last executing test programs: 10.803640851s ago: executing program 1 (id=3695): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000136, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000280)={0x6, 0x7e}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="20013f"], 0x0}) 8.416054044s ago: executing program 1 (id=3706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0xfd46, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r2, 0x5) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x1, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0xe000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 8.095208414s ago: executing program 0 (id=3707): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000040300f1101000000000001090224000100000000090400000103c59a0009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/70, 0x11}], 0x1, 0x3a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x2, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_connect$cdc_ecm(0x0, 0x202, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc, 0x1, 0x1, 0x4, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0xcb, 0x3, 0x2, 0x6, 0x0, 0x8a, {{0x5}, {0x5, 0x24, 0x0, 0x296}, {0xd, 0x24, 0xf, 0x1, 0x2d, 0x1, 0x0, 0xe}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @dmm={0x7, 0x24, 0x14, 0x2, 0xf083}, @mdlm_detail={0xf4, 0x24, 0x13, 0x82, "73723147bb21c2649d870e2beb9da405ade68de3e9ec5413725416ad0bd6c958f62bdeba8e802363218624ccce44877d2b9f999979e12d34eaece5090e44662ce9b7f3a35ab6ec2aa5a95f62707fb1214e1fa5825cac30a2abb63d06a79cc469b53a59adfdb3517303f42ae17139da79106c8632f31e701832cbcd277663f5e6bd5698fb29777a4eaa1cd5bc426d558d8efd610b27c88eec2c0f333a81d257851b501972b17f5036db322901edefd0e5baafb2b3f5e0547d2372e0b95e6a2afdfb2a49b2fa8639cc5b6abb3ceb7643a6071edb2324d6b7f479ce27e5b8ce9a0f7ae7e729f4f08769f30091c1ed35313d"}, @obex={0x5, 0x24, 0x15, 0x9}, @obex={0x5, 0x24, 0x15, 0x3}, @mdlm_detail={0x9b, 0x24, 0x13, 0x0, "c5eddcf6741f59ad7bc2d22e5540f75fa6667013be07160747e6cc31b494bc1f804e4746e229c23067c630c36d356961c5368ddd800b6b484f401a4c15a6cc1fb2dd01774a884f9e275bdc259c8d5cd37b86d10ab153f1cff4f04c4848bef1229c6fb8fbd0e972b3cd87cf98a257b0c0ceb19cd6a67fa6d72520b2bbb4e64fceb840c913f00f1e4812e69b323994a7986b7c176bdebaa9"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x9c, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x5, 0x4}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x6, 0x6, 0x8, 0x8, 0x1c}, 0x114, &(0x7f0000000a80)={0x5, 0xf, 0x114, 0x3, [@generic={0xf9, 0x10, 0x2, "88629305aa829b4d078141eef61de24cb5723cffd007777a86706c41c41945a51eeddf4c1993661008a593b6be41022c77ec687a1a10f8740bb3d46ab768afd4a85fb0c8cd6f84fc9ee6c74211fe6cfd5bbd8449ab1d0dd73193c2df3fffa8cbb03c3858ff3b1de9df7bdee78334a5d2209c3b10ff8e1b37a8946e4edafffae08ef04df6a57f05855c0d0e433e8860d85d98f199838f7b5d31c03ac806cba4f3643a38df85e9673221f647dbfc0352212a025e224c9b3cc633039583640964cbcc931e62609b46f465877a5fec62861705b61b3c09322b45e083475941259e05549f4cdd1757d152a8721b6556a30e366f76c7f6980a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xff, 0x10, 0x5}, @ss_container_id={0x0, 0x10, 0x4, 0xa, "afc02c9df0262122a4b2dab53be4a409"}]}, 0x3, [{0x77, &(0x7f0000000300)=@string={0x77, 0x3, "4661974271ee207a7deea3ba927099f5331d4bc3a84e39df4d68a2426e2ab0b59978ec2650bb43a2bf59328dfa647cd827d5ce30d31a9feac7bd1e7c8c5675c529f9df549b3794fef6780075dd326fa6f48b4a669b845622e5c7124284091625cd4dcc3f37d174a54e909bcacd5afa48c5083ab2cb"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000500)=@string={0x0, 0x3, "5359fab01314520f84fd0bfeef3671ec12b9e955b0a80eccfcd8e3c81c8603ee31664551c108859cacd0979a6599813aae6989aa68a80b6f8e0387b8b587a5995d7166187289d56d90c8"}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00') read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @generic={0x1, 0x7, 0xe, 0x0, 0x8000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00900d0000000ac2290600421e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.970269696s ago: executing program 2 (id=3709): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000009000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000067da4d6e6606035a1f559ecfbe8547a8f9c0eacaf92d5792e0765c08"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000056d6a38f4252d546bc6adbd36a4f9c7447cdc8a1c920eed9fc53f56f3312afbf203cb5ccb33f22e4276617af855b41ec9084909a661fa7294b450a8227614", @ANYRES32=r2], 0x50) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f00000009c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0x3, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)) r4 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x14040, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r4, 0x20, &(0x7f0000000040)={&(0x7f0000000340)=""/207, 0xcf, 0x0, &(0x7f0000000000)=""/23, 0x17}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 7.593827821s ago: executing program 1 (id=3711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x2000000}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) setitimer(0x1, &(0x7f00000001c0)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507005c0ef5dcc0d6eb07000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xffff}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.774211868s ago: executing program 1 (id=3713): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001840)={[{@nobarrier}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@segment_mode}, {@background_gc_on}, {@nouser_xattr}, {@compress_chksum}, {@nobarrier}, {@fsync_mode_strict}, {@resuid}, {@jqfmt_vfsold}, {@noinline_dentry}, {@io_bits={'io_bits', 0x3d, 0x1f}}], [{@obj_user={'obj_user', 0x3d, 'debug_u_nt_\x8e\x91\xb8%xtra_is'}}, {@seclabel}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb929"], 0xfdef) 6.21611736s ago: executing program 1 (id=3718): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000136, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000280)={0x6, 0x7e}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="20013f"], 0x0}) 5.794613779s ago: executing program 4 (id=3720): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r0, 0x0, 0x1000, 0x2d, &(0x7f0000000740)="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", &(0x7f0000000280)=""/45, 0x30, 0x0, 0x80, 0xa4, &(0x7f0000000300)="33f1bdd20a050539af88352ec249d37799b8cd2874607d2092c7a04596a50d3b286bdc8bb098f8a898ad7621992d43224a96e7c00abab9e5121906b2f0df3344ac6c3f8d683023609a0d74ffb0fb60b04b6a38807b5567692a7fb0e94b867bb5aa07f46d6f5a53dc5831a1cc76714835f75f5212ff907b8c8905d73a329f20f4", &(0x7f0000000640)="a36fcb12f7caeaf541f375ac97cebc449c46424c338d6afd67c08236e9d30c6ffdd95c8de06fdc449f03f50abbc075fecc5c60f6c2794f73aa378052b25da5445791bd0779274f14cbe2986c81aa47d34bc4fa0d8394d66fec4a1ae24dd563a86a82fab8bc2bfbf1dc8575ef821c7c37d8d2263a97740026a999ae12defdfc803bbb7ea15ef9dd567b8477df670f26e8f746bf2eed469a083f7290f9c14217ec3541235b", 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d629346142f64381c4553399c5793c2f2fd4682ae78c11b15e0aef6d5d3c75b3c0a02cb95aa72ad67ab1c7de4d05606a769acefa77febf4ec889a380000000b05d4f39de9d779701790e355a1d1bec8d5428ae66b46e2c4d78b5f05e885a05158bbcda6cb8b9288f5aedfc72a7769bea6722024116534ba9b8ecab2e0dfd2aa5f6d7153dbeaca10fd8a7c2a4bab67a70fabb401f789144623f0990d614f61d8f94", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1}, &(0x7f0000001c00), &(0x7f0000001c40)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000700)={'nat\x00', 0x4, "dea50c52"}, &(0x7f0000001740)=0x2c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000b40), 0x2b842ac, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = inotify_init1(0x0) fcntl$setown(r9, 0x8, 0xffffffffffffffff) fcntl$getownex(r9, 0x10, &(0x7f0000000140)={0x0, 0x0}) r11 = syz_open_procfs(r10, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r11, 0xc0185879, &(0x7f0000000180)={@id={0x2, 0x0, @auto="ffee8e7268b4d909e4003f00"}}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.195552495s ago: executing program 0 (id=3721): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES8, @ANYRESHEX=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000000), 0x1, 0x4f3, &(0x7f0000000bc0)="$eJzs3d9rXFkdAPDvvcnspt2sk0WRteDuYivp6nYm2bi7QaRWEH0qWOt7jMkkhEwyITOpzVA0xVdBEFHBJ598EfwDBOmfIEJB30WLItrqgw/aKzNzp03TmSQlP8adfD5wes+55977PWeauT/mHu4N4Mx6KyKuRcRIRLwdEcV8fpqnuVZhp7Pco4d3FlopiSy7+fckknxed1ut8mhEvNJZJcYi4utfjfhW8nzc+nZzdb5arWzm5XJjbaNc325eWVmbX64sV9ZnZqbfn/1g9r3ZqSx3pH5eiIirX37w4x/84itXf/POt/8499fL32k16wsf77Q7IhaOFKCPzrY/887u5rc+o82TCDYAI3l/CnsrbgymPQAA7K91jn8xIj7VPv8vxkj7bA4AAAAYJtkXx+M/SUQGAAAADK00IsYjSUv5WIDxSNNSqTOG92NxPq3W6o3PLtW21hdbdRETUUiXVqqVqXys8EQUklZ5up1/Wn53T3kmIl6LiB8Vz7XLpYVadXHQP34AAADAGfHKm89e//+rmLbzAAAAwJCZ6FsAAAAAhoVLfgAAABh+rv8BAABgqH3t+vVWyrrv8V68tb21Wrt1ZbFSXy2tbS2UFmqbG6XlWm25/cy+tT6b+X43U63VNj4X61u3y41KvVGubzfn1mpb6425lfbrwAEAAIABeO3Ne39IImLn8+faKfLnAAI848+DbgBwnEYG3QBgYEYH3QBgYAoHLjH6AssCH0bJAfV9B+/89vjbAgAAnIzJTzx///+lvM71Pgw3Y30A4Oxx/x/OroIRgHDmXepMXu5Xf/T7/1n2wo0CAACO1Xg7JWkpvxc4HmlaKkW82n4tQCFZWqlWpiLiIxHx+2Lh5VZ5ur1mcuCYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAIChFpH+JWk/zT9isnhpfO/vAy8l/y7Gg7zws5s/uT3faGxOt+b/o9iuj4jGT/P572ZeCQAAAAD/BzrX6fl0etCtAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDYPHp4Z6GbTjPu374UERO94o/GWHs6FoWIOP/PJEZ3rZdExMgxxN+5GxGv746fPYnwOMuyibwVveKfO5H43f4nrY8l9sQf666XHkNsOOvutfY/13p9/9J4qz3t/f0fzdNR9d//pU/2fyN99j+vHjLGhfu/KveNfzfiwmjv/U83ftIn/sVDxv/mN5rNfnXZzyMmex5/kmdilRtrG+X6dvPKytr8cmW5sj4zM/3+7Aez781OlZdWqpX8354xfvjJXz/er//n+8SfOKD/lw7Z///ev/3wo51soVf8yxd7H39f7xM/zY99n87zrfrJbn6nk9/tjV/+7o39+r/Yp/8H/f9fPmT/377xvT8dclEA4BTUt5ur89VqZXOfzNghlpGROUom+27n7/Fo24nNkWNtWDboj6W+3eyedZ929EHulQAAgJPw9KR/0C0BAAAAAAAAAAAAAAAAAACAs+s0Hie2N+bOYLoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCv/wUAAP//WIjdwA==") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=ANY=[@ANYBLOB="ac0d0000", @ANYRES16=r8, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000300d0880e400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030007000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff020000000000000000000000000001050003000200000064000080080003000200000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e220000000000000000000000002c080080f4020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc01000000000000000000000000000105000300030000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030001000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a004e200000000500000000000000000000ffffac1e0001040000007c04098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e000000105000300000000007c000080060001000a00000014000200fc0100000000000000000000000000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a00000014000200200100000000000000000000000000020500030001000000a0000080060001000a00000014000200fc0000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030006000000060001000a00000014000200fe8800000000000000000000000001010500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac14141605000300010000007c000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fe8000000000000000000000000000bb050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2400020055fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r9, @ANYBLOB="24000300000000000000000000000000000a00000000000000000000000000000006000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843080007"], 0xdac}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) 5.022131851s ago: executing program 2 (id=3722): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) getdents(r3, 0x0, 0x0) 4.962208057s ago: executing program 2 (id=3724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x2000000}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) setitimer(0x1, &(0x7f00000001c0)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507005c0ef5dcc0d6eb07000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xffff}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.92922s ago: executing program 4 (id=3725): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001d0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='io_uring_file_get\x00', r1, 0x0, 0x5e1a}, 0xf) r2 = epoll_create1(0x0) r3 = socket$packet(0x11, 0x4000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000140)=0x9, 0x4) sendto$inet(r9, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmsg(r9, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x2000201e}) 3.808034325s ago: executing program 2 (id=3726): socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000300)={0xb6, 0xffffffff, 0x4, 0x3, 0x6, [{0x1, 0x9, 0x1, '\x00', 0x400}, {0x3, 0x9, 0x2, '\x00', 0x103}, {0x7fff, 0x0, 0x4, '\x00', 0x8}, {0x80, 0x9, 0x2, '\x00', 0x204}, {0x3, 0x4, 0x1}, {0x2, 0xffff, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 3.7577052s ago: executing program 0 (id=3727): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_open_dev$usbmon(&(0x7f0000000140), 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x38, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x104}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 3.551553378s ago: executing program 4 (id=3728): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b3, 0x3108, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xa, r7, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xd, 0x475a, 0x6}, 0x10, 0x0, r2, 0x1, &(0x7f0000000680), &(0x7f00000006c0)=[{0x40, 0x1, 0x4, 0xb}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10) unshare(0x22020600) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000200), 0xfea7) copy_file_range(r10, &(0x7f00000001c0), r9, 0x0, 0xffffffffa003e45b, 0x700000000000000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000040)={'vlan0\x00', 0x400}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x5, {0x5, 0x0, "588438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.526662551s ago: executing program 3 (id=3729): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201064dbd81"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001680)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00038d0000008d03709bd45166ce68", @ANYRES16]}, 0x0) 3.380320555s ago: executing program 0 (id=3730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r2) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.369927005s ago: executing program 0 (id=3731): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000040300f1101000000000001090224000100000000090400000103c59a0009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/70, 0x11}], 0x1, 0x3a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x2, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_connect$cdc_ecm(0x0, 0x202, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc, 0x1, 0x1, 0x4, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0xcb, 0x3, 0x2, 0x6, 0x0, 0x8a, {{0x5}, {0x5, 0x24, 0x0, 0x296}, {0xd, 0x24, 0xf, 0x1, 0x2d, 0x1, 0x0, 0xe}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @dmm={0x7, 0x24, 0x14, 0x2, 0xf083}, @mdlm_detail={0xf4, 0x24, 0x13, 0x82, "73723147bb21c2649d870e2beb9da405ade68de3e9ec5413725416ad0bd6c958f62bdeba8e802363218624ccce44877d2b9f999979e12d34eaece5090e44662ce9b7f3a35ab6ec2aa5a95f62707fb1214e1fa5825cac30a2abb63d06a79cc469b53a59adfdb3517303f42ae17139da79106c8632f31e701832cbcd277663f5e6bd5698fb29777a4eaa1cd5bc426d558d8efd610b27c88eec2c0f333a81d257851b501972b17f5036db322901edefd0e5baafb2b3f5e0547d2372e0b95e6a2afdfb2a49b2fa8639cc5b6abb3ceb7643a6071edb2324d6b7f479ce27e5b8ce9a0f7ae7e729f4f08769f30091c1ed35313d"}, @obex={0x5, 0x24, 0x15, 0x9}, @obex={0x5, 0x24, 0x15, 0x3}, @mdlm_detail={0x9b, 0x24, 0x13, 0x0, "c5eddcf6741f59ad7bc2d22e5540f75fa6667013be07160747e6cc31b494bc1f804e4746e229c23067c630c36d356961c5368ddd800b6b484f401a4c15a6cc1fb2dd01774a884f9e275bdc259c8d5cd37b86d10ab153f1cff4f04c4848bef1229c6fb8fbd0e972b3cd87cf98a257b0c0ceb19cd6a67fa6d72520b2bbb4e64fceb840c913f00f1e4812e69b323994a7986b7c176bdebaa9"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x9c, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x5, 0x4}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x6, 0x6, 0x8, 0x8, 0x1c}, 0x114, &(0x7f0000000a80)={0x5, 0xf, 0x114, 0x3, [@generic={0xf9, 0x10, 0x2, "88629305aa829b4d078141eef61de24cb5723cffd007777a86706c41c41945a51eeddf4c1993661008a593b6be41022c77ec687a1a10f8740bb3d46ab768afd4a85fb0c8cd6f84fc9ee6c74211fe6cfd5bbd8449ab1d0dd73193c2df3fffa8cbb03c3858ff3b1de9df7bdee78334a5d2209c3b10ff8e1b37a8946e4edafffae08ef04df6a57f05855c0d0e433e8860d85d98f199838f7b5d31c03ac806cba4f3643a38df85e9673221f647dbfc0352212a025e224c9b3cc633039583640964cbcc931e62609b46f465877a5fec62861705b61b3c09322b45e083475941259e05549f4cdd1757d152a8721b6556a30e366f76c7f6980a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xff, 0x10, 0x5}, @ss_container_id={0x0, 0x10, 0x4, 0xa, "afc02c9df0262122a4b2dab53be4a409"}]}, 0x3, [{0x77, &(0x7f0000000300)=@string={0x77, 0x3, "4661974271ee207a7deea3ba927099f5331d4bc3a84e39df4d68a2426e2ab0b59978ec2650bb43a2bf59328dfa647cd827d5ce30d31a9feac7bd1e7c8c5675c529f9df549b3794fef6780075dd326fa6f48b4a669b845622e5c7124284091625cd4dcc3f37d174a54e909bcacd5afa48c5083ab2cb"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000500)=@string={0x0, 0x3, "5359fab01314520f84fd0bfeef3671ec12b9e955b0a80eccfcd8e3c81c8603ee31664551c108859cacd0979a6599813aae6989aa68a80b6f8e0387b8b587a5995d7166187289d56d90c8"}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00') read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @generic={0x1, 0x7, 0xe, 0x0, 0x8000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00900d0000000ac2290600421e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.942413056s ago: executing program 2 (id=3732): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x70bd2b, 0x29d26, {0x0, 0x0, 0x0, 0x0, 0x1c0d5, 0x48041}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x4050) open(&(0x7f0000000000)='./file0\x00', 0xa0000, 0x89) 2.781925931s ago: executing program 1 (id=3733): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000009000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000067da4d6e6606035a1f559ecfbe8547a8f9c0eacaf92d5792e0765c08"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=r2], 0x50) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f00000009c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0x3, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)) r4 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x14040, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r4, 0x20, &(0x7f0000000040)={&(0x7f0000000340)=""/207, 0xcf, 0x0, &(0x7f0000000000)=""/23, 0x17}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1.874130145s ago: executing program 2 (id=3734): r0 = syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000001a80)={0x24, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, &(0x7f00000004c0)={0x0, 0xd, 0xd5, {0xd5, 0x23, "c501470c6b57e4a1d42b8426e9ba9e799c350949858eda64300b627c342ee6e0e0c7fecafa20046c26ac75fbe74ee98f2456aae42b976a497c820aef6ede00b4752c40626121aef71b765291d602cba5c1741b98509ac3ed8ba4f92e279b49050f9190c71bd8155880ed5ff17d5eb2d0777067ca015e47da7539b118dd76e656be86d24367b21730f05927fed5a01bae3b2acc43ef2e66b42cfdcafc4ac6db398c97c0235cc204990a7667cb9c0396cff22152ca02e92b01abd5aefc812a33e6fc0182992b6425721e11b43587eff90e0f7321"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0xb, 0xfa, "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"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x31}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x81, 0x2, "60ca"}, &(0x7f00000005c0)={0x20, 0x82, 0x3, "40c59b"}, &(0x7f0000000600)={0x20, 0x83, 0x3, "4e1b8f"}, &(0x7f0000000800)={0x20, 0x84, 0x3, "6a0f0a"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "09bae2"}}) 1.575932263s ago: executing program 4 (id=3735): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) getdents(r3, 0x0, 0x0) 1.494229721s ago: executing program 4 (id=3736): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x2000000}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) setitimer(0x1, &(0x7f00000001c0)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507005c0ef5dcc0d6eb07000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xffff}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.059726162s ago: executing program 3 (id=3737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0xfd46, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r2, 0x5) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x1, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0xe000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 717.696904ms ago: executing program 4 (id=3738): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002dc0)={'wg1\x00', 0x0}) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000b45800000900000002000000082c0000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="050000000300000004008000070000c318c5d6d600"/33], 0x48) syz_usb_control_io(r0, 0x0, 0x0) 438.149739ms ago: executing program 0 (id=3739): chdir(0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800090, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f00000021c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000005304000700bd7000fddbdf2501de2200"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x8cc40, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r8, &(0x7f0000000080), 0x208e24b) 216.78944ms ago: executing program 3 (id=3740): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigsuspend(0x0, 0x0) 133.443148ms ago: executing program 3 (id=3741): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_open_dev$usbmon(&(0x7f0000000140), 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x38, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x104}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 54.699596ms ago: executing program 3 (id=3742): r0 = syz_create_resource$binfmt(&(0x7f0000001140)='./file0\x00') r1 = openat$binfmt(0xffffff9c, r0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file0'}, 0xb) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r3 = openat$binfmt(0xffffff9c, r2, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f00000000c0), 0x4) execve(0x0, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r5 = openat$binfmt(0xffffff9c, r4, 0x41, 0x1ff) write$binfmt_script(r5, &(0x7f00000000c0), 0x4) 0s ago: executing program 3 (id=3743): r0 = syz_create_resource$binfmt(0x0) init_module(0x0, 0x78, 0x0) init_module(&(0x7f0000002580)=ANY=[], 0x78, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) init_module(0x0, 0x78, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) write$binfmt_aout(r2, &(0x7f0000000600)={{0xcc, 0x6, 0x80, 0xe4, 0x2c6, 0x9, 0x2b4, 0x9}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6b641175293bb2a6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000600)={{0xcc, 0x6, 0x80, 0xe4, 0x2c6, 0x9, 0x2b4, 0x9}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6b641175293bb2a6) init_module(0x0, 0x1001, 0x0) init_module(0x0, 0x78, 0x0) init_module(0x0, 0x78, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') init_module(0x0, 0x1001, 0x0) init_module(0x0, 0x78, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) write$binfmt_aout(r3, 0x0, 0x0) init_module(&(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46360505f2000000000000000001003e007704000079000000000000004000000000000000c2030000000000001000000000003800020040000600020000000060000000000400000000000000d04200000000000001000000000000000300000000000000ff030000000000000500"/1020], 0x578, 0x0) init_module(0x0, 0x0, 0x0) execve(&(0x7f0000005180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): quest: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 722.194584][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 722.221109][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 722.229253][T13062] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 722.238088][T13062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.246706][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 722.259169][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 722.280332][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 722.289031][ T24] audit: type=1326 audit(1727443226.070:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.2.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25be8baf39 code=0x7ffc0000 [ 722.340213][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 722.347397][ T24] audit: type=1326 audit(1727443226.112:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.2.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f25be8baf39 code=0x7ffc0000 [ 722.349267][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 722.377125][ T24] audit: type=1326 audit(1727443226.112:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.2.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25be8baf39 code=0x7ffc0000 [ 722.622026][T14465] attempt to access beyond end of device [ 722.622026][T14465] loop4: rw=2049, want=45104, limit=40427 [ 722.635319][T14817] EXT4-fs (loop2): 1 orphan inode deleted [ 722.641332][T14817] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue [ 722.663072][T14817] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 722.766493][ T20] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 723.171751][ T24] audit: type=1107 audit(1727443226.942:2705): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Þ"' [ 723.267039][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 723.299414][T13062] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 723.306273][T13062] uvcvideo: No valid video chain found. [ 723.312188][T13062] usb 2-1: USB disconnect, device number 100 [ 723.412258][ T20] usb 4-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 723.420828][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 723.858074][T14840] usb usb8: usbfs: process 14840 (syz.0.3531) did not claim interface 0 before use [ 723.889813][ T24] audit: type=1107 audit(1727443227.729:2706): pid=14836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Þ"' [ 723.984053][T14844] erofs: Unknown parameter '@' [ 724.009964][ T20] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 724.018882][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.026691][ T20] usb 4-1: Product: syz [ 724.030657][ T20] usb 4-1: Manufacturer: syz [ 724.035050][ T20] usb 4-1: SerialNumber: syz [ 724.529800][T14853] netlink: 'syz.4.3534': attribute type 4 has an invalid length. [ 724.772024][ T20] r8152 4-1:1.0: Unknown version 0x0000 [ 724.975624][T14864] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.982827][T14864] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.990278][T14864] device bridge_slave_0 entered promiscuous mode [ 724.997410][T14864] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.004504][T14864] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.012168][T14864] device bridge_slave_1 entered promiscuous mode [ 725.064657][T14864] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.071515][T14864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.078624][T14864] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.085387][T14864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.105206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 725.112618][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.120086][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.129052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 725.137217][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.137236][ T887] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 725.144061][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.164757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 725.173364][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.180205][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.187852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 725.207579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 725.229278][ T20] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 725.248308][T14873] device dummy0 entered promiscuous mode [ 725.308829][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 725.355617][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 725.367307][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 725.374924][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 725.385456][T14864] device veth0_vlan entered promiscuous mode [ 725.395894][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 725.404736][T14864] device veth1_macvtap entered promiscuous mode [ 725.415583][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 725.425898][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 725.457321][ T2660] device bridge_slave_1 left promiscuous mode [ 725.463374][ T2660] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.470909][ T2660] device bridge_slave_0 left promiscuous mode [ 725.476901][ T2660] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.484469][ T2660] device veth1_macvtap left promiscuous mode [ 725.490494][ T2660] device veth0_vlan left promiscuous mode [ 725.562705][ T887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.574130][ T887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.583950][ T887] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 725.592924][ T887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.601830][ T887] usb 5-1: config 0 descriptor?? [ 725.629382][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.640169][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.650445][ T20] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 725.659406][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.668130][ T20] usb 3-1: config 0 descriptor?? [ 725.954514][ T457] usb 4-1: USB disconnect, device number 85 [ 726.009640][T14882] usb usb8: usbfs: process 14882 (syz.1.3542) did not claim interface 0 before use [ 726.051657][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 726.051695][ T24] audit: type=1107 audit(1727443229.986:2712): pid=14878 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Þ"' [ 726.210277][ T887] hid (null): bogus close delimiter [ 726.215758][ T20] hid-led 0003:0FC5:B080.009B: item fetching failed at offset 0/3 [ 726.224193][ T20] hid-led: probe of 0003:0FC5:B080.009B failed with error -22 [ 726.286100][ T347] print_req_error: 39 callbacks suppressed [ 726.286116][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 726.302998][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.313769][ T347] buffer_io_error: 30 callbacks suppressed [ 726.313778][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 726.748868][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.759712][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 726.770547][ T24] audit: type=1107 audit(1727443230.731:2713): pid=14884 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Þ"' [ 726.773547][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.806630][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 726.814938][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.825741][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 726.844025][T14894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3545'. [ 726.865612][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.877132][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 726.899916][ T20] usb 3-1: USB disconnect, device number 82 [ 727.011272][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 727.029767][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 727.044902][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 727.054110][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 727.065264][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 727.073302][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 727.084850][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 727.092884][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 727.101852][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 727.131533][ T887] usb 5-1: language id specifier not provided by device, defaulting to English [ 727.163106][ T674] tipc: Left network mode [ 727.167561][T14897] erofs: Unknown parameter '@' [ 727.182759][T14897] FAT-fs (loop3): bogus number of reserved sectors [ 727.189749][T14897] FAT-fs (loop3): Can't find a valid FAT filesystem [ 727.201586][T14901] erofs: Unknown parameter '@' [ 727.233102][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.240231][T14903] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.247295][T14903] device bridge_slave_0 entered promiscuous mode [ 727.251625][T14901] FAULT_INJECTION: forcing a failure. [ 727.251625][T14901] name failslab, interval 1, probability 0, space 0, times 0 [ 727.256868][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.273622][T14901] CPU: 0 PID: 14901 Comm: syz.0.3548 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 727.274629][T14903] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.283402][T14901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 727.283407][T14901] Call Trace: [ 727.283428][T14901] dump_stack_lvl+0x1e2/0x24b [ 727.283439][T14901] ? bfq_pos_tree_add_move+0x43b/0x43b [ 727.283456][T14901] ? vfs_write+0x852/0xe70 [ 727.290657][T14903] device bridge_slave_1 entered promiscuous mode [ 727.300159][T14901] ? kmem_cache_free+0xa9/0x1e0 [ 727.300175][T14901] dump_stack+0x15/0x17 [ 727.332182][T14901] should_fail+0x3c6/0x510 [ 727.336430][T14901] ? __se_sys_mount+0x9b/0x3b0 [ 727.341026][T14901] __should_failslab+0xa4/0xe0 [ 727.345627][T14901] should_failslab+0x9/0x20 [ 727.349965][T14901] __kmalloc_track_caller+0x5f/0x320 [ 727.355087][T14901] ? strnlen_user+0xea/0x1f0 [ 727.359523][T14901] strndup_user+0x76/0x150 [ 727.363769][T14901] __se_sys_mount+0x9b/0x3b0 [ 727.368190][T14901] ? __x64_sys_mount+0xd0/0xd0 [ 727.372790][T14901] __x64_sys_mount+0xbf/0xd0 [ 727.377221][T14901] do_syscall_64+0x34/0x70 [ 727.381470][T14901] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 727.387198][T14901] RIP: 0033:0x7f7275014f39 [ 727.391450][T14901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.410891][T14901] RSP: 002b:00007f7273c8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 727.419141][T14901] RAX: ffffffffffffffda RBX: 00007f72751ccf80 RCX: 00007f7275014f39 [ 727.426952][T14901] RDX: 0000000020000040 RSI: 0000000020000200 RDI: 0000000020000000 [ 727.434764][T14901] RBP: 00007f7273c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 727.442574][T14901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.450392][T14901] R13: 0000000000000000 R14: 00007f72751ccf80 R15: 00007fff55d05888 [ 727.526239][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.533116][T14903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.540242][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.546994][T14903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.599652][T14903] device veth0_vlan entered promiscuous mode [ 728.028658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 728.036619][ T887] uclogic 0003:256C:006D.009C: failed retrieving string descriptor #200: -71 [ 728.226742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 728.239682][ T887] uclogic 0003:256C:006D.009C: failed retrieving pen parameters: -71 [ 728.251740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 728.260331][ T887] uclogic 0003:256C:006D.009C: failed probing pen v2 parameters: -71 [ 728.366081][ T887] uclogic 0003:256C:006D.009C: failed probing parameters: -71 [ 728.377672][ T887] uclogic: probe of 0003:256C:006D.009C failed with error -71 [ 728.390018][ T887] usb 5-1: USB disconnect, device number 100 [ 728.404374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 728.412448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 728.420672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 728.428843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 728.436658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 728.444003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 728.453219][T14914] device dummy0 entered promiscuous mode [ 728.462733][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3554'. [ 728.573727][T14903] device veth1_macvtap entered promiscuous mode [ 728.647390][T14933] usb usb8: usbfs: process 14933 (syz.3.3555) did not claim interface 0 before use [ 728.741033][ T24] audit: type=1107 audit(1727443232.747:2714): pid=14923 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Þ"' [ 728.763311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 728.787804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 728.796717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 728.799230][T14940] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 728.816414][T14940] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 728.848101][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 728.858527][ T889] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 728.878270][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 728.886664][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 728.894998][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 729.061557][T14946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58112 sclass=netlink_route_socket pid=14946 comm=syz.0.3560 [ 729.081744][ T24] audit: type=1400 audit(1727443233.188:2715): avc: denied { write } for pid=14939 comm="syz.0.3560" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 729.138360][T14949] device dummy0 entered promiscuous mode [ 729.256717][ T24] audit: type=1400 audit(1727443233.188:2716): avc: denied { add_name } for pid=14939 comm="syz.0.3560" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 729.281822][ T24] audit: type=1400 audit(1727443233.188:2717): avc: denied { setattr } for pid=14939 comm="syz.0.3560" name="work" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 729.303723][ T24] audit: type=1400 audit(1727443233.188:2718): avc: denied { remove_name } for pid=14939 comm="syz.0.3560" name="#87" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 729.326015][ T24] audit: type=1400 audit(1727443233.188:2719): avc: denied { rename } for pid=14939 comm="syz.0.3560" name="#87" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 729.347914][ T24] audit: type=1400 audit(1727443233.188:2720): avc: denied { unlink } for pid=14939 comm="syz.0.3560" name="#87" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 729.370197][ T24] audit: type=1400 audit(1727443233.188:2721): avc: denied { unlink } for pid=14939 comm="syz.0.3560" name="#88" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 729.392108][T13058] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 729.393380][ T889] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 729.407489][ T889] usb 3-1: config 0 has no interface number 0 [ 729.413434][ T889] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 729.425572][ T674] device dummy0 left promiscuous mode [ 729.431105][ T674] device veth1_macvtap left promiscuous mode [ 729.436912][ T674] device veth0_vlan left promiscuous mode [ 729.495086][T14864] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 729.509327][T14864] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 729.523586][T14864] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 729.536851][T14864] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 729.551471][T14864] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 729.565784][T14864] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 729.579121][T14864] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 729.593245][T14864] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 729.607536][T14864] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 729.621431][ T889] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 729.629618][T14864] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 729.630378][ T889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.630388][ T889] usb 3-1: Product: syz [ 729.630403][ T889] usb 3-1: Manufacturer: syz [ 729.660511][ T889] usb 3-1: SerialNumber: syz [ 729.666061][ T889] usb 3-1: config 0 descriptor?? [ 729.677396][T14952] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.684378][T14952] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.691738][T14932] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 729.699013][T14952] device bridge_slave_0 entered promiscuous mode [ 729.707345][ T889] usb-storage 3-1:0.20: USB Mass Storage device detected [ 729.714308][T14952] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.722612][T14952] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.729865][T14952] device bridge_slave_1 entered promiscuous mode [ 729.760498][T13058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.764086][ T889] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 729.783290][T13058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.793197][T13058] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 729.796546][T14952] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.802577][T13058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.808882][T14952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.808964][T14952] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.830684][T14952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.838866][T13058] usb 2-1: config 0 descriptor?? [ 729.854392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 729.862033][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.870215][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.891995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 729.892633][T14959] EXT4-fs (loop4): 1 orphan inode deleted [ 729.903798][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.906257][T14959] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue [ 729.912232][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.917398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 729.949955][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.956825][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.964182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 729.971967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 729.979965][T14959] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff) [ 729.988695][T14952] device veth0_vlan entered promiscuous mode [ 730.002523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 730.017029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 730.026634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 730.034125][T14465] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 730.034664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 730.055497][T14465] EXT4-fs error (device loop4): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 730.068788][T14465] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5897: Corrupt filesystem [ 730.078928][T14465] EXT4-fs error (device loop4): ext4_dirty_inode:6107: inode #2: comm syz-executor: mark_inode_dirty error [ 730.090810][ T9] EXT4-fs error (device loop4): __ext4_get_inode_loc:4437: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 730.104134][ T9] EXT4-fs error (device loop4): __ext4_get_inode_loc:4437: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 730.117953][ T9] EXT4-fs error (device loop4): __ext4_get_inode_loc:4437: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 730.134234][T14465] EXT4-fs error (device loop4): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 730.136834][T14952] device veth1_macvtap entered promiscuous mode [ 730.153424][T14465] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5897: Corrupt filesystem [ 730.164032][ T889] scsi host1: usb-storage 3-1:0.20 [ 730.165357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 730.176799][T14465] EXT4-fs error (device loop4): ext4_quota_off:6521: inode #3: comm syz-executor: mark_inode_dirty error [ 730.199773][T14964] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.206850][T14964] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.214383][T14964] device bridge_slave_0 entered promiscuous mode [ 730.221809][T14964] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.228696][T14964] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.236020][T14964] device bridge_slave_1 entered promiscuous mode [ 730.252703][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 730.264707][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 730.273407][T14948] udc-core: couldn't find an available UDC or it's busy [ 730.297570][T14948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 730.305272][T14964] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.312118][T14964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.319220][T14964] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.326008][T14964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.399317][T14975] FAULT_INJECTION: forcing a failure. [ 730.399317][T14975] name failslab, interval 1, probability 0, space 0, times 0 [ 730.411732][T14975] CPU: 1 PID: 14975 Comm: syz.3.3574 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 730.421512][T14975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 730.431407][T14975] Call Trace: [ 730.434542][T14975] dump_stack_lvl+0x1e2/0x24b [ 730.439049][T14975] ? bfq_pos_tree_add_move+0x43b/0x43b [ 730.444341][T14975] dump_stack+0x15/0x17 [ 730.448333][T14975] should_fail+0x3c6/0x510 [ 730.452589][T14975] ? __alloc_skb+0x80/0x510 [ 730.456926][T14975] __should_failslab+0xa4/0xe0 [ 730.461528][T14975] should_failslab+0x9/0x20 [ 730.465866][T14975] kmem_cache_alloc+0x3d/0x2e0 [ 730.470467][T14975] __alloc_skb+0x80/0x510 [ 730.474632][T14975] ? __kasan_check_write+0x14/0x20 [ 730.479582][T14975] __napi_alloc_skb+0x15d/0x2e0 [ 730.484269][T14975] napi_get_frags+0x6a/0x170 [ 730.488696][T14975] tun_get_user+0xc88/0x38f0 [ 730.493120][T14975] ? __kasan_check_write+0x14/0x20 [ 730.498069][T14975] ? do_sys_openat2+0x1fc/0x710 [ 730.502757][T14975] ? _kstrtoull+0x3a0/0x4a0 [ 730.507094][T14975] ? tun_do_read+0x1f60/0x1f60 [ 730.511692][T14975] ? kstrtouint_from_user+0x20a/0x2a0 [ 730.516901][T14975] ? kstrtol_from_user+0x310/0x310 [ 730.521851][T14975] ? queue_stack_map_push_elem+0x550/0x550 [ 730.527494][T14975] ? avc_policy_seqno+0x1b/0x70 [ 730.532176][T14975] ? selinux_file_permission+0x2bb/0x560 [ 730.537644][T14975] ? fsnotify_perm+0x67/0x4e0 [ 730.542161][T14975] tun_chr_write_iter+0x1a8/0x250 [ 730.547157][T14975] vfs_write+0xb4c/0xe70 [ 730.551222][T14975] ? putname+0xe7/0x140 [ 730.555216][T14975] ? __traceiter_kmem_cache_free+0x2e/0x50 [ 730.560859][T14975] ? kernel_write+0x3d0/0x3d0 [ 730.565375][T14975] ? __fdget_pos+0x209/0x3a0 [ 730.569798][T14975] ? ksys_write+0x77/0x2c0 [ 730.574051][T14975] ksys_write+0x199/0x2c0 [ 730.578217][T14975] ? __ia32_sys_read+0x90/0x90 [ 730.582816][T14975] ? debug_smp_processor_id+0x17/0x20 [ 730.588023][T14975] __x64_sys_write+0x7b/0x90 [ 730.592448][T14975] do_syscall_64+0x34/0x70 [ 730.596705][T14975] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 730.602429][T14975] RIP: 0033:0x7f96e2913f39 [ 730.606683][T14975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.626122][T14975] RSP: 002b:00007f96e158d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 730.634366][T14975] RAX: ffffffffffffffda RBX: 00007f96e2acbf80 RCX: 00007f96e2913f39 [ 730.642176][T14975] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000008 [ 730.649987][T14975] RBP: 00007f96e158d090 R08: 0000000000000000 R09: 0000000000000000 [ 730.657797][T14975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.665611][T14975] R13: 0000000000000000 R14: 00007f96e2acbf80 R15: 00007ffc60391818 [ 730.682107][ T2660] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.688631][T13058] pantherlord 0003:0F30:0111.009D: item fetching failed at offset 6/7 [ 730.697058][ T2660] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.697074][T13058] pantherlord 0003:0F30:0111.009D: parse failed [ 730.710299][T13058] pantherlord: probe of 0003:0F30:0111.009D failed with error -22 [ 730.761756][T14972] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.768756][T14972] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.775991][T14972] device bridge_slave_0 entered promiscuous mode [ 730.783602][T14972] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.790433][T14972] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.798323][T14972] device bridge_slave_1 entered promiscuous mode [ 730.808375][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 730.816100][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 730.842737][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 730.851444][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 730.859965][ T2660] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.866806][ T2660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.874258][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 730.891299][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 730.899641][ T2660] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.906497][ T2660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.928312][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 730.936534][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 730.944218][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 730.946461][T14979] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 730.954869][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 730.962675][T14979] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 730.976527][T14979] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 731.002819][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 731.004984][T14979] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 731.010964][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 731.017787][T14979] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 731.033908][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 731.042138][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 731.050215][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 731.057802][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 731.065307][T14979] attempt to access beyond end of device [ 731.065307][T14979] loop3: rw=2049, want=53256, limit=40427 [ 731.076906][T14979] attempt to access beyond end of device [ 731.076906][T14979] loop3: rw=2049, want=53320, limit=40427 [ 731.088504][T14964] device veth0_vlan entered promiscuous mode [ 731.100591][T14952] attempt to access beyond end of device [ 731.100591][T14952] loop3: rw=2049, want=45104, limit=40427 [ 731.127522][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 731.135990][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 731.153506][T14964] device veth1_macvtap entered promiscuous mode [ 731.180425][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 731.188724][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 731.197876][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 731.206831][ T674] device bridge_slave_1 left promiscuous mode [ 731.213049][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.220412][ T674] device bridge_slave_0 left promiscuous mode [ 731.226559][ T674] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.234144][ T674] device veth1_macvtap left promiscuous mode [ 731.240061][ T674] device veth0_vlan left promiscuous mode [ 731.303100][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 731.311186][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 731.316053][T14966] usb 3-1: reset full-speed USB device number 83 using dummy_hcd [ 731.331246][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 731.344955][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 731.352863][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.359619][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.367387][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 731.375480][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.382308][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.389671][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 731.402642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 731.422224][ T347] print_req_error: 32 callbacks suppressed [ 731.422239][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 731.428770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 731.461957][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 731.465433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 731.473117][T13062] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 731.482599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 731.489079][ T347] buffer_io_error: 25 callbacks suppressed [ 731.489088][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 731.509712][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 731.512711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 731.527937][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 731.528020][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 731.543572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 731.553778][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 731.554637][T14972] device veth0_vlan entered promiscuous mode [ 731.567015][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 731.574787][T14972] device veth1_macvtap entered promiscuous mode [ 731.584311][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 731.592188][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 731.592216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 731.603326][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 731.620021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 731.631298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 731.725944][T13063] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 731.795492][T14996] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 731.803121][T14996] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 731.811986][T14996] F2FS-fs (loop4): invalid crc value [ 731.818410][T14996] F2FS-fs (loop4): Found nat_bits in checkpoint [ 731.830686][T13062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.841535][T13062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.848468][T14996] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 731.859033][T14996] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 731.886130][ T889] usb 2-1: USB disconnect, device number 101 [ 731.925815][T13062] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 731.934840][T13062] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 731.945581][T13062] usb 4-1: Product: syz [ 731.952533][T13062] usb 4-1: config 0 descriptor?? [ 731.957327][T13063] usb 1-1: Using ep0 maxpacket: 32 [ 731.986145][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 731.986156][ T24] audit: type=1326 audit(1727443236.243:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.1.3575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71bf1c3f39 code=0x0 [ 732.049560][T15008] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3569'. [ 732.249642][T13063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 732.261235][T13063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 732.272797][T13063] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 732.282458][T13063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.291661][ T674] device bridge_slave_1 left promiscuous mode [ 732.291999][T13063] usb 1-1: config 0 descriptor?? [ 732.298183][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.310053][ T674] device bridge_slave_0 left promiscuous mode [ 732.316117][ T674] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.323177][T14991] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 732.331120][ T674] device dummy0 left promiscuous mode [ 732.336079][T13063] hub 1-1:0.0: USB hub found [ 732.336414][ T674] device veth1_macvtap left promiscuous mode [ 732.346823][ T674] device veth0_vlan left promiscuous mode [ 732.431017][T13059] usb 3-1: USB disconnect, device number 83 [ 732.449850][ T887] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 732.584419][T13062] konepure 0003:1E7D:2DB4.009E: item fetching failed at offset 10/11 [ 732.592690][T13062] konepure 0003:1E7D:2DB4.009E: parse failed [ 732.598566][T13062] konepure: probe of 0003:1E7D:2DB4.009E failed with error -22 [ 732.688040][ T887] usb 5-1: Using ep0 maxpacket: 32 [ 732.829262][ T887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.840222][ T887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.850119][ T887] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 732.858987][ T887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.859198][T13059] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 732.867865][ T887] usb 5-1: config 0 descriptor?? [ 733.002792][T15025] netlink: 'syz.1.3580': attribute type 4 has an invalid length. [ 733.393372][ T674] device bridge_slave_1 left promiscuous mode [ 733.399425][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.406816][ T674] device bridge_slave_0 left promiscuous mode [ 733.412795][ T674] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.420356][ T674] device dummy0 left promiscuous mode [ 733.425702][ T674] device veth1_macvtap left promiscuous mode [ 733.431619][ T674] device veth0_vlan left promiscuous mode [ 733.535552][T13059] usb 3-1: Using ep0 maxpacket: 8 [ 733.607097][T15028] FAULT_INJECTION: forcing a failure. [ 733.607097][T15028] name failslab, interval 1, probability 0, space 0, times 0 [ 733.619534][T15028] CPU: 0 PID: 15028 Comm: syz.1.3581 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 733.629288][T15028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 733.639180][T15028] Call Trace: [ 733.642313][T15028] dump_stack_lvl+0x1e2/0x24b [ 733.646819][T15028] ? panic+0x812/0x812 [ 733.650726][T15028] ? bfq_pos_tree_add_move+0x43b/0x43b [ 733.656022][T15028] dump_stack+0x15/0x17 [ 733.660013][T15028] should_fail+0x3c6/0x510 [ 733.664266][T15028] ? __napi_alloc_skb+0x15d/0x2e0 [ 733.669135][T15028] __should_failslab+0xa4/0xe0 [ 733.673730][T15028] should_failslab+0x9/0x20 [ 733.678068][T15028] __kmalloc_track_caller+0x5f/0x320 [ 733.683187][T15028] ? kmem_cache_alloc+0x168/0x2e0 [ 733.688048][T15028] ? __alloc_skb+0x80/0x510 [ 733.692385][T15028] ? __napi_alloc_skb+0x15d/0x2e0 [ 733.697247][T15028] __alloc_skb+0xbc/0x510 [ 733.701417][T15028] ? __kasan_check_write+0x14/0x20 [ 733.706366][T15028] __napi_alloc_skb+0x15d/0x2e0 [ 733.711049][T15028] napi_get_frags+0x6a/0x170 [ 733.715474][T15028] tun_get_user+0xc88/0x38f0 [ 733.719900][T15028] ? __kasan_check_write+0x14/0x20 [ 733.724854][T15028] ? do_sys_openat2+0x1fc/0x710 [ 733.729535][T15028] ? _kstrtoull+0x3a0/0x4a0 [ 733.733875][T15028] ? tun_do_read+0x1f60/0x1f60 [ 733.738473][T15028] ? kstrtouint_from_user+0x20a/0x2a0 [ 733.743681][T15028] ? kstrtol_from_user+0x310/0x310 [ 733.748629][T15028] ? queue_stack_map_push_elem+0x550/0x550 [ 733.754274][T15028] ? avc_policy_seqno+0x1b/0x70 [ 733.758962][T15028] ? selinux_file_permission+0x2bb/0x560 [ 733.764433][T15028] ? fsnotify_perm+0x67/0x4e0 [ 733.768938][T15028] tun_chr_write_iter+0x1a8/0x250 [ 733.773798][T15028] vfs_write+0xb4c/0xe70 [ 733.777878][T15028] ? putname+0xe7/0x140 [ 733.781871][T15028] ? __traceiter_kmem_cache_free+0x2e/0x50 [ 733.787513][T15028] ? kernel_write+0x3d0/0x3d0 [ 733.792026][T15028] ? __fdget_pos+0x209/0x3a0 [ 733.796450][T15028] ? ksys_write+0x77/0x2c0 [ 733.800702][T15028] ksys_write+0x199/0x2c0 [ 733.804870][T15028] ? __ia32_sys_read+0x90/0x90 [ 733.809471][T15028] ? debug_smp_processor_id+0x17/0x20 [ 733.814678][T15028] __x64_sys_write+0x7b/0x90 [ 733.819105][T15028] do_syscall_64+0x34/0x70 [ 733.823363][T15028] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 733.829083][T15028] RIP: 0033:0x7f71bf1c3f39 [ 733.833340][T15028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.852777][T15028] RSP: 002b:00007f71bde3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 733.861023][T15028] RAX: ffffffffffffffda RBX: 00007f71bf37bf80 RCX: 00007f71bf1c3f39 [ 733.868834][T15028] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000008 [ 733.876646][T15028] RBP: 00007f71bde3d090 R08: 0000000000000000 R09: 0000000000000000 [ 733.884455][T15028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.892271][T15028] R13: 0000000000000000 R14: 00007f71bf37bf80 R15: 00007ffff89c7138 [ 733.935821][T13059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.946631][T13059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.956646][T13059] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 733.965557][T13059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.977768][T13059] usb 3-1: config 0 descriptor?? [ 734.066918][T13057] usb 4-1: USB disconnect, device number 86 [ 734.128704][T15034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3582'. [ 734.304564][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 734.315949][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 734.326812][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 734.334716][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 734.345557][T13063] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 734.354071][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 734.362552][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 734.375361][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 734.383299][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 734.391469][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 734.450130][T13063] usbhid 1-1:0.0: can't add hid device: -71 [ 734.456789][T13063] usbhid: probe of 1-1:0.0 failed with error -71 [ 734.492136][T15039] device dummy0 entered promiscuous mode [ 734.500765][T13063] usb 1-1: USB disconnect, device number 103 [ 734.860962][T15042] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 734.869976][T15042] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 734.879618][T13057] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 734.888268][ T887] usbhid 5-1:0.0: can't add hid device: -71 [ 734.894462][ T887] usbhid: probe of 5-1:0.0 failed with error -71 [ 734.903768][ T24] audit: type=1400 audit(1727443239.308:2744): avc: denied { setattr } for pid=15041 comm="syz.1.3585" path="/6/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 734.926286][T15042] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #2: comm syz.1.3585: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 734.933657][ T887] usb 5-1: USB disconnect, device number 101 [ 735.054198][T15047] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 735.068461][T15047] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue [ 735.260132][T13057] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 735.271089][T13057] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 735.282040][T13057] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.291727][T13057] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 735.304845][T13057] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 735.313897][T15049] EXT4-fs error (device loop1): ext4_add_entry:2440: inode #2: comm syz.1.3585: Directory hole found for htree leaf block 0 [ 735.313915][T13057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.335252][T13057] usb 4-1: config 0 descriptor?? [ 735.564577][T14915] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 735.579382][T15033] incfs: Can't find or create .index dir in ./file0 [ 735.586310][T15033] incfs: mount failed -14 [ 735.678834][T13057] usbhid 4-1:0.0: can't add hid device: -71 [ 735.684657][T13057] usbhid: probe of 4-1:0.0 failed with error -71 [ 735.692277][T13057] usb 4-1: USB disconnect, device number 87 [ 735.784733][ T24] audit: type=1326 audit(1727443240.232:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15019 comm="syz.2.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25be8baf39 code=0x7fc00000 [ 735.881027][T15068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3590'. [ 735.892230][T14915] usb 5-1: device descriptor read/64, error -71 [ 735.931133][T15065] erofs: Unknown parameter '@' [ 735.941505][T15065] FAULT_INJECTION: forcing a failure. [ 735.941505][T15065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.992031][T15065] CPU: 1 PID: 15065 Comm: syz.2.3591 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 736.001825][T15065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 736.011715][T15065] Call Trace: [ 736.014848][T15065] dump_stack_lvl+0x1e2/0x24b [ 736.019354][T15065] ? panic+0x812/0x812 [ 736.023261][T15065] ? sysvec_reschedule_ipi+0x83/0x160 [ 736.028467][T15065] ? bfq_pos_tree_add_move+0x43b/0x43b [ 736.031687][T13059] usbhid 3-1:0.0: can't add hid device: -71 [ 736.033773][T15065] dump_stack+0x15/0x17 [ 736.039565][T13059] usbhid: probe of 3-1:0.0 failed with error -71 [ 736.043489][T15065] should_fail+0x3c6/0x510 [ 736.043499][T15065] should_fail_usercopy+0x1a/0x20 [ 736.043509][T15065] _copy_from_user+0x20/0xd0 [ 736.043520][T15065] strndup_user+0xb3/0x150 [ 736.043532][T15065] __se_sys_mount+0xde/0x3b0 [ 736.043548][T15065] ? __kasan_check_write+0x14/0x20 [ 736.051378][T13059] usb 3-1: USB disconnect, device number 84 [ 736.053913][T15065] ? __x64_sys_mount+0xd0/0xd0 [ 736.087148][T15065] ? fpu__clear_all+0x20/0x20 [ 736.091654][T15065] __x64_sys_mount+0xbf/0xd0 [ 736.096077][T15065] do_syscall_64+0x34/0x70 [ 736.100336][T15065] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 736.106058][T15065] RIP: 0033:0x7f25be8baf39 [ 736.110316][T15065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.129751][T15065] RSP: 002b:00007f25bd534038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 736.137999][T15065] RAX: ffffffffffffffda RBX: 00007f25bea72f80 RCX: 00007f25be8baf39 [ 736.145808][T15065] RDX: 0000000020000040 RSI: 0000000020000200 RDI: 0000000020000000 [ 736.153623][T15065] RBP: 00007f25bd534090 R08: 0000000000000000 R09: 0000000000000000 [ 736.161433][T15065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.169245][T15065] R13: 0000000000000000 R14: 00007f25bea72f80 R15: 00007ffdb818ec18 [ 736.207723][ T347] print_req_error: 8 callbacks suppressed [ 736.207738][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 736.225311][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 736.236259][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 736.247500][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 736.258415][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 736.269223][ T347] buffer_io_error: 8 callbacks suppressed [ 736.269231][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 736.283415][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 736.294847][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 736.469855][T14915] usb 5-1: device descriptor read/64, error -71 [ 736.476366][ T887] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 736.949404][T15084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3595'. [ 737.048950][ T24] audit: type=1107 audit(1727443241.460:2746): pid=15074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Þ"' [ 737.280327][T14915] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 737.288119][ T887] usb 1-1: Using ep0 maxpacket: 8 [ 737.421313][T15095] hub 6-0:1.0: USB hub found [ 737.425847][T15095] hub 6-0:1.0: 1 port detected [ 737.441148][ T887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.457194][ T887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.471038][T15096] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3598'. [ 737.484943][ T887] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 737.525613][T15096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3598'. [ 737.534604][ T887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.552573][ T887] usb 1-1: config 0 descriptor?? [ 737.622408][T14915] usb 5-1: device descriptor read/64, error -71 [ 737.856568][T15104] erofs: Unknown parameter '017777777777777777777770177777777777777777777701777777777777777777777ÿÿÿÿÿÿÿÿ' [ 737.901168][T15104] fuse: Bad value for 'fd' [ 738.016100][ T887] playstation 0003:054C:0CE6.009F: unknown main item tag 0x0 [ 738.023370][ T887] playstation 0003:054C:0CE6.009F: unknown main item tag 0x0 [ 738.030546][ T887] playstation 0003:054C:0CE6.009F: unknown main item tag 0x0 [ 738.038079][ T887] playstation 0003:054C:0CE6.009F: unknown main item tag 0x0 [ 738.047789][ T887] playstation 0003:054C:0CE6.009F: unknown main item tag 0x0 [ 738.075700][ T887] playstation 0003:054C:0CE6.009F: unknown main item tag 0x0 [ 738.083267][ T887] playstation 0003:054C:0CE6.009F: unknown main item tag 0x0 [ 738.089981][T15104] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 738.100882][ T887] playstation 0003:054C:0CE6.009F: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 738.104905][T15104] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 738.121513][T15114] erofs: Unknown parameter '@' [ 738.129874][T15104] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 738.136642][T14915] usb 5-1: device descriptor read/64, error -71 [ 738.157524][T15114] FAULT_INJECTION: forcing a failure. [ 738.157524][T15114] name failslab, interval 1, probability 0, space 0, times 0 [ 738.170097][T15114] CPU: 1 PID: 15114 Comm: syz.2.3603 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 738.170623][T15104] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 738.179866][T15114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 738.179871][T15114] Call Trace: [ 738.179888][T15114] dump_stack_lvl+0x1e2/0x24b [ 738.179897][T15114] ? panic+0x812/0x812 [ 738.179906][T15114] ? bfq_pos_tree_add_move+0x43b/0x43b [ 738.179917][T15114] ? preempt_count_add+0x92/0x1a0 [ 738.179926][T15114] ? vfs_write+0x852/0xe70 [ 738.179935][T15114] dump_stack+0x15/0x17 [ 738.179944][T15114] should_fail+0x3c6/0x510 [ 738.179954][T15114] ? getname_flags+0xba/0x520 [ 738.179965][T15114] __should_failslab+0xa4/0xe0 [ 738.179974][T15114] should_failslab+0x9/0x20 [ 738.179983][T15114] kmem_cache_alloc+0x3d/0x2e0 [ 738.179994][T15114] getname_flags+0xba/0x520 [ 738.180004][T15114] user_path_at_empty+0x2d/0x50 [ 738.180022][T15114] __se_sys_mount+0x285/0x3b0 [ 738.194691][T15104] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 738.196727][T15114] ? __x64_sys_mount+0xd0/0xd0 [ 738.196744][T15114] __x64_sys_mount+0xbf/0xd0 [ 738.278836][T15114] do_syscall_64+0x34/0x70 [ 738.283098][T15114] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 738.288810][T15114] RIP: 0033:0x7f25be8baf39 [ 738.293062][T15114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.312510][T15114] RSP: 002b:00007f25bd534038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 738.320748][T15114] RAX: ffffffffffffffda RBX: 00007f25bea72f80 RCX: 00007f25be8baf39 [ 738.328554][T15114] RDX: 0000000020000040 RSI: 0000000020000200 RDI: 0000000020000000 [ 738.336366][T15114] RBP: 00007f25bd534090 R08: 0000000000000000 R09: 0000000000000000 [ 738.344176][T15114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.351988][T15114] R13: 0000000000000000 R14: 00007f25bea72f80 R15: 00007ffdb818ec18 [ 738.361172][T14915] usb usb5-port1: attempt power cycle [ 738.399001][ T887] playstation 0003:054C:0CE6.009F: Invalid reportID received, expected 9 got 0 [ 738.404713][T15124] attempt to access beyond end of device [ 738.404713][T15124] loop3: rw=10241, want=53256, limit=40427 [ 738.411807][ T887] playstation 0003:054C:0CE6.009F: Failed to retrieve DualSense pairing info: -22 [ 738.428669][ T887] playstation 0003:054C:0CE6.009F: Failed to get MAC address from DualSense [ 738.437615][ T887] playstation 0003:054C:0CE6.009F: Failed to create dualsense. [ 738.461907][T14952] attempt to access beyond end of device [ 738.461907][T14952] loop3: rw=524288, want=45072, limit=40427 [ 738.462748][ T887] playstation: probe of 0003:054C:0CE6.009F failed with error -22 [ 738.473206][T14952] attempt to access beyond end of device [ 738.473206][T14952] loop3: rw=0, want=45072, limit=40427 [ 738.598707][T15124] attempt to access beyond end of device [ 738.598707][T15124] loop3: rw=2049, want=45104, limit=40427 [ 738.840921][T15130] usb usb8: usbfs: process 15130 (syz.1.3605) did not claim interface 0 before use [ 738.861859][ T24] audit: type=1107 audit(1727443243.455:2747): pid=15125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Þ"' [ 738.917691][T14915] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 739.053504][T13056] usb 1-1: USB disconnect, device number 104 [ 739.136717][T14915] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 739.148177][T14915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 739.159179][T14915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.168938][T14915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 739.170856][T15134] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.181908][T14915] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 739.189700][T15134] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.197607][T14915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.205106][T15134] device bridge_slave_0 entered promiscuous mode [ 739.215541][T14915] usb 5-1: config 0 descriptor?? [ 739.223840][T15134] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.230880][T15134] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.238291][T15134] device bridge_slave_1 entered promiscuous mode [ 739.296046][T15134] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.302921][T15134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.310008][T15134] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.316772][T15134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.347976][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 739.357744][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.364936][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.382859][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 739.395406][ T674] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.402244][ T674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.420703][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 739.429006][ T674] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.435872][ T674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.444137][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 739.455628][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 739.466764][T15142] hub 6-0:1.0: USB hub found [ 739.471386][T15142] hub 6-0:1.0: 1 port detected [ 739.474183][T15134] device veth0_vlan entered promiscuous mode [ 739.506010][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 739.531316][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 739.540553][T15121] incfs: Can't find or create .index dir in ./file0 [ 739.547046][T15121] incfs: mount failed -14 [ 739.551458][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 739.559157][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 739.578480][T15134] device veth1_macvtap entered promiscuous mode [ 739.588627][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 739.613019][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 739.624524][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 739.640083][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 739.651573][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 739.659469][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 739.659498][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 739.667345][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 739.677462][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 739.687865][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 739.692247][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 739.700524][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 739.717435][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 739.734120][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 739.832722][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 739.841047][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 739.849040][T14915] usbhid 5-1:0.0: can't add hid device: -71 [ 739.849399][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 739.854855][T14915] usbhid: probe of 5-1:0.0 failed with error -71 [ 739.871428][T14915] usb 5-1: USB disconnect, device number 104 [ 739.872793][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 739.898117][T15147] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.905103][T15147] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.912471][T15147] device bridge_slave_0 entered promiscuous mode [ 739.921266][T15147] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.928153][T15147] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.935232][T15147] device bridge_slave_1 entered promiscuous mode [ 739.954173][T15160] erofs: Unknown parameter '@' [ 739.989502][T15147] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.996367][T15147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.003440][T15147] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.010255][T15147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.028923][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 740.031393][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 740.032172][T15160] FAULT_INJECTION: forcing a failure. [ 740.032172][T15160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.046975][T15160] CPU: 0 PID: 15160 Comm: syz.0.3617 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 740.057584][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 740.066926][T15160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 740.066931][T15160] Call Trace: [ 740.066951][T15160] dump_stack_lvl+0x1e2/0x24b [ 740.066960][T15160] ? panic+0x812/0x812 [ 740.066969][T15160] ? bfq_pos_tree_add_move+0x43b/0x43b [ 740.066980][T15160] dump_stack+0x15/0x17 [ 740.066989][T15160] should_fail+0x3c6/0x510 [ 740.066998][T15160] should_fail_usercopy+0x1a/0x20 [ 740.067007][T15160] strncpy_from_user+0x24/0x2d0 [ 740.067017][T15160] ? getname_flags+0xba/0x520 [ 740.067026][T15160] getname_flags+0xf2/0x520 [ 740.067036][T15160] user_path_at_empty+0x2d/0x50 [ 740.067046][T15160] __se_sys_mount+0x285/0x3b0 [ 740.067056][T15160] ? __x64_sys_mount+0xd0/0xd0 [ 740.067067][T15160] __x64_sys_mount+0xbf/0xd0 [ 740.067077][T15160] do_syscall_64+0x34/0x70 [ 740.067087][T15160] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 740.067096][T15160] RIP: 0033:0x7f379071cf39 [ 740.067107][T15160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.067114][T15160] RSP: 002b:00007f378f396038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 740.067127][T15160] RAX: ffffffffffffffda RBX: 00007f37908d4f80 RCX: 00007f379071cf39 [ 740.067135][T15160] RDX: 0000000020000040 RSI: 0000000020000200 RDI: 0000000020000000 [ 740.067141][T15160] RBP: 00007f378f396090 R08: 0000000000000000 R09: 0000000000000000 [ 740.067147][T15160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.067154][T15160] R13: 0000000000000000 R14: 00007f37908d4f80 R15: 00007ffecedb5e38 [ 740.227984][ T2660] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.228064][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 740.242998][ T2660] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.272380][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 740.288486][ T674] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.295371][ T674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.319172][ T9] device bridge_slave_1 left promiscuous mode [ 740.328574][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.335997][ T9] device bridge_slave_0 left promiscuous mode [ 740.342510][T13056] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 740.353583][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.362046][ T9] device veth1_macvtap left promiscuous mode [ 740.368093][ T9] device veth0_vlan left promiscuous mode [ 740.398229][T15168] EXT4-fs (loop2): 1 orphan inode deleted [ 740.404161][T15168] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue [ 740.426952][T15168] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 740.450205][T14711] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 740.468425][T14711] EXT4-fs error (device loop2): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 740.481836][T14711] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5897: Corrupt filesystem [ 740.493270][T14711] EXT4-fs error (device loop2): ext4_dirty_inode:6107: inode #2: comm syz-executor: mark_inode_dirty error [ 740.504932][ T674] EXT4-fs error (device loop2): __ext4_get_inode_loc:4437: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 740.518073][ T674] EXT4-fs error (device loop2): __ext4_get_inode_loc:4437: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 740.531324][ T674] EXT4-fs error (device loop2): __ext4_get_inode_loc:4437: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 740.553712][T14711] EXT4-fs error (device loop2): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 740.566551][T14711] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5897: Corrupt filesystem [ 740.575918][T14711] EXT4-fs error (device loop2): ext4_quota_off:6521: inode #3: comm syz-executor: mark_inode_dirty error [ 740.614071][T15147] device veth0_vlan entered promiscuous mode [ 740.621712][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 740.629837][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 740.644434][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 740.651972][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 740.659252][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 740.667459][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.674314][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.681817][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 740.690215][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 740.724506][T15147] device veth1_macvtap entered promiscuous mode [ 740.735890][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 740.743866][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 740.746651][T13056] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.752214][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 740.762421][T13056] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.762444][T13056] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 740.762455][T13056] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.763432][T13056] usb 1-1: config 0 descriptor?? [ 741.052320][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 741.062612][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 741.071004][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 741.079065][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 741.100973][T15181] EXT4-fs (loop1): 1 orphan inode deleted [ 741.106624][T15181] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue [ 741.123561][T15179] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.129020][T15181] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 741.134804][T15179] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.135162][T15179] device bridge_slave_0 entered promiscuous mode [ 741.161493][T15179] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.168701][T15179] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.175917][T15179] device bridge_slave_1 entered promiscuous mode [ 741.210097][T15179] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.216955][T15179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.224052][T15179] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.230822][T15179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.256142][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 741.264821][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.273285][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.293277][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 741.301832][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.308674][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.315849][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 741.324325][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.331164][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.347702][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 741.356779][ T3472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 741.588242][T15163] udc-core: couldn't find an available UDC or it's busy [ 741.601309][T15163] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 741.608855][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 741.646097][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 741.663112][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 741.674737][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 741.682957][T15179] device veth0_vlan entered promiscuous mode [ 741.702407][T15179] device veth1_macvtap entered promiscuous mode [ 741.734165][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 741.742351][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 741.749948][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 741.762009][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 742.102086][T15198] hub 6-0:1.0: USB hub found [ 742.104973][T15202] usb usb8: usbfs: process 15202 (syz.4.3626) did not claim interface 0 before use [ 742.109337][T15198] hub 6-0:1.0: 1 port detected [ 742.121381][ T24] audit: type=1107 audit(1727443246.877:2748): pid=15194 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Þ"' [ 742.480225][T13056] pantherlord 0003:0F30:0111.00A0: item fetching failed at offset 6/7 [ 742.488387][T13056] pantherlord 0003:0F30:0111.00A0: parse failed [ 742.494744][T13056] pantherlord: probe of 0003:0F30:0111.00A0 failed with error -22 [ 742.550386][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 742.559475][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 742.577337][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 742.585991][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 742.594168][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 742.766799][T15210] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3627'. [ 742.779559][ T24] audit: type=1400 audit(1727443247.549:2749): avc: denied { create } for pid=15204 comm="syz.2.3627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 742.995158][T15212] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.002125][T15212] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.009628][T15212] device bridge_slave_0 entered promiscuous mode [ 743.018415][T15215] netlink: 'syz.1.3628': attribute type 4 has an invalid length. [ 743.028211][T15212] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.035245][T15212] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.042929][T15212] device bridge_slave_1 entered promiscuous mode [ 743.083611][T15212] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.090486][T15212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.097561][T15212] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.104343][T15212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.272223][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 743.283019][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 743.296608][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 743.398663][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 743.415604][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 743.423642][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 743.442711][T15212] device veth0_vlan entered promiscuous mode [ 743.461924][T15212] device veth1_macvtap entered promiscuous mode [ 743.524179][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 743.531813][ T887] usb 1-1: USB disconnect, device number 105 [ 743.539294][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 743.542748][ T347] print_req_error: 26 callbacks suppressed [ 743.542763][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 743.547007][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 743.565713][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 744.146374][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 744.246879][ T347] buffer_io_error: 17 callbacks suppressed [ 744.246891][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 744.274159][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 744.284984][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 744.293345][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 744.304496][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 744.313683][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 744.325878][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 744.333794][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 744.344358][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 744.412037][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 744.428597][T15240] hub 6-0:1.0: USB hub found [ 744.458856][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 744.467105][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 744.481532][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 744.502734][T15241] FAULT_INJECTION: forcing a failure. [ 744.502734][T15241] name failslab, interval 1, probability 0, space 0, times 0 [ 744.515195][T15241] CPU: 0 PID: 15241 Comm: syz.3.3636 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 744.521132][T15240] hub 6-0:1.0: 1 port detected [ 744.524934][T15241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 744.539421][T15241] Call Trace: [ 744.542567][T15241] dump_stack_lvl+0x1e2/0x24b [ 744.547066][T15241] ? bfq_pos_tree_add_move+0x43b/0x43b [ 744.552373][T15241] ? vfs_write+0x852/0xe70 [ 744.556612][T15241] dump_stack+0x15/0x17 [ 744.560618][T15241] should_fail+0x3c6/0x510 [ 744.564866][T15241] ? getname_flags+0xba/0x520 [ 744.569379][T15241] __should_failslab+0xa4/0xe0 [ 744.573975][T15241] should_failslab+0x9/0x20 [ 744.578318][T15241] kmem_cache_alloc+0x3d/0x2e0 [ 744.582912][T15241] getname_flags+0xba/0x520 [ 744.587255][T15241] do_mkdirat+0xbb/0x2c0 [ 744.591331][T15241] ? do_mknodat+0x450/0x450 [ 744.595672][T15241] ? debug_smp_processor_id+0x17/0x20 [ 744.600882][T15241] __x64_sys_mkdirat+0x7b/0x90 [ 744.605480][T15241] do_syscall_64+0x34/0x70 [ 744.609731][T15241] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 744.615462][T15241] RIP: 0033:0x7f726a638f39 [ 744.619711][T15241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.639157][T15241] RSP: 002b:00007f7269270038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 744.647395][T15241] RAX: ffffffffffffffda RBX: 00007f726a7f1130 RCX: 00007f726a638f39 [ 744.655204][T15241] RDX: 00000000000001ff RSI: 0000000020000000 RDI: ffffffffffffff9c [ 744.663014][T15241] RBP: 00007f7269270090 R08: 0000000000000000 R09: 0000000000000000 [ 744.670825][T15241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.678637][T15241] R13: 0000000000000000 R14: 00007f726a7f1130 R15: 00007ffdf69110f8 [ 744.846501][ T9] device bridge_slave_1 left promiscuous mode [ 744.863987][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.871938][ T9] device bridge_slave_0 left promiscuous mode [ 744.877862][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.888153][ T9] device bridge_slave_1 left promiscuous mode [ 744.894355][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.901802][ T9] device bridge_slave_0 left promiscuous mode [ 744.908994][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.917724][ T9] device veth1_macvtap left promiscuous mode [ 744.924027][ T9] device veth0_vlan left promiscuous mode [ 744.930112][ T9] device veth1_macvtap left promiscuous mode [ 744.936014][ T9] device veth0_vlan left promiscuous mode [ 744.998502][T15230] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 745.008250][T15230] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 745.032967][T15230] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 745.138121][ T457] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 745.314319][T15230] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 745.332957][T15230] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 745.644381][T15271] attempt to access beyond end of device [ 745.644381][T15271] loop0: rw=2049, want=53256, limit=40427 [ 745.665101][T15271] attempt to access beyond end of device [ 745.665101][T15271] loop0: rw=2049, want=53320, limit=40427 [ 745.677032][ T457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.690757][ T457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.700350][ T457] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 745.709153][ T457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.718256][ T457] usb 5-1: config 0 descriptor?? [ 745.817812][T14964] attempt to access beyond end of device [ 745.817812][T14964] loop0: rw=2049, want=45104, limit=40427 [ 746.105912][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 746.117200][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.128219][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 746.136275][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.147094][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 746.155567][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.166595][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 746.174464][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 746.182330][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 746.241643][ T457] hid-led 0003:0FC5:B080.00A1: item fetching failed at offset 0/3 [ 746.250183][ T457] hid-led: probe of 0003:0FC5:B080.00A1 failed with error -22 [ 746.303733][T15282] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 746.366512][T13052] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 746.416075][ T457] usb 5-1: USB disconnect, device number 105 [ 746.490425][T14915] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 746.614347][T13052] usb 1-1: Using ep0 maxpacket: 16 [ 746.624738][ T9] device bridge_slave_1 left promiscuous mode [ 746.630777][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.638423][ T9] device bridge_slave_0 left promiscuous mode [ 746.644543][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.652616][ T9] device veth1_macvtap left promiscuous mode [ 746.658564][ T9] device veth0_vlan left promiscuous mode [ 746.747625][T13052] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.761326][T15287] F2FS-fs (loop1): Not support 1, larger than 256 [ 746.833680][T14915] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 746.844389][T14915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 746.855361][T14915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.864288][T15290] EXT4-fs error (device loop1): ext4_fill_super:4955: inode #2: comm syz.1.3647: casefold flag without casefold feature [ 746.865457][T14915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 746.890662][T15290] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 746.910538][T14915] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 746.911849][T15290] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 746.919435][T14915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.920310][T14915] usb 4-1: config 0 descriptor?? [ 746.966852][T13052] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 746.976056][T13052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.985454][T13052] usb 1-1: Product: syz [ 746.992491][T13052] usb 1-1: Manufacturer: syz [ 746.996977][T13052] usb 1-1: SerialNumber: syz [ 747.002105][T13052] usb 1-1: config 0 descriptor?? [ 747.040938][T15294] FAULT_INJECTION: forcing a failure. [ 747.040938][T15294] name failslab, interval 1, probability 0, space 0, times 0 [ 747.054726][T15294] CPU: 0 PID: 15294 Comm: syz.4.3648 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 747.064507][T15294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 747.074402][T15294] Call Trace: [ 747.077536][T15294] dump_stack_lvl+0x1e2/0x24b [ 747.082042][T15294] ? bfq_pos_tree_add_move+0x43b/0x43b [ 747.087339][T15294] dump_stack+0x15/0x17 [ 747.091329][T15294] should_fail+0x3c6/0x510 [ 747.095583][T15294] ? fcntl_getlk+0x30/0x880 [ 747.099926][T15294] __should_failslab+0xa4/0xe0 [ 747.104525][T15294] should_failslab+0x9/0x20 [ 747.108859][T15294] kmem_cache_alloc+0x3d/0x2e0 [ 747.113463][T15294] ? kmem_cache_free+0xa9/0x1e0 [ 747.118149][T15294] fcntl_getlk+0x30/0x880 [ 747.122318][T15294] ? __kasan_check_write+0x14/0x20 [ 747.127259][T15294] ? _copy_from_user+0x96/0xd0 [ 747.131860][T15294] do_fcntl+0x81b/0x1460 [ 747.135941][T15294] ? match_file+0x140/0x140 [ 747.140279][T15294] ? kill_fasync+0x250/0x250 [ 747.144704][T15294] ? __fget_files+0x31e/0x380 [ 747.149225][T15294] ? security_file_fcntl+0x84/0xb0 [ 747.154170][T15294] __se_sys_fcntl+0xe0/0x1c0 [ 747.158598][T15294] __x64_sys_fcntl+0x7b/0x90 [ 747.163019][T15294] do_syscall_64+0x34/0x70 [ 747.167276][T15294] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 747.173000][T15294] RIP: 0033:0x7f944086cf39 [ 747.177254][T15294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.196693][T15294] RSP: 002b:00007f943f4e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 747.204937][T15294] RAX: ffffffffffffffda RBX: 00007f9440a24f80 RCX: 00007f944086cf39 [ 747.212749][T15294] RDX: 0000000020000200 RSI: 0000000000000024 RDI: 0000000000000007 [ 747.220562][T15294] RBP: 00007f943f4e6090 R08: 0000000000000000 R09: 0000000000000000 [ 747.228373][T15294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.236187][T15294] R13: 0000000000000000 R14: 00007f9440a24f80 R15: 00007ffc760a7ab8 [ 747.255076][T15280] incfs: Can't find or create .index dir in ./file0 [ 747.261587][T15280] incfs: mount failed -14 [ 747.386027][T14915] usbhid 4-1:0.0: can't add hid device: -71 [ 747.391850][T14915] usbhid: probe of 4-1:0.0 failed with error -71 [ 747.401606][T14915] usb 4-1: USB disconnect, device number 88 [ 747.471168][T15308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15308 comm=syz.1.3651 [ 747.547831][ T887] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 747.910024][ T887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.932572][ T887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.944099][ T887] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 747.956023][ T887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.968632][ T887] usb 3-1: config 0 descriptor?? [ 748.328903][ T457] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 748.416525][ T887] hid (null): bogus close delimiter [ 748.557700][ T457] usb 4-1: Using ep0 maxpacket: 8 [ 748.671820][ T457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.682561][ T457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.692085][ T457] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 748.700925][ T457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.709210][ T457] usb 4-1: config 0 descriptor?? [ 748.795536][ T20] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 748.970557][ T889] usb 1-1: USB disconnect, device number 106 [ 748.985888][ T347] print_req_error: 2 callbacks suppressed [ 748.985903][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 749.003143][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.055242][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 749.063272][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.074772][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 749.083154][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.094092][ T887] uclogic 0003:256C:006D.00A2: failed retrieving string descriptor #200: -71 [ 749.104235][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 749.112204][ T887] uclogic 0003:256C:006D.00A2: failed retrieving pen parameters: -71 [ 749.121225][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.132352][ T887] uclogic 0003:256C:006D.00A2: failed probing pen v2 parameters: -71 [ 749.140328][ T887] uclogic 0003:256C:006D.00A2: failed probing parameters: -71 [ 749.147685][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 749.157955][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.166473][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.169893][ T457] playstation 0003:054C:0CE6.00A3: unknown main item tag 0x0 [ 749.195016][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 749.196216][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.207665][T15330] F2FS-fs (loop0): Not support 1, larger than 256 [ 749.212472][ T887] uclogic: probe of 0003:256C:006D.00A2 failed with error -71 [ 749.226241][ T457] playstation 0003:054C:0CE6.00A3: unknown main item tag 0x0 [ 749.235692][ T457] playstation 0003:054C:0CE6.00A3: unknown main item tag 0x0 [ 749.242904][ T457] playstation 0003:054C:0CE6.00A3: unknown main item tag 0x0 [ 749.256967][ T20] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 749.273241][ T887] usb 3-1: USB disconnect, device number 85 [ 749.291308][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.300096][ T457] playstation 0003:054C:0CE6.00A3: unknown main item tag 0x0 [ 749.307571][ T20] usb 5-1: config 0 descriptor?? [ 749.312518][ T457] playstation 0003:054C:0CE6.00A3: unknown main item tag 0x0 [ 749.319709][ T457] playstation 0003:054C:0CE6.00A3: unknown main item tag 0x0 [ 749.333687][ T457] playstation 0003:054C:0CE6.00A3: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 749.351755][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 749.364965][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.384357][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 749.397769][T15338] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 749.473852][ T457] playstation 0003:054C:0CE6.00A3: Invalid reportID received, expected 9 got 0 [ 749.486561][ T457] playstation 0003:054C:0CE6.00A3: Failed to retrieve DualSense pairing info: -22 [ 749.496267][ T457] playstation 0003:054C:0CE6.00A3: Failed to get MAC address from DualSense [ 749.504905][ T457] playstation 0003:054C:0CE6.00A3: Failed to create dualsense. [ 749.513252][ T457] playstation: probe of 0003:054C:0CE6.00A3 failed with error -22 [ 749.636295][T15328] udc-core: couldn't find an available UDC or it's busy [ 749.648357][T15328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 749.796934][T13052] usb 4-1: USB disconnect, device number 89 [ 750.014852][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 750.020667][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 750.028478][ T20] usb 5-1: USB disconnect, device number 106 [ 750.072075][T13060] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 750.582770][ T24] audit: type=1400 audit(1727443255.769:2750): avc: denied { read } for pid=15361 comm="syz.4.3667" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 750.587027][T15363] binder: 15361:15363 ioctl 4018620d 0 returned -22 [ 750.605614][T13052] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 750.620045][ T24] audit: type=1400 audit(1727443255.769:2751): avc: denied { open } for pid=15361 comm="syz.4.3667" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 750.644163][ T24] audit: type=1400 audit(1727443255.780:2752): avc: denied { ioctl } for pid=15361 comm="syz.4.3667" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 750.670479][T13060] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 750.679311][T15363] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3667'. [ 750.681337][T13060] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 750.700900][T13054] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 750.703257][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3667'. [ 750.708371][T13060] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.726843][T13060] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 750.739871][T13060] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 750.748745][T13060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.757947][T13060] usb 3-1: config 0 descriptor?? [ 750.999957][T15350] incfs: Can't find or create .index dir in ./file0 [ 751.006426][T15350] incfs: mount failed -14 [ 751.015501][T13052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.026276][T13052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.037030][T13052] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 751.045942][T13052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.053787][T13054] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.082644][T13052] usb 1-1: config 0 descriptor?? [ 751.110434][T13060] usbhid 3-1:0.0: can't add hid device: -71 [ 751.116374][T13060] usbhid: probe of 3-1:0.0 failed with error -71 [ 751.125136][T13060] usb 3-1: USB disconnect, device number 86 [ 751.130220][ T20] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 751.238659][T15369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3669'. [ 751.377100][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 751.415316][T13054] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 751.424203][T13054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.432094][T13054] usb 4-1: Product: syz [ 751.436101][T13054] usb 4-1: Manufacturer: syz [ 751.440474][T13054] usb 4-1: SerialNumber: syz [ 751.445857][T13054] usb 4-1: config 0 descriptor?? [ 751.483000][T13054] usb_ehset_test: probe of 4-1:0.0 failed with error -32 [ 751.491501][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.540349][T13052] hid-led 0003:0FC5:B080.00A4: item fetching failed at offset 0/3 [ 751.548095][T13052] hid-led: probe of 0003:0FC5:B080.00A4 failed with error -22 [ 751.648958][T15372] FAT-fs (loop2): Directory bread(block 64) failed [ 751.655404][T15372] FAT-fs (loop2): Directory bread(block 65) failed [ 751.655437][ T20] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 751.661803][T15372] FAT-fs (loop2): Directory bread(block 66) failed [ 751.670956][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.677120][T15372] FAT-fs (loop2): Directory bread(block 67) failed [ 751.685959][ T20] usb 5-1: Product: syz [ 751.692844][T15372] FAT-fs (loop2): Directory bread(block 68) failed [ 751.695263][ T20] usb 5-1: Manufacturer: syz [ 751.701416][T15372] FAT-fs (loop2): Directory bread(block 69) failed [ 751.701455][T15372] FAT-fs (loop2): Directory bread(block 70) failed [ 751.706054][ T20] usb 5-1: SerialNumber: syz [ 751.712245][T15372] FAT-fs (loop2): Directory bread(block 71) failed [ 751.719249][ T887] usb 4-1: USB disconnect, device number 90 [ 751.723166][T15372] FAT-fs (loop2): Directory bread(block 72) failed [ 751.736446][ T20] usb 5-1: config 0 descriptor?? [ 751.746170][T15372] FAT-fs (loop2): Directory bread(block 73) failed [ 751.754865][ T457] usb 1-1: USB disconnect, device number 107 [ 752.197547][T15403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3683'. [ 752.348655][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 752.359864][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 752.374914][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 752.383050][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 752.391018][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 752.406116][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 753.047912][T15422] device dummy0 entered promiscuous mode [ 753.165323][ T24] audit: type=1326 audit(1727443258.478:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379071cf39 code=0x7ffc0000 [ 753.191428][ T24] audit: type=1326 audit(1727443258.478:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f379071cf39 code=0x7ffc0000 [ 753.214881][ T24] audit: type=1326 audit(1727443258.478:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379071cf39 code=0x7ffc0000 [ 753.424493][T15433] hub 6-0:1.0: USB hub found [ 753.429286][T15433] hub 6-0:1.0: 1 port detected [ 753.453814][ T457] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 753.682192][ T457] usb 1-1: Using ep0 maxpacket: 8 [ 753.743401][T14915] usb 5-1: USB disconnect, device number 107 [ 753.814249][ T457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.825203][ T457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.835307][ T457] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 753.844218][ T457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.859520][ T457] usb 1-1: config 0 descriptor?? [ 754.063485][T13053] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 754.263444][T14915] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 754.352132][ T457] playstation 0003:054C:0CE6.00A5: unknown main item tag 0x0 [ 754.359442][ T457] playstation 0003:054C:0CE6.00A5: unknown main item tag 0x0 [ 754.366587][ T457] playstation 0003:054C:0CE6.00A5: unknown main item tag 0x0 [ 754.374123][ T457] playstation 0003:054C:0CE6.00A5: unknown main item tag 0x0 [ 754.381475][ T457] playstation 0003:054C:0CE6.00A5: unknown main item tag 0x0 [ 754.388697][ T457] playstation 0003:054C:0CE6.00A5: unknown main item tag 0x0 [ 754.395873][ T457] playstation 0003:054C:0CE6.00A5: unknown main item tag 0x0 [ 754.404231][ T457] playstation 0003:054C:0CE6.00A5: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 754.472963][T13053] usb 2-1: Using ep0 maxpacket: 8 [ 754.587302][T13053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.596724][ T457] playstation 0003:054C:0CE6.00A5: Invalid byte count transferred, expected 20 got 0 [ 754.598231][T13053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.607542][T14915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.617487][T13053] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 754.627748][ T457] playstation 0003:054C:0CE6.00A5: Failed to retrieve DualSense pairing info: -22 [ 754.637246][T13053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.645763][T14915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.663021][ T457] playstation 0003:054C:0CE6.00A5: Failed to get MAC address from DualSense [ 754.667536][ T347] print_req_error: 16 callbacks suppressed [ 754.667550][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 754.671587][ T457] playstation 0003:054C:0CE6.00A5: Failed to create dualsense. [ 754.677976][T13053] usb 2-1: config 0 descriptor?? [ 754.690590][T14915] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 754.696038][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.700340][T14915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.709541][ T347] buffer_io_error: 11 callbacks suppressed [ 754.709550][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 754.721374][ T457] playstation: probe of 0003:054C:0CE6.00A5 failed with error -22 [ 754.728384][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.734207][T14915] usb 5-1: config 0 descriptor?? [ 754.741343][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 754.772404][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.783277][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 754.791193][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.801857][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 754.809817][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.820480][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 754.831141][T13052] usb 1-1: USB disconnect, device number 108 [ 754.930561][ T24] audit: type=1326 audit(1727443260.336:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.3.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726a638f39 code=0x7ffc0000 [ 754.962606][ T24] audit: type=1326 audit(1727443260.357:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.3.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f726a638f39 code=0x7ffc0000 [ 754.986229][ T24] audit: type=1326 audit(1727443260.357:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.3.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726a638f39 code=0x7ffc0000 [ 755.198355][T13053] playstation 0003:054C:0CE6.00A6: unknown main item tag 0x0 [ 755.205635][T13053] playstation 0003:054C:0CE6.00A6: unknown main item tag 0x0 [ 755.212820][T13053] playstation 0003:054C:0CE6.00A6: unknown main item tag 0x0 [ 755.220047][T13053] playstation 0003:054C:0CE6.00A6: unknown main item tag 0x0 [ 755.227228][T13053] playstation 0003:054C:0CE6.00A6: unknown main item tag 0x0 [ 755.234405][T13053] playstation 0003:054C:0CE6.00A6: unknown main item tag 0x0 [ 755.236174][T14915] hid-led 0003:0FC5:B080.00A7: item fetching failed at offset 0/3 [ 755.241629][T13053] playstation 0003:054C:0CE6.00A6: unknown main item tag 0x0 [ 755.251340][T14915] hid-led: probe of 0003:0FC5:B080.00A7 failed with error -22 [ 755.258061][T13053] playstation 0003:054C:0CE6.00A6: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0 [ 755.265506][ T457] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 755.325406][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 755.336660][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 755.347584][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 755.355647][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 755.366488][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 755.374410][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 755.385182][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 755.393093][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 755.401039][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 755.425400][T13053] playstation 0003:054C:0CE6.00A6: Invalid reportID received, expected 9 got 0 [ 755.434220][T13053] playstation 0003:054C:0CE6.00A6: Failed to retrieve DualSense pairing info: -22 [ 755.443583][T13053] playstation 0003:054C:0CE6.00A6: Failed to get MAC address from DualSense [ 755.452329][T13053] playstation 0003:054C:0CE6.00A6: Failed to create dualsense. [ 755.461553][T13053] playstation: probe of 0003:054C:0CE6.00A6 failed with error -22 [ 755.598214][T14915] usb 5-1: USB disconnect, device number 108 [ 755.644784][ T457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 755.655927][ T457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.667227][ T457] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 755.680716][ T457] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 755.684172][T13053] usb 2-1: USB disconnect, device number 102 [ 755.695847][ T457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.740931][ T457] usb 4-1: config 0 descriptor?? [ 755.788983][T15466] EXT4-fs (loop2): Test dummy encryption mode enabled [ 755.796611][T15466] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 755.807311][T15466] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038 (0x7fffffff) [ 756.191551][T15473] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3704'. [ 756.241577][ T457] ntrig 0003:1B96:000A.00A8: unknown main item tag 0x0 [ 756.248315][ T457] ntrig 0003:1B96:000A.00A8: unknown main item tag 0x0 [ 756.256275][T15478] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3704'. [ 756.265081][ T457] ntrig 0003:1B96:000A.00A8: unknown main item tag 0x0 [ 756.271718][ T457] ntrig 0003:1B96:000A.00A8: unknown main item tag 0x0 [ 756.278804][ T457] ntrig 0003:1B96:000A.00A8: unknown main item tag 0x0 [ 756.499626][ T457] ntrig 0003:1B96:000A.00A8: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 756.539922][ T457] ntrig 0003:1B96:000A.00A8: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 756.787547][T13061] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 756.869611][T15493] netlink: 'syz.4.3710': attribute type 4 has an invalid length. [ 756.901914][ T457] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 757.152437][ T457] usb 3-1: Using ep0 maxpacket: 8 [ 757.321071][ T457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.331820][ T457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.341337][ T457] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 757.350241][ T457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.358477][ T457] usb 3-1: config 0 descriptor?? [ 757.360733][T13061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.373993][T13061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.383652][T13061] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 757.392544][T13061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.400860][T13061] usb 1-1: config 0 descriptor?? [ 757.633870][T15503] usb usb8: usbfs: process 15503 (syz.4.3712) did not claim interface 0 before use [ 757.671085][ T24] audit: type=1107 audit(1727443263.191:2759): pid=15499 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Þ"' [ 757.868636][T13054] usb 4-1: USB disconnect, device number 91 [ 757.950675][T15482] udc-core: couldn't find an available UDC or it's busy [ 757.959874][T15482] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.189016][T15505] F2FS-fs (loop1): Not support 1, larger than 256 [ 758.277689][T13061] pantherlord 0003:0F30:0111.00A9: item fetching failed at offset 6/7 [ 758.323593][T13061] pantherlord 0003:0F30:0111.00A9: parse failed [ 758.330964][T13061] pantherlord: probe of 0003:0F30:0111.00A9 failed with error -22 [ 758.433202][T15518] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.440156][T15518] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.447670][T15518] device bridge_slave_0 entered promiscuous mode [ 758.456021][T15518] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.462887][T15518] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.470204][T15518] device bridge_slave_1 entered promiscuous mode [ 758.505206][T15518] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.512052][T15518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.519128][T15518] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.525948][T15518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.545452][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 758.552881][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.560470][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.570874][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 758.578919][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.585765][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.594729][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 758.602829][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.609678][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.623324][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 758.632308][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 758.645690][T14915] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 758.646367][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 758.666048][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 758.673978][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 758.681720][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 758.709144][T15518] device veth0_vlan entered promiscuous mode [ 758.722268][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 758.740824][T15518] device veth1_macvtap entered promiscuous mode [ 758.751509][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 758.765451][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 758.791634][ T9] device bridge_slave_1 left promiscuous mode [ 758.797915][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.809285][ T9] device bridge_slave_0 left promiscuous mode [ 758.811708][ T24] audit: type=1400 audit(1727443264.409:2760): avc: denied { getopt } for pid=15526 comm="syz.4.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 758.815246][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.842702][ T9] device veth1_macvtap left promiscuous mode [ 759.031610][ T9] device veth0_vlan left promiscuous mode [ 759.073693][T14915] usb 2-1: Using ep0 maxpacket: 8 [ 759.189318][T14915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.200453][T14915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.212293][T14915] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 759.223426][T14915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.287151][T14915] usb 2-1: config 0 descriptor?? [ 759.403609][ T889] usb 1-1: USB disconnect, device number 109 [ 759.460229][T15534] EXT4-fs (loop0): orphan cleanup on readonly fs [ 759.467364][T15534] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #4: comm syz.0.3721: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 759.487706][T15534] EXT4-fs error (device loop0): ext4_quota_enable:6426: comm syz.0.3721: Bad quota inode: 4, type: 1 [ 759.495796][ T24] audit: type=1326 audit(1727443265.123:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15485 comm="syz.2.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd456bf39 code=0x7fc00000 [ 759.525657][T15534] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 759.559661][T15534] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 759.567345][T15534] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 759.752078][ T457] usbhid 3-1:0.0: can't add hid device: -71 [ 759.862317][ T457] usbhid: probe of 3-1:0.0 failed with error -71 [ 759.880682][ T457] usb 3-1: USB disconnect, device number 87 [ 759.894265][T14915] playstation 0003:054C:0CE6.00AA: unknown main item tag 0x0 [ 759.901537][T14915] playstation 0003:054C:0CE6.00AA: unknown main item tag 0x0 [ 759.908749][T14915] playstation 0003:054C:0CE6.00AA: unknown main item tag 0x0 [ 760.822654][T14915] playstation 0003:054C:0CE6.00AA: unknown main item tag 0x0 [ 760.967757][T14915] playstation 0003:054C:0CE6.00AA: unknown main item tag 0x0 [ 760.975275][T14915] playstation 0003:054C:0CE6.00AA: unknown main item tag 0x0 [ 760.982743][T14915] playstation 0003:054C:0CE6.00AA: unknown main item tag 0x0 [ 760.990688][T14915] playstation 0003:054C:0CE6.00AA: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0 [ 761.090506][T15560] tipc: Started in network mode [ 761.095266][T15560] tipc: Own node identity 104, cluster identity 4711 [ 761.101702][T15560] tipc: 32-bit node address hash set to 104 [ 761.106052][T14915] playstation 0003:054C:0CE6.00AA: Invalid reportID received, expected 9 got 0 [ 761.116669][T14915] playstation 0003:054C:0CE6.00AA: Failed to retrieve DualSense pairing info: -22 [ 761.126599][T14915] playstation 0003:054C:0CE6.00AA: Failed to get MAC address from DualSense [ 761.135268][T14915] playstation 0003:054C:0CE6.00AA: Failed to create dualsense. [ 761.146317][T14915] playstation: probe of 0003:054C:0CE6.00AA failed with error -22 [ 761.162625][T15560] tipc: Cannot configure node identity twice [ 761.197432][ T347] print_req_error: 20 callbacks suppressed [ 761.197448][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 761.229162][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.239992][ T347] buffer_io_error: 15 callbacks suppressed [ 761.240002][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 761.253612][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.264702][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 761.272541][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.283406][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 761.291270][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.302026][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 761.309917][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.312485][ T887] usb 2-1: USB disconnect, device number 103 [ 761.326346][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 761.337749][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 761.349018][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.359797][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 761.360354][T14915] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 761.367729][T13053] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 761.375276][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.393300][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 761.401273][ T347] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.412009][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 761.419975][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 761.427907][ T347] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 761.483947][T13061] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 761.636519][T14915] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 761.731787][T13053] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.742545][T13053] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.752035][T13053] usb 5-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 761.760946][T13053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.779699][T13053] usb 5-1: config 0 descriptor?? [ 761.832775][T15572] device dummy0 entered promiscuous mode [ 761.865213][T13061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.876068][T13061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.885646][T13061] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 761.894465][T13061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.913003][T13061] usb 1-1: config 0 descriptor?? [ 762.093360][T13052] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 762.227450][T13053] hid (null): report_id 0 is invalid [ 762.233401][T13053] lenovo 0003:04B3:3108.00AB: report_id 0 is invalid [ 762.240066][T13053] lenovo 0003:04B3:3108.00AB: item 0 0 1 8 parsing failed [ 762.245809][T14915] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 762.247175][T13053] lenovo 0003:04B3:3108.00AB: hid_parse failed [ 762.256345][T14915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.261995][T13053] lenovo: probe of 0003:04B3:3108.00AB failed with error -22 [ 762.350607][T13052] usb 2-1: Using ep0 maxpacket: 8 [ 762.361006][T15568] udc-core: couldn't find an available UDC or it's busy [ 762.367832][T15568] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 762.671882][T13061] pantherlord 0003:0F30:0111.00AC: item fetching failed at offset 6/7 [ 762.679937][T13052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.690733][T13061] pantherlord 0003:0F30:0111.00AC: parse failed [ 762.696814][T13052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.706403][T13061] pantherlord: probe of 0003:0F30:0111.00AC failed with error -22 [ 762.714266][T13052] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 762.726177][T13052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.734738][T13052] usb 2-1: config 0 descriptor?? [ 762.836661][T14915] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 762.843469][T14915] uvcvideo: No valid video chain found. [ 762.969688][ T887] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 763.018100][T14915] usb 5-1: USB disconnect, device number 109 [ 763.050541][T13053] usb 4-1: USB disconnect, device number 92 [ 763.207851][ T887] usb 3-1: Using ep0 maxpacket: 16 [ 763.322415][ T887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.484111][ T887] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 763.493002][ T887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.500809][ T887] usb 3-1: Product: syz [ 763.504790][ T887] usb 3-1: Manufacturer: syz [ 763.509185][ T887] usb 3-1: SerialNumber: syz [ 763.514537][ T887] usb 3-1: config 0 descriptor?? [ 764.111596][T13053] usb 1-1: USB disconnect, device number 110 [ 764.179445][T13061] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 764.280348][T15600] usb usb8: usbfs: process 15600 (syz.0.3739) did not claim interface 0 before use [ 764.291276][ T24] audit: type=1107 audit(1727443270.162:2762): pid=15596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Þ"' [ 764.398998][ T24] audit: type=1326 audit(1727443270.267:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15601 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726a638f39 code=0x7ffc0000 [ 764.442568][ T24] audit: type=1326 audit(1727443270.298:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15601 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726a638f39 code=0x7ffc0000 [ 764.466752][ T24] audit: type=1326 audit(1727443270.298:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15601 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f726a638f39 code=0x7ffc0000 [ 764.490682][ T24] audit: type=1326 audit(1727443270.298:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15601 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726a638f39 code=0x7ffc0000 [ 764.518170][T15604] tipc: Started in network mode [ 764.522853][T15604] tipc: Own node identity 104, cluster identity 4711 [ 764.529680][T15604] tipc: 32-bit node address hash set to 104 [ 764.535625][T15604] tipc: Cannot configure node identity twice [ 764.559380][ T24] audit: type=1400 audit(1727443270.435:2767): avc: denied { module_load } for pid=15607 comm="syz.3.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 764.560139][T15608] Module has invalid ELF structures [ 764.578956][T13061] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 764.587635][T15608] ================================================================== [ 764.591902][T13061] usb 5-1: config 0 has no interface number 0 [ 764.599688][T15608] BUG: KASAN: vmalloc-out-of-bounds in load_module+0x2a80/0x5aa0 [ 764.599702][T15608] Read of size 1 at addr ffffc900001b5fff by task syz.3.3743/15608 [ 764.599705][T15608] [ 764.599717][T15608] CPU: 1 PID: 15608 Comm: syz.3.3743 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 764.599724][T15608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 764.599728][T15608] Call Trace: [ 764.599742][T15608] dump_stack_lvl+0x1e2/0x24b [ 764.599752][T15608] ? bfq_pos_tree_add_move+0x43b/0x43b [ 764.599760][T15608] ? panic+0x812/0x812 [ 764.599771][T15608] print_address_description+0x81/0x3b0 [ 764.599782][T15608] kasan_report+0x179/0x1c0 [ 764.599793][T15608] ? load_module+0x2a80/0x5aa0 [ 764.599802][T15608] ? load_module+0x2a80/0x5aa0 [ 764.599815][T15608] __asan_report_load1_noabort+0x14/0x20 [ 764.599824][T15608] load_module+0x2a80/0x5aa0 [ 764.599837][T15608] ? unmap_kernel_range_noflush+0x550/0x550 [ 764.599846][T15608] ? __kmalloc+0x1aa/0x330 [ 764.599856][T15608] ? is_vmalloc_or_module_addr+0xd/0x50 [ 764.599868][T15608] ? __kasan_unpoison_vmalloc+0x6a/0x90 [ 764.599876][T15608] ? cmp_name+0x60/0x60 [ 764.599887][T15608] ? security_kernel_post_load_data+0x8c/0xb0 [ 764.599897][T15608] __se_sys_init_module+0x238/0x2d0 [ 764.599914][T15608] ? __x64_sys_init_module+0x80/0x80 [ 764.606047][T13061] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 764.613324][T15608] ? __kasan_check_write+0x14/0x20 [ 764.613348][T15608] ? switch_fpu_return+0x1e4/0x3c0 [ 764.749939][T15608] ? fpu__clear_all+0x20/0x20 [ 764.754442][T15608] ? __kasan_check_read+0x11/0x20 [ 764.759299][T15608] __x64_sys_init_module+0x76/0x80 [ 764.764248][T15608] do_syscall_64+0x34/0x70 [ 764.768501][T15608] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 764.774225][T15608] RIP: 0033:0x7f726a638f39 [ 764.778482][T15608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.797923][T15608] RSP: 002b:00007f72692b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 764.806165][T15608] RAX: ffffffffffffffda RBX: 00007f726a7f0f80 RCX: 00007f726a638f39 [ 764.813975][T15608] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 764.821786][T15608] RBP: 00007f726a6ab216 R08: 0000000000000000 R09: 0000000000000000 [ 764.829600][T15608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.837410][T15608] R13: 0000000000000000 R14: 00007f726a7f0f80 R15: 00007ffdf69110f8 [ 764.845222][T15608] [ 764.847385][T15608] [ 764.849557][T15608] Memory state around the buggy address: [ 764.855031][T15608] ffffc900001b5e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 764.862927][T15608] ffffc900001b5f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 764.870824][T15608] >ffffc900001b5f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 764.878722][T15608] ^ [ 764.886534][T15608] ffffc900001b6000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.894433][T15608] ffffc900001b6080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.902326][T15608] ================================================================== [ 764.910224][T15608] Disabling lock debugging due to kernel taint [ 764.917575][ T24] audit: type=1326 audit(1727443270.823:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15573 comm="syz.1.3733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0346f90f39 code=0x7fc00000 [ 764.949090][T15608] BUG: unable to handle page fault for address: ffffc900001b5fff [ 764.956622][T15608] #PF: supervisor read access in kernel mode [ 764.962435][T15608] #PF: error_code(0x0000) - not-present page [ 764.968246][T15608] PGD 100000067 P4D 100000067 PUD 10013a067 PMD 10013b067 PTE 0 [ 764.975717][T15608] Oops: 0000 [#1] PREEMPT SMP KASAN [ 764.980750][T15608] CPU: 1 PID: 15608 Comm: syz.3.3743 Tainted: G B 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 764.991939][T15608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 765.001849][T15608] RIP: 0010:load_module+0x3f4/0x5aa0 [ 765.006954][T15608] Code: 48 ba 00 00 00 00 00 fc ff df 49 8b 06 48 89 44 24 48 4a 8d 5c 38 ff 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 77 26 00 00 <80> 3b 00 4c 8b 7c 24 70 0f 85 84 14 00 00 48 8d 5e 04 48 89 d8 48 [ 765.026398][T15608] RSP: 0018:ffffc90000d67b60 EFLAGS: 00010286 [ 765.032297][T15608] RAX: ffff8881188b1301 RBX: ffffc900001b5fff RCX: 0000000000040000 [ 765.040109][T15608] RDX: dffffc0000000000 RSI: ffffc900001b63c2 RDI: 0000000000040000 [ 765.047927][T15608] RBP: ffffc90000d67d50 R08: ffffffff813e2a7b R09: 0000000000000003 [ 765.055735][T15608] R10: fffffbfff0e10c48 R11: dffffc0000000001 R12: ffffc90000d67dc0 [ 765.063541][T15608] R13: ffffc90000d67de8 R14: ffffc900001b6462 R15: ffffc900001b6000 [ 765.071354][T15608] FS: 00007f72692b26c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 765.080119][T15608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 765.084701][T13052] usbhid 2-1:0.0: can't add hid device: -71 [ 765.086550][T15608] CR2: ffffc900001b5fff CR3: 000000011c699000 CR4: 00000000003506a0 [ 765.092570][T13052] usbhid: probe of 2-1:0.0 failed with error -71 [ 765.100086][T15608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 765.100093][T15608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 765.100097][T15608] Call Trace: [ 765.100114][T15608] ? __die_body+0x62/0xb0 [ 765.100130][T15608] ? __die+0x7e/0x90 [ 765.110816][T13052] usb 2-1: USB disconnect, device number 104 [ 765.114068][T15608] ? no_context+0x9f9/0xd20 [ 765.114080][T15608] ? is_prefetch+0x5c0/0x5c0 [ 765.114092][T15608] ? release_firmware_map_entry+0x18d/0x18d [ 765.114108][T15608] ? preempt_schedule+0xd9/0xe0 [ 765.157897][T15608] ? __bad_area_nosemaphore+0xc4/0x430 [ 765.163186][T15608] ? schedule_preempt_disabled+0x20/0x20 [ 765.168653][T15608] ? bad_area_nosemaphore+0x2d/0x40 [ 765.170215][T13061] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 765.173693][T15608] ? do_kern_addr_fault+0x69/0x80 [ 765.173706][T15608] ? exc_page_fault+0x38e/0x5b0 [ 765.173722][T15608] ? asm_exc_page_fault+0x1e/0x30 [ 765.182743][T13061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.187406][T15608] ? check_panic_on_warn+0x5b/0xb0 [ 765.187418][T15608] ? load_module+0x3f4/0x5aa0 [ 765.187437][T15608] ? unmap_kernel_range_noflush+0x550/0x550 [ 765.192793][T13061] usb 5-1: Product: syz [ 765.196949][T15608] ? __kmalloc+0x1aa/0x330 [ 765.196960][T15608] ? is_vmalloc_or_module_addr+0xd/0x50 [ 765.196978][T15608] ? __kasan_unpoison_vmalloc+0x6a/0x90 [ 765.205096][T13061] usb 5-1: Manufacturer: syz [ 765.209709][T15608] ? cmp_name+0x60/0x60 [ 765.209723][T15608] ? security_kernel_post_load_data+0x8c/0xb0 [ 765.209739][T15608] __se_sys_init_module+0x238/0x2d0 [ 765.214448][T13061] usb 5-1: SerialNumber: syz [ 765.219947][T15608] ? __x64_sys_init_module+0x80/0x80 [ 765.219961][T15608] ? __kasan_check_write+0x14/0x20 [ 765.219973][T15608] ? switch_fpu_return+0x1e4/0x3c0 [ 765.219983][T15608] ? fpu__clear_all+0x20/0x20 [ 765.219993][T15608] ? __kasan_check_read+0x11/0x20 [ 765.220009][T15608] __x64_sys_init_module+0x76/0x80 [ 765.228183][T13061] usb 5-1: config 0 descriptor?? [ 765.243546][T15594] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 765.247386][T15608] do_syscall_64+0x34/0x70 [ 765.258288][T13061] usb-storage 5-1:0.20: USB Mass Storage device detected [ 765.258324][T15608] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 765.263447][T13061] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 765.267855][T15608] RIP: 0033:0x7f726a638f39 [ 765.267866][T15608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.267872][T15608] RSP: 002b:00007f72692b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 765.359682][T15608] RAX: ffffffffffffffda RBX: 00007f726a7f0f80 RCX: 00007f726a638f39 [ 765.367490][T15608] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 765.375300][T15608] RBP: 00007f726a6ab216 R08: 0000000000000000 R09: 0000000000000000 [ 765.383112][T15608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.390937][T15608] R13: 0000000000000000 R14: 00007f726a7f0f80 R15: 00007ffdf69110f8 [ 765.398735][T15608] Modules linked in: [ 765.402479][T15608] CR2: ffffc900001b5fff [ 765.406468][T15608] ---[ end trace 290a8a982ca2a31a ]--- [ 765.411765][T15608] RIP: 0010:load_module+0x3f4/0x5aa0 [ 765.416876][T15608] Code: 48 ba 00 00 00 00 00 fc ff df 49 8b 06 48 89 44 24 48 4a 8d 5c 38 ff 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 77 26 00 00 <80> 3b 00 4c 8b 7c 24 70 0f 85 84 14 00 00 48 8d 5e 04 48 89 d8 48 [ 765.436317][T15608] RSP: 0018:ffffc90000d67b60 EFLAGS: 00010286 [ 765.442219][T15608] RAX: ffff8881188b1301 RBX: ffffc900001b5fff RCX: 0000000000040000 [ 765.450033][T15608] RDX: dffffc0000000000 RSI: ffffc900001b63c2 RDI: 0000000000040000 [ 765.457851][T15608] RBP: ffffc90000d67d50 R08: ffffffff813e2a7b R09: 0000000000000003 [ 765.465657][T15608] R10: fffffbfff0e10c48 R11: dffffc0000000001 R12: ffffc90000d67dc0 [ 765.473464][T15608] R13: ffffc90000d67de8 R14: ffffc900001b6462 R15: ffffc900001b6000 [ 765.481276][T15608] FS: 00007f72692b26c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 765.490130][T15608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 765.496553][T15608] CR2: ffffc900001b5fff CR3: 000000011c699000 CR4: 00000000003506a0 [ 765.504365][T15608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 765.512175][T15608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 765.519984][T15608] Kernel panic - not syncing: Fatal exception [ 765.526085][T15608] Kernel Offset: disabled [ 765.530206][T15608] Rebooting in 86400 seconds..