_continue}, {@umask={'umask', 0x3d, 0x7}}, {}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@gid}, {@keep_last_dots}]}, 0x1, 0x152d, &(0x7f00000034c0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 2m0.164782002s ago: executing program 5 (id=3683): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x1024404, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shutdown(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m59.5376987s ago: executing program 5 (id=3690): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendto$packet(r1, &(0x7f00000004c0)="27ae7a5c0cbed4eb3bebc9ec4672", 0xe, 0x800, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 1m59.353250952s ago: executing program 5 (id=3693): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket(0x2c, 0x3, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4716e26b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb4f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0010000801964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffbfffffffe, 0x0, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x0, r4, 0x4, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r7, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r6, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r2, r0, 0x6700000000000000) 1m59.288454343s ago: executing program 34 (id=3693): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket(0x2c, 0x3, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4716e26b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb4f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0010000801964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffbfffffffe, 0x0, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x0, r4, 0x4, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r7, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r6, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r2, r0, 0x6700000000000000) 10.879323436s ago: executing program 6 (id=4176): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0xa00714, &(0x7f0000000500), 0x2, 0x49b, &(0x7f0000000b80)="$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") r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup.net/syz0\x00', 0x200002, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 10.778155908s ago: executing program 4 (id=4177): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1/file0\x00', 0x200010, &(0x7f0000000340)={[], [{@euid_eq}]}, 0xfe, 0x57a, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8efffffb703000008000000b704000000000000850000000300008071ffffdcf4753e4d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00), &(0x7f0000001c40)=r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000df00"/21], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b714000000000000850000005500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000001c0)='cpuset.cpus\x00', 0x2, 0x0) mknodat$loop(r0, 0x0, 0xc000, 0x0) write$cgroup_int(r8, &(0x7f0000000040), 0x1) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) 9.557305574s ago: executing program 4 (id=4180): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 8.899549653s ago: executing program 4 (id=4181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 8.39813434s ago: executing program 2 (id=4183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00), &(0x7f0000001c40)=r3}, 0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r4, &(0x7f0000006180)={0x2020}, 0x2020) 8.251152711s ago: executing program 7 (id=4184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r5 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 7.903792396s ago: executing program 4 (id=4186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.503110771s ago: executing program 2 (id=4188): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000900)={0x0, 0x11, 0x2, 0x4, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 7.368819683s ago: executing program 6 (id=4190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1}, &(0x7f0000001c00), &(0x7f0000001c40)=r2}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') 7.249090715s ago: executing program 7 (id=4191): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x20000026, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 6.82704635s ago: executing program 2 (id=4192): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="438bdcb70feed366932e78e973003dac3f800000000000000000000000000000000000000080000000"], 0x48) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@usrquota}, {@errors_continue}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) 6.768788261s ago: executing program 6 (id=4193): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file0\x00', 0x218000, &(0x7f00000007c0)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@quota}, {@errors_remount}, {@grpid}, {@orlov}]}, 0x7c, 0x57f, &(0x7f0000001440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES64=r2, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r7}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) bind$can_raw(r5, 0x0, 0x0) 6.573060364s ago: executing program 2 (id=4194): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004058041150000000000001090224000100000000090400cef650d52d19"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="402203000000030534"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.526523034s ago: executing program 0 (id=4195): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsmount(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 5.400900569s ago: executing program 0 (id=4196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 5.384638339s ago: executing program 6 (id=4197): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x20004010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) ptrace$pokeuser(0x6, 0x0, 0x6, 0x8000000000000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x240000, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1, 0x1936, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1000000, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x0, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getuid() r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000001c0)={'gre0\x00', 0x400}) close(r7) 5.30809955s ago: executing program 7 (id=4198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xfc}}, 0x0) 5.286161051s ago: executing program 7 (id=4199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020) 4.490321731s ago: executing program 0 (id=4200): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), &(0x7f0000001c40)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000001c0)={'ipvs\x00'}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 4.239343155s ago: executing program 7 (id=4201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r5 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 3.415883476s ago: executing program 6 (id=4202): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngQLu4EQeZ31Jlso1KWHUmgg0J56aGJkxaSWrWDJITamTSiFXgpt6a295Nyfl9Jrfxx6af+PkhJaJzSlh+Iy+hHLtuRKiS2T5vOBid+beaM333lPb148YymAR1Yu/ScTcSwi3kwixhvrk4gYrKWyETP1cnc31gvpksTm5nM/JLUydzbWC9GyT+pII/P3iPjytYgTmd31VlbXFmZLpeJyIz9ZXbw8WVldO3lpcXa+OF9cOj01PX3qzP/OnN6/WH/6du3o9289/e+PZn559W8fv/FVEjNxtLGtNY79kotc45wMpqdwm6f2u7JD8+nLXRRq6QHZgzwYepQ2zECjVY7FeAzs1T6j/TwyAOCgvBIRm50MdNwCADzUkvr1/4nDPg4AoF+avwe4s7FeaC6H+xuJ/rr1ZESM1ONv3t+sb8k27tmN1O6Djt1Jtt0ZSSJiYh/qz0XEe5+9+EG6xAHdhwRo59r1iLgwkds9/ie7nlno1X/ar55vzeR2bDT+Qf98ns5//t9u/pe5N/+JNvOf4Tbv3fuRS7bnd7//Mzf3oZqO0vnf4y3Ptt1tib9hYqCR+1NtzjeYXLxUKqZj258j4ngMDqf5qT3qOH7719udtrXO/358+6X30/rTn1slMjezw9v3mZutzj5IzK1uXY/4R7Zd/On4P1xr/6TD/Pdcl3U889jr73balsafxttcdsd/sDZvRPyrbftvdcxkz+cTJ2vdYbLZKdr4ZCbGOtWfy261f7qk9Tf/L9APafuP7R3/RNL6vGal65e+97TYNzfGv+hUqLX/t4+/ff8fSp6vpYca667OVqvLUxFDybO715/a2reZb5ZP4z/+z/bv/+b416b/v5C+/oUuT0R2ID6sj5j3E//BSuOf66n9e07EyN2FgU717xF/o/+k7T+9bZ9uxr9uD/BBzh0AAAAAAAAAAAAAAAAAAAAAAAAAdCsTEUcjyeTvpTOZfL7+Hd5/jbFMqVypnrhYXlmai9p3ZU/EYKb5UZfjLZ+HOtX4PPxm/tSO/H8j4i8R8c7waC2fL5RLc4cdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HOnw/f+p74Z3FB44jCMEAA7EiAs7ADxqkmz2sA8BAOi3kZ5Kjx7YcQAA/dPb9R8A+CNw/QeAR8/vXP93/hkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Orc2bPpsvnzxnohzc9dWV1ZKF85OVesLOQXVwr5Qnn5cn6+XJ4vFfOF8mLHF7pW/1Eqly9Px9LK1clqsVKdrKyunV8sryxVz19anJ0vni8O9i0yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOheZXVtYbZUKi5L7E9iuHFiu9xr4et68XZlNjcPPxyJvRNxrafmfogSMbQ1Soz2f2ACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEj8FgAA///+gx9z") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000900)={0x0, 0x11, 0x2, 0x4, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 3.398857625s ago: executing program 0 (id=4203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1}, &(0x7f0000001c00), &(0x7f0000001c40)=r2}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') 3.397325605s ago: executing program 4 (id=4204): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001900)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.344893646s ago: executing program 2 (id=4205): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x10, 0x40, 0x7, 0x3, {{0xd, 0x4, 0x1, 0x26, 0x34, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0x61, 0x0, 0xf, [0x0, 0x5, 0xdee, 0xaad, 0xa, 0x2]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)={0xc8, 0x12, 0x10, 0x70bd25, 0x25dfdbfb, {0x1e, 0x4, 0x40, 0x3, {0x4e23, 0x4e20, [0x7, 0xfffffffe, 0x3, 0x200], [0xe, 0x1, 0xd], r1, [0x8fe2, 0x7]}, 0x8, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "a4782239adeb11371c70005e801dc6329f8a57186633bf444c70bee618f736307d5a0062d879f8714119ff1110e54cf7e5aecd5e80744cc0ea6c128d13ec130415dc86569bc952a9e495c925a1b5f006b8f700c9f5b5cdd54e8e2968dbf1f58bb0cbc37ccb5b9fb3644fb3fb1a742b08efe2cd"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40400) read(r4, &(0x7f0000000240)=""/195, 0xc3) 3.300727037s ago: executing program 7 (id=4206): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") mknod$loop(0x0, 0x100000000000600d, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689", 0xc5}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) write$UHID_INPUT(r1, &(0x7f0000001780)={0x8, {"d99abce8bf878fbdc1e2880574c996d188c2098e5cd05e141c84a9fa7715eaa6f4eb2274c962d9ab4a63f1c49c2493e66dc32e20513f2c1d6d8d575a48c1610c82623e557e8f2a788d1ede446cfdbcc06278f39988a71f47b2dde0274c59f9064d17574698774426e4f21ccd86d54c8f74b5937b16909dbfd9511beca3a86e76c002e5565c7d3f07e09cdb11a223543e8b95420ca562dfa1bdb92220db81fa8110fe02f7abd4bb7d33c69209b665544bd28d73b04a7da2318a89deab7ac6dd0f3d3789e6a39db065b2b8bcbcb6ab2efa2a0da04a43382bd3c748694b27efa32ea1b7c9e90a0a93bf215345df252ecb7a6bd497f75e700fd95810eacaea6ee9948cf1495b431933c8d3ff43e1dd94993b42a2b6628864b50dbec583c5a383ab3cc88130e6fe5985585a9fd04b2257b91a89f259bdd4d8fdb27ea43333eca9af87f98f47cc97ae87bc1fb75a764ac48edbc7149a12262f5ba1dc5f4ce2679d9c379f853e68465e6d6390cc3d22e37595d97cccd7ddce3af698a076c762e668179d08c2cefb42b39c5017d6bd4801c8e5f55704eaf870d1a45bdaea16a97ce1060535b5d2579e2db23b76531094daac5be119be79e72462d28b035787b84de9e8777e064e45bdc762f3a4d7fc1df9aa1252a210fbd01448558101598a5f387caea3a6e99fe62275d92831e2cd1d1a4114b76ff47e76b5c1127e24de76dedcf338439048e9bba05765fa85d7cd58e321438bd3e663c11c0605a83b57e15e41df8b8e52759194edaf1f7df5f1873efe01970a8265e487672812ec4856e19f4a84e19a472d78c7cebc7c4cf2a571c01d3680bfcfe1782c686df27fb81041a545ac82687683fc599ab5ec1d846465c1abfe6e24f9a9149b39a4738ae839c7b437cd1c8ac59f41a03fa7e640fc913b64877a4f856137e31f3a6fd109de6e30060a63d56858955a68889a49317ab82e82a738a2697e294f5afebd746519567a5cedd4b3a8f87105115e6989b67d1f250e8d9a795d2d118265d65b863b45c0c39fc56721d3558767584e544f351edd6b2c828cba3939e9f64449011696e25302a89e15c224b671eb294a713f4644b6e82c44303e0bd104f833384388ef836382481ec13080c35dcc075fcd6cb760f713980a70d9b69bf2c0d5cd1883e7c55f3dae2da23038c14b4fef91fbe7333f8d3507cd15fe4c6edf24d637dd96d45ddc705c2f07ca0cb1193dbb469c35c57efcf11f3adfe8c50b2de685be50c3abe3072a0944573a37a5298f12f4bffccd2ab884e90cf0e8a57d1f5c16793d5a65e42fc5270e36024815a8047bcdc12bf0c138e47aca993f9c7cf3a88198e43c2691c69b9620436f41eebc9295b96c21043157785ed183ae2f75cf4ed44c5502292d45820b76a5388220fb0cc51972ac9d120308c568ab5d79d73f80d829f2af2a203486e70e8992efee0b409572fb3d8ceaf2e7dc55faf6dbe32f59108c1cfd429dcc6f35162da8bc11204ab5fb9b362dc77f817bf33014d391bf2ee04fb44e6d11ea574c14b81380a03ad9e24aa741b4ca937c58ef4259a02c40c205b0a4790c11b66c11fa05598f94589ac52d9dd81cac2a34547d73939ef315da5ac14c44701d5f5b33fec66d3a3b9cc1d334decdb99d6a46280bdc61bd9d8ab1f73b07ac45240b57cf6ded8b2fd2f6e72bd2f5894c0b56f0e35d8ef5d1298dd56ce8bf41e30002de29274d01b620794d42368401c08af68847948f6869ea0258cc3a2cf7093ef90bb02ced0e73ceb6708e7b3395febb68aa0986c52b99ba031a4634ea7c8a0c420913293d13b60e32a8087273242ae34eb72d20b0f210193d653f52e66057e3644fd5b108a2ee4ce941b87a15d37b62c2dafcd08f8ad5cd9485201181d67bed8a1f47e31403695af9177c349fe96c4b7d17dad9cef14c69977f22e4613e2307cc3c1b6db1671012186a0d77f0eabec3f9e2b14238102a938c8bd208b68d5b802f735316aef456fbbf1c39272e03a56831f765a3d77d082dfb718febb8c69319da1874cb3b142309ec7943f3233bebd3591224e46c39fa0ef7cc1e0969cae6297bb320eb289ba7eb66481c081d85bfe0f221190810130ce306ff0b92fa30e4c8b400cd9ecfc60e937a154c8b37fa21c2c3e318a114938c922bcde9cbd5987a2e8090b83f880d4042be7ee8085fda3dc3f0bdd4ac68da90a9b7b340ecaf99b6f17ee4d77190f1e1cdabd31eac74eb92ae5cc321595f3718be9bbd8e0d7c3e00c1e4ce51a20811abd1da599e93bd1fe87ff65087f2418ddba9dbd1416fe4c909a0d16425636bbee058aa2cf11e21ee2816efa99115648d4b3f6b28f6297432888b322ff9deebf5224add42866e3ee454db01ab66832a81851529a06bed759b1590bf7e0b1db7581d4306debc372c6c9026953207b624db4163cbf12ae76c2f4da23f6b0d293dfbcd52a8bcfabce18577115ed030947ec68fbcc5c00a684d8ea31f3b2620df754b4fa9a5d934e960b4cd4e0edd0ba9008c639844725054377c1e2d1a9250052d44658279579fdf5522a3d11e64ee47355a36cd182a67a84943db40a11ae521ad1ffa09f6f9eac5ee7024ad79c57966d9f9dce425770d4ba37d2a8cba0df00e67d206cf2e2939c1a37afa696bed5416cda2cbaeeb218d8810472c2b880979c506f89c0d51e344b4940eac5857ff85d5567cd71ebde97fd87e79d18d66c45b99b853da358123a20cfdf0954a662fff8869c1c3b6d0fe530845bad1defa488f7b8794dc7f2da6d50ad7e2e692a79a57da0f04c2b5c229c21d7650735d62b0a0b91e34ed59cdd8681ad22bf34784f1ae453a688f5add7bc4b1493d06a684b2e6df88d5c24ed8fee8396cf3f7d416a0caf85d7e784b1b35c5ecb0f3cda86783a847be239650128765738f234f78403e77bd3e27525c4f986009aa3b4c1f843f4f16e3dc459d163433852d0923ce62ba23f534ba020109028ce5f6d238d9ad4664482ce78d57fa72034446c540ed6fd2af04a2f465329c18f50f5a1da87bfa242ddd230de4892dd32aed634e0a1de95cb5e29f96a153c192d0f34d4b002a3c2e7015c7384a83f1dc96f3c411272d51871dbad1d01175f20f311e4bfeb17919b7d1079a14929d106f9110282e39c82f823bd008623db7506e16bad3e082b8f7cdfdc398f05c6ce1b447e40b9e676207f3c5054769745982c402dd4d5ab625767ed0993b5cb26d9c64e903959d180752eb3511610eebebef44ec5ed48283b75222be82507ac17f29d76cf258401a62db6f39cd22008661413c6fd2a3dcc58fe34d68b5b80c79fa194a54428f214dabefb5d3cedd72990a5e219d8113d1285ef4829a99418363a7da3deced99c42147b6b9f064d59080d1c94ac63ac164f35a80c0d7dc480776df893cf74a32feeec7dfe86b63385adbfdb4947b74303f8eac37ce7e63019aa0984dab57be6372f879f0b5954a0fa41c6ffaff283a71ee9de23a4196858dd89f409f2cd1d49845671d676ecd9faa66c37dbe9ef7a2585459c2d1a94741c8a5708f9b9423abc88039dab77da3543f700e1a56608cc65ddc2ccd27628d7e59219ef67c25d100cde2a51d5576063a5afe12826bf06d2ebd677c1350e166bda53e8d1992c44ec340bb142b51aafdce86123084a9ebf4e242cc9d7c137b2857021059543aaa5741fd96234a819193a21d48675776ddfb9d7f95c8d25dd5945ba49fc17109465a09740ba53fffbe7bf717bace7edc9f299ce0676c88ca5f00ae876be093592fbe555d11dc3399f77d16039b64c677ea45a2867e1d72062fff4f407df7f132e819a97d540df1675bc4b21e049ba99ada904d919c4ba6c054fec2329cfb16e2fd436e00b1dc0db4e9463879f20a3c58943b2cf141c06241954bf1ac8feff051e88b5bf06371421f878be6d86af932216c8771f6c9ab750928926a8c8af300f7ec5351d8850a7d54441c5e4e6a979105ae431cfe7f5bbed4277ea04eec9b22f1fd01955cf72fab958cb26f20e3f5dd87a87e22a3c3740cf84e6d95bee37f1138f0d00081aa2fa570d98070c17769dc193d87a49cb4bc9ac8512bcefecfb503bc60e0913b989d1bbd93e7f66a908bb0b5f5a42f8bf7c2f861bd40cb72d93af856499282dcfac947f7042c23ae0ecd22cfc902623223a0c08101ac36237d967d10cc2cd5c3d32a0c27d9fedcc1d9885613cf692d7aa5b3027401f5053681ab75e686c72a11b2e40160b0b8d352b26ec561a83805d2f30c5ccd8cc68f3ff0d194784fde6d2ae008a04aadf8844b878ca485cd5cbc9b7f0fa9119dea8d80780247dd782aebe3ef429b2b9e73a10fa8faedff1f27c440766845beeacaaa36eeab36bdd782dc62669cc32da1c62807126a5ac0e99f59eab6b90055ddcd7b1490729171aa5347a3dc9e2c899ba2ad06cdfed671c5b72eddad775607fd57da925f6de601ea3d558641d11210ce8b85cd115221f4298e9ef8b7abedfc24508c34f7a91d7404b8e5eba02213a25f8bc7dea25de3e34a2cd54e7a77ddc3205c2f33086208cc270a00f8566d225214a4c97e8ad40c5b0b6aab6a8ca688e2bc35a27c824b929d6dd8de3820e5b2c0eff80dc0050088151022a8917e3baf61605f3f3f3345c7f51ffe9616af27a5534aa3c92aa4b7497ebef265ec47530ecf49fc39014379be8d9f77d910a8707605d55008911b229d216ec6bb882e9502ef2a60a53d0bbfdceb438e27761c831d2f0423449c412a03cbf803741e23c8dd58799272b7f603bc424c4590bc5cf9d988e1c3a6e60ec393fdf91c4a104e52a7551c062e37f9cef5c3c5168fb4e72bcc9b245ca64529f1739445063bd4e200a6398e6fda726834441ff5bfeb9527634179af93707029d531c6f2275ca85fad1b6210f54aab5eb395d3b44aae7f7e1fe8b644911ea69ce57b4554cba6b5b5f036737de3a399348e906c3c9da54407a8631cc9b29f3207320187429d64d6fb19477001bb6be6fafd56d2a792ffa35bc632b48e830d4e0c551591f78131b9b770a8a70080c746c022c715ab93b63816547ae8cd26be138a998c8df7ccf17fc4aae478fadb868a3d910824e999d86e6c30f6b3a7feb357abd020852449611a827850aaf59363356ed6a353aa662d5526c3138b51fddefa449b888a9f08e00fcc050a77736e441ee955a10c28e4ff3952e97e46c8bd15d731e7cd15ea8a56051c2de9b766ce9394f060ae4a162268a171a52d48ffb776eddcc2f42ebe4fa9a24f28b81e472ba801e3bb46dc1a3aca39478c36b604bdfb17a934255a8be2275bf7d527e50e1e237d1482e66582aa52e886c70105ff02b0b4ec5583b9fbdb955deff5a5876c56e697dc24a70540278804f90ebca6fbc99a0d43dde1a1fe7ce17a1a38895310bdb616b114223d9bf77a8727d9c2bd4bc9ff521bcd7ed37f57fe42df9f37371d70a2405e1c36fa66d5051264766bd471079b8c8bc6a71946912a57a91c915612e73de79d73c64084ba5f104227cc9b4dbfbe07ecb75461450f5275a834935c878bff2173022827017819897f420ae0c77c00604186770fd3e46c2ecf55d9a8a76dfb20960dd311a311017388395ceedaaa6bd4bff42ca74d8b408c6a4ffda6db726f6df0990541734f0c059b29b199e2ee11b6c576b940f8644a188ceee152bd33f4f4e59ff8eb711a970f87c4714c42b4634c6e87172b6cbe7e34e82d018f74da7519e830747879e771bdc1316f541bddc7106c0dea992d9dd0e8b11470cc9b4674f9c1d9b195ecacfc5f9902efcde42f6453fb2c5a760842ac30775d4d3fa1ee6334e0ab", 0x1000}}, 0xe1c) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/89, 0x59}], 0x1, &(0x7f0000002d80)=""/4106, 0x100a}, 0x57}], 0x1, 0x101, 0x0) 3.007414201s ago: executing program 0 (id=4207): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team_slave_1\x00', &(0x7f0000000040)=@ethtool_cmd={0x1f}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) fallocate(r5, 0x0, 0x0, 0x1001f0) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xc615, 0x101, 0x0) 140.124789ms ago: executing program 0 (id=4208): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x757, &(0x7f0000000800)="$eJzs3c9rHFUcAPDvbJKmptXkIGj1EhA0ULoxNbYKHioeRLBQ0LPtstmGmt1syW5KEwJaRPAiqCdBLz37o968+uOq/4UHaamaFiseJDKb2XTb7KabNsmi+/nAa9+bmc2b77yZeW93hpkA+tZ4+k8u4lBEfJREjGbTk4gYauQGI06sL3drdaWYpiTW1t74PWksc3N1pRgtn0kdyAqPR8QP70cczm2ut7a0PFcol0sLWXmyXjk/WVtaPnKuUpgtzZbmj01NTx89/vzxYzsX6J8/Lx+89vGrz3x94u/3Hrvy4Y9JnIiD2ezWOHbKeIxn22Qo3YR3eGWnK+uxpNcrwH1JD82B9aM8DsVoDDRyAMD/2TsRsQYA9JlE/w8Afab5O8DN1ZViM/X2F4m9df3liNi/Hn/z+ub6nMHsmt3+xnXQkZvJHVdGkogY24H6xyPi82/f+jJNsUvXIQHaefdSRJwZG998/k823bOwXc92scz4XWXnP9g736Xjnxfajf9yG+OfaDP+GW5z7N6Pex//uas7UE1H15+MeKnl3rZbLfFnxgay0sONMd9QcvZcuZSe2x6JiIkYGk7LU1vUMXHjnxud5rWO//745O0v0vrT/28vkbs6OHznZ2YK9cKDxNzq+qWIJwbbxZ9stH/SYfx7qss6Xnvxg886zUvjT+Ntps3x7661yxFPt23/23e0JVvenzjZ2B0mmztFG9/88ulIp/pb2z9Naf3N7wJ7IW3/ka3jH0ta79esbb+Ony6Pft9p3r3jb7//70vebOT3ZdMuFur1hamIfcnrm6cfvf3ZrPxQZMun8U881f7432r/T78Tnuky/sFrv311//HvrjT+mW21//YzV27NDXSqv7v2n27kJrIp3Zz/ul3BB9l2AAAAAAAAAAAAAAAAAAAAAAAAANCtXEQcjCSX38jncvn8+ju8H42RXLlaqx8+W12cn4nGu7LHYijXfNTlaMvzUKey5+E3y0fvKj/X8kTBtJwvVsszPY4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJoOdHj/f+rX4V6vHQCwa/b3egUAgD2n/weA/qP/B4D+o/8HgP6j/weA/qP/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJedOnkyTWt/ra4U0/LMhaXFueqFIzOl2ly+sljMF6sL5/Oz1epsuZQvViv3+nvlavX8dMwvXpysl2r1ydrS8ulKdXG+fvpcpTBbOl0a2pOoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGB7akvLc4VyubQgIyMjs5Hp9ZkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L/h3wAAAP//HxYpBQ==") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="9febffffffff00000000169b791443ea00000000000078aceb7d3feff59ff86142d0ca281752ee1cf85e38f45b2e1ba3d843ca4b5f7b029527b03ac8dfe6ad90bf059bade713476acf855b0433edf80701ccde54206a7bdfc7f9cdf54ef30502883e81721104f68a15"], 0xffffffffffffffff, 0x1a, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 139.281089ms ago: executing program 2 (id=4209): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x20000026, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 940.991µs ago: executing program 4 (id=4210): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x757, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 0s ago: executing program 6 (id=4211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) mount$9p_virtio(0x0, 0x0, 0x0, 0x310000, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) kernel console output (not intermixed with test programs): sb 6-1: config 0 descriptor?? [ 1190.769111][ T940] usb 5-1: Using ep0 maxpacket: 16 [ 1190.809198][ T9173] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1190.819877][ T9173] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1190.832833][ T9173] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1190.840504][ T6655] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1190.842670][ T9173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.861620][ T9173] usb 3-1: config 0 descriptor?? [ 1190.879206][T13597] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1190.889133][ T940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.899835][ T940] usb 5-1: New USB device found, idVendor=05ac, idProduct=81ad, bcdDevice=49.d2 [ 1190.908893][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.917466][ T9173] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1190.918319][ T940] usb 5-1: config 0 descriptor?? [ 1191.041079][ T30] audit: type=1400 audit(1749222875.390:1224): avc: denied { read write } for pid=13573 comm="syz.0.3528" name="lp0" dev="devtmpfs" ino=3203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1191.059062][ C0] usblp0: nonzero read bulk status received: -71 [ 1191.065105][ T30] audit: type=1400 audit(1749222875.390:1225): avc: denied { open } for pid=13573 comm="syz.0.3528" path="/dev/usb/lp0" dev="devtmpfs" ino=3203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1191.096899][T13574] usblp0: error -71 reading from printer [ 1191.119588][ T9173] usb 1-1: USB disconnect, device number 14 [ 1191.128354][ T9173] usblp0: removed [ 1191.171819][ T30] audit: type=1400 audit(1749222875.520:1226): avc: denied { bind } for pid=13598 comm="syz.4.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1191.172491][ T681] usb 5-1: USB disconnect, device number 11 [ 1191.288371][ T940] usb 2-1: USB disconnect, device number 23 [ 1191.822346][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1191.822368][ T30] audit: type=1400 audit(1749222876.140:1228): avc: denied { create } for pid=13630 comm="syz.0.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1191.848648][ T940] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1194.417155][ T9173] usb 6-1: USB disconnect, device number 4 [ 1194.428607][ T30] audit: type=1400 audit(1749222877.070:1229): avc: denied { mount } for pid=13630 comm="syz.0.3553" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1194.479723][ T6655] usb 3-1: USB disconnect, device number 23 [ 1194.483527][T13644] xt_CT: No such helper "netbios-ns" [ 1194.501751][T13646] loop2: detected capacity change from 0 to 256 [ 1194.515408][T13646] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1194.516334][ T30] audit: type=1400 audit(1749222878.861:1230): avc: denied { write } for pid=13638 comm="syz.0.3554" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1194.587932][T13646] exFAT-fs (loop2): hint_cluster is invalid (17) [ 1194.600044][T13646] exFAT-fs (loop2): error, broken FAT chain. [ 1194.606505][T13646] exFAT-fs (loop2): Filesystem has been set read-only [ 1194.613421][T13646] exFAT-fs (loop2): error, failed to bmap (inode : ffff8881133980d0 iblock : 13, err : -5) [ 1194.675824][ T30] audit: type=1400 audit(1749222879.021:1231): avc: denied { sys_module } for pid=13663 comm="syz.1.3563" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1194.709934][T13662] loop2: detected capacity change from 0 to 256 [ 1194.732915][T13662] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1194.778299][ T30] audit: type=1400 audit(1749222879.121:1232): avc: denied { create } for pid=13655 comm="syz.0.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1194.886831][ T30] audit: type=1400 audit(1749222879.121:1233): avc: denied { map } for pid=13655 comm="syz.0.3561" path="socket:[53246]" dev="sockfs" ino=53246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1195.111982][ T940] usb 2-1: device not accepting address 24, error -71 [ 1195.151190][ T30] audit: type=1400 audit(1749222879.121:1234): avc: denied { read } for pid=13655 comm="syz.0.3561" path="socket:[53246]" dev="sockfs" ino=53246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1195.564137][ T30] audit: type=1400 audit(1749222879.121:1235): avc: denied { connect } for pid=13655 comm="syz.0.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1195.594647][ T30] audit: type=1400 audit(1749222879.121:1236): avc: denied { write } for pid=13655 comm="syz.0.3561" path="socket:[53244]" dev="sockfs" ino=53244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1195.669131][ T30] audit: type=1400 audit(1749222880.021:1237): avc: denied { mount } for pid=13686 comm="syz.5.3572" name="/" dev="ramfs" ino=54073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1195.918799][ T681] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1195.945888][T13694] loop1: detected capacity change from 0 to 256 [ 1195.980065][T13694] FAT-fs (loop1): Directory bread(block 64) failed [ 1195.999238][T13694] FAT-fs (loop1): Directory bread(block 65) failed [ 1196.007609][T13694] FAT-fs (loop1): Directory bread(block 66) failed [ 1196.014289][T13694] FAT-fs (loop1): Directory bread(block 67) failed [ 1196.022163][T13694] FAT-fs (loop1): Directory bread(block 68) failed [ 1196.029418][T13694] FAT-fs (loop1): Directory bread(block 69) failed [ 1196.043573][T13694] FAT-fs (loop1): Directory bread(block 70) failed [ 1196.050312][T13694] FAT-fs (loop1): Directory bread(block 71) failed [ 1196.058053][T13694] FAT-fs (loop1): Directory bread(block 72) failed [ 1196.072351][T13694] FAT-fs (loop1): Directory bread(block 73) failed [ 1196.176412][T13701] loop5: detected capacity change from 0 to 128 [ 1196.208771][ T681] usb 1-1: Using ep0 maxpacket: 8 [ 1196.210396][T13701] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1196.220846][T13701] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1196.369333][ T681] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.397104][ T681] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1196.422091][T13698] loop2: detected capacity change from 0 to 40427 [ 1196.429133][ T681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.481757][T13698] F2FS-fs (loop2): fault_injection options not supported [ 1196.496828][T13698] F2FS-fs (loop2): fault_type options not supported [ 1196.505008][T13701] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 1196.505940][T13698] F2FS-fs (loop2): invalid crc value [ 1196.521647][ T681] usb 1-1: config 0 descriptor?? [ 1196.530792][T13701] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1196.538215][T13698] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1196.566010][T13701] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1196.619766][T13698] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1196.662081][T13698] attempt to access beyond end of device [ 1196.662081][T13698] loop2: rw=16812033, want=79872, limit=40427 [ 1196.685846][T12697] attempt to access beyond end of device [ 1196.685846][T12697] loop2: rw=2049, want=45104, limit=40427 [ 1196.947714][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1196.948000][ T30] audit: type=1400 audit(1749222881.291:1242): avc: denied { create } for pid=13700 comm="syz.5.3576" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1197.184947][T13719] usb usb7: usbfs: process 13719 (syz.1.3582) did not claim interface 0 before use [ 1197.306972][T13723] usb usb8: usbfs: process 13723 (syz.5.3584) did not claim interface 0 before use [ 1197.366046][T13727] device gre1 entered promiscuous mode [ 1197.439834][T13730] loop1: detected capacity change from 0 to 4096 [ 1197.459601][ T30] audit: type=1400 audit(1749222881.811:1243): avc: denied { write } for pid=13731 comm="syz.5.3588" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1197.524587][T13736] loop5: detected capacity change from 0 to 256 [ 1197.574062][T13730] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_batch_time=0x0000000000000007,delalloc,,errors=continue. Quota mode: writeback. [ 1197.599359][T13736] exfat: Deprecated parameter 'namecase' [ 1197.612239][T13736] exfat: Unknown parameter 'sys_tz' [ 1197.635174][ T30] audit: type=1400 audit(1749222881.981:1244): avc: denied { remove_name } for pid=12187 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1197.668958][T12187] Quota error (device loop1): find_tree_dqentry: Getting block too big (7 >= 6) [ 1197.675003][ T30] audit: type=1400 audit(1749222881.981:1245): avc: denied { rmdir } for pid=12187 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1197.700949][T12187] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1197.710646][T12187] EXT4-fs error (device loop1): ext4_acquire_dquot:6195: comm syz-executor: Failed to acquire dquot type 1 [ 1197.779341][T13750] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3595'. [ 1198.083878][ T30] audit: type=1400 audit(1749222882.381:1246): avc: denied { mount } for pid=13756 comm="syz.4.3599" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1198.155009][ T6655] usb 1-1: USB disconnect, device number 15 [ 1198.451464][ T302] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1198.499126][T13759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.546355][T13759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.642411][T13759] device bridge_slave_0 entered promiscuous mode [ 1198.738747][ T302] usb 3-1: Using ep0 maxpacket: 16 [ 1198.776582][T13759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.808843][T13759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.825744][T13759] device bridge_slave_1 entered promiscuous mode [ 1198.878755][ T302] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1198.901721][ T302] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1198.945755][T13763] loop4: detected capacity change from 0 to 40427 [ 1198.972802][T13772] loop5: detected capacity change from 0 to 128 [ 1198.991889][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1199.002465][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1199.011742][T13772] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1199.024849][T13772] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1199.035845][ T44] device bridge_slave_1 left promiscuous mode [ 1199.042998][T13763] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1199.049816][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.095160][T13763] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 1199.102735][ T44] device bridge_slave_0 left promiscuous mode [ 1199.108943][T13763] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1199.194036][ T302] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1199.203156][ T302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.211273][ T302] usb 3-1: Product: syz [ 1199.213839][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.215564][ T302] usb 3-1: Manufacturer: syz [ 1199.215583][ T302] usb 3-1: SerialNumber: syz [ 1199.239249][ T44] device veth1_macvtap left promiscuous mode [ 1200.581323][ T44] device veth0_vlan left promiscuous mode [ 1200.604563][ T8] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1200.758141][T13789] loop2: detected capacity change from 0 to 128 [ 1200.798170][T13789] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1200.852190][ T30] audit: type=1400 audit(1749222885.201:1247): avc: denied { bind } for pid=13798 comm="syz.4.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1200.888625][ T302] usb 3-1: 0:2 : does not exist [ 1200.889053][T13789] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1200.904680][T13789] ext2 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.939718][ T302] usb 3-1: USB disconnect, device number 24 [ 1200.963478][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1200.985658][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1200.995613][ T4786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.003668][ T4786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.217960][ T681] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 1201.242010][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1201.252388][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1201.262220][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1201.274109][ T4786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.281212][ T4786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.308499][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1201.318879][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1201.329541][T10731] udevd[10731]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1201.337354][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1201.360000][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1201.386940][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1201.396140][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1201.419866][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1201.430688][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1201.445401][T13759] device veth0_vlan entered promiscuous mode [ 1201.453445][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1201.464698][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1201.500071][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1201.510705][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1201.530689][T13759] device veth1_macvtap entered promiscuous mode [ 1201.559417][T13783] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1201.568903][T13783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1201.579076][T13783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1201.598904][T13783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1201.608166][T13783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1201.608619][ T681] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.626882][ T681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 32200, setting to 8 [ 1202.014290][ T681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1202.025995][ T681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1202.036057][ T681] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1202.064090][ T681] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 1202.079562][ T681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.093580][T13825] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3619'. [ 1202.103304][T13825] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1202.146897][T13829] overlayfs: missing 'workdir' [ 1202.164731][ T681] usb 6-1: config 0 descriptor?? [ 1202.185334][T13832] loop6: detected capacity change from 0 to 128 [ 1202.192086][T13795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1202.212588][T13832] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1202.453888][T13832] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1202.704986][ T39] usb 6-1: USB disconnect, device number 5 [ 1202.757943][T13832] fscrypt: loop6: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1202.917797][ T30] audit: type=1400 audit(1749222887.261:1248): avc: denied { getopt } for pid=13840 comm="syz.6.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1202.928449][ T940] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1203.178371][ T940] usb 3-1: Using ep0 maxpacket: 16 [ 1203.507053][ T3090] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1203.514755][ T329] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1203.598451][ T940] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.608663][ T940] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1203.758402][ T3090] usb 7-1: Using ep0 maxpacket: 16 [ 1203.768566][ T940] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1203.777870][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.786071][ T940] usb 3-1: Product: syz [ 1203.790660][ T940] usb 3-1: Manufacturer: syz [ 1203.795839][ T940] usb 3-1: SerialNumber: syz [ 1203.818528][ T6] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1203.938431][ T329] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1203.946030][ T329] usb 5-1: can't read configurations, error -71 [ 1203.990084][ T30] audit: type=1400 audit(1749222888.341:1249): avc: denied { create } for pid=13874 comm="syz.0.3641" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1204.010982][ T30] audit: type=1400 audit(1749222888.341:1250): avc: denied { mounton } for pid=13874 comm="syz.0.3641" path="/205/file0" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1204.048534][ T3090] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1204.057591][ T3090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.065609][ T3090] usb 7-1: Product: syz [ 1204.069880][ T3090] usb 7-1: Manufacturer: syz [ 1204.074467][ T3090] usb 7-1: SerialNumber: syz [ 1204.079133][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 1204.085345][ T3090] usb 7-1: config 0 descriptor?? [ 1204.129051][ T3090] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 1204.198420][ T6] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1204.245841][ T30] audit: type=1400 audit(1749222888.591:1251): avc: denied { unlink } for pid=10465 comm="syz-executor" name="file0" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1204.288520][ T940] usb 3-1: cannot find UAC_HEADER [ 1204.293731][ T940] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1204.307194][ T940] usb 3-1: USB disconnect, device number 25 [ 1204.337142][ T3090] usb 7-1: USB disconnect, device number 2 [ 1204.351484][T13889] loop4: detected capacity change from 0 to 128 [ 1204.373424][T13889] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1204.384189][T13889] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1204.394734][ T6] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1204.403942][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.412209][ T6] usb 6-1: Product: syz [ 1204.416392][ T6] usb 6-1: Manufacturer: syz [ 1204.421170][ T6] usb 6-1: SerialNumber: syz [ 1204.426650][ T6] usb 6-1: config 0 descriptor?? [ 1204.457227][T13893] loop4: detected capacity change from 0 to 256 [ 1204.524651][T13893] FAT-fs (loop4): Directory bread(block 64) failed [ 1204.531420][T13893] FAT-fs (loop4): Directory bread(block 65) failed [ 1204.538171][T13893] FAT-fs (loop4): Directory bread(block 66) failed [ 1204.545150][T13893] FAT-fs (loop4): Directory bread(block 67) failed [ 1204.552110][T13893] FAT-fs (loop4): Directory bread(block 68) failed [ 1204.559025][T13893] FAT-fs (loop4): Directory bread(block 69) failed [ 1204.566036][T13893] FAT-fs (loop4): Directory bread(block 70) failed [ 1204.572633][T13893] FAT-fs (loop4): Directory bread(block 71) failed [ 1204.579294][T13893] FAT-fs (loop4): Directory bread(block 72) failed [ 1204.585987][T13893] FAT-fs (loop4): Directory bread(block 73) failed [ 1205.938323][ T329] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1205.938387][ T6] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1205.938437][ T3090] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1206.198288][ T3090] usb 1-1: Using ep0 maxpacket: 8 [ 1206.203806][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 1206.328345][ T6] usb 3-1: config 0 has no interfaces? [ 1206.358383][ T329] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1206.398675][ T329] usb 5-1: not running at top speed; connect to a high speed hub [ 1206.478354][ T3090] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1206.487915][ T329] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1206.494930][ T6] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1206.504257][ T3090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.512408][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.520802][ T3090] usb 1-1: Product: syz [ 1206.525238][ T6] usb 3-1: Product: syz [ 1206.529554][ T3090] usb 1-1: Manufacturer: syz [ 1206.534279][ T6] usb 3-1: Manufacturer: syz [ 1206.539026][ T3090] usb 1-1: SerialNumber: syz [ 1206.543696][ T6] usb 3-1: SerialNumber: syz [ 1206.567003][ T3090] usb 1-1: config 0 descriptor?? [ 1206.571082][ T681] usb 6-1: USB disconnect, device number 6 [ 1206.600526][ T6] usb 3-1: config 0 descriptor?? [ 1206.702062][ T329] usb 5-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 1206.714611][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.722714][ T329] usb 5-1: Product: syz [ 1206.726991][ T329] usb 5-1: Manufacturer: syz [ 1206.731639][ T329] usb 5-1: SerialNumber: syz [ 1207.108128][T13937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1207.261207][ T681] usb 3-1: USB disconnect, device number 26 [ 1207.471159][ T329] usb 5-1: USB disconnect, device number 14 [ 1207.550037][T13943] loop5: detected capacity change from 0 to 128 [ 1207.637553][ T30] audit: type=1400 audit(1749222891.981:1252): avc: denied { ioctl } for pid=13946 comm="syz.6.3666" path="socket:[55582]" dev="sockfs" ino=55582 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1208.145833][ T3090] usb 1-1: USB disconnect, device number 16 [ 1208.198125][ T602] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1209.251370][T13976] loop5: detected capacity change from 0 to 256 [ 1209.341877][T13976] exfat: Deprecated parameter 'utf8' [ 1209.358773][T13976] exfat: Deprecated parameter 'namecase' [ 1209.372034][T13976] exfat: Unknown parameter 'keep_last_dots' [ 1209.398260][T13982] loop2: detected capacity change from 0 to 128 [ 1209.412564][T13982] EXT4-fs (loop2): Ignoring removed nobh option [ 1209.424347][T13982] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 1209.444829][T13982] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1209.448432][ T602] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1209.464139][T13988] 8021q: VLANs not supported on gre0 [ 1209.475836][ T602] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.486095][ T602] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1209.495417][ T602] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.504618][T13991] loop5: detected capacity change from 0 to 512 [ 1209.571536][T13991] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1209.587458][T13991] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1209.601027][T14001] loop2: detected capacity change from 0 to 512 [ 1209.619761][T13991] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.3683: bad orphan inode 131083 [ 1209.630574][ T602] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1209.640006][ T602] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1209.649089][ T602] usb 7-1: Product: syz [ 1209.653274][ T602] usb 7-1: Manufacturer: syz [ 1209.662929][T13991] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1209.688743][T14001] EXT4-fs (loop2): Ignoring removed nobh option [ 1209.695069][T14001] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1209.715966][ T30] audit: type=1400 audit(1749222894.061:1253): avc: denied { mounton } for pid=13989 comm="syz.5.3683" path="/48/bus/bus/bus" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1209.717262][ T602] cdc_wdm 7-1:1.0: skipping garbage [ 1209.752734][T13991] overlayfs: upper fs needs to support d_type. [ 1209.887770][T14001] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3685: invalid indirect mapped block 256 (level 2) [ 1209.906069][T14001] EXT4-fs (loop2): 2 truncates cleaned up [ 1210.023692][T14001] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 1210.029090][ T602] cdc_wdm 7-1:1.0: skipping garbage [ 1210.052234][ T30] audit: type=1400 audit(1749222894.101:1254): avc: denied { setattr } for pid=13989 comm="syz.5.3683" name="work" dev="loop5" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1210.054268][ T602] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1210.081514][T13265] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /48/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1210.084758][ T602] usb 7-1: USB disconnect, device number 3 [ 1210.110483][ T30] audit: type=1400 audit(1749222894.261:1255): avc: denied { remove_name } for pid=13989 comm="syz.5.3683" name="#54" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1210.141642][ T30] audit: type=1400 audit(1749222894.271:1256): avc: denied { rename } for pid=13989 comm="syz.5.3683" name="#54" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1210.163885][ T30] audit: type=1400 audit(1749222894.271:1257): avc: denied { unlink } for pid=13989 comm="syz.5.3683" name="#54" dev="loop5" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1210.192416][ T30] audit: type=1400 audit(1749222894.271:1258): avc: denied { unlink } for pid=13989 comm="syz.5.3683" name="#55" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1210.550242][T14017] loop2: detected capacity change from 0 to 40427 [ 1210.564997][T14022] loop4: detected capacity change from 0 to 1024 [ 1210.588676][ T30] audit: type=1400 audit(1749222894.941:1259): avc: denied { mounton } for pid=14016 comm="syz.2.3696" path="/72/bus" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1210.624791][T14017] F2FS-fs (loop2): invalid crc value [ 1210.640675][T14017] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1210.681384][T14022] EXT4-fs (loop4): Ignoring removed oldalloc option [ 1210.705348][T14017] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1210.721256][T14022] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000009,norecovery,debug_want_extra_isize=0x0000000000000080,oldalloc,nodelalloc,usrquota,auto_da_alloc=0x0000000000000053,,errors=continue. Quota mode: writeback. [ 1210.830772][ T30] audit: type=1400 audit(1749222895.171:1260): avc: denied { setopt } for pid=14034 comm="syz.0.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1210.851488][ T30] audit: type=1400 audit(1749222895.171:1261): avc: denied { bind } for pid=14034 comm="syz.0.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1211.178000][ T39] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1211.242207][T14021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.249608][T14021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.257455][T14021] device bridge_slave_0 entered promiscuous mode [ 1211.273780][T14021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.287208][T14021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.294999][T14021] device bridge_slave_1 entered promiscuous mode [ 1211.463792][ T30] audit: type=1400 audit(1749222895.812:1262): avc: denied { append } for pid=14045 comm="syz.4.3705" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1212.329955][T14021] device veth0_vlan entered promiscuous mode [ 1212.360703][T14021] device veth1_macvtap entered promiscuous mode [ 1212.389114][ T4786] device bridge_slave_1 left promiscuous mode [ 1212.396778][ T4786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.404784][ T4786] device bridge_slave_0 left promiscuous mode [ 1212.411088][ T4786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.417838][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 1212.426661][ T4786] device veth1_macvtap left promiscuous mode [ 1212.432759][ T4786] device veth0_vlan left promiscuous mode [ 1212.521599][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1212.530268][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1212.538635][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.539538][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1212.549005][ T39] usb 1-1: config 0 has no interfaces? [ 1212.557648][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1212.570520][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1212.579143][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1212.587328][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1212.594605][ T602] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1212.602421][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1212.610164][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1212.618631][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1212.626161][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1212.633909][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1212.642351][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1212.650876][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.657953][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.665359][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1212.673840][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1212.682083][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.689244][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.696661][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1212.748013][ T39] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1212.761668][T14069] loop7: detected capacity change from 0 to 2048 [ 1212.763383][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.776494][ T39] usb 1-1: Product: syz [ 1212.781102][ T39] usb 1-1: Manufacturer: syz [ 1212.785976][ T39] usb 1-1: SerialNumber: syz [ 1212.796206][ T39] usb 1-1: config 0 descriptor?? [ 1212.801915][T14069] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,noload,grpquota,errors=remount-ro,. Quota mode: writeback. [ 1212.821203][T14069] EXT4-fs error (device loop7): ext4_find_extent:929: inode #2: comm syz.7.3712: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1212.851498][T14069] EXT4-fs (loop7): Remounting filesystem read-only [ 1212.897851][ T602] usb 7-1: Using ep0 maxpacket: 8 [ 1213.018025][ T602] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1213.029800][ T602] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1213.041590][ T602] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1213.128044][ T602] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1213.139591][ T602] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1213.151945][ T602] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1213.184123][T14080] loop7: detected capacity change from 0 to 256 [ 1213.215401][T14080] exfat: Unknown parameter 'sys_tz' [ 1213.238005][ T602] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1213.278041][ T602] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1213.291076][ T602] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1213.682757][T14093] loop7: detected capacity change from 0 to 2048 [ 1213.733817][T14093] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1213.764637][ T602] usb 7-1: string descriptor 0 read error: -22 [ 1213.770927][ T602] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1213.781281][T14098] loop2: detected capacity change from 0 to 128 [ 1213.788347][ T602] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.859610][T14092] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3722: bg 0: block 234: padding at end of block bitmap is not set [ 1214.052664][ T602] usb 7-1: USB disconnect, device number 4 [ 1214.077786][ T329] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1214.494552][ T340] usb 1-1: USB disconnect, device number 17 [ 1214.697779][ T39] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1214.833681][T14273] loop7: detected capacity change from 0 to 512 [ 1214.852232][T14273] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1214.867368][T14273] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1214.937699][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 1215.068387][ T329] usb 5-1: config 0 has an invalid interface number: 163 but max is 0 [ 1215.076838][ T329] usb 5-1: config 0 has no interface number 0 [ 1215.083314][ T329] usb 5-1: config 0 interface 163 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 1215.087766][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.096925][ T329] usb 5-1: config 0 interface 163 has no altsetting 0 [ 1215.110834][ T39] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1215.117940][ T602] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1215.127243][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.150893][ T329] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1215.156401][ T39] usb 3-1: config 0 descriptor?? [ 1215.160333][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.187497][ T329] usb 5-1: config 0 descriptor?? [ 1215.407778][ T602] usb 7-1: Using ep0 maxpacket: 16 [ 1215.477772][ T329] usb 5-1: string descriptor 0 read error: -71 [ 1215.487791][ T329] usb 5-1: USB disconnect, device number 15 [ 1215.803786][ T602] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1215.831976][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3737'. [ 1215.854902][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1215.854922][ T30] audit: type=1326 audit(1749222900.192:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14290 comm="syz.7.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0e6b7929 code=0x7ffc0000 [ 1215.886354][ T30] audit: type=1326 audit(1749222900.192:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14290 comm="syz.7.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0e6b7929 code=0x7ffc0000 [ 1215.911106][ T30] audit: type=1326 audit(1749222900.192:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14290 comm="syz.7.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9c0e6b7929 code=0x7ffc0000 [ 1215.934955][ T30] audit: type=1326 audit(1749222900.192:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14290 comm="syz.7.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0e6b7929 code=0x7ffc0000 [ 1215.958866][ T30] audit: type=1326 audit(1749222900.192:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14290 comm="syz.7.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0e6b7929 code=0x7ffc0000 [ 1216.027782][ T602] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1216.036949][ T602] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.045028][ T602] usb 7-1: Product: syz [ 1216.049273][ T602] usb 7-1: Manufacturer: syz [ 1216.053892][ T602] usb 7-1: SerialNumber: syz [ 1216.059528][ T602] usb 7-1: config 0 descriptor?? [ 1216.825052][T14315] loop4: detected capacity change from 0 to 256 [ 1216.883511][T14315] FAT-fs (loop4): Directory bread(block 64) failed [ 1216.890195][T14315] FAT-fs (loop4): Directory bread(block 65) failed [ 1216.896821][T14315] FAT-fs (loop4): Directory bread(block 66) failed [ 1216.903478][T14315] FAT-fs (loop4): Directory bread(block 67) failed [ 1216.907742][ T340] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1216.910208][T14315] FAT-fs (loop4): Directory bread(block 68) failed [ 1216.925308][T14315] FAT-fs (loop4): Directory bread(block 69) failed [ 1216.932271][T14315] FAT-fs (loop4): Directory bread(block 70) failed [ 1216.939300][T14315] FAT-fs (loop4): Directory bread(block 71) failed [ 1216.946178][T14315] FAT-fs (loop4): Directory bread(block 72) failed [ 1216.954093][T14315] FAT-fs (loop4): Directory bread(block 73) failed [ 1217.029638][ T30] audit: type=1400 audit(1749222901.372:1270): avc: denied { write } for pid=14317 comm="syz.2.3749" name="file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1217.052581][ T30] audit: type=1400 audit(1749222901.392:1271): avc: denied { open } for pid=14317 comm="syz.2.3749" path="/80/file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1217.081566][T14320] loop7: detected capacity change from 0 to 512 [ 1217.091783][ T30] audit: type=1400 audit(1749222901.392:1272): avc: denied { ioctl } for pid=14317 comm="syz.2.3749" path="/80/file0" dev="tmpfs" ino=449 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1217.114055][T14320] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1217.116404][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 1217.133511][T14320] EXT4-fs (loop7): group descriptors corrupted! [ 1217.138942][ T39] usbhid: probe of 3-1:0.0 failed with error -71 [ 1217.158860][ T39] usb 3-1: USB disconnect, device number 27 [ 1217.387978][ T340] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1217.397366][ T340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.402267][T14330] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3753'. [ 1217.414335][ T340] usb 1-1: config 0 descriptor?? [ 1217.509289][T14334] loop4: detected capacity change from 0 to 1024 [ 1217.643524][T14334] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1217.679166][ T30] audit: type=1400 audit(1749222902.022:1273): avc: denied { setattr } for pid=14333 comm="syz.4.3755" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1217.702102][ T30] audit: type=1400 audit(1749222902.032:1274): avc: denied { rename } for pid=14333 comm="syz.4.3755" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1217.824751][ T39] usb 7-1: USB disconnect, device number 5 [ 1218.464830][ T681] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1218.847629][ T39] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1218.897920][ T681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.959973][ T681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.975942][ T681] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1218.985592][ T681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.999110][ T681] usb 5-1: config 0 descriptor?? [ 1219.287570][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1219.367549][ T39] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 1219.375974][ T39] usb 3-1: config 6 has no interface number 0 [ 1219.382175][ T39] usb 3-1: config 6 interface 200 has no altsetting 0 [ 1219.458543][ T681] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1219.472002][ T681] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1219.499674][T14382] loop7: detected capacity change from 0 to 512 [ 1219.546587][T14383] loop6: detected capacity change from 0 to 2048 [ 1219.567578][ T39] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1219.576718][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.584791][ T39] usb 3-1: Product: syz [ 1219.589269][ T39] usb 3-1: Manufacturer: syz [ 1219.594315][ T39] usb 3-1: SerialNumber: syz [ 1219.594384][T14382] EXT4-fs (loop7): Ignoring removed nobh option [ 1219.612693][ T302] usb 1-1: USB disconnect, device number 18 [ 1219.636625][T14382] EXT4-fs error (device loop7): ext4_do_update_inode:5234: inode #16: comm syz.7.3771: corrupted inode contents [ 1219.650067][T14383] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1219.650992][T14382] EXT4-fs (loop7): Remounting filesystem read-only [ 1219.673679][T14382] EXT4-fs error (device loop7): ext4_dirty_inode:6070: inode #16: comm syz.7.3771: mark_inode_dirty error [ 1219.677511][ T681] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 1219.690068][T14382] EXT4-fs (loop7): Remounting filesystem read-only [ 1219.699824][T14382] EXT4-fs error (device loop7): ext4_do_update_inode:5234: inode #16: comm syz.7.3771: corrupted inode contents [ 1219.712004][T14382] EXT4-fs (loop7): Remounting filesystem read-only [ 1219.718822][T14382] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.3771: mark_inode_dirty error [ 1219.730327][T14382] EXT4-fs (loop7): Remounting filesystem read-only [ 1219.736871][T14382] EXT4-fs error (device loop7): ext4_do_update_inode:5234: inode #16: comm syz.7.3771: corrupted inode contents [ 1219.749149][T14382] EXT4-fs (loop7): Remounting filesystem read-only [ 1219.755773][T14382] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 1219.764627][T14382] EXT4-fs (loop7): Remounting filesystem read-only [ 1219.771313][T14382] EXT4-fs error (device loop7): ext4_do_update_inode:5234: inode #16: comm syz.7.3771: corrupted inode contents [ 1219.783601][T14382] EXT4-fs (loop7): Remounting filesystem read-only [ 1219.790539][T14382] EXT4-fs error (device loop7): ext4_truncate:4304: inode #16: comm syz.7.3771: mark_inode_dirty error [ 1219.807515][T14382] EXT4-fs (loop7): Remounting filesystem read-only [ 1219.814494][T14382] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 1219.823781][T14382] EXT4-fs (loop7): Remounting filesystem read-only [ 1219.831365][T14382] EXT4-fs (loop7): 1 truncate cleaned up [ 1219.837084][T14382] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 1219.849476][T14382] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.897522][ T681] cp2112 0003:10C4:EA90.0011: error requesting SMBus config [ 1219.909963][ T681] cp2112: probe of 0003:10C4:EA90.0011 failed with error -71 [ 1219.920731][ T681] usb 5-1: USB disconnect, device number 16 [ 1219.943645][T14396] fido_id[14396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1220.212605][T14408] loop7: detected capacity change from 0 to 40427 [ 1220.239970][T14408] F2FS-fs (loop7): invalid crc value [ 1220.258377][T14408] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1220.340713][T14408] F2FS-fs (loop7): Start checkpoint disabled! [ 1220.348014][T14408] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1220.427679][T14417] netlink: 'syz.4.3784': attribute type 3 has an invalid length. [ 1220.585371][T14423] loop4: detected capacity change from 0 to 512 [ 1221.924761][T14423] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1221.934416][T14423] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3784: bg 0: block 248: padding at end of block bitmap is not set [ 1221.950798][T14423] __quota_error: 5 callbacks suppressed [ 1221.950827][T14423] Quota error (device loop4): write_blk: dquota write failed [ 1221.964006][T14423] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1221.974126][T14423] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.3784: Failed to acquire dquot type 1 [ 1221.988164][T14423] EXT4-fs (loop4): 1 truncate cleaned up [ 1221.996015][T14423] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1222.280230][ T329] usb 3-1: USB disconnect, device number 28 [ 1222.301851][T14430] loop7: detected capacity change from 0 to 1024 [ 1222.350703][T14431] loop6: detected capacity change from 0 to 2048 [ 1222.408483][T14430] EXT4-fs error (device loop7): ext4_fill_super:4832: inode #2: comm syz.7.3787: casefold flag without casefold feature [ 1222.432009][T14430] EXT4-fs (loop7): get root inode failed [ 1222.441868][T14430] EXT4-fs (loop7): mount failed [ 1222.475577][T14431] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.3786: bad orphan inode 8192 [ 1222.506618][T14431] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1222.736584][T14447] syz.6.3786[14447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1222.736673][T14447] syz.6.3786[14447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1223.015965][T14452] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3790'. [ 1223.465613][T14458] loop4: detected capacity change from 0 to 1024 [ 1223.548086][T14458] EXT4-fs error (device loop4): ext4_fill_super:4832: inode #2: comm syz.4.3804: casefold flag without casefold feature [ 1223.561138][T14458] EXT4-fs (loop4): get root inode failed [ 1223.566839][T14458] EXT4-fs (loop4): mount failed [ 1223.717234][ T329] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1223.727346][ T6] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1224.257372][ T6] usb 1-1: config 0 has an invalid interface number: 163 but max is 0 [ 1224.257480][ T329] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.276904][ T329] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.345117][T14477] loop6: detected capacity change from 0 to 512 [ 1224.371675][T14477] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1224.380278][T14477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 1224.389377][T14477] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1224.396440][T14477] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 1224.407077][T14477] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 1224.417861][T14477] EXT4-fs (loop6): 1 truncate cleaned up [ 1224.423565][T14477] EXT4-fs (loop6): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 1224.448144][ T329] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1224.459901][ T329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.468225][T14477] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.3800: dx entry: limit 65535 != root limit 120 [ 1224.469331][T14480] netlink: 'syz.4.3801': attribute type 3 has an invalid length. [ 1224.481075][T14477] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3800: Corrupt directory, running e2fsck is recommended [ 1224.496338][ T6] usb 1-1: config 0 has no interface number 0 [ 1224.518106][ T329] usb 8-1: config 0 descriptor?? [ 1224.523455][ T6] usb 1-1: config 0 interface 163 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 1224.536948][ T6] usb 1-1: config 0 interface 163 has no altsetting 0 [ 1224.543930][ T6] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1224.553421][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.568765][ T6] usb 1-1: config 0 descriptor?? [ 1224.624613][T14482] loop4: detected capacity change from 0 to 512 [ 1224.870134][ T6] usb 1-1: string descriptor 0 read error: -71 [ 1225.386484][T14482] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1225.842435][ T329] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1225.866694][T14482] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3801: bg 0: block 248: padding at end of block bitmap is not set [ 1225.899947][T14482] Quota error (device loop4): write_blk: dquota write failed [ 1225.907876][T14482] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1225.918028][T14482] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.3801: Failed to acquire dquot type 1 [ 1225.933873][T14482] EXT4-fs (loop4): 1 truncate cleaned up [ 1226.000613][ T6] usb 1-1: USB disconnect, device number 19 [ 1226.021436][ T329] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1226.137874][T14491] loop2: detected capacity change from 0 to 512 [ 1226.202334][T14494] netlink: 'syz.0.3806': attribute type 3 has an invalid length. [ 1226.249189][T14482] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1226.867367][ T329] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 1227.277069][ T329] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 1227.301552][T14501] loop6: detected capacity change from 0 to 2048 [ 1227.314406][ T329] cp2112: probe of 0003:10C4:EA90.0012 failed with error -71 [ 1227.335398][T10681] udevd[10681]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.163/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1227.394603][ T329] usb 8-1: USB disconnect, device number 2 [ 1227.463401][T14501] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.3807: bad orphan inode 8192 [ 1227.532414][T14510] loop2: detected capacity change from 0 to 256 [ 1227.544488][T14505] fido_id[14505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1227.569365][T14501] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1227.604859][T14510] FAT-fs (loop2): Directory bread(block 64) failed [ 1227.619298][T14510] FAT-fs (loop2): Directory bread(block 65) failed [ 1227.625939][T14510] FAT-fs (loop2): Directory bread(block 66) failed [ 1227.632627][T14510] FAT-fs (loop2): Directory bread(block 67) failed [ 1227.639332][T14510] FAT-fs (loop2): Directory bread(block 68) failed [ 1227.646164][T14510] FAT-fs (loop2): Directory bread(block 69) failed [ 1227.687386][T14510] FAT-fs (loop2): Directory bread(block 70) failed [ 1227.706849][T14510] FAT-fs (loop2): Directory bread(block 71) failed [ 1227.717122][T14510] FAT-fs (loop2): Directory bread(block 72) failed [ 1227.759655][T14510] FAT-fs (loop2): Directory bread(block 73) failed [ 1227.855962][T14524] syz.6.3807[14524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1227.856053][T14524] syz.6.3807[14524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1228.881415][T14538] loop7: detected capacity change from 0 to 512 [ 1228.907178][ T681] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1228.907919][T14539] loop4: detected capacity change from 0 to 2048 [ 1228.936595][T14538] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.3819: casefold flag without casefold feature [ 1228.950508][T14538] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.3819: couldn't read orphan inode 15 (err -117) [ 1228.963055][T14538] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1228.983244][T14541] loop6: detected capacity change from 0 to 1024 [ 1228.994693][T14539] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.3818: bad orphan inode 8192 [ 1229.058986][T14539] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1229.112029][T14541] EXT4-fs error (device loop6): ext4_fill_super:4832: inode #2: comm syz.6.3820: casefold flag without casefold feature [ 1229.125140][T14541] EXT4-fs (loop6): get root inode failed [ 1230.175437][T14553] syz.4.3818[14553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1230.175524][T14553] syz.4.3818[14553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1230.337574][T14541] EXT4-fs (loop6): mount failed [ 1230.626852][ T6] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1230.772724][T14557] netlink: 'syz.7.3824': attribute type 3 has an invalid length. [ 1230.793002][T14561] loop4: detected capacity change from 0 to 256 [ 1230.912914][T14564] loop7: detected capacity change from 0 to 512 [ 1230.929979][T14561] FAT-fs (loop4): Directory bread(block 64) failed [ 1230.946640][T14561] FAT-fs (loop4): Directory bread(block 65) failed [ 1230.955537][T14561] FAT-fs (loop4): Directory bread(block 66) failed [ 1232.101184][T14561] FAT-fs (loop4): Directory bread(block 67) failed [ 1232.128613][T14564] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1232.139475][T14564] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3824: bg 0: block 248: padding at end of block bitmap is not set [ 1232.154531][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.166868][T14564] Quota error (device loop7): write_blk: dquota write failed [ 1232.174776][T14564] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1232.184835][T14564] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.3824: Failed to acquire dquot type 1 [ 1232.199156][T14564] EXT4-fs (loop7): 1 truncate cleaned up [ 1232.283944][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.296616][T14561] FAT-fs (loop4): Directory bread(block 68) failed [ 1232.304173][T14561] FAT-fs (loop4): Directory bread(block 69) failed [ 1232.356579][T14570] netlink: 'syz.2.3828': attribute type 3 has an invalid length. [ 1232.440064][T14571] loop2: detected capacity change from 0 to 512 [ 1232.451671][T14561] FAT-fs (loop4): Directory bread(block 70) failed [ 1232.476233][ T6] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1232.548430][T14561] FAT-fs (loop4): Directory bread(block 71) failed [ 1232.556072][T14561] FAT-fs (loop4): Directory bread(block 72) failed [ 1232.584214][T14571] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1232.594411][T14571] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3828: bg 0: block 248: padding at end of block bitmap is not set [ 1232.611096][T14571] Quota error (device loop2): write_blk: dquota write failed [ 1232.618863][T14571] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1232.629080][T14571] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.3828: Failed to acquire dquot type 1 [ 1232.643796][T14571] EXT4-fs (loop2): 1 truncate cleaned up [ 1232.673924][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.688122][T14561] FAT-fs (loop4): Directory bread(block 73) failed [ 1232.723928][T14564] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1232.823657][T14571] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1233.000733][ T6] usb 1-1: config 0 descriptor?? [ 1233.106719][ T681] usb 3-1: unable to read config index 0 descriptor/all [ 1233.115855][ T681] usb 3-1: can't read configurations, error -71 [ 1233.178514][ T940] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1233.234190][T14580] loop2: detected capacity change from 0 to 2048 [ 1233.258624][T14580] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.3832: bad orphan inode 8192 [ 1233.269614][T14580] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1233.447944][T14587] syz.2.3832[14587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1233.448346][T14587] syz.2.3832[14587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1234.343582][ T6] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1234.674135][ T6] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1234.696624][ T681] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1234.756622][ T940] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.766845][ T940] usb 7-1: too many endpoints for config 0 interface 0 altsetting 206: 246, using maximum allowed: 30 [ 1234.819998][T14596] xt_CT: No such helper "snmp_trap" [ 1234.947080][ T6] cp2112 0003:10C4:EA90.0013: error requesting version [ 1234.954067][ T940] usb 7-1: config 0 interface 0 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1234.967986][ T6] cp2112: probe of 0003:10C4:EA90.0013 failed with error -71 [ 1234.976734][ T6] usb 1-1: USB disconnect, device number 20 [ 1234.979322][ T681] usb 5-1: Using ep0 maxpacket: 16 [ 1234.982750][ T940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1234.996344][ T940] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1235.005514][ T940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.010213][T14598] fido_id[14598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1235.014864][ T940] usb 7-1: config 0 descriptor?? [ 1235.126805][ T681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.138542][ T681] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1235.147703][ T681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.176817][ T681] usb 5-1: config 0 descriptor?? [ 1235.246592][ T940] usb 7-1: string descriptor 0 read error: -71 [ 1235.320896][ T940] usb 7-1: USB disconnect, device number 6 [ 1235.944163][T14610] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3838'. [ 1236.565664][ T940] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1237.258017][T14633] syz.0.3845[14633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1237.258442][T14633] syz.0.3845[14633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1237.316808][ T681] usbhid 5-1:0.0: can't add hid device: -71 [ 1237.342896][ T940] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1237.368008][ T681] usbhid: probe of 5-1:0.0 failed with error -71 [ 1237.386424][ T940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.394475][ T681] usb 5-1: USB disconnect, device number 17 [ 1238.328526][T14641] loop7: detected capacity change from 0 to 1024 [ 1238.376858][T14641] EXT4-fs error (device loop7): ext4_fill_super:4832: inode #2: comm syz.7.3848: casefold flag without casefold feature [ 1238.394856][T14645] loop4: detected capacity change from 0 to 1024 [ 1238.402556][T14641] EXT4-fs (loop7): get root inode failed [ 1238.419792][T14641] EXT4-fs (loop7): mount failed [ 1238.477281][ T940] usb 7-1: config 0 descriptor?? [ 1238.486594][T14647] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1238.509935][T14645] EXT4-fs error (device loop4): ext4_fill_super:4832: inode #2: comm syz.4.3849: casefold flag without casefold feature [ 1238.530729][T14645] EXT4-fs (loop4): get root inode failed [ 1238.536577][T14645] EXT4-fs (loop4): mount failed [ 1239.578564][ T681] usb 7-1: USB disconnect, device number 7 [ 1240.106478][ T681] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1240.444335][T14680] loop2: detected capacity change from 0 to 1024 [ 1240.546945][T14686] netlink: 'syz.0.3863': attribute type 3 has an invalid length. [ 1242.606162][ T681] usb 7-1: Using ep0 maxpacket: 8 [ 1242.734308][T14699] loop4: detected capacity change from 0 to 2048 [ 1243.116150][ T681] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1243.125879][ T681] usb 7-1: can't read configurations, error -71 [ 1243.149816][T14698] loop2: detected capacity change from 0 to 40427 [ 1243.172498][T14698] F2FS-fs (loop2): invalid crc value [ 1243.186576][T14699] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.3866: bad orphan inode 8192 [ 1243.202052][T14698] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1243.210801][T14699] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1243.310288][T14698] F2FS-fs (loop2): Start checkpoint disabled! [ 1243.328002][T14698] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1244.891185][T14719] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3869'. [ 1244.971150][T14722] syz.4.3866[14722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1244.972391][T14722] syz.4.3866[14722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1245.529443][ T761] attempt to access beyond end of device [ 1245.529443][ T761] loop2: rw=2049, want=45104, limit=40427 [ 1246.690586][T14738] loop4: detected capacity change from 0 to 1024 [ 1246.710793][T14739] loop6: detected capacity change from 0 to 512 [ 1248.286080][ T940] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1248.337093][T14767] loop2: detected capacity change from 0 to 1024 [ 1248.376561][T14767] EXT4-fs error (device loop2): ext4_fill_super:4832: inode #2: comm syz.2.3884: casefold flag without casefold feature [ 1248.389559][T14767] EXT4-fs (loop2): get root inode failed [ 1248.395248][T14767] EXT4-fs (loop2): mount failed [ 1248.461288][T14772] loop4: detected capacity change from 0 to 2048 [ 1248.498667][T14772] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.3885: bad orphan inode 8192 [ 1248.509420][T14772] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1248.555836][ T940] usb 1-1: Using ep0 maxpacket: 8 [ 1248.738541][T14780] syz.4.3885[14780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1248.738989][T14780] syz.4.3885[14780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1249.639143][ T940] usb 1-1: config 162 has an invalid interface number: 52 but max is 1 [ 1249.929431][ T940] usb 1-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.975715][ T940] usb 1-1: config 162 has no interface number 1 [ 1249.982052][ T940] usb 1-1: config 162 interface 52 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1250.029900][ T940] usb 1-1: config 162 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1250.065771][ T940] usb 1-1: config 162 interface 52 has no altsetting 0 [ 1250.072704][ T940] usb 1-1: config 162 interface 0 has no altsetting 0 [ 1250.221736][T14794] netlink: 'syz.2.3890': attribute type 3 has an invalid length. [ 1250.243577][T14796] loop6: detected capacity change from 0 to 1024 [ 1250.245863][ T940] usb 1-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=65.f0 [ 1250.259330][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.267544][ T940] usb 1-1: Product: syz [ 1250.271794][ T940] usb 1-1: Manufacturer: syz [ 1250.276891][ T940] usb 1-1: SerialNumber: syz [ 1250.276929][T14796] EXT4-fs (loop6): Ignoring removed orlov option [ 1250.288117][T14796] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 1250.346744][T14799] loop2: detected capacity change from 0 to 512 [ 1250.422607][T14798] xt_CT: No such helper "snmp_trap" [ 1250.565280][T14799] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1250.576863][T14799] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3890: bg 0: block 248: padding at end of block bitmap is not set [ 1250.592659][T14799] Quota error (device loop2): write_blk: dquota write failed [ 1250.600286][T14799] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1250.610357][T14799] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.3890: Failed to acquire dquot type 1 [ 1250.624343][T14799] EXT4-fs (loop2): 1 truncate cleaned up [ 1250.631084][T14799] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1250.896434][ T940] snd-usb-audio: probe of 1-1:162.0 failed with error -2 [ 1250.949207][ T940] usb 1-1: USB disconnect, device number 21 [ 1250.976440][T14796] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1251.168956][T14805] loop7: detected capacity change from 0 to 1024 [ 1251.911301][T14814] loop7: detected capacity change from 0 to 256 [ 1251.967020][T14814] FAT-fs (loop7): Directory bread(block 64) failed [ 1251.984260][T14814] FAT-fs (loop7): Directory bread(block 65) failed [ 1251.994375][T14814] FAT-fs (loop7): Directory bread(block 66) failed [ 1252.045353][T14814] FAT-fs (loop7): Directory bread(block 67) failed [ 1252.113859][T14814] FAT-fs (loop7): Directory bread(block 68) failed [ 1252.143607][T14814] FAT-fs (loop7): Directory bread(block 69) failed [ 1252.150950][T14814] FAT-fs (loop7): Directory bread(block 70) failed [ 1252.158214][T14814] FAT-fs (loop7): Directory bread(block 71) failed [ 1252.164935][T14814] FAT-fs (loop7): Directory bread(block 72) failed [ 1252.378932][T14814] FAT-fs (loop7): Directory bread(block 73) failed [ 1252.719525][T14830] netlink: 'syz.4.3900': attribute type 3 has an invalid length. [ 1252.782920][T14833] loop4: detected capacity change from 0 to 512 [ 1252.846201][T14833] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1252.853746][T14833] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3900: bg 0: block 248: padding at end of block bitmap is not set [ 1252.875808][T14833] Quota error (device loop4): write_blk: dquota write failed [ 1252.883342][T14833] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1252.893300][T14833] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.3900: Failed to acquire dquot type 1 [ 1252.906071][T14833] EXT4-fs (loop4): 1 truncate cleaned up [ 1252.911998][T14833] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1252.963395][ T39] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1253.215549][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 1253.245591][ T3090] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1253.335601][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.347407][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.357501][ T39] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1253.366613][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.375440][ T39] usb 3-1: config 0 descriptor?? [ 1253.495539][ T3090] usb 7-1: Using ep0 maxpacket: 16 [ 1253.615629][ T3090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.643663][ T3090] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1253.653374][ T3090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.666631][ T3090] usb 7-1: config 0 descriptor?? [ 1253.857616][ T39] hid-generic 0003:0C70:F014.0014: hidraw0: USB HID v0.04 Device [HID 0c70:f014] on usb-dummy_hcd.2-1/input0 [ 1254.211702][ T39] usb 3-1: USB disconnect, device number 31 [ 1254.229153][T14861] fido_id[14861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1254.253910][T14859] loop7: detected capacity change from 0 to 40427 [ 1254.285564][ T3090] usbhid 7-1:0.0: can't add hid device: -71 [ 1254.291632][ T3090] usbhid: probe of 7-1:0.0 failed with error -71 [ 1254.300432][T14859] F2FS-fs (loop7): invalid crc value [ 1254.303103][ T3090] usb 7-1: USB disconnect, device number 10 [ 1254.317875][T14859] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1254.347675][T14859] F2FS-fs (loop7): Start checkpoint disabled! [ 1254.354716][T14859] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1255.423960][T14230] attempt to access beyond end of device [ 1255.423960][T14230] loop7: rw=2049, want=45104, limit=40427 [ 1255.857983][T14876] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3916'. [ 1255.878156][T14876] device veth3 entered promiscuous mode [ 1255.885719][T14876] bridge1: port 1(veth3) entered blocking state [ 1255.892100][T14876] bridge1: port 1(veth3) entered disabled state [ 1255.915430][ T3090] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1256.392365][T14888] netlink: 'syz.7.3919': attribute type 3 has an invalid length. [ 1256.455037][T14889] loop7: detected capacity change from 0 to 512 [ 1256.461748][ T3090] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.472008][ T3090] usb 5-1: too many endpoints for config 0 interface 0 altsetting 206: 246, using maximum allowed: 30 [ 1256.483028][ T3090] usb 5-1: config 0 interface 0 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1256.496863][ T3090] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1256.504479][ T3090] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1256.516386][ T3090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.527071][ T3090] usb 5-1: config 0 descriptor?? [ 1256.539664][T14889] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1256.548628][T14889] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3919: bg 0: block 248: padding at end of block bitmap is not set [ 1256.563808][T14889] Quota error (device loop7): write_blk: dquota write failed [ 1256.571452][T14889] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1256.581628][T14889] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.3919: Failed to acquire dquot type 1 [ 1256.594735][T14889] EXT4-fs (loop7): 1 truncate cleaned up [ 1256.601195][T14889] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1257.560558][T14897] xt_CT: No such helper "snmp_trap" [ 1257.625364][ T3090] usb 5-1: string descriptor 0 read error: -71 [ 1258.642272][ T3090] usb 5-1: USB disconnect, device number 18 [ 1258.718283][T14911] loop6: detected capacity change from 0 to 1024 [ 1258.837177][T14911] EXT4-fs error (device loop6): ext4_fill_super:4832: inode #2: comm syz.6.3927: casefold flag without casefold feature [ 1258.850285][T14911] EXT4-fs (loop6): get root inode failed [ 1258.856205][T14911] EXT4-fs (loop6): mount failed [ 1258.915224][ T8708] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1259.095206][ T940] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1259.161652][ T8708] usb 3-1: Using ep0 maxpacket: 16 [ 1259.285860][ T8708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.301326][ T8708] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1259.310666][ T8708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.319749][ T8708] usb 3-1: config 0 descriptor?? [ 1259.345251][ T940] usb 1-1: Using ep0 maxpacket: 16 [ 1259.705328][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.717045][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.727252][ T940] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1259.736430][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.749634][ T940] usb 1-1: config 0 descriptor?? [ 1260.235925][ T8708] usbhid 3-1:0.0: can't add hid device: -71 [ 1260.331949][ T8708] usbhid: probe of 3-1:0.0 failed with error -71 [ 1260.366472][T14938] netlink: 'syz.4.3934': attribute type 3 has an invalid length. [ 1260.396611][ T940] hid-generic 0003:0C70:F014.0015: hidraw0: USB HID v0.04 Device [HID 0c70:f014] on usb-dummy_hcd.0-1/input0 [ 1260.409143][ T8708] usb 3-1: USB disconnect, device number 32 [ 1260.519358][T14941] loop4: detected capacity change from 0 to 512 [ 1260.814335][T14941] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1260.824109][T14941] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3934: bg 0: block 248: padding at end of block bitmap is not set [ 1260.840276][T14941] Quota error (device loop4): write_blk: dquota write failed [ 1260.847970][T14941] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1260.858145][T14941] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.3934: Failed to acquire dquot type 1 [ 1260.872266][T14941] EXT4-fs (loop4): 1 truncate cleaned up [ 1260.878959][T14941] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1261.258247][ T8708] usb 1-1: USB disconnect, device number 22 [ 1262.417972][T14959] xt_CT: No such helper "snmp_trap" [ 1262.947220][T14958] netlink: 'syz.4.3938': attribute type 3 has an invalid length. [ 1262.995020][ T6] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1263.060701][T14970] loop4: detected capacity change from 0 to 512 [ 1263.314821][T14970] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1263.326077][T14970] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3938: bg 0: block 248: padding at end of block bitmap is not set [ 1263.342469][T14970] Quota error (device loop4): write_blk: dquota write failed [ 1263.350299][T14970] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1263.360442][T14970] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.3938: Failed to acquire dquot type 1 [ 1263.376263][T14970] EXT4-fs (loop4): 1 truncate cleaned up [ 1263.382473][T14970] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1263.474972][ T6] usb 7-1: Using ep0 maxpacket: 8 [ 1263.902315][ T6] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1263.909965][ T6] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1263.921705][ T6] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1264.004967][ T6] usb 7-1: unable to read config index 1 descriptor/start: -71 [ 1264.013993][T14985] loop6: detected capacity change from 0 to 2048 [ 1264.017765][ T6] usb 7-1: can't read configurations, error -71 [ 1264.105385][T14985] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.3948: bad orphan inode 8192 [ 1264.125944][T14985] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1264.161277][T14983] loop7: detected capacity change from 0 to 40427 [ 1264.254398][T14983] F2FS-fs (loop7): invalid crc value [ 1264.282592][T14983] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1264.290672][T14992] netlink: 'syz.2.3949': attribute type 3 has an invalid length. [ 1264.419806][T14995] loop2: detected capacity change from 0 to 512 [ 1264.482226][T14994] syz.6.3948[14994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1264.485261][T14994] syz.6.3948[14994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1264.572281][T14995] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1264.596299][T14995] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3949: bg 0: block 248: padding at end of block bitmap is not set [ 1264.612150][T14995] Quota error (device loop2): write_blk: dquota write failed [ 1264.619963][T14995] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1264.630006][T14995] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.3949: Failed to acquire dquot type 1 [ 1264.644367][T14995] EXT4-fs (loop2): 1 truncate cleaned up [ 1264.651391][T14995] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1264.953313][T14983] F2FS-fs (loop7): Start checkpoint disabled! [ 1265.086103][T14983] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1265.823408][T14230] attempt to access beyond end of device [ 1265.823408][T14230] loop7: rw=2049, want=45104, limit=40427 [ 1266.251977][T15015] xt_CT: No such helper "snmp_trap" [ 1267.269478][T15022] loop2: detected capacity change from 0 to 1024 [ 1267.490695][T15022] EXT4-fs error (device loop2): ext4_fill_super:4832: inode #2: comm syz.2.3957: casefold flag without casefold feature [ 1267.503715][T15022] EXT4-fs (loop2): get root inode failed [ 1267.511308][T15022] EXT4-fs (loop2): mount failed [ 1267.864783][ T39] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1268.031138][T15036] loop6: detected capacity change from 0 to 1024 [ 1268.124704][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 1268.158926][T15036] EXT4-fs error (device loop6): ext4_fill_super:4832: inode #2: comm syz.6.3960: casefold flag without casefold feature [ 1268.181999][T15036] EXT4-fs (loop6): get root inode failed [ 1268.187882][T15036] EXT4-fs (loop6): mount failed [ 1268.217852][T15043] netlink: 'syz.0.3961': attribute type 3 has an invalid length. [ 1268.274770][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.286253][ T39] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1268.295773][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.312526][ T39] usb 8-1: config 0 descriptor?? [ 1269.410737][ T2457] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1269.664696][ T2457] usb 3-1: Using ep0 maxpacket: 16 [ 1269.718634][T15060] xt_CT: No such helper "snmp_trap" [ 1269.728070][T15069] loop6: detected capacity change from 0 to 256 [ 1269.784713][ T2457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.796340][ T2457] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1269.805833][ T2457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.814853][T15069] FAT-fs (loop6): Directory bread(block 64) failed [ 1269.815685][ T2457] usb 3-1: config 0 descriptor?? [ 1269.823615][T15069] FAT-fs (loop6): Directory bread(block 65) failed [ 1269.833516][T15069] FAT-fs (loop6): Directory bread(block 66) failed [ 1269.840615][T15069] FAT-fs (loop6): Directory bread(block 67) failed [ 1269.847381][T15069] FAT-fs (loop6): Directory bread(block 68) failed [ 1269.853949][T15069] FAT-fs (loop6): Directory bread(block 69) failed [ 1269.860838][T15069] FAT-fs (loop6): Directory bread(block 70) failed [ 1269.867557][T15069] FAT-fs (loop6): Directory bread(block 71) failed [ 1269.875230][T15069] FAT-fs (loop6): Directory bread(block 72) failed [ 1269.881795][T15069] FAT-fs (loop6): Directory bread(block 73) failed [ 1270.098292][T15072] loop4: detected capacity change from 0 to 512 [ 1270.117223][T15072] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1270.141533][T15074] loop6: detected capacity change from 0 to 2048 [ 1270.154356][T15072] EXT4-fs (loop4): 1 truncate cleaned up [ 1270.166205][T15072] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1270.192592][T15074] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.3970: bad orphan inode 8192 [ 1270.206848][T15074] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1271.303256][T15091] syz.6.3970[15091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1271.304448][T15091] syz.6.3970[15091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1271.317181][ T39] usbhid 8-1:0.0: can't add hid device: -71 [ 1271.343375][T15094] netlink: 'syz.7.3976': attribute type 3 has an invalid length. [ 1271.458062][T15096] loop7: detected capacity change from 0 to 512 [ 1271.590134][ T39] usbhid: probe of 8-1:0.0 failed with error -71 [ 1271.762646][T15096] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1271.772317][T15096] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3976: bg 0: block 248: padding at end of block bitmap is not set [ 1271.787961][T15096] Quota error (device loop7): write_blk: dquota write failed [ 1271.795742][T15096] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1271.805822][T15096] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.3976: Failed to acquire dquot type 1 [ 1271.820006][T15096] EXT4-fs (loop7): 1 truncate cleaned up [ 1271.828713][T15096] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1272.157238][T15105] netlink: 'syz.4.3978': attribute type 3 has an invalid length. [ 1272.173119][T15105] loop4: detected capacity change from 0 to 512 [ 1272.287265][ T2457] usbhid 3-1:0.0: can't add hid device: -71 [ 1272.293443][ T2457] usbhid: probe of 3-1:0.0 failed with error -71 [ 1272.300806][ T39] usb 8-1: USB disconnect, device number 3 [ 1272.334552][ T3090] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1272.415710][T15105] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1272.433955][T15105] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3978: bg 0: block 248: padding at end of block bitmap is not set [ 1272.448730][T15105] Quota error (device loop4): write_blk: dquota write failed [ 1272.456264][T15105] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1272.466218][T15105] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.3978: Failed to acquire dquot type 1 [ 1272.478694][T15105] EXT4-fs (loop4): 1 truncate cleaned up [ 1272.504731][T15105] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1272.550751][ T2457] usb 3-1: USB disconnect, device number 33 [ 1272.725148][T15112] loop7: detected capacity change from 0 to 256 [ 1272.761692][T15112] FAT-fs (loop7): Directory bread(block 64) failed [ 1272.774507][ T3090] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.780528][T15115] loop4: detected capacity change from 0 to 128 [ 1272.791451][ T3090] usb 1-1: too many endpoints for config 0 interface 0 altsetting 206: 246, using maximum allowed: 30 [ 1272.803752][T15112] FAT-fs (loop7): Directory bread(block 65) failed [ 1272.823639][T15112] FAT-fs (loop7): Directory bread(block 66) failed [ 1272.830547][ T3090] usb 1-1: config 0 interface 0 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1272.847628][T15115] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1272.860986][T15115] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1272.874443][T15112] FAT-fs (loop7): Directory bread(block 67) failed [ 1272.892711][T15112] FAT-fs (loop7): Directory bread(block 68) failed [ 1272.902809][ T3090] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1272.915233][T15115] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 1272.922975][T15112] FAT-fs (loop7): Directory bread(block 69) failed [ 1272.937264][ T3090] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1272.940516][T15115] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1272.964763][T15112] FAT-fs (loop7): Directory bread(block 70) failed [ 1272.973923][ T3090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.975971][T15112] FAT-fs (loop7): Directory bread(block 71) failed [ 1273.034965][ T3090] usb 1-1: config 0 descriptor?? [ 1273.044632][T15112] FAT-fs (loop7): Directory bread(block 72) failed [ 1273.064483][T15112] FAT-fs (loop7): Directory bread(block 73) failed [ 1273.944437][ T3090] usb 1-1: string descriptor 0 read error: -71 [ 1273.966727][ T3090] usb 1-1: USB disconnect, device number 23 [ 1273.998922][T15127] loop2: detected capacity change from 0 to 1024 [ 1274.115419][T15127] EXT4-fs error (device loop2): ext4_fill_super:4832: inode #2: comm syz.2.3985: casefold flag without casefold feature [ 1274.143948][T15127] EXT4-fs (loop2): get root inode failed [ 1274.151582][T15127] EXT4-fs (loop2): mount failed [ 1274.260006][T15136] xt_CT: No such helper "snmp_trap" [ 1274.614709][ T2457] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1274.874317][ T2457] usb 8-1: Using ep0 maxpacket: 16 [ 1274.914321][T15139] loop6: detected capacity change from 0 to 40427 [ 1274.974768][T15139] F2FS-fs (loop6): invalid crc value [ 1274.987319][T15139] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1275.014429][ T2457] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.034525][ T2457] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1275.064069][ T2457] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.085568][ T2457] usb 8-1: config 0 descriptor?? [ 1275.095420][T15139] F2FS-fs (loop6): Start checkpoint disabled! [ 1275.102390][T15139] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1275.405944][T15099] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1275.534355][ T6] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1275.553703][T14230] attempt to access beyond end of device [ 1275.553703][T14230] loop6: rw=2049, want=45104, limit=40427 [ 1275.774300][T15099] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.784870][T15099] usb 1-1: too many endpoints for config 0 interface 0 altsetting 206: 246, using maximum allowed: 30 [ 1275.796263][T15099] usb 1-1: config 0 interface 0 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1275.809756][T15099] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1275.816629][T15099] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1275.825931][T15099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.838880][T15099] usb 1-1: config 0 descriptor?? [ 1275.924338][ T6] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1275.932515][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.942674][ T6] usb 5-1: config 0 has no interface number 0 [ 1276.052100][T15162] netlink: 'syz.2.3993': attribute type 3 has an invalid length. [ 1276.064167][T15162] loop2: detected capacity change from 0 to 512 [ 1276.080401][T15162] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1276.087771][T15162] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3993: bg 0: block 248: padding at end of block bitmap is not set [ 1276.102742][T15162] Quota error (device loop2): write_blk: dquota write failed [ 1276.110185][T15162] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1276.120153][T15162] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.3993: Failed to acquire dquot type 1 [ 1276.131480][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1276.140638][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.149280][ T6] usb 5-1: Product: syz [ 1276.153552][T15162] EXT4-fs (loop2): 1 truncate cleaned up [ 1276.159257][ T6] usb 5-1: Manufacturer: syz [ 1276.163977][ T6] usb 5-1: SerialNumber: syz [ 1276.168710][T15162] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1276.189402][ T6] usb 5-1: config 0 descriptor?? [ 1276.374391][T15099] usb 1-1: string descriptor 0 read error: -71 [ 1276.384080][T15099] usb 1-1: USB disconnect, device number 24 [ 1276.639482][T15173] loop6: detected capacity change from 0 to 2048 [ 1276.697506][T15173] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.3997: bad orphan inode 8192 [ 1276.708401][T15173] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1276.878915][T15180] syz.6.3997[15180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1276.879005][T15180] syz.6.3997[15180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1277.324216][ T2457] usbhid 8-1:0.0: can't add hid device: -71 [ 1277.430301][ T2457] usbhid: probe of 8-1:0.0 failed with error -71 [ 1277.514264][ T2457] usb 8-1: USB disconnect, device number 4 [ 1277.884043][T15194] loop6: detected capacity change from 0 to 4096 [ 1277.906950][T15194] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1277.973910][ T2457] usb 5-1: USB disconnect, device number 19 [ 1278.070700][T15207] xt_CT: No such helper "snmp_trap" [ 1278.864095][ T2457] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1278.991834][T15228] loop6: detected capacity change from 0 to 2048 [ 1279.035845][T15228] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.4013: bad orphan inode 8192 [ 1279.046354][T15228] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1279.108998][T15234] loop4: detected capacity change from 0 to 512 [ 1279.134216][ T2457] usb 3-1: Using ep0 maxpacket: 16 [ 1279.254146][ T940] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1279.284747][ T2457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.315214][ T2457] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1279.328708][T15239] syz.6.4013[15239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1279.329222][T15239] syz.6.4013[15239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1279.379339][T15240] xt_CT: No such helper "snmp_trap" [ 1279.486688][ T2457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.540662][ T2457] usb 3-1: config 0 descriptor?? [ 1279.834127][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.845383][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.855561][ T940] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1279.864854][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.877641][ T940] usb 1-1: config 0 descriptor?? [ 1280.182289][T15243] loop4: detected capacity change from 0 to 40427 [ 1280.366128][T15243] F2FS-fs (loop4): invalid crc value [ 1280.552935][T15243] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1280.559717][T15099] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1280.563719][ T940] cp2112 0003:10C4:EA90.0016: item fetching failed at offset 5/7 [ 1280.575738][ T940] cp2112 0003:10C4:EA90.0016: parse failed [ 1280.581647][ T940] cp2112: probe of 0003:10C4:EA90.0016 failed with error -22 [ 1280.631176][T15243] F2FS-fs (loop4): Start checkpoint disabled! [ 1280.638208][T15243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1280.668787][ T39] usb 1-1: USB disconnect, device number 25 [ 1280.823996][T15099] usb 8-1: Using ep0 maxpacket: 16 [ 1280.984529][T15099] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.010840][T15099] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1281.223093][T15099] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.244542][T15099] usb 8-1: config 0 descriptor?? [ 1281.248956][T14202] attempt to access beyond end of device [ 1281.248956][T14202] loop4: rw=2049, want=45104, limit=40427 [ 1281.731721][ T2457] usbhid 3-1:0.0: can't add hid device: -71 [ 1281.739649][T15269] xt_CT: No such helper "snmp_trap" [ 1281.745784][ T2457] usbhid: probe of 3-1:0.0 failed with error -71 [ 1281.759156][ T2457] usb 3-1: USB disconnect, device number 34 [ 1282.268413][T15280] loop4: detected capacity change from 0 to 1024 [ 1282.474004][T15280] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1283.394572][T15290] loop6: detected capacity change from 0 to 512 [ 1283.436684][T15287] loop4: detected capacity change from 0 to 2048 [ 1283.536262][T15287] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.4032: bad orphan inode 8192 [ 1283.543957][T15099] usbhid 8-1:0.0: can't add hid device: -71 [ 1283.547070][T15287] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1283.552810][T15099] usbhid: probe of 8-1:0.0 failed with error -71 [ 1283.576975][T15099] usb 8-1: USB disconnect, device number 5 [ 1284.138540][T15304] syz.4.4032[15304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1284.138633][T15304] syz.4.4032[15304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1284.233849][ T9173] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1284.361415][T15310] loop6: detected capacity change from 0 to 1024 [ 1284.419149][T15314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1284.448495][T15310] EXT4-fs error (device loop6): ext4_fill_super:4832: inode #2: comm syz.6.4038: casefold flag without casefold feature [ 1284.463027][T15310] EXT4-fs (loop6): get root inode failed [ 1284.540440][T15310] EXT4-fs (loop6): mount failed [ 1284.584002][ T9173] usb 3-1: Using ep0 maxpacket: 16 [ 1284.703922][ T9173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.722423][ T9173] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1284.814623][ T9173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.870674][ T9173] usb 3-1: config 0 descriptor?? [ 1287.100805][T15340] loop4: detected capacity change from 0 to 512 [ 1287.159347][T15340] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.4047: casefold flag without casefold feature [ 1287.183871][T15340] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.4047: couldn't read orphan inode 15 (err -117) [ 1287.196895][T15340] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1287.197113][T15336] xt_CT: No such helper "snmp_trap" [ 1287.953517][T15354] netlink: 'syz.2.4053': attribute type 3 has an invalid length. [ 1288.017089][T15359] loop2: detected capacity change from 0 to 512 [ 1288.051914][T15362] loop6: detected capacity change from 0 to 2048 [ 1288.058463][ T9173] usbhid 3-1:0.0: can't add hid device: -71 [ 1288.064899][ T9173] usbhid: probe of 3-1:0.0 failed with error -71 [ 1288.072828][ T9173] usb 3-1: USB disconnect, device number 35 [ 1288.083426][T15359] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1288.090765][T15359] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4053: bg 0: block 248: padding at end of block bitmap is not set [ 1288.205167][T15367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1288.232056][T15359] Quota error (device loop2): write_blk: dquota write failed [ 1288.635269][T15359] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1288.651638][T15359] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.4053: Failed to acquire dquot type 1 [ 1288.664222][T15359] EXT4-fs (loop2): 1 truncate cleaned up [ 1288.667183][T15362] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.4054: bad orphan inode 8192 [ 1288.683153][T15362] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1288.695054][T15359] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1288.760906][T15373] loop4: detected capacity change from 0 to 1024 [ 1288.809113][T15373] EXT4-fs error (device loop4): ext4_fill_super:4832: inode #2: comm syz.4.4056: casefold flag without casefold feature [ 1288.822581][T15373] EXT4-fs (loop4): get root inode failed [ 1288.828578][T15373] EXT4-fs (loop4): mount failed [ 1288.871494][T15378] loop7: detected capacity change from 0 to 512 [ 1288.967864][T15378] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.4058: casefold flag without casefold feature [ 1288.990971][T15378] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.4058: couldn't read orphan inode 15 (err -117) [ 1289.006334][T15382] syz.6.4054[15382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1289.006418][T15382] syz.6.4054[15382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1289.011599][T15378] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1289.055132][T15385] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4059'. [ 1289.619620][T15397] loop7: detected capacity change from 0 to 512 [ 1290.674811][T15408] xt_CT: No such helper "snmp_trap" [ 1291.045222][T15416] netlink: 'syz.4.4068': attribute type 3 has an invalid length. [ 1291.108443][T15416] loop4: detected capacity change from 0 to 512 [ 1291.179392][T15416] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1291.186954][T15416] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4068: bg 0: block 248: padding at end of block bitmap is not set [ 1291.202044][T15416] Quota error (device loop4): write_blk: dquota write failed [ 1291.210674][T15416] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1291.220827][T15416] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.4068: Failed to acquire dquot type 1 [ 1291.233449][T15416] EXT4-fs (loop4): 1 truncate cleaned up [ 1291.239460][T15416] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1291.293034][T15412] loop7: detected capacity change from 0 to 40427 [ 1291.317286][T15412] F2FS-fs (loop7): invalid crc value [ 1291.327302][T15412] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1291.341761][T15421] loop2: detected capacity change from 0 to 2048 [ 1291.351067][T15423] loop6: detected capacity change from 0 to 128 [ 1291.378271][T15412] F2FS-fs (loop7): Start checkpoint disabled! [ 1291.385392][T15412] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1291.387420][T15423] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1291.409590][T15423] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1291.417743][T15421] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1291.446431][T15423] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 1291.466600][T15423] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1292.411752][T15371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 1292.755739][T15499] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4075'. [ 1293.177780][T14130] attempt to access beyond end of device [ 1293.177780][T14130] loop7: rw=2049, want=45104, limit=40427 [ 1293.300748][T15511] xt_CT: No such helper "snmp_trap" [ 1293.589751][T15513] loop7: detected capacity change from 0 to 2048 [ 1293.633794][T15513] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.4079: bad orphan inode 8192 [ 1293.769740][T15513] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1295.641284][T15529] loop4: detected capacity change from 0 to 128 [ 1295.775630][T15534] loop6: detected capacity change from 0 to 1024 [ 1295.791308][T15529] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1296.242073][T15529] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1296.282932][T15534] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1296.864086][T15529] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 1296.906556][T15529] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1297.014972][T15549] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4089'. [ 1297.678402][T15559] xt_CT: No such helper "snmp_trap" [ 1298.669288][T15560] loop2: detected capacity change from 0 to 512 [ 1299.411865][T15560] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1299.421578][T15560] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4088: bg 0: block 248: padding at end of block bitmap is not set [ 1299.437875][T15560] Quota error (device loop2): write_blk: dquota write failed [ 1299.445478][T15560] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1299.455715][T15560] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.4088: Failed to acquire dquot type 1 [ 1299.469508][T15560] EXT4-fs (loop2): 1 truncate cleaned up [ 1299.476206][T15560] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1301.000987][T15589] loop4: detected capacity change from 0 to 2048 [ 1301.055780][T15589] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.4102: bad orphan inode 8192 [ 1301.066754][T15589] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1301.250482][T15597] syz.4.4102[15597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1301.250828][T15597] syz.4.4102[15597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1301.809592][T15603] loop2: detected capacity change from 0 to 128 [ 1301.883047][T15603] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1301.902848][T15603] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1301.946536][T15603] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 1302.022709][T15603] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.518409][T15625] loop2: detected capacity change from 0 to 40427 [ 1304.025380][T15625] F2FS-fs (loop2): invalid crc value [ 1304.032260][T15625] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1304.077527][T15625] F2FS-fs (loop2): Start checkpoint disabled! [ 1304.084715][T15625] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1305.988492][T14130] attempt to access beyond end of device [ 1305.988492][T14130] loop2: rw=2049, want=45104, limit=40427 [ 1306.444176][T15668] loop2: detected capacity change from 0 to 512 [ 1306.472638][ T3090] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1306.484710][T15668] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.4125: casefold flag without casefold feature [ 1306.498120][T15668] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.4125: couldn't read orphan inode 15 (err -117) [ 1306.510621][T15668] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1306.852577][ T3090] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.869416][ T3090] usb 8-1: too many endpoints for config 0 interface 0 altsetting 206: 246, using maximum allowed: 30 [ 1306.882510][ T3090] usb 8-1: config 0 interface 0 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1306.909434][ T3090] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1306.938840][ T3090] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1306.956016][T15679] loop4: detected capacity change from 0 to 128 [ 1307.102715][ T3090] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.229689][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1307.270318][ T3090] usb 8-1: config 0 descriptor?? [ 1307.348565][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1307.458441][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1307.550548][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1307.653689][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1308.009245][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1308.017406][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1308.237894][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1308.335156][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1308.372991][T15688] loop2: detected capacity change from 0 to 512 [ 1308.393894][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1308.402882][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1308.410358][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1308.419997][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1308.427671][ T329] hid-generic 00A0:0008:0003.0017: unknown main item tag 0x0 [ 1308.449367][T15688] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.4130: casefold flag without casefold feature [ 1308.452810][ T3090] usb 8-1: string descriptor 0 read error: -71 [ 1308.468702][ T329] hid-generic 00A0:0008:0003.0017: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1308.468816][T15688] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.4130: couldn't read orphan inode 15 (err -117) [ 1308.495779][T15692] loop6: detected capacity change from 0 to 1024 [ 1308.514619][T15693] fido_id[15693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1308.528560][T15688] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1308.541830][ T3090] usb 8-1: USB disconnect, device number 6 [ 1308.547905][T15692] EXT4-fs (loop6): Ignoring removed orlov option [ 1308.600552][T15696] netlink: 'syz.4.4134': attribute type 3 has an invalid length. [ 1308.615035][T15692] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,quota,errors=remount-ro,grpid,orlov,. Quota mode: writeback. [ 1308.669582][T15699] loop4: detected capacity change from 0 to 512 [ 1308.735399][T15699] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1308.743324][T15699] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4134: bg 0: block 248: padding at end of block bitmap is not set [ 1308.758406][T15699] Quota error (device loop4): write_blk: dquota write failed [ 1308.766051][T15699] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1308.776638][T15699] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.4134: Failed to acquire dquot type 1 [ 1308.789706][T15699] EXT4-fs (loop4): 1 truncate cleaned up [ 1308.951277][T15699] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1309.877448][T15717] netlink: 'syz.6.4137': attribute type 3 has an invalid length. [ 1310.912289][T15724] loop6: detected capacity change from 0 to 512 [ 1311.066213][T15724] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1311.078552][T15724] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.4137: bg 0: block 248: padding at end of block bitmap is not set [ 1311.094048][T15724] Quota error (device loop6): write_blk: dquota write failed [ 1311.102192][T15724] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1311.112508][T15724] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.4137: Failed to acquire dquot type 1 [ 1311.402773][T15724] EXT4-fs (loop6): 1 truncate cleaned up [ 1311.408795][T15724] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1312.459741][T15735] xt_CT: No such helper "snmp_trap" [ 1312.722978][T15743] loop4: detected capacity change from 0 to 4096 [ 1312.771389][T15743] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1312.961811][T15751] loop4: detected capacity change from 0 to 1024 [ 1313.028381][T15751] EXT4-fs error (device loop4): ext4_fill_super:4832: inode #2: comm syz.4.4148: casefold flag without casefold feature [ 1313.042035][T15751] EXT4-fs (loop4): get root inode failed [ 1313.048391][T15751] EXT4-fs (loop4): mount failed [ 1313.062861][T15760] xt_CT: No such helper "snmp_trap" [ 1313.092230][ T6655] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1313.642165][ T6655] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.655456][ T6655] usb 1-1: too many endpoints for config 0 interface 0 altsetting 206: 246, using maximum allowed: 30 [ 1313.666903][ T6655] usb 1-1: config 0 interface 0 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1313.680501][ T6655] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1313.687467][ T6655] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1313.696994][ T6655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.709856][ T6655] usb 1-1: config 0 descriptor?? [ 1313.777613][T15771] loop6: detected capacity change from 0 to 1024 [ 1313.803197][T15771] EXT4-fs error (device loop6): ext4_fill_super:4832: inode #2: comm syz.6.4152: casefold flag without casefold feature [ 1313.816185][T15771] EXT4-fs (loop6): get root inode failed [ 1313.821855][T15771] EXT4-fs (loop6): mount failed [ 1314.558850][ T6655] usb 1-1: string descriptor 0 read error: -71 [ 1314.573779][ T6655] usb 1-1: USB disconnect, device number 26 [ 1314.953259][T15787] syz.4.4154[15787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1314.954567][T15787] syz.4.4154[15787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1315.815909][T15795] netlink: 'syz.6.4158': attribute type 3 has an invalid length. [ 1315.877186][T15795] loop6: detected capacity change from 0 to 512 [ 1315.944623][T15795] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1315.953481][T15795] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.4158: bg 0: block 248: padding at end of block bitmap is not set [ 1315.968760][T15795] Quota error (device loop6): write_blk: dquota write failed [ 1315.976236][T15795] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1315.986329][T15795] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.4158: Failed to acquire dquot type 1 [ 1316.038772][T15795] EXT4-fs (loop6): 1 truncate cleaned up [ 1316.044762][T15795] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1316.094953][T15800] loop4: detected capacity change from 0 to 512 [ 1316.186782][T15800] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.4159: casefold flag without casefold feature [ 1316.199892][T15800] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.4159: couldn't read orphan inode 15 (err -117) [ 1316.212185][T15800] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1316.307511][T15805] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4161'. [ 1316.430909][T15809] loop6: detected capacity change from 0 to 512 [ 1316.473158][T15809] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1316.603446][T15809] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2228: inode #15: comm syz.6.4160: corrupted in-inode xattr [ 1316.617274][T15809] EXT4-fs (loop6): Remounting filesystem read-only [ 1316.625672][T15809] EXT4-fs (loop6): 1 truncate cleaned up [ 1316.631401][T15809] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,quota,errors=remount-ro,barrier,. Quota mode: writeback. [ 1317.354560][T15815] loop7: detected capacity change from 0 to 128 [ 1317.404252][T15815] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1317.411093][T15815] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1317.469369][T15815] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 1317.493015][T15815] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1317.874372][T15833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1318.281866][ T6655] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1318.284891][T15842] loop4: detected capacity change from 0 to 2048 [ 1318.358690][T15842] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1318.453892][T15848] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4172'. [ 1318.587688][T15842] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4171: bg 0: block 234: padding at end of block bitmap is not set [ 1318.667913][T15855] xt_CT: No such helper "snmp_trap" [ 1318.788299][T15860] loop6: detected capacity change from 0 to 512 [ 1318.788601][ T6655] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.805373][ T6655] usb 3-1: too many endpoints for config 0 interface 0 altsetting 206: 246, using maximum allowed: 30 [ 1318.816492][ T6655] usb 3-1: config 0 interface 0 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1318.832112][ T6655] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1318.838776][ T6655] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1318.848605][ T6655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.854550][T15860] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.4176: casefold flag without casefold feature [ 1318.857881][ T6655] usb 3-1: config 0 descriptor?? [ 1318.876243][T15860] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.4176: couldn't read orphan inode 15 (err -117) [ 1318.889834][T15860] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1318.966949][T15863] loop4: detected capacity change from 0 to 1024 [ 1318.986732][T15865] netlink: 'syz.7.4178': attribute type 3 has an invalid length. [ 1319.129495][T15869] loop7: detected capacity change from 0 to 512 [ 1319.166101][T15869] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1319.173979][T15869] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.4178: bg 0: block 248: padding at end of block bitmap is not set [ 1319.233173][T15869] Quota error (device loop7): write_blk: dquota write failed [ 1319.488573][T15869] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1319.499235][T15869] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.4178: Failed to acquire dquot type 1 [ 1319.616584][T15869] EXT4-fs (loop7): 1 truncate cleaned up [ 1319.648550][T15869] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1320.082078][ T6655] usb 3-1: string descriptor 0 read error: -71 [ 1320.146811][ T6655] usb 3-1: USB disconnect, device number 36 [ 1320.943451][T15882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1321.558141][T15893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4185'. [ 1322.090167][T15899] xt_CT: No such helper "snmp_trap" [ 1322.154130][T15902] loop2: detected capacity change from 0 to 2048 [ 1322.265207][T15902] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1322.741627][T14497] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1322.880191][T16058] loop6: detected capacity change from 0 to 1024 [ 1322.913506][T16058] EXT4-fs (loop6): Ignoring removed orlov option [ 1322.944279][T16058] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,quota,errors=remount-ro,grpid,orlov,. Quota mode: writeback. [ 1322.977836][T16062] loop2: detected capacity change from 0 to 512 [ 1323.054663][T14497] usb 5-1: Using ep0 maxpacket: 16 [ 1323.181928][T14497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.244986][T14497] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1324.254169][T14497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.263478][T14497] usb 5-1: config 0 descriptor?? [ 1324.328688][T16075] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4198'. [ 1324.805549][T16081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1325.130607][ T2457] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1326.253467][T16095] loop6: detected capacity change from 0 to 2048 [ 1326.272426][ T2457] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1326.280044][ T2457] usb 3-1: can't read configurations, error -71 [ 1326.308771][T14497] usbhid 5-1:0.0: can't add hid device: -71 [ 1326.314979][T14497] usbhid: probe of 5-1:0.0 failed with error -71 [ 1326.322601][T14497] usb 5-1: USB disconnect, device number 20 [ 1326.366577][T16095] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1326.450301][T16107] loop7: detected capacity change from 0 to 128 [ 1326.493665][T16107] EXT4-fs (loop7): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 1326.509669][T16107] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1326.761602][T16095] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.4202: bg 0: block 234: padding at end of block bitmap is not set [ 1326.811484][T14497] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1329.616426][T16053] ------------[ cut here ]------------ [ 1329.622925][T16053] kernel BUG at fs/ext4/inode.c:2747! [ 1329.641344][T16053] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1329.647548][T16053] CPU: 1 PID: 16053 Comm: kworker/u4:350 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 1329.657883][T16053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1329.668397][T16053] Workqueue: writeback wb_workfn (flush-7:6) [ 1329.674538][T16053] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 1329.680392][T16053] Code: 00 00 00 e8 cd 99 8f ff 84 db 75 2c e8 34 97 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 1b 97 8f ff <0f> 0b e8 14 97 8f ff e8 4b 67 27 ff eb a2 e8 08 97 8f ff e8 3f 67 [ 1329.700106][T16053] RSP: 0018:ffffc90005297100 EFLAGS: 00010293 [ 1329.706280][T16053] RAX: ffffffff81d90f75 RBX: 0000008410000000 RCX: ffff888134a2e2c0 [ 1329.714257][T16053] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 1329.722241][T16053] RBP: ffffc90005297470 R08: dffffc0000000000 R09: ffffed10253062f7 [ 1329.730218][T16053] R10: ffffed10253062f7 R11: 1ffff110253062f6 R12: dffffc0000000000 [ 1329.738193][T16053] R13: 0000000000000001 R14: 0000008000000000 R15: ffff888129831a48 [ 1329.746170][T16053] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1329.755806][T16053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1329.762407][T16053] CR2: 00007f5f347d6000 CR3: 000000011826f000 CR4: 00000000003506a0 [ 1329.770483][T16053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1329.778680][T16053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1329.786881][T16053] Call Trace: [ 1329.790172][T16053] [ 1329.793646][T16053] ? debug_smp_processor_id+0x17/0x20 [ 1329.799130][T16053] ? __kasan_check_read+0x11/0x20 [ 1329.804291][T16053] ? dev_hard_start_xmit+0x5fe/0x670 [ 1329.809635][T16053] ? __local_bh_enable_ip+0x58/0x80 [ 1329.814896][T16053] ? local_bh_enable+0x1f/0x30 [ 1329.819669][T16053] ? __dev_queue_xmit+0x18fa/0x2d80 [ 1329.824965][T16053] ? poly1305_simd_blocks+0x2c9/0x440 [ 1329.830355][T16053] ? ext4_readpage+0x220/0x220 [ 1329.835135][T16053] ? memset+0x35/0x40 [ 1329.839111][T16053] ? dev_queue_xmit+0x20/0x20 [ 1329.843818][T16053] ? __rt6_find_exception_rcu+0x252/0x320 [ 1329.849556][T16053] ? __kasan_check_write+0x14/0x20 [ 1329.854663][T16053] ? __local_bh_enable_ip+0x58/0x80 [ 1329.860488][T16053] ? ip6_finish_output2+0x10be/0x1760 [ 1329.866043][T16053] ? ext4_readpage+0x220/0x220 [ 1329.870830][T16053] do_writepages+0x48a/0x6c0 [ 1329.875819][T16053] ? __ip6_finish_output+0x7d0/0x7d0 [ 1329.881119][T16053] ? __local_bh_enable_ip+0x58/0x80 [ 1329.886323][T16053] ? __writepage+0x130/0x130 [ 1329.890938][T16053] ? __kasan_check_write+0x14/0x20 [ 1329.896050][T16053] ? _raw_spin_lock+0x8e/0xe0 [ 1329.900786][T16053] __writeback_single_inode+0xd5/0x9c0 [ 1329.906247][T16053] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 1329.912313][T16053] writeback_sb_inodes+0x9c0/0x1590 [ 1329.917508][T16053] ? ip6_output+0x384/0x3b0 [ 1329.922274][T16053] ? ip6_output+0x1d1/0x3b0 [ 1329.926774][T16053] ? queue_io+0x4c0/0x4c0 [ 1329.931102][T16053] ? __kasan_check_read+0x11/0x20 [ 1329.936116][T16053] ? queue_io+0x382/0x4c0 [ 1329.940438][T16053] wb_writeback+0x3f1/0x980 [ 1329.944938][T16053] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 1329.950914][T16053] ? set_worker_desc+0x155/0x1c0 [ 1329.955882][T16053] ? __kasan_check_write+0x14/0x20 [ 1329.961079][T16053] wb_workfn+0x38f/0xe20 [ 1329.965317][T16053] ? inode_wait_for_writeback+0x200/0x200 [ 1329.971030][T16053] ? compat_start_thread+0x20/0x20 [ 1329.976251][T16053] ? _raw_spin_unlock+0x4d/0x70 [ 1329.981095][T16053] ? finish_task_switch+0x16b/0x780 [ 1329.986291][T16053] ? __switch_to_asm+0x3a/0x60 [ 1329.991047][T16053] ? __schedule+0xb76/0x14c0 [ 1329.995647][T16053] process_one_work+0x6be/0xba0 [ 1330.000498][T16053] worker_thread+0xa59/0x1200 [ 1330.005195][T16053] ? __kthread_parkme+0xac/0x200 [ 1330.010130][T16053] kthread+0x411/0x500 [ 1330.014277][T16053] ? worker_clr_flags+0x190/0x190 [ 1330.019295][T16053] ? kthread_blkcg+0xd0/0xd0 [ 1330.023880][T16053] ret_from_fork+0x1f/0x30 [ 1330.028300][T16053] [ 1330.031313][T16053] Modules linked in: [ 1330.042263][T16120] loop4: detected capacity change from 0 to 2048 [ 1330.091257][T14497] usb 5-1: device descriptor read/all, error -71 [ 1330.114425][T16120] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.4210: bad orphan inode 8192 [ 1330.129253][T16120] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1330.235642][T16053] ---[ end trace 7fa3ab19f55c4297 ]--- [ 1330.241281][T16053] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 1330.247071][T16053] Code: 00 00 00 e8 cd 99 8f ff 84 db 75 2c e8 34 97 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 1b 97 8f ff <0f> 0b e8 14 97 8f ff e8 4b 67 27 ff eb a2 e8 08 97 8f ff e8 3f 67 [ 1330.267142][T16053] RSP: 0018:ffffc90005297100 EFLAGS: 00010293 [ 1330.274297][T16125] syz.0.4208[16125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1330.274383][T16125] syz.0.4208[16125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1330.286437][T16053] RAX: ffffffff81d90f75 RBX: 0000008410000000 RCX: ffff888134a2e2c0 [ 1330.306126][T16053] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 1330.314419][T16053] RBP: ffffc90005297470 R08: dffffc0000000000 R09: ffffed10253062f7 [ 1330.323156][T16053] R10: ffffed10253062f7 R11: 1ffff110253062f6 R12: dffffc0000000000 [ 1330.333080][T16053] R13: 0000000000000001 R14: 0000008000000000 R15: ffff888129831a48 [ 1330.341438][T16053] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1330.350882][T16053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1330.357662][T16053] CR2: 00000000ffffffff CR3: 00000001173e1000 CR4: 00000000003506b0 [ 1330.369856][T16053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1330.378594][T16053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1330.387369][T16053] Kernel panic - not syncing: Fatal exception [ 1330.395569][T16053] Kernel Offset: disabled [ 1330.399900][T16053] Rebooting in 86400 seconds..