last executing test programs:

30m20.537314957s ago: executing program 0 (id=216):
r0 = inotify_init()
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)

30m20.385973173s ago: executing program 0 (id=219):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0x713, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000011, 0x6, 0xa, 0x4, 0xd99d}}]}]}}}]}, 0x70}}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmmsg(r4, &(0x7f00000086c0), 0x1, 0x20, 0x0)
sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)

30m19.527270029s ago: executing program 0 (id=229):
ioctl$BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000010000000000000000000000000000000900000000000000003a00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000010000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
open(0x0, 0x121342, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x7ffffffe)

30m19.333238356s ago: executing program 0 (id=231):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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")
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
pipe2$9p(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="380100"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

30m19.213459989s ago: executing program 0 (id=233):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000180)="05ff2422f913391831a5c8d15cd692354349f2f713ea2b8f5ca31b61dece698e35e5d88978e31e95", 0x28, 0x8004, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14)

30m18.843224131s ago: executing program 0 (id=235):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x70}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

30m18.786038053s ago: executing program 32 (id=235):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x70}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

30m15.378015341s ago: executing program 4 (id=274):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x105006, &(0x7f00000002c0)={[{@quota}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x858c}}, {@acl}, {@debug}]}, 0x3, 0x43e, &(0x7f0000000d80)="$eJzs3MtvG0UYAPBv10lKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZvYjp3m4cQB/37SJjPesWc+z449u5NNAD1rOPuRROyLiN8jYrCWbSwwXPt1e/Hq1N+LV6eSqFTe+iuplru1eHWqKFo8b2+eGUkj0s+SONKi3rnLV85Plsszl/L82PyF98fmLl959tyFybMzZ2cuTpw6dfLE+AvPTzzXkTizNt06/NHs0UOvvXP9janT19/9+dukiL8pjg4ZXm3nE5VKh6vrrv116aSviw1hXUoRkXVXf3X8D0YpljtvMF79tKuNA7ZUpVKp7G2/e6EC/I8l0e0WAN1RfNFn57/Ftk1Tjx3h5ku1E6As7tv5VtvTF2lepr/p/Lb5EslmDEfE6YV/vsq22JrrEAAADb7P5j/PtJr/pXF/Xbm787WhoYi4JyIORMS9EXEwIu6LqJZ9ICIeXGf9zYskK+c/6Y0NBbZG2fzvxXxtq3H+V8z+YqiU5/ZX4+9PzpwrzxzP35OR6N+V5cdXqeOHV377ot2++vlftmX1F3PBvB03+nY1Pmd6cn5yMzHXu/lJxOG+VvEnSysB2WT3UEQc3mAd55765mi7fXeOfxUdWGeqfB3xZK3/F6Ip/kKy+vrk2F1Rnjk+VhwVK/3y67U329W/qfg7IOv/PS2P/6X4h5L69dq59ddx7Y/PW5zTDCylNnL8DyRvN7zKh5Pz85fGIwaS12uNrn98Yvm5Rb4on8U/cqz1+D8Qy+/EkYjIDuKHIuLhiHgk77tHI+KxiDi2Svw/vfz4e+327YT+n15X/y8nBqL5kdaJ0vkfv2uodGg98Wf9f7KaGskfWcvn31ratbGjGQAAAP570ojYF0k6upRO09HR2t/LH4w9aXl2bv7pM7MfXJyu3SMwFP1pcaVrsO566Hh+Wl/kJ5ryJ/Lrxl+Wdlfzo1Oz5eluBw89bm+b8Z/5s9Tt1gFbzv1a0LuMf+hdxj/0LuMfeleL8b+7G+0Atl+r7/+Pu9AOYPs1jX/LftBDnP9D7zL+oXcZ/9CT5nbHnW+Sl5BYkYh0RzRDopYo/l1Rx16wyx9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHfJvAAAA//9Fd+ND")
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r3, r1, 0x25, 0x0, @val=@perf_event={0x6}}, 0x18)
syz_emit_ethernet(0x32, &(0x7f0000005980)=ANY=[], 0x0)

30m15.353441841s ago: executing program 4 (id=275):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x1, 0x1, 0x9, 0x15})
close_range(r0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)

30m15.205980466s ago: executing program 4 (id=276):
listen(0xffffffffffffffff, 0x7f)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x6, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x4000000, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)

30m15.168208877s ago: executing program 4 (id=279):
r0 = open(0x0, 0x60840, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JrsQ2JQeSqGBQHtOYmTFpJatYMkhNoYklEIvPbT0UGguOTdtesuhl/64tpf+DT2UhLR1QlN6KC4jjRL5hxw7seQ0/nxgrPdmRnrvO2/mzfPMIAWwZw2nf3IRByN60uRgNj+JbEZ0R5yor/dgeamQTkmsrLz6Q1Jb5/7yUiGa3pPan2X+GhFfvBlxKLe+3MrC4vREqVScy/Kj1ZkLo5WFxcPnZyamilPF2aNj4+NHjv3n2NGdi/WnrxcP3HnnpX9+fOKXN/5y8+0vkzgRB7JlzXHslOEYzrZJT7oJV3lxpwvbZcluV4Ankh6aXfWjPA7GYHRt0pL/72jNAIB2uRwRKwDAHpM4/wPAHtO4DnB/eanQmKJ+P+fK464dHG/3xYkOuPtCRPTX42/c36wv6a7fs/umv3YfdOB+UrtH0pBExNAOlD8cEddunb6RTtGm+5AAG7lyNSLODg2v7f/THm7tMwvb9a8trDPcSHxaf9H/Qed8lo5//rt+/BeRy47//trfteOfvuZj9yms/Yz1x3/u9qpszw4U2iQd/x1verbtQVP8maGuLPeH2pivJzl3vlRM+7Y/RsRI9PSl+bFNyhi59+u9Vsuax38/vvv6h2n56eujNXK3u/tWv2dyojrxNDE3u3s14m/dG8WfPGz/pMX499QWy3j5f2990GpZGn8ab2NaH397rVyP+MeG7f/oOahk0+cTR2u7w2hjp9hg//zk2/cHWpXf3P7XbqUlLRUa/wt0Qtr+A5vHP5Q0P69Z2X4ZX10f/LzVstXxn76Rlr86/o33/97ktVq6N5t3aaJanRuL6E1eWT//yKP3NvKN9dP4R/6+Kv6sBXOb7v/pSmez9MpjHn7svvP9R08ef3ul8U+m7Z9kQTy2/befuPlguqtV+Vtr//FaaiSbs77/6173uVut4FNtPAAAAAAAAAAAAAAAAAAAAAAAAADYolxEHIgkl3+YzuXy+fpveP85BnKlcqV66Fx5fnYyar+VPRQ9ucZXXQ42fR/qWPZ9+I38kTX5f0fEnyLivb59tXy+UC5N7nbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDZ3+L3/1Pf9e127QCAtunf7QoAAB23rfO/wQIAPBdanNJ7N569r611AQA6o3b+T7p3uxoAQAe5pA8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG126uTJdFr5eXmpkOYnLy7MT5cvHp4sVqbzM/OFfKE8dyE/VS5PlYr5Qnmm5Qddqb+UyuUL4zE7f2m0WqxURysLi2dmyvOz1TPnZyamimeKPR2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2rrKwOD1RKhXnJDZPXH4mqnE1a7bd3hrPU+Jstk2flfpsI9EXEe0qormX2Nf5jgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgd+K3AAAA//+aBB1p")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
fcntl$setlease(r0, 0x400, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
syz_clone(0x81020000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00))
io_submit(0x0, 0x0, 0x0)

30m14.915552545s ago: executing program 4 (id=286):
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004040, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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")
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4)
mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

30m14.550608117s ago: executing program 4 (id=292):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20044000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0)
mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r1, 0x0)
ftruncate(r1, 0x84)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

30m14.512061778s ago: executing program 33 (id=292):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20044000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0)
mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r1, 0x0)
ftruncate(r1, 0x84)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

29m55.425027102s ago: executing program 6 (id=499):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r2)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x9004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c)
vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x10efe}, 0x14)
splice(r0, 0x0, r3, 0x0, 0xce2, 0x4)

29m55.303548335s ago: executing program 6 (id=502):
dup(0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040048}, 0x20000000)

29m52.139382526s ago: executing program 6 (id=530):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x60000090)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@rand_addr, @private, <r4=>0x0}, &(0x7f0000000040)=0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9035, '\x00', r4, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x821, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0xfe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048090}, 0x0)

29m51.957006152s ago: executing program 6 (id=531):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x2000006, 0x10003)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
munlockall()

29m51.902274313s ago: executing program 6 (id=532):
r0 = socket(0x10, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x60c42, 0x5)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000000)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x10})
readahead(r1, 0x6, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

29m51.747325768s ago: executing program 6 (id=533):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x4}}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x39, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a)
write(r1, &(0x7f0000000180)="b4", 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000033240)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0)

29m51.747235298s ago: executing program 34 (id=533):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x4}}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x39, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a)
write(r1, &(0x7f0000000180)="b4", 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000033240)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0)

29m51.68250573s ago: executing program 5 (id=536):
mkdir(0x0, 0x6526befdc9551232)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x3eb, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x3ec, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x20008054)

29m50.73250186s ago: executing program 5 (id=540):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_usb_connect$uac2(0x0, 0x8b, &(0x7f0000000140)=ANY=[@ANYBLOB="120110030000001082050c00400001020301090279"], 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
pipe(0x0)
setresgid(0xee00, 0xee01, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@quota}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x1, 0x570, &(0x7f00000003c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
mincore(&(0x7f0000714000/0x3000)=nil, 0x3000, &(0x7f0000000380)=""/37)

29m49.413735892s ago: executing program 5 (id=547):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000a40)=[@free_buffer], 0x0, 0x0, 0x0})

29m49.347145824s ago: executing program 5 (id=549):
syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x44c, &(0x7f0000000d80)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0)
mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x4000, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x14a0, &(0x7f0000000740)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68)
execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0)
getsockname(r1, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000005c0)=0x80)

29m49.14564261s ago: executing program 5 (id=555):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r2, 0x400, 0x1)
r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r3, &(0x7f0000000600)={'#! ', './file0'}, 0xb)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x342000, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',rodir,shortname=win95,shortname=lower,uni_xlate=1,shortname=win95,iocharset=cp864,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8=1,uni_xlate=1,nonumtail=0,rodir,sho\v\x00name=mixud,\x00'], 0x7f, 0x2b1, &(0x7f00000015c0)="$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")

29m48.887269789s ago: executing program 5 (id=559):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'gretap0\x00', {}, 0x9})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0xe, 0x5, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x4, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0xff000}]}, 0x10c}}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10)
r3 = epoll_create1(0x80000)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000100)={r3})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x7482ef14, 0x8, 0x8000, 0x6, 0x80, 0x2, 0x6, 0xffffffffffffff00, 0x6, 0x6, 0x10, 0x885b, 0x7, 0x7, 0x4], 0x1000, 0x80})

29m48.882163379s ago: executing program 35 (id=559):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'gretap0\x00', {}, 0x9})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0xe, 0x5, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x4, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0xff000}]}, 0x10c}}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10)
r3 = epoll_create1(0x80000)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000100)={r3})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x7482ef14, 0x8, 0x8000, 0x6, 0x80, 0x2, 0x6, 0xffffffffffffff00, 0x6, 0x6, 0x10, 0x885b, 0x7, 0x7, 0x4], 0x1000, 0x80})

29m32.135055849s ago: executing program 3 (id=723):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902"], 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)

29m30.340043996s ago: executing program 3 (id=742):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd5000fdcbdf251f000000080001003100000008000300", @ANYRES16=r2], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
syz_emit_ethernet(0x3f, &(0x7f0000000180)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x1, 0x7, 0x8, 0x64, 0x9, 0x5, 0xc, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "f1"}}}}}, 0x0)
syz_emit_ethernet(0xcb, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0xbd, 0x64, 0x0, 0xfc, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2071, 0x0, 0xe7}, {"c66be20999abf93f93d867a24022e690f875a772f64d37c0a495d3b5eeac10c8ff553a17bd87f77940e8bc3c13412b036d94ea193dcba40c0c273000ae1c0620bdc2eda359f5809347d1e569b1e189988a2b17e2a9ff5e70c84dd7db54ed835e945e6cc661f96acc2fb3edab82fe157b22a8de5210e3ee74e29ad3bf2ea45887e131c42fe6a495889a404fd809e9d4badb9f91b53e"}}}}}}, 0x0)

29m28.115761036s ago: executing program 3 (id=761):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = creat(0x0, 0xdafbe5d6891b6e4)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e)
write$binfmt_elf32(r2, 0x0, 0xb0)
close(r2)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
io_setup(0x2e, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x20000000400}])

29m27.931082212s ago: executing program 3 (id=762):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005c40)=ANY=[@ANYBLOB="6e6f657874656e745f63616368652c6a71666d743d7666736f6c642c6e6f71756f74612c6e6f71756f74612c66617374626f6f742c6e6f696e6c696e655f64656e7472792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d278c006c6c6f635f6d6f64653d64656661756c742c696e6c696e655f78617474722c00a2b4db502b6ba8210424f7f797a6ddd50d26e73f72a841707ea019cc81c223d959a991615e17b58a4e3ec9b2e54b87aafbaf0036421993a261bd97b95beab3b8db73ad782b6009737439da6f1d157405f23efa22e2b774ebcf1fbf96b0f516775ed21aecaa6ba0f6d45e71", @ANYRES16=0x0, @ANYRESDEC], 0x1, 0x550f, &(0x7f00000001c0)="$eJzs3M9rI+UbAPAn7XZ/f/dbxIO3HViEFjZh0x+L3qru4g/sUlY9eNI0SUN2k0xp0rT25MGjePA/EQVPHv0bPHj2Jh4Ub0IlM1PdqgtC08RtPx+YPPO+efPM84Zl4ZkpCeDcmk9+/bkUN+JKRMxGxPWI7LxUHJm1PLwQETcjYuaJo1TM/zFxMSKuRsSNUfI8Z6l46/Pbw1urP731yzffXbpw7Yuvv5/eroFpezEiutv5+V43j2krj4+K+dqwncXuyrCI+Rvdx8U4zeNeczPLsFc7WlfL4nIrX59u7/ZHcatTq49iq72VzW/38gv2h62jPNkHHtV2snGjuZnFdj/NYusgr2v/IP+/7aA/yPM0inwfZeljMDiK+Xxzv5nvZ/txFuu9QTGf500bzf1RHBaxuFzU004jq2PzJN/0f9vb7d7ufjJs7vTbaS9ZrVRfqlTvlqs7aaM5aK6Ua93G3ZVkodUZLSsPmrXuWitNW51mpZ52F5OFVr1erlaThXvNzXatl1SrleXKnfLqYnF2O3n9wXtJp5EsjOKr7d7uoN3pJ1vpTpJ/YjFZqiy/vJjcqibvrG8kGw/v31/feDfuvf/glfU3XysW/a2sZGHpztJSuXqnvFRdPIP7/+Ap+/+kKHqM+4cTKU27AIBnj/4fmIbT6/93HsbhYTZ/mv1/6P/HYlz97+Ek+t/z3v+fwv7hRPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1g9zX76Rnczn42vF/P+KqeeKcSkiZiLi8B/MxsVjOWeLPHNPWT/3lxq+LUWWYXSNS8VxNSLWiuO3/5/2twAAAABn11cf3/ws79bzl/lpF8Qk5TdtZq5/OKZ8pYiYm/9xTNlmRi/PjylZ9u/7QuyPKVt2A+vymJLlt9wujCvbvzJ7LFx+IpTyMDPRcgAAgIk43glMtgsBAABgkj6ddgFMRymOHmUePQvO/vL+zweCV46NAAAAgGdQadoFAAAAAKcu6//9/h8AAACcbfnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M7O/dyoDURxAH62cSD/FBTlnla4QRkpIcccIwpIE5RAWkgD1EBuKSGCFR4vWlbsaiWP7d3V90kwjAU/ZhA+zBtpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjT33q7+v3z66+uOYdjN3lmAwAAAFyzr7er5sU89d+31z+2lz63/SIiyoi4tnav4s1FZtXm1A+8v743hj8RTcLpO6bt411ELKqIRUT8/9T3rwAAAACv1269WabVenqajz0ghpSKNuWHb5nyioio5/8ypZWnvC+Zwpr/9yR+ZEprClizTGGp5DbJlfYkze1+rtrN7jRFasrHP59t7gAAwICqi2bYVQgAAABD+j72ABhHEbdbmeetwGlq2u29txc9AAAA4AUqxh4AAAAA0Ltm/f+sz/8L5/8BAABAV+n8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPq0r7er3Xqz7JpzOHaTZzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LA/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc79u0ZSxQEAfzOzs/FOxTXKFhFRsNDGy+2dd14nFkqw8E8QQm7vjLcqnim84xDS2Enqa0RLEUGJ3f0PVyeQJnYptohgYbUyszPJ5Ae4/prZZD8fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXh24dxkh064zguzm3tP1jJ+u1jfebRxs5C1rI4qjPps+HF6oeo21wiAAAAzI6krO9DCLvp5lLWx528/k/La7Ka/9unx3FZzx+v+8u+rP2z9svPe88fDNQZj5Pd9NbqoH/5ZCqt/2+W0+2Zv7yilT/5/N1Lkn8h8Xvrzw3T/HlGXz9+/E47D+fqyBYA+CculX0RlL8PZX2vycQAmBmtSuFd1v9Jp9mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOowXA9PlnEUQlhoHcaZ7f0HK6f1jzZ2Fsp2/eHDjeo9s1ukIYRbq4P+5RrnMu0+v3f/zvJg0L9bf/BSCKGp0d8qpn/ngwkuDqGR5yP4j4K4+LKnJZ+zETT4QwkAgHMpLVpW1++mm0vZuWg+hNF3R+v/VytxmLD+3/vw+lZ1rGr936tthg2am+yyxbU/RqPRvfuvr368fLt/u//JG1d6b/au3rh27cZi/q5k0RsTAAAA/p120ar1fzx/cv3/YiUOE9b/n33T+7I6VjJr9f+EDhf9ms4EAABgtj378u+/Raecj9rt8MXy2trd3vh48PnK+NhAqn/bXNGq9X8y33RWAAAAQB2G69GR9f+blThMuP7/1Pcv/Fi9ZxJCuFCs/19a+XRws77pTLU6/py46TkCAADQrAtFq67/p/n+//hgy0McQnjtlXFc/BvAier/5N2vfqiOVd3/f7W+KU6luDt+HnnfDaHVbTojAAAAzrMnipYV+7+mm0sf/XTx/bb9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1+zMAAP//H1NCtw==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000440)='./bus\x00', 0x41)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fsync(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r2, 0x0)

29m27.060146349s ago: executing program 3 (id=769):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xcbff9000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000900)={@fd={0x66642a85, 0x0, r2}, @fd={0x77682a85}, @flat=@weak_handle={0x77682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

29m26.70742582s ago: executing program 3 (id=771):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast1, @random="8528d5915819", @private=0x2}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x3f00, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1}}}})

29m26.689569321s ago: executing program 36 (id=771):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast1, @random="8528d5915819", @private=0x2}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x3f00, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1}}}})

9.526945576s ago: executing program 9 (id=9301):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000089cdc832850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03316844268cb89914f088a8", 0x0, 0x23, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.283346344s ago: executing program 9 (id=9303):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0xc02, 0x80, 0x11}, 0x18)
linkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00', 0x1000)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x49, 0x0, &(0x7f00000001c0))
ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000000c0)={0x3, 0x100, 0x0, 0x8, 0x7, 0x7})

7.166714422s ago: executing program 8 (id=9308):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1040}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0)

6.742758375s ago: executing program 8 (id=9309):
statx(0xffffffffffffff9c, 0x0, 0x0, 0x4, &(0x7f0000000500))
r0 = geteuid()
getcwd(&(0x7f0000000080)=""/163, 0xa3)
r1 = socket$netlink(0x10, 0x3, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x2)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000892, &(0x7f0000000600)={[{@resuid={'resuid', 0x3d, r0}}, {@grpjquota_path={'grpjquota', 0x3d, './bus/file0'}}]}, 0x1, 0x572, &(0x7f0000001700)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000200)={[{@i_version}, {@test_dummy_encryption_v1}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'tunl0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={0x0}}, 0x0)
rename(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00')
ioprio_set$uid(0x3, 0x0, 0x64)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xe, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340)={0xffffffff, 0x9, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus/file0/file0'}}, {@verity_require}]})
getpgid(0xffffffffffffffff)

6.703579417s ago: executing program 1 (id=9310):
setrlimit(0xd, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r4=>0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x78fe, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)

6.255311951s ago: executing program 9 (id=9312):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f", 0x2)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30)
dup(0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaad05ec88175287108072e9ae6dbaaaaaaaaaaaaaaaaaabb080045000030000000000506"], 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.981545989s ago: executing program 1 (id=9313):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

5.905779212s ago: executing program 1 (id=9314):
openat$urandom(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x1, 0x401, 0x0})
io_submit(0x0, 0x0, &(0x7f0000000940))
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010405000000000000000000708aab5e3e0599de2ee4b071f93824af000002000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x24000040)
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x40000, &(0x7f0000000040)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42040, 0x111)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r5, 0xc76ed000)

5.826188045s ago: executing program 9 (id=9315):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x9, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x5f, 0x5f, 0x61, 0x30, 0x36]}}, &(0x7f00000001c0)=""/128, 0x2b, 0x80, 0x0, 0x10001, 0x10000, @value=r2}, 0x28)
mprotect(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x100000a)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r5 = dup2(r4, r3)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000011c0)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x4)
sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2}, 0x5, 0x6a035825891a9861, 0x0, 0x0, "61bcf34b016813cf"}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x27, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000040)={0x30000004})
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r5)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r8, 0x8, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}]}, 0x30}}, 0x4004000)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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")
r9 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
preadv2(r9, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000300)=""/13, 0xd}], 0x3, 0x719e, 0x9, 0x4)
epoll_pwait(r7, &(0x7f0000000240)=[{}], 0x1, 0xfffffffb, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x108, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LOSS={0x73, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x33, 0x1, {0x4, 0x10, 0x1, 0x9, 0x5}}, @NETEM_LOSS_GI={0xb, 0x1, {0x5, 0x1000, 0x10000, 0x5, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x84, 0x9, 0x1, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcfbb, 0x2, 0x10001, 0x8, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x1003, 0xb}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x3, 0x5, 0x4, 0xea}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x8, 0x80000000, 0x2, 0x7fff}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1000}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0x2}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xf}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x138}}, 0x0)
sendmmsg(r0, &(0x7f0000000580)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="546e9f1b564672411e78bf5dd5dd7a75d3ddee08e2c6c1c2d7c19d9f6e2a3d4a1da0239064bd4794a5b3ed27bbf8202faafd8ad7942616ea51c18f875ba67b508cd9339414224eefd452738d643cfc97da7788c1192e", 0x56}, {&(0x7f00000005c0)="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", 0x184}, {&(0x7f0000000340)="7015a1554f6bc5285b2a35378e6ece56488e6bdd08ab37d39043aa9eef73fea914d79045174f8ca5f995ca7f465a07e117a95d70b8ccfa1ca8fa0a89b49223510b51ef87abbd158d3004172d4a8927f36b9324d3d62b82025a478b56ee8b6e68002e26d32d48cba461a3633f7925455968937ff215ae370a2f3a2469507aff919fb5d440621637a79d4deafe3a181904519bc10670ccba6af42aabba7dc23145c909f86ab805cdb87b866dad2d8c5d16ff15cd8c56b208b6029dbbec48a2c42d1d86a2fe8f4e89492e9a6ba2", 0xcc}, {&(0x7f0000000440)="0cbffbf53308d9b7a6de5dba8ed5146afe25c6208966feaabc8aa35b3be9ba8a3d40717ee4c7cc2bf66aea3261d980c511a74bbd6cb123feca938890869afad835494cf41befbb5d8d766b794f67344eda686ebd31092ef9540968c1685e6f5c5b19423781ac0614589af1e8859b74939dbfee737298", 0x76}], 0x4, &(0x7f0000000500)=[{0x68, 0x29, 0x4, "c430a6237c73620d7f8c0028782fd53254e6ab98c921708485d5738fafffccbe75ba79e136f26059c393e976af1ced8ea96944d63dbf66d5b574f52aae93a5c103c414b589c40cda4982d9b2a1db1d805d57"}], 0x68}}], 0x1, 0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r11, &(0x7f0000004140)={0x2020}, 0x2020)

5.292136222s ago: executing program 8 (id=9316):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
syz_open_procfs$userns(0x0, &(0x7f0000000100))
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
userfaultfd(0x80001)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000840)=0x100f, 0x4)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008045)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
fallocate(r0, 0x10, 0x800, 0x8000)

4.547260415s ago: executing program 9 (id=9318):
syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x5, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x54, 0x3, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp={0x44, 0x8, 0xde, 0x0, 0x9, [0x2]}, @generic={0x86, 0xc, "d045e5997f3ed22e6b34"}, @ra={0x94, 0x4, 0x1}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x8, 0x0, {0x5, 0x4, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr=0x640100ff}, '\x00\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200880, 0x0)
futex(&(0x7f000000cffc)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000)=0x7, 0x35000001)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8040, 0x20)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x224, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xc1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x6, 0xf8}}]}}}]}}]}}, 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./bus\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
ftruncate(r2, 0x4a8e)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0x8, &(0x7f0000000080)=[{0x400, 0xe3, 0x5, 0x9}, {0x7, 0x6, 0xb7, 0x5}, {0x7f, 0x3, 0xb, 0xffffffc0}, {0x0, 0x87, 0xf, 0x1e}, {0xf, 0x44, 0x4}, {0x0, 0x8, 0xab, 0x9}, {0x0, 0x3, 0xf, 0x9}, {0x7, 0x4, 0x8, 0x9}]})
syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x3, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@noop, @generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0xe00}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4000880)
socket$unix(0x1, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYRES16=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
times(0xfffffffffffffffe)

4.533044815s ago: executing program 2 (id=9319):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1040}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0)

4.372534661s ago: executing program 1 (id=9320):
syz_open_procfs(0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040))
setresuid(0x0, 0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x6000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
futex(&(0x7f00000040c0), 0x87, 0x3, 0x0, 0x0, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, &(0x7f0000002080)=0xffffffffffffffa2)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000000)=[{0x80}, {0x6}]})

3.874742977s ago: executing program 8 (id=9321):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.861269377s ago: executing program 2 (id=9322):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11)
r1 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000400000002000000000000d54a308a000c000c400000000000000003"], 0x44}}, 0x0)
fsmount(r5, 0x0, 0x80)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000000)=0x40180, 0x4)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160085"], 0xf8}}, 0x40000)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20040041)
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xd0)
sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888)
write$tcp_mem(r0, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)

3.707304132s ago: executing program 8 (id=9323):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x5, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4c010)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000280)={[{@test_dummy_encryption_v1}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@orlov}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)

3.267242856s ago: executing program 7 (id=9325):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f", 0x2)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30)
dup(0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaad05ec88175287108072e9ae6dbaaaaaaaaaaaaaaaaaabb080045000030000000000506"], 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.13269534s ago: executing program 7 (id=9326):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
syz_open_procfs$userns(0x0, &(0x7f0000000100))
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
userfaultfd(0x80001)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000840)=0x100f, 0x4)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008045)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
fallocate(r0, 0x10, 0x800, 0x8000)

2.8525439s ago: executing program 2 (id=9327):
socket$nl_route(0x10, 0x3, 0x0)
ptrace(0x10, 0x0)
ptrace(0x8, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000580)={&(0x7f00000005c0)=""/95, 0xfc43})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0x248, 0x294, 0x248, 0x378, 0x378, 0x248, 0x378, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xff, 0xffffffff], 'ipvlan1\x00', 'veth1\x00', {}, {0xff}, 0x5c, 0x9, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7ff, 0x10000, 0x81, '\x00', {0x6}}}}, {{@ipv6={@empty, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xff000000], [0x0, 0xffffff00, 0xffffffff, 0xffffff00], 'pim6reg1\x00', 'bond_slave_1\x00', {}, {0xff}, 0x3a, 0x9, 0x2, 0x62}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x2, "74718cb988505d6f3dddd9730ab69823ba8517e924af50ee76c05bb5d5e4"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tracing={0x0, 0x1}}, 0x20)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x2)
utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0xea60}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x268, 0x20a, 0x278, 0x268, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x30, 0x60, 0xf4, 0x9}}, @common=@frag={{0x30}, {[0x7], 0xe, 0x5, 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES16=r4, @ANYRESDEC=0x0], 0xffdd)

2.648351146s ago: executing program 1 (id=9328):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.19928315s ago: executing program 1 (id=9329):
syz_open_procfs(0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040))
setresuid(0x0, 0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x6000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
futex(&(0x7f00000040c0), 0x87, 0x3, 0x0, 0x0, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, &(0x7f0000002080)=0xffffffffffffffa2)

1.626750098s ago: executing program 2 (id=9330):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11)
r1 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000400000002000000000000d54a308a000c000c400000000000000003"], 0x44}}, 0x0)
fsmount(r5, 0x0, 0x80)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000000)=0x40180, 0x4)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160085"], 0xf8}}, 0x40000)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20040041)
sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888)
write$tcp_mem(r0, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)

1.58398907s ago: executing program 7 (id=9331):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11)
r1 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000400000002000000000000d54a308a000c000c400000000000000003"], 0x44}}, 0x0)
fsmount(r5, 0x0, 0x80)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000000)=0x40180, 0x4)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160085"], 0xf8}}, 0x40000)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20040041)
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xd0)
sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888)
write$tcp_mem(r0, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)

642.95367ms ago: executing program 2 (id=9332):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1040}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0)

511.480734ms ago: executing program 7 (id=9333):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="430fc73f0f2390b9800000c0c4c2c99b9aa6d5000035010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x4e}], 0x1, 0x74, 0x0, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0x5)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

505.137504ms ago: executing program 9 (id=9334):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000580)={&(0x7f00000005c0)=""/95, 0xfc43})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0x248, 0x294, 0x248, 0x378, 0x378, 0x248, 0x378, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xff, 0xffffffff], 'ipvlan1\x00', 'veth1\x00', {}, {0xff}, 0x5c, 0x9, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7ff, 0x10000, 0x81, '\x00', {0x6}}}}, {{@ipv6={@empty, @mcast1, [0x0, 0xffffff00, 0xffffffff, 0xff000000], [0x0, 0xffffff00, 0xffffffff, 0xffffff00], 'pim6reg1\x00', 'bond_slave_1\x00', {}, {0xff}, 0x3a, 0x9, 0x2, 0x62}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x2, "74718cb988505d6f3dddd9730ab69823ba8517e924af50ee76c05bb5d5e4"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tracing={0x0, 0x1}}, 0x20)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2)
utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0xea60}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x268, 0x20a, 0x278, 0x268, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x30, 0x60, 0xf4, 0x9}}, @common=@frag={{0x30}, {[0x7], 0xe, 0x5, 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES16=r5, @ANYRESDEC=0x0], 0xffdd)

502.928384ms ago: executing program 2 (id=9335):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015"], 0x38}, 0x1, 0x300}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000180)={<r3=>0x0, 0x0, 0x7, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x28, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000980)=ANY=[@ANYBLOB="1201500202000902710002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d1524120004a317a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d00000904010102020d"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000580)={r3, 0x9, 0x8, 0x1})
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4)
r4 = socket(0x8000000010, 0x2, 0x0)
write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x44080)
sendmsg$sock(r1, &(0x7f0000002040)={&(0x7f0000000a00)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000a80)="32e8ea1d3807cf2c4a5aebecc568358949d56a6a61def401c5bfad22b58429e31409158f08054c3ac1918144b8e6e3d7a3", 0x31}, {&(0x7f0000000ac0)="96939704eab27a9e78d8c93bd20f61ba27abb60a1353f0bf56b001eff355416a1e5707d59786c533a9a4d91e2187234a2bee90b11a355eccfdafd31e7d7cf02cb64b944d60dfd66a6da0ef1d91ffb7a28beb5244954f9559cb9ef66322fc67ce881b1da240823d9386708959dbdf3e0972ed0b", 0x73}, {&(0x7f0000000b40)="adffd0bb424da510df6ad5843d4ef7b2440295b3aa5e7f3bb1633b81a25b64c9ba546370a48bdfcb96fa37126bcf8b3ba513ed2298172be8f0385c22bb0e0852ba4a0c609f1e72cf003572243569b9cff2e436f9e234a8e26ea2a083f088af881840327ad93504ddf297ff30aacb54973c846ebf2d3b40d06f15dcc3ec4b5a406814ca15b8c5d5aee7b57fddca8982967242fe96214d953e1ac7c15bf75083cbf6f805720360caeddc739ab27491e5ff7bd28ae66fc66786d257a78ffc70489004c1ac1b00d8fe2e28d7c37f1cc5ccc6320008e1612cb40a566f9d86350ea13f5ee409d99888404b9542f62c89c2a160b323a78703ba8b452756d8e575edf580e105192c6513c4383a5e4bafdc669e992d224b51955746a94cd32eb4a0ebfb669a7ac72bedecd3c80efedec47472ab3958fa7d6b1ccaa8776da1caaec9000317d80c8c70e7ac349b8daeba1d6b9d21772414e7bd89d15e87b6d980a46806354546edd0ccaebdf45dd9803d89178db8b7f0c9b455ad929a3da1bb2027424037e2161bd037d8de696bfc864bfde34e4b68f262ff5e2d3d042ad3f6c12b1fff7ff27d41f3914e6d6aefb118e0954f34db4475d15363a33549b50a157a69dfbeebd0ec403bc06fb89bd2f133369c91c230f5b2ba46d5fe14e213bd31dd10badd574e0beae6ecb905a71f7eed03358b20c01cded7bcd2146b98a205bdeeac379d1691200ad3a876f710ccaf45aedfba0c74bab38aaaf24b879ae883664ddc61f69bfd652ad11e7012d437d5031fc30201cbd2d1071bb7487eeb8a6b9aea310909c14193249874ce3fc71046f5bde851098340aa5e7d15cac28c73a4009cc595e1b0ce77f4d0290a2ee23df18c5ebdf25fb87a47dca07a2a2df8a6c01402dfe57b57720c543959e08d5d3038d9ce8bf6ce7bddf5033d684e04c759a358a8070beca005b3ffc39f7c9f0d055f461af695d8cf72d7b43ad6c6f64fd891519bd01effbdf485a84c2c98a7133b4d0a452435345628545a0068fbb0890be7cdf722e7eb02980a7ccfff9ad3c3cac83d0ea8993c73c990098007394f43c1e64049fb860eebb614e349c032df587415a06f623e1c9d9264abf0426ede7de22457d5aa4f039c787c60a5aacb49b6c3bf46e669a22ebdcdfd6e0c334a241d2ba6728955d1a3412ab6dae1b44089c981cd62c774f4aa6a75643bab9c2e5984ee661edb32d5468a6446c48be3298ffbc7d2f0af782b347bddf0c246668151d72e112040fea9eec653f40f078e66fef607a59fd9775190b5af6c89bf56238804cad20288978cfae553e981742515839f55085d7614a42d63c41a9abc4c70da27c4dfdfea82fccb1e1660a780e993bb542959cedab25ed6b6aebd39fdfabf32e5b5f76d3288646d166d442592d847641b859233cada703253f5fb0adafc3d9ffe97c08a692da8192ef00b849bcf74a33ef4dac7d6982f625361886847edf57b94638a8f0a4f2029ed89d29f6b60fb0ab06f165af3666d7ff94e32c336a4bfae5c74f49d56a047f97cc8b8e35ac538f2439c18aaa8147591bf1f0173acf61fd82bcf3ebb0ffe110a3c8b8037e322943e26343414fd963f49013deff0b7d66bc4777e2e1fcd116ec631e108c2e1b6795588ad3131e443ff75c0975a10c6500c528961a18fd0e28113d149d405fd8e95eb994bc08fead9a1103b90b267973fe8a1f64455a4230bf655fbdbb9eac4c77b531819503d9ddde1b54565f30121aa168c61153d5baebf2eb549c202f692de871c621d8fc5f92856e04a0b71818ee0dc0fbebfde3b3ad6c6113806f4bea9579c4aa55ddddb80ff06778b05a4465a61c6c47cd0457598f497ed56d809d494df9509b6e16dcfb43f83775241e4d30866118415983c0d7dda51701803cb02c2d178837825b10345f0ddbac30dd239eb94147bb42adc61a52e236048d4034b33dfd5774d406fad1e4d1bae9ca036707a520011204a8b0abf4d99dbc17e9e959b831f218737c514896f402c942e4f14f52cdb97802f1fbb86b6e7409f77713cc406d9d6d356c46904c58deb89368480a22be819d9ff699bc1c0202b7581543d4ac0cee369c835051c4f3f7133eb9dff51451953812a39913c47cba8083a74fa8f88a80c9306b417d2ff50e465b64cc24db6668ce73520175d85233b34338de5a7a4637c64c61c544fdf032ad652a1b10a1a32c40e853dc75d7dca258eebac242fee1c1aedd69e2028f6cb4e9b131207ce54127bbfad4f9f5819ad9ae4966776ac50ca2d0aa8cb07e8ee0da565130ea6ffff71761a38af1b31ed090babce916d086037536f8ef1b2fad59077c1d03c4a39295b6adad7d079fd3f7708386f40a1d1755db18137a57e702ccd922af441d4395b317c957cd41cb5d068bcf54c12aada2d1e1e3399d9c8d0fb48a760a0eb1e32e4de05a61112d36815cfc977096d68a236690e4d0e1467320009226864720b13b585456297e702168b1670523bad7fb6ca9aa100b35b1ed43bbc8c3f634a3b4b9cda316e359685fa5313222d3abb4950e2a1ffd7a7c40bf1fe955ecbe69a25258f4559c1ba6a3f604634ff058f3d6679866d4bdd5ec2dba53f330f8a81eccecf467a7e302b314de057ac15119e0aa5e5567075994e7348c8aef9f7a55518f657895f88ece8e306deaf0045ac5ad1b8fd9c4916d4f713301a386495115015eccecf24b423b50389a791c3e74fcba5d12ace33124c48a785b980b6c94a1d424908e2f97349bd442359c29de596f6f704a6b2dea9a14780190d928a2bc9c785fd3eefa8d2490ffa7ff7f35c907b63ec1efe075c2b4615bf302083c46c6aad7ae7bba2488a59d918d3b4cbdccba007f90d8e33d70c7d27ab717156b8aa9fa250a2ab92611bd0206ee2d4bb7c5b03b09f0f412572ad88329e9a4a873f9c58b1ba5e7539fc7bff414385cc122a0be02024e5e6f373ae22f7bf878e9fb768eaa38f8eab92d9ef7517f0fe2270e73b49ff7c7c5677530d84e442044d303b12cb5d60575b4ce258aaba66d1cdecea2d2b333bbf9aba05c44f083d32e5e2d9d6974e0bdcd23060589b11bf71aee45df380be7445daebea128ac2d62c8072e05efa62d374253c4af2c09be8ff9e661b9b60b293ef99d310041b15c52c12666702f8a49cf7031728f8e25162b206169e36fa5b348e5d764318603ac2f554886a1e61b7ae254759723703178fbc70988cfcdcaa4f4b5d1854c9c2ff588900815e06c0e2db3369c0af6c8951446041da13adf6b14c2bcfcab094b4a9e83ede1c62dcfcefcfd1f4202a18be9a0507af1a50b6a5c61a5c94df484a8a13a97686d535936f522b389a6b39d5450afad613a4100aa4982246584633daa2d135c43adefd279f943ac81831a9c1421b6a3d586053684c86a7b13afd4cb9006ec658d0634ab614c559604fe014c77fba489d791ae1df65d4b48463407b3db75eed64b1e1f4e8756d8c448c54691a3ebc0fb6832d87f1fc0407b9ca96b1e34033e3b0ae985dc0f078a8ea78f95cfcecfe1ba4db12ab135dca5d9a934d2efdf0f6817cea6bacaf861047025d822a66cd64c36986176fbaea0788d8f47b6bbe7faa9c483d2661d7191ff3582e578b9d870623b14b9d67f5fcb8e681e5476951b40a6b51f3cb06dd747caf8a1b789cf9a4af28df323aadde40e80dcdd9504b712e7dcb268b7487ba641faed5ffdd69a123a2e75e4262a1d59a6960ba6c7278b6fdf17b6c2dcb4fb0acf53bced8ba6103fa11b30980b63a01d83ea47ced8ade31f4e1b5b5c497fdac1a06e51cea36794bfb44f4926afa6e2bd639aa3f53c28e36bf3e41d63d3082cc82f5635f173d30f054a75d0fd5991c3de8f1e9e3bbdf61eeff81c05ce7bf3f534f5d5c6306acee5b9da605b19d98c688f42b3843a57ebeab042a310186b5e8436168a630caf3a5ca0faf672f61485f2d6dfb5521ee4795b529a49144dc6676691dbd7bae153e6d2c5967aa3baf58c1c189ad0e8d2b3e5ba7b24d333518b3a0609999afea990e404ba316bc726891020038a80a0c005f90fd3466a47d689d590e95ef0e55264b874f88bd3a3bbe17706365b46b0bed53a62ba17b2be7e0a06962b8759cc97a1cde01084152bc4640794562f8200b98894f15ade3509126e39337f0a710989c18a39dcbf9e865d0154ea27234637afb3281035fa4ba7a679f8dde7d027245aa8d97d441b915557b4e3b2664a53bbca64a17d3c18a6c98eed2c0bcd222b9011464a0a40969be18bd3a288bdaf60e96605266eec963fed515e74edb4e4d8c8723ba453d654cc7aa1c67944e1716ed0a7046315d29fc1418115531d49afa3fe1755762d371395a15716458736e24774644c622ad603d1858d40d19b23a31988686873b48a5cef10f47c3c7fd2af7334237c70c30422593a7dd144088117fab688f2bc65e62f8cf2a95d75843161ec802d0920a06f92506776220ee8a83580c9a6279f12e32c42d77854795661a9ff78211e46d920c739245884c1dedc211833c833583f3c5d6c383cbd3c1d420fd74eae8e889d21b972073d957cfb3c2200a625765d4a4a64602fcdd09752847debddeb7234494c6bc254221cafee81b9f731476074e12e47593ed4f29d498fb769fa78cf3969485bf1f82b0bae74292bf12f9cdda9e6232bdf669cf83122415f98ce049b1f0047ca72304db9f3317447a750547a1368604860beab12e9319c684defbc1d7466154329542d4b0b7a7d0ca877df23222c05465eeb5f19a960ede72743d0445333f72d7d077c530062966d127fe36dd911bdfa954f4ef3c41ae8366a19ab024e0ef02f33cab910c41750191ccdd413dbe646ea460b6d024e2773791e638d8bd20a47b66fa452a26a72fffc9899091513011a9c8e5fad68a4d5696cd1e849b1432b75a69542b2025e256c32e539b366f37128f55d3df8a4abb34672e2cf8b6fe917620d22de29c476b2e9ee4a837fa96254cd518796b839a1061e13cab0b9dc51dfcf53506bad0e260c43f0b0e3bbf3091628e6d24ef97fe5d5977f5390e2b4eddfd06ed385d095d629027873f376de08632be91fc9e5316c598bc7f371c4f5e74f810711ffabd72ea653c8086f260617b50ca134a537dfc3c919ddf61e8d05921eb24523a039d4076e55b6af998f74a83988c3981ecdf597e1e3f54db9744673aba17f4c266492011dca8c24816f212f852285c09ad0fea7faf9978d711a463eb1fa187fd34c3e9d61ca9cf186dbf1406c6736c764209f123d126330cc1589d8172363c6fc30f17125ed64236adb0617295af2994ea027868f8758b31232e4076313796cd35ff79d43e8d74c88e71a72cc33a4d49b32932ad85cd9567b91c682931bf685d01b8a188d27264792f4020b9e2d3b9b8d28e91b680c2b4f6f7244902acf9afe1fd4767b2207a8158907300f3844309e916677e85a96ee465f75ab1744ceee3d41d6952fee1382f94ad239e70596ea45e6e23910ae5dcdb2713e6f6f6010fe996fb0d643fce50b0d82ec26ebb54a91abc0a87b0658bdee84a424ae84fff40b03e5d8b1271c299b55922397bee3f4123de7494dc39d76086bd09ee38734d84be9fdd5dc6914f7a21f6ca44c6243f84903ceecf59f7b48e1e0d1cb2f253789d43e43b72101a8aa34d31429ee9b9611c8b305e0050c596c577dce6d290517588ecd525f643ed698a42697361eca5e5d6974c9d59e2f10cd073ada14c924ca82a359374d9d162ad4f5726f90a4d79d2f9a562338c06f71ea091e9154373d8134b27e4d8f771e87aae154f2c675c5b9202cc8e6c48039c1a4ea6", 0x1000}, {&(0x7f0000001b40)="0476135671eb865dd2ad248e161c5f8d80fd4a65674f57b879b3df1ee33b3173419b668e745e2e5083554af1eb17e7437758856e33d92efa6abdb7c389be037ca06bc241e278c568e9408c121e20b722d01a0d913c4f917451aa2d42d0d1a980ad74feb0601d9be67e427557e7791e6b69883e60cf111cda9a582f2edb0ac62466b24892bf93da2e453f531e88b6", 0x8e}, {&(0x7f0000001c00)="8be0b21f30c395f12e59df7ee576aad8a4d055dff17a7f112c6e590e8ecef8cae379d29299e50f75f387e262530dd64c0c466cd3cc", 0x35}, {&(0x7f0000001c40)="fe9bdce8e06db55258bf14a0779c65fda389e15b187e978cbfaf0f6869714b9f64ce61d63f9976b608883ddf12e751", 0x2f}, {&(0x7f0000001c80)="06e0397d6ddd8e9228d0028ee51c42298f1635ebb6bbc8b161a02415b90b587bb9f5d038c8b7b1bdb2c26908f8404c264497127b522c246e1f4746edc0070317fee7e23b304524513450312096ac8a38381c1a32047024afcb2bf8df44ee", 0x5e}, {&(0x7f0000001d00)="77157b69971d09f0655ab8e37333e25cd67ef548f106e2a30ece402cf1631e517ffa6014626a9827f7ca1e801a68a8e00709cc34e0ba5c624eca1b8a93d01d3c69ca01eeb635cb90f17cbbd506b4c80e38a11ef19817e5f334538556b9e98df517187c076c1767377170f7aca1c56da9", 0x70}, {&(0x7f0000002080)="d4fb8b90d6a9c29c6a7fe48dbae905936009cbf502f9dce9ac808746d7139eb76850eedc3b3fc769c210352a453ebc112ac72b91741305082b3ec9f4a070539a6a12c3642a756e5b70d728129d3cb8827e0363f2e6f414fde61bb9a7d2e0efdb854189aa6315f6f50ef05fecb72dad56ee2b3f7096041f3d5ea882b22d4d144a988cd8261ec2bc7a2332c6d8dfb32ba8367a837a20b7b156", 0x98}, {&(0x7f0000001e40)="21c68cd7a2fb67e1827140bd1232975352c6", 0x12}], 0xa, &(0x7f0000001f40)=[@mark={{0x14}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xca4}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x2eb}}, @mark={{0x14, 0x1, 0x24, 0xffff8000}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xd8}, 0x4000081)
sendmsg$nl_route_sched(r5, 0x0, 0xc010)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @multicast}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

473.153676ms ago: executing program 7 (id=9336):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f", 0x2)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30)
dup(0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaad05ec88175287108072e9ae6dbaaaaaaaaaaaaaaaaaabb080045000030000000000506"], 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

472.208865ms ago: executing program 8 (id=9337):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x280c413, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x0, 0x581, &(0x7f0000000100)="$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")
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x10000d0, &(0x7f0000000600)=ANY=[], 0x1, 0x1525, &(0x7f0000001c00)="$eJzs3AvYjdW2OPAx5pwvH0kryX2OOV5WcpkkSS4JiSTZkiS5JSRJkoTkllsSQsg9yT0kt/iS+/2We5JsSZKEhCTz/2jbx96nfU57/8/ex37ON37P8z7fHOtdY6w5v7G+td73fb61vm0/qHLdKhVrMzP8j+CffnQDgBQA6AsA1wFABAAlspTIAjgMMmjs9j97EPHP9fC0qz0DcTVJ/9M26X/aJv1P26T/aZv0P22T/qdt0v+0TfovRFq2dXrO62VLu9v/3vV/kOv//3bk/f//kMNFxny5vsiNHf6BFOl/2ib9T9uk/2mb9D9tk/6nbdL//+MigAr/zW7pf9om/RciLbva159lu7rb1X7+CSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRIG86FKwwA/Hl8teclhBBCCCGEEEKIf56Q/mrPQAghhBBCCCGEEP96CAo0GIggHaSHFMgAGeEayATXQma4DhJwPWSBGyAr3AjZIDvkgJyQC3JDHrBA4IAhhryQD5JwE+SHm6EAFIRCUBg8FIGicAsUg1uhONwGJeB2KAl3QCkoDWWgLNwJ5eAuKA8VoCLcDZXgHqgMVeBeqAr3QTW4H6rDA1AD/gA14UGoBQ9BbXgY6sAjUBcehXrwGNSHBtAQGkHj/6/8l6AzvAxdoCt0g+7QA16BntALekMf6AuvQj94DfrD6zAABsIgeAMGwxAYCm/CMBgOI+AtGAmjYDSMgbEwDsbD2zAB3oGJ8C5MgskwBabCNJgOM+A9mAmzYDa8D3PgA5gL82A+LICF8CEsgsWQCh/BEvgYlsIyWA4rYCWsgtWwBtbCOlgPG2AjbILNsAW2wiewDbbDDtgJu2A37IFPYS98Bvvgc9gPX/yD+Wf/U34HBARUqNCgwXSYDlMwBTNiRsyEmTAzZsYEJjALZsGsmBWzYTbMgTkwF+bCPJgHCQkZGfNiXkxiEvNjfiyABbAQFkKPHotiUSyGt2JxLI4lsASWxJJYCktjaSyLZbEclsPyWB4rYkWshJWwMlbGe/FevA+rYTWsjtWxBtbAmlgTa2EtrI21sQ7WwbpYF+thPayP9bEhNsQM2BibYBNsik2xOTbHFtgCW2JLbIWtsDW2xjbYBttiW2yH7bA9tscO2BE74kv4Er6ML2NXrKS6Yw/sgT2xJ/bGPtgHX8V++Bq+hq/jAByIg/ANfAOH4FA8g8NwOI7AEVhOjcLROAZZjcPxOB4n4ASciBNxEk7GyTgVp+F0nIEzcCbOwln4Ps7BD/ADnIfzcAEuxIW4CBdjKqbiEjyLS3EZLscVuBJX4Upcg2txDa7HDbgeN+Em3IJb8BP8BLfjdtyJO3E37sZP8VP8DD/DAbgf9+MBPIAH8SAewkN4GA/jETyCR/EoHsNjeByP4wk8iafwJJ7G03gGz+I5PIfn8TxewBdyfV1nd8F1A0BdYpRR6VQ6laJSVEaVUWVSmVRmlVklVEJlUVlUVpVVZVPZVA6VQ+VSuVQelUeRIsUqVnlVXpVUSZVf5VcFVAFVSBVSXnlVVBVVxVQxVVwVVyXU7aqkukOVUqVVM19WlVXlVHNfXlVQFVVFVUndoyqrKqqKqqqqqmqqmqquqqsaqoaqqR5UtVR37I0Pq0udqasGYj01COurBqqhaqSG4OOqiRqKTVUz1Vw9qYbjMGypmvhW6hnVWo3GNuo5NQafV+3UOGyvXlQdVEfVSb2kOqumvku6yy+Bair2VL1Ub9VHzcR71KWOVVavqwFqoBqk3lALcIgaqt5Uw9RwNUK9pUaqUWq0GqPGqnFqvHpbTVDvqInqXTVJTVZT1FQ1TU1XM9R7aqaapWar99Uc9YGaq+ap+WqBWqg+VIvUYpWqPlJL1MdqqVqmlqsVaqVapVarNWqtWqfWqw1qo9qkNqstaqv6RG1T29UOtVPtUrvVHvWp2qs+U/vU52q/+kIdUH9UB9WX6pD6Sh1WX6sj6ht1VH2rjqnv1HH1vTqhTqpT6gd1Wv2ozqiz6pz6SZ1XP6sL6hd1UQUFGrXSWhsd6XQ6vU7RGXRGfY3OpK/VmfV1OqGv11n0DTqrvlFn09l1Dp1T59K5dR5tNWmnWcc6r86nk/omnV/frAvogrqQLqy9LqKL6lt0MX2rLq5v0yX07bqkvkOX0qV1GV1W36nL6bt0eV1BV9R360r6Hl1ZV9H36qr6Pl1N36+r6wd0Df0HXVM/qGvph3Rt/bCuox/RdfWjup5+TNfXDXRD3Ug31o/rJvoJ3VQ3u9RJ3UI/pVvqp3Ur/YxurZ/VbfRzuq1+XrfTL+j2+kXdQXfUnfQv+qIOuovuqrvp7rqHfkX31L10b91H99Wv6n76Nd1fv64H6IF6kH5DD9ZD9FD9ph6mh+sR+i09Uo/So/UYPVaP0+P123qCfkdP1O/qSXqynqKn6ml6uu59udLsvyP/nb+R3//XR9+it+pP9Da9Xe/QO/UuvVvv0Xv0Xr1X79P79H69Xx/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1T/oHfVr/qM/os/qs/kmf1+f1hcu/AzBolNHGmMikM+lNislgMpprTCZzrclsrjMJc73JYm4wD13+U8lhcppcJrfJY6wh4wyb2OQ1+UzS3GTym5tNAVPQFDKFjTdFTFFzy3/kZzU3mmwmu/lH839vfo1NY9PENDFNTVPT3DQ3LUwL09K0NK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PJdDKdTWfTxXQx3UznlD+trJfpbfqYvuZV08/0M/1NfzPADDCDzCAz2Aw2Q81QM8wMMyPMCDPSjDSjzWgz1ow14814M8FMMBPNRDPJTDJTzBQzzUwzM8wMM9PMNLPNbDPHzDFzzVwz38w3C81Cs8gsMqkm1SwxS8xSs8wsMyvMCrPKrDJrzBqzzqwzG8wGs8lsMkvNVrPVbDPbzA6zw+wyu8wes8fsNXvNPrPP7Df7zQFzwBw0B80hc8gcNofNEXPEHDVHzTFzzBw3x80Jc8KcMqfMaXPanDFnzDlzzpw3580Fc8FcNBcvHfZFKlKRiUyULkoXpUQpUcYoY5QpyhRljjJHiSgRZYmyRFmjG6NsUfYoR5QzyhXljrqBjShyEUdxlDfKFyWjm6L80c1RgahgVCgqHPmoSFQ0uiUqFt0aFY9ui0pEt0clozuiUlHpqExUNrozKhfdFZWPKkQVo7ujStE9UeWoSnRvVDW6L6oW3R9Vjx6IakR/gMvNiWpHD0d1okeiutGjUb3osah+1CBqGDWKGv+2Pl5+qv499aOa0YNRreihy/VDOJP9Cd/FdrXdbHfbw75ie9petrftY/vaV20/+5rtb1+3A+xAO8i+YQfbIXaofdMOs8PtCPuWHWlH2dF2jB1rx9nx9m07wb5jJ9p37SQ72U6xU+00O93OsO/ZmXaWnW3ft3PsB3aunWfn2wV2of3QLrKLbar9yC6xH9uldpldblfYlXaVXW3X2LV2nV1vN9iNdpPdbLfYrfYTu81utzvsTrvL7rZ77Kd2r/3M7rOf2/32C3vA/tEetF/aQ/Yre9h+bY/Yb+xR+609Zr+zx+339oQ9aU/ZH+xp+6M9Y8/ac/Yne97+bC/YX+xFGy4d3F96eydDhtJROkqhFMpIGSkTZaLMlJkSlKAslIWyUlbKRtkoB+WgXJSL8lAeuoSJKS/lpSQlKT/lpwJUgApRIfLkqSgVpWJUjIpTcSpBJagklaRSVIrKUBm6k+6ku+guqkAV6G66m+6he6gKVaGqVJWqUTWqTtWpBtWgmlSTalEtqk21qQ7VobpUl+pRPapP9akhNaTG1JiaUBMN1JSaU3NqQS2oJbWkVtSKWlNrakNtqC21pXbUjtpTe+pAHagTdaLO1Jm6UBfqRt2oB/WgntSTelNv6kt9qR/1o/7UnwbQABpEg2gwDaahNJSG0XAaQW/RSBpFo2kMjaVxNJ7G0wSaQBNpIk2iSTSFptA0mkYzaAbNpJk0m2bTHJpDc2kuzaf5tJAW0iJaRKmUSktoCS2lpbScltNKWkmraTWtpbW0ntbTRtpIm2kzbaWttI220Q7aQbtoF+2hPbSX9tI+2kf7aT8doAN0kA7SITpEh+kwHaEjdJSO0jE6RsfpOJ2gE3SKTtFpOk1n6Aydo3N0nn6mC/QLXaRAKU5BRneNy+SudZnddS7FZXCX4ggALsU5XE6Xy+V2eZx12Vz2v4rJOVfAFXSFXGHnXRFX1N3ym7iUK+3KuLLuTlfO3eXK/yau6u5z1dz9rrp7wFVx9/5VXMP9wdV0j7pa7jFX2zVwdVwjV9c96uq5x1x918A1dI1cC/eUa+medq3cM661e/Y38SK32K1169x6t8HtdZ+5c+4nd9R96867n10X19X1da+6fu4119+97ga4gb+JR7i33Eg3yo12Y9xYN+438RQ31U1z090M956b6Wb9Jl7oPnRzXKqb6+a5+W7Br/GlOaW6j9wS97Fb6pa55W6FW+lWudVuzX/MdYXb5Da7LW6P+9Rtc9vdDrfT7XK7f40vrWOf+9ztd1+4I+4bd9B96Q65Y+6w+/rX+NL6jrnv3HH3vTvhTrpT7gd32v3ozrizv67/0tp/cL+4iy44YGTFmg1HnI7Tcwpn4Ix8DWfiazkzX8cJvp6z8A2clW/kbJydc3BOzsW5OQ9bJnbMHHNezsdJvonz881cgAtyIS7MnotwUb6Fi/GtXJxv4xJ8O5fkO7gUl+YyXJbv5HJ8F5fnClyR7+ZKIXBlrsL3clW+j6vx/VydH+Ahl/9noRY/xLX5Ya7Dj3BdfpTr8WNcnxtwQ27EjflxbsJPcFNuxs35SW7BT3FLfppb8TPcmp/lNvwct+XnuR2/wO35Re7AHbkTv8Sd+WXuwl25G3fnHvwK9+Re3Jv7cF9+lfvxa9yfX+cBPJAH8Rs8mIfwUH6Th/FwHsFv8UgexaN5DI/lcTye3+YJ/A5P5Hd5Ek/mKTyVp/F0nsHv8UyexbP5fZ7DH/BcnsfzeQEv5A95ES/mVP6Il/DHvJSX8XJewSt5Fa/mNZdWzOt5A2/kTbyZt/BW/oS38XbewTt5F+/mPfwp7+XPeB9/zvv5Cz7Af+SD/CUf4q/4MH/NR/gbPsrf8jH+jo/z93yCT/Ip/oFP8498hs/yOf6Jz/PPfIF/4YscGGKMVaxjE0dxujh9nBJniDPG18SZ4mvjzPF1cSK+Ps4S3xBnjW+Ms8XZ4xxxzjhXnDvOE9uYYhdzHMd543xxMr4pzh/fHBeIC8aF4sKxj4vEReNb4mLxrXHx+La4RHx7XDK+Iy4Vl44ffaBsfGdcLr4rLh9XiCvGd8eV4nviynGV+N64anxfXC2+P64ePxAXj/8Q14wfjGvFD8W144fjOvEjcd340bhe/FhcP24QN4wbxY3jx+Mm8RNx07hZ3Dx+Mm4RPxW3jJ+OW8XPxK3jZ393f7e4e9wjfiV+JQ7hfj0/uSC5MPlhclFycTI1+VFySfLj5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCFXSg0evvPbGRz6dT+9TfAaf0V/jM/lrfWZ/nU/4630Wf4PP6m/02Xx2n8Pn9Ll8bp/HW0/eefaxz+vz+aS/yef3N/sCvqAv5At774v4or6Rb+wb+yb+Cd/UN/PN/ZP+Sf+Uf8o/7Z/2z/jW/lnfxj/n2/rnfTv/gn/Bv+g7+I6+k3/Jd/Yv+y6+q+/mu/kevofv6Xv63r637+v7+n6+n+/v+/sBfoAf5Af5wX6wH+qH+mF+mB/hR/iRfqQf7Uf7sX6sH+/H+wl+gp/oJ/pJfpKf4qf4aX6an+Fn+Jl+pp/tZ/s5Beb4uX6un+/n+4V+oV/kF/lUn+qX+CV+qV/ql/vlfqVf6Vf71X6tX+vX+/V+o9/oN/vNfqvf6rf5bX6H3+F3+V1+j9/j9/q9fp/f5/f7/f6AP+AP+oP+kP/KH/Zf+yP+G3/Uf+uP+e/8cf+9P+FP+lP+B3/a/+jP+LP+nP/Jn/c/+wv+F3/RBz8+8XZiQuKdxMTEu4lJicmJKYmpiWmJ6YkZifcSMxOzErMT7yfmJD5IzE3MS8xPLEgsTHyYWJRYnEhNfJRYkvg4sTSxLLE8sSKxMrEqEULubXHIG/KFZLgp5A83hwKhYCgUCgcfioSi4ZZQLNwaiofbQolweygZ7gilQulQJjwW6ocGoWFoFBqHx0OT8ERoGpqF5uHJ0CI8FVqGp0Or8ExoHZ4NbcJzoW14PrQLL4T24cXQIXQMncJLoXN4OXQJXUO30D30CK+EnqFX6B36hL7h1dAvvBb6h9fDgDAwDApvhMFhSBga3gzDwvAwIrwVRoZRYXQYE8aGcWF8eDtMCO+EieHdMClMDlPC1DAtTA8zwnthZpgVZof3w5zwQZgb5oX5YUFYGD4Mi8LikBo+CkvCx2FpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha/gkbAvbw46wM+wKu8Oe8GnYGz4L+8LnYX/4IhwIfwwHw5fhUPgqHA5f6yPhm3A0fBuOhe/C8fB9OBFOhlPhh3A6/BjOhLPhXPgpnA8/hwvhl3BRPrMmhBBCCPF30b+zv/vfuC0dAKjL4x4AcO32nIf/c82N2f407qVytUgAwDNd2z/8561SpW7dul2+71INUb55AJD46/p/jpdBc3gKWkEzKAbR35hLL9XxPP9O/eTtABn/IicFrsRX6t/6N9ffSz3+5IhFJeNzWf6b+vMACuS7kpMBrsRX6hf/L+pnb/I788/w5XiApn+RkwmuxFfqF4Un4Flo9Vf3FEIIIYQQQggh/qSXKtP2986fL52f5zJXctLDlfgvz8+FEEIIIYQQQgjx7+n5jp2efrxVq2Zt/74BXr4u8I9l/f7gz5/Z+qcV/K8G/4rJ/4sG+t9jGjJIm4Or+KIkhBBCCCGE+Je4ctD/l7fi1ZuQEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRBv1vfJ3Y1V6jEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIcbX9vwAAAP//oy0qVA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000700)='illinois', 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
readv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/63, 0x3f}], 0x2)
write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20004, 0x80}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40054}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000000500)=ANY=[@ANYBLOB="2c0046e1"])
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)

0s ago: executing program 7 (id=9338):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9})
preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/215, 0xd7}], 0x1, 0xfffffffd, 0x7)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})
pipe2(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0xc0, 0x45eb, 0xfffffff9, 0x44, r3, 0x4, '\x00', 0x0, r3, 0x3, 0x3, 0x3}, 0x50)
read$msr(r2, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50)
r4 = socket$inet6(0xa, 0x3, 0xff)
sendto(r4, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80)
vmsplice(r3, 0x0, 0x0, 0x0)
r5 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$usbfs(0x0, 0x76, 0x101301)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, 0x0)

kernel console output (not intermixed with test programs):

294967295 subj=root:sysadm_r:sysadm_t pid=26664 comm="syz.7.8570" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fab6943be59 code=0x7ffc0000
[ 1707.118054][T26727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=26727 comm=syz.1.8588
[ 1713.244566][T26785] 8021q: VLANs not supported on ip6_vti0
[ 1713.463749][T26801] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8618'.
[ 1713.874905][T26805] xt_hashlimit: size too large, truncated to 1048576
[ 1715.598298][   T24] kauditd_printk_skb: 381 callbacks suppressed
[ 1715.598354][   T24] audit: type=1326 audit(1716.181:43647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26807 comm="syz.2.8621" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495692ae59 code=0x7ffc0000
[ 1715.805911][   T24] audit: type=1326 audit(1716.181:43648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26807 comm="syz.2.8621" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495692ae59 code=0x7ffc0000
[ 1715.831786][   T24] audit: type=1326 audit(1716.234:43649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26807 comm="syz.2.8621" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495692ae59 code=0x7ffc0000
[ 1715.857248][   T24] audit: type=1326 audit(1716.234:43650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26807 comm="syz.2.8621" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495692ae59 code=0x7ffc0000
[ 1715.897644][   T24] audit: type=1326 audit(1716.234:43651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26807 comm="syz.2.8621" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f495692ae59 code=0x7ffc0000
[ 1715.982263][   T24] audit: type=1326 audit(1716.234:43652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26807 comm="syz.2.8621" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495692ae59 code=0x7ffc0000
[ 1716.051877][   T24] audit: type=1326 audit(1716.234:43653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26807 comm="syz.2.8621" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495692ae59 code=0x7ffc0000
[ 1716.122170][   T24] audit: type=1326 audit(1716.244:43654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26807 comm="syz.2.8621" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495692ae59 code=0x7ffc0000
[ 1716.152664][   T24] audit: type=1326 audit(1716.244:43655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26807 comm="syz.2.8621" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495692ae59 code=0x7ffc0000
[ 1716.182567][   T24] audit: type=1326 audit(1716.255:43656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26807 comm="syz.2.8621" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f495692ae59 code=0x7ffc0000
[ 1716.798103][T26839] xt_hashlimit: size too large, truncated to 1048576
[ 1718.814642][T26855] tipc: Disabling bearer <udp:syz2>
[ 1718.822678][T26855] tipc: Disabling bearer <udp:syz0>
[ 1718.833486][T26862] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1718.841313][T26855] tipc: Left network mode
[ 1718.846861][T26862] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1718.856543][T26862] device bridge_slave_0 entered promiscuous mode
[ 1718.879245][T26862] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1718.897195][T26862] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1718.904719][T26862] device bridge_slave_1 entered promiscuous mode
[ 1719.006347][T26862] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1719.013520][T26862] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1719.020812][T26862] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1719.027862][T26862] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1719.052211][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1719.060545][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1719.068059][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1719.100464][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1719.108963][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1719.116083][ T8577] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1719.124552][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1719.132801][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1719.139829][ T8577] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1719.621322][T26895] netlink: 100 bytes leftover after parsing attributes in process `syz.8.8649'.
[ 1719.720122][T26862] device veth0_vlan entered promiscuous mode
[ 1719.732635][T26862] device veth1_macvtap entered promiscuous mode
[ 1719.769224][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1719.786428][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1719.814692][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1719.824905][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1719.833092][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1719.840620][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1719.848200][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1719.856820][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1719.864988][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1720.261864][T26918] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1720.268761][T26918] EXT4-fs (loop2): Ignoring removed orlov option
[ 1720.275106][T26918] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1720.294351][T26918] EXT4-fs (loop2): 1 truncate cleaned up
[ 1720.300068][T26918] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,
[ 1721.609301][T26855] tipc: Disabling bearer <udp:syz2>
[ 1721.615089][T26855] tipc: Disabling bearer <udp:syz0>
[ 1721.620574][T26855] tipc: Left network mode
[ 1721.691899][T26938] FAULT_INJECTION: forcing a failure.
[ 1721.691899][T26938] name failslab, interval 1, probability 0, space 0, times 1
[ 1721.707751][T26938] CPU: 0 PID: 26938 Comm: syz.2.8661 Tainted: G        W         syzkaller #0
[ 1721.716653][T26938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1721.726731][T26938] Call Trace:
[ 1721.730117][T26938]  __dump_stack+0x21/0x24
[ 1721.734479][T26938]  dump_stack_lvl+0x1a7/0x208
[ 1721.739192][T26938]  ? show_regs_print_info+0x18/0x18
[ 1721.744417][T26938]  ? proc_fail_nth_read+0x220/0x220
[ 1721.749618][T26938]  dump_stack+0x15/0x1c
[ 1721.753798][T26938]  should_fail+0x3ab/0x500
[ 1721.758258][T26938]  ? map_get_next_key+0x287/0x4e0
[ 1721.758894][T26940] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8663'.
[ 1721.763377][T26938]  __should_failslab+0xa4/0xe0
[ 1721.777052][T26938]  should_failslab+0x9/0x20
[ 1721.781618][T26938]  __kmalloc+0x60/0x330
[ 1721.785796][T26938]  map_get_next_key+0x287/0x4e0
[ 1721.790687][T26938]  __se_sys_bpf+0x35b/0x740
[ 1721.795207][T26938]  ? __x64_sys_bpf+0x90/0x90
[ 1721.799866][T26938]  ? debug_smp_processor_id+0x17/0x20
[ 1721.804759][T26940] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8663'.
[ 1721.805287][T26938]  __x64_sys_bpf+0x7b/0x90
[ 1721.818598][T26938]  do_syscall_64+0x31/0x40
[ 1721.823100][T26938]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1721.829005][T26938] RIP: 0033:0x7f68330b0e59
[ 1721.833452][T26938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1721.836171][T26923] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1721.853081][T26938] RSP: 002b:00007f6831b0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1721.853095][T26938] RAX: ffffffffffffffda RBX: 00007f6833329fa0 RCX: 00007f68330b0e59
[ 1721.853120][T26938] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000004
[ 1721.860393][T26923] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1721.868552][T26938] RBP: 00007f6831b0b090 R08: 0000000000000000 R09: 0000000000000000
[ 1721.868560][T26938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1721.868568][T26938] R13: 00007f683332a038 R14: 00007f6833329fa0 R15: 00007ffd04d2b728
[ 1721.916870][T26923] device bridge_slave_0 entered promiscuous mode
[ 1721.928501][T26923] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1721.935832][T26923] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1721.943821][T26923] device bridge_slave_1 entered promiscuous mode
[ 1721.951114][T26945] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1721.958180][T26945] EXT4-fs (loop2): Ignoring removed oldalloc option
[ 1722.026031][T26923] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1722.033211][T26923] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1722.040518][T26923] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1722.047547][T26945] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue
[ 1722.057169][T26945] EXT4-fs (loop2): re-mounted. Opts: 
[ 1722.063399][T26923] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1722.068546][   T24] kauditd_printk_skb: 64 callbacks suppressed
[ 1722.068576][   T24] audit: type=1400 audit(1723.624:43721): avc:  denied  { remount } for  pid=26944 comm="syz.2.8664" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1722.158920][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1722.166972][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1722.175996][T24287] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1722.193922][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1722.202343][T24287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1722.209393][T24287] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1722.218298][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1722.228131][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1722.274466][T26956] netlink: 'syz.1.8665': attribute type 1 has an invalid length.
[ 1722.282451][T26956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8665'.
[ 1722.313305][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1722.336897][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1722.346452][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1722.354667][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1722.374798][T26923] device veth0_vlan entered promiscuous mode
[ 1722.457345][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1722.561723][T26923] device veth1_macvtap entered promiscuous mode
[ 1722.592224][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1722.623145][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1722.632695][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1723.054252][T26977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8673'.
[ 1723.376623][T26982] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[ 1723.484518][T26989] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1723.492211][T26989] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1723.499933][T26989] device bridge_slave_0 entered promiscuous mode
[ 1723.508212][T26989] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1723.515317][T26989] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1723.523111][T26989] device bridge_slave_1 entered promiscuous mode
[ 1723.605255][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1723.613378][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1723.626651][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1723.635517][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1723.644914][T24287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1723.651968][T24287] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1723.660033][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1723.668371][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1723.676759][T24287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1723.683816][T24287] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1723.691607][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1723.707690][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1723.719942][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1723.733899][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1723.749106][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1723.757601][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1723.765376][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1723.774311][T26989] device veth0_vlan entered promiscuous mode
[ 1723.786375][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1723.797707][T26989] device veth1_macvtap entered promiscuous mode
[ 1723.812997][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1723.821400][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1723.831364][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1723.840010][T24287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1723.860128][T26855] tipc: Disabling bearer <udp:syz0>
[ 1723.865670][T26855] tipc: Left network mode
[ 1724.318836][T26855] device bridge_slave_1 left promiscuous mode
[ 1724.324991][T26855] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1724.332622][T26855] device bridge_slave_0 left promiscuous mode
[ 1724.338897][T26855] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1724.347006][T26855] device veth1_macvtap left promiscuous mode
[ 1727.711255][T26997] EXT4-fs (loop8): Ignoring removed orlov option
[ 1727.760610][T26997] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1727.801911][T27005] EXT4-fs (loop2): Ignoring removed orlov option
[ 1727.890372][T27005] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1727.927444][T27014] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1727.934502][T27014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1727.944521][T27014] device bridge_slave_0 entered promiscuous mode
[ 1727.954416][T27014] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1727.961508][T27014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1727.971000][T27014] device bridge_slave_1 entered promiscuous mode
[ 1728.478193][T27014] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1728.485294][T27014] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1728.492585][T27014] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1728.499639][T27014] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1728.730871][T27035] xt_hashlimit: size too large, truncated to 1048576
[ 1728.992216][T27034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8685'.
[ 1729.163476][T24287] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1729.173055][T24287] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1729.229634][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1729.237523][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1729.258198][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1729.268218][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1729.276933][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1729.284000][ T8577] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1729.332646][T27044] FAULT_INJECTION: forcing a failure.
[ 1729.332646][T27044] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1729.353764][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1729.367210][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1729.375824][T27044] CPU: 1 PID: 27044 Comm: syz.8.8687 Tainted: G        W         syzkaller #0
[ 1729.384684][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1729.394740][T27044] Call Trace:
[ 1729.398066][T27044]  __dump_stack+0x21/0x24
[ 1729.402410][T27044]  dump_stack_lvl+0x1a7/0x208
[ 1729.407106][T27044]  ? show_regs_print_info+0x18/0x18
[ 1729.412324][T27044]  dump_stack+0x15/0x1c
[ 1729.416503][T27044]  should_fail+0x3ab/0x500
[ 1729.420937][T27044]  should_fail_usercopy+0x1a/0x20
[ 1729.426139][T27044]  _copy_from_user+0x20/0xd0
[ 1729.430775][T27044]  __copy_msghdr_from_user+0xc9/0x630
[ 1729.436175][T27044]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[ 1729.441530][T27044]  ? __fsnotify_parent+0x6d2/0x7c0
[ 1729.446650][T27044]  ___sys_sendmsg+0x19a/0x2e0
[ 1729.451335][T27044]  ? __sys_sendmsg+0x280/0x280
[ 1729.456163][T27044]  ? rw_verify_area+0x1c0/0x360
[ 1729.461047][T27044]  ? __fdget+0x1a1/0x230
[ 1729.465296][T27044]  __x64_sys_sendmsg+0x201/0x2d0
[ 1729.470270][T27044]  ? fput+0x1a/0x20
[ 1729.474081][T27044]  ? ___sys_sendmsg+0x2e0/0x2e0
[ 1729.478949][T27044]  ? debug_smp_processor_id+0x17/0x20
[ 1729.484399][T27044]  ? fpregs_assert_state_consistent+0xb1/0xe0
[ 1729.490519][T27044]  ? exit_to_user_mode_prepare+0x2f/0xa0
[ 1729.496180][T27044]  do_syscall_64+0x31/0x40
[ 1729.500626][T27044]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1729.506548][T27044] RIP: 0033:0x7f26c9f4de59
[ 1729.510986][T27044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1729.530609][T27044] RSP: 002b:00007f26c89a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1729.539033][T27044] RAX: ffffffffffffffda RBX: 00007f26ca1c6fa0 RCX: 00007f26c9f4de59
[ 1729.547015][T27044] RDX: 0000000000040000 RSI: 0000200000000680 RDI: 0000000000000003
[ 1729.555024][T27044] RBP: 00007f26c89a8090 R08: 0000000000000000 R09: 0000000000000000
[ 1729.562996][T27044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1729.570983][T27044] R13: 00007f26ca1c7038 R14: 00007f26ca1c6fa0 R15: 00007ffca8d5df18
[ 1729.582406][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1729.589484][ T8577] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1729.619380][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1729.631044][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1729.648926][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1729.664656][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1729.689779][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1729.698578][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1729.709240][T27014] device veth0_vlan entered promiscuous mode
[ 1729.720483][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1729.744215][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1729.772335][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1729.786978][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1729.804454][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1729.823311][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1729.840163][T27014] device veth1_macvtap entered promiscuous mode
[ 1729.874514][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1729.895066][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1729.913170][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1729.944224][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1729.976192][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1730.189530][T27053] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1730.202235][T27053] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue
[ 1730.247917][T27050] EXT4-fs (loop2): quotafile must be on filesystem root
[ 1730.249319][T27059] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1730.263186][T27059] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1730.271082][T27059] device bridge_slave_0 entered promiscuous mode
[ 1730.473712][T27065] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869)
[ 1730.512569][T27065] EXT4-fs (loop8): corrupt root inode, run e2fsck
[ 1730.519258][T27065] EXT4-fs (loop8): mount failed
[ 1730.531731][T27059] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1730.538967][T27059] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1730.572505][T27059] device bridge_slave_1 entered promiscuous mode
[ 1730.651104][T27059] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1730.658203][T27059] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1730.665511][T27059] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1730.672557][T27059] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1730.738623][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1730.747385][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1730.755013][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1730.762980][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1730.789439][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1730.800449][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1730.807527][ T8577] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1730.817009][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1730.825671][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1730.832725][ T8577] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1730.840597][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1730.849266][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1730.871314][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1730.885531][T27059] device veth0_vlan entered promiscuous mode
[ 1730.892864][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1730.910360][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1730.919957][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1730.936491][T27059] device veth1_macvtap entered promiscuous mode
[ 1730.997124][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1731.007183][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1731.041938][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1731.135853][T27050] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1731.143527][T27050] EXT4-fs (loop2): Ignoring removed oldalloc option
[ 1731.501687][T27081] EXT4-fs error (device loop8): ext4_free_branches:1026: inode #13: comm syz.8.8697: invalid indirect mapped block 10 (level 1)
[ 1731.515975][T27081] EXT4-fs error (device loop8): ext4_free_branches:1026: inode #13: comm syz.8.8697: invalid indirect mapped block 8 (level 1)
[ 1731.530838][T27081] EXT4-fs (loop8): 1 truncate cleaned up
[ 1731.536515][T27081] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue
[ 1731.555691][T27081] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:163: inode #15: comm syz.8.8697: inline data xattr refers to an external xattr inode
[ 1731.592326][T24287] device bridge_slave_0 left promiscuous mode
[ 1731.711682][T24287] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1732.040926][T27050] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue
[ 1732.054233][T27083] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1732.287574][   T24] audit: type=1400 audit(1734.364:43722): avc:  denied  { write } for  pid=27096 comm="syz.7.8700" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1732.717343][T27075] EXT4-fs (loop1): quotafile must be on filesystem root
[ 1732.724678][   T24] audit: type=1400 audit(1734.805:43723): avc:  denied  { ioctl } for  pid=27096 comm="syz.7.8700" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1732.949614][T27100] EXT4-fs error (device loop8): ext4_free_branches:1026: inode #13: comm syz.8.8699: invalid indirect mapped block 10 (level 1)
[ 1732.992328][T27100] EXT4-fs error (device loop8): ext4_free_branches:1026: inode #13: comm syz.8.8699: invalid indirect mapped block 8 (level 1)
[ 1733.006869][T27100] EXT4-fs (loop8): 1 truncate cleaned up
[ 1733.012547][T27100] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue
[ 1733.223884][T27104] EXT4-fs (loop7): Ignoring removed orlov option
[ 1733.290329][T27104] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1733.984765][T27114] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1733.992793][T27114] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue
[ 1734.047167][   T24] audit: type=1326 audit(1736.211:43724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27117 comm="syz.1.8705" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f560a650e59 code=0x0
[ 1734.365570][T27123] 8021q: VLANs not supported on ip_vti0
[ 1734.371226][   T24] audit: type=1400 audit(1736.547:43725): avc:  denied  { accept } for  pid=27121 comm="syz.2.8707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1734.375881][T27124] netlink: 'syz.2.8707': attribute type 4 has an invalid length.
[ 1734.405594][T27119] F2FS-fs (loop1): Invalid SB checksum offset: 0
[ 1734.411973][T27119] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 1734.421378][T27119] F2FS-fs (loop1): invalid crc value
[ 1734.429949][T27119] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[ 1734.460859][T27119] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[ 1734.467987][T27119] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1734.481222][   T24] audit: type=1400 audit(1736.673:43726): avc:  denied  { mounton } for  pid=27117 comm="syz.1.8705" path="/4/file1/file0" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1735.158255][T27014] attempt to access beyond end of device
[ 1735.158255][T27014] loop1: rw=2049, want=45112, limit=40427
[ 1735.498807][T27132] EXT4-fs (loop8): quotafile must be on filesystem root
[ 1735.666574][T27154] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1735.754363][T27154] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue
[ 1735.782371][T27163] EXT4-fs (loop7): Ignoring removed orlov option
[ 1736.184734][T27165] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.8716: invalid indirect mapped block 10 (level 1)
[ 1736.198786][T27165] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.8716: invalid indirect mapped block 8 (level 1)
[ 1736.213873][T27165] EXT4-fs (loop2): 1 truncate cleaned up
[ 1736.219671][T27165] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[ 1736.256709][T27165] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #15: comm syz.2.8716: inline data xattr refers to an external xattr inode
[ 1736.375467][T27163] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1740.363813][T27185] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8721'.
[ 1741.270693][T27198] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869)
[ 1741.281709][T27198] EXT4-fs (loop1): corrupt root inode, run e2fsck
[ 1741.288175][T27198] EXT4-fs (loop1): mount failed
[ 1741.303691][T27199] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869)
[ 1741.304019][T27200] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869)
[ 1741.336051][T27200] EXT4-fs (loop2): corrupt root inode, run e2fsck
[ 1741.342345][T27199] EXT4-fs (loop9): corrupt root inode, run e2fsck
[ 1741.342549][T27200] EXT4-fs (loop2): mount failed
[ 1741.348998][T27199] EXT4-fs (loop9): mount failed
[ 1741.553612][T27214] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1741.608273][T27214] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue
[ 1741.687680][T27223] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1741.709714][T27223] EXT4-fs error (device loop9): __ext4_iget:5034: inode #11: block 2: comm syz.9.8731: invalid block
[ 1741.721333][T27223] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.8731: couldn't read orphan inode 11 (err -117)
[ 1741.735592][T27223] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[ 1741.749594][T27228] EXT4-fs (loop2): quotafile must be on filesystem root
[ 1741.880071][T27231] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1741.891590][T27231] EXT4-fs error (device loop8): __ext4_iget:5034: inode #11: block 2: comm syz.8.8734: invalid block
[ 1741.902838][T27231] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.8734: couldn't read orphan inode 11 (err -117)
[ 1741.915021][T27231] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue
[ 1742.152758][T27236] EXT4-fs error (device loop8): ext4_find_dest_de:2079: inode #2: block 13: comm syz.8.8734: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1742.171408][T27238] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8735'.
[ 1742.181558][T27223] EXT4-fs error (device loop9): ext4_find_dest_de:2079: inode #2: block 13: comm syz.9.8731: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1742.457228][T27228] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1742.464117][T27228] EXT4-fs (loop2): Ignoring removed oldalloc option
[ 1742.473151][T27228] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue
[ 1742.529770][T27248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27248 comm=syz.7.8738
[ 1742.712921][T10147] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1742.722551][T27255] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[ 1742.817141][T27255] EXT4-fs error (device loop7): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[ 1742.831897][T27255] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[ 1742.844473][T27255] EXT4-fs (loop7): This should not happen!! Data will be lost
[ 1742.844473][T27255] 
[ 1742.854167][T26176] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1742.861708][T27255] EXT4-fs (loop7): Total free blocks count 0
[ 1742.867789][T27255] EXT4-fs (loop7): Free/Dirty block details
[ 1742.873881][T27255] EXT4-fs (loop7): free_blocks=66060288
[ 1742.879449][T27255] EXT4-fs (loop7): dirty_blocks=2304
[ 1742.884901][T27255] EXT4-fs (loop7): Block reservation details
[ 1742.890898][T27255] EXT4-fs (loop7): i_reserved_data_blocks=144
[ 1743.097625][T24287] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[ 1743.110274][T24287] EXT4-fs (loop7): This should not happen!! Data will be lost
[ 1743.110274][T24287] 
[ 1743.120376][T10147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1743.131793][T10147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1743.161048][T10147] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1743.175931][T10147] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1743.185307][T10147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1743.203444][T10147] usb 2-1: config 0 descriptor??
[ 1743.225828][T27247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1743.257840][T26176] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1743.273681][T26176] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1743.286042][T26176] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[ 1743.295695][T26176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1743.306501][T26176] usb 3-1: config 0 descriptor??
[ 1743.386829][T27270] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1743.395524][T27270] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue
[ 1743.508955][T27275] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8745'.
[ 1743.723506][T10147] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[ 1743.750310][T10147] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1744.208908][T26176] usbhid 3-1:0.0: can't add hid device: -71
[ 1744.214915][T26176] usbhid: probe of 3-1:0.0 failed with error -71
[ 1744.224505][T26176] usb 3-1: USB disconnect, device number 2
[ 1745.185261][T27295] netlink: 1 bytes leftover after parsing attributes in process `syz.8.8752'.
[ 1745.395622][   T24] audit: type=1400 audit(1746.949:43727): avc:  denied  { ioctl } for  pid=27296 comm="syz.2.8753" path="socket:[92164]" dev="sockfs" ino=92164 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1745.580677][   T24] audit: type=1400 audit(1747.117:43728): avc:  denied  { read } for  pid=27304 comm="syz.2.8757" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1745.661744][   T24] audit: type=1400 audit(1747.136:43729): avc:  denied  { open } for  pid=27304 comm="syz.2.8757" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1745.740891][T27313] binder: 27312:27313 ioctl c00c6211 200000000600 returned -22
[ 1745.770766][   T24] audit: type=1400 audit(1747.136:43730): avc:  denied  { ioctl } for  pid=27304 comm="syz.2.8757" path="/dev/usbmon0" dev="devtmpfs" ino=154 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1745.975423][T26176] usb 2-1: USB disconnect, device number 3
[ 1746.166575][T27328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8766'.
[ 1746.295012][T26174] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[ 1746.677330][T26174] usb 10-1: config 0 has an invalid interface number: 231 but max is 0
[ 1746.686179][T26174] usb 10-1: config 0 has no interface number 0
[ 1746.692526][T26174] usb 10-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1746.720103][T26176] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1747.072816][T26174] usb 10-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[ 1747.082385][T26174] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1747.090686][T26174] usb 10-1: Product: syz
[ 1747.095084][T26174] usb 10-1: Manufacturer: syz
[ 1747.099768][T26174] usb 10-1: SerialNumber: syz
[ 1747.105522][T26174] usb 10-1: config 0 descriptor??
[ 1747.126234][T27324] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1747.149653][T26174] plusb 10-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.9-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, e2:0b:71:96:30:d4
[ 1747.162582][T26176] usb 2-1: Using ep0 maxpacket: 32
[ 1747.286473][T26176] usb 2-1: config 0 has no interfaces?
[ 1747.308782][T27368] device ip6gre1 entered promiscuous mode
[ 1747.457983][T26176] usb 2-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=c7.8f
[ 1747.467071][T26176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1747.475112][T26176] usb 2-1: Product: syz
[ 1747.479306][T26176] usb 2-1: Manufacturer: syz
[ 1747.483891][T26176] usb 2-1: SerialNumber: syz
[ 1747.489141][T26176] usb 2-1: config 0 descriptor??
[ 1747.628412][T26175] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1747.637012][T26176] usb 10-1: USB disconnect, device number 8
[ 1747.643475][T26176] plusb 10-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.9-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[ 1747.661769][T27376] binder: 27375:27376 ioctl 4018620d 0 returned -22
[ 1747.804991][T10147] usb 2-1: USB disconnect, device number 4
[ 1748.013312][T26175] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1748.023169][T26175] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1748.033002][T26175] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1748.229444][T26175] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1748.238533][T26175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1748.246620][T26175] usb 3-1: Product: syz
[ 1748.251190][T26175] usb 3-1: Manufacturer: syz
[ 1748.255859][T26175] usb 3-1: SerialNumber: syz
[ 1748.394510][T27408] binder: 27406:27408 ioctl c0306201 200000000540 returned -22
[ 1748.420638][T27411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8781'.
[ 1748.457681][T27413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8782'.
[ 1748.537608][T26175] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1748.626030][T27421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1748.633207][T27421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1748.654106][   T24] audit: type=1400 audit(1749.990:43731): avc:  denied  { ioctl } for  pid=27419 comm="syz.8.8785" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1748.667943][T27421] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=27421 comm=syz.8.8785
[ 1748.755717][   T24] audit: type=1400 audit(1750.093:43732): avc:  denied  { read write } for  pid=27371 comm="syz.2.8777" name="lp0" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 1748.758046][T26175] usb 3-1: USB disconnect, device number 3
[ 1748.779277][   T24] audit: type=1400 audit(1750.093:43733): avc:  denied  { open } for  pid=27371 comm="syz.2.8777" path="/dev/usb/lp0" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 1748.785097][T26176] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1748.809359][   T24] audit: type=1400 audit(1750.093:43734): avc:  denied  { ioctl } for  pid=27371 comm="syz.2.8777" path="/dev/usb/lp0" dev="devtmpfs" ino=908 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 1748.819371][T26175] usblp0: removed
[ 1749.123130][T27427] tipc: Started in network mode
[ 1749.128253][T27427] tipc: Own node identity 42255938bc5c, cluster identity 4711
[ 1749.136029][T27427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1749.143652][T27427] device syzkaller0 entered promiscuous mode
[ 1749.153013][T27427] tipc: Resetting bearer <eth:syzkaller0>
[ 1749.160323][T27426] tipc: Resetting bearer <eth:syzkaller0>
[ 1749.167374][T27426] tipc: Disabling bearer <eth:syzkaller0>
[ 1749.263333][  T284] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[ 1749.263436][T26176] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1749.365236][T26176] usb 2-1: config 63 has an invalid interface number: 66 but max is 0
[ 1749.373602][T26176] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[ 1749.385521][T26176] usb 2-1: config 63 has no interface number 0
[ 1749.399759][T26176] usb 2-1: config 63 interface 66 has no altsetting 0
[ 1749.577797][T26176] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[ 1749.615833][T26176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1749.615886][T26176] usb 2-1: Product: syz
[ 1749.632163][T26176] usb 2-1: Manufacturer: syz
[ 1749.632183][T26176] usb 2-1: SerialNumber: syz
[ 1749.690917][  T284] usb 9-1: config 2 has an invalid interface number: 88 but max is 0
[ 1749.700331][  T284] usb 9-1: config 2 has no interface number 0
[ 1749.706549][  T284] usb 9-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64
[ 1749.717401][  T284] usb 9-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1749.728338][  T284] usb 9-1: config 2 interface 88 has no altsetting 0
[ 1749.936579][T26175] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[ 1749.947331][  T284] usb 9-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[ 1749.956442][  T284] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1749.964477][  T284] usb 9-1: Product: syz
[ 1749.968702][  T284] usb 9-1: Manufacturer: syz
[ 1749.973290][  T284] usb 9-1: SerialNumber: syz
[ 1749.990110][T27423] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1749.997248][T27423] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1750.095079][T27447] kernel profiling enabled (shift: 5)
[ 1750.236295][T27423] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1750.243388][T27423] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1750.353468][T26176] uvcvideo: Found UVC 0.07 device syz (174f:8acf)
[ 1750.374779][T26176] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1).
[ 1750.396201][T26176] uvcvideo: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1).
[ 1750.417522][T26176] uvcvideo: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1).
[ 1750.438897][T26176] uvcvideo: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[ 1750.460243][T26176] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[ 1750.469386][T26176] uvcvideo: No valid video chain found.
[ 1750.477714][T26176] usb 2-1: USB disconnect, device number 5
[ 1750.483802][T26175] usb 3-1: config 175 has an invalid descriptor of length 117, skipping remainder of the config
[ 1750.493325][  T284] asix 9-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1750.498587][T26175] usb 3-1: config 175 has 3 interfaces, different from the descriptor's value: 27
[ 1750.514382][T26175] usb 3-1: config 175 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 52, changing to 4
[ 1750.528050][  T284] asix: probe of 9-1:2.88 failed with error -71
[ 1750.535054][T26175] usb 3-1: config 175 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 56, setting to 0
[ 1750.546065][  T284] usb 9-1: USB disconnect, device number 4
[ 1750.556495][T26175] usb 3-1: config 175 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0
[ 1750.631725][T27457] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1750.812077][T27459] kvm [27458]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[ 1750.855628][T26175] usb 3-1: string descriptor 0 read error: -22
[ 1750.862526][T26175] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1750.871766][T26175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1750.923249][T26175] usb 3-1: low speed audio streaming not supported
[ 1750.930112][T26175] usb 3-1: low speed audio streaming not supported
[ 1751.112025][  T284] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1751.142832][T22743] usb 3-1: USB disconnect, device number 4
[ 1751.195484][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.208195][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.219055][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.229840][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.240446][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.251024][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.258931][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.266823][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.274426][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.281954][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.289574][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.297248][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.304927][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.312483][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.320162][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.326045][T26175] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1751.335061][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.342767][ T2600] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[ 1751.351574][ T2600] hid-generic 0006:0008:0001.0008: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 1751.395102][T27469] fido_id[27469]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1751.528863][  T284] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1751.542614][  T284] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1751.569125][  T284] usb 10-1: config 0 descriptor??
[ 1751.582315][T26175] usb 9-1: Using ep0 maxpacket: 8
[ 1751.710583][T26175] usb 9-1: config 3 has an invalid interface number: 45 but max is 0
[ 1751.718748][T26175] usb 9-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[ 1751.753338][T26175] usb 9-1: config 3 has no interface number 0
[ 1751.759479][T26175] usb 9-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1751.785231][T26175] usb 9-1: config 3 interface 45 has no altsetting 0
[ 1751.844157][  T284] usb 10-1: USB disconnect, device number 9
[ 1751.956292][T26175] usb 9-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[ 1751.966302][T26175] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1751.975137][T26175] usb 9-1: Product: syz
[ 1751.979530][T26175] usb 9-1: Manufacturer: syz
[ 1751.984180][T26175] usb 9-1: SerialNumber: syz
[ 1752.421782][T26175] usb 9-1: USB disconnect, device number 5
[ 1752.749694][   T24] audit: type=1400 audit(1753.827:43735): avc:  denied  { map } for  pid=27489 comm="syz.2.8811" path="socket:[92515]" dev="sockfs" ino=92515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1752.880899][T27502] binder: 27499:27502 ioctl c0306201 200000000680 returned -14
[ 1753.227936][T26175] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1753.280083][T27522] xt_hashlimit: size too large, truncated to 1048576
[ 1753.484413][T26175] usb 2-1: Using ep0 maxpacket: 8
[ 1753.655750][T26175] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11
[ 1753.670998][T26175] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1753.684766][T26175] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1753.694470][T26175] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[ 1753.704277][T26175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1753.733026][T26175] usb 2-1: config 0 descriptor??
[ 1754.588539][T27539] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8830'.
[ 1754.865216][T26175] usbhid 2-1:0.0: can't add hid device: -71
[ 1754.871931][T26175] usbhid: probe of 2-1:0.0 failed with error -71
[ 1754.904427][T26175] usb 2-1: USB disconnect, device number 6
[ 1757.278944][T26175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[ 1757.299365][T26175] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1758.887325][T27605] device syzkaller0 entered promiscuous mode
[ 1758.955576][T10147] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1759.009680][T26175] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1759.244081][T10147] usb 2-1: Using ep0 maxpacket: 16
[ 1759.265478][T26175] usb 3-1: Using ep0 maxpacket: 32
[ 1759.393761][T26175] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1759.404813][T26175] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1759.411421][T26175] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1759.420728][T26175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1759.429369][T26175] usb 3-1: config 0 descriptor??
[ 1759.436479][T10147] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1759.522485][T10147] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 164, changing to 7
[ 1759.612917][T27640] cgroup: Unknown subsys name 'devices'
[ 1759.714363][T10147] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1759.723526][T10147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1759.731688][T10147] usb 2-1: Product: syz
[ 1759.735975][T10147] usb 2-1: Manufacturer: syz
[ 1759.740636][T10147] usb 2-1: SerialNumber: syz
[ 1759.939962][T26175] hid-generic 0003:1B1C:0C10.000A: unknown main item tag 0x0
[ 1759.947526][T26175] hid-generic 0003:1B1C:0C10.000A: unknown main item tag 0x0
[ 1759.955183][T26175] hid-generic 0003:1B1C:0C10.000A: unknown main item tag 0x0
[ 1759.962759][T26175] hid-generic 0003:1B1C:0C10.000A: unknown main item tag 0x0
[ 1759.970163][T26175] hid-generic 0003:1B1C:0C10.000A: unknown main item tag 0x0
[ 1759.978671][T26175] hid-generic 0003:1B1C:0C10.000A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0
[ 1760.292289][ T2600] usb 3-1: USB disconnect, device number 5
[ 1760.590560][T26175] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1760.975413][T26175] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1760.985253][T26175] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1760.995039][T26175] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1761.004978][T26175] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1761.014855][T26175] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1761.024042][T26175] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1761.033372][T26175] usb 10-1: config 0 descriptor??
[ 1761.049123][T27667] xt_hashlimit: size too large, truncated to 1048576
[ 1761.167588][ T2600] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1761.240018][T27670] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8878'.
[ 1761.294876][T27674] netlink: 'syz.8.8880': attribute type 7 has an invalid length.
[ 1761.303197][T27674] netlink: 'syz.8.8880': attribute type 5 has an invalid length.
[ 1761.311071][T27674] netlink: 17 bytes leftover after parsing attributes in process `syz.8.8880'.
[ 1761.434802][ T2600] usb 3-1: Using ep0 maxpacket: 16
[ 1761.616434][T26173] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[ 1761.616527][ T2600] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1761.734466][ T2600] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 164, changing to 7
[ 1761.904641][T27681] device veth0 entered promiscuous mode
[ 1761.937064][ T2600] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1761.946334][ T2600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1761.954521][ T2600] usb 3-1: Product: syz
[ 1761.958727][ T2600] usb 3-1: Manufacturer: syz
[ 1761.963327][ T2600] usb 3-1: SerialNumber: syz
[ 1761.979805][T10147] usb 2-1: 1:1 : bogus bTerminalLink 3
[ 1762.001125][T26173] usb 9-1: config 5 has an invalid interface number: 123 but max is 0
[ 1762.009358][T26173] usb 9-1: config 5 has no interface number 0
[ 1762.013019][T10147] usb 2-1: USB disconnect, device number 7
[ 1762.021872][T26173] usb 9-1: config 5 interface 123 altsetting 7 has an invalid endpoint with address 0xEB, skipping
[ 1762.034530][T27680] device veth0 left promiscuous mode
[ 1762.044169][T26173] usb 9-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1762.054061][T26173] usb 9-1: config 5 interface 123 has no altsetting 0
[ 1762.978222][T27682] udevd[27682]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1763.723212][T26173] usb 9-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[ 1763.732453][T26173] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1763.742765][T26173] usb 9-1: Product: syz
[ 1763.751831][T26173] usb 9-1: Manufacturer: syz
[ 1763.826661][T26173] usb 9-1: SerialNumber: syz
[ 1763.846225][T27691] device syzkaller0 entered promiscuous mode
[ 1763.865884][T26172] usb 10-1: USB disconnect, device number 10
[ 1763.998008][   T24] audit: type=1400 audit(1764.345:43736): avc:  denied  { connect } for  pid=27713 comm="syz.9.8896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1764.161634][T27718] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1764.176960][T26173] usb 9-1: USB disconnect, device number 6
[ 1764.248520][   T24] audit: type=1400 audit(1764.588:43737): avc:  denied  { read write } for  pid=27717 comm="syz.9.8898" name="file1" dev="loop9" ino=1048666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1764.276559][T27718] exFAT-fs (loop9): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[ 1764.276559][T27718] 
[ 1764.285318][   T24] audit: type=1400 audit(1764.588:43738): avc:  denied  { open } for  pid=27717 comm="syz.9.8898" path="/50/file2/file1" dev="loop9" ino=1048666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1764.331786][T27718] exFAT-fs (loop9): Filesystem has been set read-only
[ 1764.472274][T27718] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560612053 (7121224106 ns) > initial count (2096900638 ns). Using initial count to start timer.
[ 1764.642479][T27724] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[ 1764.665347][T27724] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1764.674579][T27724] F2FS-fs (loop1): invalid crc value
[ 1764.681139][T27724] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1764.760547][T27724] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1764.767748][T27724] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1764.803740][T27733] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1764.810598][T27733] EXT4-fs (loop8): Ignoring removed orlov option
[ 1764.817035][T27733] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1764.832921][T26173] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1764.840733][T27733] EXT4-fs (loop8): 1 truncate cleaned up
[ 1764.846421][T27733] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,
[ 1765.003969][ T2600] usb 3-1: 1:1 : bogus bTerminalLink 3
[ 1765.032346][ T2600] usb 3-1: USB disconnect, device number 6
[ 1765.071484][T27724] xt_hashlimit: size too large, truncated to 1048576
[ 1765.107575][T27014] attempt to access beyond end of device
[ 1765.107575][T27014] loop1: rw=2049, want=45104, limit=40427
[ 1765.239121][T26173] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1765.250435][T26173] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1765.261708][T26173] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1765.274805][T26173] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1765.284003][T26173] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1765.296458][T26173] usb 10-1: config 0 descriptor??
[ 1765.314005][T27726] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[ 1765.357585][T27754] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1765.366281][T27754] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue
[ 1765.442966][T27758] EXT4-fs (loop1): Ignoring removed orlov option
[ 1765.454138][T27758] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1765.474088][   T20] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[ 1765.923240][   T20] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1765.983020][   T20] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1766.031884][   T20] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1766.131717][   T20] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1766.388654][T26173] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[ 1766.400812][T26173] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1766.414907][T26173] usb 10-1: USB disconnect, device number 11
[ 1766.447069][T27768] fido_id[27768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1766.519856][T27769] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1766.526854][T27769] EXT4-fs (loop2): Ignoring removed orlov option
[ 1766.533259][T27769] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1766.553863][T27769] EXT4-fs (loop2): 1 truncate cleaned up
[ 1766.559662][T27769] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,
[ 1766.731477][   T20] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1766.740569][   T20] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1766.778606][   T20] usb 9-1: config 0 descriptor??
[ 1766.909030][T27782] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1766.925764][T27782] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[ 1766.925764][T27782] 
[ 1766.937811][T27782] exFAT-fs (loop2): Filesystem has been set read-only
[ 1767.341166][T27750] udc-core: couldn't find an available UDC or it's busy
[ 1767.348276][T27750] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1767.356919][T27750] udc-core: couldn't find an available UDC or it's busy
[ 1767.363974][T27750] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1767.586512][T27750] udc-core: couldn't find an available UDC or it's busy
[ 1767.593628][T27750] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1767.760904][   T20] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1767.990006][T27812] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1767.996923][T27812] EXT4-fs (loop2): Ignoring removed orlov option
[ 1768.003264][T27812] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1768.024581][T27812] EXT4-fs (loop2): 1 truncate cleaned up
[ 1768.030299][T27812] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,
[ 1768.495108][T27822] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1768.495712][T27826] EXT4-fs (loop9): Ignoring removed orlov option
[ 1768.523921][T27822] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[ 1768.523921][T27822] 
[ 1768.533985][T27826] EXT4-fs (loop9): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1768.537279][T27822] exFAT-fs (loop2): Filesystem has been set read-only
[ 1768.607701][T27822] kvm: pic: non byte write
[ 1768.630923][   T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1768.641422][   T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1768.651701][   T20] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1768.734442][T26173] usb 9-1: USB disconnect, device number 7
[ 1769.684616][   T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1770.258571][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1770.267819][   T20] usb 2-1: Product: syz
[ 1770.272031][   T20] usb 2-1: Manufacturer: syz
[ 1770.277939][   T20] usb 2-1: SerialNumber: syz
[ 1770.438384][   T20] cdc_mbim 2-1:1.0: skipping garbage
[ 1770.453775][   T20] cdc_mbim 2-1:1.0: skipping garbage
[ 1770.487191][   T20] cdc_mbim 2-1:1.0: bind() failure
[ 1770.642397][   T20] usb 2-1: USB disconnect, device number 8
[ 1770.852405][T27857] incfs: Backing dir is not set, filesystem can't be mounted.
[ 1770.858418][T27852] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[ 1770.860768][T27857] incfs: mount failed -2
[ 1770.871921][T27852] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1770.880902][T27852] F2FS-fs (loop2): invalid crc value
[ 1770.892730][T27852] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[ 1770.909739][T27861] EXT4-fs (loop8): Ignoring removed orlov option
[ 1770.929981][T27861] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1770.930020][T27852] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1770.961249][T27852] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1771.933615][T27870] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1772.003064][T27870] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[ 1772.003064][T27870] 
[ 1772.037111][T27870] exFAT-fs (loop1): Filesystem has been set read-only
[ 1772.287698][T27883] EXT4-fs (loop2): Ignoring removed orlov option
[ 1772.434184][T27883] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1772.900895][T10147] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1772.922843][T27908] incfs: Backing dir is not set, filesystem can't be mounted.
[ 1772.930571][T27908] incfs: mount failed -2
[ 1773.248861][T27915] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1773.258302][T27915] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue
[ 1773.360055][T27919] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8958'.
[ 1773.392485][T10147] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1773.461998][T27921] device syzkaller0 entered promiscuous mode
[ 1773.488677][T10147] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1773.498783][T10147] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[ 1773.623597][T27923] EXT4-fs (loop9): Ignoring removed orlov option
[ 1773.641020][T27923] EXT4-fs (loop9): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1773.774986][T10147] usb 2-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[ 1773.784431][T10147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1773.793396][T10147] usb 2-1: Product: syz
[ 1773.797583][T10147] usb 2-1: Manufacturer: syz
[ 1773.819866][T10147] usb 2-1: SerialNumber: syz
[ 1774.837935][T10147] usb 2-1: USB disconnect, device number 9
[ 1775.070425][T27938] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1775.118824][T27938] exFAT-fs (loop9): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[ 1775.118824][T27938] 
[ 1775.131895][T27945] incfs: Backing dir is not set, filesystem can't be mounted.
[ 1775.139810][T27945] incfs: mount failed -2
[ 1775.144752][T27938] exFAT-fs (loop9): Filesystem has been set read-only
[ 1775.171965][T27942] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1775.186069][T27938] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560612053 (7121224106 ns) > initial count (2096900638 ns). Using initial count to start timer.
[ 1775.229330][T27942] exFAT-fs (loop8): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[ 1775.229330][T27942] 
[ 1775.246084][T27942] exFAT-fs (loop8): Filesystem has been set read-only
[ 1775.321923][T27942] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560612053 (7121224106 ns) > initial count (2096900638 ns). Using initial count to start timer.
[ 1775.344074][T27942] kvm: pic: non byte write
[ 1775.506770][T27955] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27955 comm=syz.9.8968
[ 1775.552073][T27950] EXT4-fs (loop2): error: could not find journal device path: error -2
[ 1775.700316][T27963] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8969'.
[ 1776.360081][T27980] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8976'.
[ 1776.831662][T27993] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8979'.
[ 1776.848047][T27989] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1776.865897][T27989] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[ 1776.865897][T27989] 
[ 1776.878347][T27989] exFAT-fs (loop1): Filesystem has been set read-only
[ 1776.891059][T27997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8982'.
[ 1776.914344][T27989] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560612053 (7121224106 ns) > initial count (2096900638 ns). Using initial count to start timer.
[ 1776.936951][T27989] kvm: pic: non byte write
[ 1777.027278][T28008] EXT4-fs (loop1): Ignoring removed orlov option
[ 1777.038090][T28008] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1777.172653][T26173] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1778.404486][T28033] tipc: Started in network mode
[ 1778.409400][T28033] tipc: Own node identity b6f968703055, cluster identity 4711
[ 1778.418219][T28033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1778.431972][T28033] device syzkaller0 entered promiscuous mode
[ 1778.446487][T28033] tipc: Resetting bearer <eth:syzkaller0>
[ 1778.454501][T28030] tipc: Resetting bearer <eth:syzkaller0>
[ 1778.461066][T28030] tipc: Disabling bearer <eth:syzkaller0>
[ 1778.545551][T28038] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1778.607273][T26173] usb 9-1: config 220 has an invalid interface number: 76 but max is 2
[ 1778.617560][T26173] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1778.637755][T26173] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1778.660643][T26173] usb 9-1: config 220 has no interface number 2
[ 1778.666934][T26173] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1778.680084][   T20] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1778.703476][T26173] usb 9-1: config 220 interface 0 has no altsetting 0
[ 1778.710297][T26173] usb 9-1: config 220 interface 76 has no altsetting 0
[ 1778.735450][T26173] usb 9-1: config 220 interface 1 has no altsetting 0
[ 1778.781802][T28038] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560612053 (7121224106 ns) > initial count (2096900638 ns). Using initial count to start timer.
[ 1778.804168][T28038] kvm: pic: non byte write
[ 1778.906589][T26173] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1778.915757][T26173] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1778.924163][T26173] usb 9-1: Product: syz
[ 1778.928404][T26173] usb 9-1: Manufacturer: syz
[ 1778.933012][T26173] usb 9-1: SerialNumber: syz
[ 1779.130895][   T20] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1779.141978][   T20] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1779.148679][   T20] usb 10-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[ 1779.158109][   T20] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1779.170147][   T20] usb 10-1: config 0 descriptor??
[ 1779.195940][T27993] netlink: 'syz.8.8979': attribute type 12 has an invalid length.
[ 1779.431875][T26173] uvcvideo: Found UVC 7.01 device syz (8086:0b07)
[ 1779.500726][T26173] uvcvideo: No valid video chain found.
[ 1779.509669][T26173] usb 9-1: selecting invalid altsetting 0
[ 1779.734632][T28054] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.8999: invalid indirect mapped block 10 (level 1)
[ 1779.748662][T28054] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.8999: invalid indirect mapped block 8 (level 1)
[ 1779.763271][T28054] EXT4-fs (loop2): 1 truncate cleaned up
[ 1779.768961][T28054] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[ 1779.811625][T28054] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #15: comm syz.2.8999: inline data xattr refers to an external xattr inode
[ 1781.774109][T26173] usb 9-1: USB disconnect, device number 8
[ 1781.783446][T28060] F2FS-fs (loop7): Unrecognized mount option "�" or missing value
[ 1781.998920][T28059] SELinux: failed to load policy
[ 1782.012268][T28059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=28059 comm=syz.7.9000
[ 1782.024982][   T20] usbhid 10-1:0.0: can't add hid device: -71
[ 1782.031638][   T20] usbhid: probe of 10-1:0.0 failed with error -71
[ 1782.039076][   T20] usb 10-1: USB disconnect, device number 12
[ 1784.173336][T28081] F2FS-fs (loop2): Unrecognized mount option "�" or missing value
[ 1784.987948][T28082] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 2: comm syz.9.9008: invalid block
[ 1785.002540][T28082] EXT4-fs error (device loop9): ext4_free_branches:1026: inode #13: comm syz.9.9008: invalid indirect mapped block 10 (level 1)
[ 1785.017573][T28082] EXT4-fs error (device loop9): ext4_free_branches:1026: inode #13: comm syz.9.9008: invalid indirect mapped block 8 (level 1)
[ 1785.034197][T28082] EXT4-fs (loop9): 1 truncate cleaned up
[ 1785.039886][T28082] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[ 1785.323495][T28081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=28081 comm=syz.2.9001
[ 1786.060632][T28095] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1786.161073][T28095] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1786.174388][T28095] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.9010: Failed to acquire dquot type 1
[ 1786.194408][T28095] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1786.407984][T28095] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1786.426797][T28095] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.9010: Failed to acquire dquot type 1
[ 1786.449573][T28095] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9010: bg 0: block 248: padding at end of block bitmap is not set
[ 1786.472723][T28095] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem
[ 1786.483126][T28095] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1786.493406][T28095] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1786.519801][T28095] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.9010: Failed to acquire dquot type 1
[ 1786.552039][T28095] EXT4-fs (loop1): 1 orphan inode deleted
[ 1786.563345][T28095] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[ 1787.616798][T28133] tipc: Started in network mode
[ 1787.621718][T28133] tipc: Own node identity ceb811488a64, cluster identity 4711
[ 1787.629541][T28133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1787.637166][T28133] device syzkaller0 entered promiscuous mode
[ 1787.646597][T28133] tipc: Resetting bearer <eth:syzkaller0>
[ 1787.653836][T28131] tipc: Resetting bearer <eth:syzkaller0>
[ 1789.193330][T28131] tipc: Disabling bearer <eth:syzkaller0>
[ 1789.200409][T26177] tipc: 32-bit node address hash set to 4811dc44
[ 1789.214737][T28143] fuse: Bad value for 'fd'
[ 1789.231416][T28136] F2FS-fs (loop9): Unrecognized mount option "�" or missing value
[ 1789.267156][   T24] audit: type=1400 audit(1788.002:43739): avc:  denied  { connect } for  pid=28144 comm="syz.1.9024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1789.363127][   T24] audit: type=1400 audit(1788.086:43740): avc:  denied  { write } for  pid=28144 comm="syz.1.9024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1789.415065][T28148] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1789.415323][T28136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=28136 comm=syz.9.9021
[ 1789.446237][T28132] SELinux: failed to load policy
[ 1789.463567][   T24] audit: type=1400 audit(1788.180:43741): avc:  denied  { append } for  pid=28144 comm="syz.1.9024" name="file2" dev="loop1" ino=1048683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1789.828295][   T24] audit: type=1400 audit(1788.526:43742): avc:  denied  { mounton } for  pid=28144 comm="syz.1.9024" path="/68/file1/file0" dev="loop1" ino=1048684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1790.430083][T28161] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1792.649348][T28179] F2FS-fs (loop8): Unrecognized mount option "�" or missing value
[ 1793.323237][T28178] SELinux: failed to load policy
[ 1793.336063][T28178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=28178 comm=syz.8.9033
[ 1793.455090][T28187] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1793.504580][T28176] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64)
[ 1793.512124][T28195] fuse: Bad value for 'fd'
[ 1793.540007][T28176] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1793.549614][T28176] F2FS-fs (loop7): invalid crc value
[ 1793.566255][T28176] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[ 1793.598128][T28176] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1793.605359][T28176] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1793.939670][T28208] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1794.204946][T28219] EXT4-fs (loop7): Ignoring removed orlov option
[ 1794.231966][T28219] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1794.412182][T28228] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28228 comm=syz.9.9048
[ 1795.444401][T28238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28238 comm=syz.1.9051
[ 1797.041671][T28240] EXT4-fs (loop1): quotafile must be on filesystem root
[ 1797.107686][T28249] F2FS-fs (loop2): Unrecognized mount option "�" or missing value
[ 1797.360154][T28247] SELinux: failed to load policy
[ 1797.370826][T28247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=28247 comm=syz.2.9054
[ 1797.533320][T28238] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1797.540531][T28238] EXT4-fs (loop1): Ignoring removed oldalloc option
[ 1797.661434][T28238] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue
[ 1797.748187][T28267] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28267 comm=syz.9.9060
[ 1797.949003][T18625] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1798.847441][T28291] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1798.857540][T28291] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 89
[ 1798.866603][T28291] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89
[ 1798.875774][T28291] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1798.885520][T28291] attempt to access beyond end of device
[ 1798.885520][T28291] loop1: rw=524288, want=34359738368, limit=16
[ 1798.897901][T28291] attempt to access beyond end of device
[ 1798.897901][T28291] loop1: rw=524288, want=136, limit=16
[ 1798.909384][T28291] attempt to access beyond end of device
[ 1798.909384][T28291] loop1: rw=524288, want=88, limit=16
[ 1798.931603][T18625] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1799.173511][T18625] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1799.184907][T18625] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[ 1799.398165][T28303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28303 comm=syz.1.9072
[ 1799.434446][T18625] usb 3-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[ 1799.443583][T18625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1799.452445][T18625] usb 3-1: Product: syz
[ 1799.456881][T18625] usb 3-1: Manufacturer: syz
[ 1799.461485][T18625] usb 3-1: SerialNumber: syz
[ 1799.609847][T28313] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1799.629535][T28313] exFAT-fs (loop9): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[ 1799.629535][T28313] 
[ 1799.641678][T28313] exFAT-fs (loop9): Filesystem has been set read-only
[ 1799.766653][T18625] usb 3-1: USB disconnect, device number 7
[ 1800.588852][T28334] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28334 comm=syz.2.9083
[ 1802.714028][T28343] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1802.769107][T28346] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1802.798547][T28352] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1802.812729][T28352] EXT4-fs error (device loop2): __ext4_iget:5034: inode #11: block 2: comm syz.2.9089: invalid block
[ 1802.816122][T28343] exFAT-fs (loop9): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[ 1802.816122][T28343] 
[ 1802.824418][T28352] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.9089: couldn't read orphan inode 11 (err -117)
[ 1802.848089][T28352] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[ 1802.852846][T28343] exFAT-fs (loop9): Filesystem has been set read-only
[ 1802.914677][T28343] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560612053 (7121224106 ns) > initial count (2096900638 ns). Using initial count to start timer.
[ 1803.062138][T28360] EXT4-fs (loop7): Ignoring removed orlov option
[ 1803.082520][T28352] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #2: block 13: comm syz.2.9089: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1803.106394][T28360] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1803.238956][T28370] EXT4-fs (loop9): quotafile must be on filesystem root
[ 1805.390074][T28370] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1805.402712][T28370] EXT4-fs (loop9): Ignoring removed oldalloc option
[ 1805.411572][T28370] EXT4-fs (loop9): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue
[ 1805.536252][T28391] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1805.640098][T28386] EXT4-fs (loop1): quotafile must be on filesystem root
[ 1805.672917][T26177] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[ 1806.126276][T28403] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1806.143208][T28403] EXT4-fs error (device loop9): __ext4_iget:5034: inode #11: block 2: comm syz.9.9104: invalid block
[ 1806.154398][T28403] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.9104: couldn't read orphan inode 11 (err -117)
[ 1806.166804][T28403] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[ 1806.208272][T28386] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1806.230913][T28386] EXT4-fs (loop1): Ignoring removed oldalloc option
[ 1806.258883][T28403] EXT4-fs error (device loop9): ext4_find_dest_de:2079: inode #2: block 13: comm syz.9.9104: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1806.278502][T26177] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1806.287890][T28386] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue
[ 1806.300814][T26177] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1806.310396][T26177] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1806.320809][T26177] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1806.331904][T26177] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1806.346722][T26177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1806.361170][T26177] usb 3-1: config 0 descriptor??
[ 1806.500171][T28412] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28412 comm=syz.9.9107
[ 1806.565313][T28418] EXT4-fs (loop9): Ignoring removed orlov option
[ 1806.574349][T28418] EXT4-fs (loop9): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1806.710779][  T313] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1806.717556][T28425] Bluetooth: hci0: Frame reassembly failed (-90)
[ 1806.907615][T28382] udc-core: couldn't find an available UDC or it's busy
[ 1806.942179][T28382] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1806.954028][T28382] udc-core: couldn't find an available UDC or it's busy
[ 1806.962023][T28382] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1807.187530][T28382] udc-core: couldn't find an available UDC or it's busy
[ 1807.224256][T28382] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1807.393541][T28432] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1807.728389][T28432] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[ 1807.739228][T28432] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1807.770731][   T24] kauditd_printk_skb: 3 callbacks suppressed
[ 1807.770744][   T24] audit: type=1400 audit(1805.324:43746): avc:  denied  { mounton } for  pid=28431 comm="syz.1.9112" path="/94/bus/file0/file0" dev="loop1" ino=1048697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1807.800842][T28432] fuse: Unknown parameter 'group�6'
[ 1807.827151][   T24] audit: type=1400 audit(1805.352:43747): avc:  denied  { create } for  pid=28431 comm="syz.1.9112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1807.847198][   T24] audit: type=1400 audit(1805.352:43748): avc:  denied  { ioctl } for  pid=28431 comm="syz.1.9112" path="/94/bus/file0/bus" dev="loop1" ino=1048696 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1807.872453][   T24] audit: type=1400 audit(1805.352:43749): avc:  denied  { getopt } for  pid=28431 comm="syz.1.9112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1807.928458][T28438] EXT4-fs (loop9): Ignoring removed orlov option
[ 1807.942397][T28438] EXT4-fs (loop9): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1808.531689][   T20] usb 3-1: USB disconnect, device number 8
[ 1808.920315][T28445] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1808.932597][T10150] Bluetooth: hci0: command 0x1003 tx timeout
[ 1808.941385][T28203] Bluetooth: hci0: sending frame failed (-49)
[ 1809.097146][T28445] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[ 1809.097146][T28445] 
[ 1809.109717][T28445] exFAT-fs (loop2): Filesystem has been set read-only
[ 1809.431210][T28445] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560612053 (7121224106 ns) > initial count (2096900638 ns). Using initial count to start timer.
[ 1809.524120][T28456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28456 comm=syz.1.9118
[ 1809.566950][T28463] device syzkaller0 entered promiscuous mode
[ 1809.928057][T26174] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1810.580050][T26174] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1810.665497][T26174] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1810.675750][T26174] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[ 1810.847184][T26174] usb 10-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[ 1810.856424][T26174] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1810.864651][T26174] usb 10-1: Product: syz
[ 1810.869005][T26174] usb 10-1: Manufacturer: syz
[ 1810.873768][T26174] usb 10-1: SerialNumber: syz
[ 1811.150449][T22735] Bluetooth: hci0: command 0x1001 tx timeout
[ 1811.159126][T28203] Bluetooth: hci0: sending frame failed (-49)
[ 1811.211281][T26174] usb 10-1: USB disconnect, device number 13
[ 1811.445528][T26177] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[ 1811.878823][T28487] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1811.978394][T28487] erofs: (device loop9): z_erofs_readahead: readahead error at page 15 @ nid 89
[ 1811.987910][T28487] erofs: (device loop9): z_erofs_readahead: readahead error at page 5 @ nid 89
[ 1811.998331][T28487] erofs: (device loop9): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1812.008621][T28487] attempt to access beyond end of device
[ 1812.008621][T28487] loop9: rw=524288, want=34359738368, limit=16
[ 1812.021818][T28487] attempt to access beyond end of device
[ 1812.021818][T28487] loop9: rw=524288, want=136, limit=16
[ 1812.036601][T28487] attempt to access beyond end of device
[ 1812.036601][T28487] loop9: rw=524288, want=88, limit=16
[ 1812.703002][T28493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28493 comm=syz.1.9130
[ 1813.299603][T26177] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1813.310727][T26177] usb 3-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1813.324165][T26177] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1813.331127][T26177] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00
[ 1813.340434][T26177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1813.353166][T26177] usb 3-1: config 0 descriptor??
[ 1813.369615][T10150] Bluetooth: hci0: command 0x1009 tx timeout
[ 1813.379679][T28481] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[ 1813.386675][T28481] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[ 1813.658334][T28481] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1813.669195][T28481] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[ 1813.679181][T28481] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1813.697819][T26177] usb 3-1: USB disconnect, device number 9
[ 1814.657023][T28515] EXT4-fs (loop9): Ignoring removed orlov option
[ 1814.910620][T28515] EXT4-fs (loop9): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1815.143509][T28525] EXT4-fs (loop1): Ignoring removed orlov option
[ 1815.511513][T28525] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1815.649257][T28531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9140'.
[ 1816.511632][T28531] EXT4-fs (loop7): quotafile must be on filesystem root
[ 1816.938084][T26177] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1817.185623][T28531] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1817.192529][T28531] EXT4-fs (loop7): Ignoring removed oldalloc option
[ 1817.201172][T28531] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue
[ 1817.216170][T26177] usb 3-1: Using ep0 maxpacket: 32
[ 1817.387000][T26177] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1817.400007][T26177] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[ 1817.409094][T26177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1817.417736][T26177] usb 3-1: config 0 descriptor??
[ 1817.611409][T26174] usb 10-1: new full-speed USB device number 14 using dummy_hcd
[ 1817.901289][T28556] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9148'.
[ 1817.933095][T26177] zeroplus 0003:0C12:0030.000C: unknown main item tag 0x3
[ 1817.940392][T26177] zeroplus 0003:0C12:0030.000C: ignoring exceeding usage max
[ 1817.950443][T26177] zeroplus 0003:0C12:0030.000C: hidraw0: USB HID v0.81 Device [HID 0c12:0030] on usb-dummy_hcd.2-1/input0
[ 1817.961974][T26177] zeroplus 0003:0C12:0030.000C: no inputs found
[ 1817.996143][T26174] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1818.040913][T26174] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1818.053350][T28560] EXT4-fs (loop8): Ignoring removed orlov option
[ 1818.057151][T26174] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1818.074194][T26174] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1818.083292][T26174] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1818.092600][T26174] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1818.101450][T26174] usb 10-1: config 0 descriptor??
[ 1818.215092][T28560] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1818.266601][T28566] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1818.273668][T28566] EXT4-fs (loop7): Ignoring removed orlov option
[ 1818.285884][T28566] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1818.412088][T28566] EXT4-fs (loop7): 1 truncate cleaned up
[ 1818.426020][T28566] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,
[ 1818.531157][T28571] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869)
[ 1818.551775][T28571] EXT4-fs (loop1): corrupt root inode, run e2fsck
[ 1818.558242][T28571] EXT4-fs (loop1): mount failed
[ 1818.710869][T28554] udc-core: couldn't find an available UDC or it's busy
[ 1818.720455][T28554] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1818.734496][T28554] udc-core: couldn't find an available UDC or it's busy
[ 1819.551766][T28519] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2.
[ 1819.575466][T28554] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1819.744312][   T20] usb 3-1: USB disconnect, device number 10
[ 1819.850541][T28554] udc-core: couldn't find an available UDC or it's busy
[ 1819.885032][T28554] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1819.910664][  T284] usb 10-1: USB disconnect, device number 14
[ 1820.019063][T28590] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1820.030641][T28590] EXT4-fs error (device loop2): __ext4_iget:5034: inode #11: block 2: comm syz.2.9156: invalid block
[ 1820.042082][T28590] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.9156: couldn't read orphan inode 11 (err -117)
[ 1820.054786][T28590] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[ 1820.176019][T26177] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1820.226946][T28597] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #2: block 13: comm syz.2.9156: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1821.322496][T28608] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9160'.
[ 1821.789339][T28620] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1821.908401][T28618] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 89
[ 1821.941400][T28618] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89
[ 1821.999813][T28623] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1822.019396][T28618] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1822.037389][T28623] EXT4-fs error (device loop9): __ext4_iget:5034: inode #11: block 2: comm syz.9.9165: invalid block
[ 1822.049174][T28618] attempt to access beyond end of device
[ 1822.049174][T28618] loop1: rw=524288, want=34359738368, limit=16
[ 1822.064272][T28623] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.9165: couldn't read orphan inode 11 (err -117)
[ 1822.077825][T28618] attempt to access beyond end of device
[ 1822.077825][T28618] loop1: rw=524288, want=136, limit=16
[ 1822.090673][T28623] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[ 1822.100878][T28618] attempt to access beyond end of device
[ 1822.100878][T28618] loop1: rw=524288, want=88, limit=16
[ 1822.195909][T28622] EXT4-fs error (device loop9): ext4_find_dest_de:2079: inode #2: block 13: comm syz.9.9165: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1822.430748][T26177] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1822.443976][T26177] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1822.455301][T26177] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1822.468486][T26177] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1822.477582][T26177] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1822.486511][T26177] usb 9-1: config 0 descriptor??
[ 1822.505573][T28587] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[ 1822.915246][T28637] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1822.922112][T28637] EXT4-fs (loop9): Ignoring removed orlov option
[ 1822.928500][T28637] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1822.966518][T28637] EXT4-fs (loop9): 1 truncate cleaned up
[ 1822.972238][T28637] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,
[ 1823.647623][T26177] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[ 1823.657890][T26177] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1823.671754][T26177] usb 9-1: USB disconnect, device number 9
[ 1823.692084][T28640] fido_id[28640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1823.714455][T28642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9171'.
[ 1823.801356][T28645] kvm: pic: non byte write
[ 1823.809583][T26174] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1824.623794][T28658] EXT4-fs (loop8): Ignoring removed orlov option
[ 1824.735287][T28658] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1825.693290][T28670] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1825.724367][T28670] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[ 1825.724367][T28670] 
[ 1826.230634][T28670] exFAT-fs (loop2): Filesystem has been set read-only
[ 1826.301607][T28670] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560612053 (7121224106 ns) > initial count (2096900638 ns). Using initial count to start timer.
[ 1826.312198][T28680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9183'.
[ 1826.325048][T28684] netlink: 76 bytes leftover after parsing attributes in process `syz.9.9184'.
[ 1826.341269][T28670] kvm: pic: non byte write
[ 1826.373963][T26174] usb 2-1: device descriptor read/all, error -71
[ 1826.389946][T28681] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[ 1826.400670][T28681] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 1826.410812][T28681] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 1826.423682][T28681] EXT4-fs (loop1): revision level too high, forcing read-only mode
[ 1826.431902][T28681] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[ 1826.439978][T28681] EXT4-fs (loop1): failed to initialize system zone (-117)
[ 1826.447240][T28681] EXT4-fs (loop1): mount failed
[ 1835.343091][T28710] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1835.382344][T22743] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1835.431858][T28722] device syzkaller0 entered promiscuous mode
[ 1835.438860][T28724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9195'.
[ 1835.618111][T28734] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1835.630827][T28734] EXT4-fs error (device loop1): __ext4_iget:5034: inode #11: block 2: comm syz.1.9200: invalid block
[ 1835.642110][T28734] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.9200: couldn't read orphan inode 11 (err -117)
[ 1835.654873][T28734] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[ 1836.398076][T28739] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869)
[ 1836.456655][T28739] EXT4-fs (loop9): corrupt root inode, run e2fsck
[ 1836.463530][T28739] EXT4-fs (loop9): mount failed
[ 1836.469787][T28734] EXT4-fs error (device loop1): ext4_find_dest_de:2079: inode #2: block 13: comm syz.1.9200: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1836.501120][T28741] overlayfs: failed to resolve './bus': -2
[ 1836.912673][T28761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9207'.
[ 1837.183859][T28763] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1837.184411][T28765] EXT4-fs (loop1): Ignoring removed orlov option
[ 1837.225038][T28765] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1838.715846][T28780] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1838.778064][T28786] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[ 1838.792299][T28786] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 1838.802822][T28786] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 1838.813657][T28791] EXT4-fs (loop8): Ignoring removed orlov option
[ 1838.824280][T28786] EXT4-fs (loop7): revision level too high, forcing read-only mode
[ 1838.832231][T28786] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[ 1838.855311][T28786] EXT4-fs (loop7): failed to initialize system zone (-117)
[ 1838.862676][T28786] EXT4-fs (loop7): mount failed
[ 1838.872897][T28791] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1838.896949][T28786] input: syz1 as /devices/virtual/input/input9
[ 1838.912545][   T24] audit: type=1400 audit(1834.455:43750): avc:  denied  { read } for  pid=79 comm="acpid" name="event3" dev="devtmpfs" ino=1127 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1838.944564][   T24] audit: type=1400 audit(1834.455:43751): avc:  denied  { open } for  pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1127 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1838.968294][   T24] audit: type=1400 audit(1834.455:43752): avc:  denied  { ioctl } for  pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1127 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1839.028634][T28803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9219'.
[ 1839.113768][T28811] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1839.202805][T28813] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1839.251302][T28818] EXT4-fs (loop1): Ignoring removed orlov option
[ 1839.262864][T28818] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1840.563454][T28842] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9230'.
[ 1841.094090][T28850] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1841.534576][T28853] device syzkaller0 entered promiscuous mode
[ 1841.593981][T28856] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1841.606569][T18625] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[ 1841.631008][T28859] EXT4-fs (loop1): Ignoring removed orlov option
[ 1841.647602][T28859] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1841.785152][T28862] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1841.795477][T28862] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[ 1841.805511][T28862] EXT4-fs error (device loop8): ext4_acquire_dquot:6230: comm syz.8.9236: Failed to acquire dquot type 1
[ 1841.817215][T28862] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1841.827461][T28862] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[ 1841.837679][T28862] EXT4-fs error (device loop8): ext4_acquire_dquot:6230: comm syz.8.9236: Failed to acquire dquot type 1
[ 1841.849547][T28862] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.9236: bg 0: block 248: padding at end of block bitmap is not set
[ 1841.864582][T28862] EXT4-fs error (device loop8) in ext4_mb_clear_bb:5650: Corrupt filesystem
[ 1841.873751][T28862] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1841.884461][T28862] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[ 1841.894726][T28862] EXT4-fs error (device loop8): ext4_acquire_dquot:6230: comm syz.8.9236: Failed to acquire dquot type 1
[ 1841.906335][T28862] EXT4-fs (loop8): 1 orphan inode deleted
[ 1841.912153][T28862] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue
[ 1842.007918][T18625] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1842.016455][T18625] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1842.019988][T28873] EXT4-fs (loop8): Ignoring removed orlov option
[ 1842.025627][T18625] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1842.041713][T18625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1842.050979][T18625] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1842.060155][T18625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1842.068986][T18625] usb 3-1: config 0 descriptor??
[ 1842.075265][T28873] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1843.020417][T28882] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9241'.
[ 1843.051423][T28831] udc-core: couldn't find an available UDC or it's busy
[ 1843.061415][T28831] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1843.075864][T28884] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1843.086724][T28831] udc-core: couldn't find an available UDC or it's busy
[ 1843.093852][T28831] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1843.103680][T28884] EXT4-fs error (device loop9): __ext4_iget:5034: inode #11: block 2: comm syz.9.9242: invalid block
[ 1843.114824][T28884] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.9242: couldn't read orphan inode 11 (err -117)
[ 1843.127098][T28884] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[ 1843.182269][T28890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9243'.
[ 1843.316372][T28831] udc-core: couldn't find an available UDC or it's busy
[ 1843.323413][T28831] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1843.337913][T28890] EXT4-fs (loop8): quotafile must be on filesystem root
[ 1843.340155][T28892] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1843.373921][T28884] EXT4-fs error (device loop9): ext4_find_dest_de:2079: inode #2: block 13: comm syz.9.9242: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1843.394211][T28892] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[ 1843.415438][T28892] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1843.493857][T28892] fuse: Unknown parameter 'group�6'
[ 1843.515307][T28898] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1843.566139][T28890] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1843.573188][T28890] EXT4-fs (loop8): Ignoring removed oldalloc option
[ 1843.598774][T28890] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue
[ 1843.701088][T28905] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9247'.
[ 1843.746113][T28905] EXT4-fs (loop8): quotafile must be on filesystem root
[ 1843.877618][T18625] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1843.910898][T28905] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1843.918153][T28905] EXT4-fs (loop8): Ignoring removed oldalloc option
[ 1843.938658][T28905] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue
[ 1844.076802][T28910] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled
[ 1844.087349][T28910] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 1844.097335][T28910] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 1844.107929][T28910] EXT4-fs (loop8): revision level too high, forcing read-only mode
[ 1844.115962][T28910] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[ 1844.123898][T28910] EXT4-fs (loop8): failed to initialize system zone (-117)
[ 1844.131220][T28910] EXT4-fs (loop8): mount failed
[ 1844.134161][T18625] usb 10-1: Using ep0 maxpacket: 32
[ 1844.262435][T18625] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1844.275571][T18625] usb 10-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[ 1844.284748][T18625] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1844.293457][T18625] usb 10-1: config 0 descriptor??
[ 1844.345792][T28916] device syzkaller0 entered promiscuous mode
[ 1844.455567][T28920] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9252'.
[ 1844.485161][T26172] usb 3-1: USB disconnect, device number 11
[ 1844.493261][T28921] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1844.576233][T28924] EXT4-fs (loop8): Ignoring removed orlov option
[ 1844.594721][T28924] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1844.722527][T28938] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1844.733502][T28938] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[ 1844.749105][T28938] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1844.915838][T28938] fuse: Unknown parameter 'group�6'
[ 1845.475953][T28903] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[ 1845.646620][T28947] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1845.687443][T18625] zeroplus 0003:0C12:0030.000E: unknown main item tag 0x3
[ 1845.695428][T18625] zeroplus 0003:0C12:0030.000E: ignoring exceeding usage max
[ 1845.703803][T28903] udc-core: couldn't find an available UDC or it's busy
[ 1845.712313][T18625] zeroplus 0003:0C12:0030.000E: hidraw0: USB HID v0.81 Device [HID 0c12:0030] on usb-dummy_hcd.9-1/input0
[ 1845.725750][T18625] zeroplus 0003:0C12:0030.000E: no inputs found
[ 1845.734519][T28947] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[ 1845.743504][T28903] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1845.759234][T28947] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1845.787385][T28947] fuse: Unknown parameter 'group�6'
[ 1845.809259][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9260'.
[ 1845.932387][T18625] usb 10-1: USB disconnect, device number 15
[ 1845.941678][T28951] EXT4-fs (loop1): quotafile must be on filesystem root
[ 1846.044795][T28960] device syzkaller0 entered promiscuous mode
[ 1846.129937][T28950] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1846.137075][T28950] EXT4-fs (loop1): Ignoring removed oldalloc option
[ 1846.157941][T28965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9263'.
[ 1846.201856][T28950] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue
[ 1846.314694][T28970] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1846.688523][T28983] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1847.442776][T28991] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1847.557731][T29000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9274'.
[ 1847.628334][T29007] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1847.640334][T29007] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[ 1847.651885][T29007] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1847.720397][T29009] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1847.731423][T18625] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1847.743929][T29009] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[ 1847.754394][T29009] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1847.788240][T29009] fuse: Unknown parameter 'group�6'
[ 1848.057735][T29020] EXT4-fs (loop8): Ignoring removed orlov option
[ 1848.093816][T29020] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1848.130770][T18625] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1848.150791][T18625] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1848.180406][T18625] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1848.215280][T18625] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1848.226860][T18625] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1848.311480][T18625] usb 10-1: config 0 descriptor??
[ 1848.344431][T28980] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1849.491445][T18625] usbhid 10-1:0.0: can't add hid device: -71
[ 1849.498148][T18625] usbhid: probe of 10-1:0.0 failed with error -71
[ 1849.532708][T18625] usb 10-1: USB disconnect, device number 16
[ 1849.639346][T29043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29043 comm=syz.2.9288
[ 1849.789369][T29049] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1849.800339][T29049] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[ 1849.810529][T29049] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1850.953819][T29060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9294'.
[ 1850.998699][T29060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9294'.
[ 1851.037278][T26172] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[ 1851.222126][T29070] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1851.561356][T29070] EXT4-fs error (device loop9): __ext4_iget:5034: inode #11: block 2: comm syz.9.9298: invalid block
[ 1851.849053][T29070] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.9298: couldn't read orphan inode 11 (err -117)
[ 1852.300825][T29070] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[ 1852.355327][T29059] EXT4-fs (loop7): quotafile must be on filesystem root
[ 1852.516906][T29070] EXT4-fs error (device loop9): ext4_find_dest_de:2079: inode #2: block 13: comm syz.9.9298: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1852.536666][T26172] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1852.554511][T29079] EXT4-fs (loop8): Ignoring removed orlov option
[ 1852.565369][T26172] usb 2-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1852.597057][T26172] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1852.604070][T26172] usb 2-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00
[ 1852.615319][T26172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1852.616312][T29079] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1852.632304][T26172] usb 2-1: config 0 descriptor??
[ 1852.661652][T29050] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1852.668889][T29050] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1853.099769][ T2600] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1853.157656][T29050] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1853.222848][T29093] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1853.351986][T29050] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[ 1853.731919][T29050] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1853.809605][  T284] usb 2-1: USB disconnect, device number 12
[ 1853.845292][T29059] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1853.853017][T29059] EXT4-fs (loop7): Ignoring removed oldalloc option
[ 1853.860493][T29059] EXT4-fs: failed to create workqueue
[ 1853.866081][T29059] EXT4-fs (loop7): mount failed
[ 1853.871271][ T2600] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1853.882980][ T2600] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1853.894689][ T2600] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1853.907996][ T2600] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1853.917516][ T2600] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1853.927134][ T2600] usb 10-1: config 0 descriptor??
[ 1853.943962][T29088] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1854.863256][ T2600] usbhid 10-1:0.0: can't add hid device: -71
[ 1854.873016][ T2600] usbhid: probe of 10-1:0.0 failed with error -71
[ 1854.879894][  T284] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1855.343239][ T2600] usb 10-1: USB disconnect, device number 17
[ 1855.371339][T29108] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9308'.
[ 1855.381150][T29108] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9308'.
[ 1855.593680][T29111] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9309'.
[ 1855.607436][T29111] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9309'.
[ 1855.815716][T29117] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9311'.
[ 1855.912728][T29111] EXT4-fs (loop8): quotafile must be on filesystem root
[ 1856.020042][T29119] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1856.053480][T29120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9311'.
[ 1856.076608][T29123] EXT4-fs (loop7): quotafile must be on filesystem root
[ 1856.194664][T29119] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560612053 (7121224106 ns) > initial count (2096900638 ns). Using initial count to start timer.
[ 1856.214526][  T284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1856.235131][  T284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1856.247108][  T284] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1856.264329][T29119] kvm: pic: non byte write
[ 1856.268906][  T284] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1856.279116][  T284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1856.300717][  T284] usb 3-1: config 0 descriptor??
[ 1856.327022][T29104] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1856.469535][T29111] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1856.479917][T29111] EXT4-fs (loop8): Ignoring removed oldalloc option
[ 1856.488917][T29111] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue
[ 1856.621991][T29137] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1856.815574][T29117] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1856.840676][T29117] EXT4-fs (loop7): Ignoring removed oldalloc option
[ 1856.851905][T29117] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue
[ 1856.883031][  T284] usbhid 3-1:0.0: can't add hid device: -71
[ 1856.906342][  T284] usbhid: probe of 3-1:0.0 failed with error -71
[ 1856.920195][  T284] usb 3-1: USB disconnect, device number 12
[ 1856.936562][T29147] EXT4-fs (loop8): Ignoring removed orlov option
[ 1856.969265][T29147] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1857.142238][T29152] EXT4-fs (loop7): Ignoring removed orlov option
[ 1857.459206][T29152] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1858.152817][T29162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9319'.
[ 1858.254824][T29160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9319'.
[ 1858.787337][T18625] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[ 1858.873534][T29181] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1858.925082][T29181] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560612053 (7121224106 ns) > initial count (2096900638 ns). Using initial count to start timer.
[ 1858.954354][T29181] kvm: pic: non byte write
[ 1858.972456][T29186] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1858.999443][T29186] EXT4-fs (loop8): Ignoring removed orlov option
[ 1859.007138][T29186] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1859.020225][T29186] EXT4-fs (loop8): 1 truncate cleaned up
[ 1859.025971][T29186] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,
[ 1859.180146][T18625] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1859.191638][T18625] usb 10-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1859.205010][T29190] EXT4-fs (loop7): Ignoring removed orlov option
[ 1859.290453][T18625] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1859.297199][T18625] usb 10-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00
[ 1859.307570][T29190] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1859.328042][T18625] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1859.336938][T18625] usb 10-1: config 0 descriptor??
[ 1859.372450][T29161] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1859.379452][T29161] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1859.789335][T29161] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1859.877869][T29161] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[ 1860.485238][T29161] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1860.561216][T26172] usb 10-1: USB disconnect, device number 18
[ 1861.528234][T29215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9332'.
[ 1861.547632][T29215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9332'.
[ 1861.669314][T29219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9335'.
[ 1861.698142][    T9] tipc: Left network mode
[ 1861.796769][T29222] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1861.834411][T29228] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled
[ 1861.851774][T29228] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 1861.861652][T29228] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 1861.883330][T29228] EXT4-fs (loop8): revision level too high, forcing read-only mode
[ 1861.891709][T29228] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[ 1861.899583][T29228] EXT4-fs (loop8): failed to initialize system zone (-117)
[ 1861.907075][T29228] EXT4-fs (loop8): mount failed
[ 1861.951884][T29228] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1861.970444][T29228] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[ 1861.980366][T29228] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xa98919ea, utbl_chksum : 0xe619d30d)
[ 1861.993623][T29240] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560612053 (7121224106 ns) > initial count (2096900638 ns). Using initial count to start timer.
[ 1862.006627][T29228] input: syz1 as /devices/virtual/input/input10
[ 1862.013169][  T284] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1862.065552][T29222] kvm: pic: non byte write
[ 1862.108948][   T24] audit: type=1400 audit(1856.166:43753): avc:  denied  { rename } for  pid=29226 comm="syz.8.9337" name="file1" dev="loop8" ino=1048757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1862.260857][    T9] device erspan0 left promiscuous mode
[ 1862.268885][    T9] bridge0: port 1(erspan0) entered disabled state
[ 1862.418046][ T2600] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1862.460773][  T284] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1862.469061][  T284] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1862.478345][  T284] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1862.488860][  T284] usb 3-1: config 220 has no interface number 2
[ 1862.553520][  T284] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1862.688343][  T284] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1862.706481][ T2600] usb 9-1: Using ep0 maxpacket: 16
[ 1862.732113][  T284] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1862.812352][  T284] usb 3-1: config 220 interface 1 has no altsetting 0
[ 1862.834850][ T2600] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1862.845896][ T2600] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1862.855642][ T2600] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1862.862453][ T2600] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1862.871572][ T2600] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1862.880459][ T2600] usb 9-1: config 0 descriptor??
[ 1862.886251][T29300] EXT4-fs (loop9): Ignoring removed orlov option
[ 1862.911051][T29300] EXT4-fs (loop9): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[ 1863.027136][  T284] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1863.036293][  T284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1863.045401][  T284] usb 3-1: Product: syz
[ 1863.049670][  T284] usb 3-1: Manufacturer: syz
[ 1863.054260][  T284] usb 3-1: SerialNumber: syz
[ 1863.582761][ T2600] usbhid 9-1:0.0: can't add hid device: -71
[ 1863.588765][T14624] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[ 1863.596465][ T2600] usbhid: probe of 9-1:0.0 failed with error -71
[ 1863.606632][ T2600] usb 9-1: USB disconnect, device number 11
[ 1863.725781][T29219] netlink: 'syz.2.9335': attribute type 12 has an invalid length.
[ 1863.794831][T29312] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9345'.
[ 1863.804388][T29312] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9345'.
[ 1863.871660][  T284] uvcvideo: Found UVC 7.01 device syz (8086:0b07)
[ 1863.878143][  T284] uvcvideo: No valid video chain found.
[ 1863.884129][  T284] usb 3-1: selecting invalid altsetting 0
[ 1863.968923][  T284] usb 3-1: USB disconnect, device number 13
[ 1864.020914][T14624] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1864.029289][T14624] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1864.038057][T14624] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1864.048172][T14624] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1864.062762][T14624] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1864.072035][T14624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1864.081230][T14624] usb 2-1: config 0 descriptor??
[ 1864.138521][   T20] usb 10-1: new full-speed USB device number 19 using dummy_hcd
[ 1864.167588][T29319] kvm: pic: non byte write
[ 1864.523132][   T20] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1864.534309][   T20] usb 10-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1864.547443][   T20] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1864.554150][   T20] usb 10-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00
[ 1864.563318][   T20] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1864.564649][T29308] udc-core: couldn't find an available UDC or it's busy
[ 1864.574061][   T20] usb 10-1: config 0 descriptor??
[ 1864.583466][T29308] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1864.592612][T29308] udc-core: couldn't find an available UDC or it's busy
[ 1864.599611][T29308] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1864.599718][T29317] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1864.614169][T29317] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1864.823976][T29308] udc-core: couldn't find an available UDC or it's busy
[ 1864.831023][T29308] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1864.840280][T26174] usb 2-1: USB disconnect, device number 13
[ 1864.910460][T29317] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1864.921266][T29317] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[ 1864.931330][T29317] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1864.955062][T18625] usb 10-1: USB disconnect, device number 19