last executing test programs: 15.591653311s ago: executing program 0 (id=2210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b8000005000000a0", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.768838822s ago: executing program 0 (id=2214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x0) 14.741911474s ago: executing program 0 (id=2215): syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000c40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) 13.796048386s ago: executing program 0 (id=2219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = io_uring_setup(0x291c, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x0, 0x800000}) dup3(0xffffffffffffffff, r2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, "7e12ddc5a89047bf00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) 12.82604447s ago: executing program 0 (id=2223): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000440000000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00'], 0x50) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000440)='./file0/../file0/../file0\x00', &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwclock_exec_t:s0\x00', 0x24, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d40)='./cgroup.cpu/syz1\x00', 0x1ff) syz_usb_connect(0x6, 0x6e1, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x73, 0x89, 0x57, 0x20, 0x2001, 0x3309, 0x9c65, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6cf, 0x3, 0xfe, 0x5, 0x80, 0xc9, [{{0x9, 0x4, 0x22, 0x6, 0x4, 0xff, 0xff, 0xff, 0xb8, [@generic={0xf9, 0x31, "cb7fdb052d0be513b72d75b6042f8d3683a2f24326ad43065bd904600faf630072ed9eeda3579a6aa42012098fdc5722b070896e66c11d5d591b14b3808687c929d0bdb1d6dc553c0d5fe6e820bce286e7aafef2ccc24aec0fc14dfbeae83e8febffb751e7fea97e419b2361722b1bd15c1a6ff6d3bdc97f5d4c18fd912de65f34e95778d6c6f4252e85192bc28d89317bf48fdc6981131f947ebccb43f1c0fb860d6d1aa4e65a7a43577842ab0786076b74710775756695bf4694d9d0093a6a64aea5d29d1f4d0355666f926847b5b66a1d588762a1406966db1c241b435aba1e8263c7adc617b4449adaf32ab5b9debbd671fd506c37"}], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x77, 0x0, 0x3d}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x8, 0x5, 0x1, [@generic={0xfb, 0x8, "493a4ee5ef075dc3584914226de85d9a760231d68bc61b2bedad48004e3e6307640c962211fb647a76e8aa022273aa267c126d8661003d8d0596b7fa3630b2fba54822ff61359a6b2a52364aba2aa86e746b560c9d6ece07619120a332aa663cfb593bc84de1f6b9198d12da98a92d50c2176388601f780aee0b2246784745e210e34e45a99c6f61b0c2b6f4c5bdbbece5f70fab91f798c57d34c9008ad4b2ee5d31d4535375085f6b0270d7de128f9b6725a7f0278577830a3ec598bf6865cc05fc013ebb6c850cd7b846b631f967a5de97a378ecace4b5a27ef94231c019d271a0f39206e67e27002525529002a643affc27b05c01fa00d0"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x2, 0x7f, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0xfff}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x2, 0x8, 0x6}}]}}, {{0x9, 0x4, 0x90, 0x2, 0x6, 0x3, 0x89, 0xf9, 0x9, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x4, 0x7f, 0x1, "a187136aa655"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x1, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xe, 0x3, 0x5, 0x7f, 'k'}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "e0a8"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xceba, 0x8, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x3, 0x1, 0xd0}, @ncm={0x6, 0x24, 0x1a, 0x46, 0x22}]}], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x61, 0x2, 0xd}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0xa9, 0x0, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x9, 0x9, 0x2, [@generic={0x16, 0x1, "5198182d263e359a1499f55bf3da4dbe147256d1"}]}}, {{0x9, 0x5, 0x16, 0x3, 0x200, 0x8, 0xc1, 0xc}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x9, 0xfc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfe, 0x8}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0xdd, 0x7b, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xea, 0x1000}, @generic={0x8f, 0xf, "d99ccf6b34c8da449761e0744229a5ff97f9ca3a253b910183d9eaa59bace371642fa32e9dc9f69f2d398525c90da048f5b67d1d094bda83e72cb698176aa107099fef58973b3f52e42adac1597765075dc5c773898972f110bf83f5b04e2ea58af5c18001acbc137afde03df6e9a0b69fb116290791dd1e3991cb864115f599928fbdec311545012128fe5b1c"}]}}]}}, {{0x9, 0x4, 0x2e, 0xe, 0x7, 0xff, 0x0, 0x0, 0x8, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "a173af6300c8"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x400, 0x5}, [@obex={0x5, 0x24, 0x15, 0xf}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0x10, 0x24, 0x7, 0x1e, 0x0, [0x100, 0xfff8, 0x8, 0xfffe, 0xfffb]}, @mbim_extended={0x8, 0x24, 0x1c, 0x819b, 0xf, 0x6}]}, @hid_hid={0x9, 0x21, 0x4, 0xa, 0x1, {0x22, 0x7c0}}], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x6, 0xd, [@generic={0xca, 0x1, "ab9a5d8827d37e3854a7f026acea94e76f6b3f900384dc89e826892558899573b736985c919075cfed498d72202a3c751420c9d3ee2c0d3861a4c6205db2d569a2eb72fa1f0af9c62c97e72f067a5c8c54b68f1796dda581205b862cbdb3ad8520419c7bc06e77731f7fb9d8434c4789a3ff916c82290993751ad9b73cbef83201b8c769e93c3020e63831b522cd8e75b90fb7a591d023600527b7fc6ea388b2a85f252d9ffda0f2435b295fcec47f4e011729c21c6c49f23c76d695a93a2cd49ce9d4e5627e8101"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x8, 0x8, [@generic={0x34, 0x1, "3877ba6f708b1764f4648c82cf763b85b94b4da95c69b0b8b970456f2484372cf35b9c597cec09d19bef133ae6076509ca29"}, @generic={0xdd, 0xa, "3678e41b653b8b2e596b6e1a821398e938ddbe0ad746f1f777e7bb48d17db9751c7670ac8a6153b646391811c1c2f15ff2c194b17b568a1f671872311b0a226e02db2baa365dfbc21b3487997d9a163936e74042b1a89689bbe7b2afaba43d7dd3eecc944785551a51762207602f103e6be6e4ff26acfa7ad851c0f3afcf955acd6d5b49d2d591a0c54e7b3da50411d7f443373de15f19c30503220bc8c254cd2bf523ca74bbda532f01c7ea61f237e371073e270b2d66ec05a6626a7e53bd20efeacb7a48049e88e8b72ea76ba103cd7990ff233ef3a2ebd293fb"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0xc5, 0xf7, 0x1, [@generic={0xc2, 0x2, "e81a9ef509d1288e028a2f546717ddafaebb49d676ae9830e50fa44c1de98533fb4a8684a1e9ce3ef60afe80a247ea24c810ce34b135d2ef9ae109386dac8647622dd4427fda67a94f3efb577493b7e1b911c406c8ed7091087e140b9dc552af4b080a169fd4a3c21d8b79cf095713e676da3e8e678f4fe17e0d093767aa6dcbbf9c7316bc8a9ffbf9ad47206d8342e0eeaff8c493430813e4ce3416e85158609843c9aa638923577a1dfcc204804d002dadea345df80b731539f89f83bfc559"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6, 0xcd, 0x1, [@generic={0x2e, 0x23, "e65a5fecde0e09d165cd059ca3acd464480e926e2a960a7c62611cc00e3ef75d743e92f9603787d04d09970d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x0, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x12, 0x0, 0x7}}, {{0x9, 0x5, 0xc, 0x1c, 0x20, 0x40, 0x5, 0xc3}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x9, 0x9, 0x7, 0x10, 0x3}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "41ec450a0929c9a10082533cccc1f56f"}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x420}}, {0x2, &(0x7f0000000280)=@string={0x2}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c01}}, {0xe2, &(0x7f0000000380)=@string={0xe2, 0x3, "8df66ab85c18105bc753b98888001d65ef0019d293b99b3192c67748202361c16ff2806c6f99458dc74c66038adb2a97a0c2a106230a2a86f806dde20e0114b6553945b943514dea94f71654f934fbc0fc037094f17910926198661e9af76696bb6e5ad2d459ebb08f7eca7d2ad321eeedb2eed652257bbea8dbcd5e9baf36379d60630ea587001878eb10aaecae2b282ceba56f1e112abbf97bf3da813ad6d542957ce6ff3e73a33c9a255717d5b40d706b02c83c78af0eff5c34b398a5098540f768813de4f9bd3f2fd09fae4330e766bbaf8ae99480d2d249abf29445e5ae"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x180c}}, {0xb6, &(0x7f0000000c80)=@string={0xb6, 0x3, "505dffda59c98f9f5401d31c8deb48b140fa2c6712cf89531dea6d3e29b36327a5b009429bac5b2a81a0ad7171f30a1c63eb122374df0dfddcd613079c5e40b1aba6192fd4d7a9eb1fef2f5e9eb8de4133a0886577a26ddc08f31a50fe1d42f785cb10408fe268914cf2a9d469653b20fcaf5820d9ce06d4d561f716b33e35fdae2c2d65912dc6eabd34f11af9ee86dc3fbcbccd812675823ce0ea33b62142e530eb684d40d5eb01b18f158bf70a8ef1a2b9da17"}}]}) 9.803172171s ago: executing program 0 (id=2234): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d00000000000001090224000100"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000380)={0x40, 0x0, 0x2, {0x2, 0xf}}, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@local=@item_012={0x0, 0x2, 0xa}, @main=@item_012={0x2, 0x0, 0xa, "b0d9"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x1f7}}}}, &(0x7f0000000600)={0x2c, &(0x7f00000007c0)={0x0, 0x3, 0xfb, "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"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000001040)=ANY=[@ANYBLOB="000000140000"], &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x7f}}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/63, 0x78) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000000)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee01]) ptrace(0x10, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffffb0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/320], 0x1, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0x1817c1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 5.65775209s ago: executing program 1 (id=2257): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipmr_delroute={0x44, 0x19, 0x8, 0x70bd2c, 0x25dfdbff, {0x80, 0x0, 0x20, 0x6, 0xff, 0x0, 0xff, 0x1, 0x2000}, [@RTA_NH_ID={0x8, 0x1e, 0xb}, @RTA_MARK={0x8, 0x10, 0xfffffffe}, @RTA_MARK={0x8, 0x10, 0x2}, @RTA_IIF={0x8}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x44}}, 0x8004) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000019078ac1e0001ffffffff0300907803000000450000002000000000010000ffffffffe0000002de069a0386ac3a76403ccf03c22e06437a8f1b78"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e0000000400000000000000534d000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000000000000000000000000000000000000000000e6e7dfdfee2eb125bb78f61ae477321d32de415aab864c6146a1589d126fb66d40375b3498055f2e0d187a0f431af889c73f47bb41567119f05be9d75f9bf55ae6d1ca7c5fbebceb924feae16d14b575ca61031f92a1b0b808907cd426ee546be1e775105867c2fa18d9b570b2c014628a924bf731a926955be5d222e38f667f5fabc30921ed23ac779202ddaaf466c14f2c634ee3388b5a9eae4f189cef3199e59a17242039f680833b5dd3a14344595c5968b9928ad3605b51bfc1a3f0a98d48f98467113f4277c83e1907bc3a300fa27350f0f272d5ecbac58218d9d1dc2667425e42f04f3c6cdf916fe234df05b71b6e3257b0c880634ad41580e8d0554ae0fa10db0b6c8c98b1efb3525a0e84fcb27e6c2c8315e7be6d31f3b997f12bff3020bbd23aa56c752b98c4f7120513893b84cd56ce"], 0x50) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) getsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f0000001940)=""/4096, &(0x7f0000000040)=0x1000) brk(0x55555ede6001) 4.9625648s ago: executing program 2 (id=2262): syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000af000000040000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.796596234s ago: executing program 1 (id=2263): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x14, r1, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote, @local}, &(0x7f00000001c0)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xb, [@fwd={0xc}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0xe, 0x2}, {0x0, 0x3}]}, @volatile={0xa}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @const={0x9, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x2e, 0x2e, 0x6e08a5548fa5be2b, 0x0, 0x2e, 0x61, 0x61, 0x61]}}, &(0x7f0000000280)=""/98, 0x77, 0x62, 0x0, 0x401, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000004c0)=""/144, 0x90, 0x0, &(0x7f00000005c0)=""/164, 0xa4}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x1, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/68, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000480)=""/83, &(0x7f00000001c0)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8b}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r7, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.873010764s ago: executing program 2 (id=2265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$tipc(0x1e, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r3) 3.853969896s ago: executing program 2 (id=2266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)={0xffffffffffffffff}) r3 = io_uring_setup(0x291c, 0x0) dup3(r2, r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, "7e12ddc5a89047bf00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) read(r5, 0x0, 0x2006) 3.820580419s ago: executing program 3 (id=2268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000990000000b00000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000680)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000600)='y\xa9n:5r\x00\x00\x00\x00\x00\x11\x00\x00\x00\x00\x00\x00Q\x8d\xba|\xc9\xce\xcf;\x879\x82\xc7-\x99\xb5\x1bx\x91F\x7f\x04g\x82\x04\x02\xdc\xc8$\xac\x85\x14\xcfV\x8d<\xb4\xdel\xfcE\xb9Q\xb3g\xf5\'\xbd\xc3+4C\xc4$:\xae\x1489\v_\x86j\xd5\xc0\x9bQ\xdd\x8c\x98h\xe2\x02\x85\xfb\x1eL\x8b', 0xfffffffffffffffe) 3.80996597s ago: executing program 3 (id=2269): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000440000000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00'], 0x50) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000440)='./file0/../file0/../file0\x00', &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwclock_exec_t:s0\x00', 0x24, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d40)='./cgroup.cpu/syz1\x00', 0x1ff) syz_usb_connect(0x6, 0x6e1, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x73, 0x89, 0x57, 0x20, 0x2001, 0x3309, 0x9c65, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6cf, 0x3, 0xfe, 0x5, 0x80, 0xc9, [{{0x9, 0x4, 0x22, 0x6, 0x4, 0xff, 0xff, 0xff, 0xb8, [@generic={0xf9, 0x31, "cb7fdb052d0be513b72d75b6042f8d3683a2f24326ad43065bd904600faf630072ed9eeda3579a6aa42012098fdc5722b070896e66c11d5d591b14b3808687c929d0bdb1d6dc553c0d5fe6e820bce286e7aafef2ccc24aec0fc14dfbeae83e8febffb751e7fea97e419b2361722b1bd15c1a6ff6d3bdc97f5d4c18fd912de65f34e95778d6c6f4252e85192bc28d89317bf48fdc6981131f947ebccb43f1c0fb860d6d1aa4e65a7a43577842ab0786076b74710775756695bf4694d9d0093a6a64aea5d29d1f4d0355666f926847b5b66a1d588762a1406966db1c241b435aba1e8263c7adc617b4449adaf32ab5b9debbd671fd506c37"}], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x77, 0x0, 0x3d}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x8, 0x5, 0x1, [@generic={0xfb, 0x8, "493a4ee5ef075dc3584914226de85d9a760231d68bc61b2bedad48004e3e6307640c962211fb647a76e8aa022273aa267c126d8661003d8d0596b7fa3630b2fba54822ff61359a6b2a52364aba2aa86e746b560c9d6ece07619120a332aa663cfb593bc84de1f6b9198d12da98a92d50c2176388601f780aee0b2246784745e210e34e45a99c6f61b0c2b6f4c5bdbbece5f70fab91f798c57d34c9008ad4b2ee5d31d4535375085f6b0270d7de128f9b6725a7f0278577830a3ec598bf6865cc05fc013ebb6c850cd7b846b631f967a5de97a378ecace4b5a27ef94231c019d271a0f39206e67e27002525529002a643affc27b05c01fa00d0"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x2, 0x7f, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0xfff}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x2, 0x8, 0x6}}]}}, {{0x9, 0x4, 0x90, 0x2, 0x6, 0x3, 0x89, 0xf9, 0x9, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x4, 0x7f, 0x1, "a187136aa655"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x1, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xe, 0x3, 0x5, 0x7f, 'k'}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "e0a8"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xceba, 0x8, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x3, 0x1, 0xd0}, @ncm={0x6, 0x24, 0x1a, 0x46, 0x22}]}], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x61, 0x2, 0xd}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0xa9, 0x0, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x9, 0x9, 0x2, [@generic={0x16, 0x1, "5198182d263e359a1499f55bf3da4dbe147256d1"}]}}, {{0x9, 0x5, 0x16, 0x3, 0x200, 0x8, 0xc1, 0xc}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x9, 0xfc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfe, 0x8}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0xdd, 0x7b, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xea, 0x1000}, @generic={0x8f, 0xf, "d99ccf6b34c8da449761e0744229a5ff97f9ca3a253b910183d9eaa59bace371642fa32e9dc9f69f2d398525c90da048f5b67d1d094bda83e72cb698176aa107099fef58973b3f52e42adac1597765075dc5c773898972f110bf83f5b04e2ea58af5c18001acbc137afde03df6e9a0b69fb116290791dd1e3991cb864115f599928fbdec311545012128fe5b1c"}]}}]}}, {{0x9, 0x4, 0x2e, 0xe, 0x7, 0xff, 0x0, 0x0, 0x8, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "a173af6300c8"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x400, 0x5}, [@obex={0x5, 0x24, 0x15, 0xf}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0x10, 0x24, 0x7, 0x1e, 0x0, [0x100, 0xfff8, 0x8, 0xfffe, 0xfffb]}, @mbim_extended={0x8, 0x24, 0x1c, 0x819b, 0xf, 0x6}]}, @hid_hid={0x9, 0x21, 0x4, 0xa, 0x1, {0x22, 0x7c0}}], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x6, 0xd, [@generic={0xca, 0x1, "ab9a5d8827d37e3854a7f026acea94e76f6b3f900384dc89e826892558899573b736985c919075cfed498d72202a3c751420c9d3ee2c0d3861a4c6205db2d569a2eb72fa1f0af9c62c97e72f067a5c8c54b68f1796dda581205b862cbdb3ad8520419c7bc06e77731f7fb9d8434c4789a3ff916c82290993751ad9b73cbef83201b8c769e93c3020e63831b522cd8e75b90fb7a591d023600527b7fc6ea388b2a85f252d9ffda0f2435b295fcec47f4e011729c21c6c49f23c76d695a93a2cd49ce9d4e5627e8101"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x8, 0x8, [@generic={0x34, 0x1, "3877ba6f708b1764f4648c82cf763b85b94b4da95c69b0b8b970456f2484372cf35b9c597cec09d19bef133ae6076509ca29"}, @generic={0xdd, 0xa, "3678e41b653b8b2e596b6e1a821398e938ddbe0ad746f1f777e7bb48d17db9751c7670ac8a6153b646391811c1c2f15ff2c194b17b568a1f671872311b0a226e02db2baa365dfbc21b3487997d9a163936e74042b1a89689bbe7b2afaba43d7dd3eecc944785551a51762207602f103e6be6e4ff26acfa7ad851c0f3afcf955acd6d5b49d2d591a0c54e7b3da50411d7f443373de15f19c30503220bc8c254cd2bf523ca74bbda532f01c7ea61f237e371073e270b2d66ec05a6626a7e53bd20efeacb7a48049e88e8b72ea76ba103cd7990ff233ef3a2ebd293fb"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0xc5, 0xf7, 0x1, [@generic={0xc2, 0x2, "e81a9ef509d1288e028a2f546717ddafaebb49d676ae9830e50fa44c1de98533fb4a8684a1e9ce3ef60afe80a247ea24c810ce34b135d2ef9ae109386dac8647622dd4427fda67a94f3efb577493b7e1b911c406c8ed7091087e140b9dc552af4b080a169fd4a3c21d8b79cf095713e676da3e8e678f4fe17e0d093767aa6dcbbf9c7316bc8a9ffbf9ad47206d8342e0eeaff8c493430813e4ce3416e85158609843c9aa638923577a1dfcc204804d002dadea345df80b731539f89f83bfc559"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6, 0xcd, 0x1, [@generic={0x2e, 0x23, "e65a5fecde0e09d165cd059ca3acd464480e926e2a960a7c62611cc00e3ef75d743e92f9603787d04d09970d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x0, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x12, 0x0, 0x7}}, {{0x9, 0x5, 0xc, 0x1c, 0x20, 0x40, 0x5, 0xc3}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x9, 0x9, 0x7, 0x10, 0x3}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "41ec450a0929c9a10082533cccc1f56f"}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x420}}, {0x2, &(0x7f0000000280)=@string={0x2}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c01}}, {0xe2, &(0x7f0000000380)=@string={0xe2, 0x3, "8df66ab85c18105bc753b98888001d65ef0019d293b99b3192c67748202361c16ff2806c6f99458dc74c66038adb2a97a0c2a106230a2a86f806dde20e0114b6553945b943514dea94f71654f934fbc0fc037094f17910926198661e9af76696bb6e5ad2d459ebb08f7eca7d2ad321eeedb2eed652257bbea8dbcd5e9baf36379d60630ea587001878eb10aaecae2b282ceba56f1e112abbf97bf3da813ad6d542957ce6ff3e73a33c9a255717d5b40d706b02c83c78af0eff5c34b398a5098540f768813de4f9bd3f2fd09fae4330e766bbaf8ae99480d2d249abf29445e5ae"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x180c}}, {0xb6, &(0x7f0000000c80)=@string={0xb6, 0x3, "505dffda59c98f9f5401d31c8deb48b140fa2c6712cf89531dea6d3e29b36327a5b009429bac5b2a81a0ad7171f30a1c63eb122374df0dfddcd613079c5e40b1aba6192fd4d7a9eb1fef2f5e9eb8de4133a0886577a26ddc08f31a50fe1d42f785cb10408fe268914cf2a9d469653b20fcaf5820d9ce06d4d561f716b33e35fdae2c2d65912dc6eabd34f11af9ee86dc3fbcbccd812675823ce0ea33b62142e530eb684d40d5eb01b18f158bf70a8ef1a2b9da17"}}]}) 3.751613324s ago: executing program 4 (id=2270): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4008, &(0x7f0000000380), 0xd, 0x5f4, &(0x7f00000019c0)="$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") memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 3.282804565s ago: executing program 4 (id=2271): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="19278df447ce3ffbeebcd9ad931e0c06773a44cb299686dcb09f265e396e47d7c0756b889ae6453d27183469aa18d3a4d1a722cbe6f1a6bdf6e37f221a844afaa6d5a2a40dbfb750d9ab68a3a055d7f12f3e72504659a4ee99b1825915898796ad6e0389073f30b7cd53992ff3094d8580af2d95d8ab4755532045c602d50709dc2e79b897ee30e8228e39a23e5125", @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES16=r1, @ANYRES64=0x0, @ANYRESHEX, @ANYRES32=r1, @ANYRES8=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902870003010000000904000000010100000a24010000000201020c240800000000ff533ea7290904010000010200000904010101010200000724010000dfff080501"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="fcffffffffffffff5e0483020b990010000000000000030000000009040000015c291d00092109000000000000619619d7b06716907100aa281ca48e1d0fb7da0fa1854f900b7ff0ca9422dec0a083348b044b0c879811bdb45e0c6102cac105"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000005c0)=ANY=[]) r8 = fsopen(&(0x7f0000000240)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex, @multicast1}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001400100029bd7000ffdbdf250a18827c", @ANYRES32=0x0, @ANYBLOB="08000900ffffffff14000100fc000000000000000000000000000001080009000600000011bbf7e7c653a7805429c2073e559573aeb474ee2565d07dc159f0de8d25fc39e378eb89967831f88cc58279c858a5ae3f6ce3aa0c7f0a26b3fc4e682a8f1dc26a00fdf3b74525e8b8e2670cdd68e25ac4e479e34ba03e28a7a2e88f0ec0d9223943c5ac7898cfa7ff26fd526edfd19c8a911ac68a"], 0x3c}, 0x1, 0x0, 0x0, 0x200040d8}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents64(r11, &(0x7f0000000400)=""/153, 0x99) socket$nl_generic(0x10, 0x3, 0x10) execveat(0xffffffffffffffff, &(0x7f0000004340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x0) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0xa, 0x4) r12 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='hostfs\x00', 0x89012, &(0x7f00000004c0)='devtmpfs\x00') fstat(r12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r14, @ANYBLOB="091e21b81dfc6fb0feb157135f914b110011504efbf790845429946409a9244bffb818fbbc5ead98aeff6a5549e74cef0600", @ANYRESOCT, @ANYRES16=r13, @ANYRESHEX=r12, @ANYRES16, @ANYRESOCT=r13, @ANYRES64], 0x2, 0x1d8, &(0x7f0000000840)="$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") (fail_nth: 12) 3.008542649s ago: executing program 2 (id=2272): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="00c744"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600000000100000", @ANYRES32, @ANYBLOB="00000000000000000000007f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) 1.72324758s ago: executing program 1 (id=2273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='xprtrdma_decode_seg\x00', r1, 0x0, 0x5}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000540)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f00000003c0), 0x0, 0x35c556aae2ce9086}, 0x40800) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x9, 0x2, 0x2000000}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) 1.336031064s ago: executing program 4 (id=2274): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000800000000000000000000000896ba453ba9e94cda9596c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000105000000080000000000000001000085000000000000000001000000000000000000ed0d6750151c3dbe55a5e44d83734a5323daec48b48f31fdc9295eef1880719455450dc056400e14b805f42290a7df4217e42ad689b7ce395f3a4c35726e68af760237a7b3ddea9004fba83e1a1c29b29ed9637d9571afd991b1810145bb278f5baae43c4b0bac74acecd20c671316ae2fb3c1b048ee2cb051655744"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008080) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r3, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) fsetxattr$security_capability(r8, &(0x7f0000000040), &(0x7f0000000140)=@v2, 0x14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ftruncate(r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x141842, 0x0) write$binfmt_script(r9, &(0x7f0000000040)={'#! ', './file1'}, 0xb) memfd_create(&(0x7f0000000000)='.\x00', 0x1) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f00000083c0)={{0x1}}) r11 = epoll_create(0x7) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x54a2) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f0000000040)={0x1}) epoll_pwait(r11, &(0x7f0000001780)=[{}], 0x1, 0xffffffff, 0x0, 0x0) 1.335627663s ago: executing program 4 (id=2275): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=iso8859-9,utf8,dmask=00000000000000000000011,utf8,errors=remount-ro,utf8,fmask=00000000000000000000001,errors=remount-ro,iocharset=iso8859-5,gid=', @ANYRESHEX=0x0, @ANYBLOB="0002"], 0x1, 0x1548, &(0x7f0000000380)="$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") getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000280)="61df718305a359", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.195582945s ago: executing program 4 (id=2276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x2, 0x1}}}}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020025bd7000ffdbdf254b0000000f00a8007365636f6e646e616d6500000c00a7000200000000000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011008233f898147d8a4a4c020030303a30303a31302e30000000000f00a900736563"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40040) syz_emit_ethernet(0x1c5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000000000000534d000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000000000000000000000000000000000000000000ee86a74afa6b63a99a91d055f52c4c"], 0x50) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x30a) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r9) brk(0x55555ede6001) 852.209245ms ago: executing program 1 (id=2277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r2) 842.943186ms ago: executing program 1 (id=2278): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f73691b5d1a8464000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000090400000000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="00000000000000004800128011000100a8447147afb69ea36c61766500000000300005800500090000000000050005000100000005001b"], 0x68}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) timerfd_create(0x3, 0x800) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)={r9}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000000100)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000480)={0x0}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) socket$igmp(0x2, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000140)={r10, 0x1, r7, 0x5}) shutdown(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 758.952204ms ago: executing program 3 (id=2279): request_key(&(0x7f0000000680)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000600)='y\xa9n:5r\x00\x00\x00\x00\x00\x11\x00\x00\x00\x00\x00\x00Q\x8d\xba|\xc9\xce\xcf;\x879\x82\xc7-\x99\xb5\x1bx\x91F\x7f\x04g\x82\x04\x02\xdc\xc8$\xac\x85\x14\xcfV\x8d<\xb4\xdel\xfcE\xb9Q\xb3g\xf5\'\xbd\xc3+4C\xc4$:\xae\x1489\v_\x86j\xd5\xc0\x9bQ\xdd\x8c\x98h\xe2\x02\x85\xfb\x1eL\x8b', 0xfffffffffffffffe) 747.025634ms ago: executing program 3 (id=2280): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000700000000000000000085000000200000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000580)="e05c144e4923e231c5d6c3a9fca961", 0x0, 0xffffffff, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x50) 697.035879ms ago: executing program 3 (id=2281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() r4 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x300001a, &(0x7f0000000a40)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fef3eb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcbe2f83150503b2076b7591149e6f426564f017ebe1f8253e880de2f63aff6ea337c137b607ffb0291b1223f578ec8b5a9568984ae47e157363144ea5ae13358e354cf1c896ddf139d580411f7676b8302974b5c65aec8de25c8f41a1459baeeb26d0ad35d101ec17dcca961fbae721d31bd58956c1d97c26e2926fe3ac0ce3f7ec46265a2df602d66bf5d34cd7f4097d6875640c0cc409408cbf931447c0ec0f15f5f4c359530d99275d78e68cc061f73375ffea29733d768484", @ANYRES16], 0xd, 0x2aa, &(0x7f0000001300)="$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") r5 = open(&(0x7f0000000240)='./bus\x00', 0x4827e, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$unix(r8, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e40)="29981b363366350fddb60bb6f1c34cbeddf3a7d74c2f63dde22398f13f68a297d8282e5e7f8812241d1cb61d910860dba1239dc62da32c9531e700bff47fe4ddebba498fcf5150597ce80cc3015f7717dbe367afeed2c764f59b91423775c35e7aba765f0ee9471965d7cd53fd51cf347b8ead5a888810d5f625a9aca6de5dfb3fa897c35ba9aa23e0e3833911a1e466c6fc45bb7a7a51835ca93e38eb202985e2", 0xa1}, {&(0x7f0000000f00)="beea91f5bc2835a08e2eb1c392dff48564f9f280d53fbe40707e3974670ff22f43af6215e2523520728a284de533bcf4c03f627f750904fa179c250318279a50c1f8d103cb199be85546c80e2b2cc08ab54747e3bad42b42a28c43f66087dd1e11bc043e777133b3f8c59ea9cd2805442dc1936f7ed8580e42c722362ceb14972d5a41554bfbc66d6e97f7378cf575042622f26dfacf064d3000d3d03e2423499a77da3d7261375a65e2", 0xaa}, {&(0x7f0000000fc0)="bdb27ea50042d4f22ebdbe5c66f041847468f60ff61b982dc38680c936a991b9c5b1bb57c06e7cc074c2961d4522440ca0c23f1295c74f3267900a6954661c35ed27b3173a2645b0dbfe1c88cf9b7a45ae0b546faa5e41aa72289d4be876513031298b453f98a157ad69edaf7848", 0x6e}], 0x3, &(0x7f0000001100)=[@rights={{0x2c, 0x1, 0x1, [r5, r0, r0, r1, r2, r4, r4]}}, @rights={{0x1c, 0x1, 0x1, [r8, r8, r9]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r6, r9]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x90, 0x20000040}}, {{&(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000a00)="48246bc3d1b53f484c9860f82058dce1984aa5e742d755ee47f81b9b98bf32c6ce46bb2f227eac48024c7e46b867fcecba28e2ae4741124bf574620c85749d27", 0x40}, {&(0x7f0000004400)="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", 0x1000}, {&(0x7f00000010c0)="b4ed2d3c1623b744a77c", 0xa}, {&(0x7f00000011c0)="2b3aaf63cae779c3b206df7277f609f513c4b281b0000699d61afcc97abc264d4fb34a4906db4adc7116cf70d536551f5af29ac41ec0d9b799e9b2f6621e5aa9cf624f1757f7a65d51544a894cde08b95b5ecc72502a9249f0710673884983bbe7cc26cda3a2e97d1ad69bd05cec60a4064ea5cc8a8e8da3e80c364875e658b68d3a10fde2a04a1dedda7f3d8af72721dbe2dbd719bc0dd2f646260fbf6f50251ed628415a621ac8a3b7b774bdd98eb92bc9b2dbe66374ed6e94585c5ee9a8e8bf515d60adb132eb75904593120442b842b86bcb54257fd02e0dbbf929504d77f014971aecb6c13420375f", 0xeb}, {&(0x7f00000015c0)="9f71f853ed1e6a7f0d006fb4974816ce59980486dc2e956b6b4a0ac1c6c42e1cc406718505abad0dc974c25caee5154cee06c9c98938b8f00d831e0dd2dbf482c9049015c9cc3c4d37a51b74dfa03907daebed23ea202bb4f950ec879e67a6a50518a21e625bbbcfef7fd4945850929a6e566e698976a6feb45cc471993cdb", 0x7f}, {&(0x7f0000001640)="e4a181cd65d001d8379afa12d28b3e70e5491a4a1c9f79bb7ae4668c0e88555d28275e4ebb59965672c4ce1bc7bf490514540dcead384af9bd1a6805ad77d829eeba13bf2ac86c7634af28a010ad260029d5dcf971ab912e3890e8e37f4471a23c765e49552c8bdf914f4555233abb25f55928169bbc3f8a580d60de74c1114fe4af96ae2cf683b988b3ebbdf4177cbf4b001273b9", 0x95}], 0x6, &(0x7f00000012c0)=[@rights={{0x28, 0x1, 0x1, [r2, r1, r2, r8, r5, r2]}}], 0x28, 0x80}}, {{&(0x7f0000001780)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000005400)="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", 0xb23}, {&(0x7f0000001b80)="b6e723296d2c87659932393397004d72a7d2a65604975fa65b3afa0d8f178460cbda7b83abb32c22d686a3ccdee05f0bfd5a6525d2c64e477ca66cd6dc553a5287eeacc83aa356ba7c35c39b57acc889cf59c64c5efc14c92168b12f38ef7c695e0b957767eea55d0f4b985081a47a08f3d7fa851ab0f422dc00ee6e5755f911dfc16d4009ace61c01582159b10f3190360485d814dfb2a66f45c46d6f1c022ce57d28021229716b2eb9f6365715535278c9c81cdca6037e123d958c8b1f755e6560b4b1228a92931c51c745", 0xcb}, {&(0x7f0000001900)="b836c5192b834da310b1e3ff27be5b7fb59e348bfa7862eb8bfad7c988cd6629c91bc8b8b4698b400326105ea7994ad2321478c213b6f1428496603949792329636a76e4c63466bae0f042507a0559d320e8af6b29caa9059ce7159a5cf5a55eaed025278056b3", 0x67}, {&(0x7f0000001980)="f478df4b89acb36de4c2ae6f352ebdfdfbfee4b508347a7e283e4de348cc4d37c7ead65565526add5cbfcec5ad5903bebc0c1fb14a74e78a15e0ea5bfc441ec9846c81f2024eb325b9e612072dbe0a09c5225b6004835683f874dd26bc18dd82073be104fa3ff0ae30b4ac53af0f0523baa745a77802a05758dd2d03fc8a1b13ca713ce924ef6a1a3e1b6368412056ae96313d5ab1a8fb470ecc6329163b9f36633bc67542ea972a17027bb896bd97cad1365a70f83f4509b7687a5651e24914511737fe1c6b1593c1a3d38df9241500350dd92a9447e9b2540d1f02b87c", 0xde}], 0x4, 0x0, 0x0, 0xaa09a536c7da3947}}], 0x3, 0x0) 696.471909ms ago: executing program 3 (id=2282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)={0xffffffffffffffff}) r3 = io_uring_setup(0x291c, 0x0) dup3(r2, r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, "7e12ddc5a89047bf00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) read(r5, 0x0, 0x2006) 374.973107ms ago: executing program 4 (id=2283): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=iso8859-9,utf8,dmask=00000000000000000000011,utf8,errors=remount-ro,utf8,fmask=00000000000000000000001,errors=remount-ro,iocharset=iso8859-5,gid=', @ANYRESHEX=0x0, @ANYBLOB="0002"], 0x1, 0x1548, &(0x7f0000000380)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) statx(0xffffffffffffffff, 0x0, 0x4700, 0x40, &(0x7f0000000840)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 267.737146ms ago: executing program 2 (id=2284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 267.076956ms ago: executing program 2 (id=2285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="00000000000000000000fc2b04969a8bde7378485100"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000006000000000000"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000ac0)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES32=r0, @ANYRES64=r1, @ANYRES16=r0, @ANYRESDEC=r0], 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000040)={[{@discard}, {@nombcache}]}, 0x64, 0x52e, &(0x7f0000000f80)="$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") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000b40)='./file0\x00', 0x804810, &(0x7f0000000140)={[{@quota}, {@bsdgroups}, {@nobh}, {@grpjquota}, {@dioread_lock}]}, 0x7, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x8f) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x3, 0x2000003, 0x400000, 0x7fff, 0xfffffffc, 0x80, 0x7}, 0x1c) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55b810"], 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000070000000000ddffffff0000000b0000000000000000"], 0x48) sendmsg$nl_route(r4, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) sendmsg$nl_route(r4, &(0x7f0000000b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=@ipv4_getnetconf={0x24, 0x52, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_FORWARDING={0x8, 0x2, 0xf34}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/19, 0xfffffdc7}, 0x0) 0s ago: executing program 1 (id=2286): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000d00)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@discard_unit_segment}, {@noinline_dentry}, {@fastboot}, {@fsync_mode_strict}, {@io_bits={'io_bits', 0x3d, 0xd8}}]}, 0x21, 0x552d, &(0x7f000000abc0)="$eJzs3EtvG1UUAODjpOmbEiEW7DqoQkqk2qrTh2BXoBUP0aoqsGAFju1abmxPFDtOyIoFS8SCf4JAYsWS38CCNTvEAsQOCeS5E2gKlZDixKT5Pml85t65c+beURTpzFgO4NhazH77pRIX4kxEzEfE+Yhiv1JuhZspvBARFyNi7pGtUvb/1XEyIs5GxIVJ8pSzUh764vL40vWf3/712+9PnTj35Tc/zG7VwKy9FBH99bS/1U8x76T4sOxvjLtF7F8blzEd6K+V7TzFrfZqkWGrsTuuUcSrnTQ+X98cTuKDXqM5iZ3ug6J/fZAuOBx3dvMUJzxsbBTtVnu1iN1hXsTOTprX9k7637YzHKU8rTLfx0X6GI12Y+pvb7fTetbXitgcjMr+lDdvtbcncVzG8nLRzHutYh6r+7nT/2svvtMdbG5n4/bGsJsPsuu1+su1+o1qfSNvtUfta9VGv3XjWrbU6U2GVUftRv9mJ887vXatmfeXs6VOs1mt17OlW+3VbmOQ1eu1q7Ur1evL5d7l7I2772e9VrY0ia91B5ujbm+YPcg3snTGcrZSu/rKcnapnr1751527/7t23fuvffhrQ/uvnrnrdfLQf+YVra0cmVlpVq/Ul2pL+/vBhyp9X9aTnqK64d9qcx6AgBHj/ofmIWDq/837kccfP0f6v+pOFL173Gv/w9g/bAv6n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGPrx4Wv3ix2FlP7XNn/TNn1XNmuRMRcRPzxL+bj5J6c82WehSeMX3hsDt9VosgwucapcjsbETfL7fdnD/ouAAAAwNPr608ufp6q9fSxOOsJcZjSQ5u58x9NKV8lIhYWf5pStrnJx/NTSlb8fZ+I7SllKx5gnZ5SsvTI7cS0sv0n83vC6UdCJYW5x8+Y2moBAICZ2VsJHG4VAgAAwGH67IlH1g51HhyySuy+ytx9F1x88/7vl31nUturPwAAADi6KrOeAAAAAHDgivrf7/8BAADA0y39/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+ycy+5aQNxHID/NrjQl4qq7nuV7uAYPUKXXVYcoJfgCOQKuQBnILscIYIIj4NCRB7EY6xE3yfZgy3zmxkei5mRBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLV9VydvHv5/+2OZttO3l6AwAAAByzrpaz+sUkXX9u7n9tbn1vrouIKCPi2Nh9EB8OMgdNTvXI89WDNlxG1Am7OkbN8SkifqVjG9+6/hQAAADgXRruTqv5YppG6+k06btVtHbCd5gmbcovvzNVXURENbnOlFbu8n5kCqt/38P4mymtnsAaZwpLU27DXGkvUv/d97N243tFkYry6fdn6zsAAHBGg4PivKMQAAAAzulP3w2gCx+ffaKIu6XM/VLgKBXjgwiLfQAAAPB2FX03AAAAAOhcPf4/Zf+/6Gf/v7ix/x8AAAC8Wtr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC6tq+VsNV9M2+Zstu3k6Q0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7Ny/b9xUHADwZ/t8/QGII6AbghBIDLDQ67W0dEMMoIiBPwEpSq8l9MqPNgOtKqQsbChzFwQjQkigsPUfYOqG1EpdytbhhiKxsByyz845TSUuRLEvyecjPb/vOY7f99lSlK+fEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR6bxon2aYzieNi373Ht1ay/v4TfebOxoPFrGVxVGfSB8Mr1Q9Rt7lEAAAAODqSsr4PITxMN5eyPu7k9X9aHpPV/N8/N4nLev7Jur/sy9o/a7/9+uilrYE6k3Gyk15aHQ5O70yltX+znG/P/+cRrfzK589ekvyGxB+uvzhK8+sZfXv37vvtPDxWR7YAwP9xquyLoPx9KOv7TSYGwJHRqhTeZf2fdJrNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAOo/XwTBlHIYTF1jTO3H98a+Vp/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8GkJoavR3i+lf+XiGg0No5PrsV/DPeDze1Xcdbz7nPQVxcbPnJZ+DETT4QwkAgEMpLVpW1z9MN5eyfdFCCOMfttf/b1TiMGP9/+iT8/eqY1Xr/35tM5x/vbWrX/Su37j51urV5cuDy4PP3j7Tf6d/9sK5cxd6+bOSnicmAAAA7E27aNX6P17Yuf5/shKHGev/L7/rfz0d6Y98q/7fabro13QmAAAAR9sLr/39V/SU/VG7Hb5aXlu71p9stz6fmWwbSHXXjhWtWv8nC01nBQAAANRhtB5tW/+/WInDjOv/z/748s/VcyYhhBPF+v+plc+HF+ubzlyr48+Jm54jAAAAzTpRtOr6f5q//x9vvfIQhxDefH0SF/8GcKb6P/ngm5+qYyWV9//P1jfFuRR3J9cj77shtLrbvvx7Y4kBAABwKB0vWlbs/5luLn36y8mP2t7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjbvwEAAP//E41CoA==") symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000280)='./bus\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@block_validity}, {@data_err_abort}, {@sysvgroups}, {@debug}]}, 0x1, 0x5f0, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) personality(0x8000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$inet6_udp(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'erspan0\x00', 0x0}) kernel console output (not intermixed with test programs): _r:tmpfs_t tclass=dir permissive=1 [ 383.035174][ T28] audit: type=1400 audit(1726610125.167:443): avc: denied { unlink } for pid=7450 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=14332 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 383.215601][ T7424] loop1: detected capacity change from 0 to 16 [ 383.223442][ T7424] erofs: (device loop1): mounted with root inode @ nid 36. [ 383.340615][ T2058] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 383.384643][ T7470] loop4: detected capacity change from 0 to 1024 [ 383.457242][ T7470] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 383.734446][ T956] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 383.742012][ T956] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input16 [ 383.754323][ T956] usb 4-1: USB disconnect, device number 29 [ 383.769088][ T2058] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 383.782940][ T2058] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 383.966479][ T2058] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 383.975887][ T2058] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.983836][ T2058] usb 1-1: Product: syz [ 383.988121][ T2058] usb 1-1: Manufacturer: syz [ 383.992590][ T2058] usb 1-1: SerialNumber: syz [ 384.002924][ T2058] usb 1-1: config 0 descriptor?? [ 384.036264][ T7454] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 384.043285][ T7454] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 384.217197][ T5196] EXT4-fs (loop4): unmounting filesystem. [ 384.267735][ T7454] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 384.274711][ T7454] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 384.317237][ T7485] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 384.326761][ T958] Bluetooth: hci0: Frame reassembly failed (-84) [ 384.572410][ T7490] loop3: detected capacity change from 0 to 256 [ 384.578908][ T7490] exfat: Deprecated parameter 'utf8' [ 384.584110][ T7490] exfat: Deprecated parameter 'utf8' [ 384.589400][ T7490] exfat: Deprecated parameter 'utf8' [ 384.597055][ T7490] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 384.766321][ T4506] usb 2-1: skipping empty audio interface (v1) [ 384.778704][ T4506] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 384.787012][ T4506] usb 2-1: USB disconnect, device number 34 [ 384.791751][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 384.816252][ T2058] Error reading MAC address [ 386.677130][ T2144] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 386.778070][ T7509] loop3: detected capacity change from 0 to 512 [ 386.785421][ T401] Bluetooth: hci0: command 0x1003 tx timeout [ 386.794995][ T7509] EXT4-fs (loop3): Test dummy encryption mode enabled [ 386.916239][ T7509] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.1937: invalid block [ 386.927163][ T7509] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1937: couldn't read orphan inode 11 (err -117) [ 386.939075][ T7509] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 386.952441][ T7517] loop1: detected capacity change from 0 to 256 [ 386.958761][ T7517] exfat: Deprecated parameter 'utf8' [ 386.963893][ T7517] exfat: Deprecated parameter 'utf8' [ 386.969051][ T7517] exfat: Deprecated parameter 'utf8' [ 386.999758][ T7507] 9pnet_fd: Insufficient options for proto=fd [ 387.024133][ T7517] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 387.145678][ T338] usb 1-1: USB disconnect, device number 31 [ 387.152973][ T7068] EXT4-fs (loop3): unmounting filesystem. [ 387.167619][ T28] audit: type=1400 audit(1726610129.597:444): avc: denied { create } for pid=7522 comm="syz.0.1942" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 387.244694][ T7526] fuse: Bad value for 'fd' [ 387.317281][ T28] audit: type=1400 audit(1726610129.717:445): avc: denied { accept } for pid=7534 comm="syz.3.1945" path="socket:[46977]" dev="sockfs" ino=46977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 387.833613][ T7549] loop3: detected capacity change from 0 to 512 [ 387.857907][ T7549] EXT4-fs (loop3): Test dummy encryption mode enabled [ 388.039553][ T7549] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.1947: invalid block [ 388.051202][ T7549] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1947: couldn't read orphan inode 11 (err -117) [ 388.063797][ T7549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 388.106223][ T7549] 9pnet_fd: Insufficient options for proto=fd [ 388.234326][ T7560] loop4: detected capacity change from 0 to 256 [ 388.274402][ T7068] EXT4-fs (loop3): unmounting filesystem. [ 388.504578][ T7568] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1952'. [ 388.525502][ T7572] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1955'. [ 388.541038][ T7572] loop3: detected capacity change from 0 to 1024 [ 388.563113][ T7572] EXT4-fs error (device loop3): ext4_quota_enable:6955: inode #3: comm syz.3.1955: iget: bad extended attribute block 1 [ 388.596341][ T7572] EXT4-fs error (device loop3): ext4_quota_enable:6958: comm syz.3.1955: Bad quota inode: 3, type: 0 [ 388.623862][ T7572] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 388.679774][ T7572] EXT4-fs (loop3): mount failed [ 388.758994][ T28] audit: type=1400 audit(1726610131.187:446): avc: denied { mount } for pid=7571 comm="syz.3.1955" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 388.814551][ T28] audit: type=1400 audit(1726610131.207:447): avc: denied { unmount } for pid=7068 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 388.953621][ T7584] FAULT_INJECTION: forcing a failure. [ 388.953621][ T7584] name failslab, interval 1, probability 0, space 0, times 0 [ 388.966174][ T7584] CPU: 1 PID: 7584 Comm: syz.3.1957 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 388.975708][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 388.986214][ T7584] Call Trace: [ 388.989336][ T7584] [ 388.992109][ T7584] dump_stack_lvl+0x151/0x1b7 [ 388.996625][ T7584] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 389.001918][ T7584] ? __kasan_check_write+0x14/0x20 [ 389.006863][ T7584] ? _raw_spin_lock+0xa4/0x1b0 [ 389.011465][ T7584] ? _raw_spin_trylock_bh+0x190/0x190 [ 389.016674][ T7584] dump_stack+0x15/0x1c [ 389.020663][ T7584] should_fail_ex+0x3d0/0x520 [ 389.025178][ T7584] __should_failslab+0xaf/0xf0 [ 389.029780][ T7584] should_failslab+0x9/0x20 [ 389.034116][ T7584] slab_pre_alloc_hook+0x2e/0x1b0 [ 389.038982][ T7584] kmem_cache_alloc_lru+0x49/0x220 [ 389.043927][ T7584] ? __d_alloc+0x34/0x700 [ 389.048095][ T7584] __d_alloc+0x34/0x700 [ 389.052088][ T7584] d_alloc_parallel+0xe6/0x12e0 [ 389.056773][ T7584] ? __rcu_read_unlock+0x7e/0xd0 [ 389.061545][ T7584] ? avc_has_perm_noaudit+0x2dd/0x430 [ 389.066756][ T7584] ? down_read+0xeb7/0x1aa0 [ 389.071095][ T7584] ? preempt_schedule_irq+0xe7/0x140 [ 389.076211][ T7584] ? d_hash_and_lookup+0x1e0/0x1e0 [ 389.081163][ T7584] ? __down_common+0x690/0x690 [ 389.085761][ T7584] ? selinux_inode_permission+0x423/0x650 [ 389.091323][ T7584] __lookup_slow+0x154/0x3e0 [ 389.095747][ T7584] ? lookup_one_len+0x2c0/0x2c0 [ 389.100432][ T7584] ? security_inode_permission+0xb0/0xf0 [ 389.105898][ T7584] lookup_slow+0x5a/0x80 [ 389.109976][ T7584] link_path_walk+0x9d3/0xee0 [ 389.114493][ T7584] ? handle_lookup_down+0x130/0x130 [ 389.119528][ T7584] path_openat+0x25f/0x2d60 [ 389.123867][ T7584] ? preempt_schedule_notrace+0x140/0x140 [ 389.129430][ T7584] ? do_filp_open+0x480/0x480 [ 389.133933][ T7584] do_filp_open+0x230/0x480 [ 389.138290][ T7584] ? vfs_tmpfile+0x480/0x480 [ 389.142700][ T7584] ? noop_direct_IO+0x20/0x20 [ 389.147219][ T7584] ? alloc_fd+0x4fa/0x5a0 [ 389.151382][ T7584] do_sys_openat2+0x151/0x890 [ 389.156326][ T7584] ? __schedule+0xcbd/0x1560 [ 389.160750][ T7584] ? do_sys_open+0x220/0x220 [ 389.165181][ T7584] ? release_firmware_map_entry+0x191/0x191 [ 389.166188][ T7512] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 389.170905][ T7584] __x64_sys_openat+0x243/0x290 [ 389.170932][ T7584] ? __ia32_sys_open+0x270/0x270 [ 389.170952][ T7584] ? switch_fpu_return+0xe/0x10 [ 389.192432][ T7584] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 389.197904][ T7584] x64_sys_call+0x6bf/0x9a0 [ 389.202242][ T7584] do_syscall_64+0x3b/0xb0 [ 389.206493][ T7584] ? clear_bhb_loop+0x55/0xb0 [ 389.211007][ T7584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.216731][ T7584] RIP: 0033:0x7f6791f7c890 [ 389.221002][ T7584] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 389.240431][ T7584] RSP: 002b:00007f6792d41f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 389.248761][ T7584] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6791f7c890 [ 389.256570][ T7584] RDX: 0000000000000000 RSI: 00007f6792d41fa0 RDI: 00000000ffffff9c [ 389.264381][ T7584] RBP: 00007f6792d41fa0 R08: 0000000000000000 R09: 00007f6792d41cd7 [ 389.272192][ T7584] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 389.280003][ T7584] R13: 0000000000000000 R14: 00007f6792136130 R15: 00007fff2fb0f168 [ 389.287831][ T7584] [ 390.004729][ T7599] netlink: 'syz.2.1961': attribute type 1 has an invalid length. [ 390.206209][ T338] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 390.216367][ T7512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.230841][ T7512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.240804][ T7512] usb 1-1: New USB device found, idVendor=07c0, idProduct=1524, bcdDevice= 0.00 [ 390.254662][ T7512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.266497][ T7512] usb 1-1: config 0 descriptor?? [ 390.293347][ T7612] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1965'. [ 390.427719][ T7612] device gretap0 entered promiscuous mode [ 390.666170][ T338] usb 5-1: Using ep0 maxpacket: 8 [ 390.846271][ T294] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 390.946232][ T338] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 390.955234][ T338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.963300][ T338] usb 5-1: Product: syz [ 390.967890][ T338] usb 5-1: Manufacturer: syz [ 390.972434][ T338] usb 5-1: SerialNumber: syz [ 391.018568][ T338] usb_ehset_test: probe of 5-1:2.0 failed with error -32 [ 391.046503][ T7623] loop3: detected capacity change from 0 to 256 [ 391.052843][ T7623] exfat: Bad value for 'uid' [ 391.096163][ T294] usb 3-1: Using ep0 maxpacket: 32 [ 391.134887][ T7626] loop1: detected capacity change from 0 to 256 [ 391.218822][ T338] usb 5-1: USB disconnect, device number 24 [ 391.257152][ T294] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.268266][ T294] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.406409][ T294] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 391.426965][ T294] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 391.467825][ T294] usb 3-1: Product: syz [ 391.488180][ T294] usb 3-1: Manufacturer: syz [ 391.576545][ T294] hub 3-1:4.0: USB hub found [ 391.634257][ T2058] usb 1-1: USB disconnect, device number 32 [ 391.858426][ T294] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 391.906429][ T294] usb 3-1: USB disconnect, device number 32 [ 392.207005][ T7650] loop1: detected capacity change from 0 to 256 [ 392.213418][ T7650] exfat: Deprecated parameter 'namecase' [ 392.221650][ T7650] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 392.380168][ T7648] loop3: detected capacity change from 0 to 40427 [ 392.383193][ T7654] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1976'. [ 392.396090][ T7648] F2FS-fs (loop3): Invalid segment/section count (31 != 24 * 1) [ 392.403801][ T7648] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 392.416802][ T7648] F2FS-fs (loop3): invalid crc value [ 392.424589][ T7648] F2FS-fs (loop3): Found nat_bits in checkpoint [ 392.431018][ T7662] loop2: detected capacity change from 0 to 512 [ 392.462690][ T7648] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 392.465391][ T7662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 392.469723][ T7648] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 392.486626][ T7662] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 392.899935][ T7679] loop4: detected capacity change from 0 to 128 [ 392.910214][ T7679] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 393.107275][ T7686] loop1: detected capacity change from 0 to 1024 [ 393.115925][ T7686] EXT4-fs error (device loop1): ext4_quota_enable:6955: inode #3: comm syz.1.1983: iget: bad extended attribute block 1 [ 393.128751][ T7686] EXT4-fs error (device loop1): ext4_quota_enable:6958: comm syz.1.1983: Bad quota inode: 3, type: 0 [ 393.139933][ T7686] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 393.155149][ T7686] EXT4-fs (loop1): mount failed [ 393.200013][ T7686] tmpfs: Unknown parameter 'nolazytime$%' [ 393.217257][ T7692] loop1: detected capacity change from 0 to 256 [ 393.304937][ T7090] EXT4-fs (loop2): unmounting filesystem. [ 393.320510][ T7694] loop2: detected capacity change from 0 to 512 [ 393.347829][ T7694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 393.356649][ T7694] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 393.888834][ T958] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 393.922744][ T7706] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1988'. [ 393.946881][ T7706] loop4: detected capacity change from 0 to 1024 [ 393.966904][ T7706] EXT4-fs error (device loop4): ext4_quota_enable:6955: inode #3: comm syz.4.1988: iget: bad extended attribute block 1 [ 393.979534][ T7706] EXT4-fs error (device loop4): ext4_quota_enable:6958: comm syz.4.1988: Bad quota inode: 3, type: 0 [ 393.990360][ T7706] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 394.005115][ T7706] EXT4-fs (loop4): mount failed [ 394.097842][ T7712] loop3: detected capacity change from 0 to 256 [ 394.124749][ T7712] exfat: Deprecated parameter 'utf8' [ 394.132696][ T7712] exfat: Deprecated parameter 'utf8' [ 394.137977][ T7712] exfat: Deprecated parameter 'utf8' [ 394.146477][ T7712] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 394.211676][ T7090] EXT4-fs (loop2): unmounting filesystem. [ 394.234846][ T7718] loop2: detected capacity change from 0 to 512 [ 394.334579][ T7721] loop1: detected capacity change from 0 to 512 [ 394.406862][ T7721] EXT4-fs (loop1): Test dummy encryption mode enabled [ 394.439443][ T7721] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.1991: invalid block [ 394.450956][ T7721] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1991: couldn't read orphan inode 11 (err -117) [ 394.463552][ T7721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 394.523512][ T7721] 9pnet_fd: Insufficient options for proto=fd [ 394.657375][ T7718] EXT4-fs error (device loop2): __ext4_iget:5046: inode #15: block 1803188595: comm syz.2.1992: invalid block [ 394.673066][ T7718] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1992: couldn't read orphan inode 15 (err -117) [ 394.695419][ T7718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 394.706198][ T294] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 394.730204][ T7718] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 13: comm syz.2.1992: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 394.765562][ T7718] input: syz0 as /devices/virtual/input/input17 [ 394.976366][ T294] usb 5-1: Using ep0 maxpacket: 32 [ 395.150425][ T7296] EXT4-fs (loop1): unmounting filesystem. [ 395.177526][ T7735] loop1: detected capacity change from 0 to 1024 [ 395.194631][ T7735] EXT4-fs error (device loop1): ext4_quota_enable:6955: inode #3: comm syz.1.1995: iget: bad extended attribute block 1 [ 395.223899][ T7735] EXT4-fs error (device loop1): ext4_quota_enable:6958: comm syz.1.1995: Bad quota inode: 3, type: 0 [ 395.236188][ T294] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.251979][ T7735] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 395.256164][ T294] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.288438][ T7735] EXT4-fs (loop1): mount failed [ 395.320524][ T7735] tmpfs: Unknown parameter 'nolazytime$%' [ 395.355688][ T7739] loop1: detected capacity change from 0 to 512 [ 395.406248][ T294] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 395.415361][ T294] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 395.426288][ T294] usb 5-1: Product: syz [ 395.430822][ T7739] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 395.446169][ T294] usb 5-1: Manufacturer: syz [ 395.456354][ T7739] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 395.486688][ T294] hub 5-1:4.0: USB hub found [ 396.006580][ T294] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 396.117756][ T294] usb 5-1: USB disconnect, device number 25 [ 396.137815][ T7090] EXT4-fs (loop2): unmounting filesystem. [ 396.156860][ T7752] loop2: detected capacity change from 0 to 128 [ 396.170108][ T7752] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 396.180276][ T7752] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 396.246747][ T28] audit: type=1400 audit(1726610138.667:448): avc: denied { create } for pid=7749 comm="syz.0.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 396.268177][ T7296] EXT4-fs (loop1): unmounting filesystem. [ 396.292831][ T7757] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2000'. [ 396.302173][ T7757] device gretap0 entered promiscuous mode [ 396.312025][ T7757] loop1: detected capacity change from 0 to 1024 [ 396.320691][ T7757] EXT4-fs error (device loop1): ext4_quota_enable:6955: inode #3: comm syz.1.2000: iget: bad extended attribute block 1 [ 396.333307][ T7757] EXT4-fs error (device loop1): ext4_quota_enable:6958: comm syz.1.2000: Bad quota inode: 3, type: 0 [ 396.344587][ T7757] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 396.361849][ T7757] EXT4-fs (loop1): mount failed [ 396.717867][ T7763] loop3: detected capacity change from 0 to 256 [ 396.742472][ T7765] loop4: detected capacity change from 0 to 128 [ 396.786815][ T7765] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 396.859444][ T7767] loop1: detected capacity change from 0 to 256 [ 396.926647][ T7767] exfat: Deprecated parameter 'utf8' [ 396.931782][ T7767] exfat: Deprecated parameter 'utf8' [ 396.937105][ T7767] exfat: Deprecated parameter 'utf8' [ 396.944346][ T7767] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 397.093393][ T7090] EXT4-fs (loop2): unmounting filesystem. [ 397.308856][ T7776] loop2: detected capacity change from 0 to 256 [ 397.780930][ T7785] netem: incorrect ge model size [ 397.785702][ T7785] netem: change failed [ 397.997785][ T958] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 398.052059][ T7792] loop3: detected capacity change from 0 to 512 [ 398.068761][ T7792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 398.078649][ T7792] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038 (0x7fffffff) [ 398.162279][ T7799] loop1: detected capacity change from 0 to 256 [ 398.168810][ T7799] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 398.181031][ T7799] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 398.200725][ T7799] hub 6-0:1.0: USB hub found [ 398.205688][ T7799] hub 6-0:1.0: 1 port detected [ 398.653881][ T7807] syz.0.2013[7807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.654266][ T7807] syz.0.2013[7807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.716837][ T294] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 398.871018][ T7811] loop4: detected capacity change from 0 to 128 [ 398.879054][ T7811] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 398.910269][ T7068] EXT4-fs (loop3): unmounting filesystem. [ 398.998293][ T28] audit: type=1400 audit(1726610141.427:449): avc: denied { map } for pid=7810 comm="syz.4.2015" path="socket:[46042]" dev="sockfs" ino=46042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 399.022571][ T28] audit: type=1400 audit(1726610141.427:450): avc: denied { accept } for pid=7810 comm="syz.4.2015" path="socket:[46042]" dev="sockfs" ino=46042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 399.133039][ T7819] FAULT_INJECTION: forcing a failure. [ 399.133039][ T7819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.145888][ T7819] CPU: 1 PID: 7819 Comm: syz.3.2017 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 399.155436][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 399.165329][ T7819] Call Trace: [ 399.168449][ T7819] [ 399.171231][ T7819] dump_stack_lvl+0x151/0x1b7 [ 399.175740][ T7819] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 399.181043][ T7819] dump_stack+0x15/0x1c [ 399.185035][ T7819] should_fail_ex+0x3d0/0x520 [ 399.189541][ T7819] should_fail+0xb/0x10 [ 399.193532][ T7819] should_fail_usercopy+0x1a/0x20 [ 399.198392][ T7819] copy_to_user_nofault+0x7c/0x140 [ 399.203341][ T7819] bpf_probe_write_user+0x96/0xf0 [ 399.208198][ T7819] bpf_prog_6303d92f98284ad8+0x3b/0x3f [ 399.213491][ T7819] bpf_trace_run4+0x18d/0x2f0 [ 399.218006][ T7819] ? bpf_trace_run3+0x2e0/0x2e0 [ 399.222693][ T7819] ? __this_cpu_preempt_check+0x13/0x20 [ 399.228073][ T7819] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 399.234583][ T7819] ? probe_sched_switch+0x60/0x80 [ 399.239442][ T7819] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 399.245604][ T7819] __bpf_trace_sched_switch+0xe/0x10 [ 399.250725][ T7819] __traceiter_sched_switch+0x91/0xc0 [ 399.255935][ T7819] __schedule+0x1313/0x1560 [ 399.260273][ T7819] ? release_firmware_map_entry+0x191/0x191 [ 399.266002][ T7819] ? kernelmode_fixup_or_oops+0x83/0xd0 [ 399.271382][ T7819] ? __bad_area_nosemaphore+0xc2/0x610 [ 399.276678][ T7819] preempt_schedule_irq+0xc7/0x140 [ 399.281625][ T7819] ? preempt_schedule_notrace+0x140/0x140 [ 399.287180][ T7819] ? __kasan_check_read+0x11/0x20 [ 399.292040][ T7819] ? __cpupri_find+0x3a/0x210 [ 399.296554][ T7819] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 399.302465][ T7819] irqentry_exit+0x30/0x40 [ 399.306710][ T7819] sysvec_reschedule_ipi+0x80/0x160 [ 399.311744][ T7819] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 399.317040][ T7819] RIP: 0010:kasan_save_alloc_info+0x0/0x30 [ 399.322680][ T7819] Code: 41 0f b6 f6 bf 00 08 00 00 e8 5c d8 ff ff 89 43 08 5b 41 5e 41 5f 5d c3 66 90 55 48 89 e5 31 f6 e8 35 ff ff ff 5d c3 0f 1f 00 <55> 48 89 e5 48 63 87 e8 00 00 00 48 85 c0 74 0f 48 01 c6 74 0a 48 [ 399.342120][ T7819] RSP: 0018:ffffc90004087bb8 EFLAGS: 00000246 [ 399.348029][ T7819] RAX: 0000000000000000 RBX: ffff88810f6b0000 RCX: 0000000000000000 [ 399.355840][ T7819] RDX: 0000000000000cc0 RSI: ffff88810f6b0000 RDI: ffff8881002b2600 [ 399.363646][ T7819] RBP: ffffc90004087be0 R08: ffffc90004087c68 R09: ffffed1021ed6000 [ 399.371458][ T7819] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 399.379268][ T7819] R13: 0000000000000001 R14: 0000000000000cc0 R15: ffff8881002b2600 [ 399.387174][ T7819] ? __kasan_slab_alloc+0x6c/0x80 [ 399.392027][ T7819] slab_post_alloc_hook+0x53/0x2c0 [ 399.396973][ T7819] ? getname_flags+0xba/0x520 [ 399.401573][ T7819] ? getname_flags+0xba/0x520 [ 399.406096][ T7819] kmem_cache_alloc+0x175/0x2c0 [ 399.410774][ T7819] ? getname_flags+0xba/0x520 [ 399.415286][ T7819] getname_flags+0xba/0x520 [ 399.419628][ T7819] getname+0x19/0x20 [ 399.423358][ T7819] do_sys_openat2+0xe0/0x890 [ 399.427785][ T7819] ? __schedule+0xcbd/0x1560 [ 399.432212][ T7819] ? do_sys_open+0x220/0x220 [ 399.436638][ T7819] ? release_firmware_map_entry+0x191/0x191 [ 399.442365][ T7819] ? ksys_write+0x260/0x2c0 [ 399.446707][ T7819] __x64_sys_openat+0x243/0x290 [ 399.451551][ T7819] ? __ia32_sys_open+0x270/0x270 [ 399.456316][ T7819] ? switch_fpu_return+0xe/0x10 [ 399.461008][ T7819] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 399.466475][ T7819] x64_sys_call+0x6bf/0x9a0 [ 399.470813][ T7819] do_syscall_64+0x3b/0xb0 [ 399.475070][ T7819] ? clear_bhb_loop+0x55/0xb0 [ 399.479663][ T7819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.485390][ T7819] RIP: 0033:0x7f6791f7c890 [ 399.489643][ T7819] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 399.509095][ T7819] RSP: 002b:00007f6792d41f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 399.517329][ T7819] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6791f7c890 [ 399.525142][ T7819] RDX: 0000000000000000 RSI: 00007f6791ff0c8e RDI: 00000000ffffff9c [ 399.532958][ T7819] RBP: 00007f6791ff0c8e R08: 0000000000000000 R09: 0000000000000000 [ 399.540851][ T7819] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 399.548663][ T7819] R13: 0000000000000000 R14: 00007f6792136130 R15: 00007fff2fb0f168 [ 399.556478][ T7819] [ 399.733991][ T2663] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 399.756194][ T294] usb 3-1: Using ep0 maxpacket: 32 [ 399.765774][ T7832] loop4: detected capacity change from 0 to 256 [ 400.535307][ T7842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2021'. [ 400.628389][ T294] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.799666][ T294] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.855848][ T7852] loop1: detected capacity change from 0 to 512 [ 401.010473][ T294] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 401.026166][ T294] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 401.045921][ T294] usb 3-1: Product: syz [ 401.054133][ T294] usb 3-1: Manufacturer: syz [ 401.104744][ T7852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 401.147848][ T7852] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 401.249271][ T294] hub 3-1:4.0: USB hub found [ 401.327793][ T7868] loop4: detected capacity change from 0 to 1024 [ 401.347506][ T7868] EXT4-fs error (device loop4): ext4_quota_enable:6955: inode #3: comm syz.4.2030: iget: bad extended attribute block 1 [ 401.360302][ T7868] EXT4-fs error (device loop4): ext4_quota_enable:6958: comm syz.4.2030: Bad quota inode: 3, type: 0 [ 401.371319][ T7868] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 401.386486][ T7868] EXT4-fs (loop4): mount failed [ 401.506297][ T294] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 402.153452][ T7868] tmpfs: Unknown parameter 'nolazytime$%' [ 402.230689][ T7296] EXT4-fs (loop1): unmounting filesystem. [ 402.240293][ T294] usb 3-1: USB disconnect, device number 33 [ 402.317514][ T7884] loop1: detected capacity change from 0 to 256 [ 402.324003][ T7884] exfat: Deprecated parameter 'utf8' [ 402.341535][ T7884] exfat: Deprecated parameter 'utf8' [ 402.346841][ T7884] exfat: Deprecated parameter 'utf8' [ 402.355822][ T7884] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 402.455289][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2035'. [ 403.427115][ T7905] loop2: detected capacity change from 0 to 256 [ 403.586223][ T956] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 403.622605][ T7907] loop3: detected capacity change from 0 to 40427 [ 403.635945][ T7913] loop1: detected capacity change from 0 to 1024 [ 403.672031][ T7916] loop4: detected capacity change from 0 to 512 [ 403.678817][ T316] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 403.712607][ T7913] EXT4-fs error (device loop1): ext4_quota_enable:6955: inode #3: comm syz.1.2043: iget: bad extended attribute block 1 [ 403.725607][ T7913] EXT4-fs error (device loop1): ext4_quota_enable:6958: comm syz.1.2043: Bad quota inode: 3, type: 0 [ 403.737363][ T7913] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 403.752781][ T7913] EXT4-fs (loop1): mount failed [ 403.759162][ T7916] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 403.768259][ T7916] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038 (0x7fffffff) [ 403.916191][ T7923] loop3: detected capacity change from 0 to 256 [ 403.927178][ T7923] FAT-fs (loop3): Unrecognized mount option "umask=0000000Q000000000004263" or missing value [ 404.199839][ T956] usb 1-1: device descriptor read/64, error -71 [ 404.411537][ T7927] loop3: detected capacity change from 0 to 1024 [ 404.431148][ T7927] EXT4-fs error (device loop3): ext4_quota_enable:6955: inode #3: comm syz.3.2045: iget: bad extended attribute block 1 [ 404.450691][ T7927] EXT4-fs error (device loop3): ext4_quota_enable:6958: comm syz.3.2045: Bad quota inode: 3, type: 0 [ 404.462204][ T7927] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 404.477895][ T7927] EXT4-fs (loop3): mount failed [ 404.514467][ T5196] EXT4-fs (loop4): unmounting filesystem. [ 404.534651][ T7932] loop4: detected capacity change from 0 to 512 [ 404.541261][ T7932] EXT4-fs: Ignoring removed bh option [ 404.554425][ T7927] tmpfs: Unknown parameter 'nolazytime$%' [ 404.562738][ T7932] EXT4-fs error (device loop4): __ext4_iget:5046: inode #15: block 1803188595: comm syz.4.2047: invalid block [ 404.575875][ T7932] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2047: couldn't read orphan inode 15 (err -117) [ 404.587854][ T7932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 404.599645][ T7935] loop3: detected capacity change from 0 to 256 [ 404.606385][ T7935] exfat: Deprecated parameter 'utf8' [ 404.618411][ T7935] exfat: Deprecated parameter 'utf8' [ 404.623556][ T7935] exfat: Deprecated parameter 'utf8' [ 404.631132][ T7935] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 404.646406][ T7932] loop4: detected capacity change from 512 to 11 [ 404.653288][ T28] audit: type=1400 audit(1726610147.077:451): avc: denied { rename } for pid=7931 comm="syz.4.2047" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 404.730683][ T313] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 404.786187][ T956] usb 1-1: device descriptor read/64, error -71 [ 404.796100][ T7946] loop3: detected capacity change from 0 to 256 [ 404.817857][ T7946] exfat: Deprecated parameter 'utf8' [ 404.836231][ T7946] exfat: Deprecated parameter 'utf8' [ 404.844798][ T7946] exfat: Deprecated parameter 'utf8' [ 404.861858][ T7946] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 405.006149][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 405.066220][ T956] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 405.126231][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.137215][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.149938][ T313] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 405.158916][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.168726][ T313] usb 2-1: config 0 descriptor?? [ 405.346224][ T956] usb 1-1: device descriptor read/64, error -71 [ 406.019557][ T7959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2054'. [ 406.063406][ T313] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 406.108505][ T313] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 406.120424][ T313] microsoft 0003:045E:07DA.0016: no inputs found [ 406.128466][ T313] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 406.143983][ T956] usb 1-1: device descriptor read/64, error -71 [ 406.276221][ T956] usb usb1-port1: attempt power cycle [ 406.343829][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.352641][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.609258][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.632255][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.709282][ T7967] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 406.776187][ T956] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 406.946235][ T956] usb 1-1: device descriptor read/8, error -71 [ 407.219616][ T956] usb 1-1: device descriptor read/8, error -71 [ 407.238400][ T7973] loop2: detected capacity change from 0 to 512 [ 407.248208][ T7973] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 407.257247][ T7973] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038 (0x7fffffff) [ 407.596173][ T956] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 407.706720][ T7512] usb 2-1: USB disconnect, device number 35 [ 407.731396][ T7980] loop1: detected capacity change from 0 to 256 [ 407.766241][ T956] usb 1-1: device descriptor read/8, error -71 [ 407.856259][ T7918] ext4lazyinit: attempt to access beyond end of device [ 407.856259][ T7918] loop4: rw=2057, sector=10, nr_sectors = 16 limit=11 [ 407.869773][ T7918] ext4lazyinit: attempt to access beyond end of device [ 407.869773][ T7918] loop4: rw=2049, sector=10, nr_sectors = 16 limit=11 [ 408.036221][ T956] usb 1-1: device descriptor read/8, error -71 [ 408.085435][ T7090] EXT4-fs (loop2): unmounting filesystem. [ 408.101724][ T7984] loop2: detected capacity change from 0 to 1024 [ 408.110770][ T7984] EXT4-fs error (device loop2): ext4_quota_enable:6955: inode #3: comm syz.2.2059: iget: bad extended attribute block 1 [ 408.123503][ T7984] EXT4-fs error (device loop2): ext4_quota_enable:6958: comm syz.2.2059: Bad quota inode: 3, type: 0 [ 408.134463][ T7984] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 408.149450][ T7984] EXT4-fs (loop2): mount failed [ 408.156685][ T956] usb usb1-port1: unable to enumerate USB device [ 408.210869][ T7988] loop2: detected capacity change from 0 to 1024 [ 408.222207][ T7988] EXT4-fs error (device loop2): ext4_quota_enable:6955: inode #3: comm syz.2.2060: iget: bad extended attribute block 1 [ 408.234908][ T7988] EXT4-fs error (device loop2): ext4_quota_enable:6958: comm syz.2.2060: Bad quota inode: 3, type: 0 [ 408.246478][ T7988] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 408.261579][ T7988] EXT4-fs (loop2): mount failed [ 408.309907][ T7988] tmpfs: Unknown parameter 'nolazytime$%' [ 408.325241][ T7991] loop2: detected capacity change from 0 to 256 [ 408.331594][ T7991] exfat: Deprecated parameter 'namecase' [ 408.338156][ T7991] exfat: Bad value for 'fmask' [ 408.555758][ T28] audit: type=1400 audit(1726610150.977:452): avc: denied { setopt } for pid=7990 comm="syz.2.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 408.626041][ T8001] serio: Serial port pts3 [ 408.736168][ T401] Bluetooth: hci0: command 0x1003 tx timeout [ 408.736168][ T2144] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 409.506891][ T8014] loop1: detected capacity change from 0 to 512 [ 409.528196][ T8014] EXT4-fs error (device loop1): __ext4_iget:5046: inode #15: block 1803188595: comm syz.1.2066: invalid block [ 409.540146][ T8014] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.2066: couldn't read orphan inode 15 (err -117) [ 409.552484][ T8014] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 409.582185][ T8014] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 13: comm syz.1.2066: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 409.600800][ T28] audit: type=1400 audit(1726610152.007:453): avc: denied { getopt } for pid=8011 comm="syz.2.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 409.660239][ T8019] FAULT_INJECTION: forcing a failure. [ 409.660239][ T8019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.661700][ T8014] input: syz0 as /devices/virtual/input/input19 [ 409.676075][ T8019] CPU: 0 PID: 8019 Comm: syz.3.2068 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 409.688709][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 409.698602][ T8019] Call Trace: [ 409.701727][ T8019] [ 409.704501][ T8019] dump_stack_lvl+0x151/0x1b7 [ 409.709016][ T8019] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 409.714311][ T8019] dump_stack+0x15/0x1c [ 409.718303][ T8019] should_fail_ex+0x3d0/0x520 [ 409.722816][ T8019] should_fail+0xb/0x10 [ 409.726811][ T8019] should_fail_usercopy+0x1a/0x20 [ 409.731666][ T8019] strncpy_from_user+0x24/0x2b0 [ 409.736359][ T8019] ? getname_flags+0xba/0x520 [ 409.740869][ T8019] getname_flags+0xf2/0x520 [ 409.745207][ T8019] user_path_at_empty+0x2d/0x1a0 [ 409.749986][ T8019] __se_sys_mount+0x285/0x3b0 [ 409.754492][ T8019] ? __x64_sys_mount+0xd0/0xd0 [ 409.759093][ T8019] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 409.765003][ T8019] __x64_sys_mount+0xbf/0xd0 [ 409.769424][ T8019] x64_sys_call+0x49d/0x9a0 [ 409.773761][ T8019] do_syscall_64+0x3b/0xb0 [ 409.778017][ T8019] ? clear_bhb_loop+0x55/0xb0 [ 409.782527][ T8019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.788258][ T8019] RIP: 0033:0x7f6791f7f69a [ 409.792513][ T8019] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.811953][ T8019] RSP: 002b:00007f6792d83e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 409.820196][ T8019] RAX: ffffffffffffffda RBX: 00007f6792d83ef0 RCX: 00007f6791f7f69a [ 409.828093][ T8019] RDX: 0000000020000140 RSI: 00000000200001c0 RDI: 0000000000000000 [ 409.835903][ T8019] RBP: 0000000020000140 R08: 00007f6792d83ef0 R09: 0000000000040000 [ 409.843714][ T8019] R10: 0000000000040000 R11: 0000000000000246 R12: 00000000200001c0 [ 409.851524][ T8019] R13: 00007f6792d83eb0 R14: 0000000000000000 R15: 0000000020000380 [ 409.859345][ T8019] [ 410.085267][ T8023] loop3: detected capacity change from 0 to 40427 [ 410.091998][ T8023] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 410.099814][ T8023] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 410.113763][ T8023] F2FS-fs (loop3): Found nat_bits in checkpoint [ 410.152307][ T8023] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 410.159189][ T8023] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 410.210200][ T7296] EXT4-fs (loop1): unmounting filesystem. [ 410.226157][ T320] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 410.236020][ T8032] loop1: detected capacity change from 0 to 1024 [ 410.244439][ T8032] EXT4-fs error (device loop1): ext4_quota_enable:6955: inode #3: comm syz.1.2071: iget: bad extended attribute block 1 [ 410.257044][ T8032] EXT4-fs error (device loop1): ext4_quota_enable:6958: comm syz.1.2071: Bad quota inode: 3, type: 0 [ 410.268043][ T8032] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 410.282877][ T8032] EXT4-fs (loop1): mount failed [ 410.288215][ T8034] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 410.297309][ T8034] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 410.322794][ T8034] incfs: ino conflict with backing FS 4 [ 410.330802][ T8034] device veth0_macvtap entered promiscuous mode [ 410.341875][ T8034] device macsec1 entered promiscuous mode [ 410.354487][ T8036] loop1: detected capacity change from 0 to 256 [ 410.476161][ T320] usb 3-1: Using ep0 maxpacket: 16 [ 410.596224][ T320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.607204][ T320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.736274][ T320] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 410.745216][ T320] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 410.753341][ T320] usb 3-1: Product: syz [ 410.757640][ T320] usb 3-1: Manufacturer: syz [ 410.762778][ T7068] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 410.762796][ T7068] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 410.770420][ T7068] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 410.771436][ T320] usb 3-1: config 0 descriptor?? [ 410.786698][ T7068] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 410.789993][ T7068] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 410.797371][ T7068] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 410.804688][ T7068] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 411.276990][ T320] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 411.291353][ T320] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 411.298289][ T320] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 411.305199][ T320] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 411.312173][ T320] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 411.319179][ T320] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 411.326021][ T320] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 411.333615][ T320] kovaplus 0003:1E7D:2D50.0017: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 411.476203][ T313] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 411.706212][ T320] kovaplus 0003:1E7D:2D50.0017: couldn't init struct kovaplus_device [ 411.714127][ T320] kovaplus 0003:1E7D:2D50.0017: couldn't install mouse [ 411.725564][ T313] usb 2-1: Using ep0 maxpacket: 32 [ 411.732848][ T320] kovaplus: probe of 0003:1E7D:2D50.0017 failed with error -71 [ 411.772355][ T320] usb 3-1: USB disconnect, device number 34 [ 411.876206][ T313] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.887097][ T313] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.026221][ T313] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 412.035099][ T313] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 412.043363][ T313] usb 2-1: Product: syz [ 412.047335][ T313] usb 2-1: Manufacturer: syz [ 412.086752][ T313] hub 2-1:4.0: USB hub found [ 412.322758][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.329648][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.337155][ T8056] device bridge_slave_0 entered promiscuous mode [ 412.347425][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.354402][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.361692][ T313] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 412.373123][ T8056] device bridge_slave_1 entered promiscuous mode [ 412.456806][ T313] usb 2-1: USB disconnect, device number 36 [ 412.595866][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.602735][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.609819][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.616607][ T8056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.634823][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 412.643935][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.651082][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.662575][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.671047][ T956] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.677919][ T956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.693628][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 412.702050][ T956] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.708931][ T956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.716548][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 412.733936][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 412.750161][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 412.758752][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 412.766916][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 412.774161][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.781472][ T8056] device veth0_vlan entered promiscuous mode [ 412.793889][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 412.802655][ T8056] device veth1_macvtap entered promiscuous mode [ 412.812191][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 412.829661][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 413.252813][ T8074] FAULT_INJECTION: forcing a failure. [ 413.252813][ T8074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.265885][ T8074] CPU: 1 PID: 8074 Comm: syz.1.2079 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 413.273122][ T8076] loop2: detected capacity change from 0 to 2048 [ 413.275412][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 413.291473][ T8074] Call Trace: [ 413.294594][ T8074] [ 413.297372][ T8074] dump_stack_lvl+0x151/0x1b7 [ 413.301886][ T8074] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 413.307176][ T8074] ? _kstrtol+0x150/0x150 [ 413.311345][ T8074] ? avc_has_perm_noaudit+0x348/0x430 [ 413.316554][ T8074] dump_stack+0x15/0x1c [ 413.320544][ T8074] should_fail_ex+0x3d0/0x520 [ 413.325059][ T8074] should_fail+0xb/0x10 [ 413.329051][ T8074] should_fail_usercopy+0x1a/0x20 [ 413.333909][ T8074] strncpy_from_user+0x24/0x2b0 [ 413.338599][ T8074] bpf_prog_load+0x1fb/0x1bf0 [ 413.343112][ T8074] ? map_freeze+0x3a0/0x3a0 [ 413.347454][ T8074] ? selinux_bpf+0xcb/0x100 [ 413.351788][ T8074] ? security_bpf+0x82/0xb0 [ 413.356131][ T8074] __sys_bpf+0x52c/0x7f0 [ 413.360214][ T8074] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 413.365418][ T8074] ? __ia32_sys_read+0x90/0x90 [ 413.370021][ T8074] ? debug_smp_processor_id+0x17/0x20 [ 413.375223][ T8074] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 413.381127][ T8074] __x64_sys_bpf+0x7c/0x90 [ 413.385378][ T8074] x64_sys_call+0x87f/0x9a0 [ 413.389719][ T8074] do_syscall_64+0x3b/0xb0 [ 413.393970][ T8074] ? clear_bhb_loop+0x55/0xb0 [ 413.398489][ T8074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.404214][ T8074] RIP: 0033:0x7f932537def9 [ 413.408466][ T8074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.427998][ T8074] RSP: 002b:00007f93251bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.436239][ T8074] RAX: ffffffffffffffda RBX: 00007f9325536130 RCX: 00007f932537def9 [ 413.444050][ T8074] RDX: 0000000000000090 RSI: 0000000020000140 RDI: 0000000000000005 [ 413.451863][ T8074] RBP: 00007f93251bd090 R08: 0000000000000000 R09: 0000000000000000 [ 413.459682][ T8074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.467485][ T8074] R13: 0000000000000000 R14: 00007f9325536130 R15: 00007ffe659cf9f8 [ 413.475301][ T8074] [ 413.507893][ T8076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 413.586844][ T10] device bridge_slave_1 left promiscuous mode [ 413.592969][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.600579][ T10] device bridge_slave_0 left promiscuous mode [ 413.606750][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.614695][ T10] device veth1_macvtap left promiscuous mode [ 413.620863][ T10] device veth0_vlan left promiscuous mode [ 413.887794][ T294] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 413.939994][ T8092] FAULT_INJECTION: forcing a failure. [ 413.939994][ T8092] name failslab, interval 1, probability 0, space 0, times 0 [ 413.952513][ T8092] CPU: 1 PID: 8092 Comm: syz.1.2083 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 413.962046][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 413.971940][ T8092] Call Trace: [ 413.975064][ T8092] [ 413.977839][ T8092] dump_stack_lvl+0x151/0x1b7 [ 413.982356][ T8092] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 413.987649][ T8092] dump_stack+0x15/0x1c [ 413.991647][ T8092] should_fail_ex+0x3d0/0x520 [ 413.996154][ T8092] ? hci_alloc_dev_priv+0x27/0x1c00 [ 414.001198][ T8092] __should_failslab+0xaf/0xf0 [ 414.005800][ T8092] should_failslab+0x9/0x20 [ 414.010124][ T8092] __kmem_cache_alloc_node+0x3d/0x250 [ 414.015347][ T8092] ? hci_alloc_dev_priv+0x27/0x1c00 [ 414.020366][ T8092] __kmalloc+0xa3/0x1e0 [ 414.024362][ T8092] ? alarm_timer_nsleep_restart+0x2a0/0x2a0 [ 414.030089][ T8092] hci_alloc_dev_priv+0x27/0x1c00 [ 414.034948][ T8092] hci_uart_tty_ioctl+0x3bd/0xa30 [ 414.039808][ T8092] ? hci_uart_tty_write+0x10/0x10 [ 414.044668][ T8092] tty_ioctl+0x903/0xc50 [ 414.048752][ T8092] ? tty_get_icount+0xa0/0xa0 [ 414.053260][ T8092] __se_sys_ioctl+0x114/0x190 [ 414.057776][ T8092] __x64_sys_ioctl+0x7b/0x90 [ 414.062200][ T8092] x64_sys_call+0x98/0x9a0 [ 414.066541][ T8092] do_syscall_64+0x3b/0xb0 [ 414.070792][ T8092] ? clear_bhb_loop+0x55/0xb0 [ 414.075308][ T8092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.081035][ T8092] RIP: 0033:0x7f932537def9 [ 414.085286][ T8092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.104737][ T8092] RSP: 002b:00007f93251de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.112974][ T8092] RAX: ffffffffffffffda RBX: 00007f9325536058 RCX: 00007f932537def9 [ 414.120871][ T8092] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 000000000000000d [ 414.128713][ T8092] RBP: 00007f93251de090 R08: 0000000000000000 R09: 0000000000000000 [ 414.136493][ T8092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.144304][ T8092] R13: 0000000000000000 R14: 00007f9325536058 R15: 00007ffe659cf9f8 [ 414.152123][ T8092] [ 414.155110][ T8092] Bluetooth: Can't allocate HCI device [ 414.188410][ T7090] EXT4-fs (loop2): unmounting filesystem. [ 414.316179][ T294] usb 4-1: Using ep0 maxpacket: 16 [ 414.506201][ T294] usb 4-1: unable to get BOS descriptor or descriptor too short [ 414.606269][ T294] usb 4-1: config 4 has an invalid interface number: 38 but max is 0 [ 414.614229][ T294] usb 4-1: config 4 has no interface number 0 [ 414.620131][ T294] usb 4-1: config 4 interface 38 has no altsetting 0 [ 414.692515][ T5196] EXT4-fs (loop4): unmounting filesystem. [ 414.812309][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.824114][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.638266][ T8114] 9pnet_fd: Insufficient options for proto=fd [ 415.649690][ T8106] device bridge_slave_0 entered promiscuous mode [ 415.666746][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.682198][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.701652][ T8106] device bridge_slave_1 entered promiscuous mode [ 415.736840][ T294] usb 4-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.18 [ 415.766165][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.773984][ T294] usb 4-1: Product: syz [ 415.786229][ T294] usb 4-1: Manufacturer: syz [ 415.790645][ T294] usb 4-1: SerialNumber: syz [ 415.835739][ T8126] serio: Serial port pts0 [ 415.855047][ T8127] loop1: detected capacity change from 0 to 16 [ 415.862984][ T8127] erofs: (device loop1): mounted with root inode @ nid 36. [ 415.871992][ T8127] syz.1.2090: attempt to access beyond end of device [ 415.871992][ T8127] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 415.885399][ T8127] syz.1.2090: attempt to access beyond end of device [ 415.885399][ T8127] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 415.892445][ T8130] loop2: detected capacity change from 0 to 256 [ 415.898306][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 415.912295][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 415.924481][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 415.932986][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 415.941014][ T2058] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.947879][ T2058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.987301][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 415.995732][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 416.003781][ T2058] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.010629][ T2058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.017970][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 416.030488][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.047217][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 416.063419][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.090027][ T8106] device veth0_vlan entered promiscuous mode [ 416.150995][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 416.170866][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 416.194888][ T956] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 416.197533][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 416.273772][ T8106] device veth1_macvtap entered promiscuous mode [ 416.294431][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 416.303406][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 416.312097][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 416.320650][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 416.329187][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 416.342767][ T8140] loop4: detected capacity change from 0 to 512 [ 416.351252][ T8140] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.2087: casefold flag without casefold feature [ 416.364033][ T8140] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.2087: missing EA_INODE flag [ 416.375552][ T294] usb 4-1: Found UVC 0.00 device syz (19ab:1000) [ 416.375679][ T8140] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2087: error while reading EA inode 2 err=-117 [ 416.382369][ T294] usb 4-1: No valid video chain found. [ 416.394436][ T8140] EXT4-fs (loop4): 1 orphan inode deleted [ 416.400466][ T294] usb 4-1: USB disconnect, device number 30 [ 416.412062][ T8140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 416.476217][ T956] usb 1-1: Using ep0 maxpacket: 32 [ 416.566657][ T10] device bridge_slave_1 left promiscuous mode [ 416.572724][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.580277][ T10] device bridge_slave_0 left promiscuous mode [ 416.586382][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.593955][ T10] device veth1_macvtap left promiscuous mode [ 416.599907][ T956] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.600085][ T10] device veth0_vlan left promiscuous mode [ 416.610780][ T956] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.745726][ T8148] loop3: detected capacity change from 0 to 256 [ 416.752057][ T956] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 416.754046][ T8148] exfat: Deprecated parameter 'utf8' [ 416.766978][ T8148] exfat: Deprecated parameter 'utf8' [ 416.772327][ T8148] exfat: Deprecated parameter 'utf8' [ 416.778738][ T956] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 416.780945][ T8148] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 416.792779][ T956] usb 1-1: Product: syz [ 416.818572][ T956] usb 1-1: Manufacturer: syz [ 416.824689][ T8151] loop2: detected capacity change from 0 to 256 [ 416.866689][ T956] hub 1-1:4.0: USB hub found [ 417.113236][ T8162] loop1: detected capacity change from 0 to 512 [ 417.160531][ T8162] EXT4-fs (loop1): Test dummy encryption mode enabled [ 417.217567][ T8162] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.2099: invalid block [ 417.229102][ T8162] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.2099: couldn't read orphan inode 11 (err -117) [ 417.240914][ T8162] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 417.257370][ T8161] 9pnet_fd: Insufficient options for proto=fd [ 417.266187][ T956] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 417.289074][ T8106] EXT4-fs (loop4): unmounting filesystem. [ 417.307060][ T956] usb 1-1: USB disconnect, device number 37 [ 417.325839][ T28] audit: type=1400 audit(1726610159.747:454): avc: denied { watch_reads } for pid=8164 comm="syz.4.2100" path="/1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 417.759790][ T8179] loop3: detected capacity change from 0 to 256 [ 417.766562][ T8179] exfat: Deprecated parameter 'utf8' [ 417.771740][ T8179] exfat: Deprecated parameter 'utf8' [ 417.778844][ T8179] exfat: Deprecated parameter 'utf8' [ 417.782994][ T8181] serio: Serial port pts0 [ 417.787047][ T8179] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 417.849472][ T7296] EXT4-fs (loop1): unmounting filesystem. [ 417.869390][ T8185] FAULT_INJECTION: forcing a failure. [ 417.869390][ T8185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.889276][ T8187] loop1: detected capacity change from 0 to 512 [ 417.908278][ T8187] EXT4-fs: Invalid gid value -1 [ 417.914668][ T8185] CPU: 1 PID: 8185 Comm: syz.0.2101 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 417.924206][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 417.934097][ T8185] Call Trace: [ 417.937220][ T8185] [ 417.940002][ T8185] dump_stack_lvl+0x151/0x1b7 [ 417.944873][ T8185] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 417.950168][ T8185] dump_stack+0x15/0x1c [ 417.954146][ T8185] should_fail_ex+0x3d0/0x520 [ 417.958667][ T8185] should_fail+0xb/0x10 [ 417.962652][ T8185] should_fail_usercopy+0x1a/0x20 [ 417.967514][ T8185] _copy_to_user+0x1e/0x90 [ 417.971784][ T8185] simple_read_from_buffer+0xc7/0x150 [ 417.976998][ T8185] proc_fail_nth_read+0x1a3/0x210 [ 417.981834][ T8185] ? proc_fault_inject_write+0x390/0x390 [ 417.987300][ T8185] ? fsnotify_perm+0x470/0x5d0 [ 417.991905][ T8185] ? security_file_permission+0x86/0xb0 [ 417.998003][ T8185] ? proc_fault_inject_write+0x390/0x390 [ 418.003508][ T8185] vfs_read+0x26c/0xad0 [ 418.007466][ T8185] ? kernel_read+0x1f0/0x1f0 [ 418.011888][ T8185] ? mutex_lock+0xb1/0x1e0 [ 418.016141][ T8185] ? bit_wait_io_timeout+0x120/0x120 [ 418.021264][ T8185] ? __fdget_pos+0x2e2/0x390 [ 418.025693][ T8185] ? ksys_read+0x77/0x2c0 [ 418.029854][ T8185] ksys_read+0x199/0x2c0 [ 418.033935][ T8185] ? vfs_write+0xeb0/0xeb0 [ 418.038187][ T8185] ? debug_smp_processor_id+0x17/0x20 [ 418.043395][ T8185] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 418.049301][ T8185] __x64_sys_read+0x7b/0x90 [ 418.053647][ T8185] x64_sys_call+0x28/0x9a0 [ 418.057976][ T8185] do_syscall_64+0x3b/0xb0 [ 418.062238][ T8185] ? clear_bhb_loop+0x55/0xb0 [ 418.066741][ T8185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.072467][ T8185] RIP: 0033:0x7f69ce37c93c [ 418.076723][ T8185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 418.096172][ T8185] RSP: 002b:00007f69ce1bd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.104416][ T8185] RAX: ffffffffffffffda RBX: 00007f69ce536130 RCX: 00007f69ce37c93c [ 418.112406][ T8185] RDX: 000000000000000f RSI: 00007f69ce1bd0a0 RDI: 0000000000000008 [ 418.120294][ T8185] RBP: 00007f69ce1bd090 R08: 0000000000000000 R09: 0000000000000000 [ 418.128226][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.136034][ T8185] R13: 0000000000000000 R14: 00007f69ce536130 R15: 00007ffd906dac38 [ 418.143846][ T8185] [ 418.306199][ T28] audit: type=1400 audit(1726610160.707:455): avc: denied { write } for pid=8194 comm="syz.1.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 418.334253][ T8197] loop3: detected capacity change from 0 to 256 [ 418.353695][ T28] audit: type=1400 audit(1726610160.707:456): avc: denied { nlmsg_read } for pid=8194 comm="syz.1.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 418.385658][ T8197] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 418.416406][ T2058] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 418.435873][ T8201] loop4: detected capacity change from 0 to 256 [ 418.587898][ T8197] exFAT-fs (loop3): hint_cluster is invalid (17) [ 418.726231][ T956] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 418.816270][ T2058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.827120][ T2058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.836718][ T2058] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 418.845552][ T2058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.853864][ T2058] usb 3-1: config 0 descriptor?? [ 418.966164][ T956] usb 1-1: Using ep0 maxpacket: 32 [ 419.086204][ T956] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.096974][ T956] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.231379][ T956] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 419.240402][ T956] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 419.248624][ T956] usb 1-1: Product: syz [ 419.252562][ T956] usb 1-1: Manufacturer: syz [ 419.501010][ T2058] isku 0003:1E7D:319C.0018: item fetching failed at offset 5/7 [ 419.509919][ T2058] isku 0003:1E7D:319C.0018: parse failed [ 419.525077][ T2058] isku: probe of 0003:1E7D:319C.0018 failed with error -22 [ 419.625657][ T956] hub 1-1:4.0: USB hub found [ 419.699508][ T8184] netlink: 'syz.2.2106': attribute type 4 has an invalid length. [ 419.712010][ T294] usb 3-1: USB disconnect, device number 35 [ 419.726246][ T956] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 419.817125][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2116'. [ 419.888365][ T956] usb 1-1: USB disconnect, device number 38 [ 420.053200][ T8226] serio: Serial port pts1 [ 420.181927][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 420.191854][ T8230] loop4: detected capacity change from 0 to 256 [ 420.426462][ T8236] loop2: detected capacity change from 0 to 256 [ 420.433038][ T8236] exfat: Deprecated parameter 'utf8' [ 420.438413][ T8236] exfat: Deprecated parameter 'utf8' [ 420.443717][ T8236] exfat: Deprecated parameter 'utf8' [ 420.451778][ T8236] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 420.524588][ T8241] loop1: detected capacity change from 0 to 16 [ 420.552404][ T8241] erofs: (device loop1): mounted with root inode @ nid 36. [ 420.851521][ T8246] input: syz0 as /devices/virtual/input/input20 [ 421.043299][ T8254] loop3: detected capacity change from 0 to 256 [ 421.429803][ T8263] loop1: detected capacity change from 0 to 512 [ 421.436830][ T8263] EXT4-fs (loop1): Test dummy encryption mode enabled [ 421.444930][ T8263] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.2128: invalid block [ 421.654084][ T8263] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.2128: couldn't read orphan inode 11 (err -117) [ 421.667883][ T8263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 421.681834][ T8263] 9pnet_fd: Insufficient options for proto=fd [ 421.761692][ T7296] EXT4-fs (loop1): unmounting filesystem. [ 421.809584][ T8270] serio: Serial port pts0 [ 422.846348][ T8289] loop1: detected capacity change from 0 to 256 [ 422.863768][ T8289] exfat: Deprecated parameter 'utf8' [ 422.872418][ T8289] exfat: Deprecated parameter 'utf8' [ 422.878680][ T8289] exfat: Deprecated parameter 'utf8' [ 422.886493][ T8289] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 423.426800][ T7512] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 423.435170][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2133'. [ 423.856735][ T8301] loop4: detected capacity change from 0 to 1024 [ 423.886185][ T7512] usb 4-1: Using ep0 maxpacket: 32 [ 423.902913][ T8301] EXT4-fs error (device loop4): ext4_quota_enable:6955: inode #3: comm syz.4.2137: iget: bad extended attribute block 1 [ 423.917870][ T8301] EXT4-fs error (device loop4): ext4_quota_enable:6958: comm syz.4.2137: Bad quota inode: 3, type: 0 [ 423.929030][ T8301] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 423.944475][ T8301] EXT4-fs (loop4): mount failed [ 424.006250][ T7512] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.288714][ T7512] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.299870][ T8320] serio: Serial port pts0 [ 424.301735][ T8321] loop4: detected capacity change from 0 to 256 [ 424.416229][ T7512] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 424.425151][ T7512] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 424.433590][ T7512] usb 4-1: Product: syz [ 424.437737][ T7512] usb 4-1: Manufacturer: syz [ 424.476727][ T7512] hub 4-1:4.0: USB hub found [ 424.636179][ T338] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 424.736199][ T7512] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 424.967954][ T7512] usb 4-1: USB disconnect, device number 31 [ 425.016228][ T338] usb 2-1: Using ep0 maxpacket: 16 [ 425.200331][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.248098][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.258755][ T338] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 425.260447][ T8340] loop3: detected capacity change from 0 to 1024 [ 425.278862][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.311026][ T338] usb 2-1: config 0 descriptor?? [ 425.320691][ T8340] EXT4-fs error (device loop3): ext4_quota_enable:6955: inode #3: comm syz.3.2148: iget: bad extended attribute block 1 [ 425.333285][ T8340] EXT4-fs error (device loop3): ext4_quota_enable:6958: comm syz.3.2148: Bad quota inode: 3, type: 0 [ 425.344419][ T8340] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 425.359901][ T8340] EXT4-fs (loop3): mount failed [ 425.489724][ T8347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2149'. [ 425.675101][ T8351] loop2: detected capacity change from 0 to 256 [ 425.681654][ T8351] exfat: Deprecated parameter 'utf8' [ 425.687111][ T8351] exfat: Deprecated parameter 'utf8' [ 425.692436][ T8351] exfat: Deprecated parameter 'utf8' [ 425.700571][ T8351] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 425.816195][ T7512] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 425.877293][ T338] hid-steam 0003:28DE:1142.0019: item fetching failed at offset 2/5 [ 425.888385][ T338] hid-steam 0003:28DE:1142.0019: steam_probe:parse of hid interface failed [ 425.898978][ T338] hid-steam: probe of 0003:28DE:1142.0019 failed with error -22 [ 426.251011][ T8361] serio: Serial port pts0 [ 426.356157][ T7512] usb 4-1: device descriptor read/64, error -71 [ 426.380307][ T8363] loop4: detected capacity change from 0 to 40427 [ 426.387094][ T8363] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 426.394700][ T8363] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 426.404691][ T8363] F2FS-fs (loop4): Found nat_bits in checkpoint [ 426.427415][ T8363] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 426.434260][ T8363] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 426.840543][ T24] usb 2-1: USB disconnect, device number 37 [ 426.941464][ T8371] syz.4.2154: attempt to access beyond end of device [ 426.941464][ T8371] loop4: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 426.965252][ T8371] syz.4.2154: attempt to access beyond end of device [ 426.965252][ T8371] loop4: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 426.987959][ T8371] syz.4.2154: attempt to access beyond end of device [ 426.987959][ T8371] loop4: rw=2049, sector=57344, nr_sectors = 3544 limit=40427 [ 427.005525][ T8371] syz.4.2154: attempt to access beyond end of device [ 427.005525][ T8371] loop4: rw=2049, sector=60888, nr_sectors = 1112 limit=40427 [ 427.019493][ T7512] usb 4-1: device descriptor read/64, error -71 [ 427.657506][ T8387] loop2: detected capacity change from 0 to 256 [ 427.696210][ T7512] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 427.984570][ T7512] usb 4-1: device descriptor read/64, error -71 [ 428.433607][ T338] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 428.660330][ T8411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'. [ 428.738623][ T7512] usb 4-1: device descriptor read/64, error -71 [ 428.769649][ T8414] serio: Serial port pts1 [ 428.868052][ T338] usb 5-1: Using ep0 maxpacket: 32 [ 428.986300][ T7512] usb usb4-port1: attempt power cycle [ 429.201779][ T338] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.212663][ T338] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.336190][ T338] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 429.345105][ T338] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 429.355740][ T338] usb 5-1: Product: syz [ 429.375583][ T338] usb 5-1: Manufacturer: syz [ 429.416679][ T338] hub 5-1:4.0: USB hub found [ 429.596182][ T7512] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 429.666199][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 429.676193][ T338] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 429.726833][ T338] usb 5-1: USB disconnect, device number 26 [ 429.766186][ T7512] usb 4-1: device descriptor read/8, error -71 [ 430.036227][ T7512] usb 4-1: device descriptor read/8, error -71 [ 430.086210][ T24] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 430.095085][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.106812][ T24] usb 3-1: config 0 descriptor?? [ 430.576175][ T7512] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 430.619979][ T8446] loop1: detected capacity change from 0 to 256 [ 430.746178][ T7512] usb 4-1: device descriptor read/8, error -71 [ 431.003796][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2175'. [ 431.206232][ T7512] usb 4-1: device descriptor read/8, error -71 [ 431.339517][ T7512] usb usb4-port1: unable to enumerate USB device [ 431.746179][ T24] usb 3-1: Cannot set autoneg [ 431.750761][ T24] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 431.764918][ T24] usb 3-1: USB disconnect, device number 36 [ 432.151174][ T8475] loop4: detected capacity change from 0 to 40427 [ 432.160258][ T8475] F2FS-fs (loop4): Found nat_bits in checkpoint [ 432.184522][ T8475] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 433.488598][ T8106] syz-executor: attempt to access beyond end of device [ 433.488598][ T8106] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 433.719367][ T297] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 433.786171][ T505] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 434.066162][ T297] usb 3-1: Using ep0 maxpacket: 32 [ 434.146192][ T505] usb 1-1: Using ep0 maxpacket: 16 [ 434.186213][ T297] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.196995][ T297] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.276170][ T505] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.287230][ T505] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 434.300912][ T505] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 434.310053][ T505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.318683][ T505] usb 1-1: config 0 descriptor?? [ 434.326316][ T297] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 434.335272][ T297] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 434.343785][ T297] usb 3-1: Product: syz [ 434.347923][ T297] usb 3-1: Manufacturer: syz [ 434.368083][ T8504] loop1: detected capacity change from 0 to 40427 [ 434.374757][ T8504] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 434.382408][ T8504] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 434.390811][ T297] hub 3-1:4.0: USB hub found [ 434.394358][ T8504] F2FS-fs (loop1): Found nat_bits in checkpoint [ 434.418301][ T8504] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 434.425226][ T8504] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 434.646184][ T297] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 434.671206][ T8511] syz.1.2186: attempt to access beyond end of device [ 434.671206][ T8511] loop1: rw=2049, sector=77824, nr_sectors = 2216 limit=40427 [ 434.686599][ T297] usb 3-1: USB disconnect, device number 37 [ 434.690074][ T8511] syz.1.2186: attempt to access beyond end of device [ 434.690074][ T8511] loop1: rw=2049, sector=80040, nr_sectors = 1880 limit=40427 [ 434.713860][ T8513] syz.1.2186: attempt to access beyond end of device [ 434.713860][ T8513] loop1: rw=2049, sector=49152, nr_sectors = 360 limit=40427 [ 434.728381][ T8513] syz.1.2186: attempt to access beyond end of device [ 434.728381][ T8513] loop1: rw=2049, sector=49512, nr_sectors = 120 limit=40427 [ 434.742924][ T8513] syz.1.2186: attempt to access beyond end of device [ 434.742924][ T8513] loop1: rw=2049, sector=49632, nr_sectors = 192 limit=40427 [ 434.761499][ T8510] syz.1.2186: attempt to access beyond end of device [ 434.761499][ T8510] loop1: rw=2049, sector=49824, nr_sectors = 1344 limit=40427 [ 434.778510][ T8513] syz.1.2186: attempt to access beyond end of device [ 434.778510][ T8513] loop1: rw=2049, sector=51168, nr_sectors = 8 limit=40427 [ 434.797853][ T8511] syz.1.2186: attempt to access beyond end of device [ 434.797853][ T8511] loop1: rw=2049, sector=51176, nr_sectors = 2072 limit=40427 [ 434.801902][ T505] microsoft 0003:045E:07DA.001A: No inputs registered, leaving [ 434.815080][ T8513] syz.1.2186: attempt to access beyond end of device [ 434.815080][ T8513] loop1: rw=2049, sector=57344, nr_sectors = 8 limit=40427 [ 434.820129][ T505] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 434.844627][ T505] microsoft 0003:045E:07DA.001A: no inputs found [ 434.851183][ T505] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 435.068753][ T8515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.077148][ T8515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.452183][ T8522] loop1: detected capacity change from 0 to 256 [ 435.458817][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.467190][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.050220][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.057213][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.064288][ T8529] device bridge_slave_0 entered promiscuous mode [ 436.071073][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.077919][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.085084][ T8529] device bridge_slave_1 entered promiscuous mode [ 436.128923][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.135763][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.142958][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.149743][ T8529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.170045][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.177723][ T505] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.184800][ T505] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.195435][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.203455][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.210299][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.227461][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 436.235348][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.242138][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.249319][ T2058] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 436.256766][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.264472][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.275501][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.287479][ T8529] device veth0_vlan entered promiscuous mode [ 436.293766][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.301966][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.309697][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.325229][ T8529] device veth1_macvtap entered promiscuous mode [ 436.332523][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.338108][ T8534] loop1: detected capacity change from 0 to 1024 [ 436.346956][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.355447][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.362886][ T8534] EXT4-fs error (device loop1): ext4_quota_enable:6955: inode #3: comm syz.1.2191: iget: bad extended attribute block 1 [ 436.376429][ T8534] EXT4-fs error (device loop1): ext4_quota_enable:6958: comm syz.1.2191: Bad quota inode: 3, type: 0 [ 436.388944][ T8534] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 436.404067][ T8534] EXT4-fs (loop1): mount failed [ 436.507284][ T320] usb 1-1: USB disconnect, device number 39 [ 436.526164][ T2058] usb 3-1: Using ep0 maxpacket: 32 [ 436.646465][ T2058] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.702648][ T2058] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.777329][ T8] device bridge_slave_1 left promiscuous mode [ 436.789294][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.790085][ T8547] loop4: detected capacity change from 0 to 128 [ 436.803642][ T8] device bridge_slave_0 left promiscuous mode [ 436.819888][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.839581][ T8] device veth0_macvtap left promiscuous mode [ 436.852584][ T8] device veth1_macvtap left promiscuous mode [ 436.863656][ T8] device veth0_vlan left promiscuous mode [ 437.017992][ T2058] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 437.031847][ T2058] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 437.055972][ T2058] usb 3-1: Product: syz [ 437.060088][ T2058] usb 3-1: Manufacturer: syz [ 437.146681][ T2058] hub 3-1:4.0: USB hub found [ 437.462439][ T8558] serio: Serial port pts0 [ 437.601984][ T8562] loop2: detected capacity change from 0 to 128 [ 437.610843][ T8562] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 437.620677][ T8562] FAT-fs (loop2): Filesystem has been set read-only [ 437.915423][ T358] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 438.057697][ T297] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 438.943589][ T8576] loop1: detected capacity change from 0 to 256 [ 438.991895][ T8566] loop4: detected capacity change from 0 to 40427 [ 439.002021][ T8566] F2FS-fs (loop4): Ignore s_resuid=5, s_resgid=0 w/o reserve_root [ 439.021173][ T8566] F2FS-fs (loop4): Found nat_bits in checkpoint [ 439.064566][ T8566] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 439.166162][ T2058] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 439.266326][ T8586] bio_check_eod: 5 callbacks suppressed [ 439.266356][ T8586] syz.4.2197: attempt to access beyond end of device [ 439.266356][ T8586] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 439.403084][ T8587] FAULT_INJECTION: forcing a failure. [ 439.403084][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 439.420629][ T8587] CPU: 0 PID: 8587 Comm: syz.2.2201 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 439.430167][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 439.440072][ T8587] Call Trace: [ 439.443185][ T8587] [ 439.445965][ T8587] dump_stack_lvl+0x151/0x1b7 [ 439.450478][ T8587] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 439.455860][ T8587] ? selinux_capable+0x2f1/0x430 [ 439.460720][ T8587] dump_stack+0x15/0x1c [ 439.464713][ T8587] should_fail_ex+0x3d0/0x520 [ 439.469235][ T8587] ? prepare_creds+0x2f/0x6a0 [ 439.473738][ T8587] __should_failslab+0xaf/0xf0 [ 439.478340][ T8587] should_failslab+0x9/0x20 [ 439.482777][ T8587] kmem_cache_alloc+0x3b/0x2c0 [ 439.487379][ T8587] prepare_creds+0x2f/0x6a0 [ 439.491716][ T8587] ? ns_capable_setid+0x8c/0xf0 [ 439.496407][ T8587] __sys_setresuid+0x5bc/0xba0 [ 439.501009][ T8587] __x64_sys_setresuid+0x7a/0x90 [ 439.505862][ T8587] x64_sys_call+0x35b/0x9a0 [ 439.510207][ T8587] do_syscall_64+0x3b/0xb0 [ 439.514457][ T8587] ? clear_bhb_loop+0x55/0xb0 [ 439.518992][ T8587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.524700][ T8587] RIP: 0033:0x7f23b677def9 [ 439.528952][ T8587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.548394][ T8587] RSP: 002b:00007f23b7629038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 439.556636][ T8587] RAX: ffffffffffffffda RBX: 00007f23b6936130 RCX: 00007f23b677def9 [ 439.564461][ T8587] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 000000000000ee01 [ 439.572262][ T8587] RBP: 00007f23b7629090 R08: 0000000000000000 R09: 0000000000000000 [ 439.580072][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.587889][ T8587] R13: 0000000000000000 R14: 00007f23b6936130 R15: 00007ffd1d77ac38 [ 439.595704][ T8587] [ 439.599108][ T320] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 439.615971][ T2058] usb 3-1: USB disconnect, device number 38 [ 439.826235][ T297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.842231][ T297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.862203][ T297] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 439.875493][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.287007][ T297] usb 4-1: config 0 descriptor?? [ 440.306354][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 440.317925][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 440.329933][ T320] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.343812][ T320] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.353210][ T320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.372422][ T320] usb 1-1: config 0 descriptor?? [ 440.396187][ T8571] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 440.516149][ T338] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 440.614244][ T297] usbhid 4-1:0.0: can't add hid device: -71 [ 440.717195][ T297] usbhid: probe of 4-1:0.0 failed with error -71 [ 440.849656][ T297] usb 4-1: USB disconnect, device number 36 [ 440.863525][ T320] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 440.871364][ T8606] serio: Serial port pts0 [ 440.872030][ T320] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 440.884708][ T320] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 440.896237][ T338] usb 3-1: Using ep0 maxpacket: 8 [ 441.016377][ T338] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 441.025319][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.033966][ T338] usb 3-1: config 0 descriptor?? [ 441.166152][ T7512] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 441.528950][ T7512] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 441.545231][ T7512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.613769][ T7512] usb 5-1: config 0 descriptor?? [ 441.736247][ T338] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 441.746061][ T338] asix: probe of 3-1:0.0 failed with error -61 [ 442.065104][ T320] usb 1-1: USB disconnect, device number 40 [ 442.686163][ T313] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 442.848805][ T8624] loop1: detected capacity change from 0 to 256 [ 442.869320][ T8626] loop1: detected capacity change from 0 to 256 [ 442.951777][ T338] usb 3-1: USB disconnect, device number 39 [ 442.972682][ T8633] loop2: detected capacity change from 0 to 256 [ 442.992717][ T8633] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 442.993956][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 443.036183][ T7512] usb 5-1: Cannot set autoneg [ 443.040762][ T7512] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 443.060946][ T7512] usb 5-1: USB disconnect, device number 27 [ 443.136189][ T313] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.148653][ T8637] exFAT-fs (loop2): hint_cluster is invalid (17) [ 443.153346][ T313] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.346179][ T313] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 443.355102][ T313] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 443.383636][ T313] usb 4-1: Product: syz [ 443.387644][ T313] usb 4-1: Manufacturer: syz [ 443.466917][ T313] hub 4-1:4.0: USB hub found [ 443.718234][ T8640] loop4: detected capacity change from 0 to 40427 [ 443.726169][ T313] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 443.735286][ T8640] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 443.743059][ T8640] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 443.760427][ T8640] F2FS-fs (loop4): Found nat_bits in checkpoint [ 443.761274][ T8645] loop1: detected capacity change from 0 to 128 [ 443.767556][ T313] usb 4-1: USB disconnect, device number 37 [ 443.815026][ T8640] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 443.822264][ T8640] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 443.931811][ T8651] serio: Serial port pts0 [ 443.941940][ T8654] FAULT_INJECTION: forcing a failure. [ 443.941940][ T8654] name failslab, interval 1, probability 0, space 0, times 0 [ 443.954538][ T8654] CPU: 0 PID: 8654 Comm: syz.1.2218 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 443.964075][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 443.973971][ T8654] Call Trace: [ 443.977093][ T8654] [ 443.979870][ T8654] dump_stack_lvl+0x151/0x1b7 [ 443.984384][ T8654] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 443.989685][ T8654] ? selinux_capable+0x2f1/0x430 [ 443.994459][ T8654] dump_stack+0x15/0x1c [ 443.998453][ T8654] should_fail_ex+0x3d0/0x520 [ 444.002961][ T8654] ? prepare_creds+0x2f/0x6a0 [ 444.007478][ T8654] __should_failslab+0xaf/0xf0 [ 444.012076][ T8654] should_failslab+0x9/0x20 [ 444.016413][ T8654] kmem_cache_alloc+0x3b/0x2c0 [ 444.021014][ T8654] prepare_creds+0x2f/0x6a0 [ 444.025353][ T8654] ? ns_capable_setid+0x8c/0xf0 [ 444.030038][ T8654] __sys_setresuid+0x5bc/0xba0 [ 444.034640][ T8654] __x64_sys_setresuid+0x7a/0x90 [ 444.039415][ T8654] x64_sys_call+0x35b/0x9a0 [ 444.043753][ T8654] do_syscall_64+0x3b/0xb0 [ 444.048016][ T8654] ? clear_bhb_loop+0x55/0xb0 [ 444.052519][ T8654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.058247][ T8654] RIP: 0033:0x7f932537def9 [ 444.062499][ T8654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.081946][ T8654] RSP: 002b:00007f93251bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 444.090189][ T8654] RAX: ffffffffffffffda RBX: 00007f9325536130 RCX: 00007f932537def9 [ 444.097998][ T8654] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 000000000000ee01 [ 444.105809][ T8654] RBP: 00007f93251bd090 R08: 0000000000000000 R09: 0000000000000000 [ 444.113622][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.121521][ T8654] R13: 0000000000000000 R14: 00007f9325536130 R15: 00007ffe659cf9f8 [ 444.129336][ T8654] [ 444.905466][ T8640] syz.4.2217: attempt to access beyond end of device [ 444.905466][ T8640] loop4: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 444.970421][ T8640] syz.4.2217: attempt to access beyond end of device [ 444.970421][ T8640] loop4: rw=2049, sector=79872, nr_sectors = 2048 limit=40427 [ 445.003926][ T8640] syz.4.2217: attempt to access beyond end of device [ 445.003926][ T8640] loop4: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 445.024174][ T8640] syz.4.2217: attempt to access beyond end of device [ 445.024174][ T8640] loop4: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 445.261122][ T320] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 445.421951][ T8640] syz.4.2217: attempt to access beyond end of device [ 445.421951][ T8640] loop4: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 445.490594][ T8640] syz.4.2217: attempt to access beyond end of device [ 445.490594][ T8640] loop4: rw=2049, sector=59392, nr_sectors = 2752 limit=40427 [ 445.511536][ T8640] syz.4.2217: attempt to access beyond end of device [ 445.511536][ T8640] loop4: rw=2049, sector=62144, nr_sectors = 2088 limit=40427 [ 445.696456][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.707982][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.854205][ T8675] loop4: detected capacity change from 0 to 512 [ 445.863121][ T8675] EXT4-fs (loop4): Test dummy encryption mode enabled [ 445.873855][ T8675] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.2225: invalid block [ 445.885053][ T8675] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2225: couldn't read orphan inode 11 (err -117) [ 445.897070][ T8675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 445.921757][ T320] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 445.930719][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.940099][ T320] usb 4-1: config 0 descriptor?? [ 446.193955][ T8686] syz.4.2225[8686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.194035][ T8686] syz.4.2225[8686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.485318][ T8690] loop1: detected capacity change from 0 to 40427 [ 446.523386][ T8106] EXT4-fs (loop4): unmounting filesystem. [ 446.528458][ T8690] F2FS-fs (loop1): Ignore s_resuid=5, s_resgid=0 w/o reserve_root [ 446.538209][ T8690] F2FS-fs (loop1): Found nat_bits in checkpoint [ 446.549643][ T8694] loop4: detected capacity change from 0 to 256 [ 446.577097][ T8690] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 446.646202][ T320] hid-led: probe of 0003:27B8:01ED.001C failed with error -71 [ 446.654769][ T320] usb 4-1: USB disconnect, device number 38 [ 446.732045][ T8698] FAULT_INJECTION: forcing a failure. [ 446.732045][ T8698] name failslab, interval 1, probability 0, space 0, times 0 [ 446.744741][ T8698] CPU: 1 PID: 8698 Comm: syz.1.2228 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 446.754373][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 446.764260][ T8698] Call Trace: [ 446.767381][ T8698] [ 446.770160][ T8698] dump_stack_lvl+0x151/0x1b7 [ 446.774670][ T8698] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 446.779970][ T8698] ? __kasan_check_read+0x11/0x20 [ 446.784825][ T8698] ? preempt_schedule_irq+0xe7/0x140 [ 446.789945][ T8698] dump_stack+0x15/0x1c [ 446.793936][ T8698] should_fail_ex+0x3d0/0x520 [ 446.798456][ T8698] ? alloc_pipe_info+0xe7/0x4b0 [ 446.803141][ T8698] __should_failslab+0xaf/0xf0 [ 446.807744][ T8698] should_failslab+0x9/0x20 [ 446.812077][ T8698] __kmem_cache_alloc_node+0x3d/0x250 [ 446.817289][ T8698] ? alloc_pipe_info+0xe7/0x4b0 [ 446.821974][ T8698] kmalloc_trace+0x2a/0xa0 [ 446.826224][ T8698] alloc_pipe_info+0xe7/0x4b0 [ 446.830828][ T8698] splice_direct_to_actor+0x9d3/0xbb0 [ 446.836031][ T8698] ? release_firmware_map_entry+0x191/0x191 [ 446.841760][ T8698] ? avc_policy_seqno+0x1b/0x70 [ 446.846450][ T8698] ? selinux_file_permission+0x2bb/0x560 [ 446.851929][ T8698] ? fsnotify_perm+0x6a/0x5d0 [ 446.856431][ T8698] ? do_splice_direct+0x3c0/0x3c0 [ 446.861298][ T8698] ? pipe_to_sendpage+0x340/0x340 [ 446.866157][ T8698] ? security_file_permission+0x86/0xb0 [ 446.871532][ T8698] ? rw_verify_area+0xa7/0x1c0 [ 446.876132][ T8698] do_splice_direct+0x27f/0x3c0 [ 446.880816][ T8698] ? splice_direct_to_actor+0xbb0/0xbb0 [ 446.886193][ T8698] ? fsnotify_perm+0x6a/0x5d0 [ 446.890710][ T8698] ? security_file_permission+0x86/0xb0 [ 446.896115][ T8698] do_sendfile+0x616/0xfe0 [ 446.900431][ T8698] ? requeue_task_rt+0x410/0x410 [ 446.905205][ T8698] ? __schedule+0xcbd/0x1560 [ 446.909634][ T8698] ? do_preadv+0x350/0x350 [ 446.913884][ T8698] ? release_firmware_map_entry+0x191/0x191 [ 446.919702][ T8698] __x64_sys_sendfile64+0x1ce/0x230 [ 446.924735][ T8698] ? __ia32_sys_sendfile+0x240/0x240 [ 446.929853][ T8698] ? switch_fpu_return+0xe/0x10 [ 446.934541][ T8698] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 446.940014][ T8698] x64_sys_call+0x140/0x9a0 [ 446.944356][ T8698] do_syscall_64+0x3b/0xb0 [ 446.948605][ T8698] ? clear_bhb_loop+0x55/0xb0 [ 446.953112][ T8698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.958843][ T8698] RIP: 0033:0x7f932537def9 [ 446.963095][ T8698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.982538][ T8698] RSP: 002b:00007f93251bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 446.990784][ T8698] RAX: ffffffffffffffda RBX: 00007f9325536130 RCX: 00007f932537def9 [ 446.998596][ T8698] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000d [ 447.006500][ T8698] RBP: 00007f93251bd090 R08: 0000000000000000 R09: 0000000000000000 [ 447.014302][ T8698] R10: 0000000100800001 R11: 0000000000000246 R12: 0000000000000001 [ 447.022120][ T8698] R13: 0000000000000000 R14: 00007f9325536130 R15: 00007ffe659cf9f8 [ 447.029945][ T8698] [ 447.069558][ T8703] loop2: detected capacity change from 0 to 256 [ 447.082497][ T8703] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 447.186980][ T8704] exFAT-fs (loop2): hint_cluster is invalid (17) [ 447.239845][ T7296] syz-executor: attempt to access beyond end of device [ 447.239845][ T7296] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 447.413045][ T8710] serio: Serial port pts1 [ 447.430336][ T8711] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 447.439776][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 448.021097][ T8718] loop2: detected capacity change from 0 to 1024 [ 448.027623][ T8718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 448.034457][ T8718] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 448.046982][ T8718] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 448.054925][ T8718] System zones: 0-1, 3-36 [ 448.059812][ T8718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 448.166147][ T338] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 448.218409][ T8724] loop3: detected capacity change from 0 to 512 [ 448.225055][ T8724] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 448.237440][ T8724] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.2237: casefold flag without casefold feature [ 448.250903][ T8724] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.2237: missing EA_INODE flag [ 448.262854][ T8724] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2237: error while reading EA inode 12 err=-117 [ 448.275373][ T8724] EXT4-fs (loop3): 1 orphan inode deleted [ 448.281063][ T8724] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 448.320272][ T8529] EXT4-fs (loop3): unmounting filesystem. [ 448.344701][ T8729] FAULT_INJECTION: forcing a failure. [ 448.344701][ T8729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.357619][ T8729] CPU: 0 PID: 8729 Comm: syz.3.2239 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 448.367093][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 448.376984][ T8729] Call Trace: [ 448.380113][ T8729] [ 448.382889][ T8729] dump_stack_lvl+0x151/0x1b7 [ 448.387403][ T8729] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 448.392694][ T8729] ? kstrtouint+0xf6/0x180 [ 448.396948][ T8729] ? _kstrtol+0x150/0x150 [ 448.401114][ T8729] dump_stack+0x15/0x1c [ 448.405106][ T8729] should_fail_ex+0x3d0/0x520 [ 448.409620][ T8729] should_fail+0xb/0x10 [ 448.413614][ T8729] should_fail_usercopy+0x1a/0x20 [ 448.418483][ T8729] _copy_from_user+0x1e/0xc0 [ 448.422898][ T8729] copy_msghdr_from_user+0xaa/0x670 [ 448.427935][ T8729] ? sendmsg_copy_msghdr+0x70/0x70 [ 448.432879][ T8729] __sys_sendmsg+0x236/0x390 [ 448.437307][ T8729] ? ____sys_sendmsg+0x9a0/0x9a0 [ 448.442082][ T8729] ? __kasan_check_write+0x14/0x20 [ 448.447025][ T8729] ? mutex_unlock+0xb2/0x260 [ 448.451452][ T8729] ? __kasan_check_write+0x14/0x20 [ 448.456407][ T8729] ? __ia32_sys_read+0x90/0x90 [ 448.461011][ T8729] ? debug_smp_processor_id+0x17/0x20 [ 448.466216][ T8729] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 448.472111][ T8729] __x64_sys_sendmsg+0x7f/0x90 [ 448.476711][ T8729] x64_sys_call+0x16a/0x9a0 [ 448.481054][ T8729] do_syscall_64+0x3b/0xb0 [ 448.485302][ T8729] ? clear_bhb_loop+0x55/0xb0 [ 448.489817][ T8729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.495553][ T8729] RIP: 0033:0x7f5bf837def9 [ 448.499890][ T8729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.519335][ T8729] RSP: 002b:00007f5bf9132038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.527662][ T8729] RAX: ffffffffffffffda RBX: 00007f5bf8535f80 RCX: 00007f5bf837def9 [ 448.535472][ T8729] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000004 [ 448.543296][ T8729] RBP: 00007f5bf9132090 R08: 0000000000000000 R09: 0000000000000000 [ 448.551092][ T8729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.558904][ T8729] R13: 0000000000000000 R14: 00007f5bf8535f80 R15: 00007ffd603280c8 [ 448.566720][ T8729] [ 448.860547][ T7090] EXT4-fs (loop2): unmounting filesystem. [ 448.986283][ T338] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.996333][ T338] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.005104][ T338] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 449.014052][ T338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.022433][ T338] usb 1-1: config 0 descriptor?? [ 449.456141][ T2144] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 449.456177][ T401] Bluetooth: hci0: command 0x1003 tx timeout [ 449.490808][ T8749] loop1: detected capacity change from 0 to 256 [ 449.499191][ T8749] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 449.601737][ T8750] exFAT-fs (loop1): hint_cluster is invalid (17) [ 449.704432][ T8752] loop3: detected capacity change from 0 to 512 [ 449.711974][ T8752] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.2246: casefold flag without casefold feature [ 449.724943][ T8752] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 449.735080][ T28] audit: type=1400 audit(1726610192.147:457): avc: denied { mount } for pid=8714 comm="syz.0.2234" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 449.765236][ T28] audit: type=1400 audit(1726610192.187:458): avc: denied { read } for pid=8714 comm="syz.0.2234" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 449.787044][ T28] audit: type=1400 audit(1726610192.187:459): avc: denied { open } for pid=8714 comm="syz.0.2234" path="/36/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 449.789125][ T8752] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 449.838901][ T28] audit: type=1400 audit(1726610192.187:460): avc: denied { remount } for pid=8714 comm="syz.0.2234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 449.853555][ T8762] loop2: detected capacity change from 0 to 256 [ 450.410873][ T338] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 450.629129][ T8776] FAULT_INJECTION: forcing a failure. [ 450.629129][ T8776] name failslab, interval 1, probability 0, space 0, times 0 [ 450.641666][ T8776] CPU: 1 PID: 8776 Comm: syz.1.2252 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 450.651100][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 450.661002][ T8776] Call Trace: [ 450.664119][ T8776] [ 450.666897][ T8776] dump_stack_lvl+0x151/0x1b7 [ 450.671410][ T8776] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 450.676706][ T8776] ? xas_find_marked+0x666/0xd80 [ 450.681480][ T8776] dump_stack+0x15/0x1c [ 450.685471][ T8776] should_fail_ex+0x3d0/0x520 [ 450.689991][ T8776] ? ext4_init_io_end+0x29/0x120 [ 450.694760][ T8776] __should_failslab+0xaf/0xf0 [ 450.699359][ T8776] should_failslab+0x9/0x20 [ 450.703695][ T8776] kmem_cache_alloc+0x3b/0x2c0 [ 450.708304][ T8776] ext4_init_io_end+0x29/0x120 [ 450.712895][ T8776] ext4_writepages+0xd2b/0x3fd0 [ 450.717587][ T8776] ? __kasan_check_write+0x14/0x20 [ 450.722533][ T8776] ? ext4_read_folio+0x240/0x240 [ 450.726132][ T338] usb 4-1: Using ep0 maxpacket: 16 [ 450.727307][ T8776] ? __kasan_check_read+0x11/0x20 [ 450.737113][ T8776] ? preempt_schedule_irq+0xe7/0x140 [ 450.742231][ T8776] ? preempt_schedule_notrace+0x140/0x140 [ 450.747788][ T8776] ? finish_task_switch+0x167/0x7b0 [ 450.752823][ T8776] ? sysvec_reschedule_ipi+0x80/0x160 [ 450.758040][ T8776] ? ext4_read_folio+0x240/0x240 [ 450.762804][ T8776] ? ext4_read_folio+0x240/0x240 [ 450.767574][ T8776] do_writepages+0x385/0x620 [ 450.772001][ T8776] ? __writepage+0x130/0x130 [ 450.776427][ T8776] ? finish_task_switch+0x167/0x7b0 [ 450.781459][ T8776] ? requeue_task_rt+0x410/0x410 [ 450.786236][ T8776] ? __kasan_check_write+0x14/0x20 [ 450.791184][ T8776] ? _raw_spin_lock+0xa4/0x1b0 [ 450.795782][ T8776] ? _raw_spin_unlock+0x4c/0x70 [ 450.800470][ T8776] filemap_fdatawrite_wbc+0x153/0x1b0 [ 450.805677][ T8776] file_write_and_wait_range+0x1ca/0x2b0 [ 450.811146][ T8776] ? __filemap_set_wb_err+0x130/0x130 [ 450.816352][ T8776] ? mt_find+0x38e/0x560 [ 450.820433][ T8776] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 450.826333][ T8776] ? irqentry_exit+0x30/0x40 [ 450.830760][ T8776] ? sysvec_reschedule_ipi+0x80/0x160 [ 450.835967][ T8776] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 450.841440][ T8776] ext4_sync_file+0x1a2/0xa50 [ 450.845952][ T8776] vfs_fsync_range+0x17b/0x190 [ 450.846185][ T338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.850553][ T8776] __se_sys_msync+0x396/0x520 [ 450.850580][ T8776] __x64_sys_msync+0x7b/0x90 [ 450.861393][ T338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.865741][ T8776] x64_sys_call+0xde/0x9a0 [ 450.871541][ T338] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 450.879716][ T8776] do_syscall_64+0x3b/0xb0 [ 450.879739][ T8776] ? clear_bhb_loop+0x55/0xb0 [ 450.879755][ T8776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.879772][ T8776] RIP: 0033:0x7f932537def9 [ 450.884403][ T338] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 450.896554][ T8776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.896572][ T8776] RSP: 002b:00007f93251bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 450.896589][ T8776] RAX: ffffffffffffffda RBX: 00007f9325536130 RCX: 00007f932537def9 [ 450.896600][ T8776] RDX: 0000000000000006 RSI: 087abbe8d1cc6ad9 RDI: 0000000020952000 [ 450.896611][ T8776] RBP: 00007f93251bd090 R08: 0000000000000000 R09: 0000000000000000 [ 450.896621][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.896630][ T8776] R13: 0000000000000000 R14: 00007f9325536130 R15: 00007ffe659cf9f8 [ 450.896644][ T8776] [ 450.993996][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.005594][ T338] usb 4-1: config 0 descriptor?? [ 451.639386][ T8752] incfs: Unexpected inode type [ 451.816174][ T338] usbhid 4-1:0.0: can't add hid device: -71 [ 451.821973][ T338] usbhid: probe of 4-1:0.0 failed with error -71 [ 451.830769][ T338] usb 4-1: USB disconnect, device number 39 [ 451.942488][ T8792] loop1: detected capacity change from 0 to 1024 [ 451.950858][ T8792] EXT4-fs error (device loop1): ext4_quota_enable:6955: inode #3: comm syz.1.2256: iget: bad extended attribute block 1 [ 451.963428][ T8792] EXT4-fs error (device loop1): ext4_quota_enable:6958: comm syz.1.2256: Bad quota inode: 3, type: 0 [ 451.974836][ T8792] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 451.990326][ T8792] EXT4-fs (loop1): mount failed [ 452.161338][ T8529] EXT4-fs error (device loop3): ext4_lookup:1855: inode #15: comm syz-executor: iget: bad extra_isize 65531 (inode size 512) [ 452.174586][ T8529] EXT4-fs error (device loop3): ext4_lookup:1855: inode #15: comm syz-executor: iget: bad extra_isize 65531 (inode size 512) [ 452.288885][ T8529] EXT4-fs (loop3): unmounting filesystem. [ 452.616064][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.623053][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.630309][ T8807] device bridge_slave_0 entered promiscuous mode [ 452.637048][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.643963][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.651596][ T8807] device bridge_slave_1 entered promiscuous mode [ 452.694904][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.701785][ T8807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.708904][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.715664][ T8807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.745309][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 452.750390][ T8812] loop2: detected capacity change from 0 to 256 [ 452.758627][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.765844][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.775257][ T8812] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 452.788466][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 452.801770][ T2058] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.808637][ T2058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.826209][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 452.846295][ T2058] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.853151][ T2058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.870259][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 452.881196][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 452.914739][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 452.924498][ T8813] exFAT-fs (loop2): hint_cluster is invalid (17) [ 452.927359][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 452.938470][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 452.945666][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 452.954334][ T8807] device veth0_vlan entered promiscuous mode [ 452.964141][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 452.974625][ T8807] device veth1_macvtap entered promiscuous mode [ 452.984853][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 452.994833][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 453.086807][ T10] device bridge_slave_1 left promiscuous mode [ 453.092843][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.100757][ T10] device bridge_slave_0 left promiscuous mode [ 453.106792][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.114708][ T10] device veth1_macvtap left promiscuous mode [ 453.121193][ T10] device veth0_vlan left promiscuous mode [ 453.174081][ T8822] FAULT_INJECTION: forcing a failure. [ 453.174081][ T8822] name failslab, interval 1, probability 0, space 0, times 0 [ 453.186699][ T505] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 453.208171][ T8822] CPU: 0 PID: 8822 Comm: syz.3.2261 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 453.217719][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 453.227614][ T8822] Call Trace: [ 453.230739][ T8822] [ 453.233517][ T8822] dump_stack_lvl+0x151/0x1b7 [ 453.238029][ T8822] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 453.243324][ T8822] ? mas_ascend+0x66b/0x790 [ 453.247674][ T8822] dump_stack+0x15/0x1c [ 453.251655][ T8822] should_fail_ex+0x3d0/0x520 [ 453.256168][ T8822] ? vm_area_alloc+0x24/0x1b0 [ 453.260682][ T8822] __should_failslab+0xaf/0xf0 [ 453.265280][ T8822] should_failslab+0x9/0x20 [ 453.269621][ T8822] kmem_cache_alloc+0x3b/0x2c0 [ 453.274219][ T8822] ? __kasan_check_read+0x11/0x20 [ 453.279096][ T8822] vm_area_alloc+0x24/0x1b0 [ 453.282250][ T8819] loop4: detected capacity change from 0 to 40427 [ 453.283416][ T8822] do_brk_flags+0x53f/0x1250 [ 453.290910][ T8819] F2FS-fs (loop4): Ignore s_resuid=5, s_resgid=0 w/o reserve_root [ 453.294099][ T8822] __se_sys_brk+0xbad/0xd60 [ 453.306074][ T8822] ? __mutex_lock_slowpath+0x10/0x10 [ 453.311200][ T8822] ? __x64_sys_brk+0x40/0x40 [ 453.315625][ T8822] ? debug_smp_processor_id+0x17/0x20 [ 453.320830][ T8822] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 453.326739][ T8822] __x64_sys_brk+0x38/0x40 [ 453.330982][ T8822] x64_sys_call+0x7c/0x9a0 [ 453.335237][ T8822] do_syscall_64+0x3b/0xb0 [ 453.339488][ T8822] ? clear_bhb_loop+0x55/0xb0 [ 453.344003][ T8822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.349730][ T8822] RIP: 0033:0x7fdc20b7def9 [ 453.353984][ T8822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.373426][ T8822] RSP: 002b:00007fdc218fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 453.381671][ T8822] RAX: ffffffffffffffda RBX: 00007fdc20d36130 RCX: 00007fdc20b7def9 [ 453.389569][ T8822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555ede6001 [ 453.397381][ T8822] RBP: 00007fdc218fb090 R08: 0000000000000000 R09: 0000000000000000 [ 453.405196][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.413004][ T8822] R13: 0000000000000000 R14: 00007fdc20d36130 R15: 00007ffd64bc62f8 [ 453.420819][ T8822] [ 453.430360][ T8819] F2FS-fs (loop4): Found nat_bits in checkpoint [ 453.470519][ T8819] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 453.661910][ T8827] syz.4.2264: attempt to access beyond end of device [ 453.661910][ T8827] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 453.846221][ T505] usb 2-1: Using ep0 maxpacket: 16 [ 453.858178][ T8831] serio: Serial port pts0 [ 453.996200][ T505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.254122][ T505] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 454.259075][ T8842] loop4: detected capacity change from 0 to 1024 [ 454.266924][ T505] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 454.281918][ T505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.290427][ T505] usb 2-1: config 0 descriptor?? [ 454.296242][ T338] usb 1-1: USB disconnect, device number 41 [ 454.311649][ T8842] EXT4-fs error (device loop4): ext4_quota_enable:6955: inode #3: comm syz.4.2270: iget: bad extended attribute block 1 [ 454.324232][ T8842] EXT4-fs error (device loop4): ext4_quota_enable:6958: comm syz.4.2270: Bad quota inode: 3, type: 0 [ 454.335252][ T8842] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 454.350307][ T8842] EXT4-fs (loop4): mount failed [ 454.409604][ T8842] tmpfs: Unknown parameter 'nolazytime$%' [ 454.686163][ T7512] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 454.770246][ T505] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001D/input/input23 [ 454.847049][ T505] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 454.936140][ T7512] usb 5-1: Using ep0 maxpacket: 8 [ 454.966162][ T297] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 455.056217][ T7512] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.066181][ T7512] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.074841][ T7512] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 455.246245][ T7512] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.255191][ T7512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.263114][ T7512] usb 5-1: Product: syz [ 455.267231][ T7512] usb 5-1: Manufacturer: syz [ 455.271685][ T7512] usb 5-1: SerialNumber: syz [ 455.306527][ T505] usb 2-1: USB disconnect, device number 38 [ 455.326196][ T297] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 455.335167][ T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.343732][ T297] usb 3-1: config 0 descriptor?? [ 455.516595][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.525198][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.536872][ T28] audit: type=1400 audit(1726610197.967:461): avc: denied { mount } for pid=8845 comm="syz.4.2271" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 455.538109][ T8846] FAULT_INJECTION: forcing a failure. [ 455.538109][ T8846] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.571871][ T8846] CPU: 0 PID: 8846 Comm: syz.4.2271 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 455.581378][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 455.591422][ T8846] Call Trace: [ 455.594545][ T8846] [ 455.597410][ T8846] dump_stack_lvl+0x151/0x1b7 [ 455.601923][ T8846] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 455.607215][ T8846] ? mas_store_prealloc+0x248/0x3c0 [ 455.612251][ T8846] dump_stack+0x15/0x1c [ 455.616243][ T8846] should_fail_ex+0x3d0/0x520 [ 455.620764][ T8846] should_fail_alloc_page+0x68/0x90 [ 455.625790][ T8846] __alloc_pages+0x1f4/0x780 [ 455.630220][ T8846] ? prep_new_page+0x110/0x110 [ 455.634818][ T8846] pte_alloc_one+0x73/0x1b0 [ 455.639160][ T8846] ? pfn_modify_allowed+0x2f0/0x2f0 [ 455.644191][ T8846] ? cap_mmap_addr+0x169/0x2e0 [ 455.648790][ T8846] __pte_alloc+0x86/0x350 [ 455.652960][ T8846] ? pmd_install+0x260/0x260 [ 455.657382][ T8846] ? __kasan_check_read+0x11/0x20 [ 455.662244][ T8846] ? hugepage_vma_check+0x182/0x4f0 [ 455.667277][ T8846] handle_mm_fault+0x2d90/0x30e0 [ 455.672053][ T8846] ? numa_migrate_prep+0xe0/0xe0 [ 455.676824][ T8846] ? down_read_trylock+0x319/0x7d0 [ 455.683424][ T8846] ? lock_mm_and_find_vma+0x9c/0x310 [ 455.688547][ T8846] exc_page_fault+0x24d/0x6d0 [ 455.693061][ T8846] asm_exc_page_fault+0x27/0x30 [ 455.697743][ T8846] RIP: 0033:0x7fee54a41cb6 [ 455.701998][ T8846] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 455.721553][ T8846] RSP: 002b:00007fee559394a0 EFLAGS: 00010246 [ 455.727427][ T8846] RAX: 0000000000000001 RBX: 00007fee55939540 RCX: 0000000000000101 [ 455.735411][ T8846] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fee559395e0 [ 455.743223][ T8846] RBP: 0000000000000102 R08: 00007fee4b1f8000 R09: 0000000000000000 [ 455.751149][ T8846] R10: 0000000000000000 R11: 00007fee55939550 R12: 0000000000000001 [ 455.758957][ T8846] R13: 00007fee54c04ec0 R14: 0000000000000000 R15: 00007fee559395e0 [ 455.766785][ T8846] [ 455.770829][ T8846] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 455.778478][ T8846] loop4: detected capacity change from 0 to 16 [ 455.784928][ T8846] erofs: (device loop4): mounted with root inode @ nid 36. [ 455.906214][ T7512] usb 5-1: 0:2 : does not exist [ 455.912252][ T7512] usb 5-1: USB disconnect, device number 28 [ 456.364593][ T8861] loop4: detected capacity change from 0 to 256 [ 456.370990][ T8861] exfat: Deprecated parameter 'utf8' [ 456.376603][ T8861] exfat: Deprecated parameter 'utf8' [ 456.381895][ T8861] exfat: Deprecated parameter 'utf8' [ 456.389927][ T8861] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 456.864775][ T8869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2278'. [ 456.886214][ T297] usb 3-1: Cannot set autoneg [ 456.890955][ T297] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 456.941204][ T297] usb 3-1: USB disconnect, device number 40 [ 456.979178][ T8876] loop3: detected capacity change from 0 to 256 [ 457.015527][ T8878] serio: Serial port pts0 [ 457.055226][ T8879] loop1: detected capacity change from 0 to 256 [ 457.061792][ T8879] FAT-fs (loop1): Unrecognized mount option "U " or missing value [ 457.331896][ T8882] loop4: detected capacity change from 0 to 256 [ 457.338516][ T8882] exfat: Deprecated parameter 'utf8' [ 457.343702][ T8882] exfat: Deprecated parameter 'utf8' [ 457.348813][ T8882] exfat: Deprecated parameter 'utf8' [ 457.356638][ T8882] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 457.412526][ T8886] loop2: detected capacity change from 0 to 512 [ 457.457534][ T8886] loop2: detected capacity change from 0 to 2048 [ 457.465997][ T8886] EXT4-fs: Ignoring removed nobh option [ 457.477491][ T8886] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 457.486402][ T8886] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038 (0x7fffffff) [ 457.766128][ T505] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 457.802178][ T8893] loop1: detected capacity change from 0 to 40427 [ 457.808910][ T8893] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 457.815680][ T8893] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 457.823837][ T8893] ================================================================================ [ 457.832948][ T8893] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:911:5 [ 457.839577][ T8893] shift exponent 142 is too large for 64-bit type 'unsigned long' [ 457.847218][ T8893] CPU: 1 PID: 8893 Comm: syz.1.2286 Not tainted 6.1.93-syzkaller-00008-gd1f3a046a65d #0 [ 457.856709][ T8893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 457.866604][ T8893] Call Trace: [ 457.869722][ T8893] [ 457.872501][ T8893] dump_stack_lvl+0x151/0x1b7 [ 457.877012][ T8893] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 457.882307][ T8893] dump_stack+0x15/0x1c [ 457.886306][ T8893] __ubsan_handle_shift_out_of_bounds+0x3e1/0x440 [ 457.892553][ T8893] parse_options+0x4b90/0x4ba0 [ 457.897174][ T8893] ? mount_bdev+0x282/0x3b0 [ 457.901488][ T8893] ? f2fs_mount+0x34/0x40 [ 457.905658][ T8893] ? default_options+0xc80/0xc80 [ 457.910431][ T8893] ? kstrdup+0x54/0x70 [ 457.914341][ T8893] ? memcpy+0x56/0x70 [ 457.918156][ T8893] f2fs_fill_super+0x23bc/0x6dc0 [ 457.922940][ T8893] ? kill_f2fs_super+0x3c0/0x3c0 [ 457.927704][ T8893] ? set_blocksize+0x1cb/0x360 [ 457.932304][ T8893] ? sb_set_blocksize+0xa8/0xf0 [ 457.936990][ T8893] mount_bdev+0x282/0x3b0 [ 457.941156][ T8893] ? kill_f2fs_super+0x3c0/0x3c0 [ 457.945933][ T8893] f2fs_mount+0x34/0x40 [ 457.949924][ T8893] legacy_get_tree+0xf1/0x190 [ 457.954439][ T8893] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 457.960427][ T8893] vfs_get_tree+0x88/0x290 [ 457.964678][ T8893] do_new_mount+0x2ba/0xb30 [ 457.969016][ T8893] ? do_move_mount_old+0x160/0x160 [ 457.974004][ T8893] ? security_capable+0x87/0xb0 [ 457.978649][ T8893] ? ns_capable+0x89/0xe0 [ 457.982812][ T8893] path_mount+0x671/0x1070 [ 457.987075][ T8893] ? user_path_at_empty+0x14e/0x1a0 [ 457.992651][ T8893] __se_sys_mount+0x2c4/0x3b0 [ 457.997247][ T8893] ? __x64_sys_mount+0xd0/0xd0 [ 458.001850][ T8893] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 458.007749][ T8893] __x64_sys_mount+0xbf/0xd0 [ 458.012187][ T8893] x64_sys_call+0x49d/0x9a0 [ 458.016522][ T8893] do_syscall_64+0x3b/0xb0 [ 458.020781][ T8893] ? clear_bhb_loop+0x55/0xb0 [ 458.025285][ T8893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.031011][ T8893] RIP: 0033:0x7f932537f69a [ 458.035698][ T8893] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.055140][ T8893] RSP: 002b:00007f93251fee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 458.063646][ T8893] RAX: ffffffffffffffda RBX: 00007f93251feef0 RCX: 00007f932537f69a [ 458.071458][ T8893] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 00007f93251feeb0 [ 458.079266][ T8893] RBP: 0000000020000040 R08: 00007f93251feef0 R09: 0000000000000000 [ 458.087080][ T8893] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 458.094897][ T8893] R13: 00007f93251feeb0 R14: 000000000000552d R15: 0000000020000d00 [ 458.102705][ T8893] [ 458.111125][ T8893] ================================================================================ [ 458.120401][ T8893] F2FS-fs (loop1): Not support 16384, larger than 256 [ 458.176273][ T505] usb 3-1: device descriptor read/64, error -71 [ 458.221352][ T8893] loop1: detected capacity change from 0 to 1024 [ 458.229275][ T8893] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f000c018, mo2=0002] [ 458.237249][ T8893] System zones: 0-1, 3-36 [ 458.241908][ T8893] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 458.307594][ T7296] EXT4-fs (loop1): unmounting filesystem. [ 458.616135][ T505] usb 3-1: device descriptor read/64, error -71 [ 458.886175][ T505] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 459.176138][ T505] usb 3-1: device descriptor read/64, error -71 [ 459.566156][ T505] usb 3-1: device descriptor read/64, error -71 [ 459.686324][ T505] usb usb3-port1: attempt power cycle [ 460.096165][ T505] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 460.286177][ T505] usb 3-1: device descriptor read/8, error -71 [ 460.556159][ T505] usb 3-1: device descriptor read/8, error -71 [ 460.826135][ T505] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 460.996166][ T505] usb 3-1: device descriptor read/8, error -71 [ 461.266166][ T505] usb 3-1: device descriptor read/8, error -71 [ 461.386198][ T505] usb usb3-port1: unable to enumerate USB device